(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) [ 1332.805007] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1332.815053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1332.849695] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1332.863895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1332.883527] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1332.911917] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1332.921504] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1332.932749] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1332.941836] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1332.948145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1332.953666] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1332.971780] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1332.985230] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1332.993711] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1333.003550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1333.004492] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1333.014044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1333.071138] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1333.159730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1333.176068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1333.217864] Bluetooth: hci5 command 0x0409 tx timeout [ 1333.227894] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1333.253743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1333.550312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1333.805824] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1333.843718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 20:32:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) 20:32:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) [ 1333.946087] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1333.995761] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1334.036562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1334.047668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1334.079698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1334.557915] systemd-udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 1334.570573] Bluetooth: hci4 command 0x040f tx timeout [ 1334.591865] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1334.600769] CPU: 1 PID: 4626 Comm: systemd-udevd Not tainted 4.14.232-syzkaller #0 [ 1334.609734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1334.619727] Call Trace: [ 1334.622366] dump_stack+0x1b2/0x281 [ 1334.626098] dump_header+0x178/0x82f [ 1334.630612] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1334.635989] ? ___ratelimit+0x2cd/0x530 [ 1334.639979] oom_kill_process.cold+0x10/0xa40 [ 1334.644593] ? lock_downgrade+0x740/0x740 [ 1334.648840] out_of_memory+0x2dc/0x1190 [ 1334.652837] ? oom_killer_disable+0x1c0/0x1c0 [ 1334.657365] ? mutex_trylock+0x152/0x1a0 [ 1334.661428] __alloc_pages_nodemask+0x23e1/0x2720 [ 1334.666421] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1334.672078] ? trace_hardirqs_on+0x10/0x10 [ 1334.676432] ? __put_seccomp_filter+0x90/0x90 [ 1334.681545] ? kmem_cache_alloc+0x1e5/0x3c0 [ 1334.685957] ? cache_grow_begin+0x3f/0x700 [ 1334.690274] cache_grow_begin+0x91/0x700 [ 1334.694771] fallback_alloc+0x207/0x2c0 [ 1334.698917] kmem_cache_alloc+0x1e5/0x3c0 [ 1334.703060] getname_flags+0xc8/0x550 [ 1334.706868] user_path_at_empty+0x2a/0x50 [ 1334.711305] SyS_readlinkat+0xa8/0x270 [ 1334.715190] ? task_work_run+0xfd/0x190 [ 1334.719262] ? SyS_newfstat+0xd0/0xd0 [ 1334.723459] ? do_syscall_64+0x4c/0x640 [ 1334.727473] ? SyS_newfstat+0xd0/0xd0 [ 1334.731285] do_syscall_64+0x1d5/0x640 [ 1334.735192] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1334.740390] RIP: 0033:0x7f30e7ef20ba [ 1334.744113] RSP: 002b:00007ffcb4cecd68 EFLAGS: 00000206 ORIG_RAX: 000000000000010b [ 1334.752257] RAX: ffffffffffffffda RBX: 000055bb9e153c50 RCX: 00007f30e7ef20ba [ 1334.760218] RDX: 000055bb9e153c50 RSI: 000055bb9e14e7d0 RDI: 00000000ffffff9c [ 1334.767497] RBP: 0000000000000064 R08: 000055bb9d443670 R09: 0000000000000070 [ 1334.774854] R10: 0000000000000063 R11: 0000000000000206 R12: 000055bb9e14e7d0 [ 1334.782122] R13: 00000000ffffff9c R14: 00007ffcb4cecdc0 R15: 0000000000000063 [ 1334.804794] Mem-Info: [ 1334.813581] active_anon:1138281 inactive_anon:229917 isolated_anon:0 [ 1334.813581] active_file:17 inactive_file:15 isolated_file:0 [ 1334.813581] unevictable:19646 dirty:10 writeback:1 unstable:0 [ 1334.813581] slab_reclaimable:15985 slab_unreclaimable:132191 [ 1334.813581] mapped:55573 shmem:27421 pagetables:51513 bounce:0 [ 1334.813581] free:21491 free_pcp:92 free_cma:0 [ 1334.848525] Node 0 active_anon:1656172kB inactive_anon:311984kB active_file:36kB inactive_file:80kB unevictable:30760kB isolated(anon):0kB isolated(file):0kB mapped:146748kB dirty:0kB writeback:8kB shmem:86448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 690176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1334.879990] Node 1 active_anon:2896964kB inactive_anon:607684kB active_file:60kB inactive_file:12kB unevictable:47828kB isolated(anon):0kB isolated(file):0kB mapped:75480kB dirty:0kB writeback:0kB shmem:23236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1334.909105] Node 0 DMA free:11000kB min:204kB low:252kB high:300kB active_anon:4152kB inactive_anon:516kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1334.941975] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1334.947350] Node 0 DMA32 free:27028kB min:36200kB low:45248kB high:54296kB active_anon:1652020kB inactive_anon:311468kB active_file:36kB inactive_file:0kB unevictable:30760kB writepending:0kB present:3129332kB managed:2788128kB mlocked:30760kB kernel_stack:15296kB pagetables:76568kB bounce:0kB free_pcp:288kB local_pcp:8kB free_cma:0kB [ 1334.989335] lowmem_reserve[]: 0 0 0 0 0 [ 1334.993497] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1335.024601] lowmem_reserve[]: 0 0 0 0 0 [ 1335.072224] Node 1 Normal free:51956kB min:53696kB low:67120kB high:80544kB active_anon:2892932kB inactive_anon:607684kB active_file:36kB inactive_file:32kB unevictable:47828kB writepending:0kB present:4194304kB managed:4128256kB mlocked:47828kB kernel_stack:52288kB pagetables:129444kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1335.189690] lowmem_reserve[]: 0 0 0 0 0 [ 1335.193732] Node 0 DMA: 10*4kB (UME) 10*8kB (ME) 4*16kB (UME) 2*32kB (ME) 2*64kB (ME) 1*128kB (E) 3*256kB (MEH) 1*512kB (E) 3*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11000kB [ 1335.224121] Node 0 DMA32: 297*4kB (UME) 778*8kB (UME) 1102*16kB (UME) 274*32kB (UME) 8*64kB (UM) 0*128kB 0*256kB 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 35348kB [ 1335.245719] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1335.256688] Node 1 Normal: 200*4kB (UMEH) 312*8kB (UMEH) 471*16kB (UEH) 1213*32kB (UMEH) 64*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53744kB [ 1335.278912] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1335.293515] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1335.297305] Bluetooth: hci5 command 0x041b tx timeout [ 1335.304737] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1335.324882] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1335.335576] 30505 total pagecache pages [ 1335.346932] 0 pages in swap cache [ 1335.353048] Swap cache stats: add 0, delete 0, find 0/0 [ 1335.365465] Free swap = 0kB [ 1335.372432] Total swap = 0kB [ 1335.376008] 2097051 pages RAM [ 1335.386705] 0 pages HighMem/MovableOnly [ 1335.393193] 363849 pages reserved [ 1335.396890] 0 pages cma reserved [ 1335.411182] Out of memory: Kill process 32058 (syz-executor.2) score 1009 or sacrifice child [ 1335.424660] Killed process 32058 (syz-executor.2) total-vm:93384kB, anon-rss:36772kB, file-rss:35052kB, shmem-rss:0kB 20:32:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:32:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) [ 1336.186012] syz-executor.4 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1336.266820] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1336.287523] CPU: 0 PID: 32132 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1336.295464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1336.304862] Call Trace: [ 1336.307506] dump_stack+0x1b2/0x281 [ 1336.311150] dump_header+0x178/0x82f [ 1336.314917] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1336.320808] ? ___ratelimit+0x2cd/0x530 [ 1336.325516] oom_kill_process.cold+0x10/0xa40 [ 1336.330144] out_of_memory+0xe3e/0x1190 [ 1336.334411] ? oom_killer_disable+0x1c0/0x1c0 [ 1336.339220] ? mutex_trylock+0x152/0x1a0 [ 1336.343307] __alloc_pages_nodemask+0x23e1/0x2720 [ 1336.348434] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1336.353339] ? _raw_spin_unlock_irq+0x24/0x80 [ 1336.357893] ? __lock_acquire+0x5fc/0x3f20 [ 1336.362155] alloc_pages_vma+0xd2/0x6d0 [ 1336.366147] __handle_mm_fault+0x25fa/0x4620 [ 1336.370578] ? lock_downgrade+0x740/0x740 [ 1336.374734] ? vm_insert_page+0x7c0/0x7c0 [ 1336.378891] ? do_raw_spin_unlock+0x164/0x220 [ 1336.383403] ? mark_held_locks+0xa6/0xf0 [ 1336.387477] handle_mm_fault+0x455/0x9c0 [ 1336.391652] __get_user_pages+0x4e9/0x1270 [ 1336.395908] ? follow_page_mask+0x18a0/0x18a0 [ 1336.400426] ? lock_acquire+0x170/0x3f0 [ 1336.404441] populate_vma_page_range+0x17b/0x210 [ 1336.409374] __mm_populate+0x195/0x2c0 [ 1336.413284] ? populate_vma_page_range+0x210/0x210 [ 1336.418341] ? security_capable+0x88/0xb0 [ 1336.422770] SyS_mlockall+0x3ff/0x520 [ 1336.426573] ? SyS_munlock+0xf0/0xf0 [ 1336.430291] do_syscall_64+0x1d5/0x640 [ 1336.434624] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1336.440012] RIP: 0033:0x4665f9 [ 1336.443207] RSP: 002b:00007f3373142188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1336.450952] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1336.458228] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1336.465508] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1336.472796] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1336.480081] R13: 00007ffd8684ae6f R14: 00007f3373142300 R15: 0000000000022000 20:32:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) [ 1336.660254] Bluetooth: hci4 command 0x0419 tx timeout [ 1336.864988] Mem-Info: [ 1336.868735] active_anon:1134636 inactive_anon:220755 isolated_anon:0 [ 1336.868735] active_file:56 inactive_file:35 isolated_file:0 [ 1336.868735] unevictable:29187 dirty:0 writeback:9 unstable:0 [ 1336.868735] slab_reclaimable:16048 slab_unreclaimable:132308 [ 1336.868735] mapped:58370 shmem:27421 pagetables:51481 bounce:0 [ 1336.868735] free:24679 free_pcp:1 free_cma:0 [ 1336.922384] Node 0 active_anon:1651008kB inactive_anon:306860kB active_file:24kB inactive_file:0kB unevictable:33956kB isolated(anon):0kB isolated(file):0kB mapped:147644kB dirty:0kB writeback:4kB shmem:86448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 690176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1336.960604] Node 1 active_anon:2887536kB inactive_anon:576160kB active_file:76kB inactive_file:12kB unevictable:82792kB isolated(anon):0kB isolated(file):0kB mapped:85836kB dirty:0kB writeback:32kB shmem:23236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1337.099639] Node 0 DMA free:11000kB min:204kB low:252kB high:300kB active_anon:4152kB inactive_anon:516kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1337.196335] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1337.205288] Node 0 DMA32 free:36620kB min:36200kB low:45248kB high:54296kB active_anon:1646844kB inactive_anon:308044kB active_file:464kB inactive_file:792kB unevictable:28028kB writepending:0kB present:3129332kB managed:2788128kB mlocked:27956kB kernel_stack:15040kB pagetables:76748kB bounce:0kB free_pcp:836kB local_pcp:224kB free_cma:0kB 20:32:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) [ 1337.367387] Bluetooth: hci5 command 0x040f tx timeout [ 1337.477693] lowmem_reserve[]: 0 0 0 0 0 [ 1337.515764] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1337.565264] EXT4-fs: 2 callbacks suppressed [ 1337.565271] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1337.579761] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1337.711528] lowmem_reserve[]: 0 0 0 0 0 [ 1337.737232] Node 1 Normal free:73192kB min:53696kB low:67120kB high:80544kB active_anon:2887428kB inactive_anon:582712kB active_file:3352kB inactive_file:6944kB unevictable:44520kB writepending:0kB present:4194304kB managed:4128256kB mlocked:44492kB kernel_stack:52096kB pagetables:128948kB bounce:0kB free_pcp:1208kB local_pcp:780kB free_cma:0kB [ 1338.184649] lowmem_reserve[]: 0 0 0 0 0 [ 1338.196896] Node 0 DMA: 10*4kB (UME) 10*8kB (ME) 4*16kB (UME) 2*32kB (ME) 2*64kB (ME) 1*128kB (E) 3*256kB (MEH) 1*512kB (E) 3*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11000kB [ 1338.262538] Node 0 DMA32: 477*4kB (UME) 359*8kB (UME) 916*16kB (UMEH) 279*32kB (UME) 4*64kB (U) 0*128kB 0*256kB 2*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 29644kB [ 1338.325285] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1338.358572] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1338.366523] Node 1 Normal: 200*4kB (UMEH) 425*8kB (UMH) 1062*16kB (UMH) 1417*32kB (UMEH) 98*64kB (UMEH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 72808kB [ 1338.386744] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1338.397588] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1338.404284] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1338.424192] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1338.436180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1338.443360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1338.452210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1338.466910] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1338.485132] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1338.500781] 34249 total pagecache pages [ 1338.512246] 0 pages in swap cache [ 1338.515753] Swap cache stats: add 0, delete 0, find 0/0 [ 1338.524008] Free swap = 0kB [ 1338.527049] Total swap = 0kB [ 1338.533499] 2097051 pages RAM [ 1338.539725] 0 pages HighMem/MovableOnly [ 1338.544685] 363849 pages reserved [ 1338.551835] 0 pages cma reserved [ 1338.555258] Out of memory (oom_kill_allocating_task): Kill process 32132 (syz-executor.4) score 0 or sacrifice child [ 1338.576756] Killed process 32132 (syz-executor.4) total-vm:93384kB, anon-rss:9776kB, file-rss:40216kB, shmem-rss:0kB [ 1338.580040] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1338.602806] oom_reaper: reaped process 32132 (syz-executor.4), now anon-rss:9768kB, file-rss:5396kB, shmem-rss:0kB [ 1338.629023] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1338.636576] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1338.681411] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1338.709416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1338.722320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1338.745552] device veth0_vlan entered promiscuous mode [ 1338.755718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1338.765771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1338.794076] device veth1_vlan entered promiscuous mode [ 1338.813598] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1338.824841] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1338.839192] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1338.850950] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1338.858160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1338.866630] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1338.875109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1338.888293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1338.899129] device veth0_macvtap entered promiscuous mode [ 1338.905600] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1338.928644] device veth1_macvtap entered promiscuous mode [ 1338.934969] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1338.986297] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1339.037313] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1339.062970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1339.092146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.118150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1339.147409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.157426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1339.168103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.178182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1339.189078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.199405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1339.210818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.224385] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1339.232616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1339.243944] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1339.261834] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1339.282405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1339.314764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1339.402625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1339.433815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.445572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1339.447647] Bluetooth: hci5 command 0x0419 tx timeout [ 1339.456111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.474359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1339.485589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.501050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1339.514271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.530986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1339.546521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.563181] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1339.573759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1339.582403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1339.597891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1339.881291] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1339.891616] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1340.050731] syz-executor.5 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1340.066227] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1340.072508] CPU: 0 PID: 32208 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1340.080492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1340.089843] Call Trace: [ 1340.092688] dump_stack+0x1b2/0x281 [ 1340.096370] dump_header+0x178/0x82f [ 1340.100075] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1340.105169] ? ___ratelimit+0x2cd/0x530 [ 1340.109176] oom_kill_process.cold+0x10/0xa40 [ 1340.113873] out_of_memory+0xe3e/0x1190 [ 1340.117858] ? oom_killer_disable+0x1c0/0x1c0 [ 1340.122361] ? mutex_trylock+0x152/0x1a0 [ 1340.126452] __alloc_pages_nodemask+0x23e1/0x2720 [ 1340.131297] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1340.136344] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1340.141253] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1340.146028] ? __lock_acquire+0x5fc/0x3f20 [ 1340.150313] alloc_pages_vma+0xd2/0x6d0 [ 1340.154306] __handle_mm_fault+0x25fa/0x4620 [ 1340.158809] ? lock_downgrade+0x740/0x740 [ 1340.163068] ? vm_insert_page+0x7c0/0x7c0 [ 1340.167217] ? do_raw_spin_unlock+0x164/0x220 [ 1340.171729] ? mark_held_locks+0xa6/0xf0 [ 1340.175794] handle_mm_fault+0x455/0x9c0 [ 1340.179867] __get_user_pages+0x4e9/0x1270 [ 1340.184111] ? follow_page_mask+0x18a0/0x18a0 [ 1340.188609] ? lock_acquire+0x170/0x3f0 [ 1340.192582] populate_vma_page_range+0x17b/0x210 [ 1340.197341] __mm_populate+0x195/0x2c0 [ 1340.201233] ? populate_vma_page_range+0x210/0x210 [ 1340.206147] ? security_capable+0x88/0xb0 [ 1340.210302] SyS_mlockall+0x3ff/0x520 [ 1340.214119] ? SyS_munlock+0xf0/0xf0 [ 1340.217829] do_syscall_64+0x1d5/0x640 [ 1340.221825] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1340.227031] RIP: 0033:0x4665f9 [ 1340.230217] RSP: 002b:00007f31575e4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1340.237929] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1340.245197] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1340.252473] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1340.259860] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1340.267126] R13: 00007ffd3e44ca4f R14: 00007f31575e4300 R15: 0000000000022000 [ 1340.278284] Mem-Info: [ 1340.280734] active_anon:1135288 inactive_anon:229959 isolated_anon:0 [ 1340.280734] active_file:15 inactive_file:93 isolated_file:0 [ 1340.280734] unevictable:18491 dirty:0 writeback:0 unstable:0 [ 1340.280734] slab_reclaimable:16189 slab_unreclaimable:132646 [ 1340.280734] mapped:58137 shmem:27420 pagetables:51471 bounce:0 [ 1340.280734] free:25156 free_pcp:93 free_cma:0 [ 1340.315020] Node 0 active_anon:1650900kB inactive_anon:307656kB active_file:12kB inactive_file:48kB unevictable:30152kB isolated(anon):0kB isolated(file):0kB mapped:147152kB dirty:0kB writeback:0kB shmem:86444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 690176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1340.345527] Node 1 active_anon:2890252kB inactive_anon:612180kB active_file:40kB inactive_file:40kB unevictable:43812kB isolated(anon):0kB isolated(file):0kB mapped:85296kB dirty:0kB writeback:0kB shmem:23236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1340.374293] Node 0 DMA free:11000kB min:204kB low:252kB high:300kB active_anon:4152kB inactive_anon:516kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1340.401570] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1340.409102] Node 0 DMA32 free:35872kB min:36200kB low:45248kB high:54296kB active_anon:1646748kB inactive_anon:307140kB active_file:56kB inactive_file:448kB unevictable:30152kB writepending:0kB present:3129332kB managed:2788128kB mlocked:30152kB kernel_stack:15072kB pagetables:76660kB bounce:0kB free_pcp:616kB local_pcp:120kB free_cma:0kB [ 1340.441336] lowmem_reserve[]: 0 0 0 0 0 [ 1340.445516] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1340.473453] lowmem_reserve[]: 0 0 0 0 0 [ 1340.478083] Node 1 Normal free:53492kB min:53696kB low:67120kB high:80544kB active_anon:2890252kB inactive_anon:612180kB active_file:40kB inactive_file:40kB unevictable:43812kB writepending:0kB present:4194304kB managed:4128256kB mlocked:43812kB kernel_stack:52032kB pagetables:129184kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1340.509312] lowmem_reserve[]: 0 0 0 0 0 [ 1340.514604] Node 0 DMA: 10*4kB (UME) 10*8kB (ME) 4*16kB (UME) 2*32kB (ME) 2*64kB (ME) 1*128kB (E) 3*256kB (MEH) 1*512kB (E) 3*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11000kB [ 1340.531856] Node 0 DMA32: 79*4kB (UE) 996*8kB (UME) 1091*16kB (UME) 281*32kB (UME) 4*64kB (U) 1*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 35884kB [ 1340.548005] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1340.559608] Node 1 Normal: 119*4kB (UMEH) 175*8kB (UEH) 644*16kB (UMEH) 1191*32kB (UMH) 50*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53492kB [ 1340.580700] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1340.591449] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1340.601952] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1340.612836] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1340.623700] 32998 total pagecache pages [ 1340.628767] 0 pages in swap cache [ 1340.637609] Swap cache stats: add 0, delete 0, find 0/0 [ 1340.648938] Free swap = 0kB [ 1340.652120] Total swap = 0kB [ 1340.655142] 2097051 pages RAM [ 1340.658378] 0 pages HighMem/MovableOnly [ 1340.662453] 363849 pages reserved [ 1340.666033] 0 pages cma reserved [ 1340.672161] Out of memory (oom_kill_allocating_task): Kill process 32208 (syz-executor.5) score 0 or sacrifice child [ 1340.683446] Killed process 32210 (syz-executor.5) total-vm:93384kB, anon-rss:28224kB, file-rss:35084kB, shmem-rss:0kB [ 1340.716348] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1340.730303] in:imklog cpuset=/ mems_allowed=0-1 [ 1340.735037] CPU: 1 PID: 31665 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1340.742489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1340.751839] Call Trace: [ 1340.754419] dump_stack+0x1b2/0x281 [ 1340.758057] dump_header+0x178/0x82f [ 1340.761776] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1340.766873] ? ___ratelimit+0x2cd/0x530 [ 1340.770865] oom_kill_process.cold+0x10/0xa40 [ 1340.775380] out_of_memory+0xe3e/0x1190 [ 1340.779366] ? oom_killer_disable+0x1c0/0x1c0 [ 1340.783875] ? mutex_trylock+0x152/0x1a0 [ 1340.787924] __alloc_pages_nodemask+0x23e1/0x2720 [ 1340.792814] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1340.797661] alloc_pages_current+0x155/0x260 [ 1340.802067] filemap_fault+0x11a1/0x1ad0 [ 1340.806127] ext4_filemap_fault+0x84/0xb0 [ 1340.810283] __do_fault+0xfa/0x380 [ 1340.813819] __handle_mm_fault+0x2497/0x4620 [ 1340.818225] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1340.823086] ? vm_insert_page+0x7c0/0x7c0 [ 1340.827233] ? mark_held_locks+0xa6/0xf0 [ 1340.831287] handle_mm_fault+0x455/0x9c0 [ 1340.835473] __do_page_fault+0x549/0xad0 [ 1340.839547] ? spurious_fault+0x640/0x640 [ 1340.843868] ? do_page_fault+0x60/0x500 [ 1340.847944] ? page_fault+0x2f/0x50 [ 1340.851569] page_fault+0x45/0x50 [ 1340.855055] RIP: 0000: (null) [ 1340.859171] RSP: b9b65fe6:00007f86b83720a0 EFLAGS: 7f86b83721d8 [ 1340.860914] Mem-Info: [ 1340.869666] active_anon:1135288 inactive_anon:229959 isolated_anon:0 [ 1340.869666] active_file:17 inactive_file:13 isolated_file:0 [ 1340.869666] unevictable:18719 dirty:0 writeback:0 unstable:0 [ 1340.869666] slab_reclaimable:16189 slab_unreclaimable:132657 [ 1340.869666] mapped:58100 shmem:27420 pagetables:51435 bounce:0 [ 1340.869666] free:25133 free_pcp:0 free_cma:0 [ 1340.908868] Node 0 active_anon:1650900kB inactive_anon:307656kB active_file:8kB inactive_file:52kB unevictable:31064kB isolated(anon):0kB isolated(file):0kB mapped:147104kB dirty:0kB writeback:0kB shmem:86444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 690176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1340.937680] Node 1 active_anon:2890252kB inactive_anon:612180kB active_file:60kB inactive_file:0kB unevictable:43812kB isolated(anon):0kB isolated(file):0kB mapped:85296kB dirty:0kB writeback:0kB shmem:23236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1340.965830] Node 0 DMA free:11000kB min:204kB low:252kB high:300kB active_anon:4152kB inactive_anon:516kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1340.993613] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1340.998745] Node 0 DMA32 free:35652kB min:36200kB low:45248kB high:54296kB active_anon:1646740kB inactive_anon:307140kB active_file:20kB inactive_file:20kB unevictable:31064kB writepending:0kB present:3129332kB managed:2788128kB mlocked:31064kB kernel_stack:15072kB pagetables:76664kB bounce:0kB free_pcp:236kB local_pcp:120kB free_cma:0kB [ 1341.028975] lowmem_reserve[]: 0 0 0 0 0 [ 1341.035770] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1341.061862] lowmem_reserve[]: 0 0 0 0 0 [ 1341.065874] Node 1 Normal free:53624kB min:53696kB low:67120kB high:80544kB active_anon:2890252kB inactive_anon:612128kB active_file:40kB inactive_file:40kB unevictable:43812kB writepending:0kB present:4194304kB managed:4128256kB mlocked:43812kB kernel_stack:52000kB pagetables:129036kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1341.095901] lowmem_reserve[]: 0 0 0 0 0 [ 1341.099947] Node 0 DMA: 10*4kB (UME) 10*8kB (ME) 4*16kB (UME) 2*32kB (ME) 2*64kB (ME) 1*128kB (E) 3*256kB (MEH) 1*512kB (E) 3*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11000kB [ 1341.115564] Node 0 DMA32: 78*4kB (UME) 1003*8kB (UME) 1090*16kB (UME) 280*32kB (UME) 4*64kB (U) 1*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 35888kB [ 1341.132618] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1341.143475] Node 1 Normal: 155*4kB (UMEH) 180*8kB (UEH) 638*16kB (UMEH) 1183*32kB (UMH) 49*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53260kB [ 1341.158388] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1341.167413] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1341.176024] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1341.185185] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1341.193862] 32889 total pagecache pages [ 1341.198241] 0 pages in swap cache [ 1341.201696] Swap cache stats: add 0, delete 0, find 0/0 [ 1341.207079] Free swap = 0kB [ 1341.211445] Total swap = 0kB [ 1341.214482] 2097051 pages RAM [ 1341.217882] 0 pages HighMem/MovableOnly [ 1341.221870] 363849 pages reserved [ 1341.225324] 0 pages cma reserved [ 1341.228926] Out of memory (oom_kill_allocating_task): Kill process 31665 (in:imklog) score 0 or sacrifice child [ 1341.239456] Killed process 31656 (rsyslogd) total-vm:254332kB, anon-rss:776kB, file-rss:0kB, shmem-rss:0kB [ 1341.251278] oom_reaper: reaped process 31656 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1341.265544] syz-executor.5 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1341.279675] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1341.285848] CPU: 0 PID: 32208 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1341.293751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1341.303225] Call Trace: [ 1341.305848] dump_stack+0x1b2/0x281 [ 1341.309489] dump_header+0x178/0x82f [ 1341.313237] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1341.318356] ? ___ratelimit+0x2cd/0x530 [ 1341.322351] oom_kill_process.cold+0x10/0xa40 [ 1341.326898] out_of_memory+0xe3e/0x1190 [ 1341.331249] ? oom_killer_disable+0x1c0/0x1c0 [ 1341.336188] ? mutex_trylock+0x152/0x1a0 [ 1341.340265] __alloc_pages_nodemask+0x23e1/0x2720 [ 1341.345433] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1341.350334] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1341.355078] ? __lock_acquire+0x5fc/0x3f20 [ 1341.359332] alloc_pages_vma+0xd2/0x6d0 [ 1341.363324] __handle_mm_fault+0x25fa/0x4620 [ 1341.367749] ? lock_downgrade+0x740/0x740 [ 1341.371898] ? vm_insert_page+0x7c0/0x7c0 [ 1341.376042] ? do_raw_spin_unlock+0x164/0x220 [ 1341.380542] ? mark_held_locks+0xa6/0xf0 [ 1341.384710] handle_mm_fault+0x455/0x9c0 [ 1341.388774] __get_user_pages+0x4e9/0x1270 [ 1341.393034] ? follow_page_mask+0x18a0/0x18a0 [ 1341.397527] ? lock_acquire+0x170/0x3f0 [ 1341.401506] populate_vma_page_range+0x17b/0x210 [ 1341.406251] __mm_populate+0x195/0x2c0 [ 1341.410129] ? populate_vma_page_range+0x210/0x210 [ 1341.415480] ? security_capable+0x88/0xb0 [ 1341.419643] SyS_mlockall+0x3ff/0x520 [ 1341.423515] ? SyS_munlock+0xf0/0xf0 [ 1341.427236] do_syscall_64+0x1d5/0x640 [ 1341.431138] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1341.436344] RIP: 0033:0x4665f9 [ 1341.439526] RSP: 002b:00007f31575e4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1341.447241] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1341.454533] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1341.461802] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1341.469297] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1341.477057] R13: 00007ffd3e44ca4f R14: 00007f31575e4300 R15: 0000000000022000 [ 1341.493470] Mem-Info: [ 1341.496500] active_anon:1135064 inactive_anon:229946 isolated_anon:0 [ 1341.496500] active_file:23 inactive_file:29 isolated_file:0 [ 1341.496500] unevictable:18843 dirty:0 writeback:0 unstable:0 [ 1341.496500] slab_reclaimable:16189 slab_unreclaimable:132667 [ 1341.496500] mapped:58111 shmem:27420 pagetables:51404 bounce:0 [ 1341.496500] free:25231 free_pcp:0 free_cma:0 [ 1341.531799] Node 0 active_anon:1650016kB inactive_anon:307656kB active_file:88kB inactive_file:260kB unevictable:31064kB isolated(anon):0kB isolated(file):0kB mapped:147120kB dirty:0kB writeback:0kB shmem:86444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 690176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1341.561649] Node 1 active_anon:2890240kB inactive_anon:612128kB active_file:0kB inactive_file:100kB unevictable:44308kB isolated(anon):0kB isolated(file):0kB mapped:85296kB dirty:0kB writeback:0kB shmem:23236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1341.598955] Node 0 DMA free:11000kB min:204kB low:252kB high:300kB active_anon:4152kB inactive_anon:516kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1341.626400] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1341.632545] Node 0 DMA32 free:36516kB min:36200kB low:45248kB high:54296kB active_anon:1645864kB inactive_anon:307140kB active_file:276kB inactive_file:504kB unevictable:31064kB writepending:0kB present:3129332kB managed:2788128kB mlocked:31064kB kernel_stack:15072kB pagetables:76540kB bounce:0kB free_pcp:164kB local_pcp:84kB free_cma:0kB [ 1341.674864] lowmem_reserve[]: 0 0 0 0 0 [ 1341.695526] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1341.722266] lowmem_reserve[]: 0 0 0 0 0 [ 1341.727477] Node 1 Normal free:53704kB min:53696kB low:67120kB high:80544kB active_anon:2890240kB inactive_anon:612128kB active_file:80kB inactive_file:0kB unevictable:44308kB writepending:0kB present:4194304kB managed:4128256kB mlocked:44308kB kernel_stack:51872kB pagetables:129036kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1341.759246] lowmem_reserve[]: 0 0 0 0 0 [ 1341.764008] Node 0 DMA: 10*4kB (UME) 10*8kB (ME) 4*16kB (UME) 2*32kB (ME) 2*64kB (ME) 1*128kB (E) 3*256kB (MEH) 1*512kB (E) 3*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11000kB [ 1341.783335] Node 0 DMA32: 143*4kB (UME) 1011*8kB (UME) 1092*16kB (UME) 282*32kB (UME) 4*64kB (U) 1*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36308kB [ 1341.801753] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1341.833989] Node 1 Normal: 158*4kB (UMEH) 216*8kB (UEH) 638*16kB (UMEH) 1186*32kB (UMH) 50*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53720kB [ 1341.850841] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1341.860314] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1341.873112] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1341.882725] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1341.899817] 32917 total pagecache pages [ 1341.904371] 0 pages in swap cache [ 1341.908802] Swap cache stats: add 0, delete 0, find 0/0 [ 1341.915306] Free swap = 0kB [ 1341.926595] Total swap = 0kB [ 1341.931729] 2097051 pages RAM [ 1341.949471] 0 pages HighMem/MovableOnly [ 1341.954101] 363849 pages reserved [ 1341.958474] 0 pages cma reserved [ 1341.963182] Out of memory (oom_kill_allocating_task): Kill process 32208 (syz-executor.5) score 0 or sacrifice child [ 1341.994883] Killed process 32211 (syz-executor.5) total-vm:93384kB, anon-rss:28224kB, file-rss:35084kB, shmem-rss:0kB [ 1342.035719] oom_reaper: reaped process 32211 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1342.080900] kworker/u4:0 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1342.099077] kworker/u4:0 cpuset=/ mems_allowed=0-1 [ 1342.104094] CPU: 0 PID: 5 Comm: kworker/u4:0 Not tainted 4.14.232-syzkaller #0 [ 1342.111470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1342.120945] Workqueue: events_unbound call_usermodehelper_exec_work [ 1342.127365] Call Trace: [ 1342.129974] dump_stack+0x1b2/0x281 [ 1342.133614] dump_header+0x178/0x82f [ 1342.137474] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1342.142714] ? ___ratelimit+0x2cd/0x530 [ 1342.146700] oom_kill_process.cold+0x10/0xa40 [ 1342.151448] ? lock_downgrade+0x740/0x740 [ 1342.155646] out_of_memory+0x2dc/0x1190 [ 1342.159771] ? oom_killer_disable+0x1c0/0x1c0 [ 1342.164396] ? mutex_trylock+0x152/0x1a0 [ 1342.168466] __alloc_pages_nodemask+0x23e1/0x2720 [ 1342.173327] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1342.178539] ? fs_reclaim_release+0xd0/0x110 [ 1342.182995] ? kmem_cache_alloc_node+0x38b/0x410 [ 1342.187793] copy_process.part.0+0x265/0x71c0 [ 1342.192417] ? __lock_acquire+0x5fc/0x3f20 [ 1342.197243] ? do_raw_spin_unlock+0x164/0x220 [ 1342.201872] ? static_obj+0x50/0x50 [ 1342.205518] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1342.210971] ? __cleanup_sighand+0x40/0x40 [ 1342.215379] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1342.222075] _do_fork+0x184/0xc80 [ 1342.225557] ? fork_idle+0x270/0x270 [ 1342.229861] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1342.235042] ? process_one_work+0x6c4/0x14a0 [ 1342.239476] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1342.247307] kernel_thread+0x2f/0x40 [ 1342.251719] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1342.257091] ? call_usermodehelper+0x80/0x80 [ 1342.261766] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1342.269051] process_one_work+0x793/0x14a0 [ 1342.273902] ? work_busy+0x320/0x320 [ 1342.277612] ? worker_thread+0x158/0xff0 [ 1342.281731] ? _raw_spin_unlock_irq+0x24/0x80 [ 1342.286292] worker_thread+0x5cc/0xff0 [ 1342.290210] ? rescuer_thread+0xc80/0xc80 [ 1342.294380] kthread+0x30d/0x420 [ 1342.297752] ? kthread_create_on_node+0xd0/0xd0 [ 1342.302435] ret_from_fork+0x24/0x30 [ 1342.310508] Mem-Info: [ 1342.313019] active_anon:1135061 inactive_anon:229930 isolated_anon:0 [ 1342.313019] active_file:15 inactive_file:15 isolated_file:0 [ 1342.313019] unevictable:19163 dirty:0 writeback:0 unstable:0 [ 1342.313019] slab_reclaimable:16184 slab_unreclaimable:132586 [ 1342.313019] mapped:58108 shmem:27420 pagetables:51367 bounce:0 [ 1342.313019] free:25111 free_pcp:44 free_cma:0 [ 1342.356291] Node 0 active_anon:1650012kB inactive_anon:307652kB active_file:20kB inactive_file:20kB unevictable:31844kB isolated(anon):0kB isolated(file):0kB mapped:147136kB dirty:0kB writeback:0kB shmem:86444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 690176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1342.395308] Node 1 active_anon:2890232kB inactive_anon:612068kB active_file:40kB inactive_file:40kB unevictable:44808kB isolated(anon):0kB isolated(file):0kB mapped:85296kB dirty:0kB writeback:0kB shmem:23236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1342.427884] Node 0 DMA free:11000kB min:204kB low:252kB high:300kB active_anon:4152kB inactive_anon:516kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1342.455206] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1342.460331] Node 0 DMA32 free:35984kB min:36200kB low:45248kB high:54296kB active_anon:1645860kB inactive_anon:307136kB active_file:20kB inactive_file:20kB unevictable:31844kB writepending:0kB present:3129332kB managed:2788128kB mlocked:31844kB kernel_stack:15072kB pagetables:76540kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 1342.490633] lowmem_reserve[]: 0 0 0 0 0 [ 1342.494637] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1342.520593] lowmem_reserve[]: 0 0 0 0 0 [ 1342.524780] Node 1 Normal free:53336kB min:53696kB low:67120kB high:80544kB active_anon:2890232kB inactive_anon:612068kB active_file:32kB inactive_file:48kB unevictable:44808kB writepending:0kB present:4194304kB managed:4128256kB mlocked:44808kB kernel_stack:51840kB pagetables:128888kB bounce:0kB free_pcp:172kB local_pcp:172kB free_cma:0kB [ 1342.555210] lowmem_reserve[]: 0 0 0 0 0 [ 1342.559287] Node 0 DMA: 10*4kB (UME) 10*8kB (ME) 4*16kB (UME) 2*32kB (ME) 2*64kB (ME) 1*128kB (E) 3*256kB (MEH) 1*512kB (E) 3*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11000kB [ 1342.574900] Node 0 DMA32: 112*4kB (UME) 986*8kB (UME) 1092*16kB (UME) 282*32kB (UME) 4*64kB (U) 1*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 35984kB [ 1342.590482] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1342.601738] Node 1 Normal: 152*4kB (UEH) 219*8kB (UMEH) 634*16kB (UEH) 1180*32kB (UMH) 48*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53336kB [ 1342.616586] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1342.625561] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1342.634376] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1342.643943] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1342.652724] 32889 total pagecache pages [ 1342.656710] 0 pages in swap cache [ 1342.660757] Swap cache stats: add 0, delete 0, find 0/0 [ 1342.667074] Free swap = 0kB [ 1342.670502] Total swap = 0kB [ 1342.673556] 2097051 pages RAM [ 1342.676669] 0 pages HighMem/MovableOnly [ 1342.680701] 363849 pages reserved [ 1342.684254] 0 pages cma reserved [ 1342.687803] Out of memory: Kill process 32207 (syz-executor.5) score 1012 or sacrifice child [ 1342.696771] Killed process 32207 (syz-executor.5) total-vm:93384kB, anon-rss:34312kB, file-rss:56576kB, shmem-rss:0kB [ 1342.734826] oom_reaper: reaped process 32207 (syz-executor.5), now anon-rss:34436kB, file-rss:21756kB, shmem-rss:0kB 20:32:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:32:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:32:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:32:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)) 20:32:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) 20:32:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() socket$inet6(0xa, 0x2, 0x0) [ 1344.129132] systemd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1344.146862] systemd cpuset=/ mems_allowed=0-1 [ 1344.154485] CPU: 1 PID: 1 Comm: systemd Not tainted 4.14.232-syzkaller #0 [ 1344.161440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1344.170846] Call Trace: [ 1344.173447] dump_stack+0x1b2/0x281 [ 1344.177090] dump_header+0x178/0x82f [ 1344.180810] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1344.185946] ? ___ratelimit+0x2cd/0x530 [ 1344.189931] oom_kill_process.cold+0x10/0xa40 [ 1344.194447] ? lock_downgrade+0x740/0x740 [ 1344.198607] out_of_memory+0x2dc/0x1190 [ 1344.202584] ? oom_killer_disable+0x1c0/0x1c0 [ 1344.207076] ? mutex_trylock+0x152/0x1a0 [ 1344.211130] __alloc_pages_nodemask+0x23e1/0x2720 [ 1344.215985] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1344.220839] ? trace_hardirqs_on+0x10/0x10 [ 1344.225128] ? kmem_cache_alloc+0x1e5/0x3c0 [ 1344.229475] ? cache_grow_begin+0x3f/0x700 [ 1344.233824] cache_grow_begin+0x91/0x700 [ 1344.237913] fallback_alloc+0x207/0x2c0 [ 1344.241921] kmem_cache_alloc+0x1e5/0x3c0 [ 1344.246087] getname_flags+0xc8/0x550 [ 1344.249922] do_sys_open+0x1ce/0x410 [ 1344.253654] ? filp_open+0x60/0x60 [ 1344.257896] ? __do_page_fault+0x159/0xad0 [ 1344.262135] ? do_syscall_64+0x4c/0x640 [ 1344.266107] ? do_sys_open+0x410/0x410 [ 1344.269999] do_syscall_64+0x1d5/0x640 [ 1344.273898] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1344.279084] RIP: 0033:0x7f46c490670d [ 1344.282796] RSP: 002b:00007fff30a40860 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1344.291049] RAX: ffffffffffffffda RBX: 000056163b5c4770 RCX: 00007f46c490670d [ 1344.298333] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 000056163b5b7990 [ 1344.305601] RBP: 0000000000000008 R08: 0000000000000008 R09: 0000000000000001 [ 1344.313077] R10: 0000000000080000 R11: 0000000000000293 R12: 00007f46c60407b4 [ 1344.320644] R13: 0000000000000001 R14: 000056163b56e320 R15: 000056163b549e40 [ 1344.340899] Mem-Info: [ 1344.343486] active_anon:1139864 inactive_anon:229926 isolated_anon:0 [ 1344.343486] active_file:33 inactive_file:30 isolated_file:0 [ 1344.343486] unevictable:16781 dirty:5 writeback:0 unstable:0 [ 1344.343486] slab_reclaimable:16155 slab_unreclaimable:132103 [ 1344.343486] mapped:58123 shmem:27420 pagetables:51544 bounce:0 [ 1344.343486] free:22892 free_pcp:34 free_cma:0 [ 1344.382911] Node 0 active_anon:1652324kB inactive_anon:307640kB active_file:20kB inactive_file:24kB unevictable:31064kB isolated(anon):0kB isolated(file):0kB mapped:152604kB dirty:8kB writeback:0kB shmem:86444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 690176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1344.416691] Node 1 active_anon:2898732kB inactive_anon:612064kB active_file:112kB inactive_file:96kB unevictable:36660kB isolated(anon):0kB isolated(file):0kB mapped:79888kB dirty:12kB writeback:0kB shmem:23236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1344.447190] Node 0 DMA free:11000kB min:204kB low:252kB high:300kB active_anon:4152kB inactive_anon:516kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1344.514830] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1344.537427] Node 0 DMA32 free:34260kB min:36200kB low:45248kB high:54296kB active_anon:1648416kB inactive_anon:307124kB active_file:20kB inactive_file:24kB unevictable:31064kB writepending:8kB present:3129332kB managed:2788128kB mlocked:31064kB kernel_stack:15072kB pagetables:76664kB bounce:0kB free_pcp:24kB local_pcp:24kB free_cma:0kB [ 1344.576951] lowmem_reserve[]: 0 0 0 0 0 [ 1344.581106] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1344.616228] lowmem_reserve[]: 0 0 0 0 0 [ 1344.620623] Node 1 Normal free:53232kB min:53696kB low:67120kB high:80544kB active_anon:2891152kB inactive_anon:612064kB active_file:0kB inactive_file:348kB unevictable:45068kB writepending:0kB present:4194304kB managed:4128256kB mlocked:45068kB kernel_stack:52192kB pagetables:129488kB bounce:0kB free_pcp:220kB local_pcp:0kB free_cma:0kB [ 1344.659212] lowmem_reserve[]: 0 0 0 0 0 [ 1344.663245] Node 0 DMA: 10*4kB (UME) 10*8kB (ME) 4*16kB (UME) 2*32kB (ME) 2*64kB (ME) 1*128kB (E) 3*256kB (MEH) 1*512kB (E) 3*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11000kB [ 1344.685948] Node 0 DMA32: 142*4kB (UME) 650*8kB (UME) 1156*16kB (UME) 293*32kB (UME) 1*64kB (M) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 34600kB [ 1344.709102] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1344.725541] Node 1 Normal: 134*4kB (UMEH) 289*8kB (UMEH) 708*16kB (UMEH) 1161*32kB (UMH) 39*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53824kB [ 1344.746981] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1344.755910] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1344.771815] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1344.783376] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1344.795889] 32890 total pagecache pages [ 1344.802511] 0 pages in swap cache [ 1344.806007] Swap cache stats: add 0, delete 0, find 0/0 [ 1344.815935] Free swap = 0kB [ 1344.821319] Total swap = 0kB [ 1344.824394] 2097051 pages RAM [ 1344.832459] 0 pages HighMem/MovableOnly [ 1344.836476] 363849 pages reserved [ 1344.841995] 0 pages cma reserved [ 1344.845401] Out of memory: Kill process 32182 (syz-executor.3) score 1009 or sacrifice child [ 1344.860350] Killed process 32182 (syz-executor.3) total-vm:93384kB, anon-rss:36772kB, file-rss:35052kB, shmem-rss:0kB [ 1344.924285] syz-executor.5 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1344.945985] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1344.951217] CPU: 1 PID: 32222 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1344.959365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1344.968812] Call Trace: [ 1344.971399] dump_stack+0x1b2/0x281 [ 1344.975029] dump_header+0x178/0x82f [ 1344.978800] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1344.983913] ? ___ratelimit+0x2cd/0x530 [ 1344.987920] oom_kill_process.cold+0x10/0xa40 [ 1344.992529] out_of_memory+0xe3e/0x1190 [ 1344.996518] ? oom_killer_disable+0x1c0/0x1c0 [ 1345.001015] ? mutex_trylock+0x152/0x1a0 [ 1345.005077] __alloc_pages_nodemask+0x23e1/0x2720 [ 1345.009944] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1345.014987] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1345.019758] ? __lock_acquire+0x5fc/0x3f20 [ 1345.024020] alloc_pages_vma+0xd2/0x6d0 [ 1345.028004] __handle_mm_fault+0x25fa/0x4620 [ 1345.033068] ? lock_downgrade+0x740/0x740 [ 1345.037369] ? vm_insert_page+0x7c0/0x7c0 [ 1345.041526] ? do_raw_spin_unlock+0x164/0x220 [ 1345.046033] ? mark_held_locks+0xa6/0xf0 [ 1345.050093] ? sync_mm_rss+0xf2/0x160 [ 1345.053894] handle_mm_fault+0x455/0x9c0 [ 1345.058082] __get_user_pages+0x4e9/0x1270 [ 1345.062356] ? follow_page_mask+0x18a0/0x18a0 [ 1345.066897] ? lock_acquire+0x170/0x3f0 [ 1345.071084] populate_vma_page_range+0x17b/0x210 [ 1345.075841] __mm_populate+0x195/0x2c0 [ 1345.079821] ? populate_vma_page_range+0x210/0x210 [ 1345.084755] ? security_capable+0x88/0xb0 [ 1345.088928] SyS_mlockall+0x3ff/0x520 [ 1345.092783] ? SyS_munlock+0xf0/0xf0 [ 1345.096520] do_syscall_64+0x1d5/0x640 [ 1345.100443] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1345.105634] RIP: 0033:0x4665f9 [ 1345.108821] RSP: 002b:00007f31575e4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1345.117486] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1345.125201] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1345.133891] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1345.141176] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1345.148452] R13: 00007ffd3e44ca4f R14: 00007f31575e4300 R15: 0000000000022000 [ 1345.167825] Mem-Info: [ 1345.170317] active_anon:1135744 inactive_anon:229915 isolated_anon:0 [ 1345.170317] active_file:9 inactive_file:10 isolated_file:0 [ 1345.170317] unevictable:19068 dirty:0 writeback:0 unstable:0 [ 1345.170317] slab_reclaimable:16155 slab_unreclaimable:132118 [ 1345.170317] mapped:58121 shmem:27420 pagetables:51477 bounce:0 [ 1345.170317] free:24740 free_pcp:142 free_cma:0 [ 1345.212180] Node 0 active_anon:1652296kB inactive_anon:307640kB active_file:16kB inactive_file:16kB unevictable:31064kB isolated(anon):0kB isolated(file):0kB mapped:152604kB dirty:0kB writeback:0kB shmem:86444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 690176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1345.246386] Node 1 active_anon:2890680kB inactive_anon:612020kB active_file:0kB inactive_file:48kB unevictable:45260kB isolated(anon):0kB isolated(file):0kB mapped:79880kB dirty:0kB writeback:0kB shmem:23236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1345.280181] Node 0 DMA free:11000kB min:204kB low:252kB high:300kB active_anon:4152kB inactive_anon:516kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1345.310296] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1345.315383] Node 0 DMA32 free:34352kB min:36200kB low:45248kB high:54296kB active_anon:1648144kB inactive_anon:307124kB active_file:24kB inactive_file:8kB unevictable:31064kB writepending:0kB present:3129332kB managed:2788128kB mlocked:31064kB kernel_stack:15072kB pagetables:76652kB bounce:0kB free_pcp:224kB local_pcp:116kB free_cma:0kB [ 1345.346226] lowmem_reserve[]: 0 0 0 0 0 [ 1345.363573] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1345.398082] lowmem_reserve[]: 0 0 0 0 0 [ 1345.402127] Node 1 Normal free:53588kB min:53696kB low:67120kB high:80544kB active_anon:2890680kB inactive_anon:612020kB active_file:12kB inactive_file:32kB unevictable:45308kB writepending:0kB present:4194304kB managed:4128256kB mlocked:45308kB kernel_stack:52096kB pagetables:129216kB bounce:0kB free_pcp:368kB local_pcp:76kB free_cma:0kB [ 1345.435186] lowmem_reserve[]: 0 0 0 0 0 [ 1345.455238] Node 0 DMA: 10*4kB (UME) 10*8kB (ME) 4*16kB (UME) 2*32kB (ME) 2*64kB (ME) 1*128kB (E) 3*256kB (MEH) 1*512kB (E) 3*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11000kB [ 1345.485953] Node 0 DMA32: 140*4kB (UME) 642*8kB (UME) 1153*16kB (UME) 289*32kB (ME) 1*64kB (M) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 34352kB [ 1345.516237] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1345.546255] Node 1 Normal: 127*4kB (UEH) 295*8kB (UEH) 702*16kB (UMEH) 1158*32kB (UMH) 38*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53588kB [ 1345.576561] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1345.601153] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1345.624133] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1345.643669] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1345.666323] 32883 total pagecache pages [ 1345.672501] 0 pages in swap cache [ 1345.676271] Swap cache stats: add 0, delete 0, find 0/0 [ 1345.700841] Free swap = 0kB [ 1345.704004] Total swap = 0kB [ 1345.707165] 2097051 pages RAM [ 1345.717079] 0 pages HighMem/MovableOnly [ 1345.728735] 363849 pages reserved [ 1345.732316] 0 pages cma reserved [ 1345.736380] Out of memory (oom_kill_allocating_task): Kill process 32222 (syz-executor.5) score 0 or sacrifice child [ 1345.762047] Killed process 32217 (syz-executor.5) total-vm:93252kB, anon-rss:6636kB, file-rss:39264kB, shmem-rss:0kB [ 1345.795666] oom_reaper: reaped process 32217 (syz-executor.5), now anon-rss:6680kB, file-rss:5376kB, shmem-rss:0kB [ 1345.887368] systemd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1345.927762] systemd cpuset=/ mems_allowed=0-1 [ 1345.937351] CPU: 1 PID: 1 Comm: systemd Not tainted 4.14.232-syzkaller #0 [ 1345.945298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1345.954916] Call Trace: [ 1345.957600] dump_stack+0x1b2/0x281 [ 1345.961268] dump_header+0x178/0x82f [ 1345.965426] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1345.970917] ? ___ratelimit+0x2cd/0x530 [ 1345.975957] oom_kill_process.cold+0x10/0xa40 [ 1345.981161] ? lock_downgrade+0x740/0x740 [ 1345.985501] out_of_memory+0x2dc/0x1190 [ 1345.989491] ? oom_killer_disable+0x1c0/0x1c0 [ 1345.994505] ? mutex_trylock+0x152/0x1a0 [ 1345.998584] __alloc_pages_nodemask+0x23e1/0x2720 [ 1346.003479] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1346.008337] ? trace_hardirqs_on+0x10/0x10 [ 1346.012703] ? kmem_cache_alloc+0x1e5/0x3c0 [ 1346.018322] ? cache_grow_begin+0x3f/0x700 [ 1346.024162] cache_grow_begin+0x91/0x700 [ 1346.029979] fallback_alloc+0x207/0x2c0 [ 1346.034823] kmem_cache_alloc+0x1e5/0x3c0 [ 1346.039098] getname_flags+0xc8/0x550 [ 1346.043259] do_sys_open+0x1ce/0x410 [ 1346.047070] ? filp_open+0x60/0x60 [ 1346.050616] ? __do_page_fault+0x159/0xad0 [ 1346.054875] ? do_syscall_64+0x4c/0x640 [ 1346.058878] ? do_sys_open+0x410/0x410 [ 1346.063035] do_syscall_64+0x1d5/0x640 [ 1346.067231] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1346.072885] RIP: 0033:0x7f46c490670d [ 1346.076853] RSP: 002b:00007fff30a40860 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1346.085897] RAX: ffffffffffffffda RBX: 000056163b5c4770 RCX: 00007f46c490670d [ 1346.093443] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 000056163b5b7990 [ 1346.101909] RBP: 0000000000000008 R08: 0000000000000008 R09: 0000000000000001 [ 1346.110377] R10: 0000000000080000 R11: 0000000000000293 R12: 00007f46c60407b4 [ 1346.118360] R13: 0000000000000001 R14: 000056163b56e320 R15: 000056163b549e40 [ 1346.127760] Mem-Info: [ 1346.130234] active_anon:1135771 inactive_anon:229916 isolated_anon:0 [ 1346.130234] active_file:12 inactive_file:12 isolated_file:0 [ 1346.130234] unevictable:18900 dirty:0 writeback:0 unstable:0 [ 1346.130234] slab_reclaimable:16155 slab_unreclaimable:132138 [ 1346.130234] mapped:57096 shmem:27420 pagetables:51450 bounce:0 [ 1346.130234] free:25006 free_pcp:38 free_cma:0 [ 1346.164564] Node 0 active_anon:1652288kB inactive_anon:307644kB active_file:8kB inactive_file:24kB unevictable:29532kB isolated(anon):0kB isolated(file):0kB mapped:151068kB dirty:0kB writeback:0kB shmem:86444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 690176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1346.193807] Node 1 active_anon:2890796kB inactive_anon:612020kB active_file:32kB inactive_file:32kB unevictable:46068kB isolated(anon):0kB isolated(file):0kB mapped:77316kB dirty:0kB writeback:0kB shmem:23236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1346.221929] Node 0 DMA free:11000kB min:204kB low:252kB high:300kB active_anon:4152kB inactive_anon:516kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1346.250756] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1346.256260] Node 0 DMA32 free:35968kB min:36200kB low:45248kB high:54296kB active_anon:1648136kB inactive_anon:307128kB active_file:8kB inactive_file:24kB unevictable:29532kB writepending:0kB present:3129332kB managed:2788128kB mlocked:29532kB kernel_stack:15072kB pagetables:76652kB bounce:0kB free_pcp:112kB local_pcp:0kB free_cma:0kB [ 1346.297055] lowmem_reserve[]: 0 0 0 0 0 [ 1346.301179] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1346.340656] lowmem_reserve[]: 0 0 0 0 0 [ 1346.345240] Node 1 Normal free:53180kB min:53696kB low:67120kB high:80544kB active_anon:2890796kB inactive_anon:612020kB active_file:40kB inactive_file:24kB unevictable:46068kB writepending:0kB present:4194304kB managed:4128256kB mlocked:46068kB kernel_stack:51936kB pagetables:129108kB bounce:0kB free_pcp:152kB local_pcp:116kB free_cma:0kB [ 1346.384941] lowmem_reserve[]: 0 0 0 0 0 [ 1346.389744] Node 0 DMA: 10*4kB (UME) 10*8kB (ME) 4*16kB (UME) 2*32kB (ME) 2*64kB (ME) 1*128kB (E) 3*256kB (MEH) 1*512kB (E) 3*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11000kB [ 1346.412305] Node 0 DMA32: 343*4kB (ME) 732*8kB (ME) 1153*16kB (UME) 290*32kB (UME) 2*64kB (UM) 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 35852kB [ 1346.432904] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1346.444468] Node 1 Normal: 164*4kB (UMEH) 300*8kB (UMEH) 707*16kB (UMEH) 1144*32kB (UMH) 33*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53088kB [ 1346.463754] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1346.473046] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1346.486436] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1346.497225] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1346.511182] 31863 total pagecache pages [ 1346.515297] 0 pages in swap cache [ 1346.518832] Swap cache stats: add 0, delete 0, find 0/0 [ 1346.524195] Free swap = 0kB [ 1346.527211] Total swap = 0kB [ 1346.533998] 2097051 pages RAM [ 1346.537122] 0 pages HighMem/MovableOnly [ 1346.541180] 363849 pages reserved [ 1346.544627] 0 pages cma reserved [ 1346.553009] Out of memory: Kill process 32184 (syz-executor.3) score 1009 or sacrifice child [ 1346.561909] Killed process 32184 (syz-executor.3) total-vm:93516kB, anon-rss:36776kB, file-rss:35052kB, shmem-rss:0kB 20:32:58 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)) 20:32:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:32:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() socket$inet6(0xa, 0x2, 0x0) 20:32:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:32:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) [ 1347.881790] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1347.898986] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1347.904003] CPU: 0 PID: 7961 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1347.912601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1347.922310] Call Trace: [ 1347.925000] dump_stack+0x1b2/0x281 [ 1347.928924] dump_header+0x178/0x82f [ 1347.932648] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1347.937879] ? ___ratelimit+0x2cd/0x530 [ 1347.942215] oom_kill_process.cold+0x10/0xa40 [ 1347.946761] out_of_memory+0xe3e/0x1190 [ 1347.950748] ? oom_killer_disable+0x1c0/0x1c0 [ 1347.955324] ? mutex_trylock+0x152/0x1a0 [ 1347.959402] __alloc_pages_nodemask+0x23e1/0x2720 [ 1347.964263] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1347.969127] alloc_pages_current+0x155/0x260 [ 1347.973619] filemap_fault+0x11a1/0x1ad0 [ 1347.977755] ext4_filemap_fault+0x84/0xb0 [ 1347.982082] __do_fault+0xfa/0x380 [ 1347.985712] __handle_mm_fault+0x2497/0x4620 [ 1347.990146] ? vm_insert_page+0x7c0/0x7c0 [ 1347.994299] ? mark_held_locks+0xa6/0xf0 [ 1347.998467] handle_mm_fault+0x455/0x9c0 [ 1348.002884] __do_page_fault+0x549/0xad0 [ 1348.007917] ? spurious_fault+0x640/0x640 [ 1348.012097] ? do_page_fault+0x60/0x500 [ 1348.017464] ? page_fault+0x2f/0x50 [ 1348.021649] page_fault+0x45/0x50 [ 1348.025111] RIP: 184f4a0: (null) [ 1348.029478] RSP: 00ec:00007ffda6c4c470 EFLAGS: 00000003 [ 1348.039876] Mem-Info: [ 1348.052987] active_anon:1136315 inactive_anon:220756 isolated_anon:0 [ 1348.052987] active_file:19 inactive_file:41 isolated_file:0 [ 1348.052987] unevictable:27346 dirty:0 writeback:0 unstable:0 [ 1348.052987] slab_reclaimable:16154 slab_unreclaimable:132322 [ 1348.052987] mapped:57107 shmem:27420 pagetables:51441 bounce:0 [ 1348.052987] free:25016 free_pcp:0 free_cma:0 [ 1348.095938] Node 0 active_anon:1653920kB inactive_anon:306864kB active_file:12kB inactive_file:100kB unevictable:29568kB isolated(anon):0kB isolated(file):0kB mapped:146880kB dirty:0kB writeback:0kB shmem:86444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 690176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1348.134616] Node 1 active_anon:2891340kB inactive_anon:576160kB active_file:164kB inactive_file:0kB unevictable:79816kB isolated(anon):0kB isolated(file):0kB mapped:81548kB dirty:0kB writeback:0kB shmem:23236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1348.171583] Node 0 DMA free:11012kB min:204kB low:252kB high:300kB active_anon:4152kB inactive_anon:516kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1348.209077] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1348.214158] Node 0 DMA32 free:36044kB min:36200kB low:45248kB high:54296kB active_anon:1649768kB inactive_anon:306348kB active_file:0kB inactive_file:16kB unevictable:29568kB writepending:0kB present:3129332kB managed:2788128kB mlocked:29568kB kernel_stack:15104kB pagetables:76768kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1348.255390] lowmem_reserve[]: 0 0 0 0 0 [ 1348.259531] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1348.295391] lowmem_reserve[]: 0 0 0 0 0 [ 1348.299922] Node 1 Normal free:53128kB min:53696kB low:67120kB high:80544kB active_anon:2891340kB inactive_anon:576160kB active_file:104kB inactive_file:0kB unevictable:79816kB writepending:0kB present:4194304kB managed:4128256kB mlocked:79816kB kernel_stack:52000kB pagetables:128956kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1348.342453] lowmem_reserve[]: 0 0 0 0 0 [ 1348.346481] Node 0 DMA: 13*4kB (UME) 10*8kB (ME) 4*16kB (UME) 2*32kB (ME) 2*64kB (ME) 1*128kB (E) 3*256kB (MEH) 1*512kB (E) 3*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11012kB [ 1348.368757] Node 0 DMA32: 135*4kB (UME) 819*8kB (UME) 1166*16kB (UME) 294*32kB (UME) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 36052kB [ 1348.386925] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1348.403506] Node 1 Normal: 232*4kB (UEH) 217*8kB (UEH) 694*16kB (UEH) 1176*32kB (UMH) 27*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53128kB [ 1348.424324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1348.434208] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1348.449206] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1348.461540] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1348.475977] 31875 total pagecache pages [ 1348.484900] 0 pages in swap cache [ 1348.492824] Swap cache stats: add 0, delete 0, find 0/0 [ 1348.500884] Free swap = 0kB [ 1348.504556] Total swap = 0kB [ 1348.510651] 2097051 pages RAM [ 1348.513993] 0 pages HighMem/MovableOnly [ 1348.521131] 363849 pages reserved [ 1348.525376] 0 pages cma reserved [ 1348.531618] Out of memory (oom_kill_allocating_task): Kill process 7961 (syz-fuzzer) score 0 or sacrifice child [ 1348.544845] Killed process 31857 (syz-executor.5) total-vm:84924kB, anon-rss:60kB, file-rss:664kB, shmem-rss:0kB [ 1348.580006] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1348.594994] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1348.607464] CPU: 1 PID: 7963 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1348.616926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1348.626905] Call Trace: [ 1348.629694] dump_stack+0x1b2/0x281 [ 1348.633454] dump_header+0x178/0x82f [ 1348.637438] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1348.642712] ? ___ratelimit+0x2cd/0x530 [ 1348.646810] oom_kill_process.cold+0x10/0xa40 [ 1348.651438] out_of_memory+0xe3e/0x1190 [ 1348.655430] ? oom_killer_disable+0x1c0/0x1c0 [ 1348.660007] ? mutex_trylock+0x152/0x1a0 [ 1348.664105] __alloc_pages_nodemask+0x23e1/0x2720 [ 1348.669105] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1348.673987] alloc_pages_current+0x155/0x260 [ 1348.678591] filemap_fault+0x11a1/0x1ad0 [ 1348.682857] ext4_filemap_fault+0x84/0xb0 [ 1348.687095] __do_fault+0xfa/0x380 [ 1348.690658] __handle_mm_fault+0x2497/0x4620 [ 1348.695115] ? vm_insert_page+0x7c0/0x7c0 [ 1348.699290] ? free_object+0xe4/0x240 [ 1348.703222] ? mark_held_locks+0xa6/0xf0 [ 1348.707419] handle_mm_fault+0x455/0x9c0 [ 1348.711701] __do_page_fault+0x549/0xad0 [ 1348.716071] ? spurious_fault+0x640/0x640 [ 1348.720233] ? do_page_fault+0x60/0x500 [ 1348.724658] ? page_fault+0x2f/0x50 [ 1348.728563] page_fault+0x45/0x50 [ 1348.732022] RIP: 0000:0x947a5c [ 1348.735206] RSP: 0001:000000c00003df28 EFLAGS: 0043b6a0 [ 1348.748176] Mem-Info: [ 1348.756488] active_anon:1136282 inactive_anon:220756 isolated_anon:0 [ 1348.756488] active_file:17 inactive_file:17 isolated_file:0 [ 1348.756488] unevictable:27346 dirty:0 writeback:0 unstable:0 [ 1348.756488] slab_reclaimable:16154 slab_unreclaimable:132322 [ 1348.756488] mapped:57107 shmem:27420 pagetables:51396 bounce:0 [ 1348.756488] free:25033 free_pcp:123 free_cma:0 [ 1348.804640] Node 0 active_anon:1653836kB inactive_anon:306864kB active_file:4kB inactive_file:4kB unevictable:29568kB isolated(anon):0kB isolated(file):0kB mapped:146880kB dirty:0kB writeback:0kB shmem:86444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 690176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1348.845665] Node 1 active_anon:2891292kB inactive_anon:576160kB active_file:64kB inactive_file:64kB unevictable:79816kB isolated(anon):0kB isolated(file):0kB mapped:81548kB dirty:0kB writeback:0kB shmem:23236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1348.886150] Node 0 DMA free:11012kB min:204kB low:252kB high:300kB active_anon:4152kB inactive_anon:516kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1348.918494] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1348.923585] Node 0 DMA32 free:35928kB min:36200kB low:45248kB high:54296kB active_anon:1649684kB inactive_anon:306348kB active_file:4kB inactive_file:4kB unevictable:29568kB writepending:0kB present:3129332kB managed:2788128kB mlocked:29568kB kernel_stack:15104kB pagetables:76712kB bounce:0kB free_pcp:288kB local_pcp:0kB free_cma:0kB [ 1348.959130] lowmem_reserve[]: 0 0 0 0 0 [ 1348.963703] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1348.995907] lowmem_reserve[]: 0 0 0 0 0 [ 1349.000498] Node 1 Normal free:53192kB min:53696kB low:67120kB high:80544kB active_anon:2891292kB inactive_anon:576160kB active_file:108kB inactive_file:0kB unevictable:79816kB writepending:0kB present:4194304kB managed:4128256kB mlocked:79816kB kernel_stack:51936kB pagetables:128832kB bounce:0kB free_pcp:204kB local_pcp:0kB free_cma:0kB [ 1349.040601] lowmem_reserve[]: 0 0 0 0 0 [ 1349.045161] Node 0 DMA: 13*4kB (UME) 10*8kB (ME) 4*16kB (UME) 2*32kB (ME) 2*64kB (ME) 1*128kB (E) 3*256kB (MEH) 1*512kB (E) 3*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11012kB [ 1349.069794] Node 0 DMA32: 112*4kB (ME) 815*8kB (UME) 1166*16kB (UME) 294*32kB (UME) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 35928kB [ 1349.091976] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1349.105822] Node 1 Normal: 232*4kB (UEH) 228*8kB (UMEH) 695*16kB (UEH) 1178*32kB (UMH) 27*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53296kB [ 1349.129349] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1349.144406] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1349.156546] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1349.168992] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1349.180930] 31873 total pagecache pages [ 1349.185474] 0 pages in swap cache [ 1349.192378] Swap cache stats: add 0, delete 0, find 0/0 [ 1349.201166] Free swap = 0kB [ 1349.204645] Total swap = 0kB [ 1349.210938] 2097051 pages RAM [ 1349.214770] 0 pages HighMem/MovableOnly [ 1349.222317] 363849 pages reserved [ 1349.226376] 0 pages cma reserved [ 1349.233196] Out of memory (oom_kill_allocating_task): Kill process 7963 (syz-fuzzer) score 0 or sacrifice child [ 1349.246934] Killed process 31620 (syz-executor.2) total-vm:84924kB, anon-rss:60kB, file-rss:484kB, shmem-rss:0kB [ 1349.292675] oom_reaper: reaped process 31620 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1349.349874] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1349.406624] systemd-journal cpuset=/ mems_allowed=0-1 [ 1349.411924] CPU: 1 PID: 31046 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1349.419912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1349.429272] Call Trace: [ 1349.431904] dump_stack+0x1b2/0x281 [ 1349.436105] dump_header+0x178/0x82f [ 1349.439846] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1349.444960] ? ___ratelimit+0x2cd/0x530 [ 1349.448952] oom_kill_process.cold+0x10/0xa40 [ 1349.453506] out_of_memory+0xe3e/0x1190 [ 1349.457542] ? oom_killer_disable+0x1c0/0x1c0 [ 1349.462052] ? mutex_trylock+0x152/0x1a0 [ 1349.466141] __alloc_pages_nodemask+0x23e1/0x2720 [ 1349.471011] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1349.475891] alloc_pages_current+0x155/0x260 [ 1349.480328] filemap_fault+0x11a1/0x1ad0 [ 1349.484559] ext4_filemap_fault+0x84/0xb0 [ 1349.488725] __do_fault+0xfa/0x380 [ 1349.492308] __handle_mm_fault+0x2497/0x4620 [ 1349.496931] ? vm_insert_page+0x7c0/0x7c0 [ 1349.501186] ? check_stack_object+0x86/0xa0 [ 1349.505523] ? mark_held_locks+0xa6/0xf0 [ 1349.509600] handle_mm_fault+0x455/0x9c0 [ 1349.513679] __do_page_fault+0x549/0xad0 [ 1349.517767] ? spurious_fault+0x640/0x640 [ 1349.522029] ? do_page_fault+0x60/0x500 [ 1349.526013] ? page_fault+0x2f/0x50 [ 1349.529644] page_fault+0x45/0x50 [ 1349.533100] RIP: 838e4040:0x7ffeb845f030 [ 1349.537157] RSP: b845f070:0000000000000001 EFLAGS: 7fcce41003a0 [ 1349.551038] Mem-Info: [ 1349.566705] active_anon:1136282 inactive_anon:220756 isolated_anon:0 [ 1349.566705] active_file:38 inactive_file:0 isolated_file:0 [ 1349.566705] unevictable:27346 dirty:0 writeback:0 unstable:0 [ 1349.566705] slab_reclaimable:16154 slab_unreclaimable:132296 [ 1349.566705] mapped:48457 shmem:27420 pagetables:51359 bounce:0 [ 1349.566705] free:25028 free_pcp:242 free_cma:0 [ 1349.613824] Node 0 active_anon:1653836kB inactive_anon:306864kB active_file:4kB inactive_file:4kB unevictable:29568kB isolated(anon):0kB isolated(file):0kB mapped:128180kB dirty:0kB writeback:0kB shmem:86444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 690176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1349.654325] Node 1 active_anon:2891292kB inactive_anon:576160kB active_file:148kB inactive_file:0kB unevictable:79816kB isolated(anon):0kB isolated(file):0kB mapped:65648kB dirty:0kB writeback:0kB shmem:23236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1349.695642] Node 0 DMA free:11012kB min:204kB low:252kB high:300kB active_anon:4152kB inactive_anon:516kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1349.735246] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1349.756863] Node 0 DMA32 free:36100kB min:36200kB low:45248kB high:54296kB active_anon:1649684kB inactive_anon:306348kB active_file:4kB inactive_file:4kB unevictable:29668kB writepending:0kB present:3129332kB managed:2788128kB mlocked:29668kB kernel_stack:15104kB pagetables:76564kB bounce:0kB free_pcp:236kB local_pcp:120kB free_cma:0kB [ 1349.868514] lowmem_reserve[]: 0 0 0 0 0 [ 1349.873093] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1349.914054] lowmem_reserve[]: 0 0 0 0 0 20:33:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) [ 1349.931847] Node 1 Normal free:73612kB min:53696kB low:67120kB high:80544kB active_anon:2891292kB inactive_anon:576764kB active_file:712kB inactive_file:1452kB unevictable:54648kB writepending:0kB present:4194304kB managed:4128256kB mlocked:54836kB kernel_stack:51840kB pagetables:128832kB bounce:0kB free_pcp:1004kB local_pcp:328kB free_cma:0kB [ 1350.023584] lowmem_reserve[]: 0 0 0 0 0 [ 1350.032504] Node 0 DMA: 13*4kB (UME) 10*8kB (ME) 4*16kB (UME) 2*32kB (ME) 2*64kB (ME) 1*128kB (E) 3*256kB (MEH) 1*512kB (E) 3*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11012kB 20:33:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) [ 1350.062895] Node 0 DMA32: 369*4kB (UME) 900*8kB (UME) 1184*16kB (UME) 294*32kB (UME) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 37924kB [ 1350.089890] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1350.106291] Node 1 Normal: 779*4kB (UMEH) 1517*8kB (UMEH) 1342*16kB (UMEH) 1274*32kB (UMH) 41*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 80116kB [ 1350.186344] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 20:33:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)) [ 1350.271798] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 20:33:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() socket$inet6(0xa, 0x2, 0x0) [ 1350.337425] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1350.438317] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 20:33:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) [ 1350.537888] 37270 total pagecache pages [ 1350.585967] 0 pages in swap cache [ 1350.628454] Swap cache stats: add 0, delete 0, find 0/0 [ 1350.669011] Free swap = 0kB 20:33:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) [ 1350.690483] Total swap = 0kB [ 1350.708613] 2097051 pages RAM [ 1350.728291] 0 pages HighMem/MovableOnly [ 1350.760693] 363849 pages reserved [ 1350.805820] 0 pages cma reserved [ 1350.838754] Out of memory (oom_kill_allocating_task): Kill process 31046 (systemd-journal) score 0 or sacrifice child [ 1350.886316] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1350.897627] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1350.912264] Killed process 31046 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1856kB [ 1350.983566] oom_reaper: reaped process 31046 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1856kB [ 1351.045023] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1351.121792] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1351.131975] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1351.132674] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. 20:33:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) [ 1351.176495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1351.202971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1351.260669] systemd[1]: Stopped Journal Service. [ 1351.269759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1351.312679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1351.321226] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1351.332073] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1351.378117] device bridge_slave_1 left promiscuous mode [ 1351.406796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.427776] systemd[1]: Starting Journal Service... [ 1351.464382] device bridge_slave_0 left promiscuous mode [ 1351.505582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.592494] device veth1_macvtap left promiscuous mode [ 1351.631975] device veth0_macvtap left promiscuous mode [ 1351.677229] device veth1_vlan left promiscuous mode [ 1351.717031] device veth0_vlan left promiscuous mode 20:33:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() 20:33:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) [ 1352.842349] systemd-journald[32295]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. 20:33:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:33:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)) 20:33:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) [ 1353.717253] device hsr_slave_1 left promiscuous mode [ 1353.789185] device hsr_slave_0 left promiscuous mode [ 1353.904672] team0 (unregistering): Port device team_slave_1 removed [ 1354.027212] team0 (unregistering): Port device team_slave_0 removed [ 1354.081449] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1354.164462] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1354.348470] syz-executor.1 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1354.390097] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1354.398660] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1354.410085] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1354.414729] CPU: 0 PID: 32315 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1354.426490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1354.436950] Call Trace: [ 1354.439578] dump_stack+0x1b2/0x281 [ 1354.443316] dump_header+0x178/0x82f [ 1354.447056] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1354.452728] ? ___ratelimit+0x2cd/0x530 [ 1354.456784] oom_kill_process.cold+0x10/0xa40 [ 1354.461995] out_of_memory+0xe3e/0x1190 [ 1354.466113] ? oom_killer_disable+0x1c0/0x1c0 [ 1354.471508] ? mutex_trylock+0x152/0x1a0 [ 1354.475585] __alloc_pages_nodemask+0x23e1/0x2720 [ 1354.480658] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1354.485827] ? fs_reclaim_release+0xd0/0x110 [ 1354.487673] bond0 (unregistering): Released all slaves [ 1354.490338] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1354.490355] ? __lock_acquire+0x5fc/0x3f20 [ 1354.490375] alloc_pages_vma+0xd2/0x6d0 [ 1354.490388] __handle_mm_fault+0x25fa/0x4620 [ 1354.514876] ? lock_downgrade+0x740/0x740 [ 1354.519340] ? vm_insert_page+0x7c0/0x7c0 [ 1354.523602] ? do_raw_spin_unlock+0x164/0x220 [ 1354.528568] ? mark_held_locks+0xa6/0xf0 [ 1354.532799] handle_mm_fault+0x455/0x9c0 [ 1354.536953] __get_user_pages+0x4e9/0x1270 [ 1354.542056] ? follow_page_mask+0x18a0/0x18a0 [ 1354.547969] ? lock_acquire+0x170/0x3f0 [ 1354.552167] populate_vma_page_range+0x17b/0x210 [ 1354.557132] __mm_populate+0x195/0x2c0 [ 1354.562618] ? populate_vma_page_range+0x210/0x210 [ 1354.567558] ? security_capable+0x88/0xb0 [ 1354.573494] SyS_mlockall+0x3ff/0x520 [ 1354.577829] ? SyS_munlock+0xf0/0xf0 [ 1354.581884] do_syscall_64+0x1d5/0x640 [ 1354.586168] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1354.592160] RIP: 0033:0x4665f9 [ 1354.595734] RSP: 002b:00007f0679f12188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1354.604117] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1354.612220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1354.619582] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1354.626861] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1354.634570] R13: 00007ffe83d6ee1f R14: 00007f0679f12300 R15: 0000000000022000 [ 1354.649920] Mem-Info: [ 1354.652464] active_anon:1141480 inactive_anon:239038 isolated_anon:0 [ 1354.652464] active_file:22 inactive_file:15 isolated_file:0 [ 1354.652464] unevictable:23807 dirty:0 writeback:15 unstable:0 [ 1354.652464] slab_reclaimable:16150 slab_unreclaimable:131270 [ 1354.652464] mapped:38538 shmem:29460 pagetables:51679 bounce:0 [ 1354.652464] free:23158 free_pcp:81 free_cma:0 [ 1354.687963] Node 0 active_anon:1663292kB inactive_anon:321348kB active_file:12kB inactive_file:36kB unevictable:44612kB isolated(anon):0kB isolated(file):0kB mapped:118220kB dirty:0kB writeback:36kB shmem:86412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 690176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1354.719462] Node 1 active_anon:2902628kB inactive_anon:634804kB active_file:76kB inactive_file:24kB unevictable:50616kB isolated(anon):0kB isolated(file):0kB mapped:35932kB dirty:0kB writeback:24kB shmem:31428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1354.750028] Node 0 DMA free:11012kB min:204kB low:252kB high:300kB active_anon:4152kB inactive_anon:516kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1354.779574] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1354.784661] Node 0 DMA32 free:28288kB min:36200kB low:45248kB high:54296kB active_anon:1659140kB inactive_anon:320832kB active_file:12kB inactive_file:0kB unevictable:44612kB writepending:16kB present:3129332kB managed:2788128kB mlocked:44612kB kernel_stack:15264kB pagetables:77516kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1354.820439] lowmem_reserve[]: 0 0 0 0 0 [ 1354.824496] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1354.856898] lowmem_reserve[]: 0 0 0 0 0 [ 1354.860998] Node 1 Normal free:53332kB min:53696kB low:67120kB high:80544kB active_anon:2902628kB inactive_anon:634804kB active_file:420kB inactive_file:212kB unevictable:50616kB writepending:16kB present:4194304kB managed:4128256kB mlocked:50616kB kernel_stack:52224kB pagetables:129160kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1354.906852] lowmem_reserve[]: 0 0 0 0 0 [ 1354.913207] Node 0 DMA: 13*4kB (UME) 10*8kB (ME) 4*16kB (UME) 2*32kB (ME) 2*64kB (ME) 1*128kB (E) 3*256kB (MEH) 1*512kB (E) 3*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11012kB [ 1354.939078] Node 0 DMA32: 1040*4kB (UME) 1058*8kB (UME) 674*16kB (UME) 159*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28560kB [ 1354.963414] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1354.976582] Node 1 Normal: 57*4kB (UMH) 111*8kB (UMH) 1135*16kB (UH) 1061*32kB (UH) 7*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53676kB [ 1355.002930] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1355.013910] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1355.023923] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1355.034789] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1355.044792] 32897 total pagecache pages [ 1355.050901] 0 pages in swap cache [ 1355.054387] Swap cache stats: add 0, delete 0, find 0/0 [ 1355.063457] Free swap = 0kB [ 1355.066506] Total swap = 0kB [ 1355.071608] 2097051 pages RAM [ 1355.074734] 0 pages HighMem/MovableOnly [ 1355.080080] 363849 pages reserved [ 1355.083537] 0 pages cma reserved [ 1355.086913] Out of memory (oom_kill_allocating_task): Kill process 32315 (syz-executor.1) score 0 or sacrifice child [ 1355.101099] Killed process 32314 (syz-executor.1) total-vm:93252kB, anon-rss:19832kB, file-rss:39168kB, shmem-rss:0kB [ 1355.123478] oom_reaper: reaped process 32314 (syz-executor.1), now anon-rss:19876kB, file-rss:5376kB, shmem-rss:0kB 20:33:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:33:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) [ 1355.751845] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1355.762368] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1356.532642] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1356.682555] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1356.714318] CPU: 1 PID: 7974 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1356.721826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1356.731189] Call Trace: [ 1356.733801] dump_stack+0x1b2/0x281 [ 1356.737433] dump_header+0x178/0x82f [ 1356.741177] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1356.746321] ? ___ratelimit+0x2cd/0x530 [ 1356.750299] oom_kill_process.cold+0x10/0xa40 [ 1356.754807] out_of_memory+0xe3e/0x1190 [ 1356.758891] ? oom_killer_disable+0x1c0/0x1c0 [ 1356.763391] ? mutex_trylock+0x152/0x1a0 [ 1356.767462] __alloc_pages_nodemask+0x23e1/0x2720 [ 1356.772348] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1356.777223] alloc_pages_current+0x155/0x260 [ 1356.781729] filemap_fault+0x11a1/0x1ad0 [ 1356.785808] ext4_filemap_fault+0x84/0xb0 [ 1356.789965] __do_fault+0xfa/0x380 [ 1356.793523] __handle_mm_fault+0x2497/0x4620 [ 1356.798107] ? vm_insert_page+0x7c0/0x7c0 [ 1356.802975] ? __might_fault+0x177/0x1b0 [ 1356.807137] ? mark_held_locks+0xa6/0xf0 [ 1356.811397] handle_mm_fault+0x455/0x9c0 [ 1356.816230] __do_page_fault+0x549/0xad0 [ 1356.821567] ? spurious_fault+0x640/0x640 [ 1356.827004] ? do_page_fault+0x60/0x500 [ 1356.833472] ? page_fault+0x2f/0x50 [ 1356.837381] page_fault+0x45/0x50 [ 1356.841183] RIP: 20978:0x947859 [ 1356.844482] RSP: 6f6e6166:000000c00080dae8 EFLAGS: 00000000 [ 1356.889455] Mem-Info: [ 1356.907679] active_anon:1142540 inactive_anon:246110 isolated_anon:0 [ 1356.907679] active_file:8 inactive_file:30 isolated_file:0 [ 1356.907679] unevictable:17336 dirty:0 writeback:0 unstable:0 [ 1356.907679] slab_reclaimable:16165 slab_unreclaimable:130657 [ 1356.907679] mapped:37943 shmem:29460 pagetables:51733 bounce:0 [ 1356.907679] free:21839 free_pcp:180 free_cma:0 [ 1356.950779] Node 0 active_anon:1666004kB inactive_anon:328624kB active_file:12kB inactive_file:84kB unevictable:38916kB isolated(anon):0kB isolated(file):0kB mapped:117540kB dirty:0kB writeback:0kB shmem:86412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 690176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1356.990682] Node 1 active_anon:2904232kB inactive_anon:655764kB active_file:12kB inactive_file:12kB unevictable:30428kB isolated(anon):0kB isolated(file):0kB mapped:34176kB dirty:0kB writeback:0kB shmem:31428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1357.026455] Node 0 DMA free:11012kB min:204kB low:252kB high:300kB active_anon:4152kB inactive_anon:516kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1357.063666] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1357.071269] Node 0 DMA32 free:27748kB min:36200kB low:45248kB high:54296kB active_anon:1661920kB inactive_anon:328108kB active_file:32kB inactive_file:32kB unevictable:38916kB writepending:0kB present:3129332kB managed:2788128kB mlocked:38916kB kernel_stack:15360kB pagetables:77944kB bounce:0kB free_pcp:416kB local_pcp:172kB free_cma:0kB [ 1357.109670] lowmem_reserve[]: 0 0 0 0 0 [ 1357.113827] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1357.144638] lowmem_reserve[]: 0 0 0 0 0 [ 1357.148749] Node 1 Normal free:49080kB min:53696kB low:67120kB high:80544kB active_anon:2904232kB inactive_anon:655764kB active_file:12kB inactive_file:12kB unevictable:30428kB writepending:0kB present:4194304kB managed:4128256kB mlocked:30428kB kernel_stack:52096kB pagetables:128940kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1357.182161] lowmem_reserve[]: 0 0 0 0 0 [ 1357.186176] Node 0 DMA: 13*4kB (UME) 10*8kB (ME) 4*16kB (UME) 2*32kB (ME) 2*64kB (ME) 1*128kB (E) 3*256kB (MEH) 1*512kB (E) 3*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11012kB [ 1357.204405] Node 0 DMA32: 140*4kB (UM) 1446*8kB (UME) 667*16kB (UME) 164*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28048kB [ 1357.221022] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1357.231903] Node 1 Normal: 181*4kB (UMH) 89*8kB (UMH) 801*16kB (UMH) 1080*32kB (UMH) 7*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 49260kB [ 1357.252294] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1357.261246] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1357.275574] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1357.305147] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1357.338423] 32282 total pagecache pages [ 1357.342457] 0 pages in swap cache [ 1357.346009] Swap cache stats: add 0, delete 0, find 0/0 [ 1357.366987] Free swap = 0kB [ 1357.374816] Total swap = 0kB [ 1357.394515] 2097051 pages RAM [ 1357.420283] 0 pages HighMem/MovableOnly [ 1357.424604] 363849 pages reserved [ 1357.443921] 0 pages cma reserved [ 1357.447341] Out of memory (oom_kill_allocating_task): Kill process 7974 (syz-fuzzer) score 0 or sacrifice child [ 1357.475247] Killed process 31069 (syz-executor.0) total-vm:84924kB, anon-rss:60kB, file-rss:104kB, shmem-rss:0kB [ 1357.518963] systemd-cgroups invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1357.546799] systemd-cgroups cpuset=/ mems_allowed=0-1 [ 1357.557120] CPU: 0 PID: 32335 Comm: systemd-cgroups Not tainted 4.14.232-syzkaller #0 [ 1357.565657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1357.575498] Call Trace: [ 1357.578782] dump_stack+0x1b2/0x281 [ 1357.582782] dump_header+0x178/0x82f [ 1357.586491] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1357.591585] ? ___ratelimit+0x2cd/0x530 [ 1357.596373] oom_kill_process.cold+0x10/0xa40 [ 1357.601343] out_of_memory+0xe3e/0x1190 [ 1357.605461] ? oom_killer_disable+0x1c0/0x1c0 [ 1357.610028] ? mutex_trylock+0x152/0x1a0 [ 1357.614481] __alloc_pages_nodemask+0x23e1/0x2720 [ 1357.619375] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1357.624676] ? trace_hardirqs_on+0x10/0x10 [ 1357.629029] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1357.634535] ? kmem_cache_alloc+0x1e5/0x3c0 [ 1357.640113] ? cache_grow_begin+0x3f/0x700 [ 1357.644351] cache_grow_begin+0x91/0x700 [ 1357.648720] fallback_alloc+0x207/0x2c0 [ 1357.654317] kmem_cache_alloc+0x1e5/0x3c0 [ 1357.658479] getname_flags+0xc8/0x550 [ 1357.662403] user_path_at_empty+0x2a/0x50 [ 1357.666773] SyS_faccessat+0x21b/0x680 [ 1357.670701] ? SyS_fallocate+0x80/0x80 [ 1357.674891] ? __do_page_fault+0x159/0xad0 [ 1357.680089] ? do_syscall_64+0x4c/0x640 [ 1357.684096] ? SyS_faccessat+0x680/0x680 [ 1357.688402] do_syscall_64+0x1d5/0x640 [ 1357.692342] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1357.697531] RIP: 0033:0x7f78584e9217 [ 1357.701268] RSP: 002b:00007ffff2f98178 EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 1357.709517] RAX: ffffffffffffffda RBX: 00007f78582d0631 RCX: 00007f78584e9217 [ 1357.717055] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007f78584ed4e7 [ 1357.725149] RBP: 00007ffff2f981e0 R08: 0000000000000000 R09: 0000000000000007 [ 1357.732619] R10: 00007f78586f13a8 R11: 0000000000000206 R12: 00007f78586ee628 [ 1357.740072] R13: 00000000000027b2 R14: 0000000000002dda R15: 0000000000000000 [ 1357.785293] Mem-Info: [ 1357.796935] active_anon:1142576 inactive_anon:246097 isolated_anon:0 [ 1357.796935] active_file:21 inactive_file:1 isolated_file:0 [ 1357.796935] unevictable:17336 dirty:0 writeback:0 unstable:0 [ 1357.796935] slab_reclaimable:16165 slab_unreclaimable:130318 [ 1357.796935] mapped:37927 shmem:29460 pagetables:51731 bounce:0 [ 1357.796935] free:22387 free_pcp:95 free_cma:0 [ 1357.853110] Node 0 active_anon:1666072kB inactive_anon:328624kB active_file:80kB inactive_file:0kB unevictable:38916kB isolated(anon):0kB isolated(file):0kB mapped:117532kB dirty:0kB writeback:0kB shmem:86412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 690176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1357.897250] Node 1 active_anon:2904232kB inactive_anon:655764kB active_file:4kB inactive_file:20kB unevictable:30428kB isolated(anon):0kB isolated(file):0kB mapped:34176kB dirty:0kB writeback:0kB shmem:31428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1357.945712] Node 0 DMA free:11012kB min:204kB low:252kB high:300kB active_anon:4152kB inactive_anon:516kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1357.993443] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1358.006998] Node 0 DMA32 free:28028kB min:36200kB low:45248kB high:54296kB active_anon:1661920kB inactive_anon:328108kB active_file:0kB inactive_file:84kB unevictable:38916kB writepending:0kB present:3129332kB managed:2788128kB mlocked:38916kB kernel_stack:15360kB pagetables:77944kB bounce:0kB free_pcp:352kB local_pcp:236kB free_cma:0kB [ 1358.051001] lowmem_reserve[]: 0 0 0 0 0 [ 1358.055695] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1358.094824] lowmem_reserve[]: 0 0 0 0 0 [ 1358.103684] Node 1 Normal free:50676kB min:53696kB low:67120kB high:80544kB active_anon:2904228kB inactive_anon:655764kB active_file:12kB inactive_file:12kB unevictable:30428kB writepending:0kB present:4194304kB managed:4128256kB mlocked:30428kB kernel_stack:52064kB pagetables:128924kB bounce:0kB free_pcp:20kB local_pcp:20kB free_cma:0kB [ 1358.157031] lowmem_reserve[]: 0 0 0 0 0 [ 1358.184374] Node 0 DMA: 13*4kB (UME) 10*8kB (ME) 4*16kB (UME) 2*32kB (ME) 2*64kB (ME) 1*128kB (E) 3*256kB (MEH) 1*512kB (E) 3*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11012kB [ 1358.208750] Node 0 DMA32: 187*4kB (UM) 1470*8kB (UME) 669*16kB (UME) 164*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28460kB [ 1358.231591] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1358.246820] Node 1 Normal: 186*4kB (UMH) 262*8kB (UMH) 801*16kB (UMH) 1081*32kB (UMH) 7*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 50696kB [ 1358.265951] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1358.274952] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1358.288829] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1358.300828] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1358.313683] 32282 total pagecache pages [ 1358.321153] 0 pages in swap cache [ 1358.325138] Swap cache stats: add 0, delete 0, find 0/0 [ 1358.333824] Free swap = 0kB [ 1358.336972] Total swap = 0kB [ 1358.342323] 2097051 pages RAM [ 1358.345566] 0 pages HighMem/MovableOnly [ 1358.351840] 363849 pages reserved [ 1358.355333] 0 pages cma reserved [ 1358.369891] Out of memory (oom_kill_allocating_task): Kill process 32335 (systemd-cgroups) score 0 or sacrifice child [ 1358.384615] Killed process 32335 (systemd-cgroups) total-vm:10588kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1358.416278] oom_reaper: reaped process 32335 (systemd-cgroups), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1358.470003] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1358.493990] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1358.501207] CPU: 1 PID: 7963 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1358.508815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1358.518179] Call Trace: [ 1358.522383] dump_stack+0x1b2/0x281 [ 1358.526040] dump_header+0x178/0x82f [ 1358.529778] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1358.535027] ? ___ratelimit+0x2cd/0x530 [ 1358.539023] oom_kill_process.cold+0x10/0xa40 [ 1358.543529] out_of_memory+0xe3e/0x1190 [ 1358.547538] ? oom_killer_disable+0x1c0/0x1c0 [ 1358.552089] ? mutex_trylock+0x152/0x1a0 [ 1358.556196] __alloc_pages_nodemask+0x23e1/0x2720 [ 1358.561052] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1358.566012] alloc_pages_current+0x155/0x260 [ 1358.570549] filemap_fault+0x11a1/0x1ad0 [ 1358.574632] ext4_filemap_fault+0x84/0xb0 [ 1358.578902] __do_fault+0xfa/0x380 [ 1358.582599] __handle_mm_fault+0x2497/0x4620 [ 1358.587054] ? vm_insert_page+0x7c0/0x7c0 [ 1358.591193] ? free_object+0xe4/0x240 [ 1358.595211] ? mark_held_locks+0xa6/0xf0 [ 1358.599743] handle_mm_fault+0x455/0x9c0 [ 1358.603824] __do_page_fault+0x549/0xad0 [ 1358.608881] ? spurious_fault+0x640/0x640 [ 1358.613124] ? do_page_fault+0x60/0x500 [ 1358.617103] ? page_fault+0x2f/0x50 [ 1358.620732] page_fault+0x45/0x50 [ 1358.624184] RIP: 0000:0x947a5c [ 1358.627363] RSP: 2e000:000000c00003df28 EFLAGS: 0043b6a0 [ 1358.630858] Mem-Info: [ 1358.638988] active_anon:1142546 inactive_anon:246097 isolated_anon:0 [ 1358.638988] active_file:16 inactive_file:6 isolated_file:0 [ 1358.638988] unevictable:17336 dirty:0 writeback:0 unstable:0 [ 1358.638988] slab_reclaimable:16164 slab_unreclaimable:130241 [ 1358.638988] mapped:37927 shmem:29460 pagetables:51701 bounce:0 [ 1358.638988] free:22573 free_pcp:46 free_cma:0 [ 1358.675742] Node 0 active_anon:1666012kB inactive_anon:328624kB active_file:60kB inactive_file:4kB unevictable:38916kB isolated(anon):0kB isolated(file):0kB mapped:117532kB dirty:0kB writeback:0kB shmem:86412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 690176kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1358.723990] Node 1 active_anon:2904172kB inactive_anon:655764kB active_file:12kB inactive_file:12kB unevictable:30428kB isolated(anon):0kB isolated(file):0kB mapped:34176kB dirty:0kB writeback:0kB shmem:31428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1358.766946] Node 0 DMA free:11012kB min:204kB low:252kB high:300kB active_anon:4152kB inactive_anon:516kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1358.813359] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1358.823116] Node 0 DMA32 free:28464kB min:36200kB low:45248kB high:54296kB active_anon:1661860kB inactive_anon:328108kB active_file:76kB inactive_file:0kB unevictable:38916kB writepending:0kB present:3129332kB managed:2788128kB mlocked:38916kB kernel_stack:15360kB pagetables:77860kB bounce:0kB free_pcp:156kB local_pcp:156kB free_cma:0kB [ 1358.864119] lowmem_reserve[]: 0 0 0 0 0 [ 1358.871115] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1358.904032] lowmem_reserve[]: 0 0 0 0 0 [ 1358.936145] Node 1 Normal free:50816kB min:53696kB low:67120kB high:80544kB active_anon:2904172kB inactive_anon:655764kB active_file:12kB inactive_file:12kB unevictable:30428kB writepending:0kB present:4194304kB managed:4128256kB mlocked:30428kB kernel_stack:52000kB pagetables:128904kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 1358.980757] lowmem_reserve[]: 0 0 0 0 0 [ 1358.985885] Node 0 DMA: 13*4kB (UME) 10*8kB (ME) 4*16kB (UME) 2*32kB (ME) 2*64kB (ME) 1*128kB (E) 3*256kB (MEH) 1*512kB (E) 3*1024kB (ME) 3*2048kB (ME) 0*4096kB = 11012kB [ 1359.009914] Node 0 DMA32: 190*4kB (UM) 1469*8kB (UME) 669*16kB (UME) 164*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28464kB [ 1359.031444] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1359.044731] Node 1 Normal: 194*4kB (UMH) 265*8kB (UMH) 801*16kB (UMH) 1083*32kB (UMH) 7*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 50816kB [ 1359.061988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1359.095255] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1359.121799] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1359.135849] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1359.153486] 32282 total pagecache pages [ 1359.159817] 0 pages in swap cache [ 1359.163285] Swap cache stats: add 0, delete 0, find 0/0 [ 1359.173280] Free swap = 0kB [ 1359.176432] Total swap = 0kB [ 1359.181846] 2097051 pages RAM [ 1359.184968] 0 pages HighMem/MovableOnly [ 1359.193739] 363849 pages reserved [ 1359.197241] 0 pages cma reserved [ 1359.203041] Out of memory (oom_kill_allocating_task): Kill process 7963 (syz-fuzzer) score 0 or sacrifice child [ 1359.221142] Killed process 22789 (syz-executor.4) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1359.258303] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1359.907668] in:imklog cpuset=/ mems_allowed=0-1 [ 1359.913472] CPU: 1 PID: 32264 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1359.922055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1359.931417] Call Trace: [ 1359.934256] dump_stack+0x1b2/0x281 [ 1359.938202] dump_header+0x178/0x82f [ 1359.942284] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1359.947505] ? ___ratelimit+0x2cd/0x530 [ 1359.952389] oom_kill_process.cold+0x10/0xa40 [ 1359.958093] out_of_memory+0xe3e/0x1190 [ 1359.962491] ? oom_killer_disable+0x1c0/0x1c0 [ 1359.967016] ? mutex_trylock+0x152/0x1a0 [ 1359.971107] __alloc_pages_nodemask+0x23e1/0x2720 [ 1359.975988] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1359.980866] alloc_pages_current+0x155/0x260 [ 1359.985318] filemap_fault+0x11a1/0x1ad0 [ 1359.989406] ext4_filemap_fault+0x84/0xb0 [ 1359.993568] __do_fault+0xfa/0x380 [ 1359.997126] __handle_mm_fault+0x2497/0x4620 [ 1360.001557] ? vm_insert_page+0x7c0/0x7c0 [ 1360.005856] ? lock_downgrade+0x740/0x740 [ 1360.010133] ? mark_held_locks+0xa6/0xf0 [ 1360.014229] handle_mm_fault+0x455/0x9c0 [ 1360.018459] __do_page_fault+0x549/0xad0 [ 1360.022538] ? spurious_fault+0x640/0x640 [ 1360.026788] ? do_page_fault+0x60/0x500 [ 1360.030908] ? page_fault+0x2f/0x50 [ 1360.034659] page_fault+0x45/0x50 [ 1360.038145] RIP: 1fa0:0x1f9f [ 1360.041162] RSP: 0000:000055787bbfc9d0 EFLAGS: 7f8db4806da0 [ 1360.112857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1360.279173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1360.358976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1360.365925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1360.392343] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1360.460819] device bridge_slave_1 left promiscuous mode [ 1360.479756] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.518307] device bridge_slave_0 left promiscuous mode [ 1360.524145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.572105] device veth1_macvtap left promiscuous mode [ 1360.587561] device veth0_macvtap left promiscuous mode [ 1360.602069] device veth1_vlan left promiscuous mode [ 1360.621191] Mem-Info: [ 1360.622345] device veth0_vlan left promiscuous mode [ 1360.623667] active_anon:1112381 inactive_anon:176248 isolated_anon:0 [ 1360.623667] active_file:1156 inactive_file:2736 isolated_file:0 [ 1360.623667] unevictable:13833 dirty:28 writeback:0 unstable:0 [ 1360.623667] slab_reclaimable:16164 slab_unreclaimable:130700 [ 1360.623667] mapped:21424 shmem:29460 pagetables:47889 bounce:0 [ 1360.623667] free:133328 free_pcp:517 free_cma:0 [ 1360.623683] Node 0 active_anon:1602916kB inactive_anon:306132kB active_file:3528kB inactive_file:9736kB unevictable:35436kB isolated(anon):0kB isolated(file):0kB mapped:81048kB dirty:68kB writeback:0kB shmem:86412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 671744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1360.623695] Node 1 active_anon:2846608kB inactive_anon:398860kB active_file:1096kB inactive_file:1208kB unevictable:19896kB isolated(anon):0kB isolated(file):0kB mapped:4648kB dirty:44kB writeback:0kB shmem:31428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1360.623699] Node 0 DMA free:12916kB min:204kB low:252kB high:300kB active_anon:2268kB inactive_anon:516kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1360.623714] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1360.623732] Node 0 DMA32 free:110220kB min:36200kB low:45248kB high:54296kB active_anon:1600648kB inactive_anon:305616kB active_file:3528kB inactive_file:9736kB unevictable:35436kB writepending:68kB present:3129332kB managed:2788128kB mlocked:35460kB kernel_stack:14368kB pagetables:70972kB bounce:0kB free_pcp:632kB local_pcp:160kB free_cma:0kB [ 1360.623749] lowmem_reserve[]: 0 0 0 0 0 [ 1360.623766] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1360.623783] lowmem_reserve[]: 0 0 0 [ 1360.681535] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1360.793620] 0 0 [ 1360.924444] Node 1 Normal free:418696kB min:53696kB low:67120kB high:80544kB active_anon:2846108kB inactive_anon:398860kB active_file:1096kB inactive_file:1708kB unevictable:19796kB writepending:44kB present:4194304kB managed:4128256kB mlocked:19796kB kernel_stack:48512kB pagetables:120544kB bounce:0kB free_pcp:1436kB local_pcp:740kB free_cma:0kB [ 1361.028261] lowmem_reserve[]: 0 0 0 0 0 [ 1361.032344] Node 0 DMA: 29*4kB (ME) 17*8kB (ME) 10*16kB (UME) 7*32kB (ME) 4*64kB (ME) 4*128kB (ME) 7*256kB (MEH) 1*512kB (E) 3*1024kB (ME) 3*2048kB (ME) 0*4096kB = 12924kB [ 1361.088294] Node 0 DMA32: 4256*4kB (UME) 2143*8kB (ME) 1469*16kB (UME) 434*32kB (UME) 39*64kB (UM) 5*128kB (M) 2*256kB (M) 0*512kB 0*1024kB 9*2048kB (MH) 0*4096kB = 93640kB [ 1361.156039] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1361.170990] device hsr_slave_1 left promiscuous mode [ 1361.187517] Node 1 Normal: 15986*4kB (UMH) 12174*8kB (UMH) 7029*16kB (UMH) 3306*32kB (UMH) 778*64kB (UMH) 46*128kB (M) 7*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 438600kB [ 1361.204352] device hsr_slave_0 left promiscuous mode [ 1361.224405] team0 (unregistering): Port device team_slave_1 removed [ 1361.250423] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1361.263799] team0 (unregistering): Port device team_slave_0 removed [ 1361.280805] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1361.289511] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1361.304270] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1361.337562] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1361.346457] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1361.375571] 37630 total pagecache pages [ 1361.379944] 0 pages in swap cache [ 1361.385726] Swap cache stats: add 0, delete 0, find 0/0 [ 1361.394027] bond0 (unregistering): Released all slaves [ 1361.402754] Free swap = 0kB [ 1361.405873] Total swap = 0kB [ 1361.411321] systemd[1]: Started Journal Service. [ 1361.415549] 2097051 pages RAM [ 1361.430321] 0 pages HighMem/MovableOnly [ 1361.434341] 363849 pages reserved [ 1361.477151] 0 pages cma reserved [ 1361.496821] Out of memory (oom_kill_allocating_task): Kill process 32264 (in:imklog) score 0 or sacrifice child [ 1361.522977] Killed process 32241 (rsyslogd) total-vm:254332kB, anon-rss:1104kB, file-rss:0kB, shmem-rss:0kB [ 1361.599858] oom_reaper: reaped process 32241 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1363.350537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1363.358194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1363.372515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1363.379753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1363.387349] device bridge_slave_1 left promiscuous mode [ 1363.395722] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.403819] device bridge_slave_0 left promiscuous mode [ 1363.409829] bridge0: port 1(bridge_slave_0) entered disabled state [ 1363.420437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1363.427417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1363.436998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1363.444184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1363.453990] device bridge_slave_1 left promiscuous mode [ 1363.460957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.472264] device bridge_slave_0 left promiscuous mode [ 1363.478254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1363.489259] device veth1_macvtap left promiscuous mode [ 1363.495224] device veth0_macvtap left promiscuous mode [ 1363.502245] device veth1_vlan left promiscuous mode [ 1363.509471] device veth0_vlan left promiscuous mode [ 1363.516510] device veth1_macvtap left promiscuous mode [ 1363.522993] device veth0_macvtap left promiscuous mode [ 1363.528652] device veth1_vlan left promiscuous mode [ 1363.533793] device veth0_vlan left promiscuous mode [ 1363.646523] device hsr_slave_1 left promiscuous mode [ 1363.655745] device hsr_slave_0 left promiscuous mode [ 1363.671326] team0 (unregistering): Port device team_slave_1 removed [ 1363.684972] team0 (unregistering): Port device team_slave_0 removed [ 1363.694293] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1363.707149] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1363.734800] bond0 (unregistering): Released all slaves [ 1363.767863] device hsr_slave_1 left promiscuous mode [ 1363.775277] device hsr_slave_0 left promiscuous mode [ 1363.788705] team0 (unregistering): Port device team_slave_1 removed [ 1363.799324] team0 (unregistering): Port device team_slave_0 removed [ 1363.811073] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1363.825082] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1363.853755] bond0 (unregistering): Released all slaves [ 1364.479451] IPVS: ftp: loaded support on port[0] = 21 [ 1364.519859] IPVS: ftp: loaded support on port[0] = 21 [ 1364.622766] chnl_net:caif_netlink_parms(): no params data found [ 1364.711611] chnl_net:caif_netlink_parms(): no params data found [ 1364.799206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1364.806405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.815117] device bridge_slave_0 entered promiscuous mode [ 1364.822065] bridge0: port 1(bridge_slave_0) entered blocking state [ 1364.828572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.835629] device bridge_slave_0 entered promiscuous mode [ 1364.842540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1364.850779] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.858708] device bridge_slave_1 entered promiscuous mode [ 1364.864897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1364.871434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.879085] device bridge_slave_1 entered promiscuous mode [ 1364.914369] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1364.923568] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1364.933237] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1364.942437] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1364.967667] Bluetooth: hci2 command 0x0409 tx timeout [ 1364.981655] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1364.990615] team0: Port device team_slave_0 added [ 1364.996112] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1365.003567] team0: Port device team_slave_0 added [ 1365.010682] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1365.018411] team0: Port device team_slave_1 added [ 1365.023870] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1365.031981] team0: Port device team_slave_1 added [ 1365.064698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1365.071424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1365.098975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1365.110102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1365.116380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1365.142166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1365.153690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1365.162159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1365.187568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1365.198593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1365.204865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1365.231349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1365.242307] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1365.250839] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1365.258800] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1365.266193] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1365.306256] device hsr_slave_0 entered promiscuous mode [ 1365.312467] device hsr_slave_1 entered promiscuous mode [ 1365.320013] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1365.330302] device hsr_slave_0 entered promiscuous mode [ 1365.336033] device hsr_slave_1 entered promiscuous mode [ 1365.343602] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1365.356794] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1365.366697] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1365.506791] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1365.526319] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1365.579220] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1365.585362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1365.596354] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1365.603600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1365.613054] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1365.621022] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1365.630035] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1365.638607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1365.645802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1365.654960] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1365.663608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1365.671106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1365.681540] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1365.688437] 8021q: adding VLAN 0 to HW filter on device team0 [ 1365.696606] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1365.703161] 8021q: adding VLAN 0 to HW filter on device team0 [ 1365.712286] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1365.723061] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1365.731841] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1365.739338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1365.747319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1365.755880] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.762320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1365.769899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1365.778236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1365.786016] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.792520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1365.799893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1365.808228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1365.816181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.822617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1365.830224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1365.837390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1365.848739] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1365.855930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1365.863940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1365.873364] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.879846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1365.893865] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1365.904650] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1365.912100] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1365.920257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1365.931301] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1365.941086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1365.949637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1365.960544] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1365.969464] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1365.976433] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1365.984006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1365.992184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1366.000660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1366.009268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1366.019842] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1366.027296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1366.034859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1366.043008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1366.053437] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1366.063440] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1366.072142] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1366.080236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1366.088910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1366.098270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1366.105908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1366.114433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1366.122333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1366.132282] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1366.138835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1366.147353] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1366.155656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1366.164830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1366.178549] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1366.184679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1366.202001] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1366.211732] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1366.220240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1366.227101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1366.237278] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1366.246904] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1366.255755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1366.264044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1366.275329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1366.288173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1366.361918] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1366.372696] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1366.379952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1366.389017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1366.400813] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1366.412435] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1366.420124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1366.428947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1366.454285] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1366.461923] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1366.470644] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1366.481620] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1366.487715] Bluetooth: hci3 command 0x0409 tx timeout [ 1366.489458] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1366.501237] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1366.512058] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1366.522048] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1366.530375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1366.539980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1366.548165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1366.555608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1366.564907] device veth0_vlan entered promiscuous mode [ 1366.572739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1366.580472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1366.587412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1366.595278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1366.608995] device veth1_vlan entered promiscuous mode [ 1366.615026] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1366.622722] device veth0_vlan entered promiscuous mode [ 1366.634713] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1366.644504] device veth1_vlan entered promiscuous mode [ 1366.650576] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1366.660823] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1366.672516] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1366.684506] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1366.692808] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1366.702504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1366.710322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1366.718374] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1366.725813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1366.734574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1366.744983] device veth0_macvtap entered promiscuous mode [ 1366.752129] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1366.761398] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1366.771345] device veth1_macvtap entered promiscuous mode [ 1366.778930] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1366.786589] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1366.794896] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1366.803491] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1366.811700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1366.820494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1366.831716] device veth0_macvtap entered promiscuous mode [ 1366.838995] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1366.846806] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1366.859721] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1366.868653] device veth1_macvtap entered promiscuous mode [ 1366.874758] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1366.884639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1366.895315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.904565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1366.914439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.924934] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1366.932195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1366.941379] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1366.952042] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1366.959798] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1366.966947] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1366.975674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1366.985935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1366.997927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.007083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1367.017691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.028637] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1367.035567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1367.045459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1367.047999] Bluetooth: hci2 command 0x041b tx timeout [ 1367.058676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1367.066510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1367.083965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1367.094220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.105018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1367.115450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.125306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1367.136083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.146405] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1367.153690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1367.162717] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1367.171140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1367.182926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1367.193721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.203762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1367.214739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.224125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1367.234083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.244758] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1367.251935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1367.261767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1367.270314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1367.562499] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1367.572648] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:33:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) 20:33:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:33:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() 20:33:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) 20:33:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:33:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) [ 1368.569039] Bluetooth: hci3 command 0x041b tx timeout [ 1368.945767] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1368.973514] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1368.993992] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1369.004312] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1369.129286] Bluetooth: hci2 command 0x040f tx timeout 20:33:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) [ 1369.366031] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1369.382925] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:33:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() socket$inet6(0xa, 0x2, 0x0) [ 1370.393643] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1370.404214] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:33:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) [ 1370.647853] Bluetooth: hci3 command 0x040f tx timeout 20:33:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() socket$inet6(0xa, 0x2, 0x0) 20:33:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:33:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() [ 1371.287795] Bluetooth: hci2 command 0x0419 tx timeout [ 1372.728102] Bluetooth: hci3 command 0x0419 tx timeout 20:33:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:33:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() [ 1372.944141] EXT4-fs: 6 callbacks suppressed [ 1372.944151] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1372.979703] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1373.293089] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1373.304394] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1373.623151] IPVS: ftp: loaded support on port[0] = 21 [ 1373.804565] chnl_net:caif_netlink_parms(): no params data found [ 1373.886030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1373.892725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.902267] device bridge_slave_0 entered promiscuous mode [ 1373.910634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1373.917197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.925071] device bridge_slave_1 entered promiscuous mode [ 1373.944889] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1373.954737] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1373.977395] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1373.985197] team0: Port device team_slave_0 added [ 1373.991196] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1373.998635] team0: Port device team_slave_1 added [ 1374.020986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1374.027494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1374.053038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1374.064404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1374.070824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1374.096713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1374.108588] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1374.116419] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1374.141994] device hsr_slave_0 entered promiscuous mode [ 1374.148176] device hsr_slave_1 entered promiscuous mode [ 1374.154794] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1374.162118] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1374.239979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.246553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1374.253473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.259942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1374.292969] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1374.299600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1374.310354] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1374.320792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1374.328870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.335680] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.347255] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1374.353647] 8021q: adding VLAN 0 to HW filter on device team0 [ 1374.363510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1374.372033] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.378647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1374.389897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1374.398335] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.404685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1374.422162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1374.430366] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1374.443377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1374.459078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1374.466948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1374.478314] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1374.484697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1374.500113] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1374.509473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1374.516284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1374.543218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1374.649480] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1374.664211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1374.712350] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1374.720297] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1374.729904] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1374.742652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1374.751217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1374.760636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1374.771010] device veth0_vlan entered promiscuous mode [ 1374.779671] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1374.791782] device veth1_vlan entered promiscuous mode [ 1374.813399] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1374.825081] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1374.836954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1374.847133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1374.862605] device veth0_macvtap entered promiscuous mode [ 1374.870161] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1374.880633] device veth1_macvtap entered promiscuous mode [ 1374.887057] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1374.897096] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1374.908459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1374.917561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1374.927718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.937019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1374.947423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.957300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1374.967355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.976868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1374.987483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.999158] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1375.006438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1375.016299] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1375.024367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1375.032083] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1375.040817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1375.051624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1375.072010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.090339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1375.100442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.110050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1375.120454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.137926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1375.148924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.159905] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1375.168686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1375.179517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1375.194777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1375.674087] IPVS: ftp: loaded support on port[0] = 21 [ 1375.688584] Bluetooth: hci4 command 0x0409 tx timeout [ 1376.000775] chnl_net:caif_netlink_parms(): no params data found [ 1376.121494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.128986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.137064] device bridge_slave_0 entered promiscuous mode [ 1376.146754] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.155176] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.163325] device bridge_slave_1 entered promiscuous mode [ 1376.194331] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1376.205147] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1376.294313] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1376.304462] team0: Port device team_slave_0 added [ 1376.312859] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1376.325808] team0: Port device team_slave_1 added [ 1376.348361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1376.354996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1376.382072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1376.393287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1376.399765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1376.426740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1376.438929] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1376.446978] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1376.472163] device hsr_slave_0 entered promiscuous mode [ 1376.478178] device hsr_slave_1 entered promiscuous mode [ 1376.484296] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1376.493154] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1376.578962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.585355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1376.592110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.598785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1376.633694] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1376.640818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1376.653298] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1376.662945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1376.672598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.679890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.691400] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1376.697496] 8021q: adding VLAN 0 to HW filter on device team0 [ 1376.706833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1376.715722] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.722451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1376.733397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1376.741757] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.748300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1376.767381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1376.776094] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1376.792568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1376.800490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1376.812760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1376.823510] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1376.830230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1376.844781] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1376.853601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1376.861634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1376.873854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1376.934854] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1376.946048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1376.984912] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1376.992565] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1377.000929] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1377.007378] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1377.019181] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1377.026120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1377.034802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1377.044035] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1377.055062] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1377.064242] device veth0_vlan entered promiscuous mode [ 1377.074964] device veth1_vlan entered promiscuous mode [ 1377.082906] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1377.092364] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1377.105870] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1377.115850] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1377.123809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1377.132028] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1377.140243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1377.148809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1377.159199] device veth0_macvtap entered promiscuous mode [ 1377.165304] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1377.174151] device veth1_macvtap entered promiscuous mode [ 1377.180605] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1377.190140] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1377.201194] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1377.211654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1377.222148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1377.231409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1377.242233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1377.251721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1377.261801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1377.271222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1377.281778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1377.291300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1377.301194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1377.311425] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1377.319168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1377.326543] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1377.335746] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1377.343973] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1377.351999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1377.362605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1377.373424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1377.383254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1377.393739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1377.402978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1377.413153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1377.422828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1377.432714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1377.441911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1377.452553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1377.462770] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1377.469937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1377.477223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1377.486063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1377.690144] Bluetooth: hci5 command 0x0409 tx timeout [ 1377.768909] Bluetooth: hci4 command 0x041b tx timeout [ 1377.780226] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1377.790697] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1377.848572] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1377.862074] systemd-journal cpuset=/ mems_allowed=0-1 [ 1377.867397] CPU: 1 PID: 32295 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1377.875388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1377.884745] Call Trace: [ 1377.887368] dump_stack+0x1b2/0x281 [ 1377.891009] dump_header+0x178/0x82f [ 1377.894743] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1377.899892] ? ___ratelimit+0x2cd/0x530 [ 1377.903960] oom_kill_process.cold+0x10/0xa40 [ 1377.908477] out_of_memory+0xe3e/0x1190 [ 1377.912492] ? oom_killer_disable+0x1c0/0x1c0 [ 1377.917394] ? mutex_trylock+0x152/0x1a0 [ 1377.921486] __alloc_pages_nodemask+0x23e1/0x2720 [ 1377.926361] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1377.931231] alloc_pages_current+0x155/0x260 [ 1377.935646] filemap_fault+0x11a1/0x1ad0 [ 1377.939721] ext4_filemap_fault+0x84/0xb0 [ 1377.943868] __do_fault+0xfa/0x380 [ 1377.947406] __handle_mm_fault+0x2497/0x4620 [ 1377.951830] ? vm_insert_page+0x7c0/0x7c0 [ 1377.955977] ? lock_downgrade+0x740/0x740 [ 1377.960132] ? mark_held_locks+0xa6/0xf0 [ 1377.964203] handle_mm_fault+0x455/0x9c0 [ 1377.968283] __do_page_fault+0x549/0xad0 [ 1377.972399] ? spurious_fault+0x640/0x640 [ 1377.976557] ? do_page_fault+0x60/0x500 [ 1377.980538] ? page_fault+0x2f/0x50 [ 1377.984291] page_fault+0x45/0x50 [ 1377.987761] RIP: a81514b8:0x55d188c05958 [ 1377.991829] RSP: a81513c0:00007fffa81513b8 EFLAGS: 55d18914c780 [ 1378.006673] Mem-Info: [ 1378.028489] active_anon:1113061 inactive_anon:257567 isolated_anon:0 [ 1378.028489] active_file:176 inactive_file:203 isolated_file:32 [ 1378.028489] unevictable:15718 dirty:30 writeback:0 unstable:0 [ 1378.028489] slab_reclaimable:15674 slab_unreclaimable:133468 [ 1378.028489] mapped:56601 shmem:29469 pagetables:48869 bounce:0 [ 1378.028489] free:25871 free_pcp:364 free_cma:0 [ 1378.065923] Node 0 active_anon:1603444kB inactive_anon:322312kB active_file:200kB inactive_file:164kB unevictable:22500kB isolated(anon):0kB isolated(file):0kB mapped:179368kB dirty:60kB writeback:0kB shmem:86440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 671744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1378.098023] Node 1 active_anon:2848800kB inactive_anon:707956kB active_file:136kB inactive_file:232kB unevictable:40372kB isolated(anon):0kB isolated(file):0kB mapped:46036kB dirty:60kB writeback:0kB shmem:31436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1378.129811] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2268kB inactive_anon:2316kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1378.158306] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1378.166371] Node 0 DMA32 free:36232kB min:36200kB low:45248kB high:54296kB active_anon:1601176kB inactive_anon:319996kB active_file:112kB inactive_file:1100kB unevictable:24516kB writepending:60kB present:3129332kB managed:2788128kB mlocked:24516kB kernel_stack:14656kB pagetables:71820kB bounce:0kB free_pcp:88kB local_pcp:60kB free_cma:0kB [ 1378.209181] lowmem_reserve[]: 0 0 0 0 0 [ 1378.213446] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1378.244720] lowmem_reserve[]: 0 0 0 0 0 [ 1378.252018] Node 1 Normal free:53588kB min:53696kB low:67120kB high:80544kB active_anon:2848800kB inactive_anon:707956kB active_file:792kB inactive_file:188kB unevictable:41380kB writepending:60kB present:4194304kB managed:4128256kB mlocked:41380kB kernel_stack:49120kB pagetables:123616kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1378.283093] lowmem_reserve[]: 0 0 0 0 0 [ 1378.287178] Node 0 DMA: 3*4kB (ME) 2*8kB (UE) 2*16kB (ME) 2*32kB (ME) 3*64kB (UME) 2*128kB (UE) 5*256kB (UMEH) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (M) 0*4096kB = 11068kB [ 1378.303086] Node 0 DMA32: 1174*4kB (UME) 1840*8kB (UME) 855*16kB (UME) 62*32kB (UM) 1*64kB (M) 1*128kB (M) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 35784kB [ 1378.321278] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1378.349636] Node 1 Normal: 165*4kB (UH) 352*8kB (UH) 386*16kB (UMH) 1352*32kB (UMH) 9*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53492kB [ 1378.386362] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1378.398402] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1378.407078] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1378.417197] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1378.426264] 34784 total pagecache pages [ 1378.430377] 0 pages in swap cache [ 1378.433896] Swap cache stats: add 0, delete 0, find 0/0 [ 1378.439387] Free swap = 0kB [ 1378.442454] Total swap = 0kB [ 1378.445537] 2097051 pages RAM [ 1378.448821] 0 pages HighMem/MovableOnly [ 1378.452956] 363849 pages reserved [ 1378.456444] 0 pages cma reserved [ 1378.459985] Out of memory (oom_kill_allocating_task): Kill process 32295 (systemd-journal) score 0 or sacrifice child [ 1378.470875] Killed process 32295 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1828kB [ 1378.483292] oom_reaper: reaped process 32295 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1828kB [ 1378.536653] kworker/u4:2 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1378.558247] kworker/u4:2 cpuset=/ mems_allowed=0-1 [ 1378.563368] CPU: 1 PID: 25363 Comm: kworker/u4:2 Not tainted 4.14.232-syzkaller #0 [ 1378.571202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1378.580668] Workqueue: events_unbound call_usermodehelper_exec_work [ 1378.587308] Call Trace: [ 1378.589900] dump_stack+0x1b2/0x281 [ 1378.593750] dump_header+0x178/0x82f [ 1378.599314] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1378.605052] ? ___ratelimit+0x2cd/0x530 [ 1378.610825] oom_kill_process.cold+0x10/0xa40 [ 1378.615773] ? lock_downgrade+0x740/0x740 [ 1378.620685] out_of_memory+0x2dc/0x1190 [ 1378.625142] ? oom_killer_disable+0x1c0/0x1c0 [ 1378.629849] ? mutex_trylock+0x152/0x1a0 [ 1378.633990] __alloc_pages_nodemask+0x23e1/0x2720 [ 1378.639205] ? deref_stack_reg+0x124/0x1a0 [ 1378.643485] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1378.648475] ? fs_reclaim_release+0xd0/0x110 [ 1378.653620] ? kmem_cache_alloc_node+0x38b/0x410 [ 1378.658591] copy_process.part.0+0x265/0x71c0 [ 1378.663522] ? __lock_acquire+0x5fc/0x3f20 [ 1378.667793] ? debug_object_activate+0x292/0x490 [ 1378.674368] ? static_obj+0x50/0x50 [ 1378.678009] ? lock_acquire+0x170/0x3f0 [ 1378.682005] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1378.687477] ? __cleanup_sighand+0x40/0x40 [ 1378.691709] ? mod_timer+0x4e7/0xf70 [ 1378.695447] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1378.701015] _do_fork+0x184/0xc80 [ 1378.704470] ? fork_idle+0x270/0x270 [ 1378.708383] ? lock_downgrade+0x740/0x740 [ 1378.712665] ? process_one_work+0x6c4/0x14a0 [ 1378.718508] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1378.726313] kernel_thread+0x2f/0x40 [ 1378.730206] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1378.735507] ? call_usermodehelper+0x80/0x80 [ 1378.739953] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1378.745409] process_one_work+0x793/0x14a0 [ 1378.749700] ? work_busy+0x320/0x320 [ 1378.753526] ? worker_thread+0x158/0xff0 [ 1378.757622] ? _raw_spin_unlock_irq+0x24/0x80 [ 1378.762120] worker_thread+0x5cc/0xff0 [ 1378.766121] ? rescuer_thread+0xc80/0xc80 [ 1378.770363] kthread+0x30d/0x420 [ 1378.773749] ? kthread_create_on_node+0xd0/0xd0 [ 1378.778712] ret_from_fork+0x24/0x30 [ 1378.789358] Mem-Info: [ 1378.791838] active_anon:1112986 inactive_anon:257567 isolated_anon:0 [ 1378.791838] active_file:51 inactive_file:10 isolated_file:0 [ 1378.791838] unevictable:17473 dirty:0 writeback:0 unstable:0 [ 1378.791838] slab_reclaimable:15670 slab_unreclaimable:133066 [ 1378.791838] mapped:57578 shmem:29469 pagetables:48872 bounce:0 [ 1378.791838] free:25099 free_pcp:0 free_cma:0 [ 1378.828004] Node 0 active_anon:1603144kB inactive_anon:322312kB active_file:44kB inactive_file:0kB unevictable:26508kB isolated(anon):0kB isolated(file):0kB mapped:183404kB dirty:0kB writeback:0kB shmem:86440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 671744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1378.857594] Node 1 active_anon:2848800kB inactive_anon:707956kB active_file:240kB inactive_file:56kB unevictable:43384kB isolated(anon):0kB isolated(file):0kB mapped:47008kB dirty:0kB writeback:0kB shmem:31436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1378.885677] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2268kB inactive_anon:2316kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1378.923873] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1378.933262] Node 0 DMA32 free:36088kB min:36200kB low:45248kB high:54296kB active_anon:1601176kB inactive_anon:319996kB active_file:0kB inactive_file:0kB unevictable:26508kB writepending:0kB present:3129332kB managed:2788128kB mlocked:26508kB kernel_stack:14656kB pagetables:71832kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1378.966262] lowmem_reserve[]: 0 0 0 0 0 [ 1378.973227] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1379.035468] lowmem_reserve[]: 0 0 0 0 0 [ 1379.039560] Node 1 Normal free:53400kB min:53696kB low:67120kB high:80544kB active_anon:2848708kB inactive_anon:707952kB active_file:28kB inactive_file:28kB unevictable:43664kB writepending:0kB present:4194304kB managed:4128256kB mlocked:43664kB kernel_stack:49088kB pagetables:123564kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1379.075494] lowmem_reserve[]: 0 0 0 0 0 [ 1379.083597] Node 0 DMA: 3*4kB (ME) 2*8kB (UE) 2*16kB (ME) 2*32kB (ME) 3*64kB (UME) 2*128kB (UE) 5*256kB (UMEH) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (M) 0*4096kB = 11068kB [ 1379.104324] Node 0 DMA32: 1134*4kB (UME) 1868*8kB (UME) 859*16kB (UME) 63*32kB (UM) 1*64kB (M) 1*128kB (M) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 35944kB [ 1379.130347] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1379.147303] Node 1 Normal: 192*4kB (UMH) 426*8kB (UMH) 343*16kB (UMH) 1354*32kB (UMH) 9*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53568kB [ 1379.167239] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1379.185995] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1379.194849] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1379.211146] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1379.224416] 34931 total pagecache pages [ 1379.230544] 0 pages in swap cache [ 1379.234198] Swap cache stats: add 0, delete 0, find 0/0 [ 1379.247126] Free swap = 0kB [ 1379.251701] Total swap = 0kB [ 1379.255015] 2097051 pages RAM [ 1379.265070] 0 pages HighMem/MovableOnly [ 1379.271705] 363849 pages reserved [ 1379.275280] 0 pages cma reserved [ 1379.285876] Out of memory: Kill process 920 (syz-executor.4) score 1011 or sacrifice child [ 1379.294834] Killed process 920 (syz-executor.4) total-vm:93384kB, anon-rss:28596kB, file-rss:55652kB, shmem-rss:0kB [ 1379.363221] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1379.447332] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1379.468848] CPU: 1 PID: 7963 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1379.476340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1379.485705] Call Trace: [ 1379.488303] dump_stack+0x1b2/0x281 [ 1379.491985] dump_header+0x178/0x82f [ 1379.495704] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1379.501342] ? ___ratelimit+0x2cd/0x530 [ 1379.505325] oom_kill_process.cold+0x10/0xa40 [ 1379.509842] out_of_memory+0xe3e/0x1190 [ 1379.513839] ? oom_killer_disable+0x1c0/0x1c0 [ 1379.518344] ? mutex_trylock+0x152/0x1a0 [ 1379.522416] __alloc_pages_nodemask+0x23e1/0x2720 [ 1379.527282] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1379.532185] alloc_pages_current+0x155/0x260 [ 1379.536610] filemap_fault+0x11a1/0x1ad0 [ 1379.540697] ext4_filemap_fault+0x84/0xb0 [ 1379.544854] __do_fault+0xfa/0x380 [ 1379.548404] __handle_mm_fault+0x2497/0x4620 [ 1379.552859] ? vm_insert_page+0x7c0/0x7c0 [ 1379.557034] ? free_object+0xe4/0x240 [ 1379.560848] ? mark_held_locks+0xa6/0xf0 [ 1379.564917] handle_mm_fault+0x455/0x9c0 [ 1379.568990] __do_page_fault+0x549/0xad0 [ 1379.573069] ? spurious_fault+0x640/0x640 [ 1379.577220] ? do_page_fault+0x60/0x500 [ 1379.581196] ? page_fault+0x2f/0x50 [ 1379.585092] page_fault+0x45/0x50 [ 1379.588568] RIP: 0000:0x947a5c [ 1379.591760] RSP: 0001:000000c00003df28 EFLAGS: 0043b6a0 [ 1379.728721] Mem-Info: [ 1379.737121] active_anon:1112949 inactive_anon:257566 isolated_anon:0 [ 1379.737121] active_file:37 inactive_file:59 isolated_file:41 [ 1379.737121] unevictable:17569 dirty:0 writeback:0 unstable:0 [ 1379.737121] slab_reclaimable:15662 slab_unreclaimable:133056 [ 1379.737121] mapped:57664 shmem:29469 pagetables:48850 bounce:0 [ 1379.737121] free:25205 free_pcp:5 free_cma:0 [ 1379.774583] Node 0 active_anon:1603084kB inactive_anon:322312kB active_file:120kB inactive_file:208kB unevictable:26168kB isolated(anon):0kB isolated(file):164kB mapped:183664kB dirty:0kB writeback:0kB shmem:86440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 671744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1379.783668] Bluetooth: hci5 command 0x041b tx timeout [ 1379.803862] Node 1 active_anon:2848712kB inactive_anon:707952kB active_file:28kB inactive_file:28kB unevictable:44008kB isolated(anon):0kB isolated(file):0kB mapped:46992kB dirty:0kB writeback:0kB shmem:31436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1379.861432] Bluetooth: hci4 command 0x040f tx timeout [ 1379.869974] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2268kB inactive_anon:2316kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1379.925634] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1379.937757] Node 0 DMA32 free:36152kB min:36200kB low:45248kB high:54296kB active_anon:1600816kB inactive_anon:319996kB active_file:20kB inactive_file:820kB unevictable:25864kB writepending:0kB present:3129332kB managed:2788128kB mlocked:25840kB kernel_stack:14592kB pagetables:71792kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1380.000360] lowmem_reserve[]: 0 0 0 0 0 [ 1380.009154] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1380.062761] lowmem_reserve[]: 0 0 0 0 0 [ 1380.072919] Node 1 Normal free:53764kB min:53696kB low:67120kB high:80544kB active_anon:2848704kB inactive_anon:736052kB active_file:940kB inactive_file:11052kB unevictable:3772kB writepending:0kB present:4194304kB managed:4128256kB mlocked:3768kB kernel_stack:49056kB pagetables:123568kB bounce:0kB free_pcp:64kB local_pcp:64kB free_cma:0kB [ 1380.157419] lowmem_reserve[]: 0 0 0 0 0 [ 1380.163854] Node 0 DMA: 3*4kB (ME) 2*8kB (UE) 2*16kB (ME) 2*32kB (ME) 3*64kB (UME) 2*128kB (UE) 5*256kB (UMEH) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (M) 0*4096kB = 11068kB [ 1380.183480] Node 0 DMA32: 1136*4kB (UME) 1859*8kB (UME) 859*16kB (UME) 63*32kB (UM) 0*64kB 0*128kB 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 35944kB [ 1380.201843] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1380.212862] Node 1 Normal: 937*4kB (UMH) 3501*8kB (UMH) 350*16kB (UMH) 1356*32kB (UMH) 9*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 81324kB [ 1380.232400] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1380.241565] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1380.262841] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1380.333962] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1380.381685] 35523 total pagecache pages [ 1380.385709] 0 pages in swap cache [ 1380.427790] Swap cache stats: add 0, delete 0, find 0/0 [ 1380.434167] Free swap = 0kB [ 1380.437203] Total swap = 0kB 20:33:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) 20:33:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() [ 1380.492083] 2097051 pages RAM [ 1380.495357] 0 pages HighMem/MovableOnly [ 1380.509888] 363849 pages reserved [ 1380.516492] 0 pages cma reserved 20:33:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:33:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) [ 1380.527430] Out of memory (oom_kill_allocating_task): Kill process 7963 (syz-fuzzer) score 0 or sacrifice child [ 1380.547822] Killed process 32375 (syz-executor.2) total-vm:84924kB, anon-rss:68kB, file-rss:748kB, shmem-rss:0kB [ 1380.581325] oom_reaper: reaped process 32375 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 20:33:32 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) 20:33:32 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) [ 1380.802566] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1380.981499] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. 20:33:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) [ 1381.085493] systemd[1]: Stopped Journal Service. [ 1381.301767] syz-executor.5 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1381.360602] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1381.378584] CPU: 1 PID: 936 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1381.386340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1381.395723] Call Trace: [ 1381.398372] dump_stack+0x1b2/0x281 [ 1381.402008] dump_header+0x178/0x82f [ 1381.405962] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1381.411090] ? ___ratelimit+0x2cd/0x530 [ 1381.415229] oom_kill_process.cold+0x10/0xa40 [ 1381.420068] out_of_memory+0xe3e/0x1190 [ 1381.424191] ? oom_killer_disable+0x1c0/0x1c0 [ 1381.428708] ? mutex_trylock+0x152/0x1a0 [ 1381.432790] __alloc_pages_nodemask+0x23e1/0x2720 [ 1381.437795] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1381.442677] ? _raw_spin_unlock_irq+0x24/0x80 [ 1381.447181] ? __lock_acquire+0x5fc/0x3f20 [ 1381.451436] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1381.456208] alloc_pages_vma+0xd2/0x6d0 [ 1381.460238] __handle_mm_fault+0x25fa/0x4620 [ 1381.464665] ? lock_downgrade+0x740/0x740 [ 1381.468811] ? vm_insert_page+0x7c0/0x7c0 [ 1381.473331] ? do_raw_spin_unlock+0x164/0x220 [ 1381.478992] ? mark_held_locks+0xa6/0xf0 [ 1381.483219] handle_mm_fault+0x455/0x9c0 [ 1381.487309] __get_user_pages+0x4e9/0x1270 [ 1381.491558] ? follow_page_mask+0x18a0/0x18a0 [ 1381.496147] ? check_preemption_disabled+0x35/0x240 [ 1381.501160] ? lock_acquire+0x170/0x3f0 [ 1381.505135] populate_vma_page_range+0x17b/0x210 [ 1381.509937] __mm_populate+0x195/0x2c0 [ 1381.513828] ? populate_vma_page_range+0x210/0x210 [ 1381.518797] ? security_capable+0x88/0xb0 [ 1381.522947] SyS_mlockall+0x3ff/0x520 [ 1381.526744] ? SyS_munlock+0xf0/0xf0 [ 1381.530495] do_syscall_64+0x1d5/0x640 [ 1381.534382] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1381.539568] RIP: 0033:0x4665f9 [ 1381.542823] RSP: 002b:00007f0c467ff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1381.550524] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1381.557922] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1381.565191] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1381.572455] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1381.579740] R13: 00007ffea58b6a9f R14: 00007f0c467ff300 R15: 0000000000022000 [ 1381.590090] Mem-Info: [ 1381.592805] active_anon:1114424 inactive_anon:257559 isolated_anon:0 [ 1381.592805] active_file:38 inactive_file:32 isolated_file:16 [ 1381.592805] unevictable:24631 dirty:21 writeback:0 unstable:0 [ 1381.592805] slab_reclaimable:15638 slab_unreclaimable:132638 [ 1381.592805] mapped:47982 shmem:29465 pagetables:48981 bounce:0 [ 1381.592805] free:25550 free_pcp:80 free_cma:0 [ 1381.628615] Node 0 active_anon:1604460kB inactive_anon:322284kB active_file:40kB inactive_file:40kB unevictable:59812kB isolated(anon):0kB isolated(file):64kB mapped:150768kB dirty:8kB writeback:0kB shmem:86424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 671744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1381.659782] Node 1 active_anon:2853236kB inactive_anon:707952kB active_file:96kB inactive_file:68kB unevictable:40256kB isolated(anon):0kB isolated(file):0kB mapped:41156kB dirty:56kB writeback:0kB shmem:31436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1381.688156] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2268kB inactive_anon:2316kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1381.715289] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1381.721251] Node 0 DMA32 free:36160kB min:36200kB low:45248kB high:54296kB active_anon:1602096kB inactive_anon:319968kB active_file:172kB inactive_file:160kB unevictable:59628kB writepending:0kB present:3129332kB managed:2788128kB mlocked:59628kB kernel_stack:14560kB pagetables:71860kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1381.755653] lowmem_reserve[]: 0 0 0 0 0 [ 1381.759718] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1381.785622] lowmem_reserve[]: 0 0 0 0 0 [ 1381.789694] Node 1 Normal free:53600kB min:53696kB low:67120kB high:80544kB active_anon:2853236kB inactive_anon:707952kB active_file:408kB inactive_file:256kB unevictable:39932kB writepending:0kB present:4194304kB managed:4128256kB mlocked:39932kB kernel_stack:49536kB pagetables:124032kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1381.819922] lowmem_reserve[]: 0 0 0 0 0 [ 1381.823906] Node 0 DMA: 3*4kB (ME) 2*8kB (UE) 2*16kB (ME) 2*32kB (ME) 3*64kB (UME) 2*128kB (UE) 5*256kB (UMEH) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (M) 0*4096kB = 11068kB [ 1381.839390] Node 0 DMA32: 801*4kB (UE) 437*8kB (UE) 167*16kB (UME) 79*32kB (UME) 157*64kB (UM) 11*128kB (U) 11*256kB (UM) 8*512kB (UM) 6*1024kB (U) 0*2048kB 0*4096kB = 36412kB [ 1381.856416] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1381.867265] Node 1 Normal: 161*4kB (UMH) 429*8kB (UMH) 377*16kB (UMH) 1343*32kB (UMH) 9*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53660kB [ 1381.881833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1381.890731] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1381.899461] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1381.908392] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1381.916980] 33947 total pagecache pages [ 1381.921108] 0 pages in swap cache [ 1381.924557] Swap cache stats: add 0, delete 0, find 0/0 [ 1381.930437] Free swap = 0kB [ 1381.933478] Total swap = 0kB [ 1381.936493] 2097051 pages RAM [ 1381.938073] Bluetooth: hci4 command 0x0419 tx timeout [ 1381.939680] 0 pages HighMem/MovableOnly [ 1381.945967] Bluetooth: hci5 command 0x040f tx timeout [ 1381.949392] 363849 pages reserved [ 1381.949397] 0 pages cma reserved [ 1381.949406] Out of memory (oom_kill_allocating_task): Kill process 936 (syz-executor.5) score 0 or sacrifice child [ 1381.949447] Killed process 934 (syz-executor.5) total-vm:93252kB, anon-rss:10572kB, file-rss:39232kB, shmem-rss:0kB [ 1381.960895] oom_reaper: reaped process 934 (syz-executor.5), now anon-rss:10868kB, file-rss:5376kB, shmem-rss:0kB [ 1382.016015] syz-executor.1 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1382.121545] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1382.132805] CPU: 0 PID: 933 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1382.140847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1382.151893] Call Trace: [ 1382.154780] dump_stack+0x1b2/0x281 [ 1382.158507] dump_header+0x178/0x82f [ 1382.165361] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1382.175542] ? ___ratelimit+0x2cd/0x530 [ 1382.180106] oom_kill_process.cold+0x10/0xa40 [ 1382.184802] out_of_memory+0xe3e/0x1190 [ 1382.189868] ? oom_killer_disable+0x1c0/0x1c0 [ 1382.194506] ? mutex_trylock+0x152/0x1a0 [ 1382.198691] __alloc_pages_nodemask+0x23e1/0x2720 [ 1382.204572] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1382.210639] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1382.218801] ? __lock_acquire+0x5fc/0x3f20 [ 1382.223504] alloc_pages_vma+0xd2/0x6d0 [ 1382.227516] __handle_mm_fault+0x25fa/0x4620 [ 1382.231957] ? lock_downgrade+0x740/0x740 [ 1382.236149] ? vm_insert_page+0x7c0/0x7c0 [ 1382.240308] ? do_raw_spin_unlock+0x164/0x220 [ 1382.245123] ? mark_held_locks+0xa6/0xf0 [ 1382.249395] handle_mm_fault+0x455/0x9c0 [ 1382.254506] __get_user_pages+0x4e9/0x1270 [ 1382.259115] ? follow_page_mask+0x18a0/0x18a0 [ 1382.263811] ? lock_acquire+0x170/0x3f0 [ 1382.268421] populate_vma_page_range+0x17b/0x210 [ 1382.273583] __mm_populate+0x195/0x2c0 [ 1382.278869] ? populate_vma_page_range+0x210/0x210 [ 1382.283855] ? security_capable+0x88/0xb0 [ 1382.288005] SyS_mlockall+0x3ff/0x520 [ 1382.292076] ? SyS_munlock+0xf0/0xf0 [ 1382.295800] do_syscall_64+0x1d5/0x640 [ 1382.300824] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1382.306109] RIP: 0033:0x4665f9 [ 1382.309297] RSP: 002b:00007f0679f12188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1382.319319] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1382.327673] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1382.335053] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1382.342420] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1382.349697] R13: 00007ffe83d6ee1f R14: 00007f0679f12300 R15: 0000000000022000 [ 1382.365051] Mem-Info: [ 1382.368712] active_anon:1114463 inactive_anon:257606 isolated_anon:0 [ 1382.368712] active_file:11 inactive_file:152 isolated_file:9 [ 1382.368712] unevictable:21527 dirty:0 writeback:1 unstable:0 [ 1382.368712] slab_reclaimable:15629 slab_unreclaimable:132561 [ 1382.368712] mapped:46957 shmem:29465 pagetables:48956 bounce:0 [ 1382.368712] free:28282 free_pcp:437 free_cma:0 [ 1382.406193] Node 0 active_anon:1604532kB inactive_anon:322376kB active_file:144kB inactive_file:224kB unevictable:52716kB isolated(anon):0kB isolated(file):128kB mapped:147584kB dirty:0kB writeback:0kB shmem:86424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 671744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1382.438812] Node 1 active_anon:2853320kB inactive_anon:708048kB active_file:0kB inactive_file:52kB unevictable:33392kB isolated(anon):0kB isolated(file):36kB mapped:40244kB dirty:0kB writeback:4kB shmem:31436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1382.469279] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2268kB inactive_anon:2316kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 20:33:33 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) [ 1382.570429] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1382.575520] Node 0 DMA32 free:35728kB min:36200kB low:45248kB high:54296kB active_anon:1602768kB inactive_anon:320124kB active_file:1016kB inactive_file:4924kB unevictable:52716kB writepending:0kB present:3129332kB managed:2788128kB mlocked:52716kB kernel_stack:14560kB pagetables:71780kB bounce:0kB free_pcp:836kB local_pcp:208kB free_cma:0kB [ 1382.768960] lowmem_reserve[]: 0 0 0 0 0 [ 1382.773114] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1382.812824] lowmem_reserve[]: 0 0 0 0 0 [ 1382.822117] Node 1 Normal free:53660kB min:53696kB low:67120kB high:80544kB active_anon:2853824kB inactive_anon:708000kB active_file:36kB inactive_file:24kB unevictable:38432kB writepending:4kB present:4194304kB managed:4128256kB mlocked:38432kB kernel_stack:49440kB pagetables:124004kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1382.852362] lowmem_reserve[]: 0 0 0 0 0 [ 1382.856504] Node 0 DMA: 3*4kB (ME) 2*8kB (UE) 2*16kB (ME) 2*32kB (ME) 3*64kB (UME) 2*128kB (UE) 5*256kB (UMEH) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (M) 0*4096kB = 11068kB [ 1382.895663] Node 0 DMA32: 807*4kB (UME) 443*8kB (UME) 169*16kB (UE) 79*32kB (UE) 148*64kB (UM) 11*128kB (U) 11*256kB (UM) 8*512kB (UM) 6*1024kB (U) 0*2048kB 0*4096kB = 35940kB [ 1382.911774] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1382.924696] Node 1 Normal: 132*4kB (UMH) 411*8kB (UMH) 434*16kB (UMH) 1344*32kB (UMH) 9*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54344kB [ 1382.939590] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1382.951914] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1382.961644] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1382.971567] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1382.981027] 32892 total pagecache pages [ 1382.985086] 0 pages in swap cache [ 1382.989036] Swap cache stats: add 0, delete 0, find 0/0 [ 1382.994938] Free swap = 0kB [ 1382.999955] Total swap = 0kB [ 1383.004006] 2097051 pages RAM [ 1383.009480] 0 pages HighMem/MovableOnly [ 1383.014425] 363849 pages reserved [ 1383.018264] 0 pages cma reserved [ 1383.021950] Out of memory (oom_kill_allocating_task): Kill process 933 (syz-executor.1) score 0 or sacrifice child [ 1383.033765] Killed process 931 (syz-executor.1) total-vm:93252kB, anon-rss:18736kB, file-rss:39176kB, shmem-rss:0kB [ 1383.070251] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1383.097773] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1383.103018] CPU: 0 PID: 953 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1383.110757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1383.120116] Call Trace: [ 1383.122716] dump_stack+0x1b2/0x281 [ 1383.126356] dump_header+0x178/0x82f [ 1383.130108] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1383.136189] ? ___ratelimit+0x2cd/0x530 [ 1383.141395] oom_kill_process.cold+0x10/0xa40 [ 1383.146091] out_of_memory+0xe3e/0x1190 [ 1383.150080] ? oom_killer_disable+0x1c0/0x1c0 [ 1383.154583] ? mutex_trylock+0x152/0x1a0 [ 1383.158648] __alloc_pages_nodemask+0x23e1/0x2720 [ 1383.163596] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1383.168533] ? trace_hardirqs_on+0x10/0x10 [ 1383.173234] ? kmem_cache_alloc+0x1e5/0x3c0 [ 1383.177740] ? cache_grow_begin+0x3f/0x700 [ 1383.182035] cache_grow_begin+0x91/0x700 [ 1383.186555] fallback_alloc+0x207/0x2c0 [ 1383.191857] kmem_cache_alloc+0x1e5/0x3c0 [ 1383.196106] getname_flags+0xc8/0x550 [ 1383.200179] SyS_symlinkat+0x6d/0x240 [ 1383.204415] ? SyS_unlink+0x20/0x20 [ 1383.208353] ? __do_page_fault+0x159/0xad0 [ 1383.212694] ? do_syscall_64+0x4c/0x640 [ 1383.216775] ? SyS_symlinkat+0x240/0x240 [ 1383.220870] do_syscall_64+0x1d5/0x640 [ 1383.224773] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1383.230230] RIP: 0033:0x465f07 [ 1383.233447] RSP: 002b:00007ffea58b6ce8 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 1383.241159] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000465f07 [ 1383.248488] RDX: 00007ffea58b6dd3 RSI: 00000000004bfd8b RDI: 00007ffea58b6dc0 [ 1383.255877] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffea58b6b80 [ 1383.263154] R10: 00007ffea58b6a37 R11: 0000000000000206 R12: 0000000000000001 [ 1383.270542] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffea58b6dc0 [ 1383.337610] systemd[1]: Starting Journal Service... 20:33:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) [ 1383.446127] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1383.456228] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1383.473477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 20:33:34 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) [ 1383.501679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1383.559389] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1383.571559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1383.639919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1383.737131] device bridge_slave_1 left promiscuous mode [ 1383.802506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.870965] device bridge_slave_0 left promiscuous mode [ 1383.927744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.001009] device veth1_macvtap left promiscuous mode [ 1384.008101] Bluetooth: hci5 command 0x0419 tx timeout [ 1384.044398] device veth0_macvtap left promiscuous mode [ 1384.090348] device veth1_vlan left promiscuous mode [ 1384.096321] systemd-journald[952]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1384.120313] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1384.166129] device veth0_vlan left promiscuous mode 20:33:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) [ 1384.617860] Mem-Info: [ 1384.620368] active_anon:1113406 inactive_anon:263186 isolated_anon:0 [ 1384.620368] active_file:387 inactive_file:587 isolated_file:25 [ 1384.620368] unevictable:13526 dirty:7 writeback:0 unstable:0 [ 1384.620368] slab_reclaimable:15620 slab_unreclaimable:132194 [ 1384.620368] mapped:46098 shmem:30740 pagetables:48953 bounce:0 [ 1384.620368] free:30812 free_pcp:465 free_cma:0 [ 1384.762984] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1384.771647] Node 0 active_anon:1604336kB inactive_anon:326792kB active_file:832kB inactive_file:1324kB unevictable:42476kB isolated(anon):0kB isolated(file):0kB mapped:150128kB dirty:28kB writeback:0kB shmem:90824kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 671744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1384.803969] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1384.852950] Node 1 active_anon:2849288kB inactive_anon:711752kB active_file:476kB inactive_file:636kB unevictable:25828kB isolated(anon):0kB isolated(file):0kB mapped:39964kB dirty:0kB writeback:0kB shmem:35136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1384.883214] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2268kB inactive_anon:2316kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1384.922858] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1384.929714] Node 0 DMA32 free:39980kB min:36200kB low:45248kB high:54296kB active_anon:1602248kB inactive_anon:324512kB active_file:116kB inactive_file:964kB unevictable:49732kB writepending:28kB present:3129332kB managed:2788128kB mlocked:49852kB kernel_stack:14560kB pagetables:71820kB bounce:0kB free_pcp:640kB local_pcp:444kB free_cma:0kB [ 1384.992753] lowmem_reserve[]: 0 0 0 0 0 [ 1384.997625] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1385.036652] lowmem_reserve[]: 0 0 0 0 0 [ 1385.040958] Node 1 Normal free:57368kB min:53696kB low:67120kB high:80544kB active_anon:2849192kB inactive_anon:711668kB active_file:712kB inactive_file:1288kB unevictable:36308kB writepending:28kB present:4194304kB managed:4128256kB mlocked:36320kB kernel_stack:49312kB pagetables:123760kB bounce:0kB free_pcp:448kB local_pcp:152kB free_cma:0kB [ 1385.115394] lowmem_reserve[]: 0 0 0 0 0 [ 1385.119734] Node 0 DMA: 3*4kB (ME) 2*8kB (UE) 2*16kB (ME) 2*32kB (ME) 3*64kB (UME) 2*128kB (UE) 5*256kB (UMEH) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (M) 0*4096kB = 11068kB [ 1385.135497] device hsr_slave_1 left promiscuous mode [ 1385.143419] Node 0 DMA32: 637*4kB (UME) 463*8kB (UME) 199*16kB (UME) 95*32kB (UME) 143*64kB (UM) 12*128kB (U) 10*256kB (UM) 9*512kB (UM) 6*1024kB (U) 0*2048kB 0*4096kB = 36476kB [ 1385.159940] device hsr_slave_0 left promiscuous mode [ 1385.174091] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1385.185859] Node 1 Normal: 258*4kB (UMH) 602*8kB (UMH) 349*16kB (UMH) 1350*32kB (UMH) 12*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55400kB [ 1385.201704] team0 (unregistering): Port device team_slave_1 removed [ 1385.226026] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1385.236222] team0 (unregistering): Port device team_slave_0 removed [ 1385.240232] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1385.265185] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1385.274134] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1385.286017] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1385.294733] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1385.308945] 37654 total pagecache pages [ 1385.313777] 0 pages in swap cache [ 1385.317425] Swap cache stats: add 0, delete 0, find 0/0 [ 1385.327483] Free swap = 0kB [ 1385.332517] Total swap = 0kB [ 1385.336014] 2097051 pages RAM [ 1385.342525] 0 pages HighMem/MovableOnly [ 1385.351187] 363849 pages reserved [ 1385.354767] 0 pages cma reserved [ 1385.361605] Out of memory (oom_kill_allocating_task): Kill process 953 (syz-executor.5) score 0 or sacrifice child [ 1385.381359] Killed process 953 (syz-executor.5) total-vm:93120kB, anon-rss:124kB, file-rss:34944kB, shmem-rss:0kB [ 1385.404085] oom_reaper: reaped process 953 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1385.446140] bond0 (unregistering): Released all slaves [ 1385.479495] syz-executor.4 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1385.492958] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1385.500440] CPU: 1 PID: 968 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1385.508307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1385.517915] Call Trace: [ 1385.520604] dump_stack+0x1b2/0x281 [ 1385.524248] dump_header+0x178/0x82f [ 1385.528060] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1385.533177] ? ___ratelimit+0x2cd/0x530 [ 1385.537291] oom_kill_process.cold+0x10/0xa40 [ 1385.541991] out_of_memory+0xe3e/0x1190 [ 1385.545993] ? oom_killer_disable+0x1c0/0x1c0 [ 1385.550762] ? mutex_trylock+0x152/0x1a0 [ 1385.556087] __alloc_pages_nodemask+0x23e1/0x2720 [ 1385.560933] ? _raw_spin_unlock_irq+0x24/0x80 [ 1385.565911] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1385.572660] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1385.579064] ? __lock_acquire+0x5fc/0x3f20 [ 1385.584772] alloc_pages_vma+0xd2/0x6d0 [ 1385.589117] __handle_mm_fault+0x25fa/0x4620 [ 1385.594331] ? lock_downgrade+0x740/0x740 [ 1385.599835] ? vm_insert_page+0x7c0/0x7c0 [ 1385.605186] ? do_raw_spin_unlock+0x164/0x220 [ 1385.609852] ? mark_held_locks+0xa6/0xf0 [ 1385.614642] handle_mm_fault+0x455/0x9c0 [ 1385.618852] __get_user_pages+0x4e9/0x1270 [ 1385.623606] ? follow_page_mask+0x18a0/0x18a0 [ 1385.628548] ? lock_acquire+0x170/0x3f0 [ 1385.634831] populate_vma_page_range+0x17b/0x210 [ 1385.639740] __mm_populate+0x195/0x2c0 [ 1385.644414] ? populate_vma_page_range+0x210/0x210 [ 1385.649851] ? security_capable+0x88/0xb0 [ 1385.654003] SyS_mlockall+0x3ff/0x520 [ 1385.657810] ? SyS_munlock+0xf0/0xf0 [ 1385.661736] do_syscall_64+0x1d5/0x640 [ 1385.665623] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1385.671069] RIP: 0033:0x4665f9 [ 1385.674259] RSP: 002b:00007f0462baf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1385.683108] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1385.690621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1385.698078] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1385.705640] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1385.714856] R13: 00007ffc2c71a80f R14: 00007f0462baf300 R15: 0000000000022000 [ 1385.747780] Mem-Info: [ 1385.750606] active_anon:1113416 inactive_anon:259593 isolated_anon:0 [ 1385.750606] active_file:5 inactive_file:0 isolated_file:0 [ 1385.750606] unevictable:25450 dirty:0 writeback:0 unstable:0 [ 1385.750606] slab_reclaimable:15612 slab_unreclaimable:131292 [ 1385.750606] mapped:50280 shmem:31512 pagetables:48939 bounce:0 [ 1385.750606] free:25028 free_pcp:73 free_cma:0 [ 1385.810982] Node 0 active_anon:1604316kB inactive_anon:326764kB active_file:0kB inactive_file:0kB unevictable:56144kB isolated(anon):0kB isolated(file):0kB mapped:154272kB dirty:0kB writeback:0kB shmem:90896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 671744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1385.842788] Node 1 active_anon:2849348kB inactive_anon:711608kB active_file:24kB inactive_file:0kB unevictable:45656kB isolated(anon):0kB isolated(file):0kB mapped:46864kB dirty:0kB writeback:0kB shmem:35152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1385.876729] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2268kB inactive_anon:2316kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1385.907638] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1385.915813] Node 0 DMA32 free:35948kB min:36200kB low:45248kB high:54296kB active_anon:1602048kB inactive_anon:324448kB active_file:196kB inactive_file:264kB unevictable:56008kB writepending:0kB present:3129332kB managed:2788128kB mlocked:56008kB kernel_stack:14560kB pagetables:71932kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1385.946362] lowmem_reserve[]: 0 0 0 0 0 [ 1385.950664] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1385.977133] lowmem_reserve[]: 0 0 0 0 0 [ 1385.982183] Node 1 Normal free:53508kB min:53696kB low:67120kB high:80544kB active_anon:2849248kB inactive_anon:711608kB active_file:144kB inactive_file:196kB unevictable:45484kB writepending:0kB present:4194304kB managed:4128256kB mlocked:45484kB kernel_stack:49280kB pagetables:123788kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1386.017217] lowmem_reserve[]: 0 0 0 0 0 [ 1386.021591] Node 0 DMA: 3*4kB (ME) 2*8kB (UE) 2*16kB (ME) 2*32kB (ME) 3*64kB (UME) 2*128kB (UE) 5*256kB (UMEH) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (M) 0*4096kB = 11068kB [ 1386.047867] Node 0 DMA32: 854*4kB (UME) 456*8kB (UME) 182*16kB (UE) 79*32kB (UME) 138*64kB (UM) 12*128kB (U) 10*256kB (UM) 9*512kB (UM) 6*1024kB (U) 0*2048kB 0*4096kB = 36184kB [ 1386.125516] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1386.153364] Node 1 Normal: 213*4kB (UMH) 670*8kB (UMH) 295*16kB (UMH) 1319*32kB (UMH) 12*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53908kB [ 1386.181807] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1386.201679] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1386.216917] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1386.237315] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1386.247089] 38027 total pagecache pages [ 1386.262850] 0 pages in swap cache [ 1386.266573] Swap cache stats: add 0, delete 0, find 0/0 [ 1386.275608] Free swap = 0kB [ 1386.286549] Total swap = 0kB [ 1386.293302] 2097051 pages RAM [ 1386.296526] 0 pages HighMem/MovableOnly [ 1386.312295] 363849 pages reserved [ 1386.316989] 0 pages cma reserved [ 1386.324988] Out of memory (oom_kill_allocating_task): Kill process 968 (syz-executor.4) score 0 or sacrifice child [ 1386.349587] Killed process 967 (syz-executor.4) total-vm:93252kB, anon-rss:25820kB, file-rss:39292kB, shmem-rss:0kB [ 1386.405870] oom_reaper: reaped process 967 (syz-executor.4), now anon-rss:25948kB, file-rss:5376kB, shmem-rss:0kB [ 1386.508934] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1386.550117] in:imklog cpuset=/ mems_allowed=0-1 [ 1386.554906] CPU: 0 PID: 32365 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1386.562443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1386.572804] Call Trace: [ 1386.575419] dump_stack+0x1b2/0x281 [ 1386.579102] dump_header+0x178/0x82f [ 1386.583174] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1386.588468] ? ___ratelimit+0x2cd/0x530 [ 1386.592463] oom_kill_process.cold+0x10/0xa40 [ 1386.597085] out_of_memory+0xe3e/0x1190 [ 1386.601088] ? oom_killer_disable+0x1c0/0x1c0 [ 1386.605597] ? mutex_trylock+0x152/0x1a0 [ 1386.609683] __alloc_pages_nodemask+0x23e1/0x2720 [ 1386.614952] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1386.619951] alloc_pages_current+0x155/0x260 [ 1386.624410] filemap_fault+0x11a1/0x1ad0 [ 1386.628595] ext4_filemap_fault+0x84/0xb0 [ 1386.632784] __do_fault+0xfa/0x380 [ 1386.636334] __handle_mm_fault+0x2497/0x4620 [ 1386.640747] ? vm_insert_page+0x7c0/0x7c0 [ 1386.644894] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1386.649922] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1386.654954] ? mark_held_locks+0xa6/0xf0 [ 1386.659037] handle_mm_fault+0x455/0x9c0 [ 1386.663137] __do_page_fault+0x549/0xad0 [ 1386.667386] ? spurious_fault+0x640/0x640 [ 1386.671585] ? do_page_fault+0x60/0x500 [ 1386.676208] ? page_fault+0x2f/0x50 [ 1386.679963] page_fault+0x45/0x50 [ 1386.683424] RIP: 0001:0x1f9f [ 1386.686438] RSP: 8bec4308:0000558aefffb530 EFLAGS: 7f358d8ef3a0 [ 1386.964858] Mem-Info: [ 1386.993767] active_anon:1113436 inactive_anon:259594 isolated_anon:0 [ 1386.993767] active_file:457 inactive_file:536 isolated_file:70 [ 1386.993767] unevictable:18250 dirty:9 writeback:6 unstable:0 [ 1386.993767] slab_reclaimable:15604 slab_unreclaimable:131159 [ 1386.993767] mapped:50037 shmem:31512 pagetables:48925 bounce:0 [ 1386.993767] free:31379 free_pcp:319 free_cma:0 [ 1387.195480] Node 0 active_anon:1604352kB inactive_anon:326764kB active_file:2836kB inactive_file:1568kB unevictable:42476kB isolated(anon):0kB isolated(file):128kB mapped:155528kB dirty:28kB writeback:0kB shmem:90892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 671744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1387.317941] Node 1 active_anon:2849372kB inactive_anon:711612kB active_file:124kB inactive_file:68kB unevictable:30248kB isolated(anon):0kB isolated(file):28kB mapped:44808kB dirty:12kB writeback:0kB shmem:35156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1387.468229] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2268kB inactive_anon:2316kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1387.617831] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1387.627869] Node 0 DMA32 free:45104kB min:36200kB low:45248kB high:54296kB active_anon:1602184kB inactive_anon:324448kB active_file:2076kB inactive_file:3112kB unevictable:42172kB writepending:28kB present:3129332kB managed:2788128kB mlocked:42136kB kernel_stack:14560kB pagetables:71904kB bounce:0kB free_pcp:896kB local_pcp:164kB free_cma:0kB [ 1387.750326] lowmem_reserve[]: 0 0 0 0 0 [ 1387.754936] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1387.877845] lowmem_reserve[]: 0 0 0 0 0 [ 1387.881960] Node 1 Normal free:79464kB min:53696kB low:67120kB high:80544kB active_anon:2849372kB inactive_anon:714132kB active_file:11716kB inactive_file:792kB unevictable:8kB writepending:12kB present:4194304kB managed:4128256kB mlocked:260kB kernel_stack:49120kB pagetables:123668kB bounce:0kB free_pcp:1284kB local_pcp:628kB free_cma:0kB [ 1387.963177] lowmem_reserve[]: 0 0 0 0 0 [ 1387.967230] Node 0 DMA: 3*4kB (ME) 2*8kB (UE) 2*16kB (ME) 2*32kB (ME) 3*64kB (UME) 2*128kB (UE) 5*256kB (UMEH) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (M) 0*4096kB = 11068kB [ 1388.013629] Node 0 DMA32: 2028*4kB (UME) 1353*8kB (UME) 532*16kB (UME) 101*32kB (UME) 140*64kB (UM) 12*128kB (U) 10*256kB (UM) 9*512kB (UM) 6*1024kB (U) 0*2048kB 0*4096kB = 54488kB [ 1388.068606] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1388.096128] Node 1 Normal: 1708*4kB (UMH) 3237*8kB (UMH) 652*16kB (UMH) 1333*32kB (UMH) 12*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 86584kB 20:33:39 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:33:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:33:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() 20:33:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) [ 1388.134950] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1388.152206] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 20:33:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) [ 1388.191222] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1388.256583] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1388.327922] 40918 total pagecache pages [ 1388.373762] 0 pages in swap cache [ 1388.397166] Swap cache stats: add 0, delete 0, find 0/0 [ 1388.468549] Free swap = 0kB [ 1388.489973] Total swap = 0kB [ 1388.523223] 2097051 pages RAM [ 1388.549439] 0 pages HighMem/MovableOnly [ 1388.585721] 363849 pages reserved [ 1388.613912] 0 pages cma reserved [ 1388.643109] Out of memory (oom_kill_allocating_task): Kill process 32365 (in:imklog) score 0 or sacrifice child [ 1388.723221] Killed process 32363 (rsyslogd) total-vm:254332kB, anon-rss:752kB, file-rss:0kB, shmem-rss:0kB [ 1388.768084] oom_reaper: reaped process 32363 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1388.825053] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1388.839432] syz-executor.0 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1388.854055] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1388.861883] CPU: 1 PID: 983 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1388.869805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1388.879171] Call Trace: [ 1388.881812] dump_stack+0x1b2/0x281 [ 1388.885460] dump_header+0x178/0x82f [ 1388.889249] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1388.894479] ? ___ratelimit+0x2cd/0x530 [ 1388.898483] oom_kill_process.cold+0x10/0xa40 [ 1388.903042] out_of_memory+0xe3e/0x1190 [ 1388.907045] ? oom_killer_disable+0x1c0/0x1c0 [ 1388.911565] ? mutex_trylock+0x152/0x1a0 [ 1388.915792] __alloc_pages_nodemask+0x23e1/0x2720 [ 1388.920694] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1388.925552] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1388.931026] ? _find_next_bit+0xdb/0x100 [ 1388.935132] ? __lock_acquire+0x5fc/0x3f20 [ 1388.939478] alloc_pages_vma+0xd2/0x6d0 [ 1388.943549] wp_page_copy+0xfdf/0x25c0 [ 1388.947445] ? _vm_normal_page+0x162/0x3b0 [ 1388.951744] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 1388.956238] ? __lock_acquire+0x5fc/0x3f20 [ 1388.960482] do_wp_page+0x245/0x1db0 [ 1388.964336] ? __handle_mm_fault+0x129c/0x4620 [ 1388.968933] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 1388.974748] __handle_mm_fault+0x234f/0x4620 [ 1388.979176] ? vm_insert_page+0x7c0/0x7c0 [ 1388.983334] ? lock_downgrade+0x740/0x740 [ 1388.987613] ? cpuacct_charge+0x1cf/0x350 [ 1388.991788] ? mark_held_locks+0xa6/0xf0 [ 1388.995871] handle_mm_fault+0x455/0x9c0 [ 1388.999967] __do_page_fault+0x549/0xad0 [ 1389.004085] ? spurious_fault+0x640/0x640 [ 1389.008241] ? do_page_fault+0x60/0x500 [ 1389.012233] page_fault+0x25/0x50 [ 1389.015715] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1389.021627] RSP: 0018:ffff8881a0227b68 EFLAGS: 00010206 [ 1389.027005] RAX: ffffed101362ec00 RBX: 0000000000001000 RCX: 0000000000000500 [ 1389.034284] RDX: 0000000000001000 RSI: ffff88809b175b00 RDI: 000000002086b000 [ 1389.041560] RBP: 000000002086a500 R08: 0000000000000000 R09: ffffed101362ebff [ 1389.048833] R10: ffff88809b175fff R11: 0000000000000000 R12: ffff88809b175000 [ 1389.056113] R13: 00007ffffffff000 R14: 000000002086b500 R15: ffff8881a0227df0 [ 1389.063431] copyout+0x99/0xc0 [ 1389.066625] copy_page_to_iter+0x324/0xca0 [ 1389.070869] pipe_to_user+0xa8/0x160 [ 1389.074617] __splice_from_pipe+0x326/0x7a0 [ 1389.078953] ? iter_to_pipe+0x500/0x500 [ 1389.082931] vmsplice_to_user+0x190/0x1b0 [ 1389.087076] ? __splice_from_pipe+0x7a0/0x7a0 [ 1389.091567] ? lock_downgrade+0x740/0x740 [ 1389.095722] ? _raw_spin_unlock+0x29/0x40 [ 1389.099873] ? kcov_ioctl+0x4d/0x190 [ 1389.103589] ? lock_acquire+0x170/0x3f0 [ 1389.107569] ? lock_downgrade+0x740/0x740 [ 1389.111723] ? __fget+0x225/0x360 [ 1389.115187] SyS_vmsplice+0x12a/0x150 [ 1389.118993] ? splice_from_pipe+0x120/0x120 [ 1389.123335] do_syscall_64+0x1d5/0x640 [ 1389.127231] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1389.132435] RIP: 0033:0x4665f9 [ 1389.135862] RSP: 002b:00007fb4c70a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1389.143585] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 00000000004665f9 [ 1389.150977] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 1389.158251] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1389.165668] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1389.172947] R13: 00007fff8d5fa9ef R14: 00007fb4c70a2300 R15: 0000000000022000 [ 1389.207192] Mem-Info: [ 1389.233117] active_anon:1115521 inactive_anon:259591 isolated_anon:0 [ 1389.233117] active_file:209 inactive_file:222 isolated_file:32 [ 1389.233117] unevictable:20896 dirty:1 writeback:0 unstable:0 [ 1389.233117] slab_reclaimable:15482 slab_unreclaimable:133314 [ 1389.233117] mapped:48662 shmem:31512 pagetables:48988 bounce:0 [ 1389.233117] free:25192 free_pcp:101 free_cma:0 [ 1389.274266] Node 0 active_anon:1607984kB inactive_anon:326752kB active_file:444kB inactive_file:328kB unevictable:46708kB isolated(anon):0kB isolated(file):0kB mapped:151084kB dirty:4kB writeback:0kB shmem:90892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 671744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1389.311726] Node 1 active_anon:2854100kB inactive_anon:711612kB active_file:8kB inactive_file:4kB unevictable:36876kB isolated(anon):0kB isolated(file):0kB mapped:42564kB dirty:0kB writeback:0kB shmem:35156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1389.346321] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2268kB inactive_anon:2316kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1389.395888] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1389.404871] Node 0 DMA32 free:37520kB min:36200kB low:45248kB high:54296kB active_anon:1605716kB inactive_anon:324436kB active_file:140kB inactive_file:284kB unevictable:46708kB writepending:4kB present:3129332kB managed:2788128kB mlocked:46708kB kernel_stack:14432kB pagetables:72240kB bounce:0kB free_pcp:132kB local_pcp:108kB free_cma:0kB [ 1389.445016] lowmem_reserve[]: 0 0 0 0 0 [ 1389.450338] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1389.477526] lowmem_reserve[]: 0 0 0 0 0 [ 1389.482669] Node 1 Normal free:54784kB min:53696kB low:67120kB high:80544kB active_anon:2854100kB inactive_anon:711612kB active_file:4kB inactive_file:8kB unevictable:36876kB writepending:0kB present:4194304kB managed:4128256kB mlocked:36876kB kernel_stack:49536kB pagetables:123672kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1389.519558] lowmem_reserve[]: 0 0 0 0 0 [ 1389.524855] Node 0 DMA: 3*4kB (ME) 2*8kB (UE) 2*16kB (ME) 2*32kB (ME) 3*64kB (UME) 2*128kB (UE) 5*256kB (UMEH) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (M) 0*4096kB = 11068kB [ 1389.541905] Node 0 DMA32: 1356*4kB (UME) 305*8kB (UME) 196*16kB (UME) 91*32kB (UME) 140*64kB (UM) 12*128kB (U) 10*256kB (UM) 9*512kB (UM) 6*1024kB (U) 0*2048kB 0*4096kB = 37720kB [ 1389.570575] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1389.623398] Node 1 Normal: 207*4kB (UH) 236*8kB (UH) 476*16kB (UMH) 1326*32kB (UMH) 12*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53532kB [ 1389.687567] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1389.715912] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1389.774677] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1389.799366] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1389.812513] 35960 total pagecache pages [ 1389.817444] 0 pages in swap cache [ 1389.843107] Swap cache stats: add 0, delete 0, find 0/0 [ 1389.867114] Free swap = 0kB [ 1389.870294] Total swap = 0kB [ 1389.873675] 2097051 pages RAM [ 1389.876774] 0 pages HighMem/MovableOnly [ 1389.892682] 363849 pages reserved [ 1389.896222] 0 pages cma reserved [ 1389.904129] Out of memory (oom_kill_allocating_task): Kill process 983 (syz-executor.0) score 0 or sacrifice child [ 1389.924565] Killed process 985 (syz-executor.0) total-vm:93648kB, anon-rss:668kB, file-rss:35008kB, shmem-rss:0kB [ 1389.957092] oom_reaper: reaped process 985 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1389.990653] syz-executor.5 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1390.067048] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1390.082833] CPU: 0 PID: 981 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1390.090926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1390.100288] Call Trace: [ 1390.102901] dump_stack+0x1b2/0x281 [ 1390.106541] dump_header+0x178/0x82f [ 1390.110310] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1390.115603] ? ___ratelimit+0x2cd/0x530 [ 1390.119601] oom_kill_process.cold+0x10/0xa40 [ 1390.124126] out_of_memory+0xe3e/0x1190 [ 1390.128134] ? oom_killer_disable+0x1c0/0x1c0 [ 1390.132645] ? mutex_trylock+0x152/0x1a0 [ 1390.136830] __alloc_pages_nodemask+0x23e1/0x2720 [ 1390.141702] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1390.146581] ? trace_hardirqs_on+0x10/0x10 [ 1390.150838] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1390.155617] ? __lock_acquire+0x5fc/0x3f20 [ 1390.160044] alloc_pages_vma+0xd2/0x6d0 [ 1390.164071] __handle_mm_fault+0x25fa/0x4620 [ 1390.168506] ? lock_downgrade+0x740/0x740 [ 1390.172662] ? vm_insert_page+0x7c0/0x7c0 [ 1390.176999] ? do_raw_spin_unlock+0x164/0x220 [ 1390.181516] ? mark_held_locks+0xa6/0xf0 [ 1390.185591] handle_mm_fault+0x455/0x9c0 [ 1390.189666] __get_user_pages+0x4e9/0x1270 [ 1390.193918] ? follow_page_mask+0x18a0/0x18a0 [ 1390.198511] ? lock_acquire+0x170/0x3f0 [ 1390.202639] populate_vma_page_range+0x17b/0x210 [ 1390.207528] __mm_populate+0x195/0x2c0 [ 1390.211436] ? populate_vma_page_range+0x210/0x210 [ 1390.216385] ? security_capable+0x88/0xb0 [ 1390.220669] SyS_mlockall+0x3ff/0x520 [ 1390.224511] ? SyS_munlock+0xf0/0xf0 [ 1390.228250] do_syscall_64+0x1d5/0x640 [ 1390.232162] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1390.237531] RIP: 0033:0x4665f9 [ 1390.240724] RSP: 002b:00007f0c467ff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1390.248443] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1390.255887] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1390.263506] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1390.270810] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1390.278119] R13: 00007ffea58b6a9f R14: 00007f0c467ff300 R15: 0000000000022000 [ 1390.296569] Mem-Info: [ 1390.299045] active_anon:1113187 inactive_anon:259591 isolated_anon:0 [ 1390.299045] active_file:24 inactive_file:6 isolated_file:0 [ 1390.299045] unevictable:24248 dirty:0 writeback:0 unstable:0 [ 1390.299045] slab_reclaimable:15463 slab_unreclaimable:132943 [ 1390.299045] mapped:48324 shmem:31512 pagetables:48938 bounce:0 [ 1390.299045] free:25089 free_pcp:125 free_cma:0 [ 1390.417384] Node 0 active_anon:1603620kB inactive_anon:326752kB active_file:8kB inactive_file:0kB unevictable:54008kB isolated(anon):0kB isolated(file):0kB mapped:150684kB dirty:0kB writeback:0kB shmem:90892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 671744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1390.460431] Node 1 active_anon:2849128kB inactive_anon:711612kB active_file:76kB inactive_file:0kB unevictable:43184kB isolated(anon):0kB isolated(file):0kB mapped:42512kB dirty:0kB writeback:0kB shmem:35156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1390.505490] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2268kB inactive_anon:2316kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1390.547346] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1390.556604] Node 0 DMA32 free:36012kB min:36200kB low:45248kB high:54296kB active_anon:1601352kB inactive_anon:324436kB active_file:132kB inactive_file:0kB unevictable:54008kB writepending:0kB present:3129332kB managed:2788128kB mlocked:54008kB kernel_stack:14432kB pagetables:72140kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1390.600517] lowmem_reserve[]: 0 0 0 0 0 [ 1390.604567] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1390.640002] lowmem_reserve[]: 0 0 0 0 0 [ 1390.644064] Node 1 Normal free:53400kB min:53696kB low:67120kB high:80544kB active_anon:2849128kB inactive_anon:711612kB active_file:24kB inactive_file:0kB unevictable:42916kB writepending:0kB present:4194304kB managed:4128256kB mlocked:42916kB kernel_stack:49344kB pagetables:123576kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1390.683074] lowmem_reserve[]: 0 0 0 0 0 [ 1390.687133] Node 0 DMA: 3*4kB (ME) 2*8kB (UE) 2*16kB (ME) 2*32kB (ME) 3*64kB (UME) 2*128kB (UE) 5*256kB (UMEH) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (M) 0*4096kB = 11068kB [ 1390.710688] Node 0 DMA32: 1166*4kB (UME) 277*8kB (UME) 151*16kB (UME) 92*32kB (UME) 140*64kB (UM) 12*128kB (U) 10*256kB (UM) 9*512kB (UM) 6*1024kB (U) 0*2048kB 0*4096kB = 36048kB [ 1390.742281] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1390.766701] Node 1 Normal: 244*4kB (UMH) 292*8kB (UMH) 453*16kB (UMH) 1329*32kB (UMH) 12*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53856kB [ 1390.795513] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1390.818213] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1390.826850] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1390.849529] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1390.872705] 35995 total pagecache pages [ 1390.876849] 0 pages in swap cache [ 1390.887358] Swap cache stats: add 0, delete 0, find 0/0 [ 1390.897571] Free swap = 0kB [ 1390.914864] Total swap = 0kB [ 1390.924958] 2097051 pages RAM [ 1390.934853] 0 pages HighMem/MovableOnly [ 1390.946012] 363849 pages reserved [ 1390.956334] 0 pages cma reserved [ 1390.966581] Out of memory (oom_kill_allocating_task): Kill process 981 (syz-executor.5) score 0 or sacrifice child [ 1390.992147] Killed process 979 (syz-executor.5) total-vm:93252kB, anon-rss:11676kB, file-rss:39232kB, shmem-rss:0kB [ 1391.027156] oom_reaper: reaped process 979 (syz-executor.5), now anon-rss:11720kB, file-rss:5376kB, shmem-rss:0kB [ 1391.333474] systemd[1]: rsyslog.service: Unit entered failed state. [ 1391.397139] systemd[1]: rsyslog.service: Failed with result 'signal'. 20:33:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() 20:33:43 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) [ 1391.993666] systemd[1]: Started Journal Service. [ 1392.526657] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1392.538787] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1396.337039] IPVS: ftp: loaded support on port[0] = 21 [ 1397.928046] Bluetooth: hci3 command 0x0409 tx timeout [ 1400.008082] Bluetooth: hci3 command 0x041b tx timeout [ 1401.392842] (d-rfkill) invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1401.458843] (d-rfkill) cpuset=/ mems_allowed=0-1 [ 1401.477773] CPU: 1 PID: 1013 Comm: (d-rfkill) Not tainted 4.14.232-syzkaller #0 [ 1401.485384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1401.494856] Call Trace: [ 1401.497469] dump_stack+0x1b2/0x281 [ 1401.501121] dump_header+0x178/0x82f [ 1401.504844] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1401.509957] ? ___ratelimit+0x2cd/0x530 [ 1401.514142] oom_kill_process.cold+0x10/0xa40 [ 1401.518664] out_of_memory+0xe3e/0x1190 [ 1401.522655] ? oom_killer_disable+0x1c0/0x1c0 [ 1401.527160] ? mutex_trylock+0x152/0x1a0 [ 1401.531234] __alloc_pages_nodemask+0x23e1/0x2720 [ 1401.536111] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1401.540962] ? trace_hardirqs_on+0x10/0x10 [ 1401.545279] ? do_raw_spin_unlock+0x164/0x220 [ 1401.549855] ? kmem_cache_alloc+0x1e5/0x3c0 [ 1401.554473] ? cache_grow_begin+0x3f/0x700 [ 1401.558744] cache_grow_begin+0x91/0x700 [ 1401.562821] fallback_alloc+0x207/0x2c0 [ 1401.566920] kmem_cache_alloc+0x1e5/0x3c0 [ 1401.571079] getname_flags+0xc8/0x550 [ 1401.574995] ? up_read+0x17/0x30 [ 1401.578371] SyS_execve+0x21/0x50 [ 1401.581829] ? setup_new_exec+0x770/0x770 [ 1401.586006] do_syscall_64+0x1d5/0x640 [ 1401.589965] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1401.595170] RIP: 0033:0x7f46c48e3647 [ 1401.598898] RSP: 002b:00007fff30a40678 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1401.606623] RAX: ffffffffffffffda RBX: 000056163b5c1290 RCX: 00007f46c48e3647 [ 1401.614183] RDX: 000056163b634ab0 RSI: 000056163b6448d0 RDI: 000056163b533860 [ 1401.621727] RBP: 00007fff30a407e0 R08: 00007f46c4bc4b88 R09: 0000000000000030 [ 1401.629180] R10: 000056163b50c1c0 R11: 0000000000000246 R12: 000056163b50e398 [ 1401.638129] R13: 0000000000000000 R14: 000056163b6448d0 R15: 00007fff30a408c0 [ 1401.648911] Mem-Info: [ 1401.651360] active_anon:1113538 inactive_anon:266646 isolated_anon:0 [ 1401.651360] active_file:20 inactive_file:5 isolated_file:0 [ 1401.651360] unevictable:5120 dirty:0 writeback:0 unstable:0 [ 1401.651360] slab_reclaimable:15338 slab_unreclaimable:134828 [ 1401.651360] mapped:52614 shmem:31517 pagetables:48954 bounce:0 [ 1401.651360] free:26010 free_pcp:332 free_cma:0 [ 1401.696875] Node 0 active_anon:1603468kB inactive_anon:342608kB active_file:124kB inactive_file:0kB unevictable:20480kB isolated(anon):0kB isolated(file):0kB mapped:160160kB dirty:0kB writeback:0kB shmem:90888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 671744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1401.731060] Node 1 active_anon:2850684kB inactive_anon:723976kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:50396kB dirty:0kB writeback:0kB shmem:35180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1401.762584] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2268kB inactive_anon:2316kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1401.799694] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1401.804787] Node 0 DMA32 free:38800kB min:36200kB low:45248kB high:54296kB active_anon:1601200kB inactive_anon:340292kB active_file:24kB inactive_file:248kB unevictable:20480kB writepending:0kB present:3129332kB managed:2788128kB mlocked:20480kB kernel_stack:14464kB pagetables:71920kB bounce:0kB free_pcp:128kB local_pcp:0kB free_cma:0kB [ 1401.846501] lowmem_reserve[]: 0 0 0 0 0 [ 1401.851902] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1401.882209] lowmem_reserve[]: 0 0 0 0 0 [ 1401.886753] Node 1 Normal free:55112kB min:53696kB low:67120kB high:80544kB active_anon:2850684kB inactive_anon:723976kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:49568kB pagetables:123856kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1401.920945] lowmem_reserve[]: 0 0 0 0 0 [ 1401.929515] Node 0 DMA: 3*4kB (ME) 2*8kB (UE) 2*16kB (ME) 2*32kB (ME) 3*64kB (UME) 2*128kB (UE) 5*256kB (UMEH) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (M) 0*4096kB = 11068kB [ 1401.953330] Node 0 DMA32: 2365*4kB (ME) 1230*8kB (UME) 395*16kB (UME) 47*32kB (UME) 5*64kB (UM) 1*128kB (U) 2*256kB (UM) 9*512kB (UM) 6*1024kB (U) 0*2048kB 0*4096kB = 38836kB [ 1401.976572] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1401.988248] Node 1 Normal: 768*4kB (UMH) 2858*8kB (MH) 425*16kB (UMH) 683*32kB (UMH) 12*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55360kB [ 1402.005192] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1402.016105] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1402.025338] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1402.034926] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1402.044235] 31597 total pagecache pages [ 1402.048849] 0 pages in swap cache [ 1402.052918] Swap cache stats: add 0, delete 0, find 0/0 [ 1402.059930] Free swap = 0kB [ 1402.063573] Total swap = 0kB [ 1402.067470] 2097051 pages RAM [ 1402.071246] 0 pages HighMem/MovableOnly [ 1402.075738] 363849 pages reserved [ 1402.079783] 0 pages cma reserved [ 1402.083734] Out of memory (oom_kill_allocating_task): Kill process 1013 ((d-rfkill)) score 0 or sacrifice child [ 1402.095023] Bluetooth: hci3 command 0x040f tx timeout [ 1402.101860] Killed process 1013 ((d-rfkill)) total-vm:139500kB, anon-rss:2008kB, file-rss:0kB, shmem-rss:0kB [ 1402.117045] oom_reaper: reaped process 1013 ((d-rfkill)), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1402.878453] chnl_net:caif_netlink_parms(): no params data found [ 1403.116268] kworker/u4:1 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1403.133126] kworker/u4:1 cpuset=/ mems_allowed=0-1 [ 1403.138773] CPU: 0 PID: 22 Comm: kworker/u4:1 Not tainted 4.14.232-syzkaller #0 [ 1403.146219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1403.155692] Workqueue: events_unbound call_usermodehelper_exec_work [ 1403.162106] Call Trace: [ 1403.164694] dump_stack+0x1b2/0x281 [ 1403.168333] dump_header+0x178/0x82f [ 1403.172050] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1403.177161] ? ___ratelimit+0x2cd/0x530 [ 1403.181165] oom_kill_process.cold+0x10/0xa40 [ 1403.185669] ? lock_downgrade+0x740/0x740 [ 1403.189844] out_of_memory+0x2dc/0x1190 [ 1403.193881] ? oom_killer_disable+0x1c0/0x1c0 [ 1403.199354] ? mutex_trylock+0x152/0x1a0 [ 1403.203417] __alloc_pages_nodemask+0x23e1/0x2720 [ 1403.208370] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1403.213226] ? kmem_cache_alloc_node+0x38b/0x410 [ 1403.217998] copy_process.part.0+0x265/0x71c0 [ 1403.222514] ? __lock_acquire+0x5fc/0x3f20 [ 1403.226780] ? debug_object_activate+0x292/0x490 [ 1403.231558] ? static_obj+0x50/0x50 [ 1403.235190] ? lock_acquire+0x170/0x3f0 [ 1403.239169] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1403.244622] ? __cleanup_sighand+0x40/0x40 [ 1403.248852] ? mod_timer+0x4e7/0xf70 [ 1403.252563] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1403.258044] _do_fork+0x184/0xc80 [ 1403.261517] ? fork_idle+0x270/0x270 [ 1403.265258] ? lock_downgrade+0x740/0x740 [ 1403.269411] ? process_one_work+0x6c4/0x14a0 [ 1403.273821] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1403.279280] kernel_thread+0x2f/0x40 [ 1403.282999] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1403.288286] ? call_usermodehelper+0x80/0x80 [ 1403.292718] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1403.298173] process_one_work+0x793/0x14a0 [ 1403.302414] ? work_busy+0x320/0x320 [ 1403.306155] ? worker_thread+0x158/0xff0 [ 1403.310226] ? _raw_spin_unlock_irq+0x24/0x80 [ 1403.314744] worker_thread+0x5cc/0xff0 [ 1403.318650] ? rescuer_thread+0xc80/0xc80 [ 1403.322822] kthread+0x30d/0x420 [ 1403.326439] ? kthread_create_on_node+0xd0/0xd0 [ 1403.331132] ret_from_fork+0x24/0x30 [ 1403.340494] Mem-Info: [ 1403.342969] active_anon:1113470 inactive_anon:266646 isolated_anon:0 [ 1403.342969] active_file:81 inactive_file:77 isolated_file:18 [ 1403.342969] unevictable:5120 dirty:0 writeback:0 unstable:0 [ 1403.342969] slab_reclaimable:15324 slab_unreclaimable:134620 [ 1403.342969] mapped:52775 shmem:31517 pagetables:48921 bounce:0 [ 1403.342969] free:26483 free_pcp:11 free_cma:0 [ 1403.381997] Node 0 active_anon:1603404kB inactive_anon:342608kB active_file:296kB inactive_file:280kB unevictable:20480kB isolated(anon):0kB isolated(file):72kB mapped:160604kB dirty:0kB writeback:0kB shmem:90888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 671744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1403.414578] Node 1 active_anon:2850476kB inactive_anon:723976kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:50396kB dirty:0kB writeback:0kB shmem:35180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1403.445859] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2268kB inactive_anon:2316kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1403.476861] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1403.482347] Node 0 DMA32 free:39212kB min:36200kB low:45248kB high:54296kB active_anon:1601136kB inactive_anon:340292kB active_file:424kB inactive_file:624kB unevictable:20480kB writepending:0kB present:3129332kB managed:2788128kB mlocked:20480kB kernel_stack:14464kB pagetables:71920kB bounce:0kB free_pcp:208kB local_pcp:0kB free_cma:0kB [ 1403.516175] lowmem_reserve[]: 0 0 0 0 0 [ 1403.520261] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1403.549481] lowmem_reserve[]: 0 0 0 0 0 [ 1403.553727] Node 1 Normal free:55652kB min:53696kB low:67120kB high:80544kB active_anon:2850476kB inactive_anon:723976kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:49280kB pagetables:123724kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1403.587051] lowmem_reserve[]: 0 0 0 0 0 [ 1403.591106] Node 0 DMA: 3*4kB (ME) 2*8kB (UE) 2*16kB (ME) 2*32kB (ME) 3*64kB (UME) 2*128kB (UE) 5*256kB (UMEH) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (M) 0*4096kB = 11068kB [ 1403.611432] Node 0 DMA32: 2216*4kB (UME) 1398*8kB (UMEH) 393*16kB (UME) 49*32kB (UMEH) 6*64kB (UMH) 0*128kB 2*256kB (UM) 9*512kB (UM) 6*1024kB (U) 0*2048kB 0*4096kB = 39552kB [ 1403.627436] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1403.641928] Node 1 Normal: 847*4kB (UMH) 2865*8kB (MH) 424*16kB (MH) 681*32kB (UMH) 12*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55652kB [ 1403.656707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1403.670470] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1403.680749] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1403.692690] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1403.703044] 31634 total pagecache pages [ 1403.707526] 0 pages in swap cache [ 1403.715002] Swap cache stats: add 0, delete 0, find 0/0 [ 1403.722847] Free swap = 0kB [ 1403.726509] Total swap = 0kB [ 1403.733387] 2097051 pages RAM [ 1403.737211] 0 pages HighMem/MovableOnly [ 1403.743628] 363849 pages reserved [ 1403.747602] 0 pages cma reserved [ 1403.754912] Out of memory: Kill process 30637 (syz-executor.3) score 1009 or sacrifice child [ 1403.766254] Killed process 30637 (syz-executor.3) total-vm:93648kB, anon-rss:36780kB, file-rss:34628kB, shmem-rss:0kB [ 1404.168039] Bluetooth: hci3 command 0x0419 tx timeout [ 1409.087468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.100742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.738742] device bridge_slave_0 entered promiscuous mode [ 1409.753203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.762562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.772806] device bridge_slave_1 entered promiscuous mode [ 1411.313816] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1411.334934] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1412.162362] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1412.173924] team0: Port device team_slave_0 added [ 1412.186248] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1412.196123] team0: Port device team_slave_1 added [ 1412.989549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1412.995853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1413.101699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1413.448663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1413.455280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1413.492892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1413.513672] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1413.525893] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1413.565761] device hsr_slave_0 entered promiscuous mode [ 1413.572238] device hsr_slave_1 entered promiscuous mode [ 1413.580316] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1413.587965] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1414.353462] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1414.441433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1414.461509] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1414.479037] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1414.485366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1414.494278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1414.695276] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1414.702113] 8021q: adding VLAN 0 to HW filter on device team0 [ 1414.712068] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1414.719716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1414.727691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1414.736760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1414.743853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1414.758373] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1414.773485] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1414.780971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1414.792464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1414.800844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1414.815235] bridge0: port 2(bridge_slave_1) entered blocking state [ 1414.822134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1414.833915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1414.844408] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1414.856550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1414.873681] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1414.881144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1414.896882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1414.910913] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1414.922408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1414.930556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1414.942537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1414.953865] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1414.965170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1414.973664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1414.989162] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1414.997509] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1415.012487] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1415.019352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1415.026893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1415.039296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1415.053596] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1415.072316] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1415.082919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1415.091910] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1415.134266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1415.377718] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1415.392758] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1415.402782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1415.414596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1415.527908] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1415.542056] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1415.552715] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1415.567893] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1415.581073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1415.590891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1415.604938] device veth0_vlan entered promiscuous mode [ 1415.615839] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1415.627408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1415.644076] device veth1_vlan entered promiscuous mode [ 1415.650542] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1415.661081] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1415.676152] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1415.689089] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1415.696209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1415.704603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1415.712719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1415.721986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1415.733601] device veth0_macvtap entered promiscuous mode [ 1415.742588] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1415.755801] device veth1_macvtap entered promiscuous mode [ 1415.763342] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1415.774258] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1415.787013] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1415.796760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1415.809354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.822377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1415.833680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.847261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1415.863604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.873791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1415.888570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.897840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1415.912859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.923905] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1415.936944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1415.945729] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1415.958237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1415.965662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1415.980159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1415.996636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1416.008018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.023950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1416.034852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.049101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1416.061910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.073662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1416.086713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.100848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1416.112431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.126600] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1416.136980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1416.147774] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1416.157847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1416.493316] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1416.507157] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:34:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() 20:34:08 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:34:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() 20:34:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) [ 1417.217470] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1417.228287] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1417.269254] syz-executor.1 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1417.294050] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1417.312117] CPU: 0 PID: 11808 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1417.320055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1417.330408] Call Trace: [ 1417.333001] dump_stack+0x1b2/0x281 [ 1417.336834] dump_header+0x178/0x82f [ 1417.340736] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1417.345890] ? ___ratelimit+0x2cd/0x530 [ 1417.350913] oom_kill_process.cold+0x10/0xa40 [ 1417.355504] out_of_memory+0xe3e/0x1190 [ 1417.360299] ? oom_killer_disable+0x1c0/0x1c0 [ 1417.365314] ? mutex_trylock+0x152/0x1a0 [ 1417.369396] __alloc_pages_nodemask+0x23e1/0x2720 [ 1417.374271] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1417.379241] ? trace_hardirqs_on+0x10/0x10 [ 1417.383492] ? reacquire_held_locks+0xb5/0x3f0 [ 1417.388266] ? kmem_cache_alloc_node+0xe3/0x410 [ 1417.393264] ? cache_grow_begin+0x3f/0x700 [ 1417.397526] cache_grow_begin+0x91/0x700 [ 1417.401719] fallback_alloc+0x207/0x2c0 [ 1417.405982] kmem_cache_alloc_node+0xe3/0x410 [ 1417.410514] copy_process.part.0+0x17d3/0x71c0 [ 1417.415106] ? lock_downgrade+0x740/0x740 [ 1417.419462] ? do_raw_spin_unlock+0x164/0x220 [ 1417.424068] ? _raw_spin_unlock+0x29/0x40 [ 1417.430097] ? do_fault_around+0x35e/0x620 [ 1417.435008] ? __handle_mm_fault+0x80f/0x4620 [ 1417.439706] ? __cleanup_sighand+0x40/0x40 [ 1417.443955] ? __fsnotify_inode_delete+0x20/0x20 [ 1417.448757] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1417.455438] _do_fork+0x184/0xc80 [ 1417.458954] ? fork_idle+0x270/0x270 [ 1417.462684] ? up_read+0x17/0x30 [ 1417.466064] ? __do_page_fault+0x159/0xad0 [ 1417.470683] ? do_syscall_64+0x4c/0x640 [ 1417.475119] ? sys_vfork+0x20/0x20 [ 1417.478672] do_syscall_64+0x1d5/0x640 [ 1417.482613] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1417.488126] RIP: 0033:0x464beb [ 1417.491330] RSP: 002b:00007ffe83d6f050 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1417.499537] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000464beb [ 1417.506916] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1417.514408] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000002afa400 [ 1417.521687] R10: 0000000002afa6d0 R11: 0000000000000246 R12: 0000000000000001 [ 1417.529396] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe83d6f140 [ 1417.540094] Mem-Info: [ 1417.542620] active_anon:1113526 inactive_anon:264138 isolated_anon:0 [ 1417.542620] active_file:28 inactive_file:64 isolated_file:30 [ 1417.542620] unevictable:9653 dirty:23 writeback:3 unstable:0 [ 1417.542620] slab_reclaimable:15368 slab_unreclaimable:133072 [ 1417.542620] mapped:55126 shmem:31516 pagetables:48991 bounce:0 [ 1417.542620] free:25985 free_pcp:6 free_cma:0 [ 1417.582667] Node 0 active_anon:1603992kB inactive_anon:342600kB active_file:0kB inactive_file:0kB unevictable:36740kB isolated(anon):0kB isolated(file):0kB mapped:169808kB dirty:88kB writeback:12kB shmem:90888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 671744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1417.626732] Node 1 active_anon:2850112kB inactive_anon:713952kB active_file:4kB inactive_file:8kB unevictable:1872kB isolated(anon):0kB isolated(file):0kB mapped:50396kB dirty:4kB writeback:0kB shmem:35176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1417.660007] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2268kB inactive_anon:2316kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1417.689194] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1417.694450] Node 0 DMA32 free:36296kB min:36200kB low:45248kB high:54296kB active_anon:1601724kB inactive_anon:340284kB active_file:224kB inactive_file:104kB unevictable:38860kB writepending:100kB present:3129332kB managed:2788128kB mlocked:38860kB kernel_stack:14720kB pagetables:72356kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1417.738831] lowmem_reserve[]: 0 0 0 0 0 [ 1417.742942] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1417.782184] lowmem_reserve[]: 0 0 0 0 0 [ 1417.786232] Node 1 Normal free:53460kB min:53696kB low:67120kB high:80544kB active_anon:2850112kB inactive_anon:713952kB active_file:8kB inactive_file:0kB unevictable:1872kB writepending:4kB present:4194304kB managed:4128256kB mlocked:1872kB kernel_stack:49248kB pagetables:123568kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1417.824519] lowmem_reserve[]: 0 0 0 0 0 [ 1417.828600] Node 0 DMA: 3*4kB (ME) 2*8kB (UE) 2*16kB (ME) 2*32kB (ME) 3*64kB (UME) 2*128kB (UE) 5*256kB (UMEH) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (M) 0*4096kB = 11068kB [ 1417.850061] Node 0 DMA32: 642*4kB (UME) 351*8kB (UME) 793*16kB (UME) 200*32kB (UME) 8*64kB (UM) 0*128kB 2*256kB (UM) 9*512kB (UM) 6*1024kB (U) 0*2048kB 0*4096kB = 36240kB [ 1417.872996] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1417.883975] Node 1 Normal: 357*4kB (UMH) 2767*8kB (UMH) 891*16kB (UMH) 476*32kB (UMH) 7*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53500kB [ 1417.910613] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1417.927036] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1417.947895] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1417.957448] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1417.985340] 33937 total pagecache pages [ 1417.994179] 0 pages in swap cache [ 1417.997671] Swap cache stats: add 0, delete 0, find 0/0 [ 1418.013287] Free swap = 0kB [ 1418.017064] Total swap = 0kB [ 1418.021656] 2097051 pages RAM [ 1418.025771] 0 pages HighMem/MovableOnly [ 1418.031848] 363849 pages reserved [ 1418.035879] 0 pages cma reserved [ 1418.039757] Out of memory (oom_kill_allocating_task): Kill process 11808 (syz-executor.1) score 0 or sacrifice child [ 1418.054604] Killed process 405 (syz-executor.1) total-vm:93516kB, anon-rss:36776kB, file-rss:34632kB, shmem-rss:0kB [ 1418.099838] syz-executor.1 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1418.113109] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1418.118625] CPU: 0 PID: 11808 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1418.126762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1418.136183] Call Trace: [ 1418.138783] dump_stack+0x1b2/0x281 [ 1418.142495] dump_header+0x178/0x82f [ 1418.146209] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1418.151318] ? ___ratelimit+0x2cd/0x530 [ 1418.155310] oom_kill_process.cold+0x10/0xa40 [ 1418.159829] out_of_memory+0xe3e/0x1190 [ 1418.163834] ? oom_killer_disable+0x1c0/0x1c0 [ 1418.168381] ? mutex_trylock+0x152/0x1a0 [ 1418.172473] __alloc_pages_nodemask+0x23e1/0x2720 [ 1418.177357] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1418.182214] ? trace_hardirqs_on+0x10/0x10 [ 1418.186482] ? reacquire_held_locks+0xb5/0x3f0 [ 1418.191292] ? kmem_cache_alloc_node+0xe3/0x410 [ 1418.195992] ? cache_grow_begin+0x3f/0x700 [ 1418.200472] cache_grow_begin+0x91/0x700 [ 1418.204548] fallback_alloc+0x207/0x2c0 [ 1418.208541] kmem_cache_alloc_node+0xe3/0x410 [ 1418.213082] copy_process.part.0+0x17d3/0x71c0 [ 1418.217689] ? lock_downgrade+0x740/0x740 [ 1418.221844] ? do_raw_spin_unlock+0x164/0x220 [ 1418.226347] ? _raw_spin_unlock+0x29/0x40 [ 1418.230508] ? do_fault_around+0x35e/0x620 [ 1418.234787] ? __handle_mm_fault+0x80f/0x4620 [ 1418.239298] ? __cleanup_sighand+0x40/0x40 [ 1418.243657] ? __fsnotify_inode_delete+0x20/0x20 [ 1418.248531] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1418.255217] _do_fork+0x184/0xc80 [ 1418.258688] ? fork_idle+0x270/0x270 [ 1418.262421] ? up_read+0x17/0x30 [ 1418.265794] ? __do_page_fault+0x159/0xad0 [ 1418.270038] ? do_syscall_64+0x4c/0x640 [ 1418.274021] ? sys_vfork+0x20/0x20 [ 1418.277565] do_syscall_64+0x1d5/0x640 [ 1418.281461] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1418.286665] RIP: 0033:0x464beb [ 1418.289854] RSP: 002b:00007ffe83d6f050 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1418.297564] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000464beb [ 1418.304922] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1418.312213] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000002afa400 [ 1418.319614] R10: 0000000002afa6d0 R11: 0000000000000246 R12: 0000000000000001 [ 1418.327220] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe83d6f140 [ 1418.339535] Mem-Info: [ 1418.342057] active_anon:1113524 inactive_anon:263781 isolated_anon:0 [ 1418.342057] active_file:13 inactive_file:13 isolated_file:0 [ 1418.342057] unevictable:10868 dirty:0 writeback:0 unstable:0 [ 1418.342057] slab_reclaimable:15368 slab_unreclaimable:133044 [ 1418.342057] mapped:55040 shmem:31516 pagetables:48954 bounce:0 [ 1418.342057] free:25299 free_pcp:59 free_cma:0 [ 1418.384321] Node 0 active_anon:1603992kB inactive_anon:342600kB active_file:44kB inactive_file:44kB unevictable:40464kB isolated(anon):0kB isolated(file):0kB mapped:169764kB dirty:0kB writeback:0kB shmem:90888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 671744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1418.420558] Node 1 active_anon:2850104kB inactive_anon:712524kB active_file:8kB inactive_file:108kB unevictable:3408kB isolated(anon):0kB isolated(file):0kB mapped:50396kB dirty:0kB writeback:0kB shmem:35176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1418.463282] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2268kB inactive_anon:2316kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1418.499880] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1418.505054] Node 0 DMA32 free:35920kB min:36200kB low:45248kB high:54296kB active_anon:1601724kB inactive_anon:340284kB active_file:44kB inactive_file:44kB unevictable:40464kB writepending:0kB present:3129332kB managed:2788128kB mlocked:40464kB kernel_stack:14656kB pagetables:72368kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1418.554171] lowmem_reserve[]: 0 0 0 0 0 [ 1418.576126] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1418.653787] lowmem_reserve[]: 0 0 0 0 0 [ 1418.657948] Node 1 Normal free:53128kB min:53696kB low:67120kB high:80544kB active_anon:2850104kB inactive_anon:712524kB active_file:4kB inactive_file:164kB unevictable:3432kB writepending:0kB present:4194304kB managed:4128256kB mlocked:3432kB kernel_stack:49216kB pagetables:123412kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1418.692552] lowmem_reserve[]: 0 0 0 0 0 [ 1418.696822] Node 0 DMA: 3*4kB (ME) 2*8kB (UE) 2*16kB (ME) 2*32kB (ME) 3*64kB (UME) 2*128kB (UE) 5*256kB (UMEH) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (M) 0*4096kB = 11068kB [ 1418.721329] Node 0 DMA32: 651*4kB (UME) 361*8kB (UME) 776*16kB (UME) 202*32kB (UME) 8*64kB (UM) 0*128kB 2*256kB (UM) 9*512kB (UM) 6*1024kB (U) 0*2048kB 0*4096kB = 36148kB [ 1418.753882] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1418.773506] Node 1 Normal: 167*4kB (UMH) 2702*8kB (UMH) 896*16kB (UMH) 515*32kB (UMH) 8*64kB (MH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53612kB [ 1418.806655] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1418.820492] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1418.844012] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1418.866546] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1418.891527] 33935 total pagecache pages [ 1418.895661] 0 pages in swap cache [ 1418.913184] Swap cache stats: add 0, delete 0, find 0/0 [ 1418.926517] Free swap = 0kB [ 1418.936408] Total swap = 0kB [ 1418.946389] 2097051 pages RAM [ 1418.956401] 0 pages HighMem/MovableOnly [ 1418.967619] 363849 pages reserved [ 1418.987088] 0 pages cma reserved [ 1418.996773] Out of memory (oom_kill_allocating_task): Kill process 11808 (syz-executor.1) score 0 or sacrifice child [ 1419.036243] Killed process 30991 (syz-executor.1) total-vm:93516kB, anon-rss:36776kB, file-rss:34628kB, shmem-rss:0kB [ 1419.105695] oom_reaper: reaped process 30991 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1419.127560] syz-executor.2 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=1000 [ 1419.147517] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1419.170571] CPU: 1 PID: 1250 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1419.179032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1419.189175] Call Trace: [ 1419.191843] dump_stack+0x1b2/0x281 [ 1419.195486] dump_header+0x178/0x82f [ 1419.199572] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1419.205478] ? ___ratelimit+0x2cd/0x530 [ 1419.209493] oom_kill_process.cold+0x10/0xa40 [ 1419.214248] out_of_memory+0xe3e/0x1190 [ 1419.218263] ? oom_killer_disable+0x1c0/0x1c0 [ 1419.222794] ? mutex_trylock+0x152/0x1a0 [ 1419.226865] __alloc_pages_nodemask+0x23e1/0x2720 [ 1419.231758] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1419.237664] ? trace_hardirqs_on+0x10/0x10 [ 1419.241927] ? kmem_cache_alloc_node+0xe3/0x410 [ 1419.246601] ? cache_grow_begin+0x3f/0x700 [ 1419.250848] cache_grow_begin+0x91/0x700 [ 1419.254928] fallback_alloc+0x207/0x2c0 [ 1419.258932] kmem_cache_alloc_node+0xe3/0x410 [ 1419.263460] copy_process.part.0+0x17d3/0x71c0 [ 1419.268231] ? __handle_mm_fault+0x2095/0x4620 [ 1419.272833] ? lock_downgrade+0x740/0x740 [ 1419.277023] ? __lru_cache_add+0x178/0x250 [ 1419.281295] ? do_raw_spin_unlock+0x164/0x220 [ 1419.285797] ? _raw_spin_unlock+0x29/0x40 [ 1419.289951] ? __handle_mm_fault+0x80f/0x4620 [ 1419.294500] ? __cleanup_sighand+0x40/0x40 [ 1419.298775] _do_fork+0x184/0xc80 [ 1419.302257] ? fork_idle+0x270/0x270 [ 1419.306221] ? up_read+0x17/0x30 [ 1419.309595] ? __do_page_fault+0x159/0xad0 [ 1419.314402] ? do_syscall_64+0x4c/0x640 [ 1419.318576] ? sys_vfork+0x20/0x20 [ 1419.322119] do_syscall_64+0x1d5/0x640 [ 1419.326020] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1419.331264] RIP: 0033:0x467a21 [ 1419.335159] RSP: 002b:00007fff51ed82e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1419.343118] RAX: ffffffffffffffda RBX: 00007f6699bf0700 RCX: 0000000000467a21 [ 1419.350483] RDX: 00007f6699bf09d0 RSI: 00007f6699bf02f0 RDI: 00000000003d0f00 [ 1419.357754] RBP: 00007fff51ed8520 R08: 00007f6699bf0700 R09: 00007f6699bf0700 [ 1419.365040] R10: 00007f6699bf09d0 R11: 0000000000000206 R12: 00007fff51ed839e [ 1419.372411] R13: 00007fff51ed839f R14: 00007f6699bf0300 R15: 0000000000022000 [ 1419.388751] Mem-Info: [ 1419.391555] active_anon:1113513 inactive_anon:263782 isolated_anon:0 [ 1419.391555] active_file:725 inactive_file:416 isolated_file:27 [ 1419.391555] unevictable:9342 dirty:0 writeback:0 unstable:0 [ 1419.391555] slab_reclaimable:15368 slab_unreclaimable:133051 [ 1419.391555] mapped:54055 shmem:31516 pagetables:48890 bounce:0 [ 1419.391555] free:25595 free_pcp:242 free_cma:0 [ 1419.508164] Node 0 active_anon:1603948kB inactive_anon:342604kB active_file:192kB inactive_file:48kB unevictable:38736kB isolated(anon):0kB isolated(file):8kB mapped:165724kB dirty:0kB writeback:0kB shmem:90888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 671744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1419.537647] Node 1 active_anon:2850104kB inactive_anon:712524kB active_file:84kB inactive_file:72kB unevictable:3132kB isolated(anon):0kB isolated(file):0kB mapped:50416kB dirty:4kB writeback:0kB shmem:35176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1419.565514] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2268kB inactive_anon:2316kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1419.592386] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1419.597438] Node 0 DMA32 free:37092kB min:36200kB low:45248kB high:54296kB active_anon:1601680kB inactive_anon:340288kB active_file:336kB inactive_file:504kB unevictable:38460kB writepending:4kB present:3129332kB managed:2788128kB mlocked:38460kB kernel_stack:14592kB pagetables:72112kB bounce:0kB free_pcp:196kB local_pcp:80kB free_cma:0kB [ 1419.634564] lowmem_reserve[]: 0 0 0 0 0 [ 1419.639343] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1419.675610] lowmem_reserve[]: 0 0 0 0 0 [ 1419.680541] Node 1 Normal free:53400kB min:53696kB low:67120kB high:80544kB active_anon:2850104kB inactive_anon:712524kB active_file:84kB inactive_file:180kB unevictable:3132kB writepending:0kB present:4194304kB managed:4128256kB mlocked:3132kB kernel_stack:49216kB pagetables:123408kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1419.711584] lowmem_reserve[]: 0 0 0 0 0 [ 1419.716119] Node 0 DMA: 3*4kB (ME) 2*8kB (UE) 2*16kB (ME) 2*32kB (ME) 3*64kB (UME) 2*128kB (UE) 5*256kB (UMEH) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (M) 0*4096kB = 11068kB [ 1419.742392] Node 0 DMA32: 764*4kB (UME) 378*8kB (UME) 775*16kB (UME) 205*32kB (UME) 8*64kB (UM) 0*128kB 2*256kB (UM) 9*512kB (UM) 6*1024kB (U) 0*2048kB 0*4096kB = 36816kB [ 1419.775369] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1419.797869] Node 1 Normal: 165*4kB (UMH) 2668*8kB (UMH) 896*16kB (UMH) 515*32kB (UMH) 8*64kB (MH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53332kB [ 1419.818993] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1419.833204] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1419.845605] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1419.855392] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1419.866048] 32888 total pagecache pages [ 1419.870174] 0 pages in swap cache [ 1419.873644] Swap cache stats: add 0, delete 0, find 0/0 [ 1419.879077] Free swap = 0kB [ 1419.882115] Total swap = 0kB [ 1419.885135] 2097051 pages RAM [ 1419.888324] 0 pages HighMem/MovableOnly [ 1419.892297] 363849 pages reserved [ 1419.895765] 0 pages cma reserved [ 1419.908165] Out of memory (oom_kill_allocating_task): Kill process 1250 (syz-executor.2) score 0 or sacrifice child [ 1419.926610] Killed process 1250 (syz-executor.2) total-vm:93384kB, anon-rss:116kB, file-rss:34752kB, shmem-rss:0kB [ 1419.949634] oom_reaper: reaped process 1250 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1419.960510] syz-executor.2 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1419.987812] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1419.994304] CPU: 1 PID: 1007 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1420.002127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1420.011490] Call Trace: [ 1420.014072] dump_stack+0x1b2/0x281 [ 1420.017777] dump_header+0x178/0x82f [ 1420.021532] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1420.026669] ? ___ratelimit+0x2cd/0x530 [ 1420.030643] oom_kill_process.cold+0x10/0xa40 [ 1420.035317] out_of_memory+0xe3e/0x1190 [ 1420.039330] ? oom_killer_disable+0x1c0/0x1c0 [ 1420.043867] ? mutex_trylock+0x152/0x1a0 [ 1420.047936] __alloc_pages_nodemask+0x23e1/0x2720 [ 1420.053078] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1420.057930] ? trace_hardirqs_on+0x10/0x10 [ 1420.062161] ? kmem_cache_alloc+0x1e5/0x3c0 [ 1420.066484] ? cache_grow_begin+0x3f/0x700 [ 1420.070865] cache_grow_begin+0x91/0x700 [ 1420.074997] fallback_alloc+0x207/0x2c0 [ 1420.078996] kmem_cache_alloc+0x1e5/0x3c0 [ 1420.083149] getname_flags+0xc8/0x550 [ 1420.087039] ? timespec_trunc+0x120/0x120 [ 1420.091310] do_sys_open+0x1ce/0x410 [ 1420.095029] ? filp_open+0x60/0x60 [ 1420.098562] ? __do_page_fault+0x159/0xad0 [ 1420.102842] ? do_syscall_64+0x4c/0x640 [ 1420.108184] ? SyS_open+0x30/0x30 [ 1420.111889] do_syscall_64+0x1d5/0x640 [ 1420.115893] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1420.121148] RIP: 0033:0x466138 [ 1420.124329] RSP: 002b:00007fff51ed8580 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 1420.132406] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000466138 [ 1420.139674] RDX: 0000000000090800 RSI: 00000000004bebe2 RDI: 00000000ffffff9c [ 1420.146977] RBP: 00007fff51ed865c R08: 0000000000090800 R09: 00000000004bebe2 [ 1420.154246] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 [ 1420.161608] R13: 0000000000159fbe R14: 0000000000000002 R15: 00007fff51ed86c0 [ 1420.176397] Mem-Info: [ 1420.196858] active_anon:1113480 inactive_anon:263758 isolated_anon:0 [ 1420.196858] active_file:39 inactive_file:0 isolated_file:0 [ 1420.196858] unevictable:11264 dirty:0 writeback:0 unstable:0 [ 1420.196858] slab_reclaimable:15374 slab_unreclaimable:133043 [ 1420.196858] mapped:54004 shmem:31516 pagetables:48861 bounce:0 [ 1420.196858] free:25108 free_pcp:121 free_cma:0 [ 1420.243088] Node 0 active_anon:1603824kB inactive_anon:342508kB active_file:0kB inactive_file:84kB unevictable:41036kB isolated(anon):0kB isolated(file):0kB mapped:165620kB dirty:0kB writeback:0kB shmem:90888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 671744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1420.276431] Node 1 active_anon:2850096kB inactive_anon:712524kB active_file:0kB inactive_file:20kB unevictable:4020kB isolated(anon):0kB isolated(file):0kB mapped:50396kB dirty:0kB writeback:0kB shmem:35176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1420.322304] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2268kB inactive_anon:2316kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1420.357646] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1420.377792] Node 0 DMA32 free:35884kB min:36200kB low:45248kB high:54296kB active_anon:1601556kB inactive_anon:340192kB active_file:80kB inactive_file:24kB unevictable:41036kB writepending:0kB present:3129332kB managed:2788128kB mlocked:41036kB kernel_stack:14496kB pagetables:71988kB bounce:0kB free_pcp:476kB local_pcp:112kB free_cma:0kB [ 1420.424675] lowmem_reserve[]: 0 0 0 0 0 [ 1420.433836] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1420.465222] lowmem_reserve[]: 0 0 0 0 0 [ 1420.469328] Node 1 Normal free:53552kB min:53696kB low:67120kB high:80544kB active_anon:2850096kB inactive_anon:712524kB active_file:4kB inactive_file:4kB unevictable:4020kB writepending:0kB present:4194304kB managed:4128256kB mlocked:4020kB kernel_stack:49216kB pagetables:123416kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1420.501643] lowmem_reserve[]: 0 0 0 0 0 [ 1420.505786] Node 0 DMA: 3*4kB (ME) 2*8kB (UE) 2*16kB (ME) 2*32kB (ME) 3*64kB (UME) 2*128kB (UE) 5*256kB (UMEH) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (M) 0*4096kB = 11068kB [ 1420.523662] Node 0 DMA32: 603*4kB (ME) 362*8kB (UE) 761*16kB (UME) 207*32kB (UME) 8*64kB (UM) 0*128kB 2*256kB (UM) 9*512kB (UM) 6*1024kB (U) 0*2048kB 0*4096kB = 35884kB [ 1420.541426] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1420.552535] Node 1 Normal: 182*4kB (UMH) 2671*8kB (UMH) 900*16kB (UMH) 517*32kB (UMH) 8*64kB (MH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53552kB [ 1420.568736] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1420.577593] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1420.586293] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1420.596653] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1420.611412] 32888 total pagecache pages [ 1420.615495] 0 pages in swap cache [ 1420.619168] Swap cache stats: add 0, delete 0, find 0/0 [ 1420.624924] Free swap = 0kB [ 1420.627934] Total swap = 0kB [ 1420.640647] 2097051 pages RAM [ 1420.643781] 0 pages HighMem/MovableOnly [ 1420.647753] 363849 pages reserved [ 1420.653928] 0 pages cma reserved [ 1420.657555] Out of memory (oom_kill_allocating_task): Kill process 1007 (syz-executor.2) score 0 or sacrifice child [ 1420.684774] Killed process 1007 (syz-executor.2) total-vm:93120kB, anon-rss:112kB, file-rss:35128kB, shmem-rss:0kB [ 1420.725597] oom_reaper: reaped process 1007 (syz-executor.2), now anon-rss:0kB, file-rss:64kB, shmem-rss:0kB [ 1420.738057] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1420.806590] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1420.837901] CPU: 0 PID: 642 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1420.845665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1420.855028] Call Trace: [ 1420.857763] dump_stack+0x1b2/0x281 [ 1420.861398] dump_header+0x178/0x82f [ 1420.865117] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1420.870223] ? ___ratelimit+0x2cd/0x530 [ 1420.874201] oom_kill_process.cold+0x10/0xa40 [ 1420.878706] out_of_memory+0xe3e/0x1190 [ 1420.882683] ? oom_killer_disable+0x1c0/0x1c0 [ 1420.887176] ? mutex_trylock+0x152/0x1a0 [ 1420.891240] __alloc_pages_nodemask+0x23e1/0x2720 [ 1420.896108] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1420.900966] ? trace_hardirqs_on+0x10/0x10 [ 1420.905228] ? do_raw_spin_unlock+0x164/0x220 [ 1420.909734] ? kmem_cache_alloc+0x1e5/0x3c0 [ 1420.914088] ? cache_grow_begin+0x3f/0x700 [ 1420.918450] cache_grow_begin+0x91/0x700 [ 1420.922551] fallback_alloc+0x207/0x2c0 [ 1420.926856] kmem_cache_alloc+0x1e5/0x3c0 [ 1420.931012] getname_flags+0xc8/0x550 [ 1420.934837] SyS_mkdirat+0x83/0x270 [ 1420.938466] ? SyS_mknod+0x30/0x30 [ 1420.942010] ? __do_page_fault+0x159/0xad0 [ 1420.946783] ? do_syscall_64+0x4c/0x640 [ 1420.950782] ? SyS_mkdirat+0x270/0x270 [ 1420.954674] do_syscall_64+0x1d5/0x640 [ 1420.958568] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1420.963779] RIP: 0033:0x465707 [ 1420.966983] RSP: 002b:00007ffc2c71aa58 EFLAGS: 00000202 ORIG_RAX: 0000000000000053 [ 1420.974701] RAX: ffffffffffffffda RBX: 00007ffc2c71aaf0 RCX: 0000000000465707 [ 1420.981974] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffc2c71aaf0 [ 1420.989273] RBP: 00007ffc2c71aacc R08: 0000000000000000 R09: 0000000000000003 [ 1420.996556] R10: 00007ffc2c71a7f7 R11: 0000000000000202 R12: 0000000000000032 [ 1421.003839] R13: 000000000015a331 R14: 0000000000000007 R15: 00007ffc2c71ab30 [ 1421.037660] Mem-Info: [ 1421.069012] active_anon:1113458 inactive_anon:263758 isolated_anon:0 [ 1421.069012] active_file:29 inactive_file:0 isolated_file:0 [ 1421.069012] unevictable:11264 dirty:0 writeback:0 unstable:0 [ 1421.069012] slab_reclaimable:15374 slab_unreclaimable:133038 [ 1421.069012] mapped:54004 shmem:31516 pagetables:48838 bounce:0 [ 1421.069012] free:25124 free_pcp:161 free_cma:0 [ 1421.078717] syz-executor.2 (1007) used greatest stack depth: 23256 bytes left [ 1421.171894] Node 0 active_anon:1603736kB inactive_anon:342508kB active_file:112kB inactive_file:0kB unevictable:41036kB isolated(anon):0kB isolated(file):0kB mapped:165620kB dirty:0kB writeback:0kB shmem:90888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 671744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1421.237850] Node 1 active_anon:2850096kB inactive_anon:712524kB active_file:4kB inactive_file:4kB unevictable:4020kB isolated(anon):0kB isolated(file):0kB mapped:50396kB dirty:0kB writeback:0kB shmem:35176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1421.297018] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2268kB inactive_anon:2316kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1421.358250] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1421.363357] Node 0 DMA32 free:35876kB min:36200kB low:45248kB high:54296kB active_anon:1601468kB inactive_anon:340192kB active_file:112kB inactive_file:0kB unevictable:41036kB writepending:0kB present:3129332kB managed:2788128kB mlocked:41036kB kernel_stack:14496kB pagetables:71984kB bounce:0kB free_pcp:504kB local_pcp:88kB free_cma:0kB [ 1421.417928] lowmem_reserve[]: 0 0 0 0 0 [ 1421.447468] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1421.496744] lowmem_reserve[]: 0 0 0 0 0 [ 1421.537741] Node 1 Normal free:53552kB min:53696kB low:67120kB high:80544kB active_anon:2850096kB inactive_anon:712524kB active_file:4kB inactive_file:4kB unevictable:4020kB writepending:0kB present:4194304kB managed:4128256kB mlocked:4020kB kernel_stack:49184kB pagetables:123328kB bounce:0kB free_pcp:112kB local_pcp:0kB free_cma:0kB [ 1421.584538] lowmem_reserve[]: 0 0 0 0 0 [ 1421.597778] Node 0 DMA: 3*4kB (ME) 2*8kB (UE) 2*16kB (ME) 2*32kB (ME) 3*64kB (UME) 2*128kB (UE) 5*256kB (UMEH) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (M) 0*4096kB = 11068kB [ 1421.657874] Node 0 DMA32: 603*4kB (ME) 361*8kB (UE) 761*16kB (UME) 207*32kB (UME) 8*64kB (UM) 0*128kB 2*256kB (UM) 9*512kB (UM) 6*1024kB (U) 0*2048kB 0*4096kB = 35876kB [ 1421.696890] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1421.744539] Node 1 Normal: 182*4kB (UMH) 2671*8kB (UMH) 900*16kB (UMH) 518*32kB (UMH) 8*64kB (MH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53584kB [ 1421.807141] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1421.837240] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1421.867035] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1421.897752] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1421.954924] 32888 total pagecache pages [ 1421.976773] 0 pages in swap cache [ 1421.985711] Swap cache stats: add 0, delete 0, find 0/0 [ 1422.013064] Free swap = 0kB [ 1422.016450] Total swap = 0kB [ 1422.025563] 2097051 pages RAM [ 1422.032764] 0 pages HighMem/MovableOnly [ 1422.037633] 363849 pages reserved [ 1422.042470] 0 pages cma reserved [ 1422.046093] Out of memory (oom_kill_allocating_task): Kill process 642 (syz-executor.4) score 0 or sacrifice child [ 1422.057603] Killed process 642 (syz-executor.4) total-vm:93120kB, anon-rss:116kB, file-rss:34808kB, shmem-rss:0kB [ 1422.086861] oom_reaper: reaped process 642 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 20:34:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:14 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:34:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() 20:34:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) [ 1422.931082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1422.959622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1423.032420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1423.134866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1423.226391] device bridge_slave_1 left promiscuous mode [ 1423.309128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.429770] device bridge_slave_0 left promiscuous mode [ 1423.467489] bridge0: port 1(bridge_slave_0) entered disabled state [ 1423.503415] syz-executor.1 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1423.559196] device veth1_macvtap left promiscuous mode [ 1423.605433] device veth0_macvtap left promiscuous mode [ 1423.620605] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1423.657126] device veth1_vlan left promiscuous mode [ 1423.691119] CPU: 1 PID: 1280 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1423.703118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1423.718638] Call Trace: [ 1423.722413] dump_stack+0x1b2/0x281 [ 1423.727905] dump_header+0x178/0x82f [ 1423.733951] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1423.740753] ? ___ratelimit+0x2cd/0x530 [ 1423.746489] oom_kill_process.cold+0x10/0xa40 [ 1423.752938] out_of_memory+0xe3e/0x1190 [ 1423.758029] ? oom_killer_disable+0x1c0/0x1c0 [ 1423.763649] ? mutex_trylock+0x152/0x1a0 [ 1423.768996] __alloc_pages_nodemask+0x23e1/0x2720 [ 1423.775396] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1423.781916] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1423.788752] ? __lock_acquire+0x5fc/0x3f20 [ 1423.797749] alloc_pages_vma+0xd2/0x6d0 [ 1423.806652] __handle_mm_fault+0x25fa/0x4620 [ 1423.812483] ? lock_downgrade+0x740/0x740 [ 1423.817933] ? vm_insert_page+0x7c0/0x7c0 [ 1423.824740] ? do_raw_spin_unlock+0x164/0x220 [ 1423.833110] ? mark_held_locks+0xa6/0xf0 [ 1423.838015] handle_mm_fault+0x455/0x9c0 [ 1423.842512] __get_user_pages+0x4e9/0x1270 [ 1423.847532] ? follow_page_mask+0x18a0/0x18a0 [ 1423.852583] ? ___preempt_schedule+0x16/0x18 [ 1423.858034] ? lock_acquire+0x170/0x3f0 [ 1423.862590] populate_vma_page_range+0x17b/0x210 [ 1423.868357] __mm_populate+0x195/0x2c0 [ 1423.872702] ? populate_vma_page_range+0x210/0x210 [ 1423.878096] ? security_capable+0x88/0xb0 [ 1423.882784] SyS_mlockall+0x3ff/0x520 [ 1423.887199] ? SyS_munlock+0xf0/0xf0 [ 1423.891319] do_syscall_64+0x1d5/0x640 [ 1423.896197] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1423.902019] RIP: 0033:0x4665f9 [ 1423.905451] RSP: 002b:00007f0679f12188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1423.913601] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1423.922503] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1423.930977] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1423.939005] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1423.946822] R13: 00007ffe83d6ee1f R14: 00007f0679f12300 R15: 0000000000022000 [ 1423.966331] device veth0_vlan left promiscuous mode [ 1423.973917] Mem-Info: [ 1423.987767] active_anon:1117620 inactive_anon:263750 isolated_anon:0 [ 1423.987767] active_file:47 inactive_file:0 isolated_file:1 [ 1423.987767] unevictable:23669 dirty:10 writeback:0 unstable:0 [ 1423.987767] slab_reclaimable:15447 slab_unreclaimable:133639 [ 1423.987767] mapped:38686 shmem:31508 pagetables:48888 bounce:0 [ 1423.987767] free:25055 free_pcp:0 free_cma:0 [ 1424.067304] Node 0 active_anon:1611856kB inactive_anon:342496kB active_file:136kB inactive_file:160kB unevictable:63484kB isolated(anon):0kB isolated(file):0kB mapped:143632kB dirty:20kB writeback:4kB shmem:90888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 671744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1424.111162] Node 1 active_anon:2858952kB inactive_anon:712504kB active_file:28kB inactive_file:32kB unevictable:31464kB isolated(anon):0kB isolated(file):0kB mapped:11160kB dirty:0kB writeback:0kB shmem:35144kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1424.149614] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2268kB inactive_anon:2316kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1424.183096] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1424.188816] Node 0 DMA32 free:35684kB min:36200kB low:45248kB high:54296kB active_anon:1609644kB inactive_anon:340180kB active_file:92kB inactive_file:156kB unevictable:63484kB writepending:20kB present:3129332kB managed:2788128kB mlocked:63484kB kernel_stack:14752kB pagetables:72272kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1424.228472] lowmem_reserve[]: 0 0 0 0 0 [ 1424.233673] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1424.279169] lowmem_reserve[]: 0 0 0 0 0 [ 1424.285341] Node 1 Normal free:53208kB min:53696kB low:67120kB high:80544kB active_anon:2858952kB inactive_anon:712504kB active_file:28kB inactive_file:32kB unevictable:31464kB writepending:0kB present:4194304kB managed:4128256kB mlocked:31464kB kernel_stack:49248kB pagetables:123296kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1424.326232] lowmem_reserve[]: 0 0 0 0 0 [ 1424.331460] Node 0 DMA: 3*4kB (ME) 2*8kB (UE) 2*16kB (ME) 2*32kB (ME) 3*64kB (UME) 2*128kB (UE) 5*256kB (UMEH) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (M) 0*4096kB = 11068kB [ 1424.351023] Node 0 DMA32: 1051*4kB (UME) 1094*8kB (UME) 736*16kB (UME) 228*32kB (UME) 62*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35996kB [ 1424.381745] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1424.407823] Node 1 Normal: 396*4kB (UMH) 47*8kB (UMH) 1199*16kB (UH) 985*32kB (UMH) 9*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53240kB [ 1424.442779] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1424.467647] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1424.490071] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1424.515508] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1424.536394] 34953 total pagecache pages [ 1424.541489] 0 pages in swap cache [ 1424.546259] Swap cache stats: add 0, delete 0, find 0/0 [ 1424.570285] Free swap = 0kB [ 1424.575017] Total swap = 0kB [ 1424.591506] 2097051 pages RAM [ 1424.607083] 0 pages HighMem/MovableOnly [ 1424.617535] 363849 pages reserved [ 1424.632692] 0 pages cma reserved [ 1424.637452] Out of memory (oom_kill_allocating_task): Kill process 1280 (syz-executor.1) score 0 or sacrifice child [ 1424.655729] Killed process 1276 (syz-executor.1) total-vm:93252kB, anon-rss:22448kB, file-rss:39156kB, shmem-rss:0kB [ 1424.737904] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1424.800954] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1424.811497] CPU: 1 PID: 18222 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1424.820628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1424.831991] Call Trace: [ 1424.835501] dump_stack+0x1b2/0x281 [ 1424.840210] dump_header+0x178/0x82f [ 1424.844434] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1424.849722] ? ___ratelimit+0x2cd/0x530 [ 1424.854335] oom_kill_process.cold+0x10/0xa40 [ 1424.858960] out_of_memory+0xe3e/0x1190 [ 1424.863764] ? oom_killer_disable+0x1c0/0x1c0 [ 1424.868784] ? mutex_trylock+0x152/0x1a0 [ 1424.873744] __alloc_pages_nodemask+0x23e1/0x2720 [ 1424.879858] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1424.885147] alloc_pages_current+0x155/0x260 [ 1424.890404] filemap_fault+0x11a1/0x1ad0 [ 1424.895118] ext4_filemap_fault+0x84/0xb0 [ 1424.899641] __do_fault+0xfa/0x380 [ 1424.903507] __handle_mm_fault+0x2497/0x4620 [ 1424.908028] ? vm_insert_page+0x7c0/0x7c0 [ 1424.913132] ? _raw_spin_unlock_irq+0x24/0x80 [ 1424.919176] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1424.924971] ? mark_held_locks+0xa6/0xf0 [ 1424.929389] handle_mm_fault+0x455/0x9c0 [ 1424.933819] __do_page_fault+0x549/0xad0 [ 1424.938327] ? spurious_fault+0x640/0x640 [ 1424.942639] ? do_page_fault+0x60/0x500 [ 1424.947249] ? page_fault+0x2f/0x50 [ 1424.950972] page_fault+0x45/0x50 [ 1424.954611] RIP: 2240d980: (null) [ 1424.958955] RSP: 5924253f:000000c0004e9f28 EFLAGS: 000000fa [ 1425.009203] Mem-Info: [ 1425.019690] active_anon:1117848 inactive_anon:263775 isolated_anon:0 [ 1425.019690] active_file:15 inactive_file:103 isolated_file:10 [ 1425.019690] unevictable:23265 dirty:2 writeback:1 unstable:0 [ 1425.019690] slab_reclaimable:15453 slab_unreclaimable:133598 [ 1425.019690] mapped:40614 shmem:31508 pagetables:48903 bounce:0 [ 1425.019690] free:25095 free_pcp:349 free_cma:0 [ 1425.064746] Node 0 active_anon:1612440kB inactive_anon:342596kB active_file:60kB inactive_file:152kB unevictable:62984kB isolated(anon):0kB isolated(file):40kB mapped:145196kB dirty:8kB writeback:4kB shmem:90888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 671744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1425.097973] Node 1 active_anon:2858952kB inactive_anon:712504kB active_file:0kB inactive_file:260kB unevictable:30076kB isolated(anon):0kB isolated(file):0kB mapped:17160kB dirty:0kB writeback:0kB shmem:35144kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1425.132278] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2268kB inactive_anon:2316kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1425.163413] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1425.169239] Node 0 DMA32 free:35912kB min:36200kB low:45248kB high:54296kB active_anon:1610164kB inactive_anon:340184kB active_file:16kB inactive_file:360kB unevictable:63072kB writepending:0kB present:3129332kB managed:2788128kB mlocked:63072kB kernel_stack:14720kB pagetables:72172kB bounce:0kB free_pcp:36kB local_pcp:0kB free_cma:0kB [ 1425.201494] lowmem_reserve[]: 0 0 0 0 0 [ 1425.206412] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1425.236861] lowmem_reserve[]: 0 0 0 0 0 [ 1425.242880] Node 1 Normal free:53512kB min:53696kB low:67120kB high:80544kB active_anon:2858952kB inactive_anon:712504kB active_file:32kB inactive_file:256kB unevictable:30120kB writepending:0kB present:4194304kB managed:4128256kB mlocked:30120kB kernel_stack:49248kB pagetables:123284kB bounce:0kB free_pcp:424kB local_pcp:240kB free_cma:0kB [ 1425.278975] lowmem_reserve[]: 0 0 0 0 0 [ 1425.283856] Node 0 DMA: 3*4kB (ME) 2*8kB (UE) 2*16kB (ME) 2*32kB (ME) 3*64kB (UME) 2*128kB (UE) 5*256kB (UMEH) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (M) 0*4096kB = 11068kB [ 1425.300992] Node 0 DMA32: 1127*4kB (UME) 1097*8kB (UME) 749*16kB (UME) 230*32kB (UME) 60*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36468kB [ 1425.320272] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1425.332672] Node 1 Normal: 358*4kB (UH) 38*8kB (UMH) 1235*16kB (UMH) 985*32kB (UMH) 9*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53592kB [ 1425.349389] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1425.359137] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1425.368671] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1425.378506] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1425.388884] 36869 total pagecache pages [ 1425.393386] 0 pages in swap cache [ 1425.397123] Swap cache stats: add 0, delete 0, find 0/0 [ 1425.402730] Free swap = 0kB [ 1425.406197] Total swap = 0kB [ 1425.409918] 2097051 pages RAM [ 1425.413159] 0 pages HighMem/MovableOnly [ 1425.417375] 363849 pages reserved [ 1425.421733] 0 pages cma reserved [ 1425.425201] Out of memory (oom_kill_allocating_task): Kill process 18222 (syz-fuzzer) score 0 or sacrifice child [ 1425.438342] Killed process 428 (syz-executor.0) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1425.461877] oom_reaper: reaped process 428 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1425.491139] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 1425.560861] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1425.566803] CPU: 1 PID: 1005 Comm: rs:main Q:Reg Not tainted 4.14.232-syzkaller #0 [ 1425.575475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1425.586647] Call Trace: [ 1425.589769] dump_stack+0x1b2/0x281 [ 1425.594192] dump_header+0x178/0x82f [ 1425.597916] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1425.603188] ? ___ratelimit+0x2cd/0x530 [ 1425.608838] oom_kill_process.cold+0x10/0xa40 [ 1425.614667] out_of_memory+0xe3e/0x1190 [ 1425.619182] ? oom_killer_disable+0x1c0/0x1c0 [ 1425.625902] ? mutex_trylock+0x152/0x1a0 [ 1425.631012] __alloc_pages_nodemask+0x23e1/0x2720 [ 1425.637566] ? trace_hardirqs_on+0x10/0x10 [ 1425.642384] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1425.648713] ? __radix_tree_lookup+0x1b5/0x2e0 [ 1425.654223] alloc_pages_current+0x155/0x260 [ 1425.660074] pagecache_get_page+0x3f5/0xab0 [ 1425.664753] grab_cache_page_write_begin+0x63/0x90 [ 1425.672121] ext4_da_write_begin+0x249/0xe70 [ 1425.680789] ? __ext4_journal_stop+0xe7/0x1b0 [ 1425.688451] ? ext4_write_begin+0x1260/0x1260 [ 1425.694572] ? balance_dirty_pages_ratelimited+0x870/0x1800 [ 1425.702672] generic_perform_write+0x1c9/0x420 [ 1425.710856] ? __mnt_drop_write_file+0x5f/0x90 [ 1425.716970] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 1425.722305] ? current_time+0xb0/0xb0 [ 1425.726778] ? ext4_file_write_iter+0x1cc/0xd20 [ 1425.734916] __generic_file_write_iter+0x227/0x590 [ 1425.740778] ext4_file_write_iter+0x276/0xd20 [ 1425.746525] ? aa_file_perm+0x304/0xab0 [ 1425.752543] ? ext4_file_read_iter+0x330/0x330 [ 1425.758883] ? trace_hardirqs_on+0x10/0x10 [ 1425.765837] ? iov_iter_init+0xa6/0x1c0 [ 1425.770555] __vfs_write+0x44c/0x630 [ 1425.774840] ? kernel_read+0x110/0x110 [ 1425.781001] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1425.788517] vfs_write+0x17f/0x4d0 [ 1425.793433] SyS_write+0xf2/0x210 [ 1425.796992] ? SyS_read+0x210/0x210 [ 1425.801518] ? __do_page_fault+0x159/0xad0 [ 1425.806351] ? do_syscall_64+0x4c/0x640 [ 1425.810986] ? SyS_read+0x210/0x210 [ 1425.814924] do_syscall_64+0x1d5/0x640 [ 1425.820710] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1425.826636] RIP: 0033:0x7f1da380f1cd [ 1425.830639] RSP: 002b:00007f1da0dca590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1425.839317] RAX: ffffffffffffffda RBX: 00007f1d98026eb0 RCX: 00007f1da380f1cd [ 1425.847116] RDX: 0000000000000dfe RSI: 00007f1d98026eb0 RDI: 0000000000000006 [ 1425.855661] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1425.864154] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f1d98026c30 [ 1425.874915] R13: 00007f1da0dca5b0 R14: 00005634992a13a0 R15: 0000000000000dfe [ 1425.892645] Mem-Info: [ 1425.895133] active_anon:1117837 inactive_anon:263751 isolated_anon:0 [ 1425.895133] active_file:28 inactive_file:9 isolated_file:0 [ 1425.895133] unevictable:23529 dirty:0 writeback:0 unstable:0 [ 1425.895133] slab_reclaimable:15453 slab_unreclaimable:133623 [ 1425.895133] mapped:40558 shmem:31508 pagetables:48853 bounce:0 [ 1425.895133] free:25177 free_pcp:30 free_cma:0 [ 1425.935893] Node 0 active_anon:1612400kB inactive_anon:342500kB active_file:48kB inactive_file:20kB unevictable:63572kB isolated(anon):0kB isolated(file):0kB mapped:145060kB dirty:0kB writeback:0kB shmem:90888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 671744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1425.967167] Node 1 active_anon:2858948kB inactive_anon:712504kB active_file:64kB inactive_file:0kB unevictable:30544kB isolated(anon):0kB isolated(file):0kB mapped:17272kB dirty:0kB writeback:0kB shmem:35144kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1425.996669] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2268kB inactive_anon:2316kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1426.045451] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1426.057068] Node 0 DMA32 free:36164kB min:36200kB low:45248kB high:54296kB active_anon:1610096kB inactive_anon:340184kB active_file:16kB inactive_file:40kB unevictable:63600kB writepending:4kB present:3129332kB managed:2788128kB mlocked:63600kB kernel_stack:14624kB pagetables:72104kB bounce:0kB free_pcp:36kB local_pcp:36kB free_cma:0kB [ 1426.177619] lowmem_reserve[]: 0 0 0 0 0 [ 1426.182985] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1426.211851] lowmem_reserve[]: 0 0 0 0 0 [ 1426.219144] Node 1 Normal free:65456kB min:53696kB low:67120kB high:80544kB active_anon:2846848kB inactive_anon:712504kB active_file:4kB inactive_file:48kB unevictable:30640kB writepending:20kB present:4194304kB managed:4128256kB mlocked:30640kB kernel_stack:49088kB pagetables:123272kB bounce:0kB free_pcp:1296kB local_pcp:656kB free_cma:0kB 20:34:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) [ 1426.406153] lowmem_reserve[]: 0 0 0 0 0 [ 1426.428967] Node 0 DMA: 3*4kB (ME) 1*8kB (E) 2*16kB (ME) 2*32kB (ME) 2*64kB (ME) 1*128kB (E) 4*256kB (MEH) 1*512kB (E) 3*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11124kB [ 1426.593935] Node 0 DMA32: 1559*4kB (UME) 1511*8kB (UME) 928*16kB (UME) 292*32kB (UME) 72*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 47380kB [ 1426.705716] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1426.772589] Node 1 Normal: 365*4kB (UH) 65*8kB (UMH) 1976*16kB (UMH) 1013*32kB (UMH) 9*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 66588kB [ 1426.862221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1426.935069] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1426.998257] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1427.007900] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1427.043017] 36653 total pagecache pages [ 1427.060037] 0 pages in swap cache [ 1427.064506] device hsr_slave_1 left promiscuous mode 20:34:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() 20:34:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() socket$inet6(0xa, 0x2, 0x0) [ 1427.090202] device hsr_slave_0 left promiscuous mode [ 1427.114180] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1427.126883] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1427.127393] Swap cache stats: add 0, delete 0, find 0/0 [ 1427.196313] Free swap = 0kB [ 1427.217843] Total swap = 0kB [ 1427.233688] 2097051 pages RAM [ 1427.254014] 0 pages HighMem/MovableOnly [ 1427.254516] team0 (unregistering): Port device team_slave_1 removed [ 1427.280434] 363849 pages reserved [ 1427.302789] 0 pages cma reserved [ 1427.330152] team0 (unregistering): Port device team_slave_0 removed [ 1427.332784] Out of memory (oom_kill_allocating_task): Kill process 1005 (rs:main Q:Reg) score 0 or sacrifice child [ 1427.424415] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1427.442861] Killed process 999 (rsyslogd) total-vm:254332kB, anon-rss:908kB, file-rss:0kB, shmem-rss:0kB [ 1427.524092] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1427.533409] oom_reaper: reaped process 999 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1427.814542] bond0 (unregistering): Released all slaves [ 1427.925878] syz-executor.0 invoked oom-killer: gfp_mask=0x14002c0(GFP_KERNEL|__GFP_NOWARN), nodemask=(null), order=2, oom_score_adj=1000 [ 1427.976344] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1427.986870] CPU: 1 PID: 1282 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1427.994721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1428.004142] Call Trace: [ 1428.006953] dump_stack+0x1b2/0x281 [ 1428.010635] dump_header+0x178/0x82f [ 1428.014352] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1428.019460] ? ___ratelimit+0x2cd/0x530 [ 1428.023475] oom_kill_process.cold+0x10/0xa40 [ 1428.028004] ? lock_downgrade+0x740/0x740 [ 1428.032158] out_of_memory+0x2dc/0x1190 [ 1428.036200] ? oom_killer_disable+0x1c0/0x1c0 [ 1428.040703] ? mutex_trylock+0x152/0x1a0 [ 1428.044779] __alloc_pages_nodemask+0x23e1/0x2720 [ 1428.049621] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1428.055524] ? __save_stack_trace+0x63/0x160 [ 1428.059956] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1428.064801] ? kernel_text_address+0xbd/0xf0 [ 1428.069227] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1428.074546] alloc_pages_current+0x155/0x260 [ 1428.078963] depot_save_stack+0x3ae/0x3f0 [ 1428.083252] kasan_kmalloc+0x139/0x160 [ 1428.087139] ? kasan_kmalloc+0xeb/0x160 [ 1428.091134] ? __kmalloc_node_track_caller+0x4c/0x70 [ 1428.096511] ? __alloc_skb+0x96/0x510 [ 1428.100304] ? rtmsg_ifa+0xe7/0x1c0 [ 1428.103962] ? __inet_del_ifa+0x4ad/0xaf0 [ 1428.108134] ? inetdev_event+0x4ec/0x10a0 [ 1428.112287] ? notifier_call_chain+0x108/0x1a0 [ 1428.116890] ? rollback_registered_many+0x765/0xba0 [ 1428.121895] ? rollback_registered+0xca/0x170 [ 1428.126379] ? unregister_netdevice_queue+0x1b4/0x360 [ 1428.131557] ? __tun_detach+0xca2/0xf60 [ 1428.135530] ? tun_chr_close+0x41/0x60 [ 1428.139421] ? __fput+0x25f/0x7a0 [ 1428.142907] ? task_work_run+0x11f/0x190 [ 1428.146972] ? do_exit+0xa44/0x2850 [ 1428.150593] ? do_group_exit+0x100/0x2e0 [ 1428.154676] ? get_signal+0x38d/0x1ca0 [ 1428.158587] ? do_signal+0x7c/0x1550 [ 1428.162289] ? exit_to_usermode_loop+0x160/0x200 [ 1428.167050] ? prepare_exit_to_usermode+0x1af/0x210 [ 1428.172062] ? retint_user+0x8/0x18 [ 1428.175913] ? __lock_acquire+0x5fc/0x3f20 [ 1428.180142] ? debug_object_assert_init+0x22d/0x2d0 [ 1428.185171] ? fs_reclaim_release+0xd0/0x110 [ 1428.189589] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1428.195040] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1428.200064] ? __kmalloc_node_track_caller+0x38/0x70 [ 1428.205170] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1428.210479] __kmalloc_node_track_caller+0x4c/0x70 [ 1428.215425] __alloc_skb+0x96/0x510 [ 1428.219083] rtmsg_ifa+0xe7/0x1c0 [ 1428.222534] __inet_del_ifa+0x4ad/0xaf0 [ 1428.226524] ? ip_mc_destroy_dev+0x66/0x150 [ 1428.230855] inetdev_event+0x4ec/0x10a0 [ 1428.234823] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1428.239951] ? devinet_init_net+0x450/0x450 [ 1428.244296] ? cfg802154_netdev_notifier_call+0x2ea/0x660 [ 1428.249829] notifier_call_chain+0x108/0x1a0 [ 1428.254235] rollback_registered_many+0x765/0xba0 [ 1428.259085] ? netdev_state_change+0xf0/0xf0 [ 1428.263490] ? queue_delayed_work_on+0x114/0x1d0 [ 1428.268242] rollback_registered+0xca/0x170 [ 1428.272571] ? rollback_registered_many+0xba0/0xba0 [ 1428.277594] ? linkwatch_schedule_work+0xe5/0x110 [ 1428.282500] unregister_netdevice_queue+0x1b4/0x360 [ 1428.287614] __tun_detach+0xca2/0xf60 [ 1428.291407] ? tun_recvmsg+0x3b0/0x3b0 [ 1428.295375] tun_chr_close+0x41/0x60 [ 1428.299090] __fput+0x25f/0x7a0 [ 1428.302393] task_work_run+0x11f/0x190 [ 1428.306274] do_exit+0xa44/0x2850 [ 1428.309717] ? reacquire_held_locks+0xb5/0x3f0 [ 1428.314292] ? mm_update_next_owner+0x5b0/0x5b0 [ 1428.319139] ? get_signal+0x323/0x1ca0 [ 1428.323030] ? lock_acquire+0x170/0x3f0 [ 1428.326998] ? lock_downgrade+0x740/0x740 [ 1428.331137] do_group_exit+0x100/0x2e0 [ 1428.335166] get_signal+0x38d/0x1ca0 [ 1428.338902] ? balance_dirty_pages_ratelimited+0x8ed/0x1800 [ 1428.344611] ? fault_dirty_shared_page+0x17e/0x1f0 [ 1428.349551] ? _raw_spin_unlock+0x29/0x40 [ 1428.353782] do_signal+0x7c/0x1550 [ 1428.357362] ? vm_insert_page+0x7c0/0x7c0 [ 1428.361504] ? _raw_spin_unlock_irq+0x24/0x80 [ 1428.366036] ? setup_sigcontext+0x820/0x820 [ 1428.370352] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1428.375394] ? __do_page_fault+0x571/0xad0 [ 1428.379636] ? lock_downgrade+0x740/0x740 [ 1428.383795] ? up_read+0x17/0x30 [ 1428.387160] ? __do_page_fault+0x159/0xad0 [ 1428.391397] ? exit_to_usermode_loop+0x41/0x200 [ 1428.396150] exit_to_usermode_loop+0x160/0x200 [ 1428.400753] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1428.405590] prepare_exit_to_usermode+0x1af/0x210 [ 1428.410462] ? page_fault+0x2f/0x50 [ 1428.414170] retint_user+0x8/0x18 [ 1428.417621] RIP: 0033:0x404163 [ 1428.420814] RSP: 002b:00007fff8d5fa9a8 EFLAGS: 00010287 [ 1428.426180] RAX: 0000001b2e826174 RBX: 00000000000198c3 RCX: 0000001b2e820000 [ 1428.433495] RDX: 0000001b2e826178 RSI: 0000000009b0a0c2 RDI: 000000001da67dbf [ 1428.440786] RBP: 000000001da67dbf R08: 0000001b2f820000 R09: 0000001b2e8252a4 [ 1428.448173] R10: 0014eb785833e923 R11: 0000000000000001 R12: 000000000056c1e0 [ 1428.455584] R13: 0000000000000001 R14: 0000000000560000 R15: ffffffff83019f24 [ 1428.462891] ? af_alg_free_sg+0x124/0x260 [ 1428.479497] Mem-Info: [ 1428.481974] active_anon:1112079 inactive_anon:263763 isolated_anon:0 [ 1428.481974] active_file:9 inactive_file:13 isolated_file:0 [ 1428.481974] unevictable:32667 dirty:0 writeback:0 unstable:0 [ 1428.481974] slab_reclaimable:15504 slab_unreclaimable:133462 [ 1428.481974] mapped:34092 shmem:31504 pagetables:48719 bounce:0 [ 1428.481974] free:25239 free_pcp:90 free_cma:0 [ 1428.528401] Node 0 active_anon:1602772kB inactive_anon:342496kB active_file:32kB inactive_file:0kB unevictable:81472kB isolated(anon):0kB isolated(file):0kB mapped:127264kB dirty:0kB writeback:0kB shmem:90880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 671744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1428.566052] Node 1 active_anon:2845544kB inactive_anon:712556kB active_file:4kB inactive_file:8kB unevictable:49396kB isolated(anon):0kB isolated(file):0kB mapped:9104kB dirty:0kB writeback:0kB shmem:35136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1428.597958] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2268kB inactive_anon:2316kB active_file:0kB inactive_file:0kB unevictable:56kB writepending:0kB present:15992kB managed:15908kB mlocked:56kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1428.631856] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1428.636957] Node 0 DMA32 free:36136kB min:36200kB low:45248kB high:54296kB active_anon:1600504kB inactive_anon:340180kB active_file:32kB inactive_file:0kB unevictable:81416kB writepending:0kB present:3129332kB managed:2788128kB mlocked:81416kB kernel_stack:14560kB pagetables:71884kB bounce:0kB free_pcp:64kB local_pcp:0kB free_cma:0kB [ 1428.671959] lowmem_reserve[]: 0 0 0 0 0 [ 1428.676086] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1428.722032] lowmem_reserve[]: 0 0 0 0 0 [ 1428.731954] Node 1 Normal free:53692kB min:53696kB low:67120kB high:80544kB active_anon:2845544kB inactive_anon:712556kB active_file:4kB inactive_file:8kB unevictable:49488kB writepending:0kB present:4194304kB managed:4128256kB mlocked:49488kB kernel_stack:49056kB pagetables:122956kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1428.767050] lowmem_reserve[]: 0 0 0 0 0 [ 1428.774511] Node 0 DMA: 3*4kB (ME) 2*8kB (ME) 2*16kB (ME) 2*32kB (ME) 1*64kB (E) 1*128kB (E) 4*256kB (MEH) 1*512kB (E) 3*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11068kB [ 1428.794509] Node 0 DMA32: 1159*4kB (UME) 1371*8kB (UME) 752*16kB (UME) 215*32kB (UME) 25*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36116kB [ 1428.823198] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1428.846847] Node 1 Normal: 419*4kB (UMEH) 48*8kB (UH) 1453*16kB (UMEH) 861*32kB (UMEH) 13*64kB (UMEH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53692kB [ 1428.870069] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1428.887398] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1428.898763] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1428.907632] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1428.927212] 39013 total pagecache pages [ 1428.931364] 0 pages in swap cache [ 1428.934826] Swap cache stats: add 0, delete 0, find 0/0 [ 1428.948906] Free swap = 0kB [ 1428.951991] Total swap = 0kB [ 1428.955122] 2097051 pages RAM [ 1428.964917] 0 pages HighMem/MovableOnly [ 1428.972038] 363849 pages reserved [ 1428.975898] 0 pages cma reserved [ 1428.986915] Out of memory: Kill process 1295 (syz-executor.1) score 1012 or sacrifice child [ 1429.000126] Killed process 1300 (syz-executor.1) total-vm:93384kB, anon-rss:28232kB, file-rss:35084kB, shmem-rss:0kB [ 1429.053650] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1429.080039] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1429.085232] CPU: 1 PID: 7963 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1429.092793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1429.102229] Call Trace: [ 1429.105017] dump_stack+0x1b2/0x281 [ 1429.108892] dump_header+0x178/0x82f [ 1429.115545] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1429.121093] ? ___ratelimit+0x2cd/0x530 [ 1429.125066] oom_kill_process.cold+0x10/0xa40 [ 1429.129588] out_of_memory+0xe3e/0x1190 [ 1429.133761] ? oom_killer_disable+0x1c0/0x1c0 [ 1429.138879] ? mutex_trylock+0x152/0x1a0 [ 1429.142966] __alloc_pages_nodemask+0x23e1/0x2720 [ 1429.147833] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1429.152775] alloc_pages_current+0x155/0x260 [ 1429.157185] filemap_fault+0x11a1/0x1ad0 [ 1429.161539] ext4_filemap_fault+0x84/0xb0 [ 1429.165762] __do_fault+0xfa/0x380 [ 1429.170791] __handle_mm_fault+0x2497/0x4620 [ 1429.175405] ? vm_insert_page+0x7c0/0x7c0 [ 1429.179543] ? free_object+0xe4/0x240 [ 1429.183709] ? mark_held_locks+0xa6/0xf0 [ 1429.187790] handle_mm_fault+0x455/0x9c0 [ 1429.192471] __do_page_fault+0x549/0xad0 [ 1429.197077] ? spurious_fault+0x640/0x640 [ 1429.201249] ? do_page_fault+0x60/0x500 [ 1429.205315] ? page_fault+0x2f/0x50 [ 1429.208950] page_fault+0x45/0x50 [ 1429.212436] RIP: 0000:0x947a5c [ 1429.216429] RSP: 4e20:000000c00003dfa0 EFLAGS: 0043b6a0 [ 1429.219609] Mem-Info: [ 1429.227870] active_anon:1112074 inactive_anon:263748 isolated_anon:0 [ 1429.227870] active_file:0 inactive_file:21 isolated_file:0 [ 1429.227870] unevictable:32854 dirty:0 writeback:0 unstable:0 [ 1429.227870] slab_reclaimable:15504 slab_unreclaimable:133434 [ 1429.227870] mapped:34092 shmem:31504 pagetables:48683 bounce:0 [ 1429.227870] free:25165 free_pcp:129 free_cma:0 [ 1429.265098] Node 0 active_anon:1602756kB inactive_anon:342492kB active_file:0kB inactive_file:72kB unevictable:81928kB isolated(anon):0kB isolated(file):0kB mapped:127264kB dirty:0kB writeback:0kB shmem:90880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 671744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1429.296326] Node 1 active_anon:2845540kB inactive_anon:712500kB active_file:0kB inactive_file:16kB unevictable:49488kB isolated(anon):0kB isolated(file):0kB mapped:9104kB dirty:0kB writeback:0kB shmem:35136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1429.330407] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2268kB inactive_anon:2316kB active_file:0kB inactive_file:0kB unevictable:56kB writepending:0kB present:15992kB managed:15908kB mlocked:56kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1429.359464] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1429.364623] Node 0 DMA32 free:35992kB min:36200kB low:45248kB high:54296kB active_anon:1600488kB inactive_anon:340176kB active_file:0kB inactive_file:92kB unevictable:81872kB writepending:0kB present:3129332kB managed:2788128kB mlocked:81872kB kernel_stack:14560kB pagetables:71736kB bounce:0kB free_pcp:336kB local_pcp:0kB free_cma:0kB [ 1429.394677] lowmem_reserve[]: 0 0 0 0 0 [ 1429.398934] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1429.424770] lowmem_reserve[]: 0 0 0 0 0 [ 1429.430883] Node 1 Normal free:53600kB min:53696kB low:67120kB high:80544kB active_anon:2845540kB inactive_anon:712500kB active_file:0kB inactive_file:16kB unevictable:49488kB writepending:0kB present:4194304kB managed:4128256kB mlocked:49488kB kernel_stack:49024kB pagetables:122956kB bounce:0kB free_pcp:180kB local_pcp:0kB free_cma:0kB [ 1429.463616] lowmem_reserve[]: 0 0 0 0 0 [ 1429.467625] Node 0 DMA: 3*4kB (ME) 2*8kB (ME) 2*16kB (ME) 2*32kB (ME) 1*64kB (E) 1*128kB (E) 4*256kB (MEH) 1*512kB (E) 3*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11068kB [ 1429.482736] Node 0 DMA32: 1128*4kB (UME) 1371*8kB (UME) 752*16kB (UME) 216*32kB (UME) 25*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36024kB [ 1429.501380] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1429.513330] Node 1 Normal: 388*4kB (UMEH) 48*8kB (UH) 1453*16kB (UMEH) 863*32kB (UMEH) 13*64kB (UMEH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53632kB [ 1429.531976] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1429.541867] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1429.553735] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1429.563268] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1429.575105] 39014 total pagecache pages [ 1429.579586] 0 pages in swap cache [ 1429.583480] Swap cache stats: add 0, delete 0, find 0/0 [ 1429.592069] Free swap = 0kB [ 1429.595440] Total swap = 0kB [ 1429.599002] 2097051 pages RAM [ 1429.602611] 0 pages HighMem/MovableOnly [ 1429.611659] 363849 pages reserved [ 1429.615751] 0 pages cma reserved [ 1429.620277] Out of memory (oom_kill_allocating_task): Kill process 7963 (syz-fuzzer) score 0 or sacrifice child [ 1429.634037] Killed process 32361 (syz-executor.5) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1429.674327] oom_reaper: reaped process 32361 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1429.697809] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1429.806666] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1429.812336] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1429.817682] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1429.910169] CPU: 1 PID: 7963 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1429.917675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1429.927034] Call Trace: [ 1429.929637] dump_stack+0x1b2/0x281 [ 1429.933280] dump_header+0x178/0x82f [ 1429.937035] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1429.942182] ? ___ratelimit+0x2cd/0x530 [ 1429.946387] oom_kill_process.cold+0x10/0xa40 [ 1429.951041] out_of_memory+0xe3e/0x1190 [ 1429.955123] ? oom_killer_disable+0x1c0/0x1c0 [ 1429.959631] ? mutex_trylock+0x152/0x1a0 [ 1429.963748] __alloc_pages_nodemask+0x23e1/0x2720 [ 1429.968621] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1429.973493] alloc_pages_current+0x155/0x260 [ 1429.977913] filemap_fault+0x11a1/0x1ad0 [ 1429.982016] ext4_filemap_fault+0x84/0xb0 [ 1429.986205] __do_fault+0xfa/0x380 [ 1429.989771] __handle_mm_fault+0x2497/0x4620 [ 1429.994216] ? vm_insert_page+0x7c0/0x7c0 [ 1429.998376] ? free_object+0xe4/0x240 [ 1430.002201] ? mark_held_locks+0xa6/0xf0 [ 1430.006497] handle_mm_fault+0x455/0x9c0 [ 1430.010603] __do_page_fault+0x549/0xad0 [ 1430.014686] ? spurious_fault+0x640/0x640 [ 1430.018857] ? do_page_fault+0x60/0x500 [ 1430.022853] ? page_fault+0x2f/0x50 [ 1430.026609] page_fault+0x45/0x50 [ 1430.030067] RIP: 0000:0x947a5c 20:34:21 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:34:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:34:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() [ 1430.033264] RSP: 4e20:000000c00003dfa0 EFLAGS: 0043b6a0 [ 1430.648257] Mem-Info: [ 1430.656269] active_anon:1112123 inactive_anon:213027 isolated_anon:0 [ 1430.656269] active_file:5804 inactive_file:2620 isolated_file:0 [ 1430.656269] unevictable:16508 dirty:23 writeback:0 unstable:0 [ 1430.656269] slab_reclaimable:15603 slab_unreclaimable:134765 [ 1430.656269] mapped:23047 shmem:31504 pagetables:48243 bounce:0 [ 1430.656269] free:96884 free_pcp:605 free_cma:0 [ 1430.838234] Node 0 active_anon:1603412kB inactive_anon:317468kB active_file:16268kB inactive_file:14604kB unevictable:50232kB isolated(anon):0kB isolated(file):0kB mapped:90184kB dirty:176kB writeback:0kB shmem:90880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 671744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 20:34:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) socket$inet6(0xa, 0x2, 0x0) [ 1430.928249] Node 1 active_anon:2845280kB inactive_anon:556240kB active_file:7048kB inactive_file:76kB unevictable:700kB isolated(anon):0kB isolated(file):0kB mapped:2104kB dirty:16kB writeback:0kB shmem:35136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1431.040616] Node 0 DMA free:12908kB min:204kB low:252kB high:300kB active_anon:2268kB inactive_anon:532kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:40kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1431.138365] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1431.157615] Node 0 DMA32 free:72172kB min:36200kB low:45248kB high:54296kB active_anon:1601348kB inactive_anon:323332kB active_file:9204kB inactive_file:10864kB unevictable:85940kB writepending:308kB present:3129332kB managed:2788128kB mlocked:85944kB kernel_stack:14624kB pagetables:71284kB bounce:0kB free_pcp:1088kB local_pcp:708kB free_cma:0kB [ 1431.209143] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1431.220574] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1431.284629] lowmem_reserve[]: 0 0 0 0 0 [ 1431.297790] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1431.362466] lowmem_reserve[]: 0 0 0 0 0 [ 1431.374827] Node 1 Normal free:257556kB min:53696kB low:67120kB high:80544kB active_anon:2845208kB inactive_anon:556172kB active_file:100kB inactive_file:64kB unevictable:7528kB writepending:28kB present:4194304kB managed:4128256kB mlocked:7528kB kernel_stack:48512kB pagetables:121624kB bounce:0kB free_pcp:1296kB local_pcp:668kB free_cma:0kB [ 1431.496274] lowmem_reserve[]: 0 0 0 0 0 [ 1431.511986] Node 0 DMA: 2*4kB (UM) 3*8kB (UME) 3*16kB (UME) 3*32kB (UME) 3*64kB (UME) 2*128kB (UE) 5*256kB (UMEH) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (M) 0*4096kB = 11120kB [ 1431.590195] Node 0 DMA32: 5092*4kB (U) 456*8kB (UE) 856*16kB (UE) 237*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45296kB [ 1431.637920] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1431.650422] Node 1 Normal: 10882*4kB (UMEH) 6962*8kB (UMH) 3179*16kB (UMEH) 1570*32kB (UMEH) 603*64kB (UMEH) 19*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 241352kB [ 1431.652978] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1431.670577] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1431.700939] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1431.710844] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1431.722475] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1431.748538] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1431.770346] 46521 total pagecache pages [ 1431.780898] 0 pages in swap cache [ 1431.790730] Swap cache stats: add 0, delete 0, find 0/0 [ 1431.803599] Free swap = 0kB [ 1431.813060] Total swap = 0kB [ 1431.822053] 2097051 pages RAM [ 1431.830726] 0 pages HighMem/MovableOnly [ 1431.843348] 363849 pages reserved [ 1431.846844] 0 pages cma reserved [ 1431.851575] Out of memory (oom_kill_allocating_task): Kill process 7963 (syz-fuzzer) score 0 or sacrifice child [ 1431.878484] Killed process 7978 (syz-executor.3) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB 20:34:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) [ 1431.916864] oom_reaper: reaped process 7978 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1437.601163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1437.608069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1437.616601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1437.623580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1437.631496] device bridge_slave_1 left promiscuous mode [ 1437.636997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.644825] device bridge_slave_0 left promiscuous mode [ 1437.650530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.660787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1437.667549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1437.676864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1437.684015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1437.692685] device bridge_slave_1 left promiscuous mode [ 1437.698183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.705891] device bridge_slave_0 left promiscuous mode [ 1437.712079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.722266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1437.729287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1437.737011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1437.744033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1437.752919] device bridge_slave_1 left promiscuous mode [ 1437.764422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.789837] device bridge_slave_0 left promiscuous mode [ 1437.795478] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.832255] device veth1_macvtap left promiscuous mode [ 1437.837652] device veth0_macvtap left promiscuous mode [ 1437.858408] device veth1_vlan left promiscuous mode [ 1437.863552] device veth0_vlan left promiscuous mode [ 1437.883341] device veth1_macvtap left promiscuous mode [ 1437.892282] device veth0_macvtap left promiscuous mode [ 1437.897833] device veth1_vlan left promiscuous mode [ 1437.903489] device veth0_vlan left promiscuous mode [ 1437.913027] device veth1_macvtap left promiscuous mode [ 1437.919233] device veth0_macvtap left promiscuous mode [ 1437.924664] device veth1_vlan left promiscuous mode [ 1437.930847] device veth0_vlan left promiscuous mode [ 1438.132868] device hsr_slave_1 left promiscuous mode [ 1438.142738] device hsr_slave_0 left promiscuous mode [ 1438.163279] team0 (unregistering): Port device team_slave_1 removed [ 1438.174004] team0 (unregistering): Port device team_slave_0 removed [ 1438.185368] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1438.196386] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1438.223026] bond0 (unregistering): Released all slaves [ 1438.260254] device hsr_slave_1 left promiscuous mode [ 1438.267856] device hsr_slave_0 left promiscuous mode [ 1438.283753] team0 (unregistering): Port device team_slave_1 removed [ 1438.297736] team0 (unregistering): Port device team_slave_0 removed [ 1438.311701] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1438.323238] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1438.352050] bond0 (unregistering): Released all slaves [ 1438.387197] device hsr_slave_1 left promiscuous mode [ 1438.397134] device hsr_slave_0 left promiscuous mode [ 1438.415434] team0 (unregistering): Port device team_slave_1 removed [ 1438.425821] team0 (unregistering): Port device team_slave_0 removed [ 1438.436799] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1438.449192] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1438.477292] bond0 (unregistering): Released all slaves [ 1439.128405] Bluetooth: hci1 command 0x0409 tx timeout [ 1439.328988] IPVS: ftp: loaded support on port[0] = 21 [ 1439.370691] IPVS: ftp: loaded support on port[0] = 21 [ 1439.485501] chnl_net:caif_netlink_parms(): no params data found [ 1439.496783] IPVS: ftp: loaded support on port[0] = 21 [ 1439.648187] chnl_net:caif_netlink_parms(): no params data found [ 1439.673071] IPVS: ftp: loaded support on port[0] = 21 [ 1439.827495] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.834073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.842777] device bridge_slave_0 entered promiscuous mode [ 1439.855843] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.862488] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.870626] device bridge_slave_1 entered promiscuous mode [ 1439.903039] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1439.916674] chnl_net:caif_netlink_parms(): no params data found [ 1439.934176] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1440.025730] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1440.034708] team0: Port device team_slave_0 added [ 1440.047230] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1440.055816] team0: Port device team_slave_1 added [ 1440.067430] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.074012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.081645] device bridge_slave_0 entered promiscuous mode [ 1440.135577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.143584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.152488] device bridge_slave_1 entered promiscuous mode [ 1440.206567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1440.214208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1440.240235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1440.263200] chnl_net:caif_netlink_parms(): no params data found [ 1440.282309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1440.289329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1440.317844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1440.330993] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1440.352163] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1440.362502] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1440.388743] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1440.419003] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1440.426838] team0: Port device team_slave_0 added [ 1440.434006] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1440.442699] team0: Port device team_slave_1 added [ 1440.461121] device hsr_slave_0 entered promiscuous mode [ 1440.472241] device hsr_slave_1 entered promiscuous mode [ 1440.505422] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1440.525475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1440.532314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1440.560421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1440.575476] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1440.582444] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.589178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.596659] device bridge_slave_0 entered promiscuous mode [ 1440.606021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1440.613233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1440.643677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1440.663210] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.669953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.677098] device bridge_slave_1 entered promiscuous mode [ 1440.687823] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1440.696435] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1440.777933] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.785037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.793372] device bridge_slave_0 entered promiscuous mode [ 1440.810552] device hsr_slave_0 entered promiscuous mode [ 1440.818007] device hsr_slave_1 entered promiscuous mode [ 1440.826382] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1440.835529] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1440.854740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.861473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.870347] device bridge_slave_1 entered promiscuous mode [ 1440.885780] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1440.896512] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1440.944083] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1440.968380] Bluetooth: hci3 command 0x0409 tx timeout [ 1440.968964] Bluetooth: hci2 command 0x0409 tx timeout [ 1440.987689] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1441.035399] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1441.043834] team0: Port device team_slave_0 added [ 1441.048660] Bluetooth: hci4 command 0x0409 tx timeout [ 1441.051921] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1441.062828] team0: Port device team_slave_1 added [ 1441.071952] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1441.082117] team0: Port device team_slave_0 added [ 1441.110240] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1441.117940] team0: Port device team_slave_1 added [ 1441.166119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1441.173190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1441.181640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1441.188573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1441.196330] device bridge_slave_1 left promiscuous mode [ 1441.202876] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.210034] Bluetooth: hci1 command 0x041b tx timeout [ 1441.216028] device bridge_slave_0 left promiscuous mode [ 1441.222298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.231933] device veth0_macvtap left promiscuous mode [ 1441.238856] device veth1_vlan left promiscuous mode [ 1441.243939] device veth0_vlan left promiscuous mode [ 1441.324431] device hsr_slave_1 left promiscuous mode [ 1441.333502] device hsr_slave_0 left promiscuous mode [ 1441.347884] team0 (unregistering): Port device team_slave_1 removed [ 1441.357084] team0 (unregistering): Port device team_slave_0 removed [ 1441.369454] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1441.380611] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1441.406538] bond0 (unregistering): Released all slaves [ 1441.434425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1441.442670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.469087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1441.484451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1441.492066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.519735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1441.545938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1441.552826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.578192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1441.593464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1441.600676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.627346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1441.638656] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1441.651769] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1441.664894] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1441.683798] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1441.690893] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1441.716316] device hsr_slave_0 entered promiscuous mode [ 1441.723300] device hsr_slave_1 entered promiscuous mode [ 1441.733107] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1441.740591] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1441.797120] device hsr_slave_0 entered promiscuous mode [ 1441.804940] device hsr_slave_1 entered promiscuous mode [ 1441.813514] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1441.825350] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1441.835111] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1441.919411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1441.959651] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1441.973036] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1441.987237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1441.995942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1442.033341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1442.046922] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1442.054483] 8021q: adding VLAN 0 to HW filter on device team0 [ 1442.075416] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1442.086055] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1442.108141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1442.116583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1442.129657] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1442.142004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1442.154275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1442.172431] bridge0: port 1(bridge_slave_0) entered blocking state [ 1442.179120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1442.192207] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1442.192217] 8021q: adding VLAN 0 to HW filter on device team0 [ 1442.194935] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1442.197367] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1442.222336] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1442.252054] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1442.281192] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1442.299714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1442.308081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1442.322631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1442.334949] bridge0: port 1(bridge_slave_0) entered blocking state [ 1442.343592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1442.360470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1442.374017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1442.383777] bridge0: port 2(bridge_slave_1) entered blocking state [ 1442.391060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1442.409904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1442.423380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1442.432673] bridge0: port 2(bridge_slave_1) entered blocking state [ 1442.439405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1442.451052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1442.459917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1442.472791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1442.486285] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1442.504870] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1442.523706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1442.535744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1442.546819] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1442.560660] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1442.577288] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1442.587481] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1442.595703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1442.604831] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1442.621881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1442.632152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1442.650117] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1442.671090] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1442.682786] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1442.693834] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1442.701352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1442.710546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1442.718190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1442.727334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1442.737744] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1442.750059] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1442.761110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1442.769411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1442.776923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1442.784736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1442.807520] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1442.815647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1442.829160] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1442.840913] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1442.868033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1442.876362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1442.899226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1442.909117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1442.917827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1442.928784] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1442.934990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1442.951224] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1442.973249] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1442.984086] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1443.002831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1443.011229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1443.023385] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1443.030214] 8021q: adding VLAN 0 to HW filter on device team0 [ 1443.042511] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1443.051266] Bluetooth: hci2 command 0x041b tx timeout [ 1443.056138] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1443.056583] Bluetooth: hci3 command 0x041b tx timeout [ 1443.073248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1443.085011] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1443.092244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1443.108704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1443.115523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1443.123519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1443.128806] Bluetooth: hci4 command 0x041b tx timeout [ 1443.137219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1443.147212] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1443.165866] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1443.175383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1443.187251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1443.196196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.202721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1443.210453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1443.219475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1443.227588] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1443.238142] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1443.246390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1443.259507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1443.271085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.277591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1443.285288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1443.289450] Bluetooth: hci1 command 0x040f tx timeout [ 1443.293647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1443.308672] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1443.323331] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1443.331990] 8021q: adding VLAN 0 to HW filter on device team0 [ 1443.341426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1443.355152] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1443.366469] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1443.383762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1443.392811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1443.401033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1443.412979] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1443.424400] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1443.436074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1443.444435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1443.452456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.459044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1443.467101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1443.476636] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1443.487236] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1443.496398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1443.506386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1443.516053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1443.524600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1443.533529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.539970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1443.551121] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1443.559738] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1443.569624] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1443.581921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1443.589941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1443.603803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1443.615150] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1443.625646] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1443.634730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1443.644434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1443.652756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1443.663498] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1443.675042] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1443.687117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1443.700664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1443.710106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1443.718897] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1443.730617] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1443.736778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1443.751013] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1443.758649] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1443.765883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1443.774949] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1443.786252] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1443.799383] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1443.806655] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1443.814436] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1443.827261] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1443.841068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1443.850020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1443.861235] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1443.871553] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1443.884617] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1443.892998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1443.904850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1443.913752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1443.922554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1443.931300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1443.939633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1443.947259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1443.955674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1443.963927] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1443.974186] device veth0_vlan entered promiscuous mode [ 1443.984259] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1443.990710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1444.001126] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1444.013806] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1444.022900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1444.047596] device veth1_vlan entered promiscuous mode [ 1444.056397] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1444.071328] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1444.090511] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1444.101099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1444.115413] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1444.123602] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1444.142652] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1444.152123] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1444.160574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1444.167548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1444.183644] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1444.192497] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1444.200646] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1444.212262] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1444.223605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1444.234819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1444.245591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1444.260764] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1444.268039] device veth0_macvtap entered promiscuous mode [ 1444.283458] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1444.292015] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1444.301629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1444.310460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1444.320705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1444.328057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1444.340013] device veth1_macvtap entered promiscuous mode [ 1444.352669] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1444.360531] device veth0_vlan entered promiscuous mode [ 1444.373613] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1444.384227] device veth1_vlan entered promiscuous mode [ 1444.392842] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1444.405422] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1444.417896] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1444.433103] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1444.443000] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1444.455084] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1444.463790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1444.473404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1444.483764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1444.495218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.510575] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1444.518835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1444.526982] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1444.537000] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1444.545170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1444.553798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1444.565349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1444.582518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.593847] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1444.601527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1444.622146] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1444.629935] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1444.639325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1444.654229] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1444.665555] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1444.677037] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1444.685147] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1444.693166] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1444.703224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1444.711762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1444.722585] device veth0_macvtap entered promiscuous mode [ 1444.730418] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1444.741541] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1444.752049] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1444.763208] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1444.772902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1444.781370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1444.792583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1444.801024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1444.810045] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1444.817500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1444.835539] device veth0_vlan entered promiscuous mode [ 1444.846488] device veth1_macvtap entered promiscuous mode [ 1444.864308] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1444.873512] device veth1_vlan entered promiscuous mode [ 1444.882123] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1444.895179] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1444.910985] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1444.920851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1444.931535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.941364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1444.954970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.965903] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1444.974197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1444.984580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1444.992350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1445.003022] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1445.011596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1445.021546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1445.032160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.041731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1445.051848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.062685] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1445.069925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1445.080422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1445.089193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1445.102124] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1445.111267] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1445.118227] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1445.128096] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1445.136328] Bluetooth: hci3 command 0x040f tx timeout [ 1445.142669] Bluetooth: hci2 command 0x040f tx timeout [ 1445.162124] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1445.175848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1445.184878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1445.195640] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1445.207695] device veth0_macvtap entered promiscuous mode [ 1445.215626] Bluetooth: hci4 command 0x040f tx timeout [ 1445.216631] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1445.231266] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1445.241935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1445.250249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1445.260578] device veth0_vlan entered promiscuous mode [ 1445.274984] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1445.283363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1445.297145] device veth1_vlan entered promiscuous mode [ 1445.303683] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1445.314492] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1445.323650] device veth1_macvtap entered promiscuous mode [ 1445.332700] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1445.344504] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1445.363402] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1445.369301] Bluetooth: hci1 command 0x0419 tx timeout [ 1445.381901] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1445.433768] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1445.442744] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1445.455209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1445.469522] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1445.484477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1445.492537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1445.505673] device veth0_macvtap entered promiscuous mode [ 1445.516077] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1445.531917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1445.542546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.553818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1445.564199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.574756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1445.585368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.596636] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1445.604335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1445.615500] device veth1_macvtap entered promiscuous mode [ 1445.623089] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1445.630527] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1445.639426] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1445.647532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1445.656126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1445.667524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1445.677986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.696598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1445.711683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.721608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1445.734557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.746132] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1445.756407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1445.767585] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1445.782245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1445.796711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1445.825306] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1445.838069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1445.855826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.866156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1445.880521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.891411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1445.904905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.917722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1445.929084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1445.940361] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1445.947953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1445.955184] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1445.963406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1445.983050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1445.993290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1446.004287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1446.015233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1446.025521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1446.035968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1446.045798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1446.056740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1446.072586] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1446.082046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1446.092469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1446.101863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1446.103582] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1446.122138] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:34:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:34:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) socket$inet6(0xa, 0x2, 0x0) 20:34:38 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() 20:34:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) [ 1446.697067] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1446.752386] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:34:38 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) [ 1446.891402] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1446.937101] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:34:38 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) [ 1447.057511] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1447.094087] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:34:38 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:34:38 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:38 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() 20:34:38 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) [ 1447.209011] Bluetooth: hci2 command 0x0419 tx timeout [ 1447.227129] Bluetooth: hci3 command 0x0419 tx timeout [ 1447.291037] Bluetooth: hci4 command 0x0419 tx timeout 20:34:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:38 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) [ 1448.676303] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1448.720428] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1450.905257] IPVS: ftp: loaded support on port[0] = 21 [ 1451.071852] chnl_net:caif_netlink_parms(): no params data found [ 1451.133805] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.141558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1451.151342] device bridge_slave_0 entered promiscuous mode [ 1451.158881] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.165540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1451.174384] device bridge_slave_1 entered promiscuous mode [ 1451.197924] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1451.209245] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1451.233738] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1451.242994] team0: Port device team_slave_0 added [ 1451.248610] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1451.255828] team0: Port device team_slave_1 added [ 1451.275569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1451.283362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1451.309839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1451.321434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1451.328031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1451.353551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1451.364335] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1451.372421] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1451.395511] device hsr_slave_0 entered promiscuous mode [ 1451.401366] device hsr_slave_1 entered promiscuous mode [ 1451.407621] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1451.415360] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1451.496097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.502804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1451.509560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.516054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1451.550338] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1451.556465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1451.565818] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1451.575815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1451.583200] bridge0: port 1(bridge_slave_0) entered disabled state [ 1451.590164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1451.604318] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1451.610819] 8021q: adding VLAN 0 to HW filter on device team0 [ 1451.622335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1451.630154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.636564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1451.648832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1451.656488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.662930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1451.680468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1451.689938] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1451.700219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1451.716765] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1451.727570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1451.739299] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1451.745741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1451.755552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1451.763925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1451.777852] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1451.786386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1451.795009] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1451.805434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1451.864556] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1451.875027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1451.907984] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1451.916187] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1451.923257] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1451.935987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1451.943977] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1451.951173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1451.960036] device veth0_vlan entered promiscuous mode [ 1451.969824] device veth1_vlan entered promiscuous mode [ 1451.975797] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1451.985388] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1451.996622] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1452.006922] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1452.014467] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1452.022649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1452.033133] device veth0_macvtap entered promiscuous mode [ 1452.040261] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1452.048998] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1452.056190] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1452.067616] device veth1_macvtap entered promiscuous mode [ 1452.076989] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1452.086712] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1452.096740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1452.107065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.116459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1452.126347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.135570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1452.145488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.154887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1452.164672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.174063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1452.184019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.197942] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1452.206021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1452.214008] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1452.222123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1452.232124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1452.242613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.252175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1452.262932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.272161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1452.281944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.291150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1452.300929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.310262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1452.320449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.331540] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1452.338772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1452.346248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1452.354276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1452.588902] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1452.599423] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:34:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:34:44 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:44 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:34:44 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() 20:34:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:34:44 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) [ 1452.792563] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1452.804145] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:34:44 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() 20:34:44 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) [ 1452.969480] Bluetooth: hci5 command 0x0409 tx timeout [ 1452.978597] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1453.007294] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:34:44 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:44 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() 20:34:44 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) [ 1453.147040] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1453.199078] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1453.310078] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1453.327993] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:34:44 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:44 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() 20:34:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:34:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:34:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:45 executing program 5: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() 20:34:45 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:34:45 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:45 executing program 5: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() 20:34:45 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:46 executing program 5: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() 20:34:46 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:34:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:34:46 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() 20:34:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:46 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:46 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() [ 1455.048672] Bluetooth: hci5 command 0x041b tx timeout 20:34:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:34:47 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', 0x0, 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:47 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() 20:34:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:34:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:34:47 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() 20:34:47 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', 0x0, 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:47 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', 0x0, 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:47 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() 20:34:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:47 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:48 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() 20:34:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:48 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:34:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:34:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:34:48 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() 20:34:48 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:48 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:48 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, 0x0) 20:34:48 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:48 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() [ 1457.128943] Bluetooth: hci5 command 0x040f tx timeout 20:34:48 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, 0x0) 20:34:48 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:48 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) [ 1457.656424] EXT4-fs: 16 callbacks suppressed [ 1457.656434] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1457.672255] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:34:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:34:49 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, 0x0) 20:34:49 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() 20:34:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:34:49 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:34:49 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)) 20:34:49 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() 20:34:49 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:49 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) [ 1458.281643] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue 20:34:49 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() 20:34:49 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)) [ 1458.519077] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue 20:34:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:34:50 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:50 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() 20:34:50 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)) 20:34:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:34:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:34:50 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) [ 1459.208733] Bluetooth: hci5 command 0x0419 tx timeout 20:34:50 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', 0x0, 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() [ 1459.244581] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue 20:34:50 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:50 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10) 20:34:50 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:50 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', 0x0, 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() 20:34:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:34:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x2, 0x1, 0xe01}, 0x14}}, 0x0) 20:34:51 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:51 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', 0x0, 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() 20:34:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:34:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:34:51 executing program 2: socketpair(0x25, 0x0, 0x0, &(0x7f0000000280)) 20:34:51 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) [ 1460.325297] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring 20:34:51 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() 20:34:51 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240), 0x4) [ 1460.388339] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:34:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:34:51 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) [ 1460.547956] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1460.569460] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:34:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:34:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000006ab74d"], 0x38}}, 0x0) 20:34:52 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() 20:34:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:34:52 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:34:52 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x74}}, 0x0) 20:34:52 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() [ 1461.383527] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring 20:34:52 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:34:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 20:34:52 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, 0x0) fork() 20:34:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:34:53 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:34:53 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', 0x0, 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:53 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, 0x0) fork() 20:34:53 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000007d00), 0xffffffffffffffff) 20:34:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:34:53 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', 0x0, 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:53 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:34:53 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000005d40), 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000000)) 20:34:53 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, 0x0) fork() 20:34:53 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', 0x0, 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:53 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:34:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:34:54 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0) 20:34:54 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:34:54 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)) fork() 20:34:54 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:34:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:34:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, 0x0, &(0x7f0000000000)=0xffffffffffffff8f) 20:34:54 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:34:54 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@journal_async_commit}]}) [ 1463.443382] EXT4-fs: 3 callbacks suppressed [ 1463.443393] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue 20:34:54 executing program 2: socket(0x2, 0x0, 0xc16) 20:34:54 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)) fork() 20:34:54 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@journal_async_commit}]}) [ 1463.631029] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue 20:34:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:34:55 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000002c0)=@buf) 20:34:55 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:34:55 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, 0x0) 20:34:55 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)) fork() 20:34:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:34:55 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, 0x0) [ 1464.528397] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue 20:34:56 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:34:56 executing program 5: setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) 20:34:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0x40049409, 0x0) 20:34:56 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, 0x0) 20:34:56 executing program 5: io_setup(0x1, &(0x7f0000000ac0)=0x0) io_destroy(r0) io_destroy(r0) 20:34:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:34:56 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:34:56 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000004180), 0x0, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, 0x0) 20:34:56 executing program 5: bpf$MAP_CREATE(0x2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000009ec0)={&(0x7f0000009bc0), 0xc, &(0x7f0000009e80)={0x0}}, 0x440c1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000009f00)=ANY=[@ANYBLOB="c41e0000", @ANYRES16=r4, @ANYBLOB="010000000000f0ffffff4a000000080001001d00000048200300"], 0x1ec4}}, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) 20:34:56 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)) 20:34:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:34:57 executing program 2: socket(0x23, 0x0, 0x2b99) 20:34:57 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)) [ 1465.568758] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue [ 1465.582220] netlink: 7848 bytes leftover after parsing attributes in process `syz-executor.5'. 20:34:57 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:34:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "c8449b0258c891e1"}}]}, 0x20}}, 0x0) 20:34:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), r0) [ 1465.643689] netlink: 7848 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1465.675515] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue 20:34:57 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)) [ 1465.826357] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue 20:34:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:34:57 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:34:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "c8449b0258c891e1"}}]}, 0x20}}, 0x0) 20:34:57 executing program 5: socket$inet6(0xa, 0x3, 0x9) 20:34:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f00000031c0)=ANY=[], 0x19b0}}, 0x0) 20:34:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:34:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0x541b, 0x0) 20:34:58 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001100), 0x10}, 0x78) 20:34:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "c8449b0258c891e1"}}]}, 0x20}}, 0x0) 20:34:58 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:34:58 executing program 4: syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) 20:34:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "c8449b0258c891e1"}}]}, 0x20}}, 0x0) 20:34:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:34:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000000040)={'veth0_to_bond\x00', @ifru_data=0x0}) 20:34:59 executing program 4: bpf$MAP_CREATE(0x2, &(0x7f0000003100), 0x40) 20:34:59 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:34:59 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x450302, 0x0) 20:34:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:34:59 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) 20:34:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0x801c581f, 0x0) 20:34:59 executing program 2: r0 = memfd_create(&(0x7f0000002a80)='(+*%\x00', 0x0) preadv2(r0, &(0x7f0000001800)=[{&(0x7f0000000080)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x1) 20:34:59 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:34:59 executing program 4: socketpair(0x2b, 0x0, 0x0, &(0x7f00000000c0)) 20:34:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x1d}, @void, @val={0xc, 0x99, {0x0, 0x80}}}}}, 0x28}}, 0x0) [ 1468.069686] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1468.080211] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:00 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, 0x0) 20:35:00 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:35:00 executing program 4: openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 20:35:00 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc4e42, 0x0) 20:35:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:00 executing program 5: syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) 20:35:00 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:35:00 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000004180), 0x0, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) 20:35:00 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x32) 20:35:00 executing program 4: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20002402) syz_genetlink_get_family_id$tipc(&(0x7f0000000740), 0xffffffffffffffff) 20:35:00 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005240)={0x0}) [ 1469.045793] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1469.057114] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:01 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', 0x0, 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:35:01 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz1\x00', 0x200002, 0x0) 20:35:01 executing program 5: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x2}, 0x0, 0x0) 20:35:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:01 executing program 4: futex(&(0x7f0000000200), 0x9, 0x0, &(0x7f0000000280), 0x0, 0x1) 20:35:01 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', 0x0, 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:35:01 executing program 2: socketpair(0x25, 0x0, 0x0, &(0x7f0000000240)) 20:35:01 executing program 4: bpf$MAP_CREATE(0x12, &(0x7f0000003100), 0x40) 20:35:01 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', 0x0, 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:35:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f00000031c0)=ANY=[], 0x19b0}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) 20:35:01 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) [ 1470.178379] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1470.189847] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:02 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000240)="d5", 0x1}, {0x0}, {0x0}, {&(0x7f0000001240)='%', 0x1}], 0x4, &(0x7f0000001340)=ANY=[], 0x1b8}, 0x0) 20:35:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)=@file={0x1, './file0/file0\x00'}, 0x6e) 20:35:02 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) 20:35:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:02 executing program 5: sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x6044001, &(0x7f0000000100)=@in4={0x21, 0x6, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0xa001, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) 20:35:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8924, &(0x7f0000000000)={'wlan1\x00'}) 20:35:02 executing program 4: bpf$BPF_BTF_GET_FD_BY_ID(0xa, 0x0, 0x0) 20:35:02 executing program 2: socketpair(0x2, 0x3, 0x0, &(0x7f0000000180)) 20:35:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x14, r1, 0x101}, 0x14}}, 0x0) 20:35:02 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x2, 0x0) [ 1470.986806] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1470.997315] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:02 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x4}]}}, &(0x7f00000000c0)=""/210, 0x26, 0xd2, 0x1}, 0x20) 20:35:03 executing program 4: bpf$BPF_BTF_GET_FD_BY_ID(0x8, 0x0, 0x0) 20:35:03 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, 0x0) socket$inet6(0xa, 0x2, 0x0) 20:35:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x38}}, 0x0) 20:35:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) read$usbfs(r0, &(0x7f0000000140)=""/101, 0x65) 20:35:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x8000000000000000}}, 0x0) 20:35:03 executing program 4: socket(0x11, 0xa, 0x9) 20:35:03 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, 0x0) socket$inet6(0xa, 0x2, 0x0) 20:35:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000009840)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000003b00)=ANY=[@ANYBLOB="1c00000000000000019d670002", @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYRES32, @ANYRES32], 0x60}], 0x1, 0x0) 20:35:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x60}, 0x0) 20:35:03 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000180)=@raw=[@exit], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) [ 1472.010684] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1472.021148] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:03 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001210"], 0x30}}, 0x0) 20:35:03 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, 0x0) socket$inet6(0xa, 0x2, 0x0) 20:35:03 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002540)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 20:35:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8923, &(0x7f0000000000)={'wlan1\x00'}) 20:35:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 20:35:04 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)) socket$inet6(0xa, 0x2, 0x0) 20:35:04 executing program 5: r0 = memfd_create(&(0x7f0000002a80)='(+*%\x00', 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={{r1}}) 20:35:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:04 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) 20:35:04 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000014000503000000310001005301696c92af"], 0x48}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 20:35:04 executing program 4: r0 = memfd_create(&(0x7f0000002a80)='(+*%\x00', 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x4030582a, 0x0) 20:35:04 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)) 20:35:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) fork() [ 1473.053119] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue [ 1473.080460] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring 20:35:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:05 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:05 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)) socket$inet6(0xa, 0x2, 0x0) 20:35:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:06 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)) socket$inet6(0xa, 0x2, 0x0) [ 1474.538006] EXT4-fs: 6 callbacks suppressed [ 1474.538017] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue [ 1474.653028] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue 20:35:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) 20:35:06 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) socket$inet6(0xa, 0x0, 0x0) 20:35:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) [ 1474.925133] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring 20:35:06 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() [ 1474.967218] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) [ 1475.458635] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1475.491962] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1475.643171] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1475.653589] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1475.662395] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1475.672837] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:07 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() 20:35:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:08 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)) 20:35:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() 20:35:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:10 executing program 3: syz_mount_image$f2fs(0x0, &(0x7f0000001280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000017c0)='./file0\x00', 0x0, 0x120000, 0x0) 20:35:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:11 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:11 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, 0x0) 20:35:11 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x38) 20:35:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:11 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0xabfa}) 20:35:11 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0x10}}, 0x0) 20:35:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8930, &(0x7f0000000000)={'wlan1\x00'}) 20:35:11 executing program 2: keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001200)={'cmac-aes-ce\x00'}}) 20:35:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000d00)={0xec4, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x64, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x5d, 0x4, "f7571e5a4b8985abc60145dbd8275a63764cc7be517f270b746bb659592f3adfe79fec3bcdd6f0b24d555d1b8bfab6816a8f9528e1db0a816d2c083c12607ff41148f238aa0435ce23a5cf0122c68d0b13a51c4fcaec074764"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xca0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc99, 0x5, "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"}]}]}, 0xec4}}, 0x0) 20:35:11 executing program 4: bpf$BPF_BTF_GET_FD_BY_ID(0xe, 0x0, 0x0) 20:35:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5421, &(0x7f0000000000)={'wlan1\x00'}) 20:35:11 executing program 4: clock_gettime(0x5, &(0x7f0000004300)) [ 1480.465625] could not allocate digest TFM handle cmac-aes-ce [ 1480.525692] could not allocate digest TFM handle cmac-aes-ce [ 1480.552328] EXT4-fs: 10 callbacks suppressed [ 1480.552339] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1480.604022] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:12 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:12 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='x'], 0x38}}, 0x0) 20:35:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000080)) waitid(0x1, 0x0, &(0x7f0000000000), 0x8, 0x0) 20:35:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x6000}, 0x0) 20:35:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x20, r1, 0x535823eebb2ceb9f, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}}, 0x0) 20:35:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 20:35:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000003c40)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, 0x0}}], 0x1, 0x40000072, 0x0) 20:35:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8971, &(0x7f0000000000)={'wlan1\x00'}) 20:35:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0189436, &(0x7f0000000000)={'wlan1\x00'}) 20:35:12 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000c1401002dbd7000fcdbdf2508003d0005000000080003000000000008003d000500000008"], 0x58}}, 0x0) 20:35:12 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x423bde4139614c06, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}]}, &(0x7f0000000300)='syzkaller\x00', 0x1, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1481.575366] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1481.586811] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:13 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001940)=@delchain={0x34, 0x65, 0x1, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}]}, 0x34}}, 0x0) 20:35:13 executing program 3: syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 20:35:13 executing program 2: openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x40080, 0x0) 20:35:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:13 executing program 5: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0x0) 20:35:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8922, &(0x7f0000000000)={'wlan1\x00'}) 20:35:13 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0xa001, 0x0) 20:35:13 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, 0x0) 20:35:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89b0, &(0x7f0000000000)={'wlan1\x00'}) 20:35:13 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0xd, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 20:35:13 executing program 2: mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x2, @thr={0x0, 0x0}}) [ 1482.718901] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1482.729772] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:14 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000004600)) 20:35:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001e80)={0xfffffffffffffda9}, 0x14}}, 0x0) 20:35:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580), 0x2}}, 0x20) 20:35:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f0000000000)={'wlan1\x00'}) 20:35:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:14 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000300)=@raw=[@func, @map_val], &(0x7f0000000380)='GPL\x00', 0x1, 0xa4, &(0x7f00000003c0)=""/164, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:35:14 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0xabfa, 0x0, 0x0, 0x0, 0x0, 0x9}) 20:35:14 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0xab, &(0x7f00000000c0)=""/171, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:35:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x401c5820, &(0x7f0000000000)={'wlan1\x00'}) 20:35:14 executing program 3: setitimer(0x1, &(0x7f0000000140)={{0x77359400}}, 0x0) 20:35:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r0) [ 1483.721958] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1483.732080] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:15 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:15 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f0000005bc0), 0x4200, 0x0) 20:35:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x70}}, 0x0) 20:35:15 executing program 3: alarm(0x687) 20:35:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000005d40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000003640)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0x30}], 0x1, 0x0) 20:35:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB=';'], 0x14}}, 0x0) 20:35:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0x30}}, 0x0) 20:35:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(r0, &(0x7f0000006100)={0x2020}, 0x2020) 20:35:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8927, &(0x7f0000000000)={'wlan1\x00'}) 20:35:15 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@call]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xa9, &(0x7f00000000c0)=""/169, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:35:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x40086602, 0x0) [ 1484.734983] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1484.745445] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:16 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:16 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 20:35:16 executing program 2: select(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x9}, &(0x7f00000000c0)) 20:35:16 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0}) 20:35:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:16 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x40) 20:35:16 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000c1401002dbd7000fcdbdf2508003d0005000000080003000000000008003d0005000000080001"], 0x58}}, 0x0) 20:35:16 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 20:35:16 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000005d40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000003640)=[@rights={{0x10}}], 0x10}], 0x1, 0x0) 20:35:16 executing program 4: write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, 0x0, 0x0) 20:35:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a0, &(0x7f0000000000)={'wlan1\x00'}) 20:35:16 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) [ 1486.009598] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1486.021041] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:17 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:17 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) 20:35:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x14}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x15c, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xb7, 0x5, "a553d47511f4a803229f2a9b500c2cff361a442cc24e4791d08021f5726d763d45a7451815e123c8c94d890cee1955ce51f2e2e6297179efa512bec9482ed5c36682b5d62174db60cc5fc1be90b1d2349ba997131d65c00dc354b614809fede7507857c15890a3dee1b499e239afe72dd9b2cffbfd279ac2ac9478e7fe9bd7989ef9302374319146d5a94a61a197e57d863339284bbeb215b3196e828de97dabc5c151332fa3936ebc623b85a51e31278718b6"}]}, @ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x15c}}, 0x4004000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x14}, 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001e80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0], 0x14}}, 0x0) 20:35:17 executing program 2: mq_open(&(0x7f000000d180)='\\)\x00', 0x0, 0x0, 0x0) 20:35:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0xf0ff7f00000000}}, 0x0) 20:35:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x2, &(0x7f0000000000)={'wlan1\x00'}) 20:35:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x4}, 0x0) 20:35:18 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x32, &(0x7f00000003c0)="c4c6910199198c3ff795c6dc6faeda078a00ea57ff22ea97be19af3dcba01419cd1486ad59157689c9c6a4737f0db4aabeba"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 20:35:18 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x49, &(0x7f00000003c0)="c4c6910199198c3ff795c6dc6faeda078a00ea57ff22ea97be19af3dcba01419cd1486ad59157689c9c6a4737f0db4aabebae8dc5dffbc0600000000f4ff00a56b60f48cf0c9d0989e"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 20:35:18 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x2) 20:35:18 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x29, &(0x7f00000003c0)="c4c6910199198c3ff795c6dc6faeda078a00ea57ff22ea97be19af3dcba01419cd1486ad59157689c9"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) [ 1487.183462] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1487.196145] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:19 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x2) 20:35:19 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x2a, &(0x7f00000003c0)="c4c6910199198c3ff795c6dc6faeda078a00ea57ff22ea97be19af3dcba01419cd1486ad59157689c9c6"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 20:35:19 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) 20:35:19 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x2e, &(0x7f00000003c0)="c4c6910199198c3ff795c6dc6faeda078a00ea57ff22ea97be19af3dcba01419cd1486ad59157689c9c6a4737f0d"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 20:35:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:19 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x2) 20:35:19 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x2) 20:35:19 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x2e, &(0x7f00000003c0)="c4c6910199198c3ff795c6dc6faeda078a00ea57ff22ea97be19af3dcba01419cd1486ad59157689c9c6a4737f0d"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 20:35:19 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000009c0)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0x10) 20:35:19 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x9, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 20:35:19 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x0) [ 1488.323002] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1488.333450] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:20 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x2e, &(0x7f00000003c0)="c4c6910199198c3ff795c6dc6faeda078a00ea57ff22ea97be19af3dcba01419cd1486ad59157689c9c6a4737f0d"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 20:35:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000040)) 20:35:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 20:35:20 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) 20:35:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:20 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x2e, &(0x7f00000003c0)="c4c6910199198c3ff795c6dc6faeda078a00ea57ff22ea97be19af3dcba01419cd1486ad59157689c9c6a4737f0d"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 20:35:20 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, 0x0) 20:35:20 executing program 2: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000006c0), 0x240, 0x0) 20:35:20 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000080)) 20:35:20 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000009c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 20:35:20 executing program 5: pipe2(&(0x7f0000001100)={0xffffffffffffffff}, 0x0) faccessat(r0, &(0x7f0000000100)='./file0\x00', 0x0) [ 1489.112119] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1489.123069] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:21 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 20:35:21 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f0000000000)='wlan1\x00\xff\x1a\xec\xb5\x12\x03F\xd9\x0e\x00\xff\x05\x00 \x00\x00\x00\x00(\x00\x03\x00,\t\xfdj\xe3\x85\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5%f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa3N\xc7\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7') 20:35:21 executing program 5: r0 = openat$bsg(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) 20:35:21 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) 20:35:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:21 executing program 5: socketpair(0x0, 0x80000, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) 20:35:21 executing program 2: add_key$keyring(&(0x7f0000005b40), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000005700), &(0x7f0000005740)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 20:35:21 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x2, &(0x7f0000000480)=[{0x0, 0x80, 0x0, 0x28000000}, {0xae5}]}) 20:35:21 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r0, &(0x7f0000027a00)=[{{&(0x7f00000228c0)=@sco={0x1f, @fixed}, 0x80, 0x0}}], 0x1, 0x0, 0x0) 20:35:21 executing program 2: r0 = getpid() sched_getaffinity(r0, 0x8, &(0x7f0000000980)) 20:35:21 executing program 5: socketpair(0x0, 0x80000, 0x0, &(0x7f0000000000)) [ 1490.206247] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1490.216733] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 20:35:22 executing program 3: add_key$keyring(&(0x7f0000005700), &(0x7f0000005740)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000005b40), &(0x7f0000005b80)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r0, 0x0, 0x0) 20:35:22 executing program 5: keyctl$search(0xa, 0x0, &(0x7f00000000c0)='dns_resolver\x00', 0x0, 0xfffffffffffffffa) 20:35:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:22 executing program 4: request_key(&(0x7f0000005a80)='cifs.spnego\x00', &(0x7f0000005ac0)={'syz', 0x2}, 0x0, 0x0) 20:35:22 executing program 4: add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffff9) 20:35:22 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) 20:35:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000000107"], 0x1c}}, 0x0) 20:35:22 executing program 3: socketpair(0x28, 0x0, 0x0, &(0x7f0000000a80)) 20:35:22 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000002040), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000002040), 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000001140)={{r1}}) 20:35:22 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000002040), 0x0, 0x0) preadv2(r0, &(0x7f0000000480)=[{&(0x7f0000000400)=""/66, 0x42}], 0x1, 0x0, 0x0, 0x0) [ 1491.256697] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1491.267204] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:23 executing program 3: r0 = memfd_create(&(0x7f0000002a80)='(+*%\x00', 0x0) flistxattr(r0, &(0x7f0000000000)=""/248, 0xf8) 20:35:23 executing program 4: syz_open_dev$loop(&(0x7f0000001040), 0x0, 0x0) 20:35:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c3549b4c2f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b314b", 0xff7c}], 0x1) 20:35:23 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000002040), 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[], 0x5c, 0x0) 20:35:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:23 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000400)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 20:35:23 executing program 3: r0 = memfd_create(&(0x7f0000002a80)='(+*%\x00', 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x5421, 0x0) 20:35:23 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x0) 20:35:23 executing program 3: memfd_create(&(0x7f0000000180)='(+*%@\x88\r`\xdd\x9d&\xc0\xe0\xe1\xe8&\xf22\xea\xb7\x17\xac-D\x05h\xa3\xc3\x84\x80h\xca\xbd\xa5#\x06=6\xe3\xb0\x13\x80\x05\x00\x00\x00\x00\xcc-\x94\xa7p\x8b\x81\xcc(\a\xa3\a\a\xa0b0\xcd\x8a\x82O}\x8ei\xde\a\x19C\x8d\xb4\xfa\x02m\xae\x9a\xaf\xa2\x9e\x86%\xdc\xd2UC\x86\x8ee\\\'\xac\xf9\xefz\x7f/N\xf0V\x96\x91\xed\x7f\rNy\xa9\xb7O\xe9\xa4\xaf\xb9\xbdM\xfd+.\x81\x154.\xa6\x06\x12\x12^\x1a\x00R\x18\xe2\x920$9\xdeLz\x8cE\x02\xd8\xff\x98\x96\x17\x9f\x8a\x18\x82 \xf2\x1b\x99\xb5+P\xff\xcdUfU\x1b\xc9\x19|\xea\xb7\xd0\xf7\x18\xc5\x8e$.\x1c\x91\x1e\x82\x85\'\x87\xc4\xa7\xbe\r\xa2z=\x15\xce\x0e9m\xac\xd1\x8a\xb2\xc8=\x06\x91\x96\x1aS\'>u\x8f\xe2\xae\xbb\xc6\xf9\v[\x03\xfc#\xfc\x99\x0f\xa5\xde\xe2\xbc8\x8cVkS]\x82T\xa6`g\xd1R\x82\xc0\xd3\v.\xa92\x95\xc0;]\x02\xb4\x93\xb9\xb7\xd4\x00', 0x4) 20:35:23 executing program 5: r0 = epoll_create(0x101) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)) 20:35:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x18, 0x0, "843672d6d600ac580940b44a64986d12c3ceb848236fc044bf64d6510d5e2a7a1e9fa1090d63cef82392dd9f5deba219163e34fe70499b29553fc44bc5cc9740b892c35b0dba88d16f63113e63b2eb3b"}, 0xd8) 20:35:23 executing program 2: r0 = memfd_create(&(0x7f0000002a80), 0x0) close(r0) 20:35:23 executing program 5: ppoll(&(0x7f0000001240)=[{}], 0x1, &(0x7f0000001280), 0x0, 0x0) 20:35:23 executing program 4: r0 = memfd_create(&(0x7f0000002a80)='(+*%\x00', 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:35:23 executing program 5: r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r0, &(0x7f0000002240)={&(0x7f0000000500)=@in={0x2, 0x0, @multicast1}, 0x80, 0x0, 0x0, &(0x7f0000001d40)=[{0x10, 0x10a}, {0x10, 0x0, 0x8}], 0x20}, 0x0) [ 1492.526008] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1492.538331] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:24 executing program 3: r0 = memfd_create(&(0x7f0000002a80)='(+*%\x00', 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x5450, 0x0) 20:35:24 executing program 4: r0 = memfd_create(&(0x7f0000002a80)='(+*%\x00', 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x2, 0x0) 20:35:24 executing program 2: r0 = memfd_create(&(0x7f0000002a80)='(+*%\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x5c, 0x0) 20:35:24 executing program 5: r0 = memfd_create(&(0x7f0000002a80)='(+*%\x00', 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0xc0045878, 0x0) 20:35:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:24 executing program 4: tee(0xffffffffffffffff, 0xffffffffffffffff, 0xbb1, 0x0) 20:35:24 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000600)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90) 20:35:24 executing program 2: syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 20:35:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 20:35:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) bind(r0, &(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x8000}, 0x80) 20:35:24 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x46, 0x0, 0x0) [ 1493.455880] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1493.469831] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) bind(r0, &(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x0, 0x8000}, 0x80) 20:35:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 20:35:25 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0}, 0x0) 20:35:25 executing program 3: mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) 20:35:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000001180)) 20:35:25 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bbb}, {{}, 0x0, @in6=@loopback}}, 0xe8) 20:35:25 executing program 5: syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80000a, &(0x7f0000000240)) 20:35:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800001, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f00000001c0)={0x0, 0x0}) 20:35:25 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0), 0x0) 20:35:25 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x49, &(0x7f0000006f00)={0x0, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x10) [ 1494.370641] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1494.380938] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:26 executing program 5: sched_rr_get_interval(0x0, &(0x7f000000a640)) 20:35:26 executing program 4: r0 = msgget$private(0x0, 0x110) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/196) 20:35:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000003140)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @dev}}}], 0x20}}], 0x1, 0x0) 20:35:26 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'sit0\x00', 0x0}) 20:35:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:26 executing program 5: sched_rr_get_interval(0x0, &(0x7f000000a640)) 20:35:26 executing program 4: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0xe2}, &(0x7f00000000c0)={0x0, 0xea60}) 20:35:26 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000005c0), 0x8) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e21, 0x0, @local, 0x6e}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@hoplimit_2292={{0x14}}], 0x18}, 0x0) 20:35:26 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) 20:35:26 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 20:35:26 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @dev}, 0x1c) 20:35:26 executing program 5: sched_rr_get_interval(0x0, &(0x7f000000a640)) 20:35:26 executing program 4: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0xe2}, 0x0) 20:35:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@hopopts={{0x18}}, @pktinfo={{0x24, 0x29, 0x32, {@dev}}}], 0x40}}], 0x1, 0x0) [ 1495.371755] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1495.382000] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:26 executing program 3: syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f00000002c0)) 20:35:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:27 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000006f00)={0x0, 0xfe, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim, @enc_lim, @generic={0x0, 0x7e1, "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"}]}, 0x800) 20:35:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, &(0x7f0000000180)="a1", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @empty, 0x9a}, 0x1c) 20:35:27 executing program 5: sched_rr_get_interval(0x0, &(0x7f000000a640)) 20:35:27 executing program 4: mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5) 20:35:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f000000d180)=[{{0x0, 0x0, &(0x7f0000003200)=[{0x0}, {0x0}, {&(0x7f0000003140)='P', 0xc0}], 0x3}}, {{&(0x7f00000033c0)=@pppol2tpv3, 0x80, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) 20:35:27 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x224100, 0x0) 20:35:27 executing program 5: setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0xfffffefc) 20:35:27 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) connect(r0, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80) 20:35:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x19, &(0x7f0000006f00), 0x8) [ 1496.404175] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1496.420283] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:27 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x101140, 0x0) 20:35:28 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000007440)={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 20:35:28 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x23, &(0x7f0000006f00), 0x8) 20:35:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000003140)=[{{&(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev}}}], 0x40}}], 0x1, 0x0) 20:35:28 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_tracing={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:35:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:28 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') 20:35:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000080)) 20:35:28 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f00000001c0)={{}, 0x0, 0x0, 'id1\x00', 'timer0\x00'}) 20:35:28 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 20:35:28 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, 0x0, 0x0) 20:35:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 20:35:28 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x3a, 0x0, 0x0) 20:35:28 executing program 3: syz_open_procfs(0x0, &(0x7f0000004740)='net/hci\x00') 20:35:28 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2}, {{@in, 0x0, 0x2b}, 0x0, @in6=@loopback}}, 0xe8) 20:35:28 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x1e, &(0x7f0000006f00), 0x8) [ 1497.617507] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1497.629822] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_del_from_white_list={{0x2012, 0x7}, {0x0, @fixed}}}, 0xb) 20:35:29 executing program 3: mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffa000/0x2000)=nil) 20:35:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000003140)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0xc9050000, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}], 0x20}}], 0x1, 0x0) 20:35:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:29 executing program 4: r0 = syz_usbip_server_init(0x0) write$usbip_server(r0, &(0x7f0000000d80), 0x30) 20:35:29 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname$inet6(r0, 0x0, &(0x7f0000006f40)=0xfc000000) 20:35:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6, 0x13, r0, 0x0) 20:35:29 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00') ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, 0x0) 20:35:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@private, @in6=@mcast2}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x20}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 20:35:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x1}, 0x14}}, 0x0) [ 1498.400018] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN 20:35:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000c00)={&(0x7f0000000b00), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14}, 0x14}}, 0x0) [ 1498.651662] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1498.661985] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1498.928026] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN 20:35:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@private, @in6=@mcast2}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x20}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 20:35:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000003140)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000640)="9c8a16eff843c3bc198ea6cf4f9c90f6e92f5ea07b90d589f8b6785e4702b55a86d1a79835e6b9cdc6fafd9e885c06bfd544680d5130e5b99e8da3c7032843bca6c5d864f1a3ddd36108f33a274844281228aa19663cc263a5", 0x59}, {&(0x7f0000000200)="8cf3298aed51e63ec8dff9b886947eeaf0be32673d0f2757c6dc4049d6", 0x1d}, {&(0x7f00000006c0)="f694a2c55a69f81f745057ed204a38ece692fbf2253956b9b09ec634f3fcbee29d7929bbf818c6d38dfcbbdd9667c04a4d53ca3cc1f01698589b5f90870277138d97ff174b61c97fe3", 0x49}, {&(0x7f0000000740)="4b9b38d99c7bd8f357298799a62f39737e12dc0a6cdf7ec4269c6d6c49f7130866d8e40acbf4be50f0687cd7763d5b2a31f57cd7803d57aea2cb6afbd9027c6438299e2878ab6db8736b4c7d9026018f2f1007f897d1005b36a0947c4f97f4f699d52ad5451c413df153741903c4bd54451b4e7c446fbe44fccdf92faa38976f62b44698cc0a972abb14e4e06cb96d522c9a7eaba01ce819eeb1d6f018d32816260fe56ac8152f048643e73e3366ec355fefac21956e5925c917fd95499d24bc89b91520d81b34f05b6fb24d6ca016e9bbff420d808c38cda240366540042d2e78f28c4915e44f07de7f865f044fe679440f4cf71b8aa9cd", 0xf8}], 0x4, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev}}}], 0x40}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000e00)="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", 0x9d2}], 0x14}}], 0x2, 0x0) 20:35:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12040, 0x0) 20:35:30 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x2}, 0x1c, 0x0}}], 0x1, 0x0) 20:35:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:30 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='fsi_master_acf_cmd_abs_addr\x00'}, 0x10) 20:35:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@private, @in6=@mcast2}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x20}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 20:35:30 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002500)={0x40c, 0x0, 0x0, 0x0, 0x0, "", [@generic="9594446fa28abf39e154417870593f2dd6fc4b90e990ee5bebc182875d47e84063a72a028084d03dbb6ac9626fe66767b34e2173b1eceab810f9ec1b17ad0ca6029b3f56bfc98e61191ce775db9e7b1c071bf72603341ec095235b27e219d3361bb21c32c45531", @generic="aa426c2144d50bddaf81022108ac59e9f7b37740e028fd53c90be0ac6743d4780da56a5fc2e92722674cd9f0f56e4f55714d83f5a57f10576e19b0a0ec5b1a43d92147951560ef95a627f20c559d", @nested={0x258, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="c1d7a9f4202342201dfba8d5fca35e7b1cf09c5304ba2a2a3fe09610285d622fc03c696b7f0dcf0cd5cb5656fc31a77e65ee2223dc0aa023b108d1f25e7f84612cd8735e400b9da37f5a26720c5a8b194cbf258fa502e199adba8cf77a2eed797d87a0798d3fb672e6e6d075af34b7d8c671f7790c7f3d273fac55b72556a8e3b6c9cb06efab0017a61de7f0dc69748873c2cd794894670aeb818471bd647cc68cd73c419e9a2098aa3eb7536967c15c5cd7abebd6580982c1c3", @generic="f50f2f338bdc14b381daee27f7ec1ecdebd005c6a03552a75d98b1fbd30a9182cbd053dc2999c903a6dc68ed05c5c902bfb513ed3fb6857f686858e269c37c377efa73d44c01292be7ed966172c82111d4c89ecbfcac630baec67b781375e73a2c6fc3ab4fb32078be6cd6d70bd37a844c2b5b239cad2b6874d24904fff1ce9ae39200f4efb1eb8c771669c67f49874af40af65d1bfd14ad3e0bdf956de7c2ee54df78ca1255b5575d18a61738c9e564ad78f09c3e3878d7c0740a21cad32e1d14d3fc91a4766ce1c5e6d2bc831cf741e5908938f7423b602fd8d614f1aed181", @generic="49f5492bc131d4cbb1158404f68da23830553aac270601d4e6ccb26940531fd15549f2c298e3ff0c1e001af91f6e56294c1b00b8b32e9ee2091f1ef052ebac652921c8186b7b94b3641805cee7b36e33a1876b05eb487be7459c86c8ea0b6b0e", @generic="e2f26b89eed115b9c8bea211064318f33d492f58b12ed6d2e72d2688268889078571fab58e1f5b6b7d33c587d9e979896dbbeb3e110fe5040830a74e39db5f15712774d8eac1e9af8dd6b2cd1faecbce0610"]}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a8d0c986cfe25229e602569939cef65ac8f7a5ed63dcf80ca5e78c8de10b09b9298ff18df06229a9dc79b0f2587964b2a04e75a192f60c60314636853cedd7b840f23a54a66af24fc784672648adafac179a535cc681235c78afe78696be7ac87a691bccfe6bd73c50257d11d5107b4b1c86de18dc595f635929cc3e6f21ffd5da31122c58f1d049c745bbb3f3c587289ba053ca8deaae182415bf6f81bca4d75ec003c252dd68c518fd520e0b85ae237424dd4c4548e2ba4f2371acabd4a35ef849a68760e89ab28de55f7572f3bd89b8b9a4c428a8c7c1d46af925e0518b0535538220"]}, 0x40c}, {&(0x7f00000016c0)={0x268, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x249, 0x0, 0x0, 0x1, [@generic="d48c46e6182b9639773a47342a8142fb6d22a3c742afab6063608c1bec1da63abd1c793ca9e7f93141f04beabdac6db89ae60d179ec46cad06e81799929e8224412ddb3aeb1b1ac1eec9aeb2b712aac1ccfad43dbe6a77ada4995f1800bd173b6d3738c4dc961fb0a628e8aa6d90c66f243b3ef5d8796f94f48e52daf84f10793e8b77993ceed6e3df1e4d8babe77cf8f3207bb8a508fc63a0dd07ef1589ce9560d49dcf900241673888", @typed={0x58, 0x0, 0x0, 0x0, @str='@\x83[[\x00\xbe\xc8|\xfa\x953\xcd3\x9b\xe7|\x1b{U\xaaF\xefyO\xc8A\xdaQ5\xea\xe9t\x7fY\xd3\xcb\xe1\xc2e\xa6\x9b\xd9[N>|\xf8\x85\xe6\x00\xbf\xe7\x157E\x1f\xeb\xd7B\xc1\x05}\x06\xddj\xbak\xa7\xffk\xd4}>\x04\x8aq\x85\xc9E\xeb9\x18g\xfe'}, @typed={0x5d, 0x0, 0x0, 0x0, @binary="b89b81f294bb969a69ed9eaa2f462c9a604eff0d022575a3b8206457f65c7c1e0d76ce89899b7d353905286e34bf09d4d6ac3fb8c395740a8430ea17fd5533334be45d1ad146d72826ef00eb596f2bc593eecff3a2d8b0cb71"}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="a7a8a2fad367dc470437b12f247e19381a69061efe11b84f32b8ce634399f623cca4ed9300a1eb60ca1b168e2e8dbd5de195dda13dfef193a26d3fbfaed312ebd65d799e991606150348f65ff8b709cb850e39b159530c9b68e671b9330029b9cf80d65a88b8dbda1bdc283f24f385578e1039e98fd37912a5d5bc105bd9a76af6bf637c127411f75f7aed5e5b5ad393ed77f8245953ba5178ad9447efbc74991564cb39fa5554c5c495d6b6233c296394af771c2bbe78c2789bd4e77f856adf04aa103ba2038b86b66b20e87507f599baec0e"]}]}, 0x268}, {&(0x7f0000002f80)={0x850, 0x0, 0x0, 0x0, 0x0, "", [@generic="808f33bf447e6058bde5ce06b6458e8ff6f250607c5170908e1c17700c42e6c6075fc7d581314c253caf4c317e8cfae10d0600184f7ab6b739eef8794bdc9e42def6cd777b87bab3118190d9e13133b2edd94ec364887282908766ad496f77be837412461c663707be60ac272ad3a892e79baaf7e92f6203ef", @nested={0x7c1, 0x0, 0x0, 0x1, [@generic="25a07fccadba5e996c57ff99bf1fe1ef9ebd3756f8ee7c7bc3ab1e9528e38aaf6c145f47409ed6678363caad40d193aebfde5dbe6db143123df0496b9717d8f8e4066f01bea6a881b418c8b13ac1be4d640b3318d678e88254f1dae29edf2a195a0f99fe1c4334c696aaa0623ebc4fb0962ac48a9361244fe19da3fa2fb9366adb75f02d3ebe68a5a344e1e2e1b32ed1f8ef78185b6b150dde163641e2f3da368df0d672e68fe7af7f62925ab32182900de7798f7d3f6d90ae862f70ea04ef6c3ce796101e9aa6cf57d3dab770c906be414f1b5125f3979e2253022ad638de215565ebb6d537fcb68d1269a4ed5c632660afb704132068a23ba106ea6572e957aad48edccaf00fdb8ff671a252944c7ef0bc0bd37b1051b2b3b6c86fd6a8ec5d16b6043bb1370e6c5a3408473e719b98d4a570a5404b177b6d5af8e6b545839f5f8e7397046ea93289a0f0fb9085b92e45958b3a908b934deb568f77002d4b00d51610a1a36eab614b0b67df0ef83b9f3d4bb7d7e3d65a3eb0ff73e3c9511993e791a068a55758a309e0929f1a4572371a71ec4cb8e99886f94c06aff38e120a0ad3b69ad1af81d0f9703b97c4d810c69f38e1dfd697aefd7cbcbbb969cf98758f9b0a4ba5cea51eb31707ff09cf8e6628bb87ca5811f643be452c344c1aa66db0eb4fad1f554953cd0ef47ea994015a1cea98b8ea711e79d2096714eaddd5b2eea189093afd0add229575d2cc27d890f38430dc1a47e894c28fb559b78ad96b69c8ffcdd9f8172e1c6e22706e427d6a9b1a4076c17a7cfaa6739c0697461d3ed282933f315c2c1ae525bca5f47a1034f2aa9654abd70b063de373732cbbc4dfcec56238f5ef25ffa4ebef4e96e11ceabe0c6d08901fe96e0c6aa18fc299a8a7b39d93f776b93edea27bacb3b45c00d872454f0e19e9699593524b29b6f33e573e8a73abf3606a4c9ec2fd4071b2db77163dec8d12ba32d6c1d353d977eef16bd53837fd220a5e45a81c1ffa76b9802f9f54259dacc91e86bc571137b93f396adb19e8c588c1b69a88a0280ee77bec9e5c2903ab19356328690450d67283ca8f4bf25c7f47d1219edb64641a366d6ee39968310749a78eb86451055fd6bc94157789944f77c11640689d462622be481bbb841925c070963a821e99f8a84c63d2cf86d016adbe300a0c10178a63fa6c7ded8986a6609afe68bbec0f2118ded1bb0981866044bab39afdae85c6077839b59cda99dd4946a1d9b66d5ac5f7833e32a0c3481e409f8c44a315b1df005e317c4c2342d3438d35ab389b6162f838fc5f66e5dc537cc31cf336834ddbae702184ecc9c5033786ae56a22d39fe6dbdb2b08d26df90fbbe1c7de229b361d2b28d2fb68c101ad47d490e441bffe84c8f4d67c140bccbf5046d27664ef62c7c2b7754dbc865a0af2047b0e78e501c9df985f67213c4d55b9a055c98a49b14af824a6ac72cd23316f6ce9d5a971ecee9cfe2fe7ea4b3d6d6eec641d06b500f2e6522bcd0fe53ed616e05d58695d29340c92cf9060a32387b0ac36448769d438daaa780bd683fba87cc3702147424026739ad5b1f7792c0a46b7720fe31bedc49f06ec440395ea0a72d4f762ab2073d50e1e4a37d9ba772d66075bd47d9ddc80774edda4de1390998bd9933b83f1b48251d9d03fedf63743070a81bd0f44156dc096cef09fc3a872b88ca59d7a9f779977350f0494f02baf25c865341927cd0df8aa871bdfb2f6fafe52d29e783b876fb7a5a40cc498487d4125beb8af0cfb4454c68bfac114ed6b55e9a007ab278ad1fbb82b5df4e745900196de573e4cec2ce78709c335ea0d6908d71c72fec7e1303a0ed1fa3fe2af43d753b76ba7992948869fe8252a44260a0f4758299e1a3094f68cffed5b8c4dcae18088d75afa3b90e2d6789230ab64b6dde322d68984d0fc65839f2731ae8878ca86b1367798e5a70d61c47c3507edb683224dc7204909598dd05e54ed489d561be6eb81470d82afb99fc9f2896c167e36c9af8dce0d286156b47bd601ef7e7c7c9c7a643d0ca7f42929b8a8c8486c30e2fd96407e0165934aec575708f5d7e42df23c7085d70fff2d128eccbe22c4c0093353cc09c5873531ebd493405196f0e3c2ad03e9863b9d42cf7a7640f1dc71509bd9487eb53c8ed41abcfa58965cb9ad152d084c78e271d413f6f7ea452acdfaf701013ade33c7f8129fec213ef9b95ac0a53f0e24e51c690d0a4acb419fe7286837f92b962de24d5d1bfc20f6f37650d1cdcd1900d1f34c6bcabc73b5873fdf5c8ef1cc6cb41b39424da9ce7e011e5723acbd104acfc9211c2001e454dff7d5a46c5aa8547782952d49aeb772754ca2e74f447c214bffaba9ad6e3a2c2ea436693f44de60419f3289303aa5acf3c72a7d1e36f7a235f30bcec04259fd97fb3ffccdc1a67d332b8efedbb011f452a2f8650d795c6bc5f4aa27305afcf3004ab92554d7a109ac1e1d674a588725502ad75517d159e6560e841f80a2a6d0fb12ca86fe2105ae188d7712ff586c7834e38bd248e89c9422fd15a30b5ccdf119053642b2a7a7b41259a6e3289be815f44086602b2a28f7dc2c728f3e7f9f2829f81c2d5f2d7a85849cb20d19cee303bed10ce720e70616da72b8d947ed111e62596ff0e968e493d2ddbb77c9bfa3b94598d6adb3bd4eb889ab9243057393cbe709f573a6ab75017af9d803065ff483a8a74b9d1003f3d1acfe227d5273f2dd8c8483fb10dd6eacc6428c9b96f8ea87e70024cf409a4f19f12475bb1b60e60a53d1aa4d4397bbc8aeab7"]}]}, 0x850}], 0x3, 0x0, 0x0, 0x48000}, 0x0) [ 1499.448822] Bluetooth: hci0 command 0x080f tx timeout 20:35:30 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0142, 0x0) 20:35:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x34}}, 0x0) 20:35:31 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x3a, &(0x7f0000006f00), 0x8) [ 1499.902118] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1499.912743] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:31 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x31, &(0x7f0000006f00), 0x8) 20:35:31 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@dev]}, 0x18) 20:35:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:32 executing program 4: r0 = perf_event_open$cgroup(&(0x7f0000000140)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)) 20:35:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000003140)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000640)="9c8a16eff843c3bc198ea6cf4f9c90f6e92f5ea07b90d589f8b6785e4702b55a86d1a79835e6b9cdc6fafd9e885c06bfd544680d5130e5b99e8da3c7032843bca6c5d864f1a3ddd36108f33a274844281228aa19663cc263a5", 0x59}, {&(0x7f0000000200)="8cf3298aed51e63ec8dff9b886947eeaf0be32673d0f2757c6dc4049d6", 0x1d}, {&(0x7f00000006c0)="f694a2c55a69f81f745057ed204a38ece692fbf2253956b9b09ec634f3fcbee29d7929bbf818c6d38dfcbbdd9667c04a4d53ca3cc1f01698589b5f90870277138d97ff174b61c97fe3", 0x49}, {&(0x7f0000000740)="4b9b38d99c7bd8f357298799a62f39737e12dc0a6cdf7ec4269c6d6c49f7130866d8e40acbf4be50f0687cd7763d5b2a31f57cd7803d57aea2cb6afbd9027c6438299e2878ab6db8736b4c7d9026018f2f1007f897d1005b36a0947c4f97f4f699d52ad5451c413df153741903c4bd54451b4e7c446fbe44fccdf92faa38976f62b44698cc0a972abb14e4e06cb96d522c9a7eaba01ce819eeb1d6f018d32816260fe56ac8152f048643e73e3366ec355fefac21956e5925c917fd95499d24bc89b91520d81b34f05b6fb24d6ca016e9bbff420d808c38cda240366540042d2e78f28c4915e44f07de7f865f044fe679440f4cf71b8aa9cd", 0xf8}], 0x4, &(0x7f0000000900)=[@ip_pktinfo={{0xf, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev}}}], 0x40}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000e00)="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", 0x9d2}], 0x1}}], 0x2, 0x0) 20:35:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@private, @in6=@mcast2}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x20}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 20:35:32 executing program 3: prctl$PR_CAPBSET_DROP(0x8, 0xda) 20:35:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 20:35:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xd, 0x0, 0x0) 20:35:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x40, 0x0, 0x4}, 0x40) 20:35:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000980)={@remote, 0x400002b}) 20:35:32 executing program 5: syz_genetlink_get_family_id$gtp(&(0x7f0000000480), 0xffffffffffffffff) 20:35:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) [ 1500.945066] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1500.955753] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:32 executing program 4: bpf$MAP_CREATE(0x4, 0x0, 0x10) 20:35:32 executing program 2: bpf$MAP_CREATE(0xf, 0x0, 0x0) 20:35:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x6, 0x6c4, &(0x7f0000000180)=@mangle={'mangle\x00', 0x1f, 0x6, 0x52c, 0x0, 0x0, 0x21c, 0x4a4, 0x4a4, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'macvlan0\x00', 'batadv_slave_0\x00'}, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@multicast1}}}, {{@ipv6={@empty, @local, [], [], 'vxcan1\x00', 'veth1_macvtap\x00'}, 0x0, 0xa4, 0xe4}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8d8c2c8472931e3e96bf5328f1adf2b4389a4b7d828cfbeee23cfd43271d"}}, {{@ipv6={@empty, @local, [], [], 'vlan1\x00', 'macsec0\x00'}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@private2}}}, {{@ipv6={@loopback, @private0, [], [], 'team_slave_0\x00', 'ip6gretap0\x00'}, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@private0}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x588) 20:35:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x5411, &(0x7f0000000280)={'rose0\x00', @ifru_hwaddr=@dev}) 20:35:33 executing program 2: bpf$MAP_CREATE(0x9, &(0x7f0000000040), 0x40) 20:35:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:33 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) 20:35:33 executing program 5: r0 = epoll_create(0x12) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x3f, 0x0, 0x0) 20:35:33 executing program 4: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'ip6erspan0\x00', {0x2, 0x0, @loopback}}) 20:35:33 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@hopopts_2292={{0x14, 0x29, 0x3b}}], 0x14}, 0x0) 20:35:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x10, 0x0, 0x0) [ 1502.134994] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1502.150122] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001440)=@ipv6_getnetconf={0x1c, 0x52, 0x1, 0x0, 0x0, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x80}]}, 0x1c}}, 0x0) 20:35:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x6c, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x4}}]}, 0x6c}}, 0x0) 20:35:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xc, 0x0, 0x0) 20:35:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x6, 0xd, &(0x7f0000000180)=@mangle={'mangle\x00', 0x1f, 0x6, 0x52c, 0x0, 0x0, 0x21c, 0x4a4, 0x4a4, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'macvlan0\x00', 'batadv_slave_0\x00'}, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@multicast1}}}, {{@ipv6={@empty, @local, [], [], 'vxcan1\x00', 'veth1_macvtap\x00'}, 0x0, 0xa4, 0xe4}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8d8c2c8472931e3e96bf5328f1adf2b4389a4b7d828cfbeee23cfd43271d"}}, {{@ipv6={@empty, @local, [], [], 'vlan1\x00', 'macsec0\x00'}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@private2}}}, {{@ipv6={@loopback, @private0, [], [], 'team_slave_0\x00', 'ip6gretap0\x00'}, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@private0}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x588) 20:35:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) [ 1502.687303] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:35:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:34 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000001900)='./file0\x00', 0x0, 0x0, &(0x7f0000001a80), 0x0, 0x0) 20:35:34 executing program 5: bpf$MAP_CREATE(0x6, &(0x7f0000000280), 0x40) 20:35:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x1600bd80, &(0x7f0000000480)=@security={'security\x00', 0xe, 0x4, 0x2c4, 0xffffffff, 0xb0, 0xb0, 0xb0, 0xffffffff, 0xffffffff, 0x344, 0x344, 0x344, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @local, 0x0, 0x0, 'geneve1\x00', 'vcan0\x00'}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0x2]}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "bf2c4789a213377c13872d0dda8eccf5e4d7410ead47cb4488fa0d22b4c1"}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x320) 20:35:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x2, 0x40, 0x0, 0x0) 20:35:34 executing program 3: bpf$MAP_CREATE(0x7, 0x0, 0x0) 20:35:34 executing program 4: syz_mount_image$iso9660(&(0x7f00000018c0), &(0x7f0000001900)='./file0\x00', 0x0, 0x1, &(0x7f0000001a80)=[{0x0}], 0x0, &(0x7f0000001ac0)) socketpair(0x0, 0x0, 0x5, 0x0) 20:35:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@security={'security\x00', 0xe, 0x4, 0x200008b4, 0xffffffff, 0xb0, 0xb0, 0xb0, 0xffffffff, 0xffffffff, 0x344, 0x344, 0x344, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@private, @local, 0x0, 0x0, 'geneve1\x00', 'vcan0\x00'}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0x184, 0x1c4, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "bf2c4789a213377c13872d0dda8eccf5e4d7410ead47cb4488fa0d22b4c1"}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x434) 20:35:34 executing program 5: fork() wait4(0x0, 0x0, 0x8, 0x0) 20:35:34 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000085c0)=[{&(0x7f0000008400)='i', 0x1, 0x2020000}], 0x0, 0x0) 20:35:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x0, 0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x40) [ 1503.096073] ISOFS: Unable to identify CD-ROM format. [ 1503.228871] ISOFS: Unable to identify CD-ROM format. [ 1503.368524] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1503.394777] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:35 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={0xffffffffffffffff, 0x24, 0x0, 0x0, 0x0}, 0x20) 20:35:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(r0, 0x1, 0x7, 0x0, &(0x7f0000000080)) 20:35:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x8, 0x81, 0x7fff, 0x2, 0x1}, 0x40) 20:35:35 executing program 5: openat$pidfd(0xffffff9c, &(0x7f0000000140), 0x212040, 0x0) 20:35:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002280)={'veth0_macvtap\x00', &(0x7f0000000200)=@ethtool_ts_info}) 20:35:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, 0x0}, 0x24000054) 20:35:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x32, &(0x7f0000000480)=@security={'security\x00', 0xe, 0x4, 0x2c4, 0xffffffff, 0xb0, 0xb0, 0xb0, 0xffffffff, 0xffffffff, 0x344, 0x344, 0x344, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @local, 0x0, 0x0, 'geneve1\x00', 'vcan0\x00'}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "bf2c4789a213377c13872d0dda8eccf5e4d7410ead47cb4488fa0d22b4c1"}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x320) [ 1504.676392] syz-executor.3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1504.728973] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1504.739417] CPU: 1 PID: 4775 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1504.747253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1504.756625] Call Trace: [ 1504.759226] dump_stack+0x1b2/0x281 [ 1504.762884] dump_header+0x178/0x82f [ 1504.766691] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1504.771816] ? ___ratelimit+0x2cd/0x530 [ 1504.775803] oom_kill_process.cold+0x10/0xa40 [ 1504.780308] out_of_memory+0xe3e/0x1190 [ 1504.784315] ? oom_killer_disable+0x1c0/0x1c0 [ 1504.788943] ? mutex_trylock+0x152/0x1a0 [ 1504.793011] __alloc_pages_nodemask+0x23e1/0x2720 [ 1504.797868] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1504.802719] ? trace_hardirqs_on+0x10/0x10 [ 1504.806951] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 1504.811832] ? kmem_cache_alloc+0x1e5/0x3c0 [ 1504.816183] ? cache_grow_begin+0x3f/0x700 [ 1504.820433] cache_grow_begin+0x91/0x700 [ 1504.824758] fallback_alloc+0x207/0x2c0 [ 1504.828747] kmem_cache_alloc+0x1e5/0x3c0 [ 1504.833009] getname_flags+0xc8/0x550 [ 1504.836985] ? SyS_access+0x20/0x20 [ 1504.840709] user_path_at_empty+0x2a/0x50 [ 1504.844853] SyS_chdir+0x7e/0x1a0 [ 1504.848333] ? SyS_access+0x20/0x20 [ 1504.852051] ? __do_page_fault+0x159/0xad0 [ 1504.856278] ? do_syscall_64+0x4c/0x640 [ 1504.860275] ? SyS_access+0x20/0x20 [ 1504.863889] do_syscall_64+0x1d5/0x640 [ 1504.867771] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1504.873005] RIP: 0033:0x465767 [ 1504.876186] RSP: 002b:00007ffe19b1f5e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 1504.883918] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000465767 [ 1504.891306] RDX: 0000000000000001 RSI: 0000000000546ed0 RDI: 00007ffe19b1f680 [ 1504.898573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000546ed0 [ 1504.905892] R10: 000000000156e400 R11: 0000000000000246 R12: 0000000000000001 [ 1504.913154] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe19b1f6c0 [ 1504.922167] Mem-Info: [ 1504.924751] active_anon:702321 inactive_anon:678429 isolated_anon:0 [ 1504.924751] active_file:35 inactive_file:27 isolated_file:7 [ 1504.924751] unevictable:16241 dirty:37 writeback:0 unstable:0 [ 1504.924751] slab_reclaimable:16400 slab_unreclaimable:141461 [ 1504.924751] mapped:54199 shmem:31509 pagetables:37631 bounce:0 [ 1504.924751] free:25340 free_pcp:57 free_cma:0 [ 1504.962589] Node 0 active_anon:1270476kB inactive_anon:693204kB active_file:72kB inactive_file:80kB unevictable:51868kB isolated(anon):0kB isolated(file):0kB mapped:214604kB dirty:84kB writeback:0kB shmem:90924kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 575488kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1504.991867] Node 1 active_anon:1538808kB inactive_anon:2020512kB active_file:164kB inactive_file:404kB unevictable:13096kB isolated(anon):0kB isolated(file):28kB mapped:2608kB dirty:64kB writeback:0kB shmem:35112kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1505.020121] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:2216kB inactive_anon:1440kB active_file:0kB inactive_file:12kB unevictable:444kB writepending:0kB present:15992kB managed:15908kB mlocked:432kB kernel_stack:0kB pagetables:108kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1505.048089] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1505.055740] Node 0 DMA32 free:36148kB min:36200kB low:45248kB high:54296kB active_anon:1268260kB inactive_anon:691824kB active_file:348kB inactive_file:0kB unevictable:51408kB writepending:0kB present:3129332kB managed:2788128kB mlocked:51408kB kernel_stack:12704kB pagetables:58824kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1505.086578] lowmem_reserve[]: 0 0 0 0 0 [ 1505.090715] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1505.117351] lowmem_reserve[]: 0 0 0 0 0 [ 1505.121843] Node 1 Normal free:54552kB min:53696kB low:67120kB high:80544kB active_anon:1538728kB inactive_anon:2020444kB active_file:20kB inactive_file:28kB unevictable:13096kB writepending:0kB present:4194304kB managed:4128256kB mlocked:13096kB kernel_stack:36160kB pagetables:91436kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1505.151992] lowmem_reserve[]: 0 0 0 0 0 [ 1505.156000] Node 0 DMA: 5*4kB (UMH) 9*8kB (UMEH) 7*16kB (UMEH) 4*32kB (UE) 2*64kB (ME) 3*128kB (UME) 6*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11084kB [ 1505.177518] Node 0 DMA32: 1413*4kB (UME) 1468*8kB (UM) 975*16kB (UME) 110*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36516kB [ 1505.193595] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1505.205577] Node 1 Normal: 77*4kB (UH) 600*8kB (UMH) 36*16kB (UEH) 23*32kB (UMEH) 493*64kB (UMEH) 119*128kB (UMH) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53460kB [ 1505.226781] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1505.236390] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1505.246114] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1505.256293] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1505.266239] 32914 total pagecache pages [ 1505.271548] 0 pages in swap cache [ 1505.276295] Swap cache stats: add 0, delete 0, find 0/0 [ 1505.282974] Free swap = 0kB [ 1505.289891] Total swap = 0kB [ 1505.294189] 2097051 pages RAM [ 1505.310711] 0 pages HighMem/MovableOnly [ 1505.324668] 363849 pages reserved [ 1505.337272] 0 pages cma reserved [ 1505.349209] Out of memory (oom_kill_allocating_task): Kill process 4775 (syz-executor.3) score 0 or sacrifice child [ 1505.366839] Killed process 4775 (syz-executor.3) total-vm:93120kB, anon-rss:116kB, file-rss:34944kB, shmem-rss:0kB [ 1505.385740] oom_reaper: reaped process 4775 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1505.496360] syz-executor.1 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=1000 [ 1505.510029] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1505.516653] CPU: 0 PID: 4761 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1505.525169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1505.535432] Call Trace: [ 1505.538131] dump_stack+0x1b2/0x281 [ 1505.541952] dump_header+0x178/0x82f [ 1505.546017] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1505.551413] ? ___ratelimit+0x2cd/0x530 [ 1505.556385] oom_kill_process.cold+0x10/0xa40 [ 1505.561213] out_of_memory+0xe3e/0x1190 [ 1505.565193] ? oom_killer_disable+0x1c0/0x1c0 [ 1505.569696] ? mutex_trylock+0x152/0x1a0 [ 1505.573944] __alloc_pages_nodemask+0x23e1/0x2720 [ 1505.579052] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1505.583897] ? trace_hardirqs_on+0x10/0x10 [ 1505.588287] ? kmem_cache_alloc_node+0xe3/0x410 [ 1505.592971] ? cache_grow_begin+0x3f/0x700 [ 1505.597400] cache_grow_begin+0x91/0x700 [ 1505.601675] fallback_alloc+0x207/0x2c0 [ 1505.605659] kmem_cache_alloc_node+0xe3/0x410 [ 1505.610253] copy_process.part.0+0x17d3/0x71c0 [ 1505.614942] ? __handle_mm_fault+0x2095/0x4620 [ 1505.619626] ? lock_downgrade+0x740/0x740 [ 1505.623783] ? __lru_cache_add+0x178/0x250 [ 1505.628027] ? do_raw_spin_unlock+0x164/0x220 [ 1505.632526] ? _raw_spin_unlock+0x29/0x40 [ 1505.636878] ? __handle_mm_fault+0x80f/0x4620 [ 1505.641488] ? __cleanup_sighand+0x40/0x40 [ 1505.645722] _do_fork+0x184/0xc80 [ 1505.649173] ? fork_idle+0x270/0x270 [ 1505.652896] ? up_read+0x17/0x30 [ 1505.656264] ? __do_page_fault+0x159/0xad0 [ 1505.660502] ? do_syscall_64+0x4c/0x640 [ 1505.665552] ? sys_vfork+0x20/0x20 [ 1505.669106] do_syscall_64+0x1d5/0x640 [ 1505.673356] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1505.678581] RIP: 0033:0x467a21 [ 1505.681806] RSP: 002b:00007ffe83d6ed68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1505.689521] RAX: ffffffffffffffda RBX: 00007f0679ef1700 RCX: 0000000000467a21 [ 1505.700366] RDX: 00007f0679ef19d0 RSI: 00007f0679ef12f0 RDI: 00000000003d0f00 [ 1505.708772] RBP: 00007ffe83d6efa0 R08: 00007f0679ef1700 R09: 00007f0679ef1700 [ 1505.716436] R10: 00007f0679ef19d0 R11: 0000000000000206 R12: 00007ffe83d6ee1e [ 1505.723733] R13: 00007ffe83d6ee1f R14: 00007f0679ef1300 R15: 0000000000022000 [ 1505.799269] Mem-Info: [ 1505.805150] active_anon:698199 inactive_anon:678407 isolated_anon:0 [ 1505.805150] active_file:22 inactive_file:63 isolated_file:0 [ 1505.805150] unevictable:20112 dirty:0 writeback:10 unstable:0 [ 1505.805150] slab_reclaimable:16401 slab_unreclaimable:141459 [ 1505.805150] mapped:54739 shmem:31509 pagetables:37532 bounce:0 [ 1505.805150] free:25560 free_pcp:79 free_cma:0 [ 1505.950817] Node 0 active_anon:1254084kB inactive_anon:693184kB active_file:8kB inactive_file:40kB unevictable:68252kB isolated(anon):0kB isolated(file):104kB mapped:217400kB dirty:0kB writeback:32kB shmem:90924kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 575488kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1505.979663] Node 1 active_anon:1538712kB inactive_anon:2020444kB active_file:0kB inactive_file:12kB unevictable:14180kB isolated(anon):0kB isolated(file):0kB mapped:3244kB dirty:0kB writeback:8kB shmem:35112kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1506.007656] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2128kB inactive_anon:1448kB active_file:12kB inactive_file:20kB unevictable:480kB writepending:0kB present:15992kB managed:15908kB mlocked:480kB kernel_stack:0kB pagetables:108kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1506.037538] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1506.044758] Node 0 DMA32 free:36556kB min:36200kB low:45248kB high:54296kB active_anon:1251960kB inactive_anon:691736kB active_file:12kB inactive_file:16kB unevictable:67796kB writepending:0kB present:3129332kB managed:2788128kB mlocked:67796kB kernel_stack:12672kB pagetables:58708kB bounce:0kB free_pcp:480kB local_pcp:240kB free_cma:0kB [ 1506.166366] lowmem_reserve[]: 0 0 0 0 0 [ 1506.188024] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1506.231563] lowmem_reserve[]: 0 0 0 0 0 [ 1506.235616] Node 1 Normal free:53620kB min:53696kB low:67120kB high:80544kB active_anon:1538712kB inactive_anon:2020444kB active_file:20kB inactive_file:24kB unevictable:14184kB writepending:0kB present:4194304kB managed:4128256kB mlocked:14184kB kernel_stack:36064kB pagetables:91320kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1506.303100] lowmem_reserve[]: 0 0 0 0 0 [ 1506.307154] Node 0 DMA: 9*4kB (UMH) 9*8kB (UMEH) 7*16kB (UMEH) 4*32kB (UE) 2*64kB (ME) 3*128kB (UME) 6*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11100kB [ 1506.344070] Node 0 DMA32: 158*4kB (UM) 2208*8kB (UM) 925*16kB (UE) 106*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36488kB [ 1506.373557] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1506.403388] Node 1 Normal: 105*4kB (UMH) 618*8kB (UMH) 44*16kB (UMEH) 25*32kB (UMEH) 498*64kB (UMEH) 116*128kB (UH) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53844kB [ 1506.435875] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1506.458593] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1506.493865] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1506.532951] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1506.542034] 33878 total pagecache pages [ 1506.546023] 0 pages in swap cache [ 1506.555458] Swap cache stats: add 0, delete 0, find 0/0 [ 1506.560906] Free swap = 0kB [ 1506.563920] Total swap = 0kB [ 1506.566930] 2097051 pages RAM [ 1506.574542] 0 pages HighMem/MovableOnly [ 1506.578527] 363849 pages reserved [ 1506.582035] 0 pages cma reserved [ 1506.585400] Out of memory (oom_kill_allocating_task): Kill process 4761 (syz-executor.1) score 0 or sacrifice child [ 1506.602286] Killed process 4761 (syz-executor.1) total-vm:93384kB, anon-rss:28180kB, file-rss:42620kB, shmem-rss:0kB [ 1506.622740] oom_reaper: reaped process 4761 (syz-executor.1), now anon-rss:28224kB, file-rss:9408kB, shmem-rss:0kB [ 1506.664410] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1506.780106] systemd-journal cpuset=/ mems_allowed=0-1 [ 1506.785371] CPU: 1 PID: 952 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1506.793271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1506.802631] Call Trace: [ 1506.805244] dump_stack+0x1b2/0x281 [ 1506.808883] dump_header+0x178/0x82f [ 1506.812607] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1506.818239] ? ___ratelimit+0x2cd/0x530 [ 1506.822251] oom_kill_process.cold+0x10/0xa40 [ 1506.826765] out_of_memory+0xe3e/0x1190 [ 1506.830758] ? oom_killer_disable+0x1c0/0x1c0 [ 1506.835267] ? mutex_trylock+0x152/0x1a0 [ 1506.839358] __alloc_pages_nodemask+0x23e1/0x2720 [ 1506.844219] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1506.849066] ? trace_hardirqs_on+0x10/0x10 [ 1506.853305] ? __put_seccomp_filter+0x90/0x90 [ 1506.857809] ? do_raw_spin_unlock+0x164/0x220 [ 1506.862309] ? kmem_cache_alloc+0x1e5/0x3c0 [ 1506.866631] ? cache_grow_begin+0x3f/0x700 [ 1506.870995] cache_grow_begin+0x91/0x700 [ 1506.875177] fallback_alloc+0x207/0x2c0 [ 1506.879158] kmem_cache_alloc+0x1e5/0x3c0 [ 1506.883345] getname_flags+0xc8/0x550 [ 1506.888113] SyS_mkdirat+0x83/0x270 [ 1506.891758] ? SyS_mknod+0x30/0x30 [ 1506.895329] ? do_syscall_64+0x4c/0x640 [ 1506.899313] ? SyS_mkdirat+0x270/0x270 [ 1506.903206] do_syscall_64+0x1d5/0x640 [ 1506.907108] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1506.912306] RIP: 0033:0x7f5610e24687 [ 1506.916037] RSP: 002b:00007fff8e0081b8 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 1506.923772] RAX: ffffffffffffffda RBX: 00007fff8e00b0d0 RCX: 00007f5610e24687 [ 1506.931045] RDX: 00007f5611895a00 RSI: 00000000000001ed RDI: 00005635a9b2e300 [ 1506.938320] RBP: 00007fff8e0081f0 R08: 0000000000000000 R09: 0000000000000000 [ 1506.946726] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 1506.954007] R13: 0000000000000000 R14: 00007fff8e00b0d0 R15: 00007fff8e0086e0 [ 1506.997793] Mem-Info: [ 1507.016307] active_anon:698200 inactive_anon:678407 isolated_anon:0 [ 1507.016307] active_file:13 inactive_file:91 isolated_file:25 [ 1507.016307] unevictable:20541 dirty:0 writeback:0 unstable:0 [ 1507.016307] slab_reclaimable:16401 slab_unreclaimable:141466 [ 1507.016307] mapped:55197 shmem:31509 pagetables:37534 bounce:0 [ 1507.016307] free:25105 free_pcp:27 free_cma:0 [ 1507.097512] Node 0 active_anon:1254084kB inactive_anon:693184kB active_file:180kB inactive_file:632kB unevictable:67408kB isolated(anon):0kB isolated(file):128kB mapped:217424kB dirty:0kB writeback:0kB shmem:90924kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 575488kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1507.164351] Node 1 active_anon:1538712kB inactive_anon:2032844kB active_file:16kB inactive_file:1620kB unevictable:80kB isolated(anon):0kB isolated(file):0kB mapped:3240kB dirty:0kB writeback:0kB shmem:35112kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1507.194224] Node 0 DMA free:11400kB min:204kB low:252kB high:300kB active_anon:2128kB inactive_anon:1532kB active_file:60kB inactive_file:12kB unevictable:8kB writepending:0kB present:15992kB managed:15908kB mlocked:4kB kernel_stack:0kB pagetables:108kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1507.235593] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1507.303170] Node 0 DMA32 free:50112kB min:36200kB low:45248kB high:54296kB active_anon:1251956kB inactive_anon:692240kB active_file:7132kB inactive_file:628kB unevictable:45396kB writepending:0kB present:3129332kB managed:2788128kB mlocked:45476kB kernel_stack:12672kB pagetables:58708kB bounce:0kB free_pcp:1364kB local_pcp:736kB free_cma:0kB [ 1507.429961] lowmem_reserve[]: 0 0 0 0 0 [ 1507.434016] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1507.562647] lowmem_reserve[]: 0 0 0 0 0 [ 1507.566791] Node 1 Normal free:67184kB min:53696kB low:67120kB high:80544kB active_anon:1538712kB inactive_anon:2020544kB active_file:12kB inactive_file:0kB unevictable:80kB writepending:0kB present:4194304kB managed:4128256kB mlocked:4kB kernel_stack:36000kB pagetables:91172kB bounce:0kB free_pcp:1436kB local_pcp:696kB free_cma:0kB 20:35:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "eedee332455c262667682c53fcddcbf79edb151076c96794d85e8ab00a37e3f5", "b28a505e6a988082fef307347f5465f348d644db1d898456930ee857a86afd74", "a8a3d65c8c678be4dfdabeb92c59cbb9b252fd519a5497eb4365664e1e6a47a5", "76be121876abd6f135b8ad82fbc55b764ea5efa19149d5f56e40a6eeeaa21d92", "6cd95118b76e1daf5e7a1d3d134330299ad14d0c12d08628b66e2cfc39391075", "813a63d77407584c2e9b574c"}}) 20:35:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x6, 0x2, &(0x7f0000000180)=@mangle={'mangle\x00', 0x1f, 0x6, 0x52c, 0x0, 0x0, 0x21c, 0x4a4, 0x4a4, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'macvlan0\x00', 'batadv_slave_0\x00'}, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@multicast1}}}, {{@ipv6={@empty, @local, [], [], 'vxcan1\x00', 'veth1_macvtap\x00'}, 0x0, 0xa4, 0xe4}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8d8c2c8472931e3e96bf5328f1adf2b4389a4b7d828cfbeee23cfd43271d"}}, {{@ipv6={@empty, @local, [], [], 'vlan1\x00', 'macsec0\x00'}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@private2}}}, {{@ipv6={@loopback, @private0, [], [], 'team_slave_0\x00', 'ip6gretap0\x00'}, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@private0}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x588) 20:35:39 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, 0x0, 0x0) 20:35:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) [ 1507.764355] lowmem_reserve[]: 0 0 0 0 0 [ 1507.773800] Node 0 DMA: 44*4kB (UMH) 21*8kB (UMEH) 12*16kB (UMEH) 8*32kB (UME) 2*64kB (ME) 3*128kB (UME) 6*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11544kB [ 1507.790917] Node 0 DMA32: 1145*4kB (UM) 2364*8kB (UM) 1028*16kB (UME) 128*32kB (UME) 4*64kB (M) 3*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44932kB [ 1507.811497] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1507.835661] Node 1 Normal: 459*4kB (UMH) 853*8kB (UMH) 172*16kB (UMEH) 64*32kB (UMEH) 543*64kB (UMEH) 128*128kB (UMH) 6*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 67156kB [ 1507.857898] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1507.900288] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 20:35:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000080)={'veth0_to_batadv\x00', @ifru_data=0x0}) [ 1507.955534] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring 20:35:39 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x5, 0x8000}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f00000002c0)=""/175, 0x37, 0xaf, 0xb82}, 0x20) [ 1508.000480] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1508.037926] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) [ 1508.090312] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 20:35:39 executing program 2: bpf$MAP_CREATE(0x14, &(0x7f0000000280), 0x40) 20:35:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x12, &(0x7f0000000480)=@security={'security\x00', 0xe, 0x4, 0x2c4, 0xffffffff, 0xb0, 0xb0, 0xb0, 0xffffffff, 0xffffffff, 0x344, 0x344, 0x344, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @local, 0x0, 0x0, 'geneve1\x00', 'vcan0\x00'}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "bf2c4789a213377c13872d0dda8eccf5e4d7410ead47cb4488fa0d22b4c1"}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x320) [ 1508.134332] 34040 total pagecache pages [ 1508.138349] 0 pages in swap cache 20:35:39 executing program 4: r0 = socket$inet(0x2, 0x3, 0x8e) recvfrom(r0, 0x0, 0x0, 0x2122, 0x0, 0x0) 20:35:39 executing program 3: r0 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="dc040000", @ANYRES16=r0, @ANYBLOB="010000000000000000000300000008000100", @ANYBLOB="580202803c"], 0x4dc}}, 0x0) 20:35:39 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x4b, &(0x7f0000006f00)={0x0, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x10) [ 1508.196623] Swap cache stats: add 0, delete 0, find 0/0 [ 1508.234331] Free swap = 0kB [ 1508.248360] Total swap = 0kB [ 1508.270408] 2097051 pages RAM 20:35:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x18, 0x0, 0x0) [ 1508.293667] 0 pages HighMem/MovableOnly [ 1508.297703] 363849 pages reserved [ 1508.312429] netlink: 1156 bytes leftover after parsing attributes in process `syz-executor.3'. 20:35:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xa, 0x0, 0x0) [ 1508.357926] 0 pages cma reserved [ 1508.369527] Out of memory (oom_kill_allocating_task): Kill process 952 (systemd-journal) score 0 or sacrifice child [ 1508.386724] netlink: 1156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1508.426237] Killed process 952 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:2472kB [ 1508.487518] oom_reaper: reaped process 952 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2472kB [ 1508.527978] syz-executor.1 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=1000 [ 1508.541419] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1508.548121] CPU: 1 PID: 4782 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1508.555928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1508.565305] Call Trace: [ 1508.567887] dump_stack+0x1b2/0x281 [ 1508.571513] dump_header+0x178/0x82f [ 1508.575232] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1508.580343] ? ___ratelimit+0x2cd/0x530 [ 1508.584347] oom_kill_process.cold+0x10/0xa40 [ 1508.588846] out_of_memory+0xe3e/0x1190 [ 1508.592843] ? oom_killer_disable+0x1c0/0x1c0 [ 1508.597436] ? mutex_trylock+0x152/0x1a0 [ 1508.601529] __alloc_pages_nodemask+0x23e1/0x2720 [ 1508.606385] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1508.611226] ? trace_hardirqs_on+0x10/0x10 [ 1508.615629] ? kmem_cache_alloc_node+0xe3/0x410 [ 1508.620361] ? cache_grow_begin+0x3f/0x700 [ 1508.624603] cache_grow_begin+0x91/0x700 [ 1508.628706] fallback_alloc+0x207/0x2c0 [ 1508.632677] kmem_cache_alloc_node+0xe3/0x410 [ 1508.637289] copy_process.part.0+0x17d3/0x71c0 [ 1508.641859] ? __handle_mm_fault+0x2095/0x4620 [ 1508.646429] ? lock_downgrade+0x740/0x740 [ 1508.650579] ? __lru_cache_add+0x178/0x250 [ 1508.654830] ? do_raw_spin_unlock+0x164/0x220 [ 1508.659321] ? _raw_spin_unlock+0x29/0x40 [ 1508.663616] ? __handle_mm_fault+0x80f/0x4620 [ 1508.668114] ? __cleanup_sighand+0x40/0x40 [ 1508.672461] _do_fork+0x184/0xc80 [ 1508.675916] ? fork_idle+0x270/0x270 [ 1508.679629] ? up_read+0x17/0x30 [ 1508.682991] ? __do_page_fault+0x159/0xad0 [ 1508.687391] ? do_syscall_64+0x4c/0x640 [ 1508.691443] ? sys_vfork+0x20/0x20 [ 1508.694974] do_syscall_64+0x1d5/0x640 [ 1508.698868] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1508.704226] RIP: 0033:0x467a21 [ 1508.707436] RSP: 002b:00007ffe83d6ed68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1508.715140] RAX: ffffffffffffffda RBX: 00007f0679ed0700 RCX: 0000000000467a21 [ 1508.722413] RDX: 00007f0679ed09d0 RSI: 00007f0679ed02f0 RDI: 00000000003d0f00 [ 1508.729696] RBP: 00007ffe83d6efa0 R08: 00007f0679ed0700 R09: 00007f0679ed0700 [ 1508.736957] R10: 00007f0679ed09d0 R11: 0000000000000206 R12: 00007ffe83d6ee1e [ 1508.744214] R13: 00007ffe83d6ee1f R14: 00007f0679ed0300 R15: 0000000000022000 [ 1508.757521] Mem-Info: [ 1508.801432] active_anon:698214 inactive_anon:678407 isolated_anon:0 [ 1508.801432] active_file:38 inactive_file:31 isolated_file:0 [ 1508.801432] unevictable:20157 dirty:36 writeback:0 unstable:0 [ 1508.801432] slab_reclaimable:16470 slab_unreclaimable:141332 [ 1508.801432] mapped:54707 shmem:31509 pagetables:37682 bounce:0 [ 1508.801432] free:25546 free_pcp:0 free_cma:0 [ 1508.843479] Node 0 active_anon:1254172kB inactive_anon:693188kB active_file:80kB inactive_file:136kB unevictable:66840kB isolated(anon):0kB isolated(file):0kB mapped:217676kB dirty:68kB writeback:0kB shmem:90928kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 575488kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1508.878073] Node 1 active_anon:1538684kB inactive_anon:2020440kB active_file:68kB inactive_file:36kB unevictable:14688kB isolated(anon):0kB isolated(file):0kB mapped:2252kB dirty:76kB writeback:0kB shmem:35108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1508.958503] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:2160kB inactive_anon:1448kB active_file:0kB inactive_file:20kB unevictable:484kB writepending:0kB present:15992kB managed:15908kB mlocked:484kB kernel_stack:0kB pagetables:116kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1508.993915] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1508.999045] Node 0 DMA32 free:35896kB min:36200kB low:45248kB high:54296kB active_anon:1252004kB inactive_anon:691740kB active_file:444kB inactive_file:328kB unevictable:66168kB writepending:0kB present:3129332kB managed:2788128kB mlocked:66372kB kernel_stack:12704kB pagetables:58956kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 1509.038916] lowmem_reserve[]: 0 0 0 0 0 [ 1509.043616] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1509.106294] lowmem_reserve[]: 0 0 0 0 0 [ 1509.115781] Node 1 Normal free:53456kB min:53696kB low:67120kB high:80544kB active_anon:1538588kB inactive_anon:2020440kB active_file:0kB inactive_file:0kB unevictable:16760kB writepending:0kB present:4194304kB managed:4128256kB mlocked:16760kB kernel_stack:36096kB pagetables:91136kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1509.175712] lowmem_reserve[]: 0 0 0 0 0 [ 1509.196657] Node 0 DMA: 5*4kB (UH) 4*8kB (UEH) 7*16kB (UMEH) 5*32kB (UME) 2*64kB (ME) 3*128kB (UME) 6*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11076kB [ 1509.223964] Node 0 DMA32: 286*4kB (UM) 2169*8kB (UE) 920*16kB (UE) 103*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36512kB [ 1509.242617] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1509.253568] Node 1 Normal: 110*4kB (UMH) 1029*8kB (UMH) 46*16kB (UEH) 29*32kB (UMEH) 478*64kB (UMEH) 102*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53984kB [ 1509.271420] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1509.288369] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1509.304683] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1509.370859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1509.404696] 34351 total pagecache pages [ 1509.425265] 0 pages in swap cache [ 1509.431000] Swap cache stats: add 0, delete 0, find 0/0 [ 1509.436380] Free swap = 0kB [ 1509.453737] Total swap = 0kB [ 1509.456830] 2097051 pages RAM [ 1509.474329] 0 pages HighMem/MovableOnly [ 1509.479031] 363849 pages reserved [ 1509.482935] 0 pages cma reserved [ 1509.486688] Out of memory (oom_kill_allocating_task): Kill process 4782 (syz-executor.1) score 0 or sacrifice child [ 1509.517534] Killed process 4782 (syz-executor.1) total-vm:93516kB, anon-rss:28176kB, file-rss:43428kB, shmem-rss:0kB [ 1509.583293] oom_reaper: reaped process 4782 (syz-executor.1), now anon-rss:28224kB, file-rss:11136kB, shmem-rss:0kB [ 1509.749334] syz-executor.3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1509.777174] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1509.789430] CPU: 1 PID: 2421 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1509.797260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1509.806730] Call Trace: [ 1509.809359] dump_stack+0x1b2/0x281 [ 1509.813010] dump_header+0x178/0x82f [ 1509.817268] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1509.823529] ? ___ratelimit+0x2cd/0x530 [ 1509.829308] oom_kill_process.cold+0x10/0xa40 [ 1509.833840] out_of_memory+0xe3e/0x1190 [ 1509.838100] ? oom_killer_disable+0x1c0/0x1c0 [ 1509.842628] ? mutex_trylock+0x152/0x1a0 [ 1509.846709] __alloc_pages_nodemask+0x23e1/0x2720 [ 1509.851605] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1509.856850] ? trace_hardirqs_on+0x10/0x10 [ 1509.861116] ? kmem_cache_alloc+0x1e5/0x3c0 [ 1509.865477] ? cache_grow_begin+0x3f/0x700 [ 1509.869751] cache_grow_begin+0x91/0x700 [ 1509.874178] fallback_alloc+0x207/0x2c0 [ 1509.878259] kmem_cache_alloc+0x1e5/0x3c0 [ 1509.886438] getname_flags+0xc8/0x550 [ 1509.890264] user_path_at_empty+0x2a/0x50 [ 1509.894531] vfs_statx+0xd1/0x180 [ 1509.898001] ? cp_compat_stat+0x890/0x890 [ 1509.902251] ? mntput_no_expire+0xee/0x910 [ 1509.906672] ? dput.part.0+0x300/0x710 [ 1509.911948] SyS_newlstat+0x83/0xe0 [ 1509.915684] ? SyS_newstat+0xe0/0xe0 [ 1509.919412] ? lock_downgrade+0x740/0x740 [ 1509.923572] ? __detach_mounts+0x400/0x400 [ 1509.927842] ? __do_page_fault+0x159/0xad0 [ 1509.932170] ? do_syscall_64+0x4c/0x640 [ 1509.936180] ? SyS_newstat+0xe0/0xe0 [ 1509.940388] do_syscall_64+0x1d5/0x640 [ 1509.944413] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1509.950573] RIP: 0033:0x465696 [ 1509.953793] RSP: 002b:00007ffe19b1e4e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1509.961514] RAX: ffffffffffffffda RBX: 00000000000000fc RCX: 0000000000465696 [ 1509.969051] RDX: 00007ffe19b1e520 RSI: 00007ffe19b1e520 RDI: 00007ffe19b1e5b0 [ 1509.976519] RBP: 00007ffe19b1e5b0 R08: 0000000000000001 R09: 00007ffe19b1e380 [ 1509.983808] R10: 000000000156f853 R11: 0000000000000246 R12: 00000000004bee98 [ 1509.991158] R13: 00007ffe19b1f680 R14: 000000000156f810 R15: 00007ffe19b1f6c0 [ 1510.009557] Mem-Info: [ 1510.012029] active_anon:698182 inactive_anon:678407 isolated_anon:0 [ 1510.012029] active_file:2655 inactive_file:177 isolated_file:64 [ 1510.012029] unevictable:11264 dirty:7 writeback:0 unstable:0 [ 1510.012029] slab_reclaimable:16478 slab_unreclaimable:140724 [ 1510.012029] mapped:52527 shmem:31509 pagetables:37487 bounce:0 [ 1510.012029] free:32117 free_pcp:331 free_cma:0 [ 1510.088962] Node 0 active_anon:1254148kB inactive_anon:693192kB active_file:7492kB inactive_file:616kB unevictable:45056kB isolated(anon):0kB isolated(file):380kB mapped:210108kB dirty:24kB writeback:0kB shmem:90928kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 575488kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1510.174083] Node 1 active_anon:1538580kB inactive_anon:2020436kB active_file:32kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:35108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1510.269471] Node 0 DMA free:11292kB min:204kB low:252kB high:300kB active_anon:2156kB inactive_anon:1448kB active_file:184kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:108kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1510.330573] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1510.335693] Node 0 DMA32 free:49392kB min:36200kB low:45248kB high:54296kB active_anon:1251992kB inactive_anon:691744kB active_file:3820kB inactive_file:3936kB unevictable:45056kB writepending:24kB present:3129332kB managed:2788128kB mlocked:45056kB kernel_stack:12672kB pagetables:58772kB bounce:0kB free_pcp:652kB local_pcp:16kB free_cma:0kB [ 1510.470148] lowmem_reserve[]: 0 0 0 0 0 [ 1510.474201] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1510.568071] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1510.602645] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1510.628826] lowmem_reserve[]: 0 0 0 0 0 [ 1510.629314] systemd[1]: Stopped Journal Service. [ 1510.632947] Node 1 Normal free:69380kB min:53696kB low:67120kB high:80544kB active_anon:1538580kB inactive_anon:2020436kB active_file:32kB inactive_file:1572kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:36000kB pagetables:91068kB bounce:0kB free_pcp:688kB local_pcp:0kB free_cma:0kB [ 1510.799381] lowmem_reserve[]: 0 0 0 0 0 [ 1510.799474] systemd[1]: Starting Journal Service... [ 1510.803417] Node 0 DMA: 46*4kB (UMH) 7*8kB (UMEH) 9*16kB (UMEH) 6*32kB (UME) 2*64kB (ME) 3*128kB (UME) 6*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11328kB [ 1510.919445] Node 0 DMA32: 1976*4kB (UME) 2458*8kB (UME) 1029*16kB (UME) 125*32kB (UME) 7*64kB (ME) 3*128kB (E) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 49120kB [ 1510.976148] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1511.001228] Node 1 Normal: 306*4kB (UMH) 1508*8kB (UMH) 181*16kB (UMEH) 72*32kB (UMEH) 528*64kB (UMEH) 115*128kB (UMH) 2*256kB (M) 1*512kB (M) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 71096kB [ 1511.109416] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1511.138841] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1511.147458] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1511.179409] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1511.188131] 33136 total pagecache pages [ 1511.198812] 0 pages in swap cache [ 1511.202288] Swap cache stats: add 0, delete 0, find 0/0 [ 1511.207729] Free swap = 0kB [ 1511.225052] Total swap = 0kB [ 1511.228142] 2097051 pages RAM [ 1511.238975] 0 pages HighMem/MovableOnly [ 1511.242977] 363849 pages reserved [ 1511.246526] 0 pages cma reserved [ 1511.258863] Out of memory (oom_kill_allocating_task): Kill process 2421 (syz-executor.3) score 0 or sacrifice child [ 1511.279137] Killed process 2421 (syz-executor.3) total-vm:93120kB, anon-rss:116kB, file-rss:34872kB, shmem-rss:0kB [ 1511.317946] oom_reaper: reaped process 2421 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1511.446746] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1511.583395] systemd-journald[4819]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1511.600460] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1511.994800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1512.007055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1512.035341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1512.054669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1512.076613] device bridge_slave_1 left promiscuous mode [ 1512.091951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.107219] device bridge_slave_0 left promiscuous mode [ 1512.119302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.145453] device veth1_macvtap left promiscuous mode [ 1512.155791] systemd[1]: Started Journal Service. [ 1512.163507] device veth0_macvtap left promiscuous mode [ 1512.169878] device veth1_vlan left promiscuous mode [ 1512.180257] device veth0_vlan left promiscuous mode 20:35:43 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x2000}) 20:35:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) [ 1512.382351] device hsr_slave_1 left promiscuous mode [ 1512.391938] device hsr_slave_0 left promiscuous mode 20:35:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:43 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000a00)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0xa010102}}, 0x24) 20:35:43 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4000) 20:35:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x28, r1, 0x535823eebb2ceb9f, 0x0, 0x0, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}}, 0x0) [ 1512.427452] team0 (unregistering): Port device team_slave_1 removed [ 1512.441269] team0 (unregistering): Port device team_slave_0 removed [ 1512.453578] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1512.470256] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1512.538201] bond0 (unregistering): Released all slaves 20:35:44 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10"], 0x10}, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 20:35:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 20:35:44 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@hopopts_2292={{0x14, 0x29, 0x8}}], 0x14}, 0x0) 20:35:44 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x40) 20:35:44 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x5}]}]}}, &(0x7f00000002c0)=""/175, 0x32, 0xaf, 0xb82}, 0x20) 20:35:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="f5ff"], 0x14}}, 0x0) [ 1513.278264] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1513.338381] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1518.462245] IPVS: ftp: loaded support on port[0] = 21 [ 1519.374790] chnl_net:caif_netlink_parms(): no params data found [ 1520.346232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.353863] bridge0: port 1(bridge_slave_0) entered disabled state [ 1520.493954] Bluetooth: hci5 command 0x0409 tx timeout [ 1521.140321] device bridge_slave_0 entered promiscuous mode [ 1521.153659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.160766] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.180969] device bridge_slave_1 entered promiscuous mode [ 1521.253108] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1521.262826] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1521.332546] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1521.353653] team0: Port device team_slave_0 added [ 1521.360674] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1521.368065] team0: Port device team_slave_1 added [ 1521.399573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1521.405855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1521.443956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1521.461933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1521.468206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1521.497486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1521.512569] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1521.520450] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1521.562427] device hsr_slave_0 entered promiscuous mode [ 1521.568683] device hsr_slave_1 entered promiscuous mode [ 1521.579720] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1521.587044] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1521.937153] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1522.013539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1522.024149] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1522.056091] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1522.073625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1522.081182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1522.101948] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1522.108094] 8021q: adding VLAN 0 to HW filter on device team0 [ 1522.124847] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1522.132062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1522.142019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1522.150907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.157293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1522.167130] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1522.179517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1522.187162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1522.200886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1522.212551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.219035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1522.229887] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1522.262898] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1522.289433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1522.303009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1522.345770] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1522.369314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1522.383599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1522.432460] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1522.443887] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1522.463809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1522.490677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1522.523329] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1522.530822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1522.543413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1522.553617] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1522.564819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1522.575456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1522.589786] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1522.595889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1522.606554] Bluetooth: hci5 command 0x041b tx timeout [ 1522.627576] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1522.653056] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1522.679122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1522.685962] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1522.715860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1523.406308] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1523.417042] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1523.424466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1523.436688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1523.726893] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1523.738657] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1523.759975] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1523.782579] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1523.796549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1523.805107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1523.821856] device veth0_vlan entered promiscuous mode [ 1523.843242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1523.851102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1523.873237] device veth1_vlan entered promiscuous mode [ 1523.880768] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1523.903580] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1523.953892] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1523.974725] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1523.999774] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1524.007755] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1524.029867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1524.037711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1524.062159] device veth0_macvtap entered promiscuous mode [ 1524.068499] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1524.093390] device veth1_macvtap entered promiscuous mode [ 1524.100133] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1524.110804] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1524.122665] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1524.142460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1524.157752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.179235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1524.205020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.219452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1524.246129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.266572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1524.292100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.303083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1524.315515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.328511] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1524.338202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1524.348730] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1524.361944] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1524.371984] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1524.382688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1524.396414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1524.408671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.425746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1524.436723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.450758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1524.462794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.475409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1524.486974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.501582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1524.512132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.526913] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1524.536156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1524.547098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1524.557669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1524.652465] Bluetooth: hci5 command 0x040f tx timeout 20:35:56 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f00000002c0)=""/175, 0x2b, 0xaf, 0xb82}, 0x20) 20:35:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(r0, 0x1, 0x2, 0x0, &(0x7f0000000080)) 20:35:56 executing program 3: r0 = mq_open(&(0x7f0000000200)='%}\x00', 0x0, 0x0, 0x0) mq_notify(r0, &(0x7f00000013c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}) 20:35:56 executing program 4: openat$cgroup_root(0xffffff9c, &(0x7f0000001200)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 20:35:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x0) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:35:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:35:56 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$link(0x8, r0, 0xfffffffffffffffb) 20:35:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0}}], 0x1, 0x2c040084) [ 1525.513216] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1525.526516] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:35:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000003c0), 0x4) [ 1526.167593] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1526.226017] systemd-journal cpuset=/ mems_allowed=0-1 [ 1526.249521] CPU: 1 PID: 4819 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1526.257445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1526.266797] Call Trace: [ 1526.269384] dump_stack+0x1b2/0x281 [ 1526.273007] dump_header+0x178/0x82f [ 1526.276726] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1526.281825] ? ___ratelimit+0x2cd/0x530 [ 1526.285794] oom_kill_process.cold+0x10/0xa40 [ 1526.290294] out_of_memory+0xe3e/0x1190 [ 1526.294268] ? oom_killer_disable+0x1c0/0x1c0 [ 1526.298754] ? mutex_trylock+0x152/0x1a0 [ 1526.302822] __alloc_pages_nodemask+0x23e1/0x2720 [ 1526.307677] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1526.312514] ? trace_hardirqs_on+0x10/0x10 [ 1526.316749] ? finish_task_switch+0x178/0x610 [ 1526.321271] ? finish_task_switch+0x14d/0x610 [ 1526.325763] ? switch_mm_irqs_off+0x601/0xeb0 [ 1526.330278] ? kmem_cache_alloc+0x1e5/0x3c0 [ 1526.334591] ? cache_grow_begin+0x3f/0x700 [ 1526.338835] cache_grow_begin+0x91/0x700 [ 1526.342895] fallback_alloc+0x207/0x2c0 [ 1526.346862] kmem_cache_alloc+0x1e5/0x3c0 [ 1526.351169] getname_flags+0xc8/0x550 [ 1526.354968] user_path_at_empty+0x2a/0x50 [ 1526.359113] SyS_faccessat+0x21b/0x680 [ 1526.363021] ? SyS_fallocate+0x80/0x80 [ 1526.366920] ? do_syscall_64+0x4c/0x640 [ 1526.370890] ? SyS_faccessat+0x680/0x680 [ 1526.374945] do_syscall_64+0x1d5/0x640 [ 1526.379112] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1526.384295] RIP: 0033:0x7fa2777739c7 [ 1526.387998] RSP: 002b:00007ffd93eb14a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1526.395702] RAX: ffffffffffffffda RBX: 00007ffd93eb43c0 RCX: 00007fa2777739c7 [ 1526.402966] RDX: 00007fa2781e4a00 RSI: 0000000000000000 RDI: 000055f5434219a3 [ 1526.410319] RBP: 00007ffd93eb14e0 R08: 0000000000000000 R09: 0000000000000000 [ 1526.417588] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1526.424850] R13: 0000000000000000 R14: 00007ffd93eb43c0 R15: 00007ffd93eb19d0 [ 1526.545843] Mem-Info: [ 1526.552401] active_anon:700321 inactive_anon:690009 isolated_anon:0 [ 1526.552401] active_file:371 inactive_file:325 isolated_file:81 [ 1526.552401] unevictable:11264 dirty:86 writeback:0 unstable:0 [ 1526.552401] slab_reclaimable:16461 slab_unreclaimable:136519 [ 1526.552401] mapped:53182 shmem:33558 pagetables:37775 bounce:0 [ 1526.552401] free:24158 free_pcp:619 free_cma:0 [ 1526.600067] Node 0 active_anon:1251944kB inactive_anon:725640kB active_file:688kB inactive_file:668kB unevictable:45056kB isolated(anon):0kB isolated(file):128kB mapped:194356kB dirty:152kB writeback:0kB shmem:99108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 575488kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1526.637365] Node 1 active_anon:1549340kB inactive_anon:2034396kB active_file:532kB inactive_file:632kB unevictable:0kB isolated(anon):0kB isolated(file):196kB mapped:18372kB dirty:192kB writeback:0kB shmem:35124kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1526.674962] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:2112kB inactive_anon:1780kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:108kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1526.729309] Bluetooth: hci5 command 0x0419 tx timeout [ 1526.752603] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1526.757691] Node 0 DMA32 free:36852kB min:36200kB low:45248kB high:54296kB active_anon:1249832kB inactive_anon:723860kB active_file:812kB inactive_file:716kB unevictable:45056kB writepending:140kB present:3129332kB managed:2788128kB mlocked:45056kB kernel_stack:12704kB pagetables:59664kB bounce:0kB free_pcp:56kB local_pcp:56kB free_cma:0kB [ 1526.854650] lowmem_reserve[]: 0 0 0 0 0 [ 1526.868035] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1526.940674] lowmem_reserve[]: 0 0 0 0 0 [ 1526.954793] Node 1 Normal free:51732kB min:53696kB low:67120kB high:80544kB active_anon:1549340kB inactive_anon:2034396kB active_file:592kB inactive_file:680kB unevictable:0kB writepending:172kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:36352kB pagetables:91328kB bounce:0kB free_pcp:268kB local_pcp:0kB free_cma:0kB [ 1527.027010] lowmem_reserve[]: 0 0 0 0 0 [ 1527.036830] Node 0 DMA: 56*4kB (MH) 4*8kB (MEH) 2*16kB (EH) 3*32kB (UME) 3*64kB (UME) 2*128kB (ME) 6*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11072kB [ 1527.058767] Node 0 DMA32: 1394*4kB (UME) 414*8kB (UME) 1039*16kB (UME) 220*32kB (UME) 66*64kB (UM) 3*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37160kB [ 1527.079568] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1527.094547] Node 1 Normal: 514*4kB (UMEH) 229*8kB (UMH) 1082*16kB (UMEH) 111*32kB (UMEH) 387*64kB (UMEH) 26*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 52848kB [ 1527.115434] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1527.125082] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1527.138457] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1527.148741] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1527.162726] 33865 total pagecache pages [ 1527.166887] 0 pages in swap cache [ 1527.170520] Swap cache stats: add 0, delete 0, find 0/0 [ 1527.175896] Free swap = 0kB [ 1527.179095] Total swap = 0kB [ 1527.182115] 2097051 pages RAM [ 1527.185215] 0 pages HighMem/MovableOnly [ 1527.189353] 363849 pages reserved [ 1527.192802] 0 pages cma reserved [ 1527.196159] Out of memory (oom_kill_allocating_task): Kill process 4819 (systemd-journal) score 0 or sacrifice child [ 1527.207022] Killed process 4819 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1504kB [ 1527.329757] syz-executor.3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1527.354124] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1527.361525] CPU: 1 PID: 4879 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1527.369339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1527.378701] Call Trace: [ 1527.381297] dump_stack+0x1b2/0x281 [ 1527.384928] dump_header+0x178/0x82f [ 1527.388647] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1527.393781] ? ___ratelimit+0x2cd/0x530 [ 1527.397821] oom_kill_process.cold+0x10/0xa40 [ 1527.402329] out_of_memory+0xe3e/0x1190 [ 1527.406313] ? oom_killer_disable+0x1c0/0x1c0 [ 1527.410839] ? mutex_trylock+0x152/0x1a0 [ 1527.414906] __alloc_pages_nodemask+0x23e1/0x2720 [ 1527.419770] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1527.424620] ? fs_reclaim_release+0xd0/0x110 [ 1527.429042] ? kmem_cache_alloc_node+0x38b/0x410 [ 1527.433819] copy_process.part.0+0x265/0x71c0 [ 1527.438334] ? do_raw_spin_unlock+0x164/0x220 [ 1527.442858] ? _raw_spin_unlock+0x29/0x40 [ 1527.446988] ? do_wp_page+0x24d/0x1db0 [ 1527.450856] ? __handle_mm_fault+0x129c/0x4620 [ 1527.455418] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 1527.460117] ? __handle_mm_fault+0x80f/0x4620 [ 1527.464597] ? __cleanup_sighand+0x40/0x40 [ 1527.468823] ? __fsnotify_inode_delete+0x20/0x20 [ 1527.473593] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1527.480254] _do_fork+0x184/0xc80 [ 1527.483701] ? fork_idle+0x270/0x270 [ 1527.487513] ? up_read+0x17/0x30 [ 1527.490865] ? __do_page_fault+0x159/0xad0 [ 1527.495084] ? do_syscall_64+0x4c/0x640 [ 1527.499041] ? sys_vfork+0x20/0x20 [ 1527.502561] do_syscall_64+0x1d5/0x640 [ 1527.506431] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1527.511651] RIP: 0033:0x464beb [ 1527.514823] RSP: 002b:00007ffe34439e30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1527.522516] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000464beb [ 1527.529783] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1527.537125] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000001f7c400 [ 1527.544377] R10: 0000000001f7c6d0 R11: 0000000000000246 R12: 0000000000000001 [ 1527.551626] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe34439f20 [ 1527.570561] Mem-Info: [ 1527.575944] active_anon:700205 inactive_anon:690008 isolated_anon:0 [ 1527.575944] active_file:9 inactive_file:62 isolated_file:0 [ 1527.575944] unevictable:11264 dirty:0 writeback:0 unstable:0 [ 1527.575944] slab_reclaimable:16462 slab_unreclaimable:136295 [ 1527.575944] mapped:52243 shmem:33558 pagetables:37719 bounce:0 [ 1527.575944] free:25852 free_pcp:127 free_cma:0 [ 1527.613387] Node 0 active_anon:1251480kB inactive_anon:725636kB active_file:300kB inactive_file:396kB unevictable:45056kB isolated(anon):0kB isolated(file):120kB mapped:192104kB dirty:0kB writeback:0kB shmem:99108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 575488kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1527.642884] Node 1 active_anon:1549340kB inactive_anon:2034396kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:17168kB dirty:0kB writeback:0kB shmem:35124kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1527.671188] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:2112kB inactive_anon:1780kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:108kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1527.699276] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1527.704810] Node 0 DMA32 free:37332kB min:36200kB low:45248kB high:54296kB active_anon:1249368kB inactive_anon:723856kB active_file:548kB inactive_file:424kB unevictable:45056kB writepending:0kB present:3129332kB managed:2788128kB mlocked:45056kB kernel_stack:12640kB pagetables:59452kB bounce:0kB free_pcp:448kB local_pcp:116kB free_cma:0kB [ 1527.737769] lowmem_reserve[]: 0 0 0 0 0 [ 1527.742303] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1527.770280] lowmem_reserve[]: 0 0 0 0 0 [ 1527.775489] Node 1 Normal free:53672kB min:53696kB low:67120kB high:80544kB active_anon:1549340kB inactive_anon:2034396kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:36256kB pagetables:91316kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1527.805662] lowmem_reserve[]: 0 0 0 0 0 [ 1527.813891] Node 0 DMA: 56*4kB (MH) 4*8kB (MEH) 2*16kB (EH) 3*32kB (UME) 3*64kB (UME) 2*128kB (ME) 6*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11072kB [ 1527.844874] Node 0 DMA32: 1252*4kB (ME) 427*8kB (UME) 1040*16kB (UME) 220*32kB (UME) 66*64kB (UM) 3*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36712kB [ 1527.868266] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1527.890709] Node 1 Normal: 518*4kB (UMEH) 243*8kB (UMH) 1124*16kB (UMEH) 112*32kB (UMEH) 387*64kB (UMEH) 26*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53680kB [ 1527.912910] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1527.922628] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1527.940535] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1527.949561] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1527.958380] 33718 total pagecache pages [ 1527.965057] 0 pages in swap cache [ 1527.971824] Swap cache stats: add 0, delete 0, find 0/0 [ 1527.977565] Free swap = 0kB [ 1527.980791] Total swap = 0kB [ 1527.983830] 2097051 pages RAM [ 1527.986923] 0 pages HighMem/MovableOnly [ 1527.991776] 363849 pages reserved [ 1527.995759] 0 pages cma reserved [ 1528.002999] Out of memory (oom_kill_allocating_task): Kill process 4879 (syz-executor.3) score 0 or sacrifice child [ 1528.013782] Killed process 4879 (syz-executor.3) total-vm:93120kB, anon-rss:104kB, file-rss:34760kB, shmem-rss:0kB [ 1528.036086] oom_reaper: reaped process 4879 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1528.061583] kworker/u4:10 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1528.075140] kworker/u4:10 cpuset=/ mems_allowed=0-1 [ 1528.082125] CPU: 1 PID: 1271 Comm: kworker/u4:10 Not tainted 4.14.232-syzkaller #0 [ 1528.089836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1528.099194] Workqueue: events_unbound call_usermodehelper_exec_work [ 1528.105602] Call Trace: [ 1528.108185] dump_stack+0x1b2/0x281 [ 1528.111809] dump_header+0x178/0x82f [ 1528.115518] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1528.120608] ? ___ratelimit+0x2cd/0x530 [ 1528.124581] oom_kill_process.cold+0x10/0xa40 [ 1528.129059] ? lock_downgrade+0x740/0x740 [ 1528.133194] out_of_memory+0x2dc/0x1190 [ 1528.137161] ? oom_killer_disable+0x1c0/0x1c0 [ 1528.141648] ? mutex_trylock+0x152/0x1a0 [ 1528.145704] __alloc_pages_nodemask+0x23e1/0x2720 [ 1528.150774] ? deref_stack_reg+0x124/0x1a0 [ 1528.155728] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1528.160662] ? fs_reclaim_release+0xd0/0x110 [ 1528.165056] ? kmem_cache_alloc_node+0x38b/0x410 [ 1528.169793] copy_process.part.0+0x265/0x71c0 [ 1528.174290] ? __lock_acquire+0x5fc/0x3f20 [ 1528.178520] ? debug_object_activate+0x292/0x490 [ 1528.183256] ? trace_hardirqs_on+0x10/0x10 [ 1528.187468] ? static_obj+0x50/0x50 [ 1528.191075] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1528.196507] ? __cleanup_sighand+0x40/0x40 [ 1528.200744] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1528.206185] _do_fork+0x184/0xc80 [ 1528.209706] ? fork_idle+0x270/0x270 [ 1528.213421] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1528.218510] ? process_one_work+0x6c4/0x14a0 [ 1528.222901] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1528.228354] kernel_thread+0x2f/0x40 [ 1528.232057] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1528.237332] ? call_usermodehelper+0x80/0x80 [ 1528.241745] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1528.247189] process_one_work+0x793/0x14a0 [ 1528.251438] ? work_busy+0x320/0x320 [ 1528.255132] ? worker_thread+0x158/0xff0 [ 1528.259183] ? _raw_spin_unlock_irq+0x24/0x80 [ 1528.263679] worker_thread+0x5cc/0xff0 [ 1528.268076] ? rescuer_thread+0xc80/0xc80 [ 1528.272407] kthread+0x30d/0x420 [ 1528.276193] ? kthread_create_on_node+0xd0/0xd0 [ 1528.280951] ret_from_fork+0x24/0x30 [ 1528.294195] Mem-Info: [ 1528.297098] active_anon:700076 inactive_anon:690008 isolated_anon:0 [ 1528.297098] active_file:4 inactive_file:22 isolated_file:0 [ 1528.297098] unevictable:11264 dirty:1 writeback:0 unstable:0 [ 1528.297098] slab_reclaimable:16464 slab_unreclaimable:136337 [ 1528.297098] mapped:52267 shmem:33558 pagetables:37674 bounce:0 [ 1528.297098] free:25888 free_pcp:144 free_cma:0 [ 1528.335461] Node 0 active_anon:1251400kB inactive_anon:725636kB active_file:100kB inactive_file:272kB unevictable:45056kB isolated(anon):0kB isolated(file):104kB mapped:191900kB dirty:4kB writeback:0kB shmem:99108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 575488kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1528.364527] Node 1 active_anon:1548904kB inactive_anon:2034396kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:17168kB dirty:0kB writeback:0kB shmem:35124kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1528.392657] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:2112kB inactive_anon:1780kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:108kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1528.420987] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1528.428971] Node 0 DMA32 free:36496kB min:36200kB low:45248kB high:54296kB active_anon:1249288kB inactive_anon:723856kB active_file:628kB inactive_file:1528kB unevictable:45056kB writepending:4kB present:3129332kB managed:2788128kB mlocked:45056kB kernel_stack:12640kB pagetables:59364kB bounce:0kB free_pcp:128kB local_pcp:0kB free_cma:0kB [ 1528.466619] lowmem_reserve[]: 0 0 0 0 0 [ 1528.471656] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1528.502273] lowmem_reserve[]: 0 0 0 0 0 [ 1528.516103] Node 1 Normal free:53580kB min:53696kB low:67120kB high:80544kB active_anon:1548904kB inactive_anon:2034396kB active_file:16kB inactive_file:316kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:36224kB pagetables:91224kB bounce:0kB free_pcp:616kB local_pcp:0kB free_cma:0kB [ 1528.582975] lowmem_reserve[]: 0 0 0 0 0 [ 1528.587596] Node 0 DMA: 56*4kB (MH) 4*8kB (MEH) 2*16kB (EH) 3*32kB (UME) 3*64kB (UME) 2*128kB (ME) 6*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11072kB [ 1528.606701] Node 0 DMA32: 1560*4kB (UME) 426*8kB (UME) 1040*16kB (UME) 220*32kB (UME) 66*64kB (UM) 3*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37936kB [ 1528.627184] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1528.638563] Node 1 Normal: 559*4kB (UMEH) 264*8kB (UMH) 1135*16kB (UMEH) 115*32kB (UMEH) 387*64kB (UMEH) 26*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54284kB [ 1528.658467] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1528.668154] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1528.681831] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1528.691438] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1528.700783] 33670 total pagecache pages [ 1528.705298] 0 pages in swap cache [ 1528.712097] Swap cache stats: add 0, delete 0, find 0/0 [ 1528.718182] Free swap = 0kB [ 1528.721907] Total swap = 0kB [ 1528.725354] 2097051 pages RAM [ 1528.732244] 0 pages HighMem/MovableOnly [ 1528.736816] 363849 pages reserved [ 1528.742784] 0 pages cma reserved [ 1528.746684] Out of memory: Kill process 3546 (syz-executor.2) score 1009 or sacrifice child [ 1528.757135] Killed process 3546 (syz-executor.2) total-vm:93780kB, anon-rss:36784kB, file-rss:34628kB, shmem-rss:0kB 20:36:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack_expect\x00') dup3(r0, r1, 0x0) read$char_usb(r1, 0x0, 0x0) 20:36:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) [ 1529.065705] systemd[1]: systemd-journald.service: Failed with result 'signal'. 20:36:00 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) [ 1529.115934] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1529.229166] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1529.236355] systemd[1]: Stopped Journal Service. 20:36:00 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 20:36:01 executing program 4: keyctl$clear(0x3, 0x0) 20:36:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x0) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:36:01 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000080)={0x30}, 0x30) 20:36:01 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 20:36:01 executing program 2: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000003680), 0x40, 0x0) 20:36:01 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/mdstat\x00', 0x0, 0x0) 20:36:01 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="3aa2586c1481", @val, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x805}, {0x0, 0x0, 0x0, 0x0, 0x58}, {0x8, 0x88be, 0x0, {{}, 0x4c1}}}}}}}, 0x0) [ 1530.281667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1530.288454] batman_adv: batadv0: Removing interface: batadv_slave_0 20:36:01 executing program 2: clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000240), 0x0, &(0x7f0000000180)={0x0, r0+10000000}, 0x0) [ 1530.408067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1530.463736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1530.595735] device bridge_slave_1 left promiscuous mode [ 1530.708112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1530.773649] device bridge_slave_0 left promiscuous mode [ 1530.805073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1530.813499] systemd[1]: Starting Journal Service... [ 1530.879062] device veth1_macvtap left promiscuous mode [ 1530.899122] device veth0_macvtap left promiscuous mode [ 1530.904515] device veth1_vlan left promiscuous mode [ 1530.940286] device veth0_vlan left promiscuous mode [ 1531.250215] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1531.284390] systemd-journald[5200]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1531.494562] device hsr_slave_1 left promiscuous mode [ 1531.525858] device hsr_slave_0 left promiscuous mode [ 1531.606978] team0 (unregistering): Port device team_slave_1 removed [ 1531.660620] team0 (unregistering): Port device team_slave_0 removed [ 1531.741082] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1531.820304] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1532.021502] bond0 (unregistering): Released all slaves 20:36:03 executing program 4: r0 = mq_open(&(0x7f0000000100)=':\x00', 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/185, 0xb9, 0x0, &(0x7f0000000280)) 20:36:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 20:36:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) [ 1533.086063] systemd[1]: Started Journal Service. [ 1533.306923] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1533.330375] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue [ 1535.602972] IPVS: ftp: loaded support on port[0] = 21 [ 1535.732040] chnl_net:caif_netlink_parms(): no params data found [ 1535.847057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1535.855243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.863521] device bridge_slave_0 entered promiscuous mode [ 1535.872082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1535.879059] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.886964] device bridge_slave_1 entered promiscuous mode [ 1535.913340] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1535.924187] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1535.948717] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1535.956162] team0: Port device team_slave_0 added [ 1535.962511] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1535.970685] team0: Port device team_slave_1 added [ 1535.992025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1535.999679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1536.029616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1536.042943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1536.057387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1536.085073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1536.098649] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1536.108081] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1536.134009] device hsr_slave_0 entered promiscuous mode [ 1536.141060] device hsr_slave_1 entered promiscuous mode [ 1536.148200] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1536.156089] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1536.235943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1536.243042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1536.251538] bridge0: port 1(bridge_slave_0) entered blocking state [ 1536.258730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1536.298089] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1536.306621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1536.319728] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1536.331692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1536.340581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.347937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.359176] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1536.366039] 8021q: adding VLAN 0 to HW filter on device team0 [ 1536.378304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1536.386721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1536.394543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1536.410120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1536.418384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1536.425169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1536.438372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1536.446831] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1536.462685] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1536.474184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1536.485556] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1536.493060] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1536.501263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1536.509627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1536.518556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1536.534119] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1536.543737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1536.551085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1536.564860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1536.627954] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1536.640802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1536.673627] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1536.682316] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1536.689661] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1536.700120] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1536.707795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1536.716026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1536.723640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1536.736202] device veth0_vlan entered promiscuous mode [ 1536.748477] device veth1_vlan entered promiscuous mode [ 1536.764679] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1536.775763] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1536.783892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1536.792398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1536.804715] device veth0_macvtap entered promiscuous mode [ 1536.811914] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1536.823271] device veth1_macvtap entered promiscuous mode [ 1536.831363] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1536.842453] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1536.854636] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1536.864533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1536.876913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1536.887720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1536.898089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1536.907461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1536.919663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1536.931126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1536.944077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1536.953907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1536.964609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1536.975871] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1536.983437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1536.991009] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1536.999303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1537.006602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1537.015281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1537.026617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1537.037624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1537.047072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1537.058677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1537.068425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1537.079537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1537.089438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1537.099972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1537.110282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1537.120633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1537.131297] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1537.138503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1537.153056] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1537.161180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:36:08 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000002480), 0x880502, 0x0) write$FUSE_BMAP(r0, 0x0, 0x0) 20:36:08 executing program 3: syz_mount_image$gfs2meta(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)) 20:36:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x0) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:36:08 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0xef) 20:36:08 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002680), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 20:36:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:36:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@deltfilter={0x24, 0x2d, 0x507}, 0x24}}, 0x0) 20:36:08 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x6) [ 1537.391514] gfs2: gfs2 mount does not exist [ 1537.397108] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 1537.413718] EXT4-fs (sda1): re-mounted. Opts: journal_async_commit,,errors=continue 20:36:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000140)) [ 1537.463420] gfs2: gfs2 mount does not exist 20:36:08 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700004000ff03000000000010", @ANYRES32=r1, @ANYBLOB], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 20:36:08 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x24}, 0x24}}, 0x0) 20:36:08 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect(r0, &(0x7f0000000140)=@nl, 0x80) 20:36:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00'], 0x28}}, 0x0) [ 1537.621092] Bluetooth: hci5 command 0x0409 tx timeout [ 1537.818607] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1537.948190] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1537.964629] CPU: 0 PID: 5489 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1537.972637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1537.982308] Call Trace: [ 1537.985054] dump_stack+0x1b2/0x281 [ 1537.988900] dump_header+0x178/0x82f [ 1537.992639] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1537.997761] ? ___ratelimit+0x2cd/0x530 [ 1538.002404] oom_kill_process.cold+0x10/0xa40 [ 1538.006938] out_of_memory+0xe3e/0x1190 [ 1538.011089] ? oom_killer_disable+0x1c0/0x1c0 [ 1538.015734] ? mutex_trylock+0x152/0x1a0 [ 1538.019996] __alloc_pages_nodemask+0x23e1/0x2720 [ 1538.025253] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1538.030342] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1538.035896] ? retint_kernel+0x2d/0x2d [ 1538.040149] cache_grow_begin+0x91/0x700 [ 1538.044637] fallback_alloc+0x207/0x2c0 [ 1538.048782] kmem_cache_alloc+0x1e5/0x3c0 [ 1538.053189] getname_flags+0xc8/0x550 [ 1538.057080] ? kmem_cache_free+0x23a/0x2b0 [ 1538.061420] do_sys_open+0x1ce/0x410 [ 1538.065153] ? filp_open+0x60/0x60 [ 1538.069329] ? __do_page_fault+0x159/0xad0 [ 1538.073760] ? do_syscall_64+0x4c/0x640 [ 1538.077898] ? SyS_open+0x30/0x30 [ 1538.081370] do_syscall_64+0x1d5/0x640 [ 1538.085281] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1538.098925] RIP: 0033:0x4196e4 [ 1538.102255] RSP: 002b:00007fff8e36e940 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1538.110124] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000004196e4 [ 1538.118565] RDX: 0000000000080001 RSI: 00000000004bfd69 RDI: 00000000ffffff9c [ 1538.126276] RBP: 00000000004bfd69 R08: 0000000000000000 R09: 00007fff8e36e930 [ 1538.133815] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080001 [ 1538.141504] R13: 00007fff8e36e9e0 R14: 0000000000000000 R15: 00007fff8e36ef90 [ 1538.296844] Mem-Info: [ 1538.302247] active_anon:697894 inactive_anon:690202 isolated_anon:0 [ 1538.302247] active_file:1343 inactive_file:840 isolated_file:106 [ 1538.302247] unevictable:11264 dirty:73 writeback:1 unstable:0 [ 1538.302247] slab_reclaimable:16392 slab_unreclaimable:134115 [ 1538.302247] mapped:54298 shmem:35606 pagetables:37997 bounce:0 [ 1538.302247] free:26971 free_pcp:534 free_cma:0 20:36:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01"], 0x1c}}, 0x0) 20:36:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:36:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) [ 1538.371105] Node 0 active_anon:1252048kB inactive_anon:727312kB active_file:5176kB inactive_file:4304kB unevictable:45056kB isolated(anon):0kB isolated(file):424kB mapped:192420kB dirty:112kB writeback:0kB shmem:100848kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 575488kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 20:36:09 executing program 4: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000001d80)={0x2, @long}, 0x14) [ 1538.527173] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:36:10 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000080)={0x2, @long}, 0x14) [ 1538.713910] Node 1 active_anon:1546212kB inactive_anon:2033496kB active_file:268kB inactive_file:228kB unevictable:2300kB isolated(anon):0kB isolated(file):0kB mapped:27860kB dirty:112kB writeback:0kB shmem:41576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1538.771035] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:2112kB inactive_anon:1780kB active_file:0kB inactive_file:4kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1538.799345] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1538.804397] Node 0 DMA32 free:29628kB min:36200kB low:45248kB high:54296kB active_anon:1259440kB inactive_anon:725532kB active_file:1040kB inactive_file:1440kB unevictable:47576kB writepending:128kB present:3129332kB managed:2788128kB mlocked:47576kB kernel_stack:12704kB pagetables:59872kB bounce:0kB free_pcp:880kB local_pcp:452kB free_cma:0kB [ 1538.837268] lowmem_reserve[]: 0 0 0 0 0 [ 1538.848211] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1538.881580] lowmem_reserve[]: 0 0 0 0 0 [ 1538.886278] Node 1 Normal free:53628kB min:53696kB low:67120kB high:80544kB active_anon:1546160kB inactive_anon:2033496kB active_file:180kB inactive_file:556kB unevictable:2016kB writepending:196kB present:4194304kB managed:4128256kB mlocked:2016kB kernel_stack:36736kB pagetables:91632kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1538.954051] lowmem_reserve[]: 0 0 0 0 0 [ 1538.958632] Node 0 DMA: 49*4kB (UM) 4*8kB (MEH) 3*16kB (UEH) 4*32kB (UME) 2*64kB (ME) 2*128kB (ME) 6*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11028kB [ 1538.984754] Node 0 DMA32: 1071*4kB (UME) 923*8kB (UME) 958*16kB (UME) 132*32kB (UME) 25*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 32820kB [ 1539.014793] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1539.035452] Node 1 Normal: 523*4kB (UMH) 85*8kB (UMEH) 43*16kB (UMEH) 696*32kB (UMEH) 398*64kB (UMEH) 23*128kB (UEH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54148kB [ 1539.063594] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1539.094196] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1539.128466] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1539.147385] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1539.156372] 37017 total pagecache pages [ 1539.169190] 0 pages in swap cache [ 1539.172816] Swap cache stats: add 0, delete 0, find 0/0 [ 1539.178280] Free swap = 0kB [ 1539.185670] Total swap = 0kB [ 1539.188832] 2097051 pages RAM [ 1539.197304] 0 pages HighMem/MovableOnly [ 1539.205357] 363849 pages reserved [ 1539.215056] 0 pages cma reserved [ 1539.218469] Out of memory (oom_kill_allocating_task): Kill process 5489 (syz-executor.5) score 0 or sacrifice child [ 1539.234093] Killed process 5489 (syz-executor.5) total-vm:93120kB, anon-rss:112kB, file-rss:34880kB, shmem-rss:0kB [ 1539.268510] systemd-udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1539.301954] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1539.308629] CPU: 1 PID: 5455 Comm: systemd-udevd Not tainted 4.14.232-syzkaller #0 [ 1539.317962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1539.329461] Call Trace: [ 1539.332306] dump_stack+0x1b2/0x281 [ 1539.336502] dump_header+0x178/0x82f [ 1539.341441] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1539.347024] ? ___ratelimit+0x2cd/0x530 [ 1539.352094] oom_kill_process.cold+0x10/0xa40 [ 1539.356862] out_of_memory+0xe3e/0x1190 [ 1539.360901] ? oom_killer_disable+0x1c0/0x1c0 [ 1539.365707] ? mutex_trylock+0x152/0x1a0 [ 1539.369799] __alloc_pages_nodemask+0x23e1/0x2720 [ 1539.375212] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1539.380228] ? trace_hardirqs_on+0x10/0x10 [ 1539.384621] ? __bpf_prog_run32+0x7c/0xa0 [ 1539.389113] ? kmem_cache_alloc+0x1e5/0x3c0 [ 1539.394042] ? cache_grow_begin+0x3f/0x700 [ 1539.398472] cache_grow_begin+0x91/0x700 [ 1539.402905] fallback_alloc+0x207/0x2c0 [ 1539.407259] kmem_cache_alloc+0x1e5/0x3c0 [ 1539.411674] getname_flags+0xc8/0x550 [ 1539.415800] user_path_at_empty+0x2a/0x50 [ 1539.419976] vfs_statx+0xd1/0x180 [ 1539.423457] ? cp_compat_stat+0x890/0x890 [ 1539.427779] ? task_work_run+0xfd/0x190 [ 1539.431783] SyS_newstat+0x83/0xe0 [ 1539.435627] ? SyS_fstat+0xd0/0xd0 [ 1539.439190] ? __secure_computing+0xe5/0x3e0 [ 1539.443618] ? syscall_trace_enter+0x486/0xc20 [ 1539.448320] ? syscall_slow_exit_work+0x560/0x560 [ 1539.453601] ? task_work_run+0xfd/0x190 [ 1539.457923] ? do_syscall_64+0x4c/0x640 [ 1539.462087] ? SyS_fstat+0xd0/0xd0 [ 1539.466052] do_syscall_64+0x1d5/0x640 [ 1539.470286] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1539.475658] RIP: 0033:0x7f30e7ef0295 [ 1539.480084] RSP: 002b:00007ffcb4ce82c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1539.488037] RAX: ffffffffffffffda RBX: 000055bb9e14a234 RCX: 00007f30e7ef0295 [ 1539.495689] RDX: 00007ffcb4ce8740 RSI: 00007ffcb4ce8740 RDI: 00007ffcb4ce8340 [ 1539.503964] RBP: 000055bb9d44ddfc R08: fffc000000000000 R09: 0000000000000000 [ 1539.511738] R10: e0944a3c39bfe7e1 R11: 0000000000000246 R12: 000055bb9e1547c0 [ 1539.519779] R13: 00007ffcb4ce8740 R14: 00007ffcb4ce8340 R15: 000055bb9e13fca0 [ 1539.574678] Mem-Info: [ 1539.594954] active_anon:699482 inactive_anon:690200 isolated_anon:0 [ 1539.594954] active_file:22 inactive_file:60 isolated_file:0 [ 1539.594954] unevictable:13328 dirty:2 writeback:0 unstable:0 [ 1539.594954] slab_reclaimable:16385 slab_unreclaimable:133832 [ 1539.594954] mapped:53951 shmem:35606 pagetables:37969 bounce:0 [ 1539.594954] free:25878 free_pcp:313 free_cma:0 [ 1539.739188] Node 0 active_anon:1252276kB inactive_anon:727312kB active_file:248kB inactive_file:224kB unevictable:52584kB isolated(anon):0kB isolated(file):68kB mapped:188280kB dirty:4kB writeback:0kB shmem:100848kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 575488kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1539.770782] Bluetooth: hci5 command 0x041b tx timeout [ 1539.776318] Node 1 active_anon:1539452kB inactive_anon:2033488kB active_file:72kB inactive_file:108kB unevictable:8528kB isolated(anon):0kB isolated(file):0kB mapped:27824kB dirty:4kB writeback:0kB shmem:41576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1539.805377] Node 0 DMA free:11028kB min:204kB low:252kB high:300kB active_anon:2112kB inactive_anon:1780kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1539.835048] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1539.840288] Node 0 DMA32 free:35856kB min:36200kB low:45248kB high:54296kB active_anon:1250628kB inactive_anon:725532kB active_file:252kB inactive_file:1132kB unevictable:52392kB writepending:0kB present:3129332kB managed:2788128kB mlocked:52392kB kernel_stack:12736kB pagetables:60288kB bounce:0kB free_pcp:340kB local_pcp:0kB free_cma:0kB [ 1539.905391] lowmem_reserve[]: 0 0 0 0 0 [ 1539.917096] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1539.945152] lowmem_reserve[]: 0 0 0 0 0 [ 1539.949762] Node 1 Normal free:55524kB min:53696kB low:67120kB high:80544kB active_anon:1539700kB inactive_anon:2033488kB active_file:92kB inactive_file:0kB unevictable:8272kB writepending:0kB present:4194304kB managed:4128256kB mlocked:8272kB kernel_stack:36544kB pagetables:91368kB bounce:0kB free_pcp:704kB local_pcp:0kB free_cma:0kB [ 1539.981961] lowmem_reserve[]: 0 0 0 0 0 [ 1539.986575] Node 0 DMA: 49*4kB (UM) 4*8kB (MEH) 3*16kB (UEH) 4*32kB (UME) 2*64kB (ME) 2*128kB (ME) 6*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11028kB [ 1540.003676] Node 0 DMA32: 147*4kB (UME) 1106*8kB (UME) 1066*16kB (UME) 223*32kB (UME) 45*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36508kB [ 1540.020876] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1540.035228] Node 1 Normal: 248*4kB (UMH) 149*8kB (UMH) 93*16kB (UMEH) 738*32kB (UMEH) 399*64kB (UMEH) 23*128kB (UEH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55768kB [ 1540.052507] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1540.061676] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1540.075417] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1540.101978] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1540.114386] 37473 total pagecache pages [ 1540.128954] 0 pages in swap cache [ 1540.132502] Swap cache stats: add 0, delete 0, find 0/0 [ 1540.138316] Free swap = 0kB [ 1540.151065] Total swap = 0kB [ 1540.154454] 2097051 pages RAM [ 1540.158754] 0 pages HighMem/MovableOnly [ 1540.163221] 363849 pages reserved [ 1540.166952] 0 pages cma reserved [ 1540.170650] Out of memory (oom_kill_allocating_task): Kill process 5455 (systemd-udevd) score 0 or sacrifice child [ 1540.181806] Killed process 5455 (systemd-udevd) total-vm:43784kB, anon-rss:1164kB, file-rss:0kB, shmem-rss:0kB [ 1540.195347] oom_reaper: reaped process 5455 (systemd-udevd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1540.385306] syz-executor.1 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1540.400798] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1540.408288] CPU: 1 PID: 5506 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1540.417186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1540.427616] Call Trace: [ 1540.430591] dump_stack+0x1b2/0x281 [ 1540.435160] dump_header+0x178/0x82f [ 1540.439811] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1540.445031] ? ___ratelimit+0x2cd/0x530 [ 1540.449089] oom_kill_process.cold+0x10/0xa40 [ 1540.453774] out_of_memory+0xe3e/0x1190 [ 1540.458161] ? oom_killer_disable+0x1c0/0x1c0 [ 1540.463038] ? mutex_trylock+0x152/0x1a0 [ 1540.467286] __alloc_pages_nodemask+0x23e1/0x2720 [ 1540.472842] ? _raw_spin_unlock_irq+0x24/0x80 [ 1540.478331] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1540.484157] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 1540.490167] ? __lock_acquire+0x5fc/0x3f20 [ 1540.494848] alloc_pages_vma+0xd2/0x6d0 [ 1540.499413] __handle_mm_fault+0x25fa/0x4620 [ 1540.504133] ? lock_downgrade+0x740/0x740 [ 1540.508310] ? vm_insert_page+0x7c0/0x7c0 [ 1540.512750] ? do_raw_spin_unlock+0x164/0x220 [ 1540.517694] ? mark_held_locks+0xa6/0xf0 [ 1540.522302] handle_mm_fault+0x455/0x9c0 [ 1540.527054] __get_user_pages+0x4e9/0x1270 [ 1540.531324] ? follow_page_mask+0x18a0/0x18a0 [ 1540.536008] populate_vma_page_range+0x17b/0x210 [ 1540.541437] __mm_populate+0x195/0x2c0 [ 1540.545717] ? populate_vma_page_range+0x210/0x210 [ 1540.550680] ? security_capable+0x88/0xb0 [ 1540.555242] SyS_mlockall+0x3ff/0x520 [ 1540.559540] ? SyS_munlock+0xf0/0xf0 [ 1540.563426] do_syscall_64+0x1d5/0x640 [ 1540.567592] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1540.572943] RIP: 0033:0x4665f9 [ 1540.576232] RSP: 002b:00007f0679f12188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1540.584373] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1540.593052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1540.601740] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1540.609500] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1540.620345] R13: 00007ffe83d6ee1f R14: 00007f0679f12300 R15: 0000000000022000 [ 1540.667360] Mem-Info: [ 1540.674471] active_anon:697868 inactive_anon:690201 isolated_anon:0 [ 1540.674471] active_file:26 inactive_file:6 isolated_file:0 [ 1540.674471] unevictable:16504 dirty:0 writeback:0 unstable:0 [ 1540.674471] slab_reclaimable:16427 slab_unreclaimable:133570 [ 1540.674471] mapped:53925 shmem:35605 pagetables:37901 bounce:0 [ 1540.674471] free:25154 free_pcp:0 free_cma:0 [ 1540.717530] Node 0 active_anon:1252144kB inactive_anon:727312kB active_file:4kB inactive_file:0kB unevictable:53900kB isolated(anon):0kB isolated(file):0kB mapped:187880kB dirty:0kB writeback:0kB shmem:100848kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 575488kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1540.761339] Node 1 active_anon:1539328kB inactive_anon:2033492kB active_file:100kB inactive_file:44kB unevictable:12116kB isolated(anon):0kB isolated(file):0kB mapped:27820kB dirty:0kB writeback:0kB shmem:41572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1540.799117] Node 0 DMA free:11028kB min:204kB low:252kB high:300kB active_anon:2112kB inactive_anon:1780kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1540.834677] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1540.840722] Node 0 DMA32 free:36176kB min:36200kB low:45248kB high:54296kB active_anon:1250032kB inactive_anon:725532kB active_file:8kB inactive_file:124kB unevictable:53580kB writepending:0kB present:3129332kB managed:2788128kB mlocked:53580kB kernel_stack:12736kB pagetables:60188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1540.877549] lowmem_reserve[]: 0 0 0 0 0 [ 1540.882827] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1540.937457] lowmem_reserve[]: 0 0 0 0 0 [ 1540.949008] Node 1 Normal free:53608kB min:53696kB low:67120kB high:80544kB active_anon:1539328kB inactive_anon:2033492kB active_file:40kB inactive_file:36kB unevictable:12156kB writepending:0kB present:4194304kB managed:4128256kB mlocked:12156kB kernel_stack:36480kB pagetables:91288kB bounce:0kB free_pcp:36kB local_pcp:36kB free_cma:0kB [ 1540.985445] lowmem_reserve[]: 0 0 0 0 0 [ 1540.992787] Node 0 DMA: 49*4kB (UM) 4*8kB (MEH) 3*16kB (UEH) 4*32kB (UME) 2*64kB (ME) 2*128kB (ME) 6*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11028kB [ 1541.012493] Node 0 DMA32: 154*4kB (UME) 1081*8kB (UME) 1067*16kB (UME) 226*32kB (UME) 45*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36448kB [ 1541.030727] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1541.091220] Node 1 Normal: 204*4kB (UMH) 74*8kB (UMEH) 63*16kB (UMEH) 736*32kB (UMEH) 394*64kB (UMEH) 21*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53872kB [ 1541.117619] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1541.127151] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1541.139617] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1541.149338] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1541.178983] 37077 total pagecache pages [ 1541.183431] 0 pages in swap cache [ 1541.186901] Swap cache stats: add 0, delete 0, find 0/0 [ 1541.201831] Free swap = 0kB [ 1541.204902] Total swap = 0kB [ 1541.208076] 2097051 pages RAM [ 1541.213755] 0 pages HighMem/MovableOnly [ 1541.217905] 363849 pages reserved [ 1541.221591] 0 pages cma reserved [ 1541.225108] Out of memory (oom_kill_allocating_task): Kill process 5506 (syz-executor.1) score 0 or sacrifice child [ 1541.238741] Killed process 5517 (syz-executor.1) total-vm:93384kB, anon-rss:260kB, file-rss:35084kB, shmem-rss:0kB [ 1541.262538] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1541.276022] in:imklog cpuset=/ mems_allowed=0-1 [ 1541.283313] CPU: 0 PID: 1323 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1541.291489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1541.302165] Call Trace: [ 1541.305357] dump_stack+0x1b2/0x281 [ 1541.309457] dump_header+0x178/0x82f [ 1541.313195] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1541.319042] ? ___ratelimit+0x2cd/0x530 [ 1541.323631] oom_kill_process.cold+0x10/0xa40 [ 1541.328611] out_of_memory+0xe3e/0x1190 [ 1541.333126] ? oom_killer_disable+0x1c0/0x1c0 [ 1541.338750] ? mutex_trylock+0x152/0x1a0 [ 1541.343820] __alloc_pages_nodemask+0x23e1/0x2720 [ 1541.349113] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1541.354156] alloc_pages_current+0x155/0x260 [ 1541.358583] filemap_fault+0x11a1/0x1ad0 [ 1541.362792] ext4_filemap_fault+0x84/0xb0 [ 1541.366959] __do_fault+0xfa/0x380 [ 1541.370878] __handle_mm_fault+0x2497/0x4620 [ 1541.375460] ? vm_insert_page+0x7c0/0x7c0 [ 1541.379743] ? lock_downgrade+0x740/0x740 [ 1541.384019] ? mark_held_locks+0xa6/0xf0 [ 1541.388348] handle_mm_fault+0x455/0x9c0 [ 1541.392536] __do_page_fault+0x549/0xad0 [ 1541.396612] ? spurious_fault+0x640/0x640 [ 1541.401916] ? do_page_fault+0x60/0x500 [ 1541.406858] ? page_fault+0x2f/0x50 [ 1541.411049] page_fault+0x45/0x50 [ 1541.414755] RIP: ee42ada3:0x1f9f [ 1541.418273] RSP: ee42a4b8:0000000000000004 EFLAGS: 7f34ee42ada0 [ 1541.423634] Mem-Info: [ 1541.465583] active_anon:697868 inactive_anon:690202 isolated_anon:0 [ 1541.465583] active_file:19 inactive_file:20 isolated_file:0 [ 1541.465583] unevictable:16714 dirty:0 writeback:0 unstable:0 [ 1541.465583] slab_reclaimable:16425 slab_unreclaimable:133555 [ 1541.465583] mapped:53917 shmem:35605 pagetables:37902 bounce:0 [ 1541.465583] free:25030 free_pcp:106 free_cma:0 [ 1541.505677] Node 0 active_anon:1252144kB inactive_anon:727316kB active_file:0kB inactive_file:20kB unevictable:54200kB isolated(anon):0kB isolated(file):0kB mapped:187884kB dirty:0kB writeback:0kB shmem:100848kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 575488kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1541.548023] Node 1 active_anon:1539316kB inactive_anon:2033492kB active_file:48kB inactive_file:68kB unevictable:12656kB isolated(anon):0kB isolated(file):0kB mapped:27784kB dirty:0kB writeback:0kB shmem:41572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1541.585234] Node 0 DMA free:11028kB min:204kB low:252kB high:300kB active_anon:2112kB inactive_anon:1780kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1541.629005] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1541.634670] Node 0 DMA32 free:36080kB min:36200kB low:45248kB high:54296kB active_anon:1250008kB inactive_anon:725528kB active_file:8kB inactive_file:12kB unevictable:54200kB writepending:0kB present:3129332kB managed:2788128kB mlocked:54200kB kernel_stack:12672kB pagetables:60092kB bounce:0kB free_pcp:424kB local_pcp:368kB free_cma:0kB [ 1541.674476] lowmem_reserve[]: 0 0 0 0 0 [ 1541.678670] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1541.712658] lowmem_reserve[]: 0 0 0 0 0 [ 1541.717249] Node 1 Normal free:53416kB min:53696kB low:67120kB high:80544kB active_anon:1539316kB inactive_anon:2033492kB active_file:36kB inactive_file:40kB unevictable:12656kB writepending:0kB present:4194304kB managed:4128256kB mlocked:12656kB kernel_stack:36448kB pagetables:91288kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1541.757986] lowmem_reserve[]: 0 0 0 0 0 [ 1541.774015] Node 0 DMA: 49*4kB (UM) 4*8kB (MEH) 3*16kB (UEH) 4*32kB (UME) 2*64kB (ME) 2*128kB (ME) 6*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11028kB [ 1541.798548] Node 0 DMA32: 146*4kB (UME) 1031*8kB (UME) 1067*16kB (UME) 228*32kB (UME) 45*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36080kB [ 1541.816187] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1541.833655] Node 1 Normal: 170*4kB (UMH) 70*8kB (UEH) 55*16kB (UEH) 733*32kB (UMEH) 393*64kB (UEH) 21*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53416kB [ 1541.849519] Bluetooth: hci5 command 0x040f tx timeout [ 1541.855273] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1541.865169] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1541.876289] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1541.885581] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1541.896904] 36974 total pagecache pages [ 1541.901738] 0 pages in swap cache [ 1541.905297] Swap cache stats: add 0, delete 0, find 0/0 [ 1541.914417] Free swap = 0kB [ 1541.919984] Total swap = 0kB [ 1541.923942] 2097051 pages RAM [ 1541.927059] 0 pages HighMem/MovableOnly [ 1541.934842] 363849 pages reserved [ 1541.939014] 0 pages cma reserved [ 1541.942590] Out of memory (oom_kill_allocating_task): Kill process 1323 (in:imklog) score 0 or sacrifice child [ 1541.952975] Killed process 1310 (rsyslogd) total-vm:254332kB, anon-rss:816kB, file-rss:0kB, shmem-rss:0kB [ 1541.966408] oom_reaper: reaped process 1310 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 20:36:14 executing program 4: socketpair(0xa, 0x1, 0x84, &(0x7f0000000000)) 20:36:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:36:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), 0x14) 20:36:15 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect(r0, 0x0, 0x0) 20:36:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) [ 1543.939096] Bluetooth: hci5 command 0x0419 tx timeout 20:36:15 executing program 3: openat$vsock(0xffffff9c, &(0x7f0000002900), 0x2, 0x0) 20:36:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xd, &(0x7f0000000480)=@security={'security\x00', 0xe, 0x4, 0x2c4, 0xffffffff, 0xb0, 0xb0, 0xb0, 0xffffffff, 0xffffffff, 0x344, 0x344, 0x344, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @local, 0x0, 0x0, 'geneve1\x00', 'vcan0\x00'}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "bf2c4789a213377c13872d0dda8eccf5e4d7410ead47cb4488fa0d22b4c1"}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x320) 20:36:15 executing program 5: clock_gettime(0x0, &(0x7f0000000100)={0x0}) select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x3}, 0x0, &(0x7f0000000140)={r0}) 20:36:15 executing program 4: r0 = socket$inet(0x2, 0x3, 0x8) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @local}, 0x205, 0x0, 0x0, 0x0, 0x80, &(0x7f0000000080)='wlan1\x00', 0x43, 0x1, 0xf161}) 20:36:15 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100), 0x3, 0x2) readv(r0, 0x0, 0x0) [ 1544.324217] syz-executor.5 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 1544.367384] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1544.377170] CPU: 1 PID: 5542 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1544.385407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1544.394968] Call Trace: [ 1544.397909] dump_stack+0x1b2/0x281 [ 1544.401920] dump_header+0x178/0x82f [ 1544.405890] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1544.411015] ? ___ratelimit+0x2cd/0x530 [ 1544.416182] oom_kill_process.cold+0x10/0xa40 [ 1544.420718] out_of_memory+0xe3e/0x1190 [ 1544.424943] ? oom_killer_disable+0x1c0/0x1c0 [ 1544.429488] ? mutex_trylock+0x152/0x1a0 [ 1544.433605] __alloc_pages_nodemask+0x23e1/0x2720 [ 1544.438801] ? ____cache_alloc_node+0xf4/0x1d0 [ 1544.444064] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1544.449626] ? do_raw_spin_unlock+0x164/0x220 [ 1544.454241] ? _raw_spin_unlock+0x29/0x40 [ 1544.458734] ? ____cache_alloc_node+0xf4/0x1d0 [ 1544.463818] ? kmem_cache_alloc_node+0x38b/0x410 [ 1544.469956] copy_process.part.0+0x265/0x71c0 [ 1544.474898] ? __handle_mm_fault+0x2095/0x4620 [ 1544.479639] ? lock_downgrade+0x740/0x740 [ 1544.484328] ? __lru_cache_add+0x178/0x250 [ 1544.489264] ? do_raw_spin_unlock+0x164/0x220 [ 1544.494242] ? _raw_spin_unlock+0x29/0x40 [ 1544.498749] ? __handle_mm_fault+0x80f/0x4620 [ 1544.503388] ? __cleanup_sighand+0x40/0x40 [ 1544.507887] _do_fork+0x184/0xc80 [ 1544.511456] ? fork_idle+0x270/0x270 [ 1544.515532] ? up_read+0x17/0x30 [ 1544.519653] ? __do_page_fault+0x159/0xad0 [ 1544.524068] ? do_syscall_64+0x4c/0x640 [ 1544.528498] ? sys_vfork+0x20/0x20 [ 1544.532235] do_syscall_64+0x1d5/0x640 [ 1544.536540] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1544.542051] RIP: 0033:0x467a21 [ 1544.545405] RSP: 002b:00007fff8e36ebb8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1544.553606] RAX: ffffffffffffffda RBX: 00007ff92686d700 RCX: 0000000000467a21 [ 1544.561421] RDX: 00007ff92686d9d0 RSI: 00007ff92686d2f0 RDI: 00000000003d0f00 [ 1544.570581] RBP: 00007fff8e36edf0 R08: 00007ff92686d700 R09: 00007ff92686d700 [ 1544.578654] R10: 00007ff92686d9d0 R11: 0000000000000206 R12: 00007fff8e36ec6e [ 1544.586459] R13: 00007fff8e36ec6f R14: 00007ff92686d300 R15: 0000000000022000 [ 1544.626146] Mem-Info: [ 1544.632942] active_anon:702030 inactive_anon:690200 isolated_anon:0 [ 1544.632942] active_file:37 inactive_file:0 isolated_file:32 [ 1544.632942] unevictable:13457 dirty:0 writeback:0 unstable:0 [ 1544.632942] slab_reclaimable:16519 slab_unreclaimable:133909 [ 1544.632942] mapped:53990 shmem:35605 pagetables:37977 bounce:0 [ 1544.632942] free:23495 free_pcp:55 free_cma:0 [ 1544.669045] Node 0 active_anon:1265292kB inactive_anon:727312kB active_file:88kB inactive_file:4kB unevictable:48212kB isolated(anon):0kB isolated(file):0kB mapped:188256kB dirty:0kB writeback:0kB shmem:100852kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 575488kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1544.699024] Node 1 active_anon:1542828kB inactive_anon:2033488kB active_file:60kB inactive_file:0kB unevictable:5616kB isolated(anon):0kB isolated(file):0kB mapped:27704kB dirty:0kB writeback:0kB shmem:41568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1544.728559] Node 0 DMA free:11028kB min:204kB low:252kB high:300kB active_anon:2140kB inactive_anon:1780kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1544.764764] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1544.770797] Node 0 DMA32 free:29340kB min:36200kB low:45248kB high:54296kB active_anon:1263152kB inactive_anon:725532kB active_file:108kB inactive_file:0kB unevictable:48212kB writepending:0kB present:3129332kB managed:2788128kB mlocked:48212kB kernel_stack:12704kB pagetables:60292kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1544.818548] lowmem_reserve[]: 0 0 0 0 0 [ 1544.844086] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1545.003725] lowmem_reserve[]: 0 0 0 0 0 [ 1545.015648] Node 1 Normal free:53276kB min:53696kB low:67120kB high:80544kB active_anon:1539416kB inactive_anon:2033488kB active_file:1192kB inactive_file:1208kB unevictable:7668kB writepending:40kB present:4194304kB managed:4128256kB mlocked:7668kB kernel_stack:36800kB pagetables:91492kB bounce:0kB free_pcp:660kB local_pcp:0kB free_cma:0kB [ 1545.055789] lowmem_reserve[]: 0 0 0 0 0 [ 1545.072111] Node 0 DMA: 56*4kB (UM) 4*8kB (MEH) 3*16kB (UEH) 4*32kB (UME) 2*64kB (ME) 2*128kB (ME) 6*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11056kB [ 1545.098542] Node 0 DMA32: 655*4kB (UME) 1032*8kB (UME) 1072*16kB (UME) 257*32kB (UME) 56*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39836kB [ 1545.117921] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1545.134140] Node 1 Normal: 267*4kB (UMEH) 193*8kB (UMEH) 76*16kB (UMH) 766*32kB (UMEH) 401*64kB (UMEH) 23*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 56948kB [ 1545.150871] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1545.160679] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1545.170502] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1545.180211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1545.189891] 38040 total pagecache pages [ 1545.194262] 0 pages in swap cache [ 1545.198001] Swap cache stats: add 0, delete 0, find 0/0 [ 1545.204179] Free swap = 0kB [ 1545.207647] Total swap = 0kB [ 1545.228173] 2097051 pages RAM [ 1545.277624] 0 pages HighMem/MovableOnly [ 1545.296199] 363849 pages reserved [ 1545.311154] 0 pages cma reserved [ 1545.316504] Out of memory (oom_kill_allocating_task): Kill process 5542 (syz-executor.5) score 0 or sacrifice child [ 1545.327566] Killed process 5542 (syz-executor.5) total-vm:93384kB, anon-rss:112kB, file-rss:34872kB, shmem-rss:0kB [ 1545.348415] oom_reaper: reaped process 5542 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1545.372755] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1545.414913] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1545.437816] CPU: 1 PID: 1369 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1545.445783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1545.455928] Call Trace: [ 1545.458540] dump_stack+0x1b2/0x281 [ 1545.462167] dump_header+0x178/0x82f [ 1545.465883] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1545.470987] ? ___ratelimit+0x2cd/0x530 [ 1545.474965] oom_kill_process.cold+0x10/0xa40 [ 1545.479472] out_of_memory+0xe3e/0x1190 [ 1545.483587] ? oom_killer_disable+0x1c0/0x1c0 [ 1545.488074] ? mutex_trylock+0x152/0x1a0 [ 1545.492236] __alloc_pages_nodemask+0x23e1/0x2720 [ 1545.497091] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1545.502064] alloc_pages_current+0x155/0x260 [ 1545.506752] filemap_fault+0x11a1/0x1ad0 [ 1545.510835] ext4_filemap_fault+0x84/0xb0 [ 1545.515074] __do_fault+0xfa/0x380 [ 1545.518610] __handle_mm_fault+0x2497/0x4620 [ 1545.523179] ? vm_insert_page+0x7c0/0x7c0 [ 1545.527320] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1545.532288] ? nanosleep_copyout+0x100/0x100 [ 1545.536737] ? mark_held_locks+0xa6/0xf0 [ 1545.540808] handle_mm_fault+0x455/0x9c0 [ 1545.544879] __do_page_fault+0x549/0xad0 [ 1545.548944] ? spurious_fault+0x640/0x640 [ 1545.553096] ? do_page_fault+0x60/0x500 [ 1545.557099] ? page_fault+0x2f/0x50 [ 1545.560725] page_fault+0x45/0x50 [ 1545.564177] RIP: 179010:0x2 [ 1545.567099] RSP: 0164:00007fff8e36ef2c EFLAGS: 00000032 [ 1545.576556] Mem-Info: [ 1545.585057] active_anon:697793 inactive_anon:690200 isolated_anon:0 [ 1545.585057] active_file:27 inactive_file:8 isolated_file:17 [ 1545.585057] unevictable:16318 dirty:0 writeback:0 unstable:0 [ 1545.585057] slab_reclaimable:16561 slab_unreclaimable:133742 [ 1545.585057] mapped:53968 shmem:35605 pagetables:37906 bounce:0 [ 1545.585057] free:25142 free_pcp:0 free_cma:0 [ 1545.621534] Node 0 active_anon:1251896kB inactive_anon:727312kB active_file:112kB inactive_file:0kB unevictable:54560kB isolated(anon):0kB isolated(file):68kB mapped:188260kB dirty:0kB writeback:0kB shmem:100852kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 575488kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1545.650219] Node 1 active_anon:1539276kB inactive_anon:2033488kB active_file:4kB inactive_file:32kB unevictable:10712kB isolated(anon):0kB isolated(file):0kB mapped:27612kB dirty:0kB writeback:0kB shmem:41568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1545.678497] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:2112kB inactive_anon:1780kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1545.706827] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1545.711915] Node 0 DMA32 free:36172kB min:36200kB low:45248kB high:54296kB active_anon:1249784kB inactive_anon:725532kB active_file:8kB inactive_file:72kB unevictable:54560kB writepending:0kB present:3129332kB managed:2788128kB mlocked:54560kB kernel_stack:12640kB pagetables:60016kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1545.742379] lowmem_reserve[]: 0 0 0 0 0 [ 1545.746391] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1545.772400] lowmem_reserve[]: 0 0 0 0 0 [ 1545.776412] Node 1 Normal free:53344kB min:53696kB low:67120kB high:80544kB active_anon:1539276kB inactive_anon:2033488kB active_file:4kB inactive_file:4kB unevictable:10712kB writepending:0kB present:4194304kB managed:4128256kB mlocked:10712kB kernel_stack:36640kB pagetables:91476kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1545.806572] lowmem_reserve[]: 0 0 0 0 0 [ 1545.810622] Node 0 DMA: 56*4kB (UM) 4*8kB (MEH) 3*16kB (UEH) 4*32kB (UME) 2*64kB (ME) 2*128kB (ME) 6*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11056kB [ 1545.826373] Node 0 DMA32: 135*4kB (UME) 864*8kB (UME) 1070*16kB (UME) 257*32kB (UME) 58*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36508kB [ 1545.841396] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1545.853221] Node 1 Normal: 116*4kB (UMEH) 47*8kB (UMEH) 31*16kB (MH) 736*32kB (UMEH) 401*64kB (UMEH) 23*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53496kB [ 1545.868545] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1545.877424] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1545.886057] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1545.894920] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1545.904275] 37021 total pagecache pages [ 1545.908248] 0 pages in swap cache [ 1545.911717] Swap cache stats: add 0, delete 0, find 0/0 [ 1545.917151] Free swap = 0kB [ 1545.920315] Total swap = 0kB [ 1545.923337] 2097051 pages RAM [ 1545.926428] 0 pages HighMem/MovableOnly [ 1545.930444] 363849 pages reserved [ 1545.933889] 0 pages cma reserved [ 1545.937239] Out of memory (oom_kill_allocating_task): Kill process 1369 (syz-executor.5) score 0 or sacrifice child [ 1545.948542] Killed process 3548 (syz-executor.5) total-vm:93648kB, anon-rss:36660kB, file-rss:34632kB, shmem-rss:0kB [ 1545.968684] oom_reaper: reaped process 3548 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1546.370168] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1546.386114] systemd-journal cpuset=/ mems_allowed=0-1 [ 1546.391571] CPU: 0 PID: 5200 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1546.399566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1546.408916] Call Trace: [ 1546.411501] dump_stack+0x1b2/0x281 [ 1546.415144] dump_header+0x178/0x82f [ 1546.418960] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1546.424084] ? ___ratelimit+0x2cd/0x530 [ 1546.428066] oom_kill_process.cold+0x10/0xa40 [ 1546.432599] out_of_memory+0xe3e/0x1190 [ 1546.436777] ? oom_killer_disable+0x1c0/0x1c0 [ 1546.441271] ? mutex_trylock+0x152/0x1a0 [ 1546.445335] __alloc_pages_nodemask+0x23e1/0x2720 [ 1546.450288] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1546.455131] ? trace_hardirqs_on+0x10/0x10 [ 1546.459390] ? kmem_cache_alloc+0x1e5/0x3c0 [ 1546.463705] ? cache_grow_begin+0x3f/0x700 [ 1546.467923] cache_grow_begin+0x91/0x700 [ 1546.471998] fallback_alloc+0x207/0x2c0 [ 1546.476102] kmem_cache_alloc+0x1e5/0x3c0 [ 1546.480294] getname_flags+0xc8/0x550 [ 1546.484085] do_sys_open+0x1ce/0x410 [ 1546.487802] ? filp_open+0x60/0x60 [ 1546.491328] ? do_syscall_64+0x4c/0x640 [ 1546.495295] ? do_sys_open+0x410/0x410 [ 1546.499180] do_syscall_64+0x1d5/0x640 [ 1546.503069] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1546.508240] RIP: 0033:0x7f739510d840 [ 1546.511935] RSP: 002b:00007ffcdbe7b568 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1546.519642] RAX: ffffffffffffffda RBX: 00007ffcdbe7b870 RCX: 00007f739510d840 [ 1546.526912] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 000055cfc4e688c0 [ 1546.534201] RBP: 000000000000000d R08: 0000000000000000 R09: 00000000ffffffff [ 1546.541469] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 1546.548921] R13: 000055cfc4e63040 R14: 00007ffcdbe7b830 R15: 000055cfc4e681e0 [ 1546.597373] Mem-Info: [ 1546.602116] active_anon:697799 inactive_anon:688833 isolated_anon:0 [ 1546.602116] active_file:25 inactive_file:1 isolated_file:0 [ 1546.602116] unevictable:17905 dirty:0 writeback:0 unstable:0 [ 1546.602116] slab_reclaimable:16593 slab_unreclaimable:133568 [ 1546.602116] mapped:53977 shmem:35606 pagetables:37868 bounce:0 [ 1546.602116] free:25074 free_pcp:0 free_cma:0 [ 1546.637003] Node 0 active_anon:1251920kB inactive_anon:727316kB active_file:24kB inactive_file:4kB unevictable:55560kB isolated(anon):0kB isolated(file):0kB mapped:188256kB dirty:0kB writeback:0kB shmem:100856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 575488kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1546.684294] Node 1 active_anon:1539276kB inactive_anon:2028016kB active_file:140kB inactive_file:16kB unevictable:16552kB isolated(anon):0kB isolated(file):0kB mapped:27568kB dirty:0kB writeback:0kB shmem:41568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1546.717046] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:2112kB inactive_anon:1780kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1546.747523] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1546.760930] Node 0 DMA32 free:35576kB min:36200kB low:45248kB high:54296kB active_anon:1249808kB inactive_anon:725536kB active_file:12kB inactive_file:16kB unevictable:55648kB writepending:0kB present:3129332kB managed:2788128kB mlocked:55648kB kernel_stack:12640kB pagetables:60020kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 1546.801324] lowmem_reserve[]: 0 0 0 0 0 [ 1546.806005] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1546.844645] lowmem_reserve[]: 0 0 0 0 0 [ 1546.848705] Node 1 Normal free:53372kB min:53696kB low:67120kB high:80544kB active_anon:1539276kB inactive_anon:2028016kB active_file:108kB inactive_file:260kB unevictable:16700kB writepending:0kB present:4194304kB managed:4128256kB mlocked:16700kB kernel_stack:36608kB pagetables:91328kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1546.885363] lowmem_reserve[]: 0 0 0 0 0 [ 1546.890766] Node 0 DMA: 56*4kB (UM) 4*8kB (MEH) 3*16kB (UEH) 4*32kB (UME) 2*64kB (ME) 2*128kB (ME) 6*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11056kB [ 1546.908755] Node 0 DMA32: 99*4kB (U) 780*8kB (UME) 1070*16kB (UME) 257*32kB (UME) 58*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35692kB [ 1546.927164] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1546.938302] Node 1 Normal: 125*4kB (UMH) 32*8kB (UMEH) 37*16kB (MH) 742*32kB (UMEH) 400*64kB (UMEH) 23*128kB (UMEH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53636kB [ 1546.957915] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1546.966888] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1546.980933] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1546.992114] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1547.012061] 36984 total pagecache pages [ 1547.016125] 0 pages in swap cache [ 1547.021862] Swap cache stats: add 0, delete 0, find 0/0 [ 1547.027229] Free swap = 0kB [ 1547.034586] Total swap = 0kB [ 1547.037627] 2097051 pages RAM [ 1547.043068] 0 pages HighMem/MovableOnly [ 1547.047042] 363849 pages reserved [ 1547.055056] 0 pages cma reserved [ 1547.058431] Out of memory (oom_kill_allocating_task): Kill process 5200 (systemd-journal) score 0 or sacrifice child [ 1547.075886] Killed process 5200 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1592kB [ 1547.088207] oom_reaper: reaped process 5200 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1592kB 20:36:19 executing program 5: clock_gettime(0x0, &(0x7f000000a780)) 20:36:19 executing program 2: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) sendfile(r0, r1, 0x0, 0x80001d00c4d0) creat(&(0x7f0000000240)='./bus\x00', 0x0) 20:36:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:36:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:36:19 executing program 4: perf_event_open(&(0x7f00000000c0)={0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46908, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1548.388158] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1548.404433] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1548.410521] CPU: 1 PID: 7961 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1548.418143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1548.427522] Call Trace: [ 1548.430116] dump_stack+0x1b2/0x281 [ 1548.433751] dump_header+0x178/0x82f [ 1548.437478] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1548.442605] ? ___ratelimit+0x2cd/0x530 [ 1548.446593] oom_kill_process.cold+0x10/0xa40 [ 1548.451102] out_of_memory+0xe3e/0x1190 [ 1548.455088] ? oom_killer_disable+0x1c0/0x1c0 [ 1548.459594] ? mutex_trylock+0x152/0x1a0 [ 1548.463777] __alloc_pages_nodemask+0x23e1/0x2720 [ 1548.468645] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1548.473533] alloc_pages_current+0x155/0x260 [ 1548.477959] filemap_fault+0x11a1/0x1ad0 [ 1548.482083] ext4_filemap_fault+0x84/0xb0 [ 1548.486352] __do_fault+0xfa/0x380 [ 1548.489912] __handle_mm_fault+0x2497/0x4620 [ 1548.494342] ? vm_insert_page+0x7c0/0x7c0 [ 1548.498499] ? __fsnotify_inode_delete+0x20/0x20 [ 1548.503269] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1548.509953] ? mark_held_locks+0xa6/0xf0 [ 1548.514037] ? sync_mm_rss+0xf2/0x160 [ 1548.517841] handle_mm_fault+0x455/0x9c0 [ 1548.521930] __do_page_fault+0x549/0xad0 [ 1548.526024] ? spurious_fault+0x640/0x640 [ 1548.530178] ? do_page_fault+0x60/0x500 [ 1548.534172] ? page_fault+0x2f/0x50 [ 1548.537793] page_fault+0x45/0x50 [ 1548.541238] RIP: 0000:0x947859 [ 1548.544421] RSP: 533e2008:000000c0004e73c8 EFLAGS: 000000f1 [ 1548.564170] Mem-Info: [ 1548.585694] active_anon:702397 inactive_anon:688832 isolated_anon:0 [ 1548.585694] active_file:21 inactive_file:8 isolated_file:0 [ 1548.585694] unevictable:14701 dirty:1 writeback:0 unstable:0 [ 1548.585694] slab_reclaimable:16676 slab_unreclaimable:133303 [ 1548.585694] mapped:53592 shmem:35606 pagetables:37930 bounce:0 [ 1548.585694] free:23681 free_pcp:0 free_cma:0 [ 1548.638671] Node 0 active_anon:1262652kB inactive_anon:727316kB active_file:8kB inactive_file:8kB unevictable:49748kB isolated(anon):0kB isolated(file):0kB mapped:188228kB dirty:0kB writeback:0kB shmem:100856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 575488kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1548.704555] Node 1 active_anon:1546936kB inactive_anon:2028012kB active_file:112kB inactive_file:220kB unevictable:9084kB isolated(anon):0kB isolated(file):0kB mapped:26148kB dirty:0kB writeback:0kB shmem:41568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1548.737341] Node 0 DMA free:11028kB min:204kB low:252kB high:300kB active_anon:2140kB inactive_anon:1780kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1548.764773] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1548.769944] Node 0 DMA32 free:30120kB min:36200kB low:45248kB high:54296kB active_anon:1260512kB inactive_anon:725536kB active_file:8kB inactive_file:4kB unevictable:49748kB writepending:0kB present:3129332kB managed:2788128kB mlocked:49748kB kernel_stack:12672kB pagetables:60348kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1548.801022] lowmem_reserve[]: 0 0 0 0 0 [ 1548.808596] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1548.836375] lowmem_reserve[]: 0 0 0 0 0 [ 1548.846836] Node 1 Normal free:53836kB min:53696kB low:67120kB high:80544kB active_anon:1546936kB inactive_anon:2028012kB active_file:16kB inactive_file:92kB unevictable:9084kB writepending:24kB present:4194304kB managed:4128256kB mlocked:9084kB kernel_stack:36800kB pagetables:91240kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1548.899572] lowmem_reserve[]: 0 0 0 0 0 [ 1548.903754] Node 0 DMA: 56*4kB (UM) 4*8kB (MEH) 3*16kB (UEH) 4*32kB (UME) 2*64kB (ME) 2*128kB (ME) 6*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11056kB [ 1548.920986] Node 0 DMA32: 359*4kB (ME) 1065*8kB (UMEH) 1060*16kB (UMEH) 244*32kB (UME) 61*64kB (UME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38628kB [ 1548.935945] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1548.946936] Node 1 Normal: 280*4kB (UMEH) 79*8kB (UMH) 151*16kB (UMH) 859*32kB (UMEH) 398*64kB (UMH) 20*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 59688kB [ 1548.962664] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1548.971659] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1548.980564] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1548.989918] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 20:36:19 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2480, 0x0) 20:36:19 executing program 4: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a40)={0xffffffffffffffff, 0x0, 0x0}, 0x20) [ 1548.998594] 37031 total pagecache pages [ 1549.016178] 0 pages in swap cache [ 1549.026149] Swap cache stats: add 0, delete 0, find 0/0 [ 1549.104829] Free swap = 0kB [ 1549.118628] Total swap = 0kB [ 1549.150232] 2097051 pages RAM [ 1549.153471] 0 pages HighMem/MovableOnly [ 1549.182394] 363849 pages reserved [ 1549.185885] 0 pages cma reserved [ 1549.194398] Out of memory (oom_kill_allocating_task): Kill process 7961 (syz-fuzzer) score 0 or sacrifice child [ 1549.208815] Killed process 1367 (syz-executor.0) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1549.236863] oom_reaper: reaped process 1367 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1550.163175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1550.174840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1550.186506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1550.197014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1550.207018] device bridge_slave_1 left promiscuous mode [ 1550.216838] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.226213] device bridge_slave_0 left promiscuous mode [ 1550.235157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.246878] device veth1_macvtap left promiscuous mode [ 1550.256318] device veth0_macvtap left promiscuous mode [ 1550.263883] device veth1_vlan left promiscuous mode [ 1550.271886] device veth0_vlan left promiscuous mode [ 1550.410717] device hsr_slave_1 left promiscuous mode [ 1550.424863] device hsr_slave_0 left promiscuous mode [ 1550.440037] team0 (unregistering): Port device team_slave_1 removed [ 1550.450650] team0 (unregistering): Port device team_slave_0 removed [ 1550.460270] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1550.470946] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1550.502048] bond0 (unregistering): Released all slaves [ 1550.797584] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1550.844710] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1550.861144] systemd[1]: Stopped Journal Service. [ 1550.881817] systemd[1]: Starting Journal Service... [ 1550.929448] systemd[1]: Starting Load/Save RF Kill Switch Status... 20:36:22 executing program 5: clock_gettime(0x0, &(0x7f0000000100)={0x0}) select(0x40, &(0x7f0000000040)={0x7}, &(0x7f0000000080)={0x3}, 0x0, &(0x7f0000000140)={r0}) 20:36:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@dev, @dev, @multicast2}, 0xc) 20:36:22 executing program 2: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) sendfile(r0, r1, 0x0, 0x80001d00c4d0) creat(&(0x7f0000000240)='./bus\x00', 0x0) 20:36:22 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000003140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000080)={'wg2\x00'}) 20:36:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:36:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:36:22 executing program 3: syz_mount_image$pvfs2(0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0) 20:36:22 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f00000085c0)=[{&(0x7f00000080c0)='@', 0x1, 0xb563}, {&(0x7f0000008500)="783707e27b86", 0x6, 0xfffffffa}], 0x0, 0x0) 20:36:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x6, 0x6c9, &(0x7f0000000180)=@mangle={'mangle\x00', 0x1f, 0x6, 0x52c, 0x0, 0x0, 0x21c, 0x4a4, 0x4a4, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'macvlan0\x00', 'batadv_slave_0\x00'}, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@multicast1}}}, {{@ipv6={@empty, @local, [], [], 'vxcan1\x00', 'veth1_macvtap\x00'}, 0x0, 0xa4, 0xe4}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8d8c2c8472931e3e96bf5328f1adf2b4389a4b7d828cfbeee23cfd43271d"}}, {{@ipv6={@empty, @local, [], [], 'vlan1\x00', 'macsec0\x00'}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@private2}}}, {{@ipv6={@loopback, @private0, [], [], 'team_slave_0\x00', 'ip6gretap0\x00'}, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@private0}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x588) 20:36:22 executing program 3: syz_mount_image$adfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3, 0x0, &(0x7f0000000140), 0x87008, &(0x7f0000000180)=ANY=[]) 20:36:22 executing program 4: openat$vcs(0xffffffffffffff9c, 0x0, 0x501c0, 0x0) 20:36:22 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 20:36:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@getsadinfo={0x14, 0x23, 0x701}, 0x14}}, 0x0) [ 1551.479409] systemd-journald[5588]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1551.502208] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1552.773422] systemd[1]: Started Journal Service. [ 1555.804225] IPVS: ftp: loaded support on port[0] = 21 [ 1555.952539] chnl_net:caif_netlink_parms(): no params data found [ 1556.066932] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.073772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.082543] device bridge_slave_0 entered promiscuous mode [ 1556.090285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1556.096740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.104334] device bridge_slave_1 entered promiscuous mode [ 1556.124361] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1556.133586] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1556.154759] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1556.162109] team0: Port device team_slave_0 added [ 1556.167599] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1556.175168] team0: Port device team_slave_1 added [ 1556.193850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1556.200203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1556.225629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1556.236690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1556.243056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1556.268732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1556.280025] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1556.287464] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1556.312497] device hsr_slave_0 entered promiscuous mode [ 1556.318391] device hsr_slave_1 entered promiscuous mode [ 1556.325015] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1556.333952] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1556.414318] bridge0: port 2(bridge_slave_1) entered blocking state [ 1556.421031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1556.427654] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.434480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1556.465563] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1556.473019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1556.482771] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1556.493905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1556.501085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.507863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.518416] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1556.525283] 8021q: adding VLAN 0 to HW filter on device team0 [ 1556.534329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1556.544064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.550520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1556.561271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1556.568886] bridge0: port 2(bridge_slave_1) entered blocking state [ 1556.575353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1556.591338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1556.599903] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1556.613203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1556.626522] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1556.637326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1556.648010] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1556.654924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1556.663001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1556.671346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1556.684118] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1556.692561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1556.700041] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1556.713675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1556.775687] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1556.786481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1556.822611] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1556.830659] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1556.837405] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1556.847391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1556.855694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1556.863784] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1556.873617] device veth0_vlan entered promiscuous mode [ 1556.884960] device veth1_vlan entered promiscuous mode [ 1556.891333] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1556.900715] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1556.913030] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1556.924164] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1556.932277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1556.940645] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1556.948054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1556.958666] device veth0_macvtap entered promiscuous mode [ 1556.968715] device veth1_macvtap entered promiscuous mode [ 1556.978367] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1556.988778] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1556.997954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1557.008098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.018165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1557.028203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.037516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1557.047374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.057181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1557.067014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.076198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1557.086069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.101493] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1557.108562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1557.117416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1557.125605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1557.135179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1557.144985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.154291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1557.164604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.173808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1557.183603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.193248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1557.203220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.212471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1557.222302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.232687] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1557.239751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1557.247048] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1557.255792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1557.849356] Bluetooth: hci3 command 0x0409 tx timeout 20:36:29 executing program 3: syz_open_dev$cec(0x0, 0x3, 0x2) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 20:36:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:36:29 executing program 4: syz_mount_image$adfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) 20:36:29 executing program 2: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) sendfile(r0, r1, 0x0, 0x80001d00c4d0) creat(&(0x7f0000000240)='./bus\x00', 0x0) 20:36:29 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000003140), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x541b, 0x0) 20:36:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:36:29 executing program 4: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0}, 0x68) [ 1558.245459] VPS: Can't find an adfs filesystem on dev loop4. 20:36:29 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) [ 1558.597410] syz-executor.3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1558.655103] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1558.660891] CPU: 0 PID: 5214 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1558.668729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1558.678716] Call Trace: [ 1558.681317] dump_stack+0x1b2/0x281 [ 1558.684954] dump_header+0x178/0x82f [ 1558.688673] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1558.693969] ? ___ratelimit+0x2cd/0x530 [ 1558.697961] oom_kill_process.cold+0x10/0xa40 [ 1558.702494] out_of_memory+0xe3e/0x1190 [ 1558.706472] ? oom_killer_disable+0x1c0/0x1c0 [ 1558.710965] ? mutex_trylock+0x152/0x1a0 [ 1558.715027] __alloc_pages_nodemask+0x23e1/0x2720 [ 1558.719910] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1558.724747] ? trace_hardirqs_on+0x10/0x10 [ 1558.728985] ? trace_hardirqs_on+0x10/0x10 [ 1558.733661] ? kmem_cache_alloc+0x1e5/0x3c0 [ 1558.737995] ? cache_grow_begin+0x3f/0x700 [ 1558.742230] cache_grow_begin+0x91/0x700 [ 1558.746295] fallback_alloc+0x207/0x2c0 [ 1558.750272] kmem_cache_alloc+0x1e5/0x3c0 [ 1558.754418] getname_flags+0xc8/0x550 [ 1558.758216] user_path_mountpoint_at+0x23/0x40 [ 1558.762804] SyS_umount+0x125/0xeb0 [ 1558.766432] ? lock_downgrade+0x740/0x740 [ 1558.770576] ? __detach_mounts+0x400/0x400 [ 1558.774822] ? up_read+0x17/0x30 [ 1558.778969] ? __do_page_fault+0x159/0xad0 [ 1558.783211] ? do_syscall_64+0x4c/0x640 [ 1558.787295] ? __detach_mounts+0x400/0x400 [ 1558.791542] do_syscall_64+0x1d5/0x640 [ 1558.795445] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1558.800629] RIP: 0033:0x467a57 [ 1558.803810] RSP: 002b:00007fff3ca83098 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1558.811526] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000000467a57 [ 1558.818801] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007fff3ca84230 [ 1558.826085] RBP: 00007fff3ca8420c R08: 0000000000000000 R09: 000001a2c9a76e84 [ 1558.833374] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004bee98 [ 1558.840642] R13: 00007fff3ca84230 R14: 0000000000000002 R15: 00007fff3ca84270 [ 1558.880884] Mem-Info: [ 1558.884954] active_anon:685115 inactive_anon:709767 isolated_anon:0 [ 1558.884954] active_file:283 inactive_file:663 isolated_file:43 [ 1558.884954] unevictable:13287 dirty:1 writeback:0 unstable:0 [ 1558.884954] slab_reclaimable:16285 slab_unreclaimable:131375 [ 1558.884954] mapped:54723 shmem:37654 pagetables:36773 bounce:0 [ 1558.884954] free:24607 free_pcp:340 free_cma:0 [ 1558.924129] Node 0 active_anon:1240404kB inactive_anon:756480kB active_file:176kB inactive_file:68kB unevictable:47520kB isolated(anon):0kB isolated(file):0kB mapped:167864kB dirty:0kB writeback:4kB shmem:101368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 573440kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1558.956344] Node 1 active_anon:1500056kB inactive_anon:2082588kB active_file:248kB inactive_file:408kB unevictable:5628kB isolated(anon):0kB isolated(file):44kB mapped:48252kB dirty:0kB writeback:28kB shmem:49248kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1559.011627] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:2148kB inactive_anon:1780kB active_file:16kB inactive_file:8kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1559.043454] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1559.057252] Node 0 DMA32 free:34472kB min:36200kB low:45248kB high:54296kB active_anon:1238248kB inactive_anon:754700kB active_file:36kB inactive_file:24kB unevictable:47520kB writepending:0kB present:3129332kB managed:2788128kB mlocked:47520kB kernel_stack:12480kB pagetables:58872kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1559.125750] lowmem_reserve[]: 0 0 0 0 0 [ 1559.137546] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1559.189557] lowmem_reserve[]: 0 0 0 0 0 [ 1559.213985] Node 1 Normal free:66700kB min:53696kB low:67120kB high:80544kB active_anon:1490544kB inactive_anon:2082588kB active_file:252kB inactive_file:836kB unevictable:5628kB writepending:12kB present:4194304kB managed:4128256kB mlocked:5628kB kernel_stack:35360kB pagetables:88020kB bounce:0kB free_pcp:900kB local_pcp:272kB free_cma:0kB [ 1559.256722] lowmem_reserve[]: 0 0 0 0 0 [ 1559.262092] Node 0 DMA: 48*4kB (UM) 4*8kB (UMH) 2*16kB (UH) 3*32kB (UM) 2*64kB (UM) 1*128kB (M) 5*256kB (UM) 2*512kB (U) 2*1024kB (UM) 3*2048kB (ME) 0*4096kB = 11104kB [ 1559.278924] Node 0 DMA32: 355*4kB (UE) 29*8kB (UE) 1116*16kB (UME) 406*32kB (UME) 50*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35700kB [ 1559.294234] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1559.306414] Node 1 Normal: 50*4kB (UEH) 338*8kB (UEH) 39*16kB (UMEH) 636*32kB (UMEH) 492*64kB (UMH) 18*128kB (UMH) 3*256kB (M) 2*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 61512kB [ 1559.326603] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1559.340074] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1559.350004] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1559.436145] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1559.451619] 39109 total pagecache pages [ 1559.455901] 0 pages in swap cache [ 1559.462367] Swap cache stats: add 0, delete 0, find 0/0 [ 1559.473099] Free swap = 0kB [ 1559.476232] Total swap = 0kB [ 1559.479471] 2097051 pages RAM [ 1559.482604] 0 pages HighMem/MovableOnly [ 1559.486638] 363849 pages reserved [ 1559.490894] 0 pages cma reserved [ 1559.494346] Out of memory (oom_kill_allocating_task): Kill process 5214 (syz-executor.3) score 0 or sacrifice child [ 1559.505434] Killed process 5214 (syz-executor.3) total-vm:93120kB, anon-rss:116kB, file-rss:34756kB, shmem-rss:0kB [ 1559.577176] oom_reaper: reaped process 5214 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1559.615570] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1559.641120] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1559.646818] CPU: 0 PID: 1369 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1559.654614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1559.665716] Call Trace: [ 1559.668481] dump_stack+0x1b2/0x281 [ 1559.672110] dump_header+0x178/0x82f [ 1559.675836] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1559.680932] ? ___ratelimit+0x2cd/0x530 [ 1559.684897] oom_kill_process.cold+0x10/0xa40 [ 1559.689407] out_of_memory+0xe3e/0x1190 [ 1559.693377] ? oom_killer_disable+0x1c0/0x1c0 [ 1559.697863] ? mutex_trylock+0x152/0x1a0 [ 1559.701908] __alloc_pages_nodemask+0x23e1/0x2720 [ 1559.706758] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1559.711594] alloc_pages_current+0x155/0x260 [ 1559.716160] filemap_fault+0x11a1/0x1ad0 [ 1559.720537] ext4_filemap_fault+0x84/0xb0 [ 1559.724679] __do_fault+0xfa/0x380 [ 1559.728203] __handle_mm_fault+0x2497/0x4620 [ 1559.732596] ? vm_insert_page+0x7c0/0x7c0 [ 1559.736743] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1559.741483] ? nanosleep_copyout+0x100/0x100 [ 1559.745890] ? mark_held_locks+0xa6/0xf0 [ 1559.749944] handle_mm_fault+0x455/0x9c0 [ 1559.754014] __do_page_fault+0x549/0xad0 [ 1559.758077] ? spurious_fault+0x640/0x640 [ 1559.762216] ? do_page_fault+0x60/0x500 [ 1559.766274] ? page_fault+0x2f/0x50 [ 1559.770422] page_fault+0x45/0x50 [ 1559.773972] RIP: 17ca1e: (null) [ 1559.778278] RSP: 0171:00007fff8e36ef2c EFLAGS: 00000032 [ 1559.782235] Mem-Info: [ 1559.790636] active_anon:681445 inactive_anon:709767 isolated_anon:0 [ 1559.790636] active_file:7 inactive_file:20 isolated_file:0 [ 1559.790636] unevictable:17751 dirty:0 writeback:0 unstable:0 [ 1559.790636] slab_reclaimable:16272 slab_unreclaimable:131510 [ 1559.790636] mapped:53925 shmem:37654 pagetables:36710 bounce:0 [ 1559.790636] free:25073 free_pcp:143 free_cma:0 [ 1559.828246] Node 0 active_anon:1233772kB inactive_anon:756480kB active_file:24kB inactive_file:24kB unevictable:52948kB isolated(anon):0kB isolated(file):0kB mapped:167736kB dirty:0kB writeback:0kB shmem:101368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 573440kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1559.864016] Node 1 active_anon:1492008kB inactive_anon:2082588kB active_file:4kB inactive_file:56kB unevictable:18056kB isolated(anon):0kB isolated(file):0kB mapped:47964kB dirty:0kB writeback:0kB shmem:49248kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1559.895828] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:2108kB inactive_anon:1780kB active_file:0kB inactive_file:0kB unevictable:104kB writepending:0kB present:15992kB managed:15908kB mlocked:104kB kernel_stack:0kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1559.940170] Bluetooth: hci3 command 0x041b tx timeout [ 1559.943608] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1559.968852] Node 0 DMA32 free:35904kB min:36200kB low:45248kB high:54296kB active_anon:1231664kB inactive_anon:754700kB active_file:24kB inactive_file:24kB unevictable:52872kB writepending:0kB present:3129332kB managed:2788128kB mlocked:52872kB kernel_stack:12384kB pagetables:58768kB bounce:0kB free_pcp:304kB local_pcp:200kB free_cma:0kB [ 1560.005546] lowmem_reserve[]: 0 0 0 0 0 [ 1560.009724] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1560.208958] lowmem_reserve[]: 0 0 0 0 0 [ 1560.338896] Node 1 Normal free:53316kB min:53696kB low:67120kB high:80544kB active_anon:1492008kB inactive_anon:2082588kB active_file:128kB inactive_file:0kB unevictable:18056kB writepending:0kB present:4194304kB managed:4128256kB mlocked:18056kB kernel_stack:35296kB pagetables:88036kB bounce:0kB free_pcp:256kB local_pcp:8kB free_cma:0kB [ 1560.407441] lowmem_reserve[]: 0 0 0 0 0 [ 1560.449866] Node 0 DMA: 30*4kB (UM) 5*8kB (UMH) 4*16kB (UH) 3*32kB (UM) 2*64kB (UM) 1*128kB (M) 5*256kB (UM) 2*512kB (U) 2*1024kB (UM) 3*2048kB (ME) 0*4096kB = 11072kB [ 1560.499038] Node 0 DMA32: 398*4kB (UME) 252*8kB (UME) 1119*16kB (UME) 407*32kB (UME) 50*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37736kB [ 1560.515008] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1560.527349] Node 1 Normal: 133*4kB (UMEH) 422*8kB (UMEH) 850*16kB (UMEH) 604*32kB (UMEH) 472*64kB (UMH) 2*128kB (UH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 67300kB [ 1560.544135] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1560.553368] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 20:36:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:36:32 executing program 3: socketpair(0x2, 0x1, 0x0, &(0x7f0000000080)) [ 1560.599922] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 20:36:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@dev, @local}, 0xc) [ 1560.678878] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1560.760792] 41374 total pagecache pages 20:36:32 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0189436, &(0x7f0000000080)={'ip6tnl0\x00'}) [ 1560.783825] 0 pages in swap cache [ 1560.797436] Swap cache stats: add 0, delete 0, find 0/0 [ 1560.827548] Free swap = 0kB [ 1560.868708] Total swap = 0kB [ 1561.008142] 2097051 pages RAM [ 1561.033622] 0 pages HighMem/MovableOnly [ 1561.089171] 363849 pages reserved [ 1561.111794] 0 pages cma reserved [ 1561.134655] Out of memory (oom_kill_allocating_task): Kill process 1369 (syz-executor.5) score 0 or sacrifice child [ 1561.177431] Killed process 3618 (syz-executor.5) total-vm:93384kB, anon-rss:36652kB, file-rss:34632kB, shmem-rss:0kB [ 1561.246322] oom_reaper: reaped process 3618 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1561.295157] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1561.332476] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1561.340131] CPU: 1 PID: 1371 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1561.349442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1561.359094] Call Trace: [ 1561.361701] dump_stack+0x1b2/0x281 [ 1561.366108] dump_header+0x178/0x82f [ 1561.370183] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1561.375302] ? ___ratelimit+0x2cd/0x530 [ 1561.379307] oom_kill_process.cold+0x10/0xa40 [ 1561.383830] out_of_memory+0xe3e/0x1190 [ 1561.387816] ? oom_killer_disable+0x1c0/0x1c0 [ 1561.392319] ? mutex_trylock+0x152/0x1a0 [ 1561.396379] __alloc_pages_nodemask+0x23e1/0x2720 [ 1561.401263] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1561.406112] ? trace_hardirqs_on+0x10/0x10 [ 1561.410356] ? trace_hardirqs_on+0x10/0x10 [ 1561.414608] ? kmem_cache_alloc+0x1e5/0x3c0 [ 1561.419052] ? cache_grow_begin+0x3f/0x700 [ 1561.423294] cache_grow_begin+0x91/0x700 [ 1561.427419] fallback_alloc+0x207/0x2c0 [ 1561.431407] kmem_cache_alloc+0x1e5/0x3c0 [ 1561.435557] getname_flags+0xc8/0x550 [ 1561.439366] user_path_mountpoint_at+0x23/0x40 [ 1561.443960] SyS_umount+0x125/0xeb0 [ 1561.447601] ? lock_downgrade+0x740/0x740 [ 1561.451788] ? __detach_mounts+0x400/0x400 [ 1561.456034] ? up_read+0x17/0x30 [ 1561.459406] ? __do_page_fault+0x159/0xad0 [ 1561.463651] ? do_syscall_64+0x4c/0x640 [ 1561.467638] ? __detach_mounts+0x400/0x400 [ 1561.471908] do_syscall_64+0x1d5/0x640 [ 1561.475813] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1561.481011] RIP: 0033:0x467a57 [ 1561.484201] RSP: 002b:00007fffaf2da138 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1561.491945] RAX: ffffffffffffffda RBX: 0000000000000156 RCX: 0000000000467a57 [ 1561.499220] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007fffaf2db2d0 [ 1561.506493] RBP: 00007fffaf2db2ac R08: 0000000000000000 R09: 000001a3738e402a [ 1561.513771] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004bee98 [ 1561.521223] R13: 00007fffaf2db2d0 R14: 0000000000000002 R15: 00007fffaf2db310 [ 1561.534194] Bluetooth: hci2 command 0x0406 tx timeout [ 1561.569326] Bluetooth: hci4 command 0x0406 tx timeout [ 1561.574725] Mem-Info: [ 1561.577157] active_anon:685366 inactive_anon:709779 isolated_anon:0 [ 1561.577157] active_file:7 inactive_file:98 isolated_file:0 [ 1561.577157] unevictable:22473 dirty:7 writeback:0 unstable:0 [ 1561.577157] slab_reclaimable:16254 slab_unreclaimable:131277 [ 1561.577157] mapped:48065 shmem:37651 pagetables:36757 bounce:0 [ 1561.577157] free:25091 free_pcp:199 free_cma:0 [ 1561.622133] Bluetooth: hci1 command 0x0406 tx timeout [ 1561.661752] Node 0 active_anon:1236188kB inactive_anon:756464kB active_file:140kB inactive_file:52kB unevictable:62964kB isolated(anon):0kB isolated(file):0kB mapped:163128kB dirty:4kB writeback:0kB shmem:101356kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 573440kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1561.698806] Node 1 active_anon:1490476kB inactive_anon:2082652kB active_file:8kB inactive_file:36kB unevictable:40328kB isolated(anon):0kB isolated(file):0kB mapped:34232kB dirty:24kB writeback:0kB shmem:49248kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1561.859068] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:2136kB inactive_anon:1780kB active_file:0kB inactive_file:0kB unevictable:172kB writepending:0kB present:15992kB managed:15908kB mlocked:172kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1561.886209] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1561.891288] Node 0 DMA32 free:36628kB min:36200kB low:45248kB high:54296kB active_anon:1234356kB inactive_anon:754704kB active_file:60kB inactive_file:0kB unevictable:62832kB writepending:32kB present:3129332kB managed:2788128kB mlocked:62832kB kernel_stack:12544kB pagetables:58888kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1561.921228] lowmem_reserve[]: 0 0 0 0 0 [ 1561.925235] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1561.951396] lowmem_reserve[]: 0 0 0 0 0 [ 1561.955569] Node 1 Normal free:54156kB min:53696kB low:67120kB high:80544kB active_anon:1490916kB inactive_anon:2082952kB active_file:44kB inactive_file:168kB unevictable:40452kB writepending:68kB present:4194304kB managed:4128256kB mlocked:40452kB kernel_stack:35168kB pagetables:88152kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1561.986395] lowmem_reserve[]: 0 0 0 0 0 [ 1561.992822] Node 0 DMA: 13*4kB (UM) 7*8kB (UMH) 6*16kB (UH) 3*32kB (UM) 2*64kB (UM) 1*128kB (M) 5*256kB (UM) 2*512kB (U) 2*1024kB (UM) 3*2048kB (ME) 0*4096kB = 11052kB [ 1562.015305] Node 0 DMA32: 1042*4kB (UE) 902*8kB (UE) 1006*16kB (UE) 258*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35736kB [ 1562.033255] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1562.047840] Node 1 Normal: 339*4kB (UMH) 337*8kB (UH) 1102*16kB (UH) 476*32kB (UH) 270*64kB (UH) 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54324kB [ 1562.063188] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1562.072101] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1562.080946] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1562.090725] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1562.100341] 43189 total pagecache pages [ 1562.104999] 0 pages in swap cache [ 1562.111882] Swap cache stats: add 0, delete 0, find 0/0 [ 1562.117654] Free swap = 0kB [ 1562.127941] Total swap = 0kB [ 1562.135418] 2097051 pages RAM [ 1562.138788] 0 pages HighMem/MovableOnly [ 1562.142898] 363849 pages reserved [ 1562.146348] 0 pages cma reserved [ 1562.159091] Out of memory (oom_kill_allocating_task): Kill process 1371 (syz-executor.4) score 0 or sacrifice child [ 1562.170582] Killed process 3536 (syz-executor.4) total-vm:93384kB, anon-rss:36652kB, file-rss:34632kB, shmem-rss:0kB [ 1562.250438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1562.284934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1562.295246] oom_reaper: reaped process 3536 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1562.315818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1562.386900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1562.409169] Bluetooth: hci3 command 0x040f tx timeout [ 1562.445429] device bridge_slave_1 left promiscuous mode 20:36:33 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, 0x0, 0x0) 20:36:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:36:33 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@private, @private}, 0xc) 20:36:33 executing program 2: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) sendfile(r0, r1, 0x0, 0x80001d00c4d0) creat(&(0x7f0000000240)='./bus\x00', 0x0) [ 1562.468012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1562.506752] device bridge_slave_0 left promiscuous mode [ 1562.544257] bridge0: port 1(bridge_slave_0) entered disabled state [ 1562.615575] device veth1_macvtap left promiscuous mode 20:36:34 executing program 5: r0 = socket(0x2c, 0x3, 0x0) bind$llc(r0, &(0x7f0000000e00)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) [ 1562.642795] device veth0_macvtap left promiscuous mode [ 1562.675416] device veth1_vlan left promiscuous mode [ 1562.703846] device veth0_vlan left promiscuous mode [ 1563.511935] device hsr_slave_1 left promiscuous mode [ 1563.533831] device hsr_slave_0 left promiscuous mode [ 1563.591083] team0 (unregistering): Port device team_slave_1 removed [ 1563.630222] team0 (unregistering): Port device team_slave_0 removed [ 1563.661858] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1563.689864] bond0 (unregistering): Releasing backup interface bond_slave_0 20:36:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:36:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000100)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x3c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x30, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8}, {0x8}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xe60, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0xe50, 0x4, 0x0, 0x1, [{0xf8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x69, 0x1, "056bdf161df0fcc0c7fe2175d33b78cf0f5e2b5cde25dd183895ed8ae379d9fd5b36f193bafc3fe160f51fcd86e788121de8a58b9cbdd0bcb948b214f863c9dbddfc0424204208d70ad4e6e315af13cbff107b2e16fdf71037dd2020626bce9ec7e0ff2039"}, @NL80211_PKTPAT_MASK={0x85, 0x1, "33a012e1fecf5f5af56baf7bf050968d0fa782090f526bbb96e0d8c07759113089ec82c0636577b4b9b0d82a84ce90cf247358676fd974f44b32f990efe9b08bf8933afd0831102dada2ba9d75178385dbdaf3fb8d4f7e3ac205ffe35c6fbe35c739ee84c0b8ba1a3c66d4813cfee123ee21692e14a425a026eb7afd6803968284"}]}, {0x334, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x75, 0x2, "0f47c251d6de336cc2098e2b8ba83bf4c55413d3a5506dc13410e239a0b05d3d8aadba9542961e2799241b1a0d885b7effcae42ecdf1fce7c24c9e53f255f28df510f012acad3392bb1804aac3c528c0535a2e20956c6935f70384201b5bbd45048e33188871d750d888b22ee8c76e994f"}, @NL80211_PKTPAT_MASK={0x41, 0x1, "5fddc096c344a85b7d966d5a7e124a75f2b4925e3e45249ffb0962a7540e83a3a56a1a8362352c5d4aed0a1a464c633606e220fc860b2724764cd78b27"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_PATTERN={0x101, 0x2, "f356c22867e7f4149c601773c6976ea12f6203797382e15dcd16c9283ee875ebbe51e6be71857c9cdaa9862b0b3755644e53c17804528822abf18af82f5feab68d072d263259cedca2f7e0744c2d31ecfc236983d18c4c007b766d946371ff022e929e4d4877272a93d6168708f187d6511a677a841039db0f430712e8ccd3588dbab77e05e706074e5657d1eeed17d0cd759a9223d890a6dbd7d31e593e9cc483662d083a61413bbe2914a2561417a9ab2e6a00c42b7e90da5405a291ee358c714a277bb5fcb4dd86012b9fb06e61b04635a3c812eb54a2419cbb0301fce74ef94d04d2c61ca633ac3f61cbb0d6fb7fe28200114c6d47bfe4042f325e"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_MASK={0x61, 0x1, "792fa1d1dff22622825c53a3908cb0ad01d63ef0aa3fb56f350a63b91d456fdb58c7d5f8ac22b65d732a3554c75e7817fa30abadcbbe2c366d4f8481b39bdb3b8328f325b495383e53e0fc897a180e63fa280724e88973e7be94924be3"}, @NL80211_PKTPAT_MASK={0xf1, 0x1, "4b586785defbabcfd5f8abf613f10466bf8c1babfcb4d977469d946db76c33fc06250ecc17717a5e9d1923c4cc4a3c907f29beae80cc9ba02be7f1fe8f0985b7761042db129e7948d6ce3898aa36d04452851bd1b3da0fda1fe9d15ee031743496c5cfa852a66b7c121cb25c1c9442024ea772d5b07d6394f6ea2397685083f15189f3e1786479b0ce95e33947d2cfba0ab33f3435b65933074dea805620605c7c241c43777f4d1b28fccdd4adb31c55e4dbb4e19b98c83088ba10a92a4d744ee41f8ab96c99e57b8f5ce5730e225ce229997d70b1407cebd5c4ee8658edb7a5e26a3111cc284dd192d73c4326"}, @NL80211_PKTPAT_OFFSET={0x8}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xed, 0x2, "03e66a9ff15f61ad01241440166a3e6cadbcdde321b8a532fae030005a6144c6dfc3dea3cda8a5636f76fd7f2344746122387fdca9b9685ad3ea4654b0c86ea51451b50aaffc4209358f59f101bd9c2405bf886906a57590cfdebfbf6efc5138bfd79654adc21d16ed07b6a4b66eec2bb39badd6afa0fdc24d000aca2ce90add957180037c8c5536b34f29c05cecb6b1f98ceb351d368d8d5224a9fbe3f30039bbcedebec5100a5ed6983c200dc86b87d83220d021fd8079bbd96b2e84f4e9bf1df7c60983dd3484338ab6f7f7249b7821ab3c31ec19d847464033e0f3f0a45cf47607c5309645ac1d"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_PATTERN={0x35, 0x2, "0b06de1406d9a1993ffc78ec85249a3f8eab395974763d5b39f1cd590fa4d1885aece939c28df5ca21e71338e8171d4af5"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_OFFSET={0x8}]}, {0x8d4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x8cf, 0x2, "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"}]}]}]}]}, 0xec4}}, 0x0) 20:36:35 executing program 2: pselect6(0x40, &(0x7f0000000380), &(0x7f00000003c0)={0x1}, 0x0, &(0x7f0000000440)={0x0, 0x3938700}, 0x0) 20:36:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:36:35 executing program 2: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2080) [ 1563.808478] bond0 (unregistering): Released all slaves [ 1564.499118] Bluetooth: hci3 command 0x0419 tx timeout [ 1567.277230] IPVS: ftp: loaded support on port[0] = 21 [ 1567.453850] chnl_net:caif_netlink_parms(): no params data found [ 1567.572388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.578975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.587065] device bridge_slave_0 entered promiscuous mode [ 1567.594535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.601508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.610249] device bridge_slave_1 entered promiscuous mode [ 1567.630981] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1567.640862] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1567.663034] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1567.670329] team0: Port device team_slave_0 added [ 1567.676043] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1567.683688] team0: Port device team_slave_1 added [ 1567.703108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1567.710230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1567.735939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1567.747018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1567.753432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1567.779085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1567.790096] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1567.797610] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1567.835275] device hsr_slave_0 entered promiscuous mode [ 1567.841242] device hsr_slave_1 entered promiscuous mode [ 1567.848070] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1567.855657] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1567.980571] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.986974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1567.993741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1568.000206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1568.041366] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1568.047490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1568.057200] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1568.068107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1568.076916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1568.084543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1568.096168] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1568.103300] 8021q: adding VLAN 0 to HW filter on device team0 [ 1568.116473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1568.125339] bridge0: port 1(bridge_slave_0) entered blocking state [ 1568.131871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1568.159925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1568.167702] bridge0: port 2(bridge_slave_1) entered blocking state [ 1568.174164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1568.184236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1568.193606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1568.209530] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1568.216709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1568.226162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1568.234776] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1568.246021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1568.264669] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1568.273200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1568.284973] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1568.297641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1568.419371] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1568.482856] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1568.494097] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1568.503754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1568.513280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1568.564608] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1568.573416] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1568.581995] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1568.593335] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1568.600496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1568.608101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1568.620056] device veth0_vlan entered promiscuous mode [ 1568.629598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1568.637756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1568.648835] device veth1_vlan entered promiscuous mode [ 1568.656716] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1568.667722] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1568.684515] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1568.695697] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1568.704104] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1568.713246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1568.721585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1568.734626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1568.745405] device veth0_macvtap entered promiscuous mode [ 1568.757738] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1568.770211] device veth1_macvtap entered promiscuous mode [ 1568.777194] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1568.787860] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1568.803606] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1568.814536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1568.833262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1568.842633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1568.856682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1568.866533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1568.880684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1568.892303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1568.905991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1568.921059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1568.932792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1568.946740] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1568.955560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1568.965447] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1568.977293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1568.992359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1569.003799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1569.016105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1569.030864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.042268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1569.057247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.073225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1569.084588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.096973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1569.108934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.122480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1569.132715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.147929] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1569.155191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1569.166709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1569.176131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1569.289130] Bluetooth: hci5 command 0x0409 tx timeout 20:36:41 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7}) 20:36:41 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000540)='syz1\x00') 20:36:41 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @long}, 0x14, &(0x7f00000000c0)={0x0}}, 0x0) 20:36:41 executing program 4: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, 0x0) 20:36:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:36:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:36:41 executing program 2: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000013c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001500)={[{'^{&'}, {'l2tp\x00'}]}) 20:36:41 executing program 5: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000013c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)) [ 1570.222003] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1570.264877] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1570.288923] CPU: 1 PID: 1371 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1570.296750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1570.306456] Call Trace: [ 1570.309056] dump_stack+0x1b2/0x281 [ 1570.312693] dump_header+0x178/0x82f [ 1570.316430] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1570.321574] ? ___ratelimit+0x2cd/0x530 [ 1570.325554] oom_kill_process.cold+0x10/0xa40 [ 1570.330128] out_of_memory+0xe3e/0x1190 [ 1570.334114] ? oom_killer_disable+0x1c0/0x1c0 [ 1570.338632] ? mutex_trylock+0x152/0x1a0 [ 1570.342712] __alloc_pages_nodemask+0x23e1/0x2720 [ 1570.347567] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1570.352410] ? trace_hardirqs_on+0x10/0x10 [ 1570.356651] ? reacquire_held_locks+0xb5/0x3f0 [ 1570.361275] ? kmem_cache_alloc_node+0xe3/0x410 [ 1570.365944] ? cache_grow_begin+0x3f/0x700 [ 1570.370203] cache_grow_begin+0x91/0x700 [ 1570.374297] fallback_alloc+0x207/0x2c0 [ 1570.378435] kmem_cache_alloc_node+0xe3/0x410 [ 1570.382972] copy_process.part.0+0x17d3/0x71c0 [ 1570.387568] ? lock_downgrade+0x740/0x740 [ 1570.391746] ? do_raw_spin_unlock+0x164/0x220 [ 1570.396242] ? _raw_spin_unlock+0x29/0x40 [ 1570.400391] ? do_fault_around+0x35e/0x620 [ 1570.404800] ? __handle_mm_fault+0x80f/0x4620 [ 1570.409300] ? __cleanup_sighand+0x40/0x40 [ 1570.413906] ? __fsnotify_inode_delete+0x20/0x20 [ 1570.418756] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1570.425444] _do_fork+0x184/0xc80 [ 1570.428908] ? fork_idle+0x270/0x270 [ 1570.432627] ? up_read+0x17/0x30 [ 1570.435995] ? __do_page_fault+0x159/0xad0 [ 1570.440235] ? do_syscall_64+0x4c/0x640 [ 1570.444242] ? sys_vfork+0x20/0x20 [ 1570.447784] do_syscall_64+0x1d5/0x640 [ 1570.451677] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1570.456887] RIP: 0033:0x464beb [ 1570.460074] RSP: 002b:00007fffaf2db220 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1570.467785] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000464beb [ 1570.475056] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1570.482340] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000002426400 [ 1570.489640] R10: 00000000024266d0 R11: 0000000000000246 R12: 0000000000000001 [ 1570.497024] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffaf2db310 [ 1570.535045] Mem-Info: [ 1570.537566] active_anon:687513 inactive_anon:710355 isolated_anon:0 [ 1570.537566] active_file:45 inactive_file:9 isolated_file:0 [ 1570.537566] unevictable:13103 dirty:11 writeback:0 unstable:0 [ 1570.537566] slab_reclaimable:16158 slab_unreclaimable:131960 [ 1570.537566] mapped:53983 shmem:37654 pagetables:36869 bounce:0 [ 1570.537566] free:21607 free_pcp:1 free_cma:0 [ 1570.576898] Node 0 active_anon:1248012kB inactive_anon:767672kB active_file:36kB inactive_file:36kB unevictable:47376kB isolated(anon):0kB isolated(file):0kB mapped:164284kB dirty:36kB writeback:0kB shmem:101348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 573440kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1570.607250] Node 1 active_anon:1502040kB inactive_anon:2073748kB active_file:88kB inactive_file:0kB unevictable:5036kB isolated(anon):0kB isolated(file):4kB mapped:51644kB dirty:8kB writeback:0kB shmem:49268kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1570.636429] Node 0 DMA free:11016kB min:204kB low:252kB high:300kB active_anon:2164kB inactive_anon:1844kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:72kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1570.664058] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1570.669213] Node 0 DMA32 free:26420kB min:36200kB low:45248kB high:54296kB active_anon:1245568kB inactive_anon:765828kB active_file:0kB inactive_file:0kB unevictable:47376kB writepending:0kB present:3129332kB managed:2788128kB mlocked:47376kB kernel_stack:12576kB pagetables:58656kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1570.698985] lowmem_reserve[]: 0 0 0 0 0 [ 1570.703082] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1570.729198] lowmem_reserve[]: 0 0 0 0 0 [ 1570.733257] Node 1 Normal free:49072kB min:53696kB low:67120kB high:80544kB active_anon:1501708kB inactive_anon:2073748kB active_file:176kB inactive_file:72kB unevictable:5036kB writepending:0kB present:4194304kB managed:4128256kB mlocked:5036kB kernel_stack:35360kB pagetables:88748kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1570.764123] lowmem_reserve[]: 0 0 0 0 0 [ 1570.769741] Node 0 DMA: 26*4kB (M) 4*8kB (UMH) 2*16kB (UH) 3*32kB (UM) 2*64kB (UM) 1*128kB (M) 5*256kB (UM) 2*512kB (U) 2*1024kB (UM) 3*2048kB (ME) 0*4096kB = 11016kB [ 1570.784918] Node 0 DMA32: 84*4kB (UME) 729*8kB (UME) 1038*16kB (UME) 332*32kB (UME) 2*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33528kB [ 1570.799214] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1570.810122] Node 1 Normal: 631*4kB (UMH) 411*8kB (UMH) 428*16kB (UMH) 422*32kB (UMH) 422*64kB (UMH) 19*128kB (UMH) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 57396kB [ 1570.826496] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1570.835601] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1570.844275] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1570.855163] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1570.864861] 39459 total pagecache pages [ 1570.886531] 0 pages in swap cache [ 1570.896780] Swap cache stats: add 0, delete 0, find 0/0 [ 1570.929417] Free swap = 0kB [ 1570.936788] Total swap = 0kB [ 1570.942858] 2097051 pages RAM [ 1570.947219] 0 pages HighMem/MovableOnly [ 1570.956791] 363849 pages reserved [ 1570.999664] 0 pages cma reserved [ 1571.022884] Out of memory (oom_kill_allocating_task): Kill process 1371 (syz-executor.4) score 0 or sacrifice child [ 1571.038400] Killed process 3640 (syz-executor.4) total-vm:93780kB, anon-rss:8788kB, file-rss:34628kB, shmem-rss:0kB [ 1571.066354] oom_reaper: reaped process 3640 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1571.291400] systemd-udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1571.362210] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1571.368230] CPU: 0 PID: 6227 Comm: systemd-udevd Not tainted 4.14.232-syzkaller #0 [ 1571.376128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1571.385483] Call Trace: [ 1571.388062] dump_stack+0x1b2/0x281 [ 1571.391791] dump_header+0x178/0x82f [ 1571.395512] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1571.400618] ? ___ratelimit+0x2cd/0x530 [ 1571.404588] oom_kill_process.cold+0x10/0xa40 [ 1571.409077] out_of_memory+0xe3e/0x1190 [ 1571.413037] ? oom_killer_disable+0x1c0/0x1c0 [ 1571.417520] ? mutex_trylock+0x152/0x1a0 [ 1571.421624] __alloc_pages_nodemask+0x23e1/0x2720 [ 1571.426465] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1571.431304] ? trace_hardirqs_on+0x10/0x10 [ 1571.435581] ? kmem_cache_alloc+0x1e5/0x3c0 [ 1571.439916] ? cache_grow_begin+0x3f/0x700 [ 1571.444269] cache_grow_begin+0x91/0x700 [ 1571.448353] fallback_alloc+0x207/0x2c0 [ 1571.452430] kmem_cache_alloc+0x1e5/0x3c0 [ 1571.456604] getname_flags+0xc8/0x550 [ 1571.460421] do_sys_open+0x1ce/0x410 [ 1571.464185] ? filp_open+0x60/0x60 [ 1571.467731] ? do_syscall_64+0x4c/0x640 [ 1571.471709] ? do_sys_open+0x410/0x410 [ 1571.475781] do_syscall_64+0x1d5/0x640 [ 1571.479663] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1571.484926] RIP: 0033:0x7f30e7ef06f0 [ 1571.488678] RSP: 002b:00007ffcb4ce8218 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1571.496391] RAX: ffffffffffffffda RBX: 000055bb9e1532e0 RCX: 00007f30e7ef06f0 [ 1571.503676] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 000055bb9d443f4c [ 1571.511822] RBP: 0000000000000008 R08: 0000000000000008 R09: 0000000000000001 [ 1571.519090] R10: 0000000000080000 R11: 0000000000000246 R12: 000055bb9d44368a [ 1571.526365] R13: 0000000000000001 R14: 0000000000000000 R15: 000055bb9e13fca0 [ 1571.534503] Bluetooth: hci5 command 0x041b tx timeout [ 1571.540477] Mem-Info: [ 1571.542906] active_anon:681254 inactive_anon:710355 isolated_anon:0 [ 1571.542906] active_file:58 inactive_file:28 isolated_file:0 [ 1571.542906] unevictable:16385 dirty:9 writeback:0 unstable:0 [ 1571.542906] slab_reclaimable:16149 slab_unreclaimable:131636 [ 1571.542906] mapped:53976 shmem:37654 pagetables:36866 bounce:0 [ 1571.542906] free:25004 free_pcp:46 free_cma:0 [ 1571.586928] Node 0 active_anon:1240460kB inactive_anon:767672kB active_file:4kB inactive_file:4kB unevictable:47376kB isolated(anon):0kB isolated(file):0kB mapped:164256kB dirty:0kB writeback:0kB shmem:101348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 573440kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1571.618417] Node 1 active_anon:1484556kB inactive_anon:2073748kB active_file:128kB inactive_file:0kB unevictable:18564kB isolated(anon):0kB isolated(file):0kB mapped:51748kB dirty:36kB writeback:0kB shmem:49268kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1571.647024] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:2108kB inactive_anon:1844kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:72kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1571.683312] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1571.688471] Node 0 DMA32 free:34688kB min:36200kB low:45248kB high:54296kB active_anon:1238352kB inactive_anon:765828kB active_file:4kB inactive_file:4kB unevictable:47376kB writepending:0kB present:3129332kB managed:2788128kB mlocked:47376kB kernel_stack:12544kB pagetables:58752kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1571.722929] lowmem_reserve[]: 0 0 0 0 0 [ 1571.726952] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1571.764526] lowmem_reserve[]: 0 0 0 0 0 [ 1571.768607] Node 1 Normal free:53468kB min:53696kB low:67120kB high:80544kB active_anon:1484576kB inactive_anon:2073748kB active_file:16kB inactive_file:80kB unevictable:19104kB writepending:0kB present:4194304kB managed:4128256kB mlocked:19104kB kernel_stack:35296kB pagetables:88652kB bounce:0kB free_pcp:328kB local_pcp:268kB free_cma:0kB [ 1571.812604] lowmem_reserve[]: 0 0 0 0 0 [ 1571.816650] Node 0 DMA: 40*4kB (M) 4*8kB (UMH) 2*16kB (UH) 3*32kB (UM) 2*64kB (UM) 1*128kB (M) 5*256kB (UM) 2*512kB (U) 2*1024kB (UM) 3*2048kB (ME) 0*4096kB = 11072kB [ 1571.842297] Node 0 DMA32: 88*4kB (UME) 860*8kB (UME) 1042*16kB (UME) 333*32kB (UME) 2*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 34688kB [ 1571.866014] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1571.885563] Node 1 Normal: 173*4kB (UMH) 81*8kB (UH) 188*16kB (UH) 461*32kB (UMH) 471*64kB (UMH) 19*128kB (UMH) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 53468kB [ 1571.906118] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1571.915069] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1571.928073] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1571.937450] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1571.950662] 39029 total pagecache pages [ 1571.954663] 0 pages in swap cache [ 1571.958133] Swap cache stats: add 0, delete 0, find 0/0 [ 1571.965701] Free swap = 0kB [ 1571.968747] Total swap = 0kB [ 1571.974014] 2097051 pages RAM [ 1571.977140] 0 pages HighMem/MovableOnly [ 1571.983345] 363849 pages reserved [ 1571.986811] 0 pages cma reserved [ 1571.992547] Out of memory (oom_kill_allocating_task): Kill process 6227 (systemd-udevd) score 0 or sacrifice child [ 1572.003157] Killed process 6227 (systemd-udevd) total-vm:43784kB, anon-rss:1172kB, file-rss:0kB, shmem-rss:0kB [ 1572.017000] syz-executor.5 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 1572.053838] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1572.059963] CPU: 0 PID: 6250 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1572.067854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1572.077324] Call Trace: [ 1572.079907] dump_stack+0x1b2/0x281 [ 1572.083561] dump_header+0x178/0x82f [ 1572.087276] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1572.092377] ? ___ratelimit+0x2cd/0x530 [ 1572.096518] oom_kill_process.cold+0x10/0xa40 [ 1572.101011] out_of_memory+0xe3e/0x1190 [ 1572.105060] ? oom_killer_disable+0x1c0/0x1c0 [ 1572.109666] ? mutex_trylock+0x152/0x1a0 [ 1572.113742] __alloc_pages_nodemask+0x23e1/0x2720 [ 1572.118624] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1572.123465] ? fs_reclaim_release+0xd0/0x110 [ 1572.127882] ? kmem_cache_alloc_node+0x38b/0x410 [ 1572.132687] copy_process.part.0+0x265/0x71c0 [ 1572.137193] ? lock_downgrade+0x740/0x740 [ 1572.141350] ? do_raw_spin_unlock+0x164/0x220 [ 1572.145841] ? _raw_spin_unlock+0x29/0x40 [ 1572.149989] ? do_fault_around+0x35e/0x620 [ 1572.154237] ? __handle_mm_fault+0x80f/0x4620 [ 1572.158728] ? __cleanup_sighand+0x40/0x40 [ 1572.165605] _do_fork+0x184/0xc80 [ 1572.169064] ? fork_idle+0x270/0x270 [ 1572.172771] ? up_read+0x17/0x30 [ 1572.176150] ? __do_page_fault+0x159/0xad0 [ 1572.180399] ? do_syscall_64+0x4c/0x640 [ 1572.184366] ? sys_vfork+0x20/0x20 [ 1572.187986] do_syscall_64+0x1d5/0x640 [ 1572.191882] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1572.197064] RIP: 0033:0x467a21 [ 1572.200238] RSP: 002b:00007fff8e36ebb8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1572.207956] RAX: ffffffffffffffda RBX: 00007ff92688e700 RCX: 0000000000467a21 [ 1572.215231] RDX: 00007ff92688e9d0 RSI: 00007ff92688e2f0 RDI: 00000000003d0f00 [ 1572.222629] RBP: 00007fff8e36edf0 R08: 00007ff92688e700 R09: 00007ff92688e700 [ 1572.229898] R10: 00007ff92688e9d0 R11: 0000000000000206 R12: 00007fff8e36ec6e [ 1572.237283] R13: 00007fff8e36ec6f R14: 00007ff92688e300 R15: 0000000000022000 [ 1572.248129] Mem-Info: [ 1572.251245] active_anon:681259 inactive_anon:710355 isolated_anon:0 [ 1572.251245] active_file:14 inactive_file:11 isolated_file:0 [ 1572.251245] unevictable:16621 dirty:0 writeback:0 unstable:0 [ 1572.251245] slab_reclaimable:16149 slab_unreclaimable:131643 [ 1572.251245] mapped:53977 shmem:37654 pagetables:36869 bounce:0 [ 1572.251245] free:24829 free_pcp:30 free_cma:0 [ 1572.289813] Node 0 active_anon:1240460kB inactive_anon:767672kB active_file:8kB inactive_file:0kB unevictable:47376kB isolated(anon):0kB isolated(file):0kB mapped:164256kB dirty:0kB writeback:0kB shmem:101348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 573440kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1572.320682] Node 1 active_anon:1484576kB inactive_anon:2073748kB active_file:0kB inactive_file:96kB unevictable:19108kB isolated(anon):0kB isolated(file):0kB mapped:51652kB dirty:0kB writeback:0kB shmem:49268kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1572.349697] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:2108kB inactive_anon:1844kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:72kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1572.377961] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1572.383045] Node 0 DMA32 free:34632kB min:36200kB low:45248kB high:54296kB active_anon:1238352kB inactive_anon:765828kB active_file:12kB inactive_file:0kB unevictable:47376kB writepending:0kB present:3129332kB managed:2788128kB mlocked:47376kB kernel_stack:12544kB pagetables:58752kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1572.413067] lowmem_reserve[]: 0 0 0 0 0 [ 1572.417161] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1572.456613] lowmem_reserve[]: 0 0 0 0 0 [ 1572.461330] Node 1 Normal free:53612kB min:53696kB low:67120kB high:80544kB active_anon:1484576kB inactive_anon:2073748kB active_file:100kB inactive_file:0kB unevictable:19108kB writepending:0kB present:4194304kB managed:4128256kB mlocked:19108kB kernel_stack:35296kB pagetables:88652kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1572.496315] lowmem_reserve[]: 0 0 0 0 0 [ 1572.508285] Node 0 DMA: 40*4kB (M) 4*8kB (UMH) 2*16kB (UH) 3*32kB (UM) 2*64kB (UM) 1*128kB (M) 5*256kB (UM) 2*512kB (U) 2*1024kB (UM) 3*2048kB (ME) 0*4096kB = 11072kB [ 1572.531728] Node 0 DMA32: 88*4kB (UME) 859*8kB (UME) 1042*16kB (UME) 333*32kB (UME) 2*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 34680kB [ 1572.555095] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1572.565918] Node 1 Normal: 182*4kB (UMH) 88*8kB (UMH) 189*16kB (UMH) 464*32kB (UMH) 471*64kB (UMH) 19*128kB (UMH) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 53672kB [ 1572.588931] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1572.597847] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1572.613448] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1572.625587] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1572.638446] 39029 total pagecache pages [ 1572.644887] 0 pages in swap cache [ 1572.648362] Swap cache stats: add 0, delete 0, find 0/0 [ 1572.657974] Free swap = 0kB [ 1572.666739] Total swap = 0kB [ 1572.674447] 2097051 pages RAM [ 1572.677562] 0 pages HighMem/MovableOnly [ 1572.685968] 363849 pages reserved [ 1572.695883] 0 pages cma reserved [ 1572.703689] Out of memory (oom_kill_allocating_task): Kill process 6250 (syz-executor.5) score 0 or sacrifice child [ 1572.718586] Killed process 6250 (syz-executor.5) total-vm:93252kB, anon-rss:112kB, file-rss:34812kB, shmem-rss:0kB [ 1572.739196] oom_reaper: reaped process 6227 (systemd-udevd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1572.754556] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1572.779463] systemd-journal cpuset=/ mems_allowed=0-1 [ 1572.785276] CPU: 1 PID: 5588 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1572.793192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1572.802553] Call Trace: [ 1572.805146] dump_stack+0x1b2/0x281 [ 1572.808795] dump_header+0x178/0x82f [ 1572.812510] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1572.817647] ? ___ratelimit+0x2cd/0x530 [ 1572.821718] oom_kill_process.cold+0x10/0xa40 [ 1572.826483] out_of_memory+0xe3e/0x1190 [ 1572.830506] ? oom_killer_disable+0x1c0/0x1c0 [ 1572.835012] ? mutex_trylock+0x152/0x1a0 [ 1572.839094] __alloc_pages_nodemask+0x23e1/0x2720 [ 1572.843964] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1572.848831] alloc_pages_current+0x155/0x260 [ 1572.853247] filemap_fault+0x11a1/0x1ad0 [ 1572.857328] ext4_filemap_fault+0x84/0xb0 [ 1572.861518] __do_fault+0xfa/0x380 [ 1572.865079] __handle_mm_fault+0x2497/0x4620 [ 1572.869496] ? vm_insert_page+0x7c0/0x7c0 [ 1572.873672] ? mark_held_locks+0xa6/0xf0 [ 1572.877863] handle_mm_fault+0x455/0x9c0 [ 1572.881923] __do_page_fault+0x549/0xad0 [ 1572.886014] ? spurious_fault+0x640/0x640 [ 1572.890168] ? do_page_fault+0x60/0x500 [ 1572.894169] ? page_fault+0x2f/0x50 [ 1572.897786] page_fault+0x45/0x50 [ 1572.901255] RIP: 0001:0x1 [ 1572.904005] RSP: 28b29310:00007ffdc7314d00 EFLAGS: 7ffdc7314b10 [ 1572.925539] Mem-Info: [ 1572.946213] active_anon:681222 inactive_anon:710355 isolated_anon:0 [ 1572.946213] active_file:1 inactive_file:14 isolated_file:0 [ 1572.946213] unevictable:16621 dirty:0 writeback:0 unstable:0 [ 1572.946213] slab_reclaimable:16149 slab_unreclaimable:131646 [ 1572.946213] mapped:53977 shmem:37654 pagetables:36773 bounce:0 [ 1572.946213] free:24874 free_pcp:0 free_cma:0 [ 1572.992865] Node 0 active_anon:1240456kB inactive_anon:767612kB active_file:12kB inactive_file:0kB unevictable:47376kB isolated(anon):0kB isolated(file):0kB mapped:164256kB dirty:0kB writeback:0kB shmem:101348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 573440kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1573.043199] Node 1 active_anon:1484360kB inactive_anon:2073748kB active_file:148kB inactive_file:44kB unevictable:19108kB isolated(anon):0kB isolated(file):0kB mapped:51652kB dirty:0kB writeback:0kB shmem:49268kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1573.086775] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:2108kB inactive_anon:1844kB active_file:8kB inactive_file:120kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:72kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1573.183470] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1573.200508] Node 0 DMA32 free:35128kB min:36200kB low:45248kB high:54296kB active_anon:1238324kB inactive_anon:765764kB active_file:4kB inactive_file:4kB unevictable:47376kB writepending:0kB present:3129332kB managed:2788128kB mlocked:47376kB kernel_stack:12448kB pagetables:58552kB bounce:0kB free_pcp:92kB local_pcp:0kB free_cma:0kB [ 1573.269090] lowmem_reserve[]: 0 0 0 0 0 [ 1573.273125] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1573.353282] lowmem_reserve[]: 0 0 0 0 0 [ 1573.357592] Node 1 Normal free:53304kB min:53696kB low:67120kB high:80544kB active_anon:1484360kB inactive_anon:2073748kB active_file:116kB inactive_file:632kB unevictable:19108kB writepending:0kB present:4194304kB managed:4128256kB mlocked:19108kB kernel_stack:35232kB pagetables:88564kB bounce:0kB free_pcp:868kB local_pcp:500kB free_cma:0kB [ 1573.433204] lowmem_reserve[]: 0 0 0 0 0 [ 1573.437266] Node 0 DMA: 6*4kB (UM) 2*8kB (UH) 1*16kB (H) 4*32kB (UM) 2*64kB (UM) 2*128kB (U) 5*256kB (UM) 2*512kB (U) 2*1024kB (UM) 3*2048kB (ME) 0*4096kB = 11064kB [ 1573.509080] Node 0 DMA32: 131*4kB (UME) 884*8kB (UME) 1044*16kB (UME) 336*32kB (UME) 2*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35180kB [ 1573.553112] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1573.582848] Node 1 Normal: 188*4kB (UH) 87*8kB (UMH) 189*16kB (UMH) 452*32kB (UMH) 471*64kB (UMH) 19*128kB (UMH) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 53304kB [ 1573.609726] Bluetooth: hci5 command 0x040f tx timeout [ 1573.642740] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1573.670650] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1573.688355] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1573.728242] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1573.766129] 38240 total pagecache pages [ 1573.771575] 0 pages in swap cache [ 1573.776750] Swap cache stats: add 0, delete 0, find 0/0 [ 1573.785218] Free swap = 0kB [ 1573.791049] Total swap = 0kB [ 1573.809100] 2097051 pages RAM [ 1573.812675] 0 pages HighMem/MovableOnly [ 1573.816642] 363849 pages reserved [ 1573.829624] 0 pages cma reserved [ 1573.833048] Out of memory (oom_kill_allocating_task): Kill process 5588 (systemd-journal) score 0 or sacrifice child [ 1573.866926] Killed process 5588 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1616kB [ 1573.902726] oom_reaper: reaped process 6250 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1573.921162] oom_reaper: reaped process 5588 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1616kB 20:36:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8993, &(0x7f0000000040)={'lo\x00', @ifru_data=0x0}) 20:36:45 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000a40)={0x2, 0x0, @multicast2}, 0x10) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) [ 1573.991691] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1574.022596] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. 20:36:45 executing program 5: socketpair(0x3, 0x0, 0x102, &(0x7f0000000300)) 20:36:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:36:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) [ 1574.093936] systemd[1]: Stopped Journal Service. [ 1574.146586] systemd[1]: Starting Journal Service... [ 1574.896086] oom_reaper: reaped process 6251 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1574.934560] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1574.947525] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1574.952454] CPU: 1 PID: 7963 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1574.959908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1574.969250] Call Trace: [ 1574.971842] dump_stack+0x1b2/0x281 [ 1574.975460] dump_header+0x178/0x82f [ 1574.979163] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1574.984252] ? ___ratelimit+0x2cd/0x530 [ 1574.988209] oom_kill_process.cold+0x10/0xa40 [ 1574.992702] out_of_memory+0xe3e/0x1190 [ 1574.996676] ? oom_killer_disable+0x1c0/0x1c0 [ 1575.001799] ? mutex_trylock+0x152/0x1a0 [ 1575.005857] __alloc_pages_nodemask+0x23e1/0x2720 [ 1575.010704] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1575.015670] alloc_pages_current+0x155/0x260 [ 1575.020086] filemap_fault+0x11a1/0x1ad0 [ 1575.024237] ext4_filemap_fault+0x84/0xb0 [ 1575.028377] __do_fault+0xfa/0x380 [ 1575.032356] __handle_mm_fault+0x2497/0x4620 [ 1575.036790] ? vm_insert_page+0x7c0/0x7c0 [ 1575.041465] ? lock_downgrade+0x740/0x740 [ 1575.045622] ? mark_held_locks+0xa6/0xf0 [ 1575.049715] handle_mm_fault+0x455/0x9c0 [ 1575.053785] __do_page_fault+0x549/0xad0 [ 1575.057861] ? spurious_fault+0x640/0x640 [ 1575.062111] ? do_page_fault+0x60/0x500 [ 1575.066078] ? page_fault+0x2f/0x50 [ 1575.069710] page_fault+0x45/0x50 [ 1575.073244] RIP: 0000:0x947a5c [ 1575.076491] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1575.081788] Mem-Info: [ 1575.089759] active_anon:685787 inactive_anon:710354 isolated_anon:0 [ 1575.089759] active_file:42 inactive_file:6 isolated_file:0 [ 1575.089759] unevictable:14270 dirty:0 writeback:0 unstable:0 [ 1575.089759] slab_reclaimable:16140 slab_unreclaimable:131370 [ 1575.089759] mapped:53574 shmem:37653 pagetables:36826 bounce:0 [ 1575.089759] free:22782 free_pcp:236 free_cma:0 [ 1575.129781] Node 0 active_anon:1243304kB inactive_anon:767672kB active_file:4kB inactive_file:20kB unevictable:45932kB isolated(anon):0kB isolated(file):0kB mapped:162876kB dirty:0kB writeback:0kB shmem:101348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 573440kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1575.165375] Node 1 active_anon:1492444kB inactive_anon:2073744kB active_file:0kB inactive_file:0kB unevictable:12048kB isolated(anon):0kB isolated(file):28kB mapped:51620kB dirty:0kB writeback:0kB shmem:49264kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1575.193738] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2164kB inactive_anon:1844kB active_file:0kB inactive_file:20kB unevictable:124kB writepending:0kB present:15992kB managed:15908kB mlocked:124kB kernel_stack:0kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1575.229279] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1575.234366] Node 0 DMA32 free:33484kB min:36200kB low:45248kB high:54296kB active_anon:1240628kB inactive_anon:765828kB active_file:4kB inactive_file:0kB unevictable:45808kB writepending:0kB present:3129332kB managed:2788128kB mlocked:45808kB kernel_stack:12544kB pagetables:58780kB bounce:0kB free_pcp:732kB local_pcp:0kB free_cma:0kB [ 1575.269144] lowmem_reserve[]: 0 0 0 0 0 [ 1575.273622] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1575.329381] lowmem_reserve[]: 0 0 0 0 0 [ 1575.333868] Node 1 Normal free:54008kB min:53696kB low:67120kB high:80544kB active_anon:1484876kB inactive_anon:2073744kB active_file:1576kB inactive_file:1972kB unevictable:15684kB writepending:0kB present:4194304kB managed:4128256kB mlocked:15684kB kernel_stack:35264kB pagetables:88428kB bounce:0kB free_pcp:428kB local_pcp:188kB free_cma:0kB [ 1575.374727] lowmem_reserve[]: 0 0 0 0 0 [ 1575.380755] Node 0 DMA: 11*4kB (UM) 2*8kB (MH) 2*16kB (UH) 0*32kB 2*64kB (UM) 3*128kB (UM) 5*256kB (UM) 2*512kB (U) 2*1024kB (UM) 3*2048kB (ME) 0*4096kB = 11100kB [ 1575.396461] Node 0 DMA32: 99*4kB (UME) 884*8kB (UME) 1042*16kB (UME) 318*32kB (UME) 2*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 34444kB [ 1575.419801] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1575.433299] Node 1 Normal: 315*4kB (UMH) 80*8kB (UMH) 310*16kB (UMH) 399*32kB (UMH) 478*64kB (UMH) 19*128kB (UMH) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 54444kB [ 1575.469111] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1575.478620] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1575.488552] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1575.498716] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1575.508432] 39671 total pagecache pages [ 1575.513050] 0 pages in swap cache [ 1575.517409] Swap cache stats: add 0, delete 0, find 0/0 [ 1575.523370] Free swap = 0kB [ 1575.527270] Total swap = 0kB [ 1575.530803] 2097051 pages RAM [ 1575.534626] 0 pages HighMem/MovableOnly [ 1575.539683] 363849 pages reserved [ 1575.543671] 0 pages cma reserved [ 1575.547850] Out of memory (oom_kill_allocating_task): Kill process 7963 (syz-fuzzer) score 0 or sacrifice child [ 1575.558850] Killed process 5984 (syz-executor.3) total-vm:84924kB, anon-rss:68kB, file-rss:436kB, shmem-rss:0kB [ 1576.164451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1576.184552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1576.220489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1576.227459] batman_adv: batadv0: Removing interface: batadv_slave_1 20:36:46 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14, 0x3837143dedc9d888) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x61) accept$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) syz_open_procfs$namespace(0x0, &(0x7f0000001a00)='ns/cgroup\x00') syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000013c0)='./file0\x00', 0x2, 0x3, &(0x7f0000001680)=[{0x0}, {&(0x7f0000001b40), 0x0, 0x5}, {&(0x7f0000001600)="74614a2236239ab8ef9a7045c24e62be97f93144bfd5545c6b73f3a3dd05a75c9a89c723f1d91a0d4a9f449b73f55ffaf7a43cb8d50d8909f9d7cb06f33881d7f4e2d466393479650ed28a32c938891ad1284bbc70e7", 0x56, 0x100}], 0x8, &(0x7f0000001500)={[{'&[/\xcb'}, {'ns/cgroup\x00'}, {'\xfd\xc3\xdb\x89\x1c\x1c\xc0\bw\xd0@\xde\xbb\xf2\xec\xb7l\xa0\tg\xf81\xb6VrM\x89\xfd\xc8~|L\xf2^\x19\xd13\xb4\xc8i\x00\x00i\xc1Y0\x1c\x80S\xbd\xe77\xcd\x15\xbb\xf1IA\xed\xf41\xd3\xf8~\xef\x9fi{\x1e\xebg\x99\xf4J\xf4'}, {'l2tp\x00'}, {}]}) 20:36:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:36:47 executing program 5: r0 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x0) 20:36:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x3c3c10, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:36:48 executing program 3: socketpair(0x18, 0x0, 0xc0a, &(0x7f0000000000)) 20:36:48 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1e5801) [ 1577.075351] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1577.094668] device bridge_slave_1 left promiscuous mode [ 1577.111361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1577.147292] device bridge_slave_0 left promiscuous mode [ 1577.153087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1577.174284] MINIX-fs: unable to read superblock [ 1577.179759] device veth1_macvtap left promiscuous mode [ 1577.196212] device veth0_macvtap left promiscuous mode [ 1577.202627] device veth1_vlan left promiscuous mode [ 1577.221593] device veth0_vlan left promiscuous mode [ 1577.619004] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1577.714766] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1577.752907] CPU: 0 PID: 7963 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1577.760396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1577.769782] Call Trace: [ 1577.772377] dump_stack+0x1b2/0x281 [ 1577.776182] dump_header+0x178/0x82f [ 1577.779900] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1577.785005] ? ___ratelimit+0x2cd/0x530 [ 1577.788992] oom_kill_process.cold+0x10/0xa40 [ 1577.793497] out_of_memory+0xe3e/0x1190 [ 1577.797475] ? oom_killer_disable+0x1c0/0x1c0 [ 1577.801965] ? mutex_trylock+0x152/0x1a0 [ 1577.806022] __alloc_pages_nodemask+0x23e1/0x2720 [ 1577.810864] ? __schedule+0x893/0x1de0 [ 1577.814750] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1577.819584] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1577.824337] ? retint_kernel+0x2d/0x2d [ 1577.828237] alloc_pages_current+0x155/0x260 [ 1577.832763] filemap_fault+0x11a1/0x1ad0 [ 1577.836834] ext4_filemap_fault+0x84/0xb0 [ 1577.842467] __do_fault+0xfa/0x380 [ 1577.846010] __handle_mm_fault+0x2497/0x4620 [ 1577.850414] ? vm_insert_page+0x7c0/0x7c0 [ 1577.854555] ? mark_held_locks+0xa6/0xf0 [ 1577.858614] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1577.863728] ? mark_held_locks+0xa6/0xf0 [ 1577.867786] handle_mm_fault+0x455/0x9c0 [ 1577.871886] __do_page_fault+0x549/0xad0 [ 1577.875951] ? spurious_fault+0x640/0x640 [ 1577.880095] ? do_page_fault+0x60/0x500 [ 1577.884061] ? page_fault+0x2f/0x50 [ 1577.887685] page_fault+0x45/0x50 [ 1577.891131] RIP: 0000:0x947a5c [ 1577.894321] RSP: 26266180:000000c00003df28 EFLAGS: 0043b6a0 [ 1577.907096] Mem-Info: [ 1577.944688] active_anon:686511 inactive_anon:717405 isolated_anon:0 [ 1577.944688] active_file:108 inactive_file:77 isolated_file:33 [ 1577.944688] unevictable:14774 dirty:42 writeback:0 unstable:0 [ 1577.944688] slab_reclaimable:16129 slab_unreclaimable:131067 [ 1577.944688] mapped:44686 shmem:37654 pagetables:36875 bounce:0 [ 1577.944688] free:22912 free_pcp:219 free_cma:0 [ 1578.016950] Node 0 active_anon:1253284kB inactive_anon:768876kB active_file:12kB inactive_file:16kB unevictable:48020kB isolated(anon):0kB isolated(file):0kB mapped:155468kB dirty:8kB writeback:4kB shmem:101348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 573440kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1578.232360] Node 1 active_anon:1485208kB inactive_anon:2100792kB active_file:56kB inactive_file:244kB unevictable:17460kB isolated(anon):0kB isolated(file):36kB mapped:24252kB dirty:0kB writeback:0kB shmem:49256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1578.261205] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:2188kB inactive_anon:1844kB active_file:4kB inactive_file:0kB unevictable:100kB writepending:0kB present:15992kB managed:15908kB mlocked:100kB kernel_stack:0kB pagetables:116kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1578.291699] device hsr_slave_1 left promiscuous mode [ 1578.303051] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1578.308205] device hsr_slave_0 left promiscuous mode [ 1578.319626] Node 0 DMA32 free:35692kB min:36200kB low:45248kB high:54296kB active_anon:1243032kB inactive_anon:767032kB active_file:20kB inactive_file:136kB unevictable:47920kB writepending:12kB present:3129332kB managed:2788128kB mlocked:47920kB kernel_stack:12832kB pagetables:59388kB bounce:0kB free_pcp:136kB local_pcp:4kB free_cma:0kB [ 1578.350538] team0 (unregistering): Port device team_slave_1 removed [ 1578.400847] team0 (unregistering): Port device team_slave_0 removed [ 1578.407260] lowmem_reserve[]: 0 0 0 0 0 [ 1578.418581] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1578.448864] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1578.451562] lowmem_reserve[]: 0 0 0 0 0 [ 1578.460266] Node 1 Normal free:53544kB min:53696kB low:67120kB high:80544kB active_anon:1485092kB inactive_anon:2100792kB active_file:240kB inactive_file:128kB unevictable:20936kB writepending:52kB present:4194304kB managed:4128256kB mlocked:20936kB kernel_stack:35360kB pagetables:88460kB bounce:0kB free_pcp:264kB local_pcp:240kB free_cma:0kB [ 1578.490946] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1578.498444] lowmem_reserve[]: 0 0 0 0 0 [ 1578.502508] Node 0 DMA: 3*4kB (UME) 4*8kB (UEH) 6*16kB (UMEH) 3*32kB (UME) 1*64kB (E) 4*128kB (UME) 6*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11052kB [ 1578.521734] Node 0 DMA32: 437*4kB (UM) 1278*8kB (UME) 1016*16kB (UME) 252*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36292kB [ 1578.547302] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1578.558570] Node 1 Normal: 367*4kB (UMH) 649*8kB (UMH) 1451*16kB (UMH) 326*32kB (UH) 213*64kB (UMH) 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54068kB [ 1578.574768] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1578.594977] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1578.617230] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1578.642807] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1578.659011] 39040 total pagecache pages [ 1578.682604] 0 pages in swap cache [ 1578.686683] Swap cache stats: add 0, delete 0, find 0/0 [ 1578.706335] Free swap = 0kB [ 1578.716512] Total swap = 0kB [ 1578.723155] bond0 (unregistering): Released all slaves [ 1578.727360] 2097051 pages RAM [ 1578.748364] 0 pages HighMem/MovableOnly [ 1578.753248] 363849 pages reserved [ 1578.757275] 0 pages cma reserved [ 1578.776035] Out of memory (oom_kill_allocating_task): Kill process 7963 (syz-fuzzer) score 0 or sacrifice child [ 1578.788730] Killed process 5646 (syz-executor.0) total-vm:84924kB, anon-rss:64kB, file-rss:280kB, shmem-rss:0kB [ 1578.845394] oom_reaper: reaped process 5646 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1578.905009] oom_reaper: reaped process 5647 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 20:36:50 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, 0x0, &(0x7f0000000080)) 20:36:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000002c0)=""/2, 0x200002c2}], 0x3}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) 20:36:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x40) 20:36:50 executing program 4: syz_open_dev$cec(&(0x7f0000000100), 0x3, 0x2) syz_open_dev$cec(&(0x7f0000000000), 0x3, 0x2) [ 1579.544217] systemd-journald[6262]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. 20:36:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4020940d, &(0x7f0000000080)={'ip6tnl0\x00'}) 20:36:51 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:36:51 executing program 2: r0 = socket(0x2c, 0x3, 0x0) connect$llc(r0, 0x0, 0x0) 20:36:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) mlockall(0x1) syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x28d4022, &(0x7f00000002c0)={[{@journal_async_commit}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000029c0)) fork() fork() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000200)='net/kcm\x00') socket$alg(0x26, 0x5, 0x0) 20:36:51 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) connect$inet(r0, &(0x7f0000002940)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) [ 1580.668710] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1581.007952] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 1581.026004] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1581.031273] CPU: 1 PID: 6337 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1581.039160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1581.049236] Call Trace: [ 1581.051877] dump_stack+0x1b2/0x281 [ 1581.055523] dump_header+0x178/0x82f [ 1581.059365] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1581.064595] ? ___ratelimit+0x2cd/0x530 [ 1581.068579] oom_kill_process.cold+0x10/0xa40 [ 1581.073090] out_of_memory+0xe3e/0x1190 [ 1581.077078] ? oom_killer_disable+0x1c0/0x1c0 [ 1581.082023] ? mutex_trylock+0x152/0x1a0 [ 1581.086124] __alloc_pages_nodemask+0x23e1/0x2720 [ 1581.091080] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1581.095955] alloc_pages_current+0x155/0x260 [ 1581.100477] filemap_fault+0x11a1/0x1ad0 [ 1581.105368] ext4_filemap_fault+0x84/0xb0 [ 1581.110157] __do_fault+0xfa/0x380 [ 1581.114236] __handle_mm_fault+0x2497/0x4620 [ 1581.119034] ? lock_downgrade+0x740/0x740 [ 1581.123195] ? vm_insert_page+0x7c0/0x7c0 [ 1581.127435] ? do_raw_spin_unlock+0x164/0x220 [ 1581.131950] ? mark_held_locks+0xa6/0xf0 [ 1581.136031] handle_mm_fault+0x455/0x9c0 [ 1581.140227] __get_user_pages+0x4e9/0x1270 [ 1581.144470] ? follow_page_mask+0x18a0/0x18a0 [ 1581.148991] populate_vma_page_range+0x17b/0x210 [ 1581.155311] __mm_populate+0x195/0x2c0 [ 1581.159193] ? populate_vma_page_range+0x210/0x210 [ 1581.164210] ? security_capable+0x88/0xb0 [ 1581.168382] SyS_mlockall+0x3ff/0x520 [ 1581.172280] ? SyS_munlock+0xf0/0xf0 [ 1581.176014] do_syscall_64+0x1d5/0x640 [ 1581.179930] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1581.185156] RIP: 0033:0x4665f9 [ 1581.188529] RSP: 002b:00007f0679f12188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1581.196330] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1581.203607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1581.211067] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1581.218339] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1581.230919] R13: 00007ffe83d6ee1f R14: 00007f0679f12300 R15: 0000000000022000 [ 1581.249269] Mem-Info: [ 1581.253225] active_anon:677471 inactive_anon:726525 isolated_anon:0 [ 1581.253225] active_file:110 inactive_file:100 isolated_file:5 [ 1581.253225] unevictable:21848 dirty:3 writeback:0 unstable:0 [ 1581.253225] slab_reclaimable:16152 slab_unreclaimable:130592 [ 1581.253225] mapped:38801 shmem:39692 pagetables:36809 bounce:0 [ 1581.253225] free:25502 free_pcp:72 free_cma:0 [ 1581.316201] Node 0 active_anon:1228440kB inactive_anon:780268kB active_file:156kB inactive_file:216kB unevictable:66744kB isolated(anon):0kB isolated(file):0kB mapped:145424kB dirty:12kB writeback:0kB shmem:103768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 573440kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1581.345798] Node 1 active_anon:1481444kB inactive_anon:2125832kB active_file:208kB inactive_file:388kB unevictable:20648kB isolated(anon):0kB isolated(file):0kB mapped:10180kB dirty:0kB writeback:0kB shmem:55000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1581.385869] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2188kB inactive_anon:1884kB active_file:16kB inactive_file:0kB unevictable:340kB writepending:0kB present:15992kB managed:15908kB mlocked:340kB kernel_stack:0kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1581.413226] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1581.418295] Node 0 DMA32 free:36580kB min:36200kB low:45248kB high:54296kB active_anon:1226252kB inactive_anon:778384kB active_file:152kB inactive_file:48kB unevictable:66404kB writepending:12kB present:3129332kB managed:2788128kB mlocked:66404kB kernel_stack:12544kB pagetables:59176kB bounce:0kB free_pcp:36kB local_pcp:0kB free_cma:0kB [ 1581.448316] lowmem_reserve[]: 0 0 0 0 0 [ 1581.452400] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1581.478319] lowmem_reserve[]: 0 0 0 0 0 [ 1581.482407] Node 1 Normal free:55304kB min:53696kB low:67120kB high:80544kB active_anon:1481432kB inactive_anon:2125832kB active_file:256kB inactive_file:100kB unevictable:20452kB writepending:24kB present:4194304kB managed:4128256kB mlocked:20452kB kernel_stack:35168kB pagetables:87964kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1581.519154] lowmem_reserve[]: 0 0 0 0 0 [ 1581.523230] Node 0 DMA: 13*4kB (UME) 10*8kB (UMEH) 9*16kB (UMEH) 3*32kB (UME) 2*64kB (ME) 1*128kB (E) 5*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (M) 0*4096kB = 11124kB [ 1581.539452] Node 0 DMA32: 0*4kB 831*8kB (UM) 1322*16kB (UME) 256*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35992kB [ 1581.552787] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1581.563612] Node 1 Normal: 1186*4kB (UMH) 167*8kB (UMH) 1650*16kB (UH) 514*32kB (UMH) 80*64kB (UH) 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54176kB [ 1581.578596] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1581.599489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1581.605392] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1581.608549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1581.663610] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1581.698813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1581.707535] 43461 total pagecache pages [ 1581.709907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1581.716414] 0 pages in swap cache [ 1581.722959] Swap cache stats: add 0, delete 0, find 0/0 [ 1581.725221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1581.728427] Free swap = 0kB [ 1581.728432] Total swap = 0kB [ 1581.728439] 2097051 pages RAM [ 1581.728446] 0 pages HighMem/MovableOnly [ 1581.743093] device bridge_slave_1 left promiscuous mode [ 1581.765388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1581.769147] 363849 pages reserved [ 1581.784740] device bridge_slave_0 left promiscuous mode [ 1581.789018] 0 pages cma reserved [ 1581.796891] Out of memory (oom_kill_allocating_task): Kill process 6337 (syz-executor.1) score 0 or sacrifice child [ 1581.809810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.826466] Killed process 6349 (syz-executor.1) total-vm:93516kB, anon-rss:28240kB, file-rss:35084kB, shmem-rss:0kB [ 1581.854909] device veth1_macvtap left promiscuous mode [ 1581.905125] device veth0_macvtap left promiscuous mode [ 1581.921426] device veth1_vlan left promiscuous mode [ 1581.928812] device veth0_vlan left promiscuous mode [ 1581.952602] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 1581.968729] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1581.974714] CPU: 1 PID: 6337 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1581.982654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1581.992039] Call Trace: [ 1581.994663] dump_stack+0x1b2/0x281 [ 1581.998323] dump_header+0x178/0x82f [ 1582.002069] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1582.007190] ? ___ratelimit+0x2cd/0x530 [ 1582.011194] oom_kill_process.cold+0x10/0xa40 [ 1582.015930] out_of_memory+0xe3e/0x1190 [ 1582.019933] ? oom_killer_disable+0x1c0/0x1c0 [ 1582.024445] ? mutex_trylock+0x152/0x1a0 [ 1582.028522] __alloc_pages_nodemask+0x23e1/0x2720 [ 1582.033408] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1582.038446] alloc_pages_current+0x155/0x260 [ 1582.042872] filemap_fault+0x11a1/0x1ad0 [ 1582.046963] ext4_filemap_fault+0x84/0xb0 [ 1582.051124] __do_fault+0xfa/0x380 [ 1582.054704] __handle_mm_fault+0x2497/0x4620 [ 1582.059125] ? lock_downgrade+0x740/0x740 [ 1582.063280] ? vm_insert_page+0x7c0/0x7c0 [ 1582.067436] ? do_raw_spin_unlock+0x164/0x220 [ 1582.071969] ? mark_held_locks+0xa6/0xf0 [ 1582.076045] handle_mm_fault+0x455/0x9c0 [ 1582.080121] __get_user_pages+0x4e9/0x1270 [ 1582.084369] ? follow_page_mask+0x18a0/0x18a0 [ 1582.088912] populate_vma_page_range+0x17b/0x210 [ 1582.093699] __mm_populate+0x195/0x2c0 [ 1582.097629] ? populate_vma_page_range+0x210/0x210 [ 1582.102579] ? security_capable+0x88/0xb0 [ 1582.106747] SyS_mlockall+0x3ff/0x520 [ 1582.110556] ? SyS_munlock+0xf0/0xf0 [ 1582.114287] do_syscall_64+0x1d5/0x640 [ 1582.118189] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1582.123391] RIP: 0033:0x4665f9 [ 1582.126610] RSP: 002b:00007f0679f12188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1582.134411] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1582.141842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1582.149243] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1582.156520] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1582.163799] R13: 00007ffe83d6ee1f R14: 00007f0679f12300 R15: 0000000000022000 [ 1582.255145] Mem-Info: [ 1582.258331] active_anon:677445 inactive_anon:726512 isolated_anon:0 [ 1582.258331] active_file:28 inactive_file:2 isolated_file:0 [ 1582.258331] unevictable:22521 dirty:0 writeback:0 unstable:0 [ 1582.258331] slab_reclaimable:16153 slab_unreclaimable:130394 [ 1582.258331] mapped:39381 shmem:39692 pagetables:36748 bounce:0 [ 1582.258331] free:25210 free_pcp:1 free_cma:0 [ 1582.325314] Node 0 active_anon:1228372kB inactive_anon:780260kB active_file:52kB inactive_file:28kB unevictable:67716kB isolated(anon):0kB isolated(file):0kB mapped:146260kB dirty:0kB writeback:0kB shmem:103768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 573440kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1582.418710] Node 1 active_anon:1481408kB inactive_anon:2125788kB active_file:148kB inactive_file:0kB unevictable:22368kB isolated(anon):0kB isolated(file):0kB mapped:11428kB dirty:0kB writeback:0kB shmem:55000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1582.447877] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2188kB inactive_anon:1884kB active_file:0kB inactive_file:24kB unevictable:368kB writepending:0kB present:15992kB managed:15908kB mlocked:368kB kernel_stack:0kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1582.477434] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1582.483887] Node 0 DMA32 free:36104kB min:36200kB low:45248kB high:54296kB active_anon:1226184kB inactive_anon:778376kB active_file:32kB inactive_file:164kB unevictable:67348kB writepending:0kB present:3129332kB managed:2788128kB mlocked:67348kB kernel_stack:12512kB pagetables:58924kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1582.546016] lowmem_reserve[]: 0 0 0 0 0 [ 1582.553801] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1582.584762] lowmem_reserve[]: 0 0 0 0 0 [ 1582.589250] Node 1 Normal free:53832kB min:53696kB low:67120kB high:80544kB active_anon:1481408kB inactive_anon:2125788kB active_file:36kB inactive_file:384kB unevictable:22368kB writepending:0kB present:4194304kB managed:4128256kB mlocked:22368kB kernel_stack:35104kB pagetables:87972kB bounce:0kB free_pcp:740kB local_pcp:0kB free_cma:0kB [ 1582.624302] lowmem_reserve[]: 0 0 0 0 0 [ 1582.628896] Node 0 DMA: 11*4kB (UME) 9*8kB (UMEH) 8*16kB (UMEH) 3*32kB (UME) 2*64kB (ME) 1*128kB (E) 5*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (M) 0*4096kB = 11092kB [ 1582.646919] Node 0 DMA32: 105*4kB (UM) 839*8kB (UM) 1318*16kB (UME) 254*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36348kB [ 1582.662225] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1582.679626] Node 1 Normal: 1140*4kB (UH) 218*8kB (UH) 1646*16kB (UMH) 526*32kB (UMH) 71*64kB (UMH) 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54144kB [ 1582.699513] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1582.708900] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1582.724874] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1582.737075] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1582.747069] 44005 total pagecache pages [ 1582.751138] 0 pages in swap cache [ 1582.754592] Swap cache stats: add 0, delete 0, find 0/0 [ 1582.765156] Free swap = 0kB [ 1582.768492] Total swap = 0kB [ 1582.774361] 2097051 pages RAM [ 1582.777486] 0 pages HighMem/MovableOnly [ 1582.781714] 363849 pages reserved [ 1582.785162] 0 pages cma reserved [ 1582.788559] Out of memory (oom_kill_allocating_task): Kill process 6337 (syz-executor.1) score 0 or sacrifice child [ 1582.799249] Killed process 6350 (syz-executor.1) total-vm:93516kB, anon-rss:28240kB, file-rss:35084kB, shmem-rss:0kB [ 1582.866719] kworker/u4:9 invoked oom-killer: gfp_mask=0x14142c0(GFP_KERNEL|__GFP_NOWARN|__GFP_COMP|__GFP_NOMEMALLOC), nodemask=(null), order=1, oom_score_adj=0 [ 1582.905901] kworker/u4:9 cpuset=/ mems_allowed=0-1 [ 1582.917710] CPU: 1 PID: 29135 Comm: kworker/u4:9 Not tainted 4.14.232-syzkaller #0 [ 1582.925460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1582.934823] Workqueue: netns cleanup_net [ 1582.938882] Call Trace: [ 1582.941479] dump_stack+0x1b2/0x281 [ 1582.945127] dump_header+0x178/0x82f [ 1582.948840] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1582.953946] ? ___ratelimit+0x2cd/0x530 [ 1582.957939] oom_kill_process.cold+0x10/0xa40 [ 1582.962436] ? lock_downgrade+0x740/0x740 [ 1582.966587] out_of_memory+0x2dc/0x1190 [ 1582.970564] ? oom_killer_disable+0x1c0/0x1c0 [ 1582.975043] ? mutex_trylock+0x152/0x1a0 [ 1582.979100] __alloc_pages_nodemask+0x23e1/0x2720 [ 1582.984076] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1582.988940] ? trace_hardirqs_on+0x10/0x10 [ 1582.993160] ? cleanup_net+0x3b3/0x840 [ 1582.997042] ? process_one_work+0x793/0x14a0 [ 1583.001452] ? worker_thread+0x5cc/0xff0 [ 1583.005507] ? trace_hardirqs_on_caller+0x288/0x580 [ 1583.010511] ? mark_held_locks+0xa6/0xf0 [ 1583.014564] ? cache_grow_begin+0x3f/0x700 [ 1583.018792] cache_grow_begin+0x91/0x700 [ 1583.022879] fallback_alloc+0x207/0x2c0 [ 1583.026864] kmem_cache_alloc_node_trace+0xed/0x400 [ 1583.031869] __kmalloc_node_track_caller+0x38/0x70 [ 1583.036800] __alloc_skb+0x96/0x510 [ 1583.040432] rtmsg_ifinfo_build_skb+0x65/0x130 [ 1583.045001] rtmsg_ifinfo+0x68/0x100 [ 1583.048709] dev_close_many+0x2bf/0x5f0 [ 1583.052682] ? kernfs_put.part.0+0x1d2/0x490 [ 1583.057071] ? __dev_close_many+0x270/0x270 [ 1583.061376] ? kernfs_put.part.0+0x1d2/0x490 [ 1583.065782] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1583.070781] rollback_registered_many+0x399/0xba0 [ 1583.075607] ? netdev_state_change+0xf0/0xf0 [ 1583.079997] ? sysfs_remove_group+0xbe/0x100 [ 1583.084405] unregister_netdevice_many.part.0+0x18/0x2e0 [ 1583.089853] default_device_exit_batch+0x2d8/0x380 [ 1583.094765] ? unregister_netdevice_many+0x50/0x50 [ 1583.099679] ? do_wait_intr_irq+0x270/0x270 [ 1583.103985] ? __local_bh_enable_ip+0xc1/0x170 [ 1583.108568] ? unregister_netdevice_many+0x50/0x50 [ 1583.113514] ? dev_change_net_namespace+0xc90/0xc90 [ 1583.118520] ops_exit_list+0xf9/0x150 [ 1583.122355] cleanup_net+0x3b3/0x840 [ 1583.126059] ? net_drop_ns+0x70/0x70 [ 1583.129778] ? lock_acquire+0x170/0x3f0 [ 1583.133735] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1583.139171] process_one_work+0x793/0x14a0 [ 1583.143395] ? work_busy+0x320/0x320 [ 1583.147089] ? worker_thread+0x158/0xff0 [ 1583.151308] ? _raw_spin_unlock_irq+0x24/0x80 [ 1583.155785] worker_thread+0x5cc/0xff0 [ 1583.159659] ? rescuer_thread+0xc80/0xc80 [ 1583.163794] kthread+0x30d/0x420 [ 1583.167140] ? kthread_create_on_node+0xd0/0xd0 [ 1583.171805] ret_from_fork+0x24/0x30 [ 1583.179705] Mem-Info: [ 1583.182526] active_anon:677443 inactive_anon:726494 isolated_anon:0 [ 1583.182526] active_file:17 inactive_file:14 isolated_file:0 [ 1583.182526] unevictable:22680 dirty:0 writeback:0 unstable:0 [ 1583.182526] slab_reclaimable:16153 slab_unreclaimable:130182 [ 1583.182526] mapped:39540 shmem:39692 pagetables:36711 bounce:0 [ 1583.182526] free:25460 free_pcp:21 free_cma:0 [ 1583.224130] Node 0 active_anon:1228364kB inactive_anon:780196kB active_file:32kB inactive_file:0kB unevictable:68352kB isolated(anon):0kB isolated(file):0kB mapped:146804kB dirty:0kB writeback:0kB shmem:103768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 573440kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1583.256261] Node 1 active_anon:1481408kB inactive_anon:2125780kB active_file:36kB inactive_file:0kB unevictable:23340kB isolated(anon):0kB isolated(file):28kB mapped:12372kB dirty:0kB writeback:0kB shmem:55000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1583.284310] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:2184kB inactive_anon:1884kB active_file:0kB inactive_file:12kB unevictable:380kB writepending:0kB present:15992kB managed:15908kB mlocked:380kB kernel_stack:0kB pagetables:96kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1583.312274] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1583.317552] Node 0 DMA32 free:36064kB min:36200kB low:45248kB high:54296kB active_anon:1226180kB inactive_anon:778312kB active_file:52kB inactive_file:12kB unevictable:68028kB writepending:0kB present:3129332kB managed:2788128kB mlocked:68028kB kernel_stack:12480kB pagetables:58776kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 1583.347579] lowmem_reserve[]: 0 0 0 0 0 [ 1583.351632] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1583.377703] lowmem_reserve[]: 0 0 0 0 0 [ 1583.381746] Node 1 Normal free:53584kB min:53696kB low:67120kB high:80544kB active_anon:1481408kB inactive_anon:2125780kB active_file:148kB inactive_file:100kB unevictable:23340kB writepending:0kB present:4194304kB managed:4128256kB mlocked:23340kB kernel_stack:35104kB pagetables:87972kB bounce:0kB free_pcp:528kB local_pcp:268kB free_cma:0kB [ 1583.412228] lowmem_reserve[]: 0 0 0 0 0 [ 1583.416213] Node 0 DMA: 9*4kB (UME) 9*8kB (UMEH) 8*16kB (UMEH) 3*32kB (UME) 2*64kB (ME) 1*128kB (E) 5*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (M) 0*4096kB = 11084kB [ 1583.432079] Node 0 DMA32: 102*4kB (UME) 803*8kB (UM) 1320*16kB (UME) 255*32kB (UME) 0*64kB 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36368kB [ 1583.447062] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1583.458023] Node 1 Normal: 1129*4kB (UH) 225*8kB (UH) 1634*16kB (UMH) 514*32kB (UMH) 72*64kB (UMH) 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53644kB [ 1583.473075] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1583.482155] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1583.491373] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1583.500582] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1583.509262] 44382 total pagecache pages [ 1583.513269] 0 pages in swap cache [ 1583.516717] Swap cache stats: add 0, delete 0, find 0/0 [ 1583.522133] Free swap = 0kB [ 1583.525150] Total swap = 0kB [ 1583.528166] 2097051 pages RAM [ 1583.531442] 0 pages HighMem/MovableOnly [ 1583.535420] 363849 pages reserved [ 1583.538866] 0 pages cma reserved [ 1583.542284] Out of memory: Kill process 6335 (syz-executor.1) score 1011 or sacrifice child [ 1584.064752] device hsr_slave_1 left promiscuous mode [ 1584.076278] device hsr_slave_0 left promiscuous mode 20:36:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000100)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x3c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x30, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8}, {0x8}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xe60, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0xe50, 0x4, 0x0, 0x1, [{0xf8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x69, 0x1, "056bdf161df0fcc0c7fe2175d33b78cf0f5e2b5cde25dd183895ed8ae379d9fd5b36f193bafc3fe160f51fcd86e788121de8a58b9cbdd0bcb948b214f863c9dbddfc0424204208d70ad4e6e315af13cbff107b2e16fdf71037dd2020626bce9ec7e0ff2039"}, @NL80211_PKTPAT_MASK={0x85, 0x1, "33a012e1fecf5f5af56baf7bf050968d0fa782090f526bbb96e0d8c07759113089ec82c0636577b4b9b0d82a84ce90cf247358676fd974f44b32f990efe9b08bf8933afd0831102dada2ba9d75178385dbdaf3fb8d4f7e3ac205ffe35c6fbe35c739ee84c0b8ba1a3c66d4813cfee123ee21692e14a425a026eb7afd6803968284"}]}, {0x334, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x75, 0x2, "0f47c251d6de336cc2098e2b8ba83bf4c55413d3a5506dc13410e239a0b05d3d8aadba9542961e2799241b1a0d885b7effcae42ecdf1fce7c24c9e53f255f28df510f012acad3392bb1804aac3c528c0535a2e20956c6935f70384201b5bbd45048e33188871d750d888b22ee8c76e994f"}, @NL80211_PKTPAT_MASK={0x41, 0x1, "5fddc096c344a85b7d966d5a7e124a75f2b4925e3e45249ffb0962a7540e83a3a56a1a8362352c5d4aed0a1a464c633606e220fc860b2724764cd78b27"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_PATTERN={0x101, 0x2, "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"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_MASK={0x61, 0x1, "792fa1d1dff22622825c53a3908cb0ad01d63ef0aa3fb56f350a63b91d456fdb58c7d5f8ac22b65d732a3554c75e7817fa30abadcbbe2c366d4f8481b39bdb3b8328f325b495383e53e0fc897a180e63fa280724e88973e7be94924be3"}, @NL80211_PKTPAT_MASK={0xf1, 0x1, "4b586785defbabcfd5f8abf613f10466bf8c1babfcb4d977469d946db76c33fc06250ecc17717a5e9d1923c4cc4a3c907f29beae80cc9ba02be7f1fe8f0985b7761042db129e7948d6ce3898aa36d04452851bd1b3da0fda1fe9d15ee031743496c5cfa852a66b7c121cb25c1c9442024ea772d5b07d6394f6ea2397685083f15189f3e1786479b0ce95e33947d2cfba0ab33f3435b65933074dea805620605c7c241c43777f4d1b28fccdd4adb31c55e4dbb4e19b98c83088ba10a92a4d744ee41f8ab96c99e57b8f5ce5730e225ce229997d70b1407cebd5c4ee8658edb7a5e26a3111cc284dd192d73c4326"}, @NL80211_PKTPAT_OFFSET={0x8}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xed, 0x2, "03e66a9ff15f61ad01241440166a3e6cadbcdde321b8a532fae030005a6144c6dfc3dea3cda8a5636f76fd7f2344746122387fdca9b9685ad3ea4654b0c86ea51451b50aaffc4209358f59f101bd9c2405bf886906a57590cfdebfbf6efc5138bfd79654adc21d16ed07b6a4b66eec2bb39badd6afa0fdc24d000aca2ce90add957180037c8c5536b34f29c05cecb6b1f98ceb351d368d8d5224a9fbe3f30039bbcedebec5100a5ed6983c200dc86b87d83220d021fd8079bbd96b2e84f4e9bf1df7c60983dd3484338ab6f7f7249b7821ab3c31ec19d847464033e0f3f0a45cf47607c5309645ac1d"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_PATTERN={0x35, 0x2, "0b06de1406d9a1993ffc78ec85249a3f8eab395974763d5b39f1cd590fa4d1885aece939c28df5ca21e71338e8171d4af5"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_OFFSET={0x8}]}, {0x8d4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x8cd, 0x2, "d4293400ba04de87ace87c6c446664b2754a887bd4d3b1736210c4da829309873964b482746e11ea6af250c168c4472aff9adb70c4d614697a8907532000cf172d811da54eb8c9e1a32dc13c68fdd4967e635c8abd5431b33853bfd6a09198d5eb2948a7f71c5181fd014da7da72778c7a92956d3687c2c7f6376790cc7786e7722a6e57211f487b15ec02148cb49566c9a6dc2a7a7bb3c2abaf0f33aa3c7b89ca4cfa08b44099edd387231dd395eb04a7fcaffedfb492305bbe7d4e209811b4b5ad545037d687cdc35b5ce5f25d663e8a332e6ecdfa0b95a5b78e47919853b5d4ece2397b69c866cb02db2d5ee08b7352d558db36c5d82050974cc5be0d134fb45e4cb935dc85008456c8f771d7a7b740d64e4840d06e1df459a55a4f661f0ae56f2bb97b2f34f53942d3a37e503bafeba9dab10198b2854b8d2bd09e117daf85d28522c5759f820f8edbbc5dd0fd1220621076964f766605a8ed49a56fa249264e411c4a2c5082ecf82b562b4e53b5ebd830ff4cae8a3eacb09dfa7d8a13744fc793a0386371cca58ba9e7934803db1d257a97177e0bff2d0f79ed49a9ea22f31ccb85255d6eb4fc667eeef2704c86e7a0e43628c1090475abba43eef5936c7d63d51a2c64a87bf079b54357a4754539e8370b472ffa2246e4069816df763f86d174614fc1ebaff2992d960dc12f9861f220cbb209dfd464cd93f999156c5f2684e15eba4bccb2c2e9d6493eab9338e9f4ecf8f38f51fb3de090b9c4cae64b89c9303a317992fb12be7b8c6d874f362830653c942a565566368ee706a3d27f308a9d79a3a6708c32ea03444b04354f2644a098703d0ef2649c60c104b463d23c5562ca7b75d7224e821532b00a211794afc916effb9fb392b0d2aeea34d58d199f5aa56d5e98f530fd7206bfc5b4120f2a3857764ccceb56acdec9e86360305c3bcbc94fe160af2dee4be2ea1d4068854fa788d95611a607bc3c1f7f8b4537af3048dc527a420606c35395b665810dff13d00ba2ef2b9fb2570981bbde8be770a740592b90ab0f0f48f8934dab4540e662fbeedc0284965e02cdd7d3894af9e55cfbd40c4cf6b35c88eb668f851a145bd682c0134c7c28703f38f7e24f5f48e53e4424cf7a5c14569ac583162b09717fb837fe353d0e38b2a1060c25c03d24220a6ae0a55d9022574264edc7911724558866d43f7cc6c0237fafc2515e53e9ae73fdd574f53e93482c94d298ab6ca4a88a9ea39aea92cb7cf3dd6599cf140787bf68454624f1d9f5665351fe25e3c037f4515c3d20e4e3825bcd10183d743ae5944dfdcc16cfdc7932683c9ae57681936db26218c54766581b38f0518d6766b6c76bf2b52ad9fd9f3313686dd3403110e02f958addb8efb7a4bed11fcadad0d592b4086e13bcd02a5b3e9dcabeb9a90dea3f57d7378fd81f8835423c37cd395db1e7214b4bb780fcddf0bf481f0f329aca92249515516c5e16ccd95c22f1987731f1af24bbc86ca125838f9c579498311c4a8c54ca9ca2f85c33db628d6a8f42f41986bf20ec00d1e03713ce54599e1642d61ce98531f5efeb3cfe0334f03ea936e7201f0b2e88aafac9ed6ee4963dde9b6cf165c6f07c73d9e5599d7ff7f56dd8c5cf1c2de5a58af7804aede9063d37ecfcfc6f9d79580f844d59f5d0a5144bd46ef502aeac17ce869f18144d8c9a7e852dbd3bdb083479daf36df1fdb7b2d7f6382dd7f0e896e86d4de8fa73a5fb1580de5bed54dd6bad71e1fd9d43605ad16a859cf422d2e9ed29aa7d96d4dde9fb0ee92b553bfe137c092526012bef16e4d9b38f3937e6bcc76a6b205f7c9f5389043ac1775cf2bf3d39fc6f4a8e57be63e3a6e59fd81c5830b1ab823fdd30f0ac483d939f505b7bc3aba73e6e273f04407176751c00daabebf0ef8087a8ce50f13ee2f68943b74b029eb80a9d184e3efa1217e369e0388d7ddb51cb831e494c142bf7fa6d9c339fc7e3f2ab3ccd2d7c7c22bf3b6cc1da4616385cfc84a6f077ada4d6fa0d2b6698479004a50b2a0d2848a1cda15900bfd19a747215eb0cf5fa9cb1a8ad71c86fd0977d49f17768373b0e7c5ba2b27a6e51600dac8c185da25f3c7599d3176abc6489c6d2e7b80f7a2dbb7dc5257fdf2ed2d201c2e0238004974f23c6c3bdd9065444bb39c3ba0a0ec27e490cb64125177845e546bf0c77ad8384973bcc55809d3fd7005bbcadc6e3561bf4f6efeb515991f251a26a438bc0689f927830c258c8d3fcee82cb4c19ae05836051aca65b2086d7024972fc27d14cef7fc94dacacd9f93420322cb755e12b02d95f2e4240c4b428f35e002aac4be8088d36adf9bb4d97a449b5aeee75b6c17d06db1cb63508d5c54a738e03d1665e99c6ae14050864d2a34914be89ee36336bc72b951bf92c37787fa4d2fa65c8246b1fbeb7278bf5afbcd6727549dc4b9e3083d1c8b99f5119cb606bb7d60ea515d67a6dc068a3f6e22a4566490b10520f380145b600fd10465c0910bfd0be4db119b87935c2f8383e57205ab8b1c8954f6cbd18c97169f0d4dbe4d44d1047a58d48ab06489249599152385237bdc3298479bcc513bc3d1786ad25e8552f53c2f8d7f950e444c9bc0703d34e3fada3e691d3252f6d539441b6fca76c199f2a03aa136c8ba7e7a56e9d8ffc294a9eec3eb625a30f02859368a0639f4192a957a86a303c9bd68a34ff02ee2562a88f826baecbaf72d58515137d484fccf48c1e666209bb997a6c11b0cc816c88e1b642d6a7cf0f3ccb14e0b44fc392ca9c67573f28714dbeb4d9d2452fd5308a41ea48a3c336820228975f18738a0ea2f69392285fca287d3f65ed3e19fdbd0ca885038a223795b5d98242ea0c1b8642eaf0fc8700b40ffc52e1679657d760af1ceadde79553e759d33581c9d3b2c93546c4a6c33100156b8991e13a875224d54bb64783b309a34db9c2019bba9effc46b955f2366f9138fdd7e78a2a04c800ca165a9807e759c1ecfc4729c8f08c6b372c0b13b36b49ae8ec4659e98671366a2723aeed81f31f23cccdff1db383d6bc35c24b70c24d616f648323d340a1be5cef598caec35f272c8627e4c5f153908fa5344feb0a4144df342e4ee80f6ccb1a190e3a23e9c25b6740d58d9788cfcbdf8509878ec627985de877edd9e970f6be82f149834102d07b00f49d866e22"}]}]}]}]}, 0xec4}}, 0x0) [ 1584.135163] systemd[1]: Started Journal Service. [ 1584.145520] team0 (unregistering): Port device team_slave_1 removed [ 1584.211029] team0 (unregistering): Port device team_slave_0 removed [ 1584.268423] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1584.309719] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1584.435235] bond0 (unregistering): Released all slaves [ 1589.311125] IPVS: ftp: loaded support on port[0] = 21 [ 1589.850139] syz-fuzzer invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1589.872714] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1589.877612] CPU: 0 PID: 7961 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1589.885063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1589.894423] Call Trace: [ 1589.897018] dump_stack+0x1b2/0x281 [ 1589.900649] dump_header+0x178/0x82f [ 1589.904368] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1589.909476] ? ___ratelimit+0x2cd/0x530 [ 1589.913452] oom_kill_process.cold+0x10/0xa40 [ 1589.917961] out_of_memory+0xe3e/0x1190 [ 1589.921944] ? oom_killer_disable+0x1c0/0x1c0 [ 1589.926438] ? mutex_trylock+0x152/0x1a0 [ 1589.930506] __alloc_pages_nodemask+0x23e1/0x2720 [ 1589.935438] ? kasan_kmalloc+0xeb/0x160 [ 1589.939441] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1589.944297] ? kasan_kmalloc+0xeb/0x160 [ 1589.948269] ? fs_reclaim_release+0xd0/0x110 [ 1589.952685] ? kmem_cache_alloc_node+0x38b/0x410 [ 1589.957440] copy_process.part.0+0x265/0x71c0 [ 1589.961940] ? trace_hardirqs_on+0x10/0x10 [ 1589.966179] ? trace_hardirqs_on+0x10/0x10 [ 1589.970412] ? trace_hardirqs_on+0x10/0x10 [ 1589.974648] ? __fd_install+0x1ec/0x5c0 [ 1589.978628] ? __cleanup_sighand+0x40/0x40 [ 1589.982959] ? lock_downgrade+0x740/0x740 [ 1589.987108] ? _raw_spin_unlock_irq+0x24/0x80 [ 1589.991638] _do_fork+0x184/0xc80 [ 1589.995095] ? fork_idle+0x270/0x270 [ 1589.998828] ? SyS_rt_sigprocmask+0x11a/0x170 [ 1590.003324] ? __set_current_blocked+0x100/0x100 [ 1590.008081] ? do_syscall_64+0x4c/0x640 [ 1590.012048] ? sys_vfork+0x20/0x20 [ 1590.016496] do_syscall_64+0x1d5/0x640 [ 1590.020407] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1590.025591] RIP: 0033:0x4af351 [ 1590.028772] RSP: 002b:000000c0004ead40 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1590.036489] RAX: ffffffffffffffda RBX: 000000000184f860 RCX: 00000000004af351 [ 1590.043753] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000004111 [ 1590.051019] RBP: 000000c0004eaed8 R08: 0000000000000000 R09: 0000000000000000 [ 1590.058304] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000004a7ad8 [ 1590.065567] R13: 000000000000001d R14: 000000000000001c R15: 00000000000000aa [ 1590.094315] Mem-Info: [ 1590.096777] active_anon:677252 inactive_anon:726497 isolated_anon:0 [ 1590.096777] active_file:75 inactive_file:11 isolated_file:6 [ 1590.096777] unevictable:11264 dirty:2 writeback:0 unstable:0 [ 1590.096777] slab_reclaimable:16127 slab_unreclaimable:129868 [ 1590.096777] mapped:43969 shmem:39694 pagetables:36713 bounce:0 [ 1590.096777] free:28565 free_pcp:91 free_cma:0 [ 1590.133493] Node 0 active_anon:1228276kB inactive_anon:780204kB active_file:176kB inactive_file:40kB unevictable:45056kB isolated(anon):0kB isolated(file):24kB mapped:150092kB dirty:8kB writeback:0kB shmem:103776kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 573440kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1590.164935] Node 1 active_anon:1480732kB inactive_anon:2125784kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25684kB dirty:0kB writeback:0kB shmem:55000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1590.193026] Node 0 DMA free:11384kB min:204kB low:252kB high:300kB active_anon:2172kB inactive_anon:1884kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1590.223435] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1590.228817] Node 0 DMA32 free:47556kB min:36200kB low:45248kB high:54296kB active_anon:1226104kB inactive_anon:778320kB active_file:248kB inactive_file:276kB unevictable:45056kB writepending:4kB present:3129332kB managed:2788128kB mlocked:45056kB kernel_stack:12448kB pagetables:58860kB bounce:0kB free_pcp:84kB local_pcp:48kB free_cma:0kB [ 1590.260112] lowmem_reserve[]: 0 0 0 0 0 [ 1590.286164] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1590.327858] lowmem_reserve[]: 0 0 0 0 0 [ 1590.333359] Node 1 Normal free:57348kB min:53696kB low:67120kB high:80544kB active_anon:1480732kB inactive_anon:2125784kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:35136kB pagetables:87892kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1590.488251] lowmem_reserve[]: 0 0 0 0 0 [ 1590.504986] Node 0 DMA: 8*4kB (UME) 3*8kB (UEH) 2*16kB (MH) 3*32kB (UME) 1*64kB (E) 1*128kB (E) 6*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (M) 0*4096kB = 11128kB [ 1590.536241] Node 0 DMA32: 370*4kB (UME) 985*8kB (UMEH) 1523*16kB (UMEH) 288*32kB (UMEH) 1*64kB (M) 4*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 43520kB [ 1590.579203] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1590.636499] Node 1 Normal: 813*4kB (UMH) 347*8kB (MH) 832*16kB (UMH) 844*32kB (UMH) 160*64kB (UH) 2*128kB (UH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 56844kB [ 1590.715059] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1590.784753] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1590.808258] chnl_net:caif_netlink_parms(): no params data found [ 1590.842057] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1590.858347] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1590.881648] 41535 total pagecache pages [ 1590.885702] 0 pages in swap cache [ 1590.898193] Swap cache stats: add 0, delete 0, find 0/0 [ 1590.905706] Free swap = 0kB [ 1590.913651] Total swap = 0kB [ 1590.917600] 2097051 pages RAM [ 1590.924821] 0 pages HighMem/MovableOnly [ 1590.934475] 363849 pages reserved [ 1590.938832] 0 pages cma reserved [ 1590.961250] Out of memory (oom_kill_allocating_task): Kill process 7961 (syz-fuzzer) score 0 or sacrifice child [ 1591.001381] Killed process 6355 (syz-executor.3) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1591.042954] oom_reaper: reaped process 6355 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1591.855482] bond0 (unregistering): Released all slaves [ 1593.592049] IPVS: ftp: loaded support on port[0] = 21 [ 1593.766903] chnl_net:caif_netlink_parms(): no params data found [ 1593.791177] syz-executor.0: page allocation failure: order:5, mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 1593.801920] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1593.807311] CPU: 1 PID: 6498 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1593.815106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1593.824563] Call Trace: [ 1593.827182] dump_stack+0x1b2/0x281 [ 1593.830815] warn_alloc.cold+0x96/0x1cc [ 1593.834792] ? zone_watermark_ok_safe+0x220/0x220 [ 1593.839654] ? __cpuset_node_allowed+0xf8/0x430 [ 1593.844417] ? wake_all_kswapds+0x175/0x360 [ 1593.848747] ? cache_grow_begin+0x91/0x700 [ 1593.853008] __alloc_pages_nodemask+0x2127/0x2720 [ 1593.857860] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1593.862696] ? trace_hardirqs_on+0x10/0x10 [ 1593.866937] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1593.871772] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1593.877132] ? calc_wheel_index+0xb1/0x1c0 [ 1593.881361] ? __kmalloc+0x213/0x400 [ 1593.885072] cache_grow_begin+0x91/0x700 [ 1593.889131] fallback_alloc+0x207/0x2c0 [ 1593.893107] __kmalloc+0x213/0x400 [ 1593.896659] ? batadv_hash_new+0xaa/0x270 [ 1593.900810] batadv_hash_new+0xaa/0x270 [ 1593.904819] ? batadv_bla_status_update+0x2b0/0x2b0 [ 1593.909831] batadv_dat_init+0x61/0x170 [ 1593.913804] batadv_mesh_init+0x4a8/0x630 [ 1593.917973] batadv_softif_init_late+0xa26/0xc90 [ 1593.922918] ? batadv_get_strings+0x40/0x40 [ 1593.927331] ? dev_valid_name+0x1a0/0x1a0 [ 1593.931488] ? batadv_get_strings+0x40/0x40 [ 1593.935808] register_netdevice+0x291/0xe40 [ 1593.940135] ? netdev_change_features+0xa0/0xa0 [ 1593.944803] ? rtnl_create_link+0x129/0x890 [ 1593.949125] rtnl_newlink+0x14ff/0x1860 [ 1593.953094] ? rtnl_newlink+0x43d/0x1860 [ 1593.957165] ? __lock_acquire+0x5fc/0x3f20 [ 1593.961399] ? trace_hardirqs_on+0x10/0x10 [ 1593.965624] ? rtnl_dellink+0x6a0/0x6a0 [ 1593.969616] ? trace_hardirqs_on+0x10/0x10 [ 1593.973943] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1593.979830] ? deref_stack_reg+0x124/0x1a0 [ 1593.984229] ? lock_acquire+0x170/0x3f0 [ 1593.988284] ? lock_downgrade+0x740/0x740 [ 1593.992430] ? rtnl_dellink+0x6a0/0x6a0 [ 1593.996506] rtnetlink_rcv_msg+0x3be/0xb10 [ 1594.000738] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1594.005237] ? __netlink_lookup+0x345/0x5d0 [ 1594.009582] netlink_rcv_skb+0x125/0x390 [ 1594.013642] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1594.018150] ? netlink_ack+0x9a0/0x9a0 [ 1594.022042] netlink_unicast+0x437/0x610 [ 1594.026097] ? netlink_sendskb+0xd0/0xd0 [ 1594.030156] ? __check_object_size+0x179/0x230 [ 1594.034909] netlink_sendmsg+0x62e/0xb80 [ 1594.038976] ? nlmsg_notify+0x170/0x170 [ 1594.042949] ? security_socket_sendmsg+0x83/0xb0 [ 1594.047705] ? nlmsg_notify+0x170/0x170 [ 1594.051677] sock_sendmsg+0xb5/0x100 [ 1594.055389] SyS_sendto+0x1c7/0x2c0 [ 1594.059009] ? SyS_getpeername+0x220/0x220 [ 1594.063259] ? sock_poll+0x220/0x220 [ 1594.066972] ? SyS_socket+0x12f/0x1b0 [ 1594.070765] ? move_addr_to_kernel+0x60/0x60 [ 1594.075181] ? do_syscall_64+0x4c/0x640 [ 1594.079170] ? SyS_getpeername+0x220/0x220 [ 1594.083401] do_syscall_64+0x1d5/0x640 [ 1594.087291] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1594.092489] RIP: 0033:0x41958c [ 1594.095669] RSP: 002b:00007ffe93d3ff20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1594.103373] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041958c [ 1594.110636] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1594.117905] RBP: 0000000000000000 R08: 00007ffe93d3ff74 R09: 000000000000000c [ 1594.125172] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1594.132440] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1594.140000] Mem-Info: [ 1594.142416] active_anon:677261 inactive_anon:726500 isolated_anon:0 [ 1594.142416] active_file:1110 inactive_file:600 isolated_file:18 [ 1594.142416] unevictable:11264 dirty:9 writeback:0 unstable:0 [ 1594.142416] slab_reclaimable:16194 slab_unreclaimable:129434 [ 1594.142416] mapped:45337 shmem:39697 pagetables:36688 bounce:0 [ 1594.142416] free:27256 free_pcp:175 free_cma:0 [ 1594.177457] Node 0 active_anon:1228464kB inactive_anon:780216kB active_file:4436kB inactive_file:2312kB unevictable:45056kB isolated(anon):0kB isolated(file):72kB mapped:156372kB dirty:36kB writeback:0kB shmem:103788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 573440kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1594.206522] Node 1 active_anon:1480580kB inactive_anon:2125784kB active_file:4kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24976kB dirty:0kB writeback:0kB shmem:55000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1594.234138] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:2184kB inactive_anon:1884kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:108kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1594.261157] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1594.266192] Node 0 DMA32 free:39516kB min:36200kB low:45248kB high:54296kB active_anon:1226280kB inactive_anon:778332kB active_file:4488kB inactive_file:2684kB unevictable:45056kB writepending:36kB present:3129332kB managed:2788128kB mlocked:45056kB kernel_stack:12416kB pagetables:58684kB bounce:0kB free_pcp:580kB local_pcp:0kB free_cma:0kB [ 1594.296828] lowmem_reserve[]: 0 0 0 0 0 [ 1594.300822] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1594.326353] lowmem_reserve[]: 0 0 0 0 0 [ 1594.330344] Node 1 Normal free:58444kB min:53696kB low:67120kB high:80544kB active_anon:1480580kB inactive_anon:2125784kB active_file:4kB inactive_file:188kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:35136kB pagetables:87960kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1594.359727] lowmem_reserve[]: 0 0 0 0 0 [ 1594.363717] Node 0 DMA: 26*4kB (UM) 6*8kB (UMEH) 2*16kB (UH) 2*32kB (ME) 1*64kB (E) 2*128kB (ME) 5*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (M) 0*4096kB = 11064kB [ 1594.379139] Node 0 DMA32: 113*4kB (UMEH) 865*8kB (UMEH) 1462*16kB (UMEH) 283*32kB (UMEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39820kB [ 1594.393335] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1594.404040] Node 1 Normal: 844*4kB (UMH) 342*8kB (MH) 622*16kB (UMH) 1013*32kB (UMH) 161*64kB (UH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 58784kB [ 1594.418501] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1594.427334] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1594.435902] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1594.444729] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1594.453298] 41380 total pagecache pages [ 1594.457284] 0 pages in swap cache [ 1594.460721] Swap cache stats: add 0, delete 0, find 0/0 [ 1594.466081] Free swap = 0kB [ 1594.469090] Total swap = 0kB [ 1594.472195] 2097051 pages RAM [ 1594.475288] 0 pages HighMem/MovableOnly [ 1594.479241] 363849 pages reserved [ 1594.482674] 0 pages cma reserved [ 1594.556728] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 1594.567022] ------------[ cut here ]------------ [ 1594.571811] WARNING: CPU: 1 PID: 6498 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 1594.580824] Kernel panic - not syncing: panic_on_warn set ... [ 1594.580824] [ 1594.588214] CPU: 1 PID: 6498 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1594.596004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1594.605358] Call Trace: [ 1594.607951] dump_stack+0x1b2/0x281 [ 1594.611574] panic+0x1f9/0x42d [ 1594.614778] ? add_taint.cold+0x16/0x16 [ 1594.618798] ? debug_print_object.cold+0xa7/0xdb [ 1594.623562] ? debug_print_object.cold+0xa7/0xdb [ 1594.628407] __warn.cold+0x20/0x44 [ 1594.631952] ? ist_end_non_atomic+0x10/0x10 [ 1594.636273] ? debug_print_object.cold+0xa7/0xdb [ 1594.641028] report_bug+0x208/0x250 [ 1594.644652] do_error_trap+0x195/0x2d0 [ 1594.648530] ? math_error+0x2d0/0x2d0 [ 1594.652334] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1594.657183] invalid_op+0x1b/0x40 [ 1594.660652] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 1594.666019] RSP: 0018:ffff888205b5f248 EFLAGS: 00010086 [ 1594.671377] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 1594.678643] RDX: 0000000000000000 RSI: ffffffff878bbbc0 RDI: ffffed1040b6be3f [ 1594.685928] RBP: ffffffff878b6e80 R08: 0000000000000061 R09: 0000000000000001 [ 1594.693194] R10: 0000000000000000 R11: ffff88809afb8240 R12: 0000000000000000 [ 1594.700460] R13: 0000000000000000 R14: ffff88820be69970 R15: 1ffff11040b6be52 [ 1594.707743] ? debug_print_object.cold+0xa7/0xdb [ 1594.712511] debug_object_assert_init+0x1d3/0x2d0 [ 1594.717368] ? debug_object_active_state+0x330/0x330 [ 1594.722482] ? rtnl_newlink+0x14ff/0x1860 [ 1594.726634] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 1594.731036] ? netlink_rcv_skb+0x125/0x390 [ 1594.735274] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1594.740811] del_timer+0x5d/0xe0 [ 1594.744195] ? process_timeout+0x20/0x20 [ 1594.748254] try_to_grab_pending+0x243/0x610 [ 1594.752663] __cancel_work_timer+0x90/0x460 [ 1594.756977] ? work_on_cpu_safe+0x70/0x70 [ 1594.761123] ? batadv_tvlv_handler_get+0x1db/0x2b0 [ 1594.766056] batadv_nc_mesh_free+0x41/0x120 [ 1594.770374] batadv_mesh_free+0x70/0x150 [ 1594.774430] batadv_mesh_init+0x561/0x630 [ 1594.778582] batadv_softif_init_late+0xa26/0xc90 [ 1594.783333] ? batadv_get_strings+0x40/0x40 [ 1594.787645] ? dev_valid_name+0x1a0/0x1a0 [ 1594.791787] ? batadv_get_strings+0x40/0x40 [ 1594.796101] register_netdevice+0x291/0xe40 [ 1594.800415] ? netdev_change_features+0xa0/0xa0 [ 1594.805169] ? rtnl_create_link+0x129/0x890 [ 1594.809487] rtnl_newlink+0x14ff/0x1860 [ 1594.813466] ? rtnl_newlink+0x43d/0x1860 [ 1594.817539] ? __lock_acquire+0x5fc/0x3f20 [ 1594.821778] ? trace_hardirqs_on+0x10/0x10 [ 1594.826037] ? rtnl_dellink+0x6a0/0x6a0 [ 1594.830143] ? trace_hardirqs_on+0x10/0x10 [ 1594.834375] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1594.840256] ? deref_stack_reg+0x124/0x1a0 [ 1594.844523] ? lock_acquire+0x170/0x3f0 [ 1594.848493] ? lock_downgrade+0x740/0x740 [ 1594.852657] ? rtnl_dellink+0x6a0/0x6a0 [ 1594.856644] rtnetlink_rcv_msg+0x3be/0xb10 [ 1594.860892] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1594.865416] ? __netlink_lookup+0x345/0x5d0 [ 1594.869750] netlink_rcv_skb+0x125/0x390 [ 1594.873815] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1594.878313] ? netlink_ack+0x9a0/0x9a0 [ 1594.882210] netlink_unicast+0x437/0x610 [ 1594.886296] ? netlink_sendskb+0xd0/0xd0 [ 1594.890355] ? __check_object_size+0x179/0x230 [ 1594.894958] netlink_sendmsg+0x62e/0xb80 [ 1594.899021] ? nlmsg_notify+0x170/0x170 [ 1594.902998] ? security_socket_sendmsg+0x83/0xb0 [ 1594.907753] ? nlmsg_notify+0x170/0x170 [ 1594.911723] sock_sendmsg+0xb5/0x100 [ 1594.915435] SyS_sendto+0x1c7/0x2c0 [ 1594.919081] ? SyS_getpeername+0x220/0x220 [ 1594.923347] ? sock_poll+0x220/0x220 [ 1594.927062] ? SyS_socket+0x12f/0x1b0 [ 1594.930856] ? move_addr_to_kernel+0x60/0x60 [ 1594.935281] ? do_syscall_64+0x4c/0x640 [ 1594.939252] ? SyS_getpeername+0x220/0x220 [ 1594.943486] do_syscall_64+0x1d5/0x640 [ 1594.947395] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1594.952677] RIP: 0033:0x41958c [ 1594.955884] RSP: 002b:00007ffe93d3ff20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1594.963612] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041958c [ 1594.971168] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1594.978440] RBP: 0000000000000000 R08: 00007ffe93d3ff74 R09: 000000000000000c [ 1594.985707] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1594.992973] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1595.001283] Kernel Offset: disabled [ 1595.005023] Rebooting in 86400 seconds..