13.026004] bond0 (unregistering): Released all slaves [ 1713.054771] IPVS: ftp: loaded support on port[0] = 21 [ 1713.391882] chnl_net:caif_netlink_parms(): no params data found [ 1713.520566] bridge0: port 1(bridge_slave_0) entered blocking state [ 1713.551189] bridge0: port 1(bridge_slave_0) entered disabled state [ 1713.558639] device bridge_slave_0 entered promiscuous mode [ 1713.568132] bridge0: port 2(bridge_slave_1) entered blocking state [ 1713.591150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1713.598838] device bridge_slave_1 entered promiscuous mode [ 1713.637727] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1713.663054] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1713.709406] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1713.731898] team0: Port device team_slave_0 added [ 1713.737753] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1713.761873] team0: Port device team_slave_1 added [ 1713.803291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1713.809571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1713.836047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1713.848749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1713.855943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1713.883302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1713.899106] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1713.921841] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1713.968037] device hsr_slave_0 entered promiscuous mode [ 1713.981491] device hsr_slave_1 entered promiscuous mode [ 1713.992857] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1714.000065] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1714.149878] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1714.210748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1714.227157] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1714.237965] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1714.250143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1714.259352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1714.282629] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1714.288725] 8021q: adding VLAN 0 to HW filter on device team0 [ 1714.300495] Bluetooth: hci2: command 0x040f tx timeout [ 1714.310294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1714.323672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1714.335220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1714.347791] bridge0: port 1(bridge_slave_0) entered blocking state [ 1714.354393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1714.370351] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1714.378891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1714.392596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1714.400529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1714.419954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1714.426452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1714.443018] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1714.456924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1714.467398] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1714.480459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1714.502602] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1714.516663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1714.525057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1714.540066] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1714.548849] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1714.561802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1714.569850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1714.592236] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1714.606802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1714.615250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1714.630462] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1714.638799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1714.652788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1714.667305] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1714.675593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1714.738787] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1714.752182] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1714.758493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1714.772050] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1714.788687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1714.858393] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1714.875825] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1714.887334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1714.899339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1714.979562] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1714.987525] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1714.996109] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1715.007107] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1715.015084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1715.024326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1715.035191] device veth0_vlan entered promiscuous mode [ 1715.043670] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1715.058283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1715.069276] device veth1_vlan entered promiscuous mode [ 1715.077417] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1715.089003] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1715.101802] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1715.109490] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1715.126502] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1715.145594] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1715.156778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1715.167693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1715.182733] device veth0_macvtap entered promiscuous mode [ 1715.189217] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1715.205928] device veth1_macvtap entered promiscuous mode [ 1715.217552] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1715.235347] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1715.248188] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1715.264110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1715.277121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.289542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1715.306229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.316986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1715.332403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.345797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1715.357876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.373847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1715.386688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.400154] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1715.413515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1715.420322] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1715.458704] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1715.482053] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1715.490463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1715.518570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1715.548021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.573342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1715.598272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.611040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1715.629484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.660835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1715.671203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.680326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1715.690455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.712117] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1715.719146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1715.761388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1715.769373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1716.200180] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1716.216965] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1716.228310] CPU: 1 PID: 8103 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 1716.235835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1716.245207] Call Trace: [ 1716.247803] dump_stack+0x1fc/0x2ef [ 1716.251448] dump_header+0x15d/0xc3f [ 1716.255188] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1716.260290] ? ___ratelimit+0x319/0x590 [ 1716.264287] oom_kill_process.cold+0x10/0x692 [ 1716.268814] ? check_preemption_disabled+0x41/0x280 [ 1716.273840] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1716.279138] out_of_memory+0x1072/0x1390 [ 1716.283217] ? oom_killer_disable+0x270/0x270 [ 1716.287708] ? mutex_trylock+0x15f/0x1a0 [ 1716.291757] __alloc_pages_nodemask+0x23a2/0x2890 [ 1716.296591] ? find_get_entry+0x4cd/0x8a0 [ 1716.300738] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1716.305585] alloc_pages_current+0x193/0x2a0 [ 1716.309989] filemap_fault+0x146e/0x2180 [ 1716.314043] ext4_filemap_fault+0x84/0xb0 [ 1716.318175] __do_fault+0x10b/0x4b0 [ 1716.321796] ? do_raw_spin_unlock+0x171/0x230 [ 1716.326304] __handle_mm_fault+0x273b/0x41c0 [ 1716.330705] ? vm_insert_page+0x9c0/0x9c0 [ 1716.334860] ? __fget+0x356/0x510 [ 1716.338316] ? check_preemption_disabled+0x41/0x280 [ 1716.343336] handle_mm_fault+0x436/0xb10 [ 1716.347432] __do_page_fault+0x68e/0xd60 [ 1716.351616] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1716.356631] ? spurious_fault+0x840/0x840 [ 1716.360806] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1716.365687] ? page_fault+0x8/0x30 [ 1716.369247] page_fault+0x1e/0x30 [ 1716.372810] RIP: 0033:0x416ba0 [ 1716.376005] Code: Bad RIP value. [ 1716.379358] RSP: 002b:000000c00009de30 EFLAGS: 00010206 [ 1716.384726] RAX: 00007f2170cb65b8 RBX: 000000c00003404c RCX: 000000c000040800 [ 1716.391984] RDX: 000000c000040800 RSI: 00000000fffffffd RDI: 0000000000000000 [ 1716.399241] RBP: 000000c00009de40 R08: 0000000000000000 R09: 000001b857ccebfd [ 1716.406497] R10: 0001b09897d252b2 R11: 0000000000000001 R12: 000000c00009de30 [ 1716.413754] R13: 0000000000000000 R14: 000000c0000824e0 R15: 0000000000000000 [ 1716.451219] Bluetooth: hci2: command 0x0419 tx timeout [ 1716.475815] Mem-Info: [ 1716.478286] active_anon:16811 inactive_anon:35218 isolated_anon:0 [ 1716.478286] active_file:38 inactive_file:0 isolated_file:0 [ 1716.478286] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1716.478286] slab_reclaimable:13516 slab_unreclaimable:117452 [ 1716.478286] mapped:22185 shmem:35928 pagetables:589 bounce:0 [ 1716.478286] free:25018 free_pcp:0 free_cma:0 [ 1716.628185] Node 0 active_anon:64208kB inactive_anon:40328kB active_file:128kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58508kB dirty:0kB writeback:0kB shmem:42444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1716.732388] Node 1 active_anon:3036kB inactive_anon:100544kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30232kB dirty:0kB writeback:0kB shmem:101268kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1716.816435] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1716.849372] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1716.905617] Node 0 DMA32 free:35492kB min:35996kB low:44992kB high:53988kB active_anon:64208kB inactive_anon:40328kB active_file:28kB inactive_file:76kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2012kB bounce:0kB free_pcp:428kB local_pcp:0kB free_cma:0kB [ 1717.022385] lowmem_reserve[]: 0 0 1 1 1 [ 1717.026414] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1717.173465] lowmem_reserve[]: 0 0 0 0 0 [ 1717.177619] Node 1 Normal free:53280kB min:53876kB low:67344kB high:80812kB active_anon:3036kB inactive_anon:100544kB active_file:124kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:344kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1717.277811] lowmem_reserve[]: 0 0 0 0 0 [ 1717.307738] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10980kB [ 1717.377061] Node 0 DMA32: 1581*4kB (UME) 727*8kB (UME) 152*16kB (ME) 44*32kB (ME) 21*64kB (M) 9*128kB (UM) 8*256kB (UM) 4*512kB (UM) 1*1024kB (M) 6*2048kB (U) 0*4096kB = 35884kB [ 1717.465318] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1717.523680] Node 1 Normal: 327*4kB (UME) 257*8kB (ME) 210*16kB (UME) 144*32kB (ME) 29*64kB (UME) 5*128kB (UME) 3*256kB (ME) 3*512kB (UM) 1*1024kB (E) 2*2048kB (ME) 8*4096kB (U) = 54020kB [ 1717.597593] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1717.627260] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1717.670749] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1717.679652] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1717.755483] 35989 total pagecache pages [ 1717.777241] 0 pages in swap cache [ 1717.798420] Swap cache stats: add 0, delete 0, find 0/0 [ 1717.819810] Free swap = 0kB [ 1717.833189] Total swap = 0kB [ 1717.836229] 2097051 pages RAM [ 1717.839327] 0 pages HighMem/MovableOnly [ 1717.855605] 369649 pages reserved [ 1717.859102] 0 pages cma reserved [ 1717.865693] Unreclaimable slab info: [ 1717.869400] Name Used Total [ 1717.877996] pid_2 15KB 96KB [ 1717.887584] batadv_tt_change_cache 4KB 7KB [ 1717.897085] batadv_tl_cache 15KB 16KB [ 1717.906485] TIPC 27KB 45KB [ 1717.916804] SCTPv6 26KB 37KB [ 1717.923766] DCCPv6 17KB 30KB [ 1717.929141] DCCP 19KB 28KB [ 1717.937140] L2TP/IPv6 4KB 6KB [ 1717.945157] RXRPC 17KB 26KB [ 1717.950552] rxrpc_call_jar 109KB 126KB [ 1717.955969] bridge_fdb_cache 19KB 27KB [ 1717.967422] fib6_nodes 222KB 264KB [ 1717.976538] ip6_dst_cache 656KB 656KB [ 1717.984008] RAWv6 106KB 114KB [ 1717.989389] UDPv6 33KB 45KB [ 1717.999507] TCPv6 27KB 30KB [ 1718.009048] nf_conntrack 9KB 11KB [ 1718.014645] t10_alua_lu_gp_cache 0KB 3KB [ 1718.020290] sd_ext_cdb 0KB 7KB [ 1718.027738] scsi_sense_cache 1056KB 1060KB [ 1718.039353] virtio_scsi_cmd 16KB 16KB [ 1718.047233] sgpool-128 8KB 8KB [ 1718.054206] sgpool-64 4KB 12KB [ 1718.059582] sgpool-32 2KB 15KB [ 1718.068836] sgpool-16 1KB 7KB [ 1718.076155] sgpool-8 0KB 7KB [ 1718.085566] mqueue_inode_cache 13KB 22KB [ 1718.095613] bio_post_read_ctx 14KB 15KB [ 1718.104522] bio-2 14KB 15KB [ 1718.109893] jfs_mp 7KB 7KB [ 1718.123430] cifs_small_rq 15KB 16KB [ 1718.128820] cifs_request 67KB 67KB [ 1718.139195] cifs_mpx_ids 0KB 7KB [ 1718.146589] nfs_commit_data 3KB 14KB [ 1718.155588] nfs_write_data 34KB 44KB [ 1718.164942] ext4_system_zone 1KB 7KB [ 1718.170335] bio-1 1KB 7KB [ 1718.177704] pid_namespace 3KB 11KB [ 1718.187299] rpc_buffers 17KB 25KB [ 1718.196574] rpc_tasks 2KB 7KB [ 1718.202249] UNIX 1732KB 1751KB [ 1718.207894] tcp_bind_bucket 2KB 4KB [ 1718.215578] ip_fib_trie 34KB 47KB [ 1718.232299] ip_fib_alias 158KB 189KB [ 1718.237687] ip_dst_cache 10KB 16KB [ 1718.246454] RAW 63KB 75KB [ 1718.257560] UDP 54KB 67KB [ 1718.264695] TCP 8KB 11KB [ 1718.270059] hugetlbfs_inode_cache 3KB 15KB [ 1718.280054] fscache_cookie_jar 1KB 11KB [ 1718.285641] eventpoll_pwq 28KB 67KB [ 1718.295382] eventpoll_epi 52KB 63KB [ 1718.300821] inotify_inode_mark 11KB 31KB [ 1718.306347] request_queue 199KB 199KB [ 1718.315704] blkdev_requests 1KB 3KB [ 1718.321299] blkdev_ioc 26KB 38KB [ 1718.326669] bio-0 783KB 810KB [ 1718.334291] biovec-max 1518KB 1518KB [ 1718.339686] biovec-64 860KB 945KB [ 1718.347319] biovec-16 98KB 105KB [ 1718.354317] bio_integrity_payload 1KB 8KB [ 1718.360074] khugepaged_mm_slot 3KB 31KB [ 1718.365696] uid_cache 0KB 4KB [ 1718.376583] dmaengine-unmap-2 0KB 3KB [ 1718.382038] skbuff_fclone_cache 31KB 78KB [ 1718.387672] skbuff_head_cache 8033KB 8036KB [ 1718.396683] configfs_dir_cache 3KB 7KB [ 1718.402217] file_lock_cache 33KB 87KB [ 1718.407578] file_lock_ctx 9KB 11KB [ 1718.417163] fsnotify_mark_connector 5KB 23KB [ 1718.425972] net_namespace 87KB 87KB [ 1718.433495] shmem_inode_cache 8045KB 8294KB [ 1718.438876] task_delay_info 251KB 387KB [ 1718.449608] taskstats 22KB 91KB [ 1718.457514] proc_dir_entry 916KB 948KB [ 1718.470076] pde_opener 19KB 58KB [ 1718.478562] seq_file 270KB 433KB [ 1718.490606] sigqueue 54KB 66KB [ 1718.499150] kernfs_node_cache 18164KB 18179KB [ 1718.508925] mnt_cache 209KB 232KB [ 1718.515590] filp 7592KB 7953KB [ 1718.521061] names_cache 117631KB 117669KB [ 1718.526524] iint_cache 30KB 43KB [ 1718.533166] key_jar 4KB 7KB [ 1718.538541] uts_namespace 4KB 7KB [ 1718.550877] nsproxy 3KB 7KB [ 1718.556242] vm_area_struct 3228KB 4207KB [ 1718.562400] mm_struct 492KB 780KB [ 1718.567785] fs_cache 274KB 384KB [ 1718.580160] files_cache 941KB 1080KB [ 1718.585692] signal_cache 1709KB 1983KB [ 1718.595654] sighand_cache 615KB 631KB [ 1718.601943] task_struct 7814KB 7846KB [ 1718.607410] cred_jar 2353KB 3020KB [ 1718.612835] anon_vma_chain 989KB 1555KB [ 1718.618202] anon_vma 134KB 327KB [ 1718.625853] pid 159KB 236KB [ 1718.635051] Acpi-Operand 156KB 202KB [ 1718.640431] Acpi-ParseExt 9KB 11KB [ 1718.645844] Acpi-Parse 41KB 47KB [ 1718.656212] Acpi-State 52KB 63KB [ 1718.668652] Acpi-Namespace 20KB 27KB [ 1718.676059] numa_policy 0KB 3KB [ 1718.686738] debug_objects_cache 1549KB 1968KB [ 1718.696204] trace_event_file 297KB 298KB [ 1718.701618] ftrace_event_field 398KB 401KB [ 1718.707157] pool_workqueue 145KB 156KB [ 1718.715538] page->ptl 464KB 1039KB [ 1718.726917] kmalloc-2097152 2050KB 2050KB [ 1718.732702] kmalloc-524288 2056KB 2056KB [ 1718.738089] kmalloc-262144 1290KB 1290KB [ 1718.751177] kmalloc-131072 650KB 650KB [ 1718.756561] kmalloc-65536 2640KB 2706KB [ 1718.762141] kmalloc-32768 2112KB 2244KB [ 1718.767519] kmalloc-16384 1254KB 1254KB [ 1718.775214] kmalloc-8192 4941KB 5007KB [ 1718.780585] kmalloc-4096 27421KB 27459KB [ 1718.790058] kmalloc-2048 16502KB 17671KB [ 1718.796505] kmalloc-1024 12521KB 13820KB [ 1718.807543] kmalloc-512 15517KB 15570KB [ 1718.813130] kmalloc-256 5405KB 6333KB [ 1718.818484] kmalloc-128 1262KB 1724KB [ 1718.827613] kmalloc-96 3411KB 4404KB [ 1718.836348] kmalloc-64 2660KB 3752KB [ 1718.843989] kmalloc-32 1937KB 2476KB [ 1718.849356] kmalloc-192 2171KB 3068KB [ 1718.857544] kmem_cache 177KB 183KB [ 1718.867081] Out of memory (oom_kill_allocating_task): Kill process 8103 (syz-fuzzer) score 0 or sacrifice child [ 1718.878669] Killed process 22230 (syz-executor.5) total-vm:48512kB, anon-rss:428kB, file-rss:0kB, shmem-rss:0kB [ 1718.904576] rs:main Q:Reg invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1718.920869] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1718.925930] CPU: 0 PID: 21853 Comm: rs:main Q:Reg Not tainted 4.19.211-syzkaller #0 [ 1718.933767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1718.943123] Call Trace: [ 1718.945714] dump_stack+0x1fc/0x2ef [ 1718.949350] dump_header+0x15d/0xc3f [ 1718.953089] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1718.958209] ? ___ratelimit+0x319/0x590 [ 1718.962194] oom_kill_process.cold+0x10/0x692 [ 1718.966696] ? check_preemption_disabled+0x41/0x280 [ 1718.971722] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1718.977102] out_of_memory+0x1072/0x1390 [ 1718.981185] ? oom_killer_disable+0x270/0x270 [ 1718.985696] ? mutex_trylock+0x15f/0x1a0 [ 1718.989768] __alloc_pages_nodemask+0x23a2/0x2890 [ 1718.994649] ? find_get_entry+0x4cd/0x8a0 [ 1718.998826] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1719.003708] alloc_pages_current+0x193/0x2a0 [ 1719.008126] filemap_fault+0x146e/0x2180 [ 1719.012230] ext4_filemap_fault+0x84/0xb0 [ 1719.016397] __do_fault+0x10b/0x4b0 [ 1719.020028] __handle_mm_fault+0x273b/0x41c0 [ 1719.024440] ? vm_insert_page+0x9c0/0x9c0 [ 1719.028592] ? lock_downgrade+0x720/0x720 [ 1719.032754] ? check_preemption_disabled+0x41/0x280 [ 1719.037778] handle_mm_fault+0x436/0xb10 [ 1719.041850] __do_page_fault+0x68e/0xd60 [ 1719.045938] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1719.050956] ? spurious_fault+0x840/0x840 [ 1719.055102] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1719.059948] ? page_fault+0x8/0x30 [ 1719.063487] page_fault+0x1e/0x30 [ 1719.066942] RIP: 0033:0x7faadbb582b0 [ 1719.070658] Code: Bad RIP value. [ 1719.074031] RSP: 002b:00007faad9118a78 EFLAGS: 00010246 [ 1719.079386] RAX: 0000000000000000 RBX: 000055a016d0f4b0 RCX: 0000000000000000 [ 1719.086657] RDX: 00000000000000d8 RSI: 00007faad0008720 RDI: 000055a016d0f4b0 [ 1719.093946] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1719.101220] R10: 0000000000000000 R11: 0000000000000000 R12: 00007faad00306e0 [ 1719.108490] R13: 0000000000000000 R14: 000055a016d08480 R15: 0000000000000002 [ 1719.123824] Mem-Info: [ 1719.130749] active_anon:16711 inactive_anon:35218 isolated_anon:0 [ 1719.130749] active_file:0 inactive_file:41 isolated_file:0 [ 1719.130749] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1719.130749] slab_reclaimable:13517 slab_unreclaimable:117282 [ 1719.130749] mapped:18610 shmem:35928 pagetables:552 bounce:0 [ 1719.130749] free:25293 free_pcp:54 free_cma:0 [ 1719.252426] Node 0 active_anon:63808kB inactive_anon:40328kB active_file:0kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44208kB dirty:0kB writeback:0kB shmem:42444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1719.308116] Node 1 active_anon:3036kB inactive_anon:100544kB active_file:32kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30232kB dirty:0kB writeback:0kB shmem:101268kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1719.480640] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1719.682038] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1719.687120] Node 0 DMA32 free:35832kB min:35996kB low:44992kB high:53988kB active_anon:63808kB inactive_anon:40328kB active_file:0kB inactive_file:472kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7648kB pagetables:1864kB bounce:0kB free_pcp:1732kB local_pcp:156kB free_cma:0kB [ 1719.855461] lowmem_reserve[]: 0 0 1 1 1 [ 1719.878492] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1719.917739] lowmem_reserve[]: 0 0 0 0 0 [ 1719.934451] Node 1 Normal free:53288kB min:53876kB low:67344kB high:80812kB active_anon:3012kB inactive_anon:100544kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:340kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1720.190512] lowmem_reserve[]: 0 0 0 0 0 [ 1720.196905] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10980kB [ 1720.348354] Node 0 DMA32: 1570*4kB (ME) 717*8kB (ME) 147*16kB (UME) 42*32kB (UME) 18*64kB (M) 11*128kB (UM) 10*256kB (M) 4*512kB (UM) 1*1024kB (M) 6*2048kB (U) 0*4096kB = 36192kB [ 1720.477065] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1720.560578] Node 1 Normal: 322*4kB (ME) 257*8kB (UME) 207*16kB (UME) 145*32kB (ME) 30*64kB (UME) 5*128kB (UME) 3*256kB (ME) 3*512kB (UM) 1*1024kB (E) 2*2048kB (ME) 8*4096kB (U) = 54048kB [ 1720.693792] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1720.748621] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1720.818029] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1720.910608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1720.919226] 35943 total pagecache pages [ 1721.003899] 0 pages in swap cache [ 1721.007395] Swap cache stats: add 0, delete 0, find 0/0 [ 1721.062877] Free swap = 0kB [ 1721.065927] Total swap = 0kB [ 1721.068967] 2097051 pages RAM [ 1721.117943] 0 pages HighMem/MovableOnly [ 1721.150531] 369649 pages reserved [ 1721.154011] 0 pages cma reserved [ 1721.157383] Unreclaimable slab info: [ 1721.215096] Name Used Total [ 1721.241402] pid_2 15KB 96KB [ 1721.246864] batadv_tt_change_cache 4KB 7KB [ 1721.277917] batadv_tl_cache 11KB 16KB [ 1721.329370] TIPC 19KB 45KB [ 1721.365070] SCTPv6 22KB 37KB [ 1721.400558] DCCPv6 17KB 30KB [ 1721.406059] DCCP 16KB 28KB [ 1721.468979] L2TP/IPv6 4KB 6KB [ 1721.495078] RXRPC 16KB 26KB [ 1721.535018] rxrpc_call_jar 103KB 126KB [ 1721.540429] bridge_fdb_cache 15KB 27KB [ 1721.599402] fib6_nodes 221KB 264KB [ 1721.631656] ip6_dst_cache 667KB 667KB [ 1721.637076] RAWv6 102KB 114KB [ 1721.740387] UDPv6 31KB 45KB [ 1721.767321] TCPv6 24KB 30KB [ 1721.805574] nf_conntrack 8KB 11KB [ 1721.836997] t10_alua_lu_gp_cache 0KB 3KB [ 1721.895017] sd_ext_cdb 0KB 7KB [ 1721.900422] scsi_sense_cache 1056KB 1060KB [ 1721.962235] virtio_scsi_cmd 16KB 16KB [ 1721.967648] sgpool-128 8KB 8KB [ 1722.048800] sgpool-64 4KB 12KB [ 1722.082562] sgpool-32 2KB 15KB [ 1722.087989] sgpool-16 1KB 7KB [ 1722.148958] sgpool-8 0KB 7KB [ 1722.180177] mqueue_inode_cache 13KB 22KB [ 1722.216254] bio_post_read_ctx 14KB 15KB [ 1722.243962] bio-2 14KB 15KB [ 1722.249372] jfs_mp 7KB 7KB [ 1722.276357] cifs_small_rq 15KB 16KB [ 1722.306313] cifs_request 67KB 67KB [ 1722.346506] cifs_mpx_ids 0KB 7KB [ 1722.380051] nfs_commit_data 3KB 14KB [ 1722.418125] nfs_write_data 34KB 44KB [ 1722.450946] ext4_system_zone 1KB 7KB [ 1722.456372] bio-1 1KB 7KB [ 1722.528340] pid_namespace 2KB 11KB [ 1722.566540] rpc_buffers 17KB 25KB [ 1722.621738] rpc_tasks 2KB 7KB [ 1722.627165] UNIX 1676KB 1736KB [ 1722.731457] tcp_bind_bucket 1KB 4KB [ 1722.736894] ip_fib_trie 33KB 47KB [ 1722.816811] ip_fib_alias 157KB 189KB [ 1722.854796] ip_dst_cache 9KB 16KB [ 1722.860293] RAW 61KB 75KB [ 1722.887277] UDP 45KB 67KB [ 1722.950166] TCP 8KB 11KB [ 1722.958928] hugetlbfs_inode_cache 3KB 15KB [ 1722.985421] fscache_cookie_jar 1KB 11KB [ 1723.007665] eventpoll_pwq 27KB 67KB [ 1723.020216] eventpoll_epi 50KB 63KB [ 1723.028235] inotify_inode_mark 11KB 31KB [ 1723.043093] request_queue 199KB 199KB [ 1723.048487] blkdev_requests 1KB 3KB [ 1723.059229] blkdev_ioc 23KB 38KB [ 1723.082980] bio-0 829KB 855KB [ 1723.089256] biovec-max 1518KB 1518KB [ 1723.094705] biovec-64 947KB 952KB [ 1723.100069] biovec-16 98KB 105KB [ 1723.123711] bio_integrity_payload 1KB 8KB [ 1723.129470] khugepaged_mm_slot 3KB 31KB [ 1723.135079] uid_cache 0KB 4KB [ 1723.158614] dmaengine-unmap-2 0KB 3KB [ 1723.164228] skbuff_fclone_cache 31KB 78KB [ 1723.169798] skbuff_head_cache 8308KB 8310KB [ 1723.195654] configfs_dir_cache 3KB 7KB [ 1723.216745] file_lock_cache 33KB 87KB [ 1723.222221] file_lock_ctx 9KB 11KB [ 1723.227596] fsnotify_mark_connector 5KB 23KB [ 1723.251209] net_namespace 78KB 87KB [ 1723.256615] shmem_inode_cache 8045KB 8294KB [ 1723.279978] task_delay_info 241KB 387KB [ 1723.285449] taskstats 21KB 91KB [ 1723.309364] proc_dir_entry 898KB 948KB [ 1723.314854] pde_opener 16KB 58KB [ 1723.320232] seq_file 264KB 433KB [ 1723.343854] sigqueue 54KB 66KB [ 1723.349257] kernfs_node_cache 18158KB 18175KB [ 1723.354681] mnt_cache 209KB 232KB [ 1723.360049] filp 7531KB 7950KB [ 1723.384512] names_cache 116611KB 116649KB [ 1723.389911] iint_cache 30KB 43KB [ 1723.413781] key_jar 4KB 7KB [ 1723.419186] uts_namespace 3KB 7KB [ 1723.424662] nsproxy 3KB 7KB [ 1723.430037] vm_area_struct 3162KB 4203KB [ 1723.453871] mm_struct 476KB 780KB [ 1723.459277] fs_cache 260KB 384KB [ 1723.464729] files_cache 917KB 1072KB [ 1723.470142] signal_cache 1673KB 1983KB [ 1723.479604] sighand_cache 589KB 631KB [ 1723.489960] task_struct 7814KB 7833KB [ 1723.499167] cred_jar 2329KB 3020KB [ 1723.519205] anon_vma_chain 973KB 1551KB [ 1723.555899] anon_vma 123KB 327KB [ 1723.569281] pid 152KB 236KB [ 1723.589894] Acpi-Operand 156KB 202KB [ 1723.596891] Acpi-ParseExt 9KB 11KB [ 1723.617210] Acpi-Parse 41KB 47KB [ 1723.626693] Acpi-State 52KB 63KB [ 1723.647428] Acpi-Namespace 20KB 27KB [ 1723.652923] numa_policy 0KB 3KB [ 1723.658298] debug_objects_cache 1547KB 1968KB [ 1723.678595] trace_event_file 297KB 298KB [ 1723.684083] ftrace_event_field 398KB 401KB [ 1723.689548] pool_workqueue 134KB 156KB [ 1723.711653] page->ptl 460KB 1039KB [ 1723.717089] kmalloc-2097152 2050KB 2050KB [ 1723.747193] kmalloc-524288 2056KB 2056KB [ 1723.752690] kmalloc-262144 1290KB 1290KB [ 1723.758063] kmalloc-131072 650KB 650KB [ 1723.792815] kmalloc-65536 2640KB 2706KB [ 1723.798219] kmalloc-32768 2112KB 2178KB [ 1723.822329] kmalloc-16384 1221KB 1254KB [ 1723.827783] kmalloc-8192 4908KB 4983KB [ 1723.857427] kmalloc-4096 27353KB 27365KB [ 1723.865437] kmalloc-2048 16502KB 17671KB [ 1723.888515] kmalloc-1024 12642KB 13820KB [ 1723.899174] kmalloc-512 16041KB 16087KB [ 1723.930216] kmalloc-256 5391KB 6333KB [ 1723.957714] kmalloc-128 1256KB 1724KB [ 1723.965664] kmalloc-96 3463KB 4404KB [ 1723.993548] kmalloc-64 2648KB 3748KB [ 1723.999065] kmalloc-32 1937KB 2476KB [ 1724.029851] kmalloc-192 2164KB 3068KB [ 1724.059413] kmem_cache 177KB 183KB [ 1724.064927] Out of memory (oom_kill_allocating_task): Kill process 21853 (rs:main Q:Reg) score 0 or sacrifice child [ 1724.087507] Killed process 21835 (rsyslogd) total-vm:254332kB, anon-rss:860kB, file-rss:0kB, shmem-rss:0kB [ 1724.163972] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1724.164967] oom_reaper: reaped process 22892 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 1724.203448] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1724.208257] CPU: 1 PID: 8100 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 1724.215846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1724.225204] Call Trace: [ 1724.227798] dump_stack+0x1fc/0x2ef [ 1724.231451] dump_header+0x15d/0xc3f [ 1724.235163] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1724.240261] ? ___ratelimit+0x319/0x590 [ 1724.244248] oom_kill_process.cold+0x10/0x692 [ 1724.248751] ? check_preemption_disabled+0x41/0x280 [ 1724.253779] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1724.259202] out_of_memory+0x1072/0x1390 [ 1724.263277] ? oom_killer_disable+0x270/0x270 [ 1724.267817] ? mutex_trylock+0x15f/0x1a0 [ 1724.271881] __alloc_pages_nodemask+0x23a2/0x2890 [ 1724.276727] ? find_get_entry+0x4cd/0x8a0 [ 1724.280877] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1724.285732] alloc_pages_current+0x193/0x2a0 [ 1724.290139] filemap_fault+0x146e/0x2180 [ 1724.294311] ext4_filemap_fault+0x84/0xb0 [ 1724.298476] __do_fault+0x10b/0x4b0 [ 1724.302191] __handle_mm_fault+0x273b/0x41c0 [ 1724.306692] ? vm_insert_page+0x9c0/0x9c0 [ 1724.310944] ? __fget+0x356/0x510 [ 1724.314405] ? check_preemption_disabled+0x41/0x280 [ 1724.319420] handle_mm_fault+0x436/0xb10 [ 1724.323478] __do_page_fault+0x68e/0xd60 [ 1724.327561] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1724.332571] ? spurious_fault+0x840/0x840 [ 1724.336717] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1724.341560] ? page_fault+0x8/0x30 [ 1724.345107] page_fault+0x1e/0x30 [ 1724.348641] RIP: 0033:0x42f960 [ 1724.351838] Code: Bad RIP value. [ 1724.355354] RSP: 002b:000000c00005f8c8 EFLAGS: 00010212 [ 1724.360711] RAX: 000000c00005f900 RBX: 00007f2149eb28d0 RCX: 00000000000000e9 [ 1724.367976] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000010 [ 1724.375242] RBP: 000000c00005ff20 R08: 000000c00005f924 R09: 0000000001f7e068 [ 1724.382612] R10: 00000000000000e9 R11: 0000000000000072 R12: 00000000000000e9 [ 1724.390047] R13: 000000c001240000 R14: 000000c0000004e0 R15: 00007f214a1d34c3 [ 1724.494790] Mem-Info: [ 1724.497262] active_anon:15943 inactive_anon:35218 isolated_anon:0 [ 1724.497262] active_file:22 inactive_file:12 isolated_file:1 [ 1724.497262] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1724.497262] slab_reclaimable:13511 slab_unreclaimable:116804 [ 1724.497262] mapped:18601 shmem:35928 pagetables:562 bounce:0 [ 1724.497262] free:13764 free_pcp:124 free_cma:0 [ 1724.534318] Node 0 active_anon:60860kB inactive_anon:40328kB active_file:68kB inactive_file:216kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:44172kB dirty:0kB writeback:0kB shmem:42444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1724.579372] Node 1 active_anon:2912kB inactive_anon:100544kB active_file:20kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30232kB dirty:0kB writeback:0kB shmem:101268kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1724.653182] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1724.690455] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1724.695545] Node 0 DMA32 free:18472kB min:35996kB low:44992kB high:53988kB active_anon:61156kB inactive_anon:40328kB active_file:88kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:1908kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1724.736258] lowmem_reserve[]: 0 0 1 1 1 [ 1724.744158] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1724.780987] lowmem_reserve[]: 0 0 0 0 0 [ 1724.785021] Node 1 Normal free:26748kB min:53876kB low:67344kB high:80812kB active_anon:3012kB inactive_anon:100544kB active_file:4kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:340kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1724.827634] lowmem_reserve[]: 0 0 0 0 0 [ 1724.838793] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 1724.894149] Node 0 DMA32: 1739*4kB (UME) 711*8kB (UME) 126*16kB (UME) 28*32kB (UME) 12*64kB (UM) 7*128kB (UM) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17988kB [ 1724.926900] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1724.977226] Node 1 Normal: 300*4kB (UME) 242*8kB (ME) 203*16kB (UME) 144*32kB (ME) 31*64kB (UME) 8*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 26800kB [ 1725.003125] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1725.015573] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1725.040232] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1725.066562] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1725.079754] 35955 total pagecache pages [ 1725.099493] 0 pages in swap cache [ 1725.103047] Swap cache stats: add 0, delete 0, find 0/0 [ 1725.108416] Free swap = 0kB [ 1725.118929] Total swap = 0kB [ 1725.127485] 2097051 pages RAM [ 1725.132375] 0 pages HighMem/MovableOnly [ 1725.136436] 369649 pages reserved [ 1725.139872] 0 pages cma reserved [ 1725.143267] syz-executor.1: vmalloc: allocation failure, allocated 1711108096 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1725.143276] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1725.143302] CPU: 0 PID: 22892 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1725.143309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1725.143314] Call Trace: [ 1725.143333] dump_stack+0x1fc/0x2ef [ 1725.143353] warn_alloc.cold+0x7b/0x18f [ 1725.167430] Unreclaimable slab info: [ 1725.170350] ? zone_watermark_ok_safe+0x260/0x260 [ 1725.170386] __vmalloc_area_node+0x4fd/0x780 [ 1725.179732] Name Used Total [ 1725.182318] ? __vmalloc_node_range+0x180/0x180 [ 1725.182333] ? _raw_spin_unlock+0x29/0x40 [ 1725.182344] ? __get_vm_area_node+0x2e2/0x3a0 [ 1725.182364] __vmalloc_node_range+0xed/0x180 [ 1725.182380] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1725.182397] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1725.195289] pid_2 15KB 96KB [ 1725.198800] vmalloc_user+0x70/0xe0 [ 1725.204368] batadv_tt_change_cache 3KB 7KB [ 1725.208757] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1725.220101] batadv_tl_cache 11KB 16KB [ 1725.222099] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1725.222116] __vb2_queue_alloc+0x472/0xe60 [ 1725.222142] vb2_core_create_bufs+0x273/0x7e0 [ 1725.222159] ? __vb2_queue_free+0x870/0x870 [ 1725.228669] TIPC 19KB 45KB [ 1725.230884] ? mutex_trylock+0x1a0/0x1a0 [ 1725.230901] ? __video_do_ioctl+0x632/0xcd0 [ 1725.230921] vb2_create_bufs+0x332/0x620 [ 1725.230939] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1725.230952] ? __video_do_ioctl+0x632/0xcd0 [ 1725.230966] ? mutex_trylock+0x1a0/0x1a0 [ 1725.244202] SCTPv6 22KB 37KB [ 1725.245306] ? mark_held_locks+0xf0/0xf0 [ 1725.254478] DCCPv6 17KB 30KB [ 1725.255416] vb2_ioctl_create_bufs+0x20d/0x360 [ 1725.267480] DCCP 16KB 28KB [ 1725.269200] ? memset+0x20/0x40 [ 1725.277114] L2TP/IPv6 4KB 6KB [ 1725.277990] v4l_create_bufs+0xb2/0x160 [ 1725.290105] RXRPC 16KB 26KB [ 1725.291727] __video_do_ioctl+0x49a/0xcd0 [ 1725.291748] ? v4l_querycap+0x340/0x340 [ 1725.291766] ? __might_fault+0x192/0x1d0 [ 1725.291780] ? v4l_querycap+0x340/0x340 [ 1725.291794] video_usercopy+0x13f/0xfa0 [ 1725.291814] ? v4l_enumstd+0x60/0x60 [ 1725.312847] rxrpc_call_jar 103KB 126KB [ 1725.314763] ? do_futex+0x171/0x1880 [ 1725.318852] bridge_fdb_cache 15KB 27KB [ 1725.324204] ? mark_held_locks+0xf0/0xf0 [ 1725.324220] ? debug_check_no_obj_freed+0x201/0x490 [ 1725.324242] ? video_usercopy+0xfa0/0xfa0 [ 1725.324253] v4l2_ioctl+0x147/0x1a0 [ 1725.324266] ? video_devdata+0xa0/0xa0 [ 1725.324282] do_vfs_ioctl+0xcdb/0x12e0 [ 1725.324302] ? lock_downgrade+0x720/0x720 [ 1725.341747] fib6_nodes 221KB 264KB [ 1725.342879] ? check_preemption_disabled+0x41/0x280 [ 1725.346847] ip6_dst_cache 663KB 667KB [ 1725.352337] ? ioctl_preallocate+0x200/0x200 [ 1725.352353] ? __fget+0x356/0x510 [ 1725.352368] ? do_dup2+0x450/0x450 [ 1725.352387] ? __se_sys_futex+0x298/0x3b0 [ 1725.352405] ksys_ioctl+0x9b/0xc0 [ 1725.352424] __x64_sys_ioctl+0x6f/0xb0 [ 1725.352439] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1725.352452] do_syscall_64+0xf9/0x620 [ 1725.352472] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1725.352486] RIP: 0033:0x7ff9055210f9 [ 1725.370260] RAWv6 102KB 108KB [ 1725.372662] Code: Bad RIP value. [ 1725.372669] RSP: 002b:00007ff903a93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1725.372682] RAX: ffffffffffffffda RBX: 00007ff905640f80 RCX: 00007ff9055210f9 [ 1725.372689] RDX: 0000000020000640 RSI: 00000000c100565c RDI: 0000000000000003 [ 1725.372696] RBP: 00007ff90557cae9 R08: 0000000000000000 R09: 0000000000000000 [ 1725.372703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1725.372711] R13: 00007ffefb208e4f R14: 00007ff903a93300 R15: 0000000000022000 [ 1725.387963] Mem-Info: [ 1725.405200] UDPv6 31KB 45KB [ 1725.424614] active_anon:15904 inactive_anon:35218 isolated_anon:0 [ 1725.424614] active_file:13 inactive_file:14 isolated_file:0 [ 1725.424614] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1725.424614] slab_reclaimable:13511 slab_unreclaimable:116443 [ 1725.424614] mapped:18576 shmem:35928 pagetables:530 bounce:0 [ 1725.424614] free:13841 free_pcp:124 free_cma:0 [ 1725.439648] TCPv6 24KB 30KB [ 1725.457538] Node 0 active_anon:60752kB inactive_anon:40328kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44072kB dirty:0kB writeback:0kB shmem:42444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1725.464061] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1725.478621] nf_conntrack 8KB 11KB [ 1725.498642] Node 1 active_anon:2864kB inactive_anon:100544kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30232kB dirty:0kB writeback:0kB shmem:101268kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1725.508927] t10_alua_lu_gp_cache 0KB 3KB [ 1725.539069] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1725.579773] sd_ext_cdb 0KB 7KB [ 1725.627454] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1725.653211] scsi_sense_cache 1056KB 1060KB [ 1725.701232] virtio_scsi_cmd 16KB 16KB [ 1725.706744] sgpool-128 8KB 8KB [ 1725.707196] Node 0 DMA32 free:17736kB min:35996kB low:44992kB high:53988kB active_anon:60752kB inactive_anon:40328kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:1820kB bounce:0kB free_pcp:236kB local_pcp:236kB free_cma:0kB [ 1725.716855] sgpool-64 4KB 12KB [ 1725.753835] sgpool-32 2KB 15KB [ 1725.759211] sgpool-16 1KB 7KB [ 1725.765584] lowmem_reserve[]: 0 0 1 1 1 [ 1725.766846] sgpool-8 0KB 7KB [ 1725.769592] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1725.779082] mqueue_inode_cache 13KB 22KB [ 1725.814440] bio_post_read_ctx 14KB 15KB [ 1725.819895] bio-2 14KB 15KB [ 1725.825879] lowmem_reserve[]: 0 0 0 0 0 [ 1725.827431] jfs_mp 7KB 7KB [ 1725.829881] Node 1 Normal free:26800kB min:53876kB low:67344kB high:80812kB active_anon:2864kB inactive_anon:100544kB active_file:0kB inactive_file:68kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:300kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1725.839179] cifs_small_rq 15KB 16KB [ 1725.880936] cifs_request 67KB 67KB [ 1725.886322] cifs_mpx_ids 0KB 7KB [ 1725.889954] lowmem_reserve[]: 0 0 0 0 0 [ 1725.896420] nfs_commit_data 3KB 14KB [ 1725.900100] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 1725.904183] nfs_write_data 34KB 44KB [ 1725.921939] Node 0 DMA32: 1740*4kB (ME) 712*8kB (UME) 118*16kB (ME) 25*32kB (ME) 12*64kB (UM) 7*128kB (UM) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17776kB [ 1725.925335] ext4_system_zone 1KB 7KB [ 1725.936948] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1725.937004] Node 1 Normal: 300*4kB (UME) 242*8kB (ME) 203*16kB (UME) 144*32kB (ME) 31*64kB (UME) 8*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (UE) 2*2048kB (ME) 1*4096kB (U) = 26800kB [ 1725.937104] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1725.937114] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1725.937128] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1725.949131] bio-1 1KB 7KB [ 1725.954062] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1725.975166] pid_namespace 2KB 11KB [ 1725.979379] 35955 total pagecache pages [ 1725.988337] rpc_buffers 17KB 25KB [ 1725.996873] 0 pages in swap cache [ 1725.996883] Swap cache stats: add 0, delete 0, find 0/0 [ 1725.996889] Free swap = 0kB [ 1725.996897] Total swap = 0kB [ 1726.006864] rpc_tasks 2KB 7KB [ 1726.011902] 2097051 pages RAM [ 1726.018321] UNIX 1629KB 1683KB [ 1726.020245] 0 pages HighMem/MovableOnly [ 1726.031405] tcp_bind_bucket 1KB 4KB [ 1726.034437] 369649 pages reserved [ 1726.037388] ip_fib_trie 33KB 47KB [ 1726.045211] 0 pages cma reserved [ 1726.045895] ip_fib_alias 157KB 189KB [ 1726.081628] ip_dst_cache 9KB 16KB [ 1726.087006] RAW 61KB 75KB [ 1726.093704] UDP 45KB 67KB [ 1726.099084] TCP 8KB 11KB [ 1726.100371] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1726.104545] hugetlbfs_inode_cache 3KB 15KB [ 1726.111038] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1726.116698] fscache_cookie_jar 1KB 11KB [ 1726.123801] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1726.128764] eventpoll_pwq 26KB 67KB [ 1726.135315] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1726.140661] eventpoll_epi 50KB 63KB [ 1726.147183] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1726.153314] inotify_inode_mark 11KB 31KB [ 1726.164587] request_queue 199KB 199KB [ 1726.169964] blkdev_requests 1KB 3KB [ 1726.175483] blkdev_ioc 22KB 38KB [ 1726.181031] bio-0 837KB 862KB [ 1726.186396] biovec-max 1518KB 1518KB [ 1726.191824] biovec-64 952KB 952KB [ 1726.197186] biovec-16 98KB 105KB [ 1726.202593] bio_integrity_payload 1KB 8KB [ 1726.208303] khugepaged_mm_slot 3KB 31KB [ 1726.213831] uid_cache 0KB 4KB [ 1726.219193] dmaengine-unmap-2 0KB 3KB [ 1726.224611] skbuff_fclone_cache 31KB 78KB [ 1726.230144] skbuff_head_cache 8428KB 8430KB [ 1726.235567] configfs_dir_cache 3KB 7KB [ 1726.241071] file_lock_cache 33KB 87KB [ 1726.246429] file_lock_ctx 9KB 11KB [ 1726.251841] fsnotify_mark_connector 5KB 23KB [ 1726.257732] net_namespace 78KB 78KB [ 1726.263138] shmem_inode_cache 8044KB 8294KB [ 1726.268497] task_delay_info 239KB 387KB [ 1726.274672] taskstats 27KB 91KB [ 1726.280066] proc_dir_entry 895KB 948KB [ 1726.285639] pde_opener 15KB 58KB [ 1726.291054] seq_file 261KB 433KB [ 1726.296415] sigqueue 53KB 66KB [ 1726.301835] kernfs_node_cache 18132KB 18163KB [ 1726.307196] mnt_cache 209KB 232KB [ 1726.312636] filp 7446KB 7950KB [ 1726.318004] names_cache 115855KB 115884KB [ 1726.323414] iint_cache 30KB 43KB [ 1726.328778] key_jar 4KB 7KB [ 1726.334253] uts_namespace 3KB 7KB [ 1726.339621] nsproxy 3KB 7KB [ 1726.345209] vm_area_struct 3127KB 4199KB [ 1726.350615] mm_struct 468KB 773KB [ 1726.355995] fs_cache 256KB 384KB [ 1726.361406] files_cache 911KB 1072KB [ 1726.367049] signal_cache 1670KB 1983KB [ 1726.372513] sighand_cache 582KB 631KB [ 1726.377888] task_struct 7833KB 7833KB [ 1726.383347] cred_jar 2305KB 3016KB [ 1726.388768] anon_vma_chain 960KB 1551KB [ 1726.394575] anon_vma 118KB 327KB [ 1726.399940] pid 150KB 236KB [ 1726.405351] Acpi-Operand 156KB 202KB [ 1726.415351] Acpi-ParseExt 9KB 11KB [ 1726.420781] Acpi-Parse 41KB 47KB [ 1726.426149] Acpi-State 52KB 63KB [ 1726.431557] Acpi-Namespace 20KB 27KB [ 1726.436924] numa_policy 0KB 3KB [ 1726.442339] debug_objects_cache 1546KB 1968KB [ 1726.447875] trace_event_file 297KB 298KB [ 1726.453295] ftrace_event_field 398KB 401KB [ 1726.458917] pool_workqueue 133KB 156KB [ 1726.464348] page->ptl 450KB 1039KB [ 1726.469769] kmalloc-2097152 2050KB 2050KB [ 1726.475204] kmalloc-524288 2056KB 2056KB [ 1726.480615] kmalloc-262144 1290KB 1290KB [ 1726.486089] kmalloc-131072 650KB 650KB [ 1726.491766] kmalloc-65536 2640KB 2706KB [ 1726.497136] kmalloc-32768 2112KB 2178KB [ 1726.502570] kmalloc-16384 1221KB 1221KB [ 1726.507931] kmalloc-8192 4859KB 4917KB [ 1726.513352] kmalloc-4096 27166KB 27204KB [ 1726.518720] kmalloc-2048 16434KB 17646KB [ 1726.524128] kmalloc-1024 12656KB 13820KB [ 1726.529494] kmalloc-512 16113KB 16113KB [ 1726.535626] kmalloc-256 5391KB 6333KB [ 1726.541037] kmalloc-128 1248KB 1724KB [ 1726.546403] kmalloc-96 3463KB 4404KB [ 1726.551814] kmalloc-64 2647KB 3748KB [ 1726.557179] kmalloc-32 1941KB 2476KB [ 1726.562611] kmalloc-192 2160KB 3068KB [ 1726.567982] kmem_cache 177KB 183KB [ 1726.573561] Out of memory (oom_kill_allocating_task): Kill process 8100 (syz-fuzzer) score 0 or sacrifice child [ 1726.583909] Killed process 18865 (syz-executor.4) total-vm:48512kB, anon-rss:424kB, file-rss:0kB, shmem-rss:0kB [ 1726.594526] oom_reaper: reaped process 18865 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 1729.159543] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1729.166501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1729.184513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1729.213828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1729.231947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1729.241906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1729.248681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1729.262652] device bridge_slave_1 left promiscuous mode [ 1729.268218] bridge0: port 2(bridge_slave_1) entered disabled state [ 1729.277156] device bridge_slave_0 left promiscuous mode [ 1729.283752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1729.297227] device veth1_macvtap left promiscuous mode [ 1729.303425] device veth0_macvtap left promiscuous mode [ 1729.308770] device veth1_vlan left promiscuous mode [ 1729.316239] device veth0_vlan left promiscuous mode [ 1731.213574] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.219198] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.278719] device hsr_slave_1 left promiscuous mode [ 1735.286150] device hsr_slave_0 left promiscuous mode [ 1735.303394] team0 (unregistering): Port device team_slave_1 removed [ 1735.315384] team0 (unregistering): Port device team_slave_0 removed [ 1735.326063] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1735.337242] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1735.367240] bond0 (unregistering): Released all slaves [ 1735.383604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1735.396858] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1735.404468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.415756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.423476] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 07:09:58 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="02"], 0x48}}, 0x90) 07:09:58 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0xcd, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000040)=0x7) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) 07:09:58 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3, 0x3b1, 0xffffffff}, &(0x7f00000001c0)={{0x4, 0x4, 0x475, 0x9f7}, &(0x7f0000000180)={{0x6, 0x9, 0x5}}}}, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:09:58 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x6}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000050000000000000006000000186000000b00d19b9a3ed44d39fc610000008c000006000000186500000c000000000000006b9f0000097a040008000000127700", @ANYRES32=0x1, @ANYBLOB="00000000b40b0000174af4ff01000000850000008d000000186800000c000000000000000900000018140000", @ANYRES32, @ANYBLOB="000000000000000018230000", @ANYRES32=r1, @ANYBLOB="00000000800000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xf, 0x3f, 0xfffffffd}, 0x10}, 0x80) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2, @pix_mp={0xffffffff, 0x4, 0x3132564e, 0x6, 0xb, [{0x3, 0xfff}, {0x7fffffff, 0x6}, {0x2, 0x2}, {0x10001, 0x1ff}, {0xe13, 0x2}, {0x7, 0x80000000}, {0x91, 0xc660}, {0x3, 0x3}], 0x20, 0x1, 0x3, 0x2, 0x5}}) 07:09:58 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)=@multiplanar_overlay={0x1, 0x1, 0x4, 0xe000, 0x3, {}, {0x3, 0x2, 0xfc, 0x0, 0x7f, 0x4, "c8ec8de5"}, 0x80000000, 0x3, {&(0x7f0000000140)=[{0x101, 0x5, {0x9}, 0x9}, {0x1, 0x9, {0xf2}, 0x1}]}, 0x200}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8}) 07:09:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x6, 0x3, 0x1, {0x1, @sliced={0x1, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8, 0x7ff, 0x80, 0x3, 0x0, 0x0, 0x7, 0x20, 0x0, 0x9], 0xd3e}}, 0x7ff}) 07:09:58 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="02"], 0x48}}, 0x90) 07:09:58 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="02"], 0x48}}, 0x90) 07:09:58 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="02071f07093b8621018fc320b491500f970000002bbd7000fbdbdf2502001000000004d6000004d500"], 0x48}}, 0x90) 07:09:58 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)=@multiplanar_overlay={0x1, 0x1, 0x4, 0xe000, 0x3, {}, {0x3, 0x2, 0xfc, 0x0, 0x7f, 0x4, "c8ec8de5"}, 0x80000000, 0x3, {&(0x7f0000000140)=[{0x101, 0x5, {0x9}, 0x9}, {0x1, 0x9, {0xf2}, 0x1}]}, 0x200}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8}) 07:09:58 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="0207"], 0x48}}, 0x90) 07:09:58 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="0207"], 0x48}}, 0x90) 07:09:58 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="0207"], 0x48}}, 0x90) [ 1736.958313] IPVS: ftp: loaded support on port[0] = 21 [ 1736.958685] IPVS: ftp: loaded support on port[0] = 21 [ 1737.301657] chnl_net:caif_netlink_parms(): no params data found [ 1737.333511] chnl_net:caif_netlink_parms(): no params data found [ 1737.473892] bridge0: port 1(bridge_slave_0) entered blocking state [ 1737.480681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.496398] device bridge_slave_0 entered promiscuous mode [ 1737.524868] bridge0: port 2(bridge_slave_1) entered blocking state [ 1737.531584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.539345] device bridge_slave_1 entered promiscuous mode [ 1737.546995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1737.558772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.568745] device bridge_slave_0 entered promiscuous mode [ 1737.593335] bridge0: port 2(bridge_slave_1) entered blocking state [ 1737.600584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.608518] device bridge_slave_1 entered promiscuous mode [ 1737.617242] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1737.639150] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1737.661815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1737.669552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1737.685028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1737.695476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1737.707503] device bridge_slave_1 left promiscuous mode [ 1737.716687] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.729107] device bridge_slave_0 left promiscuous mode [ 1737.738625] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.755517] device veth1_macvtap left promiscuous mode [ 1737.763819] device veth0_macvtap left promiscuous mode [ 1737.769173] device veth1_vlan left promiscuous mode [ 1737.782472] device veth0_vlan left promiscuous mode [ 1737.952006] device hsr_slave_1 left promiscuous mode [ 1737.969311] device hsr_slave_0 left promiscuous mode [ 1737.994259] team0 (unregistering): Port device team_slave_1 removed [ 1738.013397] team0 (unregistering): Port device team_slave_0 removed [ 1738.032997] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1738.052296] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1738.110718] bond0 (unregistering): Released all slaves [ 1738.129054] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1738.160091] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1738.182710] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1738.191284] team0: Port device team_slave_0 added [ 1738.205045] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1738.213619] team0: Port device team_slave_0 added [ 1738.219148] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1738.230316] team0: Port device team_slave_1 added [ 1738.235734] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1738.246459] team0: Port device team_slave_1 added [ 1738.284240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1738.291620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1738.318690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1738.332493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1738.338891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1738.366828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1738.379371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1738.386657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1738.415118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1738.436761] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1738.451144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1738.460744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1738.487679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1738.499836] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1738.512394] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1738.527749] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1738.574564] device hsr_slave_0 entered promiscuous mode [ 1738.592960] device hsr_slave_1 entered promiscuous mode [ 1738.615642] device hsr_slave_0 entered promiscuous mode [ 1738.621603] device hsr_slave_1 entered promiscuous mode [ 1738.628121] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1738.638982] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1738.649851] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1738.656992] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1738.889777] Bluetooth: hci1: command 0x0409 tx timeout [ 1738.958924] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1738.976134] Bluetooth: hci3: command 0x0409 tx timeout [ 1739.006304] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1739.119175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1739.137373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1739.146796] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1739.157924] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1739.169549] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1739.178608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1739.191716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1739.201521] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1739.212112] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1739.218186] 8021q: adding VLAN 0 to HW filter on device team0 [ 1739.228796] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1739.236196] 8021q: adding VLAN 0 to HW filter on device team0 [ 1739.243414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1739.252041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1739.262850] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1739.273779] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1739.283869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1739.297714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1739.307165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1739.313597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1739.327583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1739.336510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1739.350084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1739.356547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1739.368703] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1739.380354] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1739.387598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1739.396567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1739.405589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1739.435747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1739.458831] bridge0: port 2(bridge_slave_1) entered blocking state [ 1739.465283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1739.490159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1739.498164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1739.520107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1739.526481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1739.553632] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1739.563926] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1739.574232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1739.583696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1739.595933] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1739.606804] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1739.615652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1739.625265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1739.639217] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1739.650026] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1739.661058] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1739.668047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1739.678616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1739.693075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1739.704196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1739.715725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1739.726954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1739.740460] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1739.755650] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1739.765085] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1739.775199] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1739.784534] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1739.792927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1739.807089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1739.816284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1739.830207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1739.837742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1739.846755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1739.859231] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1739.881669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1739.892496] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1739.898575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1739.907670] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1739.915128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1739.923179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1739.930945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1739.938713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1739.952233] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1739.958294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1740.058661] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1740.079021] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1740.096348] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1740.107526] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1740.116887] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1740.133930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1740.142824] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1740.151641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1740.158418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1740.178508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1740.235325] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1740.246419] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1740.256233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1740.265780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1740.335541] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1740.356113] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1740.375593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1740.390853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1740.419288] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1740.437986] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1740.449360] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1740.467124] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1740.479853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1740.499378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1740.518675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1740.527556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1740.542823] device veth0_vlan entered promiscuous mode [ 1740.562064] device veth1_vlan entered promiscuous mode [ 1740.568285] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1740.587159] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1740.612597] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1740.624975] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1740.632619] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1740.640613] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1740.658380] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1740.676504] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1740.683619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1740.697425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1740.706004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1740.715045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1740.724404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1740.733459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1740.744678] device veth0_macvtap entered promiscuous mode [ 1740.753328] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1740.762800] device veth0_vlan entered promiscuous mode [ 1740.771905] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1740.779338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1740.789234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1740.800212] device veth1_macvtap entered promiscuous mode [ 1740.806731] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1740.819243] device veth1_vlan entered promiscuous mode [ 1740.827149] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1740.839445] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1740.851680] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1740.861666] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1740.875039] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1740.884692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1740.895264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1740.905625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1740.915722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1740.925282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1740.935564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1740.945123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1740.955226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1740.966398] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1740.974105] Bluetooth: hci1: command 0x041b tx timeout [ 1740.980390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1740.989368] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1740.998298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1741.006934] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1741.020015] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1741.027480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1741.041967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1741.056304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1741.065166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1741.080101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1741.094984] Bluetooth: hci3: command 0x041b tx timeout [ 1741.100907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1741.116523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1741.126626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1741.141503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1741.154565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1741.165546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1741.178647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1741.194797] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1741.203293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1741.218284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1741.228125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1741.242852] device veth0_macvtap entered promiscuous mode [ 1741.249356] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1741.301872] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1741.318925] device veth1_macvtap entered promiscuous mode [ 1741.332507] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1741.351773] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1741.363603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1741.374368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1741.385425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1741.396100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1741.406231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1741.417785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1741.428273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1741.438960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1741.448988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1741.462097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1741.473717] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1741.481816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1741.494273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1741.502757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1741.513590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1741.524555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1741.543310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1741.558250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1741.569036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1741.583688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1741.594460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1741.608959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1741.627349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1741.637988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1741.653681] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1741.663243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1741.677658] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1741.687487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1741.899117] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1741.914693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1741.945782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1741.978996] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1742.004596] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1742.017572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1742.029803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1742.036614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 07:10:04 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0xcd, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000040)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) 07:10:04 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="02071f07093b8621018fc320b491500f970000002bbd"], 0x48}}, 0x90) [ 1742.188461] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1742.212033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1742.219186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1742.257045] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1742.264303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1742.264582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1742.280171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1742.287048] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 07:10:05 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x0, 0x3b1, 0xffffffff}, &(0x7f00000001c0)={{0x4, 0x4, 0x475, 0x9f7}, &(0x7f0000000180)={{0x6, 0x9, 0x5}}}}, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) [ 1743.060398] Bluetooth: hci1: command 0x040f tx timeout [ 1743.130680] Bluetooth: hci3: command 0x040f tx timeout [ 1744.694848] oom_reaper: reaped process 23205 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 1744.730129] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1744.741771] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1744.746554] CPU: 1 PID: 8100 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 1744.754176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1744.763569] Call Trace: [ 1744.766173] dump_stack+0x1fc/0x2ef [ 1744.769822] dump_header+0x15d/0xc3f [ 1744.773547] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1744.778765] ? ___ratelimit+0x319/0x590 [ 1744.782748] oom_kill_process.cold+0x10/0x692 [ 1744.787255] ? check_preemption_disabled+0x41/0x280 [ 1744.792295] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1744.797593] out_of_memory+0x1072/0x1390 [ 1744.801666] ? oom_killer_disable+0x270/0x270 [ 1744.806184] ? mutex_trylock+0x15f/0x1a0 [ 1744.810394] __alloc_pages_nodemask+0x23a2/0x2890 [ 1744.815260] ? find_get_entry+0x4cd/0x8a0 [ 1744.819424] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1744.824307] alloc_pages_current+0x193/0x2a0 [ 1744.828736] filemap_fault+0x146e/0x2180 [ 1744.832843] ext4_filemap_fault+0x84/0xb0 [ 1744.836998] __do_fault+0x10b/0x4b0 [ 1744.840644] __handle_mm_fault+0x273b/0x41c0 [ 1744.845067] ? vm_insert_page+0x9c0/0x9c0 [ 1744.849249] ? check_preemption_disabled+0x41/0x280 [ 1744.854292] handle_mm_fault+0x436/0xb10 [ 1744.858367] __do_page_fault+0x68e/0xd60 [ 1744.862436] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1744.867485] ? spurious_fault+0x840/0x840 [ 1744.871639] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1744.876492] ? page_fault+0x8/0x30 [ 1744.880035] page_fault+0x1e/0x30 [ 1744.883494] RIP: 0033:0x40b725 [ 1744.886779] Code: Bad RIP value. [ 1744.890253] RSP: 002b:000000c00005fed0 EFLAGS: 00010202 [ 1744.895620] RAX: ffffffffffffff92 RBX: 0000000000000000 RCX: 00000000004675e3 [ 1744.902898] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001f4f7d8 [ 1744.910173] RBP: 000000c00005ff00 R08: 0000000000000000 R09: 0000000000000000 [ 1744.917452] R10: 000000c00005feb0 R11: 0000000000000206 R12: 000000c00005feb0 [ 1744.924725] R13: 000000c001240000 R14: 000000c0000004e0 R15: 00007f214a1d34c3 [ 1744.933021] Mem-Info: [ 1744.935457] active_anon:16387 inactive_anon:35219 isolated_anon:0 [ 1744.935457] active_file:11 inactive_file:12 isolated_file:0 [ 1744.935457] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1744.935457] slab_reclaimable:13620 slab_unreclaimable:117693 [ 1744.935457] mapped:22275 shmem:35933 pagetables:611 bounce:0 [ 1744.935457] free:13866 free_pcp:429 free_cma:0 [ 1744.968983] Node 0 active_anon:61896kB inactive_anon:40312kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58408kB dirty:0kB writeback:0kB shmem:42436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1744.997121] Node 1 active_anon:3652kB inactive_anon:100564kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30692kB dirty:0kB writeback:0kB shmem:101296kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1745.024419] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1745.050773] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1745.055810] Node 0 DMA32 free:17896kB min:35996kB low:44992kB high:53988kB active_anon:61896kB inactive_anon:40312kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:2016kB bounce:0kB free_pcp:1088kB local_pcp:580kB free_cma:0kB [ 1745.085296] lowmem_reserve[]: 0 0 1 1 1 [ 1745.089585] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1745.115789] lowmem_reserve[]: 0 0 0 0 0 [ 1745.120005] Node 1 Normal free:26904kB min:53876kB low:67344kB high:80812kB active_anon:3652kB inactive_anon:100564kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:544kB pagetables:428kB bounce:0kB free_pcp:524kB local_pcp:268kB free_cma:0kB [ 1745.129822] Bluetooth: hci1: command 0x0419 tx timeout [ 1745.149221] lowmem_reserve[]: 0 0 0 0 0 [ 1745.158051] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10872kB [ 1745.171361] Node 0 DMA32: 1284*4kB (MEH) 719*8kB (UMEH) 112*16kB (MEH) 40*32kB (MEH) 20*64kB (UMH) 9*128kB (UMH) 2*256kB (H) 2*512kB (UH) 0*1024kB 0*2048kB 0*4096kB = 17928kB [ 1745.187181] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1745.198322] Node 1 Normal: 360*4kB (UME) 304*8kB (UME) 250*16kB (UME) 160*32kB (UME) 43*64kB (UME) 8*128kB (UME) 4*256kB (UME) 0*512kB 1*1024kB (E) 2*2048kB (UE) 1*4096kB (M) = 27008kB [ 1745.215090] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1745.216940] Bluetooth: hci3: command 0x0419 tx timeout [ 1745.223988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1745.224000] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1745.246764] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1745.255399] 35956 total pagecache pages [ 1745.259405] 0 pages in swap cache [ 1745.262874] Swap cache stats: add 0, delete 0, find 0/0 [ 1745.263417] syz-executor.1: vmalloc: allocation failure, allocated 1687494656 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1745.268244] Free swap = 0kB [ 1745.268252] Total swap = 0kB [ 1745.288252] 2097051 pages RAM [ 1745.291953] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1745.297112] CPU: 1 PID: 23205 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1745.305025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1745.308989] 0 pages HighMem/MovableOnly [ 1745.314411] Call Trace: [ 1745.314447] dump_stack+0x1fc/0x2ef [ 1745.314464] warn_alloc.cold+0x7b/0x18f [ 1745.314482] ? zone_watermark_ok_safe+0x260/0x260 [ 1745.314495] ? retint_kernel+0x2d/0x2d [ 1745.314526] __vmalloc_area_node+0x4fd/0x780 [ 1745.314545] ? __vmalloc_node_range+0x180/0x180 [ 1745.314559] ? _raw_spin_unlock+0x29/0x40 [ 1745.314570] ? __get_vm_area_node+0x2e2/0x3a0 [ 1745.314588] __vmalloc_node_range+0xed/0x180 [ 1745.331175] 369649 pages reserved [ 1745.333638] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1745.337501] 0 pages cma reserved [ 1745.341901] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1745.341915] vmalloc_user+0x70/0xe0 [ 1745.341928] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1745.341940] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1745.341955] __vb2_queue_alloc+0x472/0xe60 [ 1745.341981] vb2_core_create_bufs+0x273/0x7e0 [ 1745.341995] ? __vb2_queue_free+0x870/0x870 [ 1745.342010] ? mutex_trylock+0x1a0/0x1a0 [ 1745.342028] ? __video_do_ioctl+0x632/0xcd0 [ 1745.358829] Unreclaimable slab info: [ 1745.359712] vb2_create_bufs+0x332/0x620 [ 1745.359730] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1745.359745] ? __video_do_ioctl+0x632/0xcd0 [ 1745.359758] ? mutex_trylock+0x1a0/0x1a0 [ 1745.359775] ? mark_held_locks+0xf0/0xf0 [ 1745.363235] Name Used Total [ 1745.367530] vb2_ioctl_create_bufs+0x20d/0x360 [ 1745.386603] pid_2 24KB 96KB [ 1745.388905] ? memset+0x20/0x40 [ 1745.413582] batadv_tt_change_cache 2KB 7KB [ 1745.414033] v4l_create_bufs+0xb2/0x160 [ 1745.418073] batadv_tl_cache 7KB 16KB [ 1745.423166] __video_do_ioctl+0x49a/0xcd0 [ 1745.423185] ? v4l_querycap+0x340/0x340 [ 1745.423203] ? __might_fault+0x192/0x1d0 [ 1745.423220] ? v4l_querycap+0x340/0x340 [ 1745.423236] video_usercopy+0x13f/0xfa0 [ 1745.423257] ? v4l_enumstd+0x60/0x60 [ 1745.423271] ? do_futex+0x171/0x1880 [ 1745.423289] ? mark_held_locks+0xf0/0xf0 [ 1745.441149] TIPC 25KB 45KB [ 1745.441218] ? debug_check_no_obj_freed+0x201/0x490 [ 1745.445787] SCTPv6 24KB 43KB [ 1745.451135] ? video_usercopy+0xfa0/0xfa0 [ 1745.451146] v4l2_ioctl+0x147/0x1a0 [ 1745.451159] ? video_devdata+0xa0/0xa0 [ 1745.451173] do_vfs_ioctl+0xcdb/0x12e0 [ 1745.451188] ? lock_downgrade+0x720/0x720 [ 1745.451202] ? check_preemption_disabled+0x41/0x280 [ 1745.451217] ? ioctl_preallocate+0x200/0x200 [ 1745.451232] ? __fget+0x356/0x510 [ 1745.451247] ? do_dup2+0x450/0x450 [ 1745.451262] ? __se_sys_futex+0x298/0x3b0 [ 1745.451279] ksys_ioctl+0x9b/0xc0 [ 1745.451292] __x64_sys_ioctl+0x6f/0xb0 [ 1745.451303] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1745.451316] do_syscall_64+0xf9/0x620 [ 1745.451339] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1745.451350] RIP: 0033:0x7ff9055210f9 [ 1745.451364] Code: Bad RIP value. [ 1745.451371] RSP: 002b:00007ff903a93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1745.451384] RAX: ffffffffffffffda RBX: 00007ff905640f80 RCX: 00007ff9055210f9 [ 1745.451392] RDX: 0000000020000640 RSI: 00000000c100565c RDI: 0000000000000003 [ 1745.451400] RBP: 00007ff90557cae9 R08: 0000000000000000 R09: 0000000000000000 [ 1745.451407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1745.451415] R13: 00007ffefb208e4f R14: 00007ff903a93300 R15: 0000000000022000 [ 1745.460712] Mem-Info: [ 1745.467606] DCCPv6 17KB 37KB [ 1745.473414] active_anon:16387 inactive_anon:35219 isolated_anon:0 [ 1745.473414] active_file:11 inactive_file:12 isolated_file:0 [ 1745.473414] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1745.473414] slab_reclaimable:13620 slab_unreclaimable:117615 [ 1745.473414] mapped:22275 shmem:35933 pagetables:611 bounce:0 [ 1745.473414] free:13920 free_pcp:403 free_cma:0 [ 1745.478977] DCCP 19KB 35KB [ 1745.482521] Node 0 active_anon:61896kB inactive_anon:40312kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58408kB dirty:0kB writeback:0kB shmem:42436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1745.482547] Node 1 active_anon:3652kB inactive_anon:100564kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30692kB dirty:0kB writeback:0kB shmem:101296kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1745.482555] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1745.497046] L2TP/IPv6 6KB 6KB [ 1745.499355] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1745.504268] RXRPC 16KB 26KB [ 1745.508067] Node 0 DMA32 free:17896kB min:35996kB low:44992kB high:53988kB active_anon:61896kB inactive_anon:40312kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:2016kB bounce:0kB free_pcp:1088kB local_pcp:580kB free_cma:0kB [ 1745.508100] lowmem_reserve[]: 0 0 1 1 1 [ 1745.508119] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1745.508155] lowmem_reserve[]: 0 0 0 0 0 [ 1745.508174] Node 1 Normal free:26904kB min:53876kB low:67344kB high:80812kB active_anon:3652kB inactive_anon:100564kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:544kB pagetables:428kB bounce:0kB free_pcp:524kB local_pcp:268kB free_cma:0kB [ 1745.508202] lowmem_reserve[]: 0 0 0 0 0 [ 1745.508221] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10872kB [ 1745.508287] Node 0 DMA32: 1284*4kB (UME) 719*8kB (UME) 112*16kB (UME) 40*32kB (UME) 20*64kB (UM) 9*128kB (UM) 2*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17928kB [ 1745.508360] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1745.508414] Node 1 Normal: 360*4kB (UME) 304*8kB (UME) 250*16kB (UME) 160*32kB (UME) 43*64kB (UME) 8*128kB (UME) 4*256kB (UME) 0*512kB 1*1024kB (E) 2*2048kB (UE) 1*4096kB (M) = 27008kB [ 1745.508501] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1745.508512] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1745.508522] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1745.508533] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1745.508539] 35956 total pagecache pages [ 1745.508553] 0 pages in swap cache [ 1745.508561] Swap cache stats: add 0, delete 0, find 0/0 [ 1745.508566] Free swap = 0kB [ 1745.508571] Total swap = 0kB [ 1745.508580] 2097051 pages RAM [ 1745.508585] 0 pages HighMem/MovableOnly [ 1745.508590] 369649 pages reserved [ 1745.508595] 0 pages cma reserved [ 1746.011825] rxrpc_call_jar 112KB 126KB [ 1746.017290] bridge_fdb_cache 19KB 27KB [ 1746.024699] fib6_nodes 238KB 264KB [ 1746.030322] ip6_dst_cache 620KB 660KB [ 1746.035779] RAWv6 102KB 114KB [ 1746.041217] UDPv6 39KB 45KB [ 1746.047115] TCPv6 24KB 30KB [ 1746.052635] nf_conntrack 14KB 18KB [ 1746.058059] t10_alua_lu_gp_cache 0KB 3KB [ 1746.063772] sd_ext_cdb 0KB 7KB [ 1746.069136] scsi_sense_cache 1056KB 1060KB [ 1746.074627] virtio_scsi_cmd 16KB 16KB [ 1746.080057] sgpool-128 8KB 8KB [ 1746.085439] sgpool-64 4KB 12KB [ 1746.091524] sgpool-32 2KB 15KB [ 1746.096894] sgpool-16 1KB 7KB [ 1746.102317] sgpool-8 0KB 7KB [ 1746.107690] mqueue_inode_cache 16KB 30KB [ 1746.113240] bio_post_read_ctx 14KB 15KB [ 1746.118678] bio-2 14KB 15KB [ 1746.126005] jfs_mp 7KB 7KB [ 1746.134500] cifs_small_rq 15KB 16KB [ 1746.142502] cifs_request 67KB 67KB [ 1746.147880] cifs_mpx_ids 0KB 7KB [ 1746.155823] nfs_commit_data 3KB 14KB [ 1746.163787] nfs_write_data 34KB 44KB [ 1746.172409] ext4_system_zone 1KB 7KB [ 1746.177912] bio-1 1KB 7KB [ 1746.185774] pid_namespace 4KB 11KB [ 1746.193779] rpc_buffers 17KB 25KB [ 1746.199185] rpc_tasks 2KB 7KB [ 1746.207193] UNIX 1593KB 1612KB [ 1746.215010] tcp_bind_bucket 1KB 4KB [ 1746.223018] ip_fib_trie 35KB 47KB [ 1746.233277] ip_fib_alias 170KB 189KB [ 1746.238666] ip_dst_cache 16KB 16KB [ 1746.246654] RAW 61KB 82KB [ 1746.256201] UDP 59KB 74KB [ 1746.264151] TCP 8KB 11KB [ 1746.272239] hugetlbfs_inode_cache 3KB 15KB [ 1746.277965] fscache_cookie_jar 1KB 11KB [ 1746.285998] eventpoll_pwq 33KB 67KB [ 1746.293897] eventpoll_epi 57KB 63KB [ 1746.301925] inotify_inode_mark 17KB 31KB [ 1746.307400] request_queue 199KB 199KB [ 1746.315383] blkdev_requests 1KB 3KB [ 1746.323293] blkdev_ioc 22KB 38KB [ 1746.334522] bio-0 861KB 930KB [ 1746.342383] biovec-max 1460KB 1468KB [ 1746.347805] biovec-64 938KB 1023KB [ 1746.355649] biovec-16 92KB 105KB [ 1746.363601] bio_integrity_payload 1KB 8KB [ 1746.372190] khugepaged_mm_slot 5KB 31KB [ 1746.377676] uid_cache 0KB 4KB [ 1746.385482] dmaengine-unmap-2 0KB 3KB [ 1746.393534] skbuff_fclone_cache 35KB 63KB [ 1746.401997] skbuff_head_cache 8239KB 8670KB [ 1746.407520] configfs_dir_cache 3KB 7KB [ 1746.415478] file_lock_cache 35KB 83KB [ 1746.423591] file_lock_ctx 9KB 11KB [ 1746.434058] fsnotify_mark_connector 5KB 23KB [ 1746.442504] net_namespace 78KB 78KB [ 1746.448038] shmem_inode_cache 8058KB 8287KB [ 1746.456355] task_delay_info 240KB 387KB [ 1746.464398] taskstats 34KB 91KB [ 1746.472435] proc_dir_entry 919KB 945KB [ 1746.477822] pde_opener 14KB 58KB [ 1746.486083] seq_file 248KB 433KB [ 1746.494575] sigqueue 56KB 66KB [ 1746.503637] kernfs_node_cache 18239KB 18242KB [ 1746.509150] mnt_cache 227KB 232KB [ 1746.517210] filp 7503KB 7946KB [ 1746.525329] names_cache 116921KB 116981KB [ 1746.535301] iint_cache 29KB 43KB [ 1746.543284] key_jar 4KB 7KB [ 1746.548672] uts_namespace 5KB 11KB [ 1746.556472] nsproxy 4KB 7KB [ 1746.564307] vm_area_struct 3085KB 4145KB [ 1746.576599] mm_struct 458KB 747KB [ 1746.584717] fs_cache 261KB 384KB [ 1746.593968] files_cache 963KB 1068KB [ 1746.601908] signal_cache 1753KB 1983KB [ 1746.607310] sighand_cache 631KB 659KB [ 1746.615191] task_struct 7726KB 7770KB [ 1746.623011] cred_jar 2353KB 3016KB [ 1746.628391] anon_vma_chain 957KB 1547KB [ 1746.638582] anon_vma 175KB 327KB [ 1746.646554] pid 151KB 236KB [ 1746.654964] Acpi-Operand 156KB 202KB [ 1746.671865] Acpi-ParseExt 9KB 11KB [ 1746.677270] Acpi-Parse 41KB 47KB [ 1746.701752] Acpi-State 52KB 63KB [ 1746.707155] Acpi-Namespace 20KB 27KB [ 1746.734962] numa_policy 0KB 3KB [ 1746.761678] debug_objects_cache 1605KB 1968KB [ 1746.767261] trace_event_file 297KB 298KB [ 1746.799336] ftrace_event_field 398KB 401KB [ 1746.804864] pool_workqueue 144KB 156KB [ 1746.811207] page->ptl 452KB 1035KB [ 1746.816683] kmalloc-2097152 2050KB 2050KB [ 1746.829346] kmalloc-524288 2056KB 2056KB [ 1746.839581] kmalloc-262144 1290KB 1290KB [ 1746.844982] kmalloc-131072 650KB 650KB [ 1746.852316] kmalloc-65536 2640KB 2838KB [ 1746.857708] kmalloc-32768 2145KB 2277KB [ 1746.867472] kmalloc-16384 1353KB 1353KB [ 1746.875894] kmalloc-8192 5445KB 5445KB [ 1746.884324] kmalloc-4096 27225KB 27285KB [ 1746.893349] kmalloc-2048 16490KB 17295KB [ 1746.898735] kmalloc-1024 12578KB 13521KB [ 1746.912234] kmalloc-512 15995KB 16822KB [ 1746.917628] kmalloc-256 5538KB 6326KB [ 1746.926607] kmalloc-128 1267KB 1724KB [ 1746.935041] kmalloc-96 3486KB 4404KB [ 1746.945377] kmalloc-64 2687KB 3748KB [ 1746.953762] kmalloc-32 1956KB 2476KB [ 1746.959168] kmalloc-192 2159KB 3056KB [ 1746.968968] kmem_cache 177KB 183KB [ 1746.977925] Out of memory (oom_kill_allocating_task): Kill process 8100 (syz-fuzzer) score 0 or sacrifice child [ 1746.994026] Killed process 23221 (syz-executor.4) total-vm:48512kB, anon-rss:440kB, file-rss:12292kB, shmem-rss:0kB [ 1747.005743] oom_reaper: reaped process 23221 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 1750.467449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1750.487411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1750.503248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1750.513433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1750.524528] device bridge_slave_1 left promiscuous mode [ 1750.534046] bridge0: port 2(bridge_slave_1) entered disabled state [ 1750.544106] device bridge_slave_0 left promiscuous mode [ 1750.553425] bridge0: port 1(bridge_slave_0) entered disabled state [ 1750.566272] device veth1_macvtap left promiscuous mode [ 1750.575498] device veth0_macvtap left promiscuous mode [ 1750.583237] device veth1_vlan left promiscuous mode [ 1750.588318] device veth0_vlan left promiscuous mode 07:10:14 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="02071f"], 0x48}}, 0x90) 07:10:14 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0xcd, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000040)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) 07:10:14 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x6}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000050000000000000006000000186000000b00d19b9a3ed44d39fc610000008c000006000000186500000c000000000000006b9f0000097a040008000000127700", @ANYRES32=0x1, @ANYBLOB="00000000b40b0000174af4ff01000000850000008d000000186800000c000000000000000900000018140000", @ANYRES32, @ANYBLOB="000000000000000018230000", @ANYRES32=r1, @ANYBLOB="00000000800000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xf, 0x3f, 0xfffffffd}, 0x10}, 0x80) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2, @pix_mp={0xffffffff, 0x4, 0x3132564e, 0x6, 0xb, [{0x3, 0xfff}, {0x7fffffff, 0x6}, {0x2, 0x2}, {0x10001, 0x1ff}, {0xe13, 0x2}, {0x7, 0x80000000}, {0x91, 0xc660}, {0x3, 0x3}], 0x20, 0x1, 0x3, 0x2, 0x5}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2, @pix_mp={0xffffffff, 0x4, 0x3132564e, 0x6, 0xb, [{0x3, 0xfff}, {0x7fffffff, 0x6}, {0x2, 0x2}, {0x10001, 0x1ff}, {0xe13, 0x2}, {0x7, 0x80000000}, {0x91, 0xc660}, {0x3, 0x3}], 0x20, 0x1, 0x3, 0x2, 0x5}}) 07:10:14 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x0, 0x3b1, 0xffffffff}, &(0x7f00000001c0)={{0x4, 0x4, 0x475, 0x9f7}, &(0x7f0000000180)={{0x6, 0x9, 0x5}}}}, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:10:14 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)=@multiplanar_overlay={0x1, 0x1, 0x4, 0xe000, 0x3, {}, {0x3, 0x2, 0xfc, 0x0, 0x7f, 0x4, "c8ec8de5"}, 0x80000000, 0x3, {&(0x7f0000000140)=[{0x101, 0x5, {0x9}, 0x9}, {0x1, 0x9, {0xf2}, 0x1}]}, 0x200}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8}) 07:10:14 executing program 1: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000640)={0x6, 0x3, 0x1, {0x1, @sliced={0x1, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8, 0x7ff, 0x80, 0x3, 0x0, 0x0, 0x7, 0x20, 0x0, 0x9], 0xd3e}}, 0x7ff}) 07:10:14 executing program 1: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000640)={0x6, 0x3, 0x1, {0x1, @sliced={0x1, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8, 0x7ff, 0x80, 0x3, 0x0, 0x0, 0x7, 0x20, 0x0, 0x9], 0xd3e}}, 0x7ff}) 07:10:14 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x6ab, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000180)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)=@mmap={0x9, 0x0, 0x4, 0x100000, 0x101, {}, {0x5, 0x0, 0x81, 0x8, 0x6, 0x5, "685531f1"}, 0x3ff, 0x1, {}, 0x6, 0x0, r2}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x5b) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000240)=0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$MEDIA_REQUEST_IOC_QUEUE(r4, 0x7c80, 0x0) 07:10:14 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x6}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000050000000000000006000000186000000b00d19b9a3ed44d39fc610000008c000006000000186500000c000000000000006b9f0000097a040008000000127700", @ANYRES32=0x1, @ANYBLOB="00000000b40b0000174af4ff01000000850000008d000000186800000c000000000000000900000018140000", @ANYRES32, @ANYBLOB="000000000000000018230000", @ANYRES32=r1, @ANYBLOB="00000000800000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xf, 0x3f, 0xfffffffd}, 0x10}, 0x80) (async, rerun: 32) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2, @pix_mp={0xffffffff, 0x4, 0x3132564e, 0x6, 0xb, [{0x3, 0xfff}, {0x7fffffff, 0x6}, {0x2, 0x2}, {0x10001, 0x1ff}, {0xe13, 0x2}, {0x7, 0x80000000}, {0x91, 0xc660}, {0x3, 0x3}], 0x20, 0x1, 0x3, 0x2, 0x5}}) (rerun: 32) 07:10:14 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="02071f"], 0x48}}, 0x90) 07:10:14 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x0, 0x3b1, 0xffffffff}, &(0x7f00000001c0)={{0x4, 0x4, 0x475, 0x9f7}, &(0x7f0000000180)={{0x6, 0x9, 0x5}}}}, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:10:14 executing program 1: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000640)={0x6, 0x3, 0x1, {0x1, @sliced={0x1, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8, 0x7ff, 0x80, 0x3, 0x0, 0x0, 0x7, 0x20, 0x0, 0x9], 0xd3e}}, 0x7ff}) [ 1753.769018] Bluetooth: hci4: command 0x0406 tx timeout [ 1755.129029] Bluetooth: hci3: command 0x0409 tx timeout [ 1755.702838] device hsr_slave_1 left promiscuous mode [ 1755.711613] device hsr_slave_0 left promiscuous mode [ 1755.724102] team0 (unregistering): Port device team_slave_1 removed [ 1755.736601] team0 (unregistering): Port device team_slave_0 removed [ 1755.746277] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1755.758261] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1755.787215] bond0 (unregistering): Released all slaves [ 1755.804571] IPVS: ftp: loaded support on port[0] = 21 [ 1756.068030] chnl_net:caif_netlink_parms(): no params data found [ 1756.162151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1756.175501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1756.185488] device bridge_slave_0 entered promiscuous mode [ 1756.198023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1756.205612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1756.218258] device bridge_slave_1 entered promiscuous mode [ 1756.255624] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1756.267144] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1756.301874] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1756.313500] team0: Port device team_slave_0 added [ 1756.321566] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1756.333085] team0: Port device team_slave_1 added [ 1756.362105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1756.372222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1756.403347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1756.416795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1756.428503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1756.459338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1756.480957] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1756.494105] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1756.525378] device hsr_slave_0 entered promiscuous mode [ 1756.531541] device hsr_slave_1 entered promiscuous mode [ 1756.540697] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1756.547897] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1756.653330] bridge0: port 2(bridge_slave_1) entered blocking state [ 1756.659784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1756.666565] bridge0: port 1(bridge_slave_0) entered blocking state [ 1756.673026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1756.722229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1756.732444] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1756.743435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1756.751406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1756.758287] bridge0: port 2(bridge_slave_1) entered disabled state [ 1756.772011] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1756.778100] 8021q: adding VLAN 0 to HW filter on device team0 [ 1756.789555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1756.797263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1756.803729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1756.827734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1756.835779] bridge0: port 2(bridge_slave_1) entered blocking state [ 1756.842200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1756.850849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1756.861826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1756.869013] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1756.876531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1756.884609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1756.894953] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1756.902991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1756.910740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1756.921621] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1756.928870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1756.936500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1756.946411] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1756.952934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1756.985278] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1756.994436] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1757.001528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1757.008277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1757.018817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1757.053942] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1757.066016] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1757.073806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1757.088103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1757.117951] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1757.125745] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1757.133909] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1757.143509] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1757.150707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1757.158206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1757.167174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1757.174601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1757.183647] device veth0_vlan entered promiscuous mode [ 1757.194155] device veth1_vlan entered promiscuous mode [ 1757.200322] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1757.209067] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1757.218975] Bluetooth: hci3: command 0x041b tx timeout [ 1757.224021] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1757.234165] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1757.241305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1757.248541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1757.256178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1757.264226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1757.274572] device veth0_macvtap entered promiscuous mode [ 1757.281308] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1757.292692] device veth1_macvtap entered promiscuous mode [ 1757.298933] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1757.307690] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1757.317533] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1757.326761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1757.336576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.345973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1757.356015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.365373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1757.375260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.384454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1757.395626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.404864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1757.414660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.424968] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1757.432071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1757.439184] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1757.446450] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1757.453861] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1757.461971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1757.472747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1757.482868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.493674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1757.504357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.513796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1757.523585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.532823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1757.542734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.552063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1757.561851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.572237] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1757.579247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1757.586557] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1757.595971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1757.708048] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1757.715124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1757.726386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1757.750912] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1757.761536] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1757.767901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1757.777308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1757.785307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 07:10:20 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0xcd, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000040)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) 07:10:20 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xc2800, 0x0) 07:10:20 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="02071f"], 0x48}}, 0x90) 07:10:20 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x6, 0x3, 0x1, {0x1, @sliced={0x1, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8, 0x7ff, 0x80, 0x3, 0x0, 0x0, 0x7, 0x20, 0x0, 0x9], 0xd3e}}, 0x7ff}) 07:10:20 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3, 0x0, 0xffffffff}, &(0x7f00000001c0)={{0x4, 0x4, 0x475, 0x9f7}, &(0x7f0000000180)={{0x6, 0x9, 0x5}}}}, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:10:20 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x6ab, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000180)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)=@mmap={0x9, 0x0, 0x4, 0x100000, 0x101, {}, {0x5, 0x0, 0x81, 0x8, 0x6, 0x5, "685531f1"}, 0x3ff, 0x1, {}, 0x6, 0x0, r2}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x5b) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000240)=0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$MEDIA_REQUEST_IOC_QUEUE(r4, 0x7c80, 0x0) 07:10:20 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xc2800, 0x0) 07:10:20 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3}, &(0x7f00000001c0)={{0x4, 0x4, 0x475, 0x9f7}, &(0x7f0000000180)={{0x6, 0x9, 0x5}}}}, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:10:20 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0xcd, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) 07:10:20 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x6, 0x3, 0x1, {0x1, @sliced={0x1, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8, 0x7ff, 0x80, 0x3, 0x0, 0x0, 0x7, 0x20, 0x0, 0x9], 0xd3e}}, 0x7ff}) 07:10:20 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x6ab, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000180)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)=@mmap={0x9, 0x0, 0x4, 0x100000, 0x101, {}, {0x5, 0x0, 0x81, 0x8, 0x6, 0x5, "685531f1"}, 0x3ff, 0x1, {}, 0x6, 0x0, r2}) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x5b) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000240)=0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x10}, 0x10) (async) ioctl$MEDIA_REQUEST_IOC_QUEUE(r4, 0x7c80, 0x0) 07:10:20 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="02071f07093b8621018fc320b4"], 0x48}}, 0x90) 07:10:20 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3}}, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:10:20 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0xcd, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) 07:10:20 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xc2800, 0x0) 07:10:20 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x6, 0x3, 0x1, {0x1, @sliced={0x1, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8, 0x7ff, 0x80, 0x3, 0x0, 0x0, 0x7, 0x20, 0x0, 0x9], 0xd3e}}, 0x7ff}) 07:10:20 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="02071f07"], 0x48}}, 0x90) 07:10:20 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3}}, 0x0, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:10:20 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0x1aab, 0x40}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8}) 07:10:20 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x6, 0x3, 0x1, {0x1, @sliced={0x1, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8, 0x7ff, 0x80, 0x3, 0x0, 0x0, 0x7, 0x20, 0x0, 0x9], 0xd3e}}, 0x7ff}) 07:10:20 executing program 0: ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000040)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) 07:10:20 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0xcd, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) 07:10:20 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="02071f07"], 0x48}}, 0x90) 07:10:20 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3}}, 0x0, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:10:20 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0x1aab, 0x40}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8}) 07:10:20 executing program 0: ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000040)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) 07:10:21 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="02071f07"], 0x48}}, 0x90) 07:10:21 executing program 3: syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0x1aab, 0x40}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8}) 07:10:21 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0xcd, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) 07:10:21 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3}}, 0x0, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:10:21 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="02071f07093b862101"], 0x48}}, 0x90) [ 1759.289076] Bluetooth: hci3: command 0x040f tx timeout [ 1761.368623] Bluetooth: hci3: command 0x0419 tx timeout [ 1763.268368] oom_reaper: reaped process 24127 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 1763.375826] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1763.396147] in:imklog cpuset=/ mems_allowed=0-1 [ 1763.401789] CPU: 0 PID: 23142 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 1763.409249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1763.418614] Call Trace: [ 1763.421224] dump_stack+0x1fc/0x2ef [ 1763.425045] dump_header+0x15d/0xc3f [ 1763.428778] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1763.433890] ? ___ratelimit+0x319/0x590 [ 1763.437877] oom_kill_process.cold+0x10/0x692 [ 1763.442405] ? check_preemption_disabled+0x41/0x280 [ 1763.447444] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1763.452846] out_of_memory+0x1072/0x1390 [ 1763.456927] ? oom_killer_disable+0x270/0x270 [ 1763.461433] ? mutex_trylock+0x15f/0x1a0 [ 1763.465504] __alloc_pages_nodemask+0x23a2/0x2890 [ 1763.470362] ? find_get_entry+0x4cd/0x8a0 [ 1763.474525] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1763.479399] alloc_pages_current+0x193/0x2a0 [ 1763.483815] filemap_fault+0x146e/0x2180 [ 1763.487887] ext4_filemap_fault+0x84/0xb0 [ 1763.492032] __do_fault+0x10b/0x4b0 [ 1763.495657] __handle_mm_fault+0x273b/0x41c0 [ 1763.500053] ? vm_insert_page+0x9c0/0x9c0 [ 1763.504187] ? lock_downgrade+0x720/0x720 [ 1763.508331] ? check_preemption_disabled+0x41/0x280 [ 1763.513336] handle_mm_fault+0x436/0xb10 [ 1763.517385] __do_page_fault+0x68e/0xd60 [ 1763.521434] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1763.526434] ? spurious_fault+0x840/0x840 [ 1763.530566] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1763.535394] ? page_fault+0x8/0x30 [ 1763.538926] page_fault+0x1e/0x30 [ 1763.542364] RIP: 0033:0x7f7f36f0522d [ 1763.546079] Code: Bad RIP value. [ 1763.549448] RSP: 002b:00007f7f348a1580 EFLAGS: 00010293 [ 1763.554897] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007f7f36f0522d [ 1763.562150] RDX: 0000000000001fa0 RSI: 00007f7f348a1da0 RDI: 0000000000000004 [ 1763.569403] RBP: 000055ea1ea1b9d0 R08: 0000000000000000 R09: 0000000004000001 [ 1763.576656] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f7f348a1da0 [ 1763.583911] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f7f348a1ddd [ 1763.597511] Mem-Info: [ 1763.600061] active_anon:15260 inactive_anon:35220 isolated_anon:0 [ 1763.600061] active_file:21 inactive_file:31 isolated_file:0 [ 1763.600061] unevictable:0 dirty:18 writeback:0 unstable:0 [ 1763.600061] slab_reclaimable:13592 slab_unreclaimable:114795 [ 1763.600061] mapped:22380 shmem:35933 pagetables:581 bounce:0 [ 1763.600061] free:13799 free_pcp:124 free_cma:0 [ 1763.610190] syz-executor.1: vmalloc: allocation failure, allocated 1705492480 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1763.638678] Node 0 active_anon:57620kB inactive_anon:40332kB active_file:144kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58520kB dirty:56kB writeback:0kB shmem:42460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1763.663594] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1763.679892] Node 1 active_anon:3420kB inactive_anon:100548kB active_file:0kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31000kB dirty:16kB writeback:0kB shmem:101272kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1763.696574] CPU: 1 PID: 24127 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1763.713069] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1763.717399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1763.748717] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1763.753033] Call Trace: [ 1763.758052] Node 0 DMA32 free:17540kB min:35996kB low:44992kB high:53988kB active_anon:58020kB inactive_anon:40332kB active_file:44kB inactive_file:24kB unevictable:0kB writepending:256kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7296kB pagetables:1900kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1763.760638] dump_stack+0x1fc/0x2ef [ 1763.760655] warn_alloc.cold+0x7b/0x18f [ 1763.760672] ? zone_watermark_ok_safe+0x260/0x260 [ 1763.760705] __vmalloc_area_node+0x4fd/0x780 [ 1763.760727] ? __vmalloc_node_range+0x180/0x180 [ 1763.793084] lowmem_reserve[]: 0 0 1 1 1 [ 1763.793222] ? _raw_spin_unlock+0x29/0x40 [ 1763.797171] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1763.802011] ? __get_vm_area_node+0x2e2/0x3a0 [ 1763.802028] __vmalloc_node_range+0xed/0x180 [ 1763.802045] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1763.802059] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1763.802075] vmalloc_user+0x70/0xe0 [ 1763.806456] lowmem_reserve[]: 0 0 0 0 0 [ 1763.811289] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1763.811301] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1763.811316] __vb2_queue_alloc+0x472/0xe60 [ 1763.811338] vb2_core_create_bufs+0x273/0x7e0 [ 1763.811352] ? __vb2_queue_free+0x870/0x870 [ 1763.811372] ? mutex_trylock+0x1a0/0x1a0 [ 1763.817512] Node 1 Normal free:26776kB min:53876kB low:67344kB high:80812kB active_anon:3420kB inactive_anon:100548kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:116kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:544kB pagetables:424kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1763.819472] ? __video_do_ioctl+0x632/0xcd0 [ 1763.819492] vb2_create_bufs+0x332/0x620 [ 1763.819509] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1763.819527] ? __video_do_ioctl+0x632/0xcd0 [ 1763.848617] lowmem_reserve[]: 0 0 0 0 0 [ 1763.850027] ? mutex_trylock+0x1a0/0x1a0 [ 1763.854508] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10872kB [ 1763.858821] ? mark_held_locks+0xf0/0xf0 [ 1763.858841] vb2_ioctl_create_bufs+0x20d/0x360 [ 1763.858857] ? memset+0x20/0x40 [ 1763.858876] v4l_create_bufs+0xb2/0x160 [ 1763.858892] __video_do_ioctl+0x49a/0xcd0 [ 1763.858913] ? v4l_querycap+0x340/0x340 [ 1763.864279] Node 0 DMA32: 1462*4kB (UME) 737*8kB (ME) 135*16kB (ME) 45*32kB (UME) 22*64kB (UM) 7*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17648kB [ 1763.867901] ? __might_fault+0x192/0x1d0 [ 1763.875270] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1763.876166] ? v4l_querycap+0x340/0x340 [ 1763.880392] Node 1 Normal: 339*4kB (ME) 274*8kB (ME) 233*16kB (ME) 163*32kB (UME) 41*64kB (ME) 11*128kB (ME) 3*256kB (ME) 1*512kB (U) 1*1024kB (E) 2*2048kB (UE) 1*4096kB (M) = 27020kB [ 1763.884569] video_usercopy+0x13f/0xfa0 [ 1763.892366] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1763.893454] ? v4l_enumstd+0x60/0x60 [ 1763.897503] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1763.926309] ? do_futex+0x171/0x1880 [ 1763.926325] ? mark_held_locks+0xf0/0xf0 [ 1763.926341] ? debug_check_no_obj_freed+0x201/0x490 [ 1763.926362] ? video_usercopy+0xfa0/0xfa0 [ 1763.926374] v4l2_ioctl+0x147/0x1a0 [ 1763.926386] ? video_devdata+0xa0/0xa0 [ 1763.926401] do_vfs_ioctl+0xcdb/0x12e0 [ 1763.926413] ? lock_downgrade+0x720/0x720 [ 1763.926437] ? check_preemption_disabled+0x41/0x280 [ 1763.934591] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1763.934794] ? ioctl_preallocate+0x200/0x200 [ 1763.941593] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1763.944194] ? __fget+0x356/0x510 [ 1763.948271] 35986 total pagecache pages [ 1763.952328] ? do_dup2+0x450/0x450 [ 1763.952343] ? __se_sys_futex+0x298/0x3b0 [ 1763.952363] ksys_ioctl+0x9b/0xc0 [ 1763.952379] __x64_sys_ioctl+0x6f/0xb0 [ 1763.952403] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1763.969102] 0 pages in swap cache [ 1763.969704] do_syscall_64+0xf9/0x620 [ 1763.974280] Swap cache stats: add 0, delete 0, find 0/0 [ 1763.977838] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1763.981836] Free swap = 0kB [ 1763.985914] RIP: 0033:0x7ff9055210f9 [ 1763.993264] Total swap = 0kB [ 1764.004428] Code: Bad RIP value. [ 1764.004436] RSP: 002b:00007ff903a93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1764.004448] RAX: ffffffffffffffda RBX: 00007ff905640f80 RCX: 00007ff9055210f9 [ 1764.004455] RDX: 0000000020000640 RSI: 00000000c100565c RDI: 0000000000000003 [ 1764.004463] RBP: 00007ff90557cae9 R08: 0000000000000000 R09: 0000000000000000 [ 1764.004469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1764.004477] R13: 00007ffefb208e4f R14: 00007ff903a93300 R15: 0000000000022000 [ 1764.028603] Mem-Info: [ 1764.045905] 2097051 pages RAM [ 1764.069405] active_anon:15228 inactive_anon:35219 isolated_anon:0 [ 1764.069405] active_file:10 inactive_file:8 isolated_file:0 [ 1764.069405] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1764.069405] slab_reclaimable:13591 slab_unreclaimable:114808 [ 1764.069405] mapped:22323 shmem:35932 pagetables:564 bounce:0 [ 1764.069405] free:13887 free_pcp:123 free_cma:0 [ 1764.073111] 0 pages HighMem/MovableOnly [ 1764.073863] Node 0 active_anon:57504kB inactive_anon:40328kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58408kB dirty:0kB writeback:0kB shmem:42456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1764.078912] 369649 pages reserved [ 1764.078923] 0 pages cma reserved [ 1764.078930] Unreclaimable slab info: [ 1764.078934] Name Used Total [ 1764.078945] pid_2 25KB 88KB [ 1764.079020] batadv_tt_change_cache 4KB 7KB [ 1764.079032] batadv_tl_cache 10KB 16KB [ 1764.079059] TIPC 36KB 45KB [ 1764.098120] Node 1 active_anon:3408kB inactive_anon:100548kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30884kB dirty:0kB writeback:0kB shmem:101272kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1764.102160] SCTPv6 33KB 43KB [ 1764.104130] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1764.113243] DCCPv6 22KB 37KB [ 1764.113257] DCCP 16KB 35KB [ 1764.113291] L2TP/IPv6 17KB 19KB [ 1764.135297] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1764.137863] RXRPC 17KB 26KB [ 1764.152506] Node 0 DMA32 free:17648kB min:35996kB low:44992kB high:53988kB active_anon:57504kB inactive_anon:40328kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7296kB pagetables:1832kB bounce:0kB free_pcp:244kB local_pcp:244kB free_cma:0kB [ 1764.155790] rxrpc_call_jar 120KB 126KB [ 1764.172470] lowmem_reserve[]: 0 0 1 1 1 [ 1764.176753] bridge_fdb_cache 24KB 27KB [ 1764.180718] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1764.186110] fib6_nodes 251KB 264KB [ 1764.186837] lowmem_reserve[]: 0 0 0 0 0 [ 1764.197780] ip6_dst_cache 690KB 690KB [ 1764.208731] Node 1 Normal free:27020kB min:53876kB low:67344kB high:80812kB active_anon:3408kB inactive_anon:100548kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:544kB pagetables:424kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1764.220636] RAWv6 113KB 114KB [ 1764.230828] lowmem_reserve[]: 0 0 0 0 0 [ 1764.236502] UDPv6 41KB 45KB [ 1764.236942] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10872kB [ 1764.284201] TCPv6 33KB 36KB [ 1764.314225] Node 0 DMA32: 1461*4kB (ME) 738*8kB (UME) 135*16kB (ME) 41*32kB (ME) 20*64kB (UM) 7*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17396kB [ 1764.328159] nf_conntrack 17KB 18KB [ 1764.341537] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1764.353568] t10_alua_lu_gp_cache 0KB 3KB [ 1764.380676] Node 1 Normal: 339*4kB (ME) 274*8kB (ME) 233*16kB (ME) 163*32kB (UME) 41*64kB (ME) 11*128kB (ME) 3*256kB (ME) 1*512kB (U) 1*1024kB (E) 2*2048kB (UE) 1*4096kB (M) = 27020kB [ 1764.405991] sd_ext_cdb 0KB 7KB [ 1764.421619] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1764.423120] scsi_sense_cache 1056KB 1060KB [ 1764.429383] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1764.459981] virtio_scsi_cmd 16KB 16KB [ 1764.478851] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1764.498530] sgpool-128 8KB 8KB [ 1764.523417] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1764.548628] sgpool-64 4KB 12KB [ 1764.563253] 35950 total pagecache pages [ 1764.583437] sgpool-32 2KB 15KB [ 1764.603163] 0 pages in swap cache [ 1764.619595] sgpool-16 1KB 7KB [ 1764.642123] Swap cache stats: add 0, delete 0, find 0/0 [ 1764.660354] sgpool-8 0KB 7KB [ 1764.670689] Free swap = 0kB [ 1764.673302] mqueue_inode_cache 16KB 30KB [ 1764.690348] Total swap = 0kB [ 1764.699421] bio_post_read_ctx 14KB 15KB [ 1764.713475] 2097051 pages RAM [ 1764.716627] bio-2 14KB 15KB [ 1764.730178] 0 pages HighMem/MovableOnly [ 1764.737035] jfs_mp 7KB 7KB [ 1764.749976] 369649 pages reserved [ 1764.759646] cifs_small_rq 15KB 16KB [ 1764.765634] cifs_request 67KB 67KB [ 1764.772318] 0 pages cma reserved [ 1764.774445] cifs_mpx_ids 0KB 7KB [ 1764.784407] nfs_commit_data 3KB 14KB [ 1764.793345] nfs_write_data 34KB 44KB [ 1764.802423] ext4_system_zone 1KB 7KB [ 1764.807816] bio-1 1KB 7KB [ 1764.816498] pid_namespace 4KB 11KB [ 1764.825234] rpc_buffers 17KB 25KB [ 1764.834268] rpc_tasks 2KB 7KB [ 1764.843295] UNIX 1873KB 1882KB [ 1764.852372] tcp_bind_bucket 2KB 4KB [ 1764.857774] ip_fib_trie 40KB 47KB [ 1764.872029] ip_fib_alias 185KB 189KB [ 1764.877524] ip_dst_cache 15KB 16KB [ 1764.886255] RAW 70KB 82KB [ 1764.895255] UDP 67KB 74KB [ 1764.904160] TCP 14KB 16KB [ 1764.912761] hugetlbfs_inode_cache 3KB 15KB [ 1764.922138] fscache_cookie_jar 1KB 11KB [ 1764.927604] eventpoll_pwq 27KB 67KB [ 1764.936211] eventpoll_epi 55KB 63KB [ 1764.944913] inotify_inode_mark 16KB 31KB [ 1764.954099] request_queue 199KB 199KB [ 1764.964493] blkdev_requests 1KB 3KB [ 1764.974940] blkdev_ioc 24KB 38KB [ 1764.986835] bio-0 755KB 885KB [ 1764.997278] biovec-max 1443KB 1443KB [ 1765.014071] biovec-64 861KB 1047KB [ 1765.025153] biovec-16 97KB 105KB [ 1765.036188] bio_integrity_payload 1KB 8KB [ 1765.047963] khugepaged_mm_slot 7KB 31KB [ 1765.072771] uid_cache 0KB 4KB [ 1765.078229] dmaengine-unmap-2 0KB 3KB [ 1765.097197] skbuff_fclone_cache 36KB 52KB [ 1765.105250] skbuff_head_cache 9093KB 9093KB [ 1765.122406] configfs_dir_cache 3KB 7KB [ 1765.127905] file_lock_cache 41KB 83KB [ 1765.135766] file_lock_ctx 9KB 11KB [ 1765.151451] fsnotify_mark_connector 7KB 23KB [ 1765.157363] net_namespace 87KB 87KB [ 1765.165294] shmem_inode_cache 8084KB 8283KB [ 1765.181851] task_delay_info 281KB 387KB [ 1765.187243] taskstats 33KB 91KB [ 1765.195031] proc_dir_entry 951KB 956KB [ 1765.206010] pde_opener 15KB 58KB [ 1765.215103] seq_file 212KB 417KB [ 1765.226332] sigqueue 56KB 66KB [ 1765.234127] kernfs_node_cache 18240KB 18246KB [ 1765.245621] mnt_cache 241KB 248KB [ 1765.253453] filp 7101KB 7942KB [ 1765.264488] names_cache 104703KB 104724KB [ 1765.273373] iint_cache 30KB 43KB [ 1765.284214] key_jar 4KB 7KB [ 1765.292182] uts_namespace 6KB 11KB [ 1765.297678] nsproxy 3KB 7KB [ 1765.311801] vm_area_struct 3150KB 4122KB [ 1765.317208] mm_struct 539KB 747KB [ 1765.325132] fs_cache 307KB 384KB [ 1765.336533] files_cache 1137KB 1147KB [ 1765.344612] signal_cache 2034KB 2048KB [ 1765.355630] sighand_cache 605KB 652KB [ 1765.363491] task_struct 9538KB 9620KB [ 1765.376975] cred_jar 2287KB 3016KB [ 1765.386470] anon_vma_chain 997KB 1547KB [ 1765.397341] anon_vma 168KB 327KB [ 1765.405378] pid 172KB 236KB [ 1765.416581] Acpi-Operand 156KB 202KB [ 1765.424560] Acpi-ParseExt 9KB 11KB [ 1765.436016] Acpi-Parse 41KB 47KB [ 1765.443809] Acpi-State 52KB 63KB [ 1765.454959] Acpi-Namespace 20KB 27KB [ 1765.466367] numa_policy 0KB 3KB [ 1765.477990] debug_objects_cache 1640KB 1968KB [ 1765.486053] trace_event_file 297KB 298KB [ 1765.497643] ftrace_event_field 398KB 401KB [ 1765.505611] pool_workqueue 154KB 156KB [ 1765.517131] page->ptl 495KB 1035KB [ 1765.525161] kmalloc-2097152 2050KB 2050KB [ 1765.536588] kmalloc-524288 2056KB 2056KB [ 1765.544538] kmalloc-262144 1290KB 1290KB [ 1765.552784] kmalloc-131072 650KB 650KB [ 1765.561080] kmalloc-65536 2904KB 2970KB [ 1765.567125] kmalloc-32768 2310KB 2376KB [ 1765.575804] kmalloc-16384 1320KB 1419KB [ 1765.586958] kmalloc-8192 5618KB 5733KB [ 1765.595229] kmalloc-4096 30374KB 30434KB [ 1765.603384] kmalloc-2048 18313KB 18379KB [ 1765.613658] kmalloc-1024 13956KB 14151KB [ 1765.622200] kmalloc-512 16978KB 16995KB [ 1765.627798] kmalloc-256 5922KB 6326KB [ 1765.636720] kmalloc-128 1405KB 1724KB [ 1765.645581] kmalloc-96 3448KB 4404KB [ 1765.653743] kmalloc-64 2857KB 3748KB [ 1765.662076] kmalloc-32 2026KB 2476KB [ 1765.667719] kmalloc-192 2336KB 3056KB [ 1765.675941] kmem_cache 177KB 183KB [ 1765.686566] Out of memory (oom_kill_allocating_task): Kill process 23142 (in:imklog) score 0 or sacrifice child [ 1765.705009] Killed process 23138 (rsyslogd) total-vm:254332kB, anon-rss:756kB, file-rss:0kB, shmem-rss:0kB [ 1765.716985] oom_reaper: reaped process 23138 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 07:10:32 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x6, 0x3, 0x1, {0x1, @sliced={0x1, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8, 0x7ff, 0x80, 0x3, 0x0, 0x0, 0x7, 0x20, 0x0, 0x9], 0xd3e}}, 0x7ff}) 07:10:32 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3}}, 0x9, 0x0, 0x1}}) 07:10:32 executing program 0: ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000040)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) 07:10:32 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8, @pix={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7}}) 07:10:32 executing program 4: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) 07:10:32 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="02071f0709"], 0x48}}, 0x90) 07:10:32 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="02071f0709"], 0x48}}, 0x90) 07:10:32 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8, @pix={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7}}) 07:10:32 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3}}, 0x9, 0x0}}) 07:10:32 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) 07:10:32 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000300)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000340)=@multiplanar_fd={0x2, 0x3, 0x4, 0x800, 0xfffffffa, {r2, r3/1000+10000}, {0x5, 0x0, 0x0, 0x8d, 0x0, 0x3f, '\'Iptl 506KB 1035KB [ 1776.259810] kmalloc-2097152 2050KB 2050KB [ 1776.265181] kmalloc-524288 2056KB 2056KB [ 1776.270634] kmalloc-262144 1290KB 1290KB [ 1776.275999] kmalloc-131072 650KB 650KB [ 1776.281441] kmalloc-65536 2640KB 2706KB [ 1776.286809] kmalloc-32768 2145KB 2211KB [ 1776.292229] kmalloc-16384 1287KB 1369KB [ 1776.297592] kmalloc-8192 5478KB 5593KB [ 1776.303024] kmalloc-4096 27799KB 27854KB [ 1776.308437] kmalloc-2048 17029KB 18130KB [ 1776.313893] kmalloc-1024 13065KB 14080KB [ 1776.319317] kmalloc-512 16623KB 16818KB [ 1776.324688] kmalloc-256 5635KB 6326KB [ 1776.331802] kmalloc-128 1360KB 1724KB [ 1776.337187] kmalloc-96 3516KB 4404KB [ 1776.342624] kmalloc-64 2815KB 3748KB [ 1776.348052] kmalloc-32 2000KB 2476KB [ 1776.353426] kmalloc-192 2255KB 3056KB [ 1776.358858] kmem_cache 177KB 183KB [ 1776.364259] Out of memory (oom_kill_allocating_task): Kill process 24159 (in:imklog) score 0 or sacrifice child [ 1776.374859] Killed process 24157 (rsyslogd) total-vm:254332kB, anon-rss:524kB, file-rss:0kB, shmem-rss:0kB [ 1776.386689] oom_reaper: reaped process 24157 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 07:10:42 executing program 4: r0 = socket$tipc(0x1e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) 07:10:42 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x6, 0x3, 0x1, {0x1, @sliced={0x1, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8, 0x7ff, 0x80, 0x3, 0x0, 0x0, 0x7, 0x20, 0x0, 0x9], 0xd3e}}, 0x7ff}) 07:10:42 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xc2800, 0x0) 07:10:42 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="02071f07093b86"], 0x48}}, 0x90) 07:10:42 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8}) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x97, 0x100) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000180)) 07:10:42 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async, rerun: 64) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000300)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000340)=@multiplanar_fd={0x2, 0x3, 0x4, 0x800, 0xfffffffa, {r2, r3/1000+10000}, {0x5, 0x0, 0x0, 0x8d, 0x0, 0x3f, '\'I0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)=@mmap={0x9, 0x0, 0x4, 0x100000, 0x101, {}, {0x5, 0x0, 0x81, 0x8, 0x6, 0x5, "685531f1"}, 0x3ff, 0x1, {}, 0x6, 0x0, r2}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x5b) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000240)=0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$MEDIA_REQUEST_IOC_QUEUE(r4, 0x7c80, 0x0) 07:10:42 executing program 4: r0 = socket$tipc(0x1e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) 07:10:42 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="02071f0709"], 0x48}}, 0x90) [ 1784.852985] oom_reaper: reaped process 24224 (syz-executor.1), now anon-rss:0kB, file-rss:14332kB, shmem-rss:8kB [ 1784.909076] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1784.938883] in:imklog cpuset=/ mems_allowed=0-1 [ 1784.943605] CPU: 0 PID: 24202 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 1784.951145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1784.960503] Call Trace: [ 1784.963102] dump_stack+0x1fc/0x2ef [ 1784.966743] dump_header+0x15d/0xc3f [ 1784.969432] syz-executor.1: vmalloc: allocation failure, allocated 1696219136 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1784.970461] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1784.984262] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1784.989333] ? ___ratelimit+0x319/0x590 [ 1784.989351] oom_kill_process.cold+0x10/0x692 [ 1784.989370] ? check_preemption_disabled+0x41/0x280 [ 1785.007895] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1785.013180] out_of_memory+0x1072/0x1390 [ 1785.017253] ? oom_killer_disable+0x270/0x270 [ 1785.021832] ? mutex_trylock+0x15f/0x1a0 [ 1785.025892] __alloc_pages_nodemask+0x23a2/0x2890 [ 1785.030817] ? find_get_entry+0x4cd/0x8a0 [ 1785.034980] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1785.039834] alloc_pages_current+0x193/0x2a0 [ 1785.044248] filemap_fault+0x146e/0x2180 [ 1785.048313] ext4_filemap_fault+0x84/0xb0 [ 1785.052456] __do_fault+0x10b/0x4b0 [ 1785.056094] __handle_mm_fault+0x273b/0x41c0 [ 1785.060503] ? vm_insert_page+0x9c0/0x9c0 [ 1785.064643] ? lock_downgrade+0x720/0x720 [ 1785.068802] ? check_preemption_disabled+0x41/0x280 [ 1785.073849] handle_mm_fault+0x436/0xb10 [ 1785.077912] __do_page_fault+0x68e/0xd60 [ 1785.081967] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1785.086977] ? spurious_fault+0x840/0x840 [ 1785.091117] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1785.095956] ? page_fault+0x8/0x30 [ 1785.099489] page_fault+0x1e/0x30 [ 1785.102942] RIP: 0033:0x7f7afdd7a73f [ 1785.106648] Code: Bad RIP value. [ 1785.110088] RSP: 002b:00007f7afd329590 EFLAGS: 00010203 [ 1785.115449] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007f7aff98d22d [ 1785.122707] RDX: 0000000000000077 RSI: 00007f7afd329da0 RDI: 0000000000000000 [ 1785.129965] RBP: 0000557679cd49d0 R08: 0000000000000000 R09: 0000000000000000 [ 1785.137310] R10: 2ce33e6c02ce33e7 R11: 0000000000000000 R12: 00007f7afd329da0 [ 1785.144572] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f7afd32b553 [ 1785.151854] CPU: 1 PID: 24224 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1785.159859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1785.169224] Call Trace: [ 1785.169769] Mem-Info: [ 1785.171833] dump_stack+0x1fc/0x2ef [ 1785.174248] active_anon:15226 inactive_anon:35219 isolated_anon:0 [ 1785.174248] active_file:18 inactive_file:0 isolated_file:0 [ 1785.174248] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1785.174248] slab_reclaimable:13681 slab_unreclaimable:116269 [ 1785.174248] mapped:22370 shmem:35932 pagetables:558 bounce:0 [ 1785.174248] free:13770 free_pcp:181 free_cma:0 [ 1785.177854] warn_alloc.cold+0x7b/0x18f [ 1785.177872] ? zone_watermark_ok_safe+0x260/0x260 [ 1785.177886] ? rcu_nmi_exit+0xb3/0x180 [ 1785.177918] __vmalloc_area_node+0x4fd/0x780 [ 1785.177938] ? __vmalloc_node_range+0x180/0x180 [ 1785.177953] ? _raw_spin_unlock+0x29/0x40 [ 1785.177966] ? __get_vm_area_node+0x2e2/0x3a0 [ 1785.178000] __vmalloc_node_range+0xed/0x180 [ 1785.222649] Node 0 active_anon:57340kB inactive_anon:40328kB active_file:76kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58408kB dirty:0kB writeback:0kB shmem:42456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1785.223927] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1785.232966] Node 1 active_anon:3564kB inactive_anon:100548kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31072kB dirty:0kB writeback:0kB shmem:101272kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1785.232974] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1785.237132] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1785.237147] vmalloc_user+0x70/0xe0 [ 1785.237161] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1785.237173] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1785.237186] __vb2_queue_alloc+0x472/0xe60 [ 1785.237209] vb2_core_create_bufs+0x273/0x7e0 [ 1785.237225] ? __vb2_queue_free+0x870/0x870 [ 1785.237240] ? mutex_trylock+0x1a0/0x1a0 [ 1785.237256] ? __video_do_ioctl+0x632/0xcd0 [ 1785.237276] vb2_create_bufs+0x332/0x620 [ 1785.237293] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1785.237305] ? __video_do_ioctl+0x632/0xcd0 [ 1785.237317] ? mutex_trylock+0x1a0/0x1a0 [ 1785.237332] ? mark_held_locks+0xf0/0xf0 [ 1785.237348] ? futex_wait_queue_me+0x404/0x5e0 [ 1785.237366] vb2_ioctl_create_bufs+0x20d/0x360 [ 1785.237379] ? memset+0x20/0x40 [ 1785.237394] v4l_create_bufs+0xb2/0x160 [ 1785.237411] __video_do_ioctl+0x49a/0xcd0 [ 1785.237432] ? v4l_querycap+0x340/0x340 [ 1785.237452] ? __might_fault+0x192/0x1d0 [ 1785.237468] ? v4l_querycap+0x340/0x340 [ 1785.237483] video_usercopy+0x13f/0xfa0 [ 1785.237505] ? v4l_enumstd+0x60/0x60 [ 1785.237519] ? do_futex+0x171/0x1880 [ 1785.237534] ? mark_held_locks+0xf0/0xf0 [ 1785.237553] ? debug_check_no_obj_freed+0x201/0x490 [ 1785.237576] ? video_usercopy+0xfa0/0xfa0 [ 1785.237587] v4l2_ioctl+0x147/0x1a0 [ 1785.237600] ? video_devdata+0xa0/0xa0 [ 1785.237620] do_vfs_ioctl+0xcdb/0x12e0 [ 1785.237635] ? lock_downgrade+0x720/0x720 [ 1785.237650] ? check_preemption_disabled+0x41/0x280 [ 1785.237664] ? ioctl_preallocate+0x200/0x200 [ 1785.237682] ? __fget+0x356/0x510 [ 1785.237699] ? do_dup2+0x450/0x450 [ 1785.237712] ? __se_sys_futex+0x298/0x3b0 [ 1785.237734] ksys_ioctl+0x9b/0xc0 [ 1785.237751] __x64_sys_ioctl+0x6f/0xb0 [ 1785.237765] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1785.237779] do_syscall_64+0xf9/0x620 [ 1785.237797] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1785.237809] RIP: 0033:0x7ff9055210f9 [ 1785.237823] Code: Bad RIP value. [ 1785.237831] RSP: 002b:00007ff903a93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1785.237844] RAX: ffffffffffffffda RBX: 00007ff905640f80 RCX: 00007ff9055210f9 [ 1785.237853] RDX: 0000000020000640 RSI: 00000000c100565c RDI: 0000000000000003 [ 1785.237860] RBP: 00007ff90557cae9 R08: 0000000000000000 R09: 0000000000000000 [ 1785.237868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1785.237876] R13: 00007ffefb208e4f R14: 00007ff903a93300 R15: 0000000000022000 [ 1785.249641] Mem-Info: [ 1785.281706] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1785.315026] active_anon:15226 inactive_anon:35219 isolated_anon:0 [ 1785.315026] active_file:18 inactive_file:0 isolated_file:0 [ 1785.315026] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1785.315026] slab_reclaimable:13681 slab_unreclaimable:116269 [ 1785.315026] mapped:22370 shmem:35932 pagetables:558 bounce:0 [ 1785.315026] free:13770 free_pcp:180 free_cma:0 [ 1785.336031] Node 0 DMA32 free:17584kB min:35996kB low:44992kB high:53988kB active_anon:57340kB inactive_anon:40328kB active_file:76kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7264kB pagetables:1808kB bounce:0kB free_pcp:472kB local_pcp:224kB free_cma:0kB [ 1785.349345] Node 0 active_anon:57340kB inactive_anon:40328kB active_file:76kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58408kB dirty:0kB writeback:0kB shmem:42456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1785.354411] lowmem_reserve[]: 0 0 1 1 1 [ 1785.355207] Node 1 active_anon:3564kB inactive_anon:100548kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31072kB dirty:0kB writeback:0kB shmem:101272kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1785.359720] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1785.359748] lowmem_reserve[]: 0 0 0 0 0 [ 1785.359767] Node 1 Normal free:26616kB min:53876kB low:67344kB high:80812kB active_anon:3564kB inactive_anon:100548kB active_file:0kB inactive_file:80kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:424kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1785.359799] lowmem_reserve[]: 0 0 0 0 0 [ 1785.374809] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1785.377469] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10872kB [ 1785.385134] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1785.389268] Node 0 DMA32: 1293*4kB (ME) 719*8kB (UME) 133*16kB (UME) 43*32kB (ME) 19*64kB (UM) 5*128kB (M) 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 17308kB [ 1785.397081] Node 0 DMA32 free:17584kB min:35996kB low:44992kB high:53988kB active_anon:57340kB inactive_anon:40328kB active_file:76kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7264kB pagetables:1808kB bounce:0kB free_pcp:468kB local_pcp:248kB free_cma:0kB [ 1785.399031] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1785.403770] lowmem_reserve[]: 0 0 1 1 1 [ 1785.407039] Node 1 Normal: 350*4kB (UME) 277*8kB (UME) 238*16kB (ME) 141*32kB (UME) 32*64kB (UME) 9*128kB (ME) 6*256kB (ME) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 1*4096kB (M) = 26912kB [ 1785.414539] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1785.425620] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1785.430611] lowmem_reserve[]: 0 0 0 0 0 [ 1785.431413] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1785.435107] Node 1 Normal free:26616kB min:53876kB low:67344kB high:80812kB active_anon:3564kB inactive_anon:100548kB active_file:0kB inactive_file:80kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:424kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1785.450717] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1785.455464] lowmem_reserve[]: 0 0 0 0 0 [ 1785.455896] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1785.459833] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10872kB [ 1785.474102] 35972 total pagecache pages [ 1785.480746] Node 0 DMA32: 1293*4kB (ME) 719*8kB (UME) 133*16kB (UME) 43*32kB (ME) 19*64kB (UM) 5*128kB (M) 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 17308kB [ 1785.480938] 0 pages in swap cache [ 1785.484478] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1785.499791] Swap cache stats: add 0, delete 0, find 0/0 [ 1785.504215] Node 1 Normal: 350*4kB (UME) 277*8kB (UME) 238*16kB (ME) 141*32kB (UME) 32*64kB (UME) 9*128kB (ME) 6*256kB (ME) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 1*4096kB (M) = 26912kB [ 1785.504393] Free swap = 0kB [ 1785.509657] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1785.509669] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1785.509679] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1785.509688] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1785.509693] 35972 total pagecache pages [ 1785.509705] 0 pages in swap cache [ 1785.509712] Swap cache stats: add 0, delete 0, find 0/0 [ 1785.509719] Free swap = 0kB [ 1785.524636] Total swap = 0kB [ 1785.524647] 2097051 pages RAM [ 1785.535470] Total swap = 0kB [ 1785.551106] 0 pages HighMem/MovableOnly [ 1785.557322] 2097051 pages RAM [ 1785.566217] 369649 pages reserved [ 1785.572093] 0 pages HighMem/MovableOnly [ 1785.607473] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1785.635387] 369649 pages reserved [ 1785.673372] 0 pages cma reserved [ 1785.690222] 0 pages cma reserved [ 1786.138976] Unreclaimable slab info: [ 1786.142771] Name Used Total [ 1786.148378] pid_2 31KB 88KB [ 1786.153813] batadv_tt_change_cache 2KB 7KB [ 1786.160265] batadv_tl_cache 7KB 16KB [ 1786.165747] TIPC 24KB 45KB [ 1786.171255] SCTPv6 20KB 43KB [ 1786.176756] DCCPv6 17KB 37KB [ 1786.182294] DCCP 16KB 35KB [ 1786.187748] L2TP/IPv6 14KB 19KB [ 1786.193130] RXRPC 14KB 26KB [ 1786.198555] rxrpc_call_jar 101KB 126KB [ 1786.203928] bridge_fdb_cache 14KB 27KB [ 1786.209346] fib6_nodes 230KB 264KB [ 1786.215064] ip6_dst_cache 625KB 678KB [ 1786.220523] RAWv6 101KB 114KB [ 1786.225897] UDPv6 35KB 45KB [ 1786.231325] TCPv6 27KB 30KB [ 1786.236703] nf_conntrack 18KB 18KB [ 1786.242215] t10_alua_lu_gp_cache 0KB 3KB [ 1786.248038] sd_ext_cdb 0KB 7KB [ 1786.253517] scsi_sense_cache 1056KB 1060KB [ 1786.258953] virtio_scsi_cmd 16KB 16KB [ 1786.264823] sgpool-128 8KB 8KB [ 1786.270253] sgpool-64 4KB 12KB [ 1786.275704] sgpool-32 2KB 15KB [ 1786.281171] sgpool-16 1KB 7KB [ 1786.286537] sgpool-8 0KB 7KB [ 1786.291991] mqueue_inode_cache 12KB 30KB [ 1786.297530] bio_post_read_ctx 14KB 15KB [ 1786.302962] bio-2 14KB 15KB [ 1786.308403] jfs_mp 7KB 7KB [ 1786.313797] cifs_small_rq 15KB 16KB [ 1786.319229] cifs_request 67KB 67KB [ 1786.324593] cifs_mpx_ids 0KB 7KB [ 1786.330042] nfs_commit_data 3KB 14KB [ 1786.335413] nfs_write_data 34KB 44KB [ 1786.340893] ext4_system_zone 1KB 7KB [ 1786.346277] bio-1 1KB 7KB [ 1786.351873] pid_namespace 2KB 11KB [ 1786.357253] rpc_buffers 17KB 25KB [ 1786.362680] rpc_tasks 2KB 7KB [ 1786.375275] UNIX 1601KB 1661KB [ 1786.380758] tcp_bind_bucket 1KB 4KB [ 1786.386251] ip_fib_trie 34KB 47KB [ 1786.398538] ip_fib_alias 163KB 189KB [ 1786.403943] ip_dst_cache 12KB 16KB [ 1786.412692] RAW 61KB 75KB [ 1786.421456] UDP 69KB 74KB [ 1786.426875] TCP 14KB 16KB [ 1786.435804] hugetlbfs_inode_cache 3KB 15KB [ 1786.444851] fscache_cookie_jar 1KB 11KB [ 1786.453767] eventpoll_pwq 26KB 67KB [ 1786.462879] eventpoll_epi 48KB 63KB [ 1786.472136] inotify_inode_mark 24KB 31KB [ 1786.481301] request_queue 199KB 199KB [ 1786.486689] blkdev_requests 1KB 3KB [ 1786.495668] blkdev_ioc 28KB 38KB [ 1786.504658] bio-0 934KB 937KB [ 1786.513582] biovec-max 1468KB 1501KB [ 1786.522551] biovec-64 840KB 897KB [ 1786.531704] biovec-16 93KB 105KB [ 1786.537087] bio_integrity_payload 1KB 8KB [ 1786.543214] khugepaged_mm_slot 6KB 31KB [ 1786.549407] uid_cache 0KB 4KB [ 1786.554935] dmaengine-unmap-2 0KB 3KB [ 1786.560502] skbuff_fclone_cache 52KB 52KB [ 1786.566179] skbuff_head_cache 8714KB 8715KB [ 1786.574557] configfs_dir_cache 3KB 7KB [ 1786.583192] file_lock_cache 52KB 83KB [ 1786.591897] file_lock_ctx 9KB 11KB [ 1786.600539] fsnotify_mark_connector 7KB 23KB [ 1786.606518] net_namespace 78KB 78KB [ 1786.614709] shmem_inode_cache 8088KB 8275KB [ 1786.623570] task_delay_info 246KB 387KB [ 1786.631655] taskstats 50KB 91KB [ 1786.639949] proc_dir_entry 896KB 922KB [ 1786.645504] pde_opener 13KB 58KB [ 1786.653763] seq_file 224KB 417KB [ 1786.662016] sigqueue 53KB 66KB [ 1786.670056] kernfs_node_cache 18234KB 18246KB [ 1786.680264] mnt_cache 197KB 224KB [ 1786.685999] filp 7128KB 7931KB [ 1786.693945] names_cache 112977KB 112977KB [ 1786.701804] iint_cache 34KB 43KB [ 1786.707183] key_jar 4KB 7KB [ 1786.729971] uts_namespace 3KB 11KB [ 1786.735451] nsproxy 2KB 7KB [ 1786.759831] vm_area_struct 3199KB 4114KB [ 1786.765225] mm_struct 549KB 741KB [ 1786.799921] fs_cache 266KB 384KB [ 1786.805322] files_cache 986KB 1147KB [ 1786.829770] signal_cache 1785KB 2026KB [ 1786.835170] sighand_cache 536KB 638KB [ 1786.850157] task_struct 8521KB 8553KB [ 1786.855561] cred_jar 2170KB 3016KB [ 1786.876778] anon_vma_chain 1009KB 1547KB [ 1786.884689] anon_vma 137KB 327KB [ 1786.895756] pid 149KB 236KB [ 1786.901801] Acpi-Operand 156KB 202KB [ 1786.907211] Acpi-ParseExt 9KB 11KB [ 1786.914917] Acpi-Parse 41KB 47KB [ 1786.921039] Acpi-State 52KB 63KB [ 1786.926504] Acpi-Namespace 20KB 27KB [ 1786.933081] numa_policy 0KB 3KB [ 1786.939116] debug_objects_cache 1620KB 1968KB [ 1786.944740] trace_event_file 297KB 298KB [ 1786.951140] ftrace_event_field 398KB 401KB [ 1786.956781] pool_workqueue 136KB 156KB [ 1786.963263] page->ptl 507KB 1035KB [ 1786.969342] kmalloc-2097152 2050KB 2050KB [ 1786.974900] kmalloc-524288 2056KB 2056KB [ 1786.983048] kmalloc-262144 1290KB 1290KB [ 1786.989156] kmalloc-131072 650KB 650KB [ 1786.994539] kmalloc-65536 2640KB 2706KB [ 1787.001040] kmalloc-32768 2112KB 2178KB [ 1787.006418] kmalloc-16384 1254KB 1336KB [ 1787.012959] kmalloc-8192 5329KB 5445KB [ 1787.019063] kmalloc-4096 27442KB 27501KB [ 1787.024532] kmalloc-2048 16736KB 18009KB [ 1787.031017] kmalloc-1024 12944KB 14064KB [ 1787.036398] kmalloc-512 16642KB 16642KB [ 1787.042860] kmalloc-256 5556KB 6326KB [ 1787.050119] kmalloc-128 1318KB 1724KB [ 1787.055503] kmalloc-96 3501KB 4404KB [ 1787.061868] kmalloc-64 2800KB 3748KB [ 1787.067248] kmalloc-32 2011KB 2476KB [ 1787.073852] kmalloc-192 2188KB 3056KB [ 1787.081349] kmem_cache 177KB 183KB [ 1787.086738] Out of memory (oom_kill_allocating_task): Kill process 24202 (in:imklog) score 0 or sacrifice child [ 1787.098189] Killed process 24200 (rsyslogd) total-vm:254332kB, anon-rss:520kB, file-rss:0kB, shmem-rss:0kB [ 1787.110674] oom_reaper: reaped process 24200 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 07:10:53 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="02071f0709"], 0x48}}, 0x90) 07:10:53 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @vbi={0x20, 0x7, 0xfff, 0x3697a13, [0x9, 0x80], [0xffffffff, 0x2], 0x1}}) 07:10:53 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3, 0x3b1, 0xffffffff}, &(0x7f00000001c0)={{0x4, 0x4, 0x475, 0x9f7}, &(0x7f0000000180)={{0x6, 0x9, 0x5}}}}, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:10:53 executing program 4: r0 = socket$tipc(0x1e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) 07:10:53 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) (async, rerun: 32) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000300)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000340)=@multiplanar_fd={0x2, 0x3, 0x4, 0x800, 0xfffffffa, {r2, r3/1000+10000}, {0x5, 0x0, 0x0, 0x8d, 0x0, 0x3f, '\'I0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@fd={0x1000, 0x3, 0x4, 0x4000, 0x4, {0x77359400}, {0x5, 0x2, 0x9, 0x2d, 0x4, 0x5, "a5da14cf"}, 0x5, 0x4, {}, 0x419f, 0x0, r1}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2}) 07:10:53 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 07:10:53 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) [ 1792.650437] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.656169] ieee802154 phy1 wpan1: encryption failed: -22 [ 1795.883161] oom_reaper: reaped process 24329 (syz-executor.2), now anon-rss:0kB, file-rss:14336kB, shmem-rss:12kB [ 1795.904036] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1795.920615] in:imklog cpuset=/ mems_allowed=0-1 [ 1795.925324] CPU: 1 PID: 24245 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 1795.932774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1795.942215] Call Trace: [ 1795.944816] dump_stack+0x1fc/0x2ef [ 1795.948452] dump_header+0x15d/0xc3f [ 1795.952177] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1795.957395] ? ___ratelimit+0x319/0x590 [ 1795.961381] oom_kill_process.cold+0x10/0x692 [ 1795.965882] ? check_preemption_disabled+0x41/0x280 [ 1795.971004] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1795.976288] out_of_memory+0x1072/0x1390 [ 1795.980361] ? oom_killer_disable+0x270/0x270 [ 1795.984864] ? mutex_trylock+0x15f/0x1a0 [ 1795.988935] __alloc_pages_nodemask+0x23a2/0x2890 [ 1795.993823] ? find_get_entry+0x4cd/0x8a0 [ 1795.998083] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1796.002960] alloc_pages_current+0x193/0x2a0 [ 1796.007373] filemap_fault+0x146e/0x2180 [ 1796.011453] ext4_filemap_fault+0x84/0xb0 [ 1796.015606] __do_fault+0x10b/0x4b0 [ 1796.019243] __handle_mm_fault+0x273b/0x41c0 [ 1796.023657] ? vm_insert_page+0x9c0/0x9c0 [ 1796.027809] ? lock_downgrade+0x720/0x720 [ 1796.031975] ? check_preemption_disabled+0x41/0x280 [ 1796.036997] handle_mm_fault+0x436/0xb10 [ 1796.041082] __do_page_fault+0x68e/0xd60 [ 1796.045204] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1796.050230] ? spurious_fault+0x840/0x840 [ 1796.054391] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1796.059265] ? page_fault+0x8/0x30 [ 1796.062815] page_fault+0x1e/0x30 [ 1796.066264] RIP: 0033:0x7fc44ebbf22d [ 1796.069973] Code: Bad RIP value. [ 1796.070248] syz-executor.2: vmalloc: allocation failure, allocated 1678401536 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1796.073358] RSP: 002b:00007fc44c55b580 EFLAGS: 00010293 [ 1796.092524] RAX: 0000000000000078 RBX: 0000000000000000 RCX: 00007fc44ebbf22d [ 1796.097034] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1796.099796] RDX: 0000000000001fa0 RSI: 00007fc44c55bda0 RDI: 0000000000000004 [ 1796.112145] RBP: 000055dec698f9d0 R08: 0000000000000000 R09: 0000000000000000 [ 1796.119418] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007fc44c55bda0 [ 1796.126695] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007fc44c55be20 [ 1796.133991] CPU: 0 PID: 24329 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 1796.136884] Mem-Info: [ 1796.141896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1796.144341] active_anon:16895 inactive_anon:35219 isolated_anon:0 [ 1796.144341] active_file:12 inactive_file:13 isolated_file:0 [ 1796.144341] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1796.144341] slab_reclaimable:13902 slab_unreclaimable:117936 [ 1796.144341] mapped:22418 shmem:35932 pagetables:604 bounce:0 [ 1796.144341] free:13768 free_pcp:944 free_cma:0 [ 1796.153766] Call Trace: [ 1796.153796] dump_stack+0x1fc/0x2ef [ 1796.153813] warn_alloc.cold+0x7b/0x18f [ 1796.153851] ? zone_watermark_ok_safe+0x260/0x260 [ 1796.187147] Node 0 active_anon:63992kB inactive_anon:40328kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58408kB dirty:0kB writeback:0kB shmem:42456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1796.189673] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1796.194968] Node 1 active_anon:3588kB inactive_anon:100548kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31264kB dirty:0kB writeback:0kB shmem:101272kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1796.197249] ? retint_kernel+0x2d/0x2d [ 1796.197280] __vmalloc_area_node+0x4fd/0x780 [ 1796.202097] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1796.229727] ? __vmalloc_node_range+0x180/0x180 [ 1796.229743] ? _raw_spin_unlock+0x29/0x40 [ 1796.229755] ? __get_vm_area_node+0x2e2/0x3a0 [ 1796.229773] __vmalloc_node_range+0xed/0x180 [ 1796.234520] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1796.261757] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1796.261771] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1796.261783] vmalloc_user+0x70/0xe0 [ 1796.261798] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1796.265675] Node 0 DMA32 free:17600kB min:35996kB low:44992kB high:53988kB active_anon:63992kB inactive_anon:40328kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7328kB pagetables:1992kB bounce:0kB free_pcp:1912kB local_pcp:376kB free_cma:0kB [ 1796.270102] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1796.270118] __vb2_queue_alloc+0x472/0xe60 [ 1796.270141] vb2_core_create_bufs+0x273/0x7e0 [ 1796.270157] ? __vb2_queue_free+0x870/0x870 [ 1796.297959] lowmem_reserve[]: 0 0 1 1 1 [ 1796.300947] ? mutex_trylock+0x1a0/0x1a0 [ 1796.305113] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1796.309617] ? __video_do_ioctl+0x632/0xcd0 [ 1796.309637] vb2_create_bufs+0x332/0x620 [ 1796.309656] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1796.314129] lowmem_reserve[]: 0 0 0 0 0 [ 1796.319185] ? __video_do_ioctl+0x632/0xcd0 [ 1796.319200] ? mutex_trylock+0x1a0/0x1a0 [ 1796.319215] ? mark_held_locks+0xf0/0xf0 [ 1796.319233] ? futex_wait_queue_me+0x404/0x5e0 [ 1796.323549] Node 1 Normal free:26592kB min:53876kB low:67344kB high:80812kB active_anon:3588kB inactive_anon:100548kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:424kB bounce:0kB free_pcp:1864kB local_pcp:1616kB free_cma:0kB [ 1796.328926] vb2_ioctl_create_bufs+0x20d/0x360 [ 1796.328942] ? memset+0x20/0x40 [ 1796.328958] v4l_create_bufs+0xb2/0x160 [ 1796.328975] __video_do_ioctl+0x49a/0xcd0 [ 1796.332596] lowmem_reserve[]: 0 0 0 0 0 [ 1796.336929] ? v4l_querycap+0x340/0x340 [ 1796.336947] ? __might_fault+0x192/0x1d0 [ 1796.336965] ? v4l_querycap+0x340/0x340 [ 1796.365982] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10872kB [ 1796.370090] video_usercopy+0x13f/0xfa0 [ 1796.370115] ? v4l_enumstd+0x60/0x60 [ 1796.374343] Node 0 DMA32: 978*4kB (UME) 563*8kB (UME) 132*16kB (ME) 43*32kB (ME) 19*64kB (UM) 5*128kB (M) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 1*2048kB (M) 0*4096kB = 17600kB [ 1796.378840] ? do_futex+0x171/0x1880 [ 1796.378858] ? mark_held_locks+0xf0/0xf0 [ 1796.378878] ? debug_check_no_obj_freed+0x201/0x490 [ 1796.383171] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1796.387147] ? video_usercopy+0xfa0/0xfa0 [ 1796.387165] v4l2_ioctl+0x147/0x1a0 [ 1796.391200] Node 1 Normal: 342*4kB (ME) 209*8kB (UME) 226*16kB (M) 139*32kB (UME) 20*64kB (UME) 9*128kB (ME) 7*256kB (UME) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 1*4096kB (M) = 26592kB [ 1796.417040] ? video_devdata+0xa0/0xa0 [ 1796.417056] do_vfs_ioctl+0xcdb/0x12e0 [ 1796.417072] ? lock_downgrade+0x720/0x720 [ 1796.417088] ? check_preemption_disabled+0x41/0x280 [ 1796.417100] ? ioctl_preallocate+0x200/0x200 [ 1796.417115] ? __fget+0x356/0x510 [ 1796.417130] ? do_dup2+0x450/0x450 [ 1796.417144] ? __se_sys_futex+0x298/0x3b0 [ 1796.417165] ksys_ioctl+0x9b/0xc0 [ 1796.417179] __x64_sys_ioctl+0x6f/0xb0 [ 1796.417194] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1796.417208] do_syscall_64+0xf9/0x620 [ 1796.417227] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1796.417238] RIP: 0033:0x7f84990cb0f9 [ 1796.417252] Code: Bad RIP value. [ 1796.417260] RSP: 002b:00007f849763d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1796.417273] RAX: ffffffffffffffda RBX: 00007f84991eaf80 RCX: 00007f84990cb0f9 [ 1796.417281] RDX: 0000000020000640 RSI: 00000000c100565c RDI: 0000000000000003 [ 1796.417289] RBP: 00007f8499126ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1796.417296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1796.417305] R13: 00007ffd009ddcff R14: 00007f849763d300 R15: 0000000000022000 [ 1796.446766] Mem-Info: [ 1796.449221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1796.455975] active_anon:16895 inactive_anon:35219 isolated_anon:0 [ 1796.455975] active_file:12 inactive_file:13 isolated_file:0 [ 1796.455975] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1796.455975] slab_reclaimable:13902 slab_unreclaimable:117936 [ 1796.455975] mapped:22418 shmem:35932 pagetables:604 bounce:0 [ 1796.455975] free:13768 free_pcp:944 free_cma:0 [ 1796.482703] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1796.482714] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1796.482724] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1796.482729] 35957 total pagecache pages [ 1796.482742] 0 pages in swap cache [ 1796.482749] Swap cache stats: add 0, delete 0, find 0/0 [ 1796.482753] Free swap = 0kB [ 1796.482758] Total swap = 0kB [ 1796.482766] 2097051 pages RAM [ 1796.482770] 0 pages HighMem/MovableOnly [ 1796.482774] 369649 pages reserved [ 1796.482778] 0 pages cma reserved [ 1796.482784] Unreclaimable slab info: [ 1796.482793] Name Used Total [ 1796.504458] Node 0 active_anon:63992kB inactive_anon:40328kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58408kB dirty:0kB writeback:0kB shmem:42456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1796.504487] Node 1 active_anon:3588kB inactive_anon:100548kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31264kB dirty:0kB writeback:0kB shmem:101272kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1796.504493] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1796.504524] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1796.504544] Node 0 DMA32 free:17800kB min:35996kB low:44992kB high:53988kB active_anon:63992kB inactive_anon:40328kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7328kB pagetables:1992kB bounce:0kB free_pcp:1664kB local_pcp:1288kB free_cma:0kB [ 1796.504577] lowmem_reserve[]: 0 0 1 1 1 [ 1796.504597] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1796.504627] lowmem_reserve[]: 0 0 0 0 0 [ 1796.504647] Node 1 Normal free:26592kB min:53876kB low:67344kB high:80812kB active_anon:3588kB inactive_anon:100548kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:424kB bounce:0kB free_pcp:1864kB local_pcp:248kB free_cma:0kB [ 1796.504681] lowmem_reserve[]: 0 0 0 0 0 [ 1796.504700] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10872kB [ 1796.504772] Node 0 DMA32: 993*4kB (UME) 565*8kB (ME) 133*16kB (UME) 44*32kB (UME) 19*64kB (UM) 6*128kB (UM) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 1*2048kB (M) 0*4096kB = 17852kB [ 1796.504858] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1796.504919] Node 1 Normal: 342*4kB (ME) 209*8kB (UME) 226*16kB (M) 139*32kB (UME) 20*64kB (UME) 9*128kB (ME) 7*256kB (UME) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 1*4096kB (M) = 26592kB [ 1796.505009] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1796.505019] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1796.505030] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1796.505040] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1796.505046] 35957 total pagecache pages [ 1796.505059] 0 pages in swap cache [ 1796.505067] Swap cache stats: add 0, delete 0, find 0/0 [ 1796.505072] Free swap = 0kB [ 1796.505077] Total swap = 0kB [ 1796.505085] 2097051 pages RAM [ 1796.505090] 0 pages HighMem/MovableOnly [ 1796.505095] 369649 pages reserved [ 1796.505100] 0 pages cma reserved [ 1797.146640] pid_2 42KB 88KB [ 1797.156739] batadv_tt_change_cache 2KB 7KB [ 1797.162597] batadv_tl_cache 6KB 16KB [ 1797.172808] TIPC 34KB 45KB [ 1797.181756] SCTPv6 18KB 43KB [ 1797.192235] DCCPv6 17KB 37KB [ 1797.201161] DCCP 16KB 35KB [ 1797.206570] L2TP/IPv6 14KB 19KB [ 1797.223587] RXRPC 13KB 26KB [ 1797.232290] rxrpc_call_jar 95KB 126KB [ 1797.242763] bridge_fdb_cache 12KB 27KB [ 1797.251534] fib6_nodes 215KB 264KB [ 1797.262154] ip6_dst_cache 607KB 678KB [ 1797.271197] RAWv6 92KB 108KB [ 1797.276600] UDPv6 31KB 41KB [ 1797.290183] TCPv6 33KB 36KB [ 1797.295577] nf_conntrack 14KB 18KB [ 1797.305131] t10_alua_lu_gp_cache 0KB 3KB [ 1797.314687] sd_ext_cdb 0KB 7KB [ 1797.325844] scsi_sense_cache 1056KB 1060KB [ 1797.331340] virtio_scsi_cmd 16KB 16KB [ 1797.336711] sgpool-128 8KB 8KB [ 1797.345619] sgpool-64 4KB 12KB [ 1797.351228] sgpool-32 2KB 15KB [ 1797.356602] sgpool-16 1KB 7KB [ 1797.365205] sgpool-8 0KB 7KB [ 1797.370713] mqueue_inode_cache 12KB 30KB [ 1797.376439] bio_post_read_ctx 14KB 15KB [ 1797.385111] bio-2 14KB 15KB [ 1797.390542] jfs_mp 7KB 7KB [ 1797.395945] cifs_small_rq 15KB 16KB [ 1797.404656] cifs_request 67KB 67KB [ 1797.410126] cifs_mpx_ids 0KB 7KB [ 1797.415519] nfs_commit_data 3KB 14KB [ 1797.426117] nfs_write_data 34KB 44KB [ 1797.435409] ext4_system_zone 1KB 7KB [ 1797.444933] bio-1 1KB 7KB [ 1797.456450] pid_namespace 2KB 11KB [ 1797.465895] rpc_buffers 17KB 25KB [ 1797.475280] rpc_tasks 2KB 7KB [ 1797.484899] UNIX 1528KB 1597KB [ 1797.494464] tcp_bind_bucket 1KB 4KB [ 1797.503975] ip_fib_trie 31KB 47KB [ 1797.513383] ip_fib_alias 154KB 189KB [ 1797.522979] ip_dst_cache 10KB 16KB [ 1797.541456] RAW 57KB 75KB [ 1797.550203] UDP 59KB 74KB [ 1797.555592] TCP 16KB 22KB [ 1797.565969] hugetlbfs_inode_cache 3KB 15KB [ 1797.575170] fscache_cookie_jar 1KB 11KB [ 1797.585522] eventpoll_pwq 24KB 67KB [ 1797.594138] eventpoll_epi 43KB 63KB [ 1797.604300] inotify_inode_mark 19KB 31KB [ 1797.612955] request_queue 199KB 199KB [ 1797.623395] blkdev_requests 1KB 3KB [ 1797.634239] blkdev_ioc 27KB 38KB [ 1797.644686] bio-0 1060KB 1065KB [ 1797.653480] biovec-max 1518KB 1518KB [ 1797.664001] biovec-64 978KB 992KB [ 1797.672919] biovec-16 100KB 105KB [ 1797.683482] bio_integrity_payload 1KB 8KB [ 1797.700177] khugepaged_mm_slot 11KB 31KB [ 1797.708483] uid_cache 0KB 4KB [ 1797.713940] dmaengine-unmap-2 0KB 3KB [ 1797.722626] skbuff_fclone_cache 73KB 75KB [ 1797.731703] skbuff_head_cache 8655KB 8696KB [ 1797.740353] configfs_dir_cache 3KB 7KB [ 1797.745822] file_lock_cache 58KB 83KB [ 1797.753001] file_lock_ctx 9KB 11KB [ 1797.761742] fsnotify_mark_connector 13KB 23KB [ 1797.771728] net_namespace 70KB 78KB [ 1797.780246] shmem_inode_cache 8119KB 8275KB [ 1797.785709] task_delay_info 252KB 387KB [ 1797.792777] taskstats 56KB 91KB [ 1797.801528] proc_dir_entry 864KB 888KB [ 1797.808612] pde_opener 13KB 58KB [ 1797.813988] seq_file 228KB 417KB [ 1797.822593] sigqueue 50KB 66KB [ 1797.829737] kernfs_node_cache 18235KB 18246KB [ 1797.840636] mnt_cache 192KB 216KB [ 1797.846110] filp 6918KB 7931KB [ 1797.854947] names_cache 120202KB 120202KB [ 1797.863540] iint_cache 34KB 43KB [ 1797.870600] key_jar 4KB 7KB [ 1797.875980] uts_namespace 3KB 7KB [ 1797.884808] nsproxy 2KB 7KB [ 1797.891914] vm_area_struct 3155KB 4103KB [ 1797.902052] mm_struct 572KB 741KB [ 1797.920215] fs_cache 253KB 384KB [ 1797.935505] files_cache 990KB 1147KB [ 1797.959991] signal_cache 1650KB 2012KB [ 1797.965391] sighand_cache 568KB 631KB [ 1797.991714] task_struct 7265KB 7354KB [ 1797.997158] cred_jar 2110KB 3012KB [ 1798.002529] anon_vma_chain 1020KB 1547KB [ 1798.026875] anon_vma 159KB 327KB [ 1798.032283] pid 146KB 236KB [ 1798.042952] Acpi-Operand 156KB 202KB [ 1798.053679] Acpi-ParseExt 9KB 11KB [ 1798.059694] Acpi-Parse 41KB 47KB [ 1798.065066] Acpi-State 52KB 63KB [ 1798.077152] Acpi-Namespace 20KB 27KB [ 1798.082559] numa_policy 0KB 3KB [ 1798.094133] debug_objects_cache 1607KB 1968KB [ 1798.100382] trace_event_file 297KB 298KB [ 1798.105758] ftrace_event_field 398KB 401KB [ 1798.117088] pool_workqueue 132KB 156KB [ 1798.122574] page->ptl 536KB 1035KB [ 1798.134196] kmalloc-2097152 2050KB 2050KB [ 1798.143366] kmalloc-524288 2056KB 2056KB [ 1798.153657] kmalloc-262144 1290KB 1290KB [ 1798.160810] kmalloc-131072 650KB 650KB [ 1798.166189] kmalloc-65536 2376KB 2574KB [ 1798.176594] kmalloc-32768 1980KB 2112KB [ 1798.183524] kmalloc-16384 1155KB 1287KB [ 1798.193739] kmalloc-8192 4752KB 4867KB [ 1798.200752] kmalloc-4096 24144KB 24203KB [ 1798.206121] kmalloc-2048 15705KB 17754KB [ 1798.216513] kmalloc-1024 12128KB 13930KB [ 1798.223372] kmalloc-512 16162KB 16668KB [ 1798.233266] kmalloc-256 5181KB 6322KB [ 1798.240044] kmalloc-128 1296KB 1724KB [ 1798.252564] kmalloc-96 3538KB 4404KB [ 1798.259417] kmalloc-64 2743KB 3748KB [ 1798.264791] kmalloc-32 1985KB 2476KB [ 1798.275173] kmalloc-192 2077KB 3052KB [ 1798.281974] kmem_cache 177KB 183KB [ 1798.292158] Out of memory (oom_kill_allocating_task): Kill process 24245 (in:imklog) score 0 or sacrifice child [ 1798.304071] Killed process 24243 (rsyslogd) total-vm:254332kB, anon-rss:520kB, file-rss:0kB, shmem-rss:0kB [ 1798.321013] oom_reaper: reaped process 24243 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 07:11:01 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0x3, 0x1, {0x1, @sliced={0x1, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8, 0x7ff, 0x80, 0x3, 0x0, 0x0, 0x7, 0x20, 0x0, 0x9], 0xd3e}}, 0x7ff}) 07:11:01 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async) r1 = socket$inet6(0xa, 0x4, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x9, 0x1, 0x44, @mcast1, @mcast1, 0x20, 0x700, 0xfffffff7, 0xfffffffe}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8}) 07:11:01 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3, 0x3b1, 0xffffffff}, &(0x7f00000001c0)={{0x4, 0x4, 0x475, 0x9f7}, &(0x7f0000000180)={{0x6, 0x9, 0x5}}}}, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:11:01 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@fd={0x1000, 0x3, 0x4, 0x4000, 0x4, {0x77359400}, {0x5, 0x2, 0x9, 0x2d, 0x4, 0x5, "a5da14cf"}, 0x5, 0x4, {}, 0x419f, 0x0, r1}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2}) 07:11:01 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b7f8bd690cfeb8873d1512fbb8a9acab67197c8759ba1921c4f89b90587fb2548e7e7e7ce0ed42c271c76d1a875eed4621eea8f520897fd6df2a38bc95973fa81e2529587d7938a7c3417a612ea79bc07d9574d68f8077ed10d9988c35505448ba3a7b86703cef48e2b07c419acf70785fe8f02b85a63676e3e03d0b56e3dda0a825edb745bd1d61a93144ac567dcde0257c9f7700512ebc7aef76d0ac7e8e0e5cfb75c7e8f73cea6259bb09e767e6759dd85a80b7839c238b9d1effb3bfe03c378e228bc8e14", 0xd6) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f0000000100)="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", &(0x7f0000000200)=""/122, &(0x7f0000000280)="ffbab184ed0a4ee759730284319670cdf015aa3d3907c9c1547bc2ec5590e304abf45522b41b5b8d43e1040940a1502992dfa30fa4be109d92e1a57e31c0b91544ba15553a0c9fe6ba1b616ad0db2857b624353ebe85eaf3e70f53f651eab904ec0f04d6b218a7eff3edc8cbba1c69d5c3ff82b17cd0dc1bc59ef71194dc4c2973050d08410dd998e99f9d07e72d7ba2f146d51038eed13ef8fda485e8a6bf7c1e39d1a69dfae30e6e243145fc4043842fcd8fb63c1456710f83078b504f2212fb1a203868fa71fac4c25977445a1499dadf212e144ef5ce566b038c4bd9b90336570c04e04327a81742ffdc9a34b032d2f0", &(0x7f0000000380)="a90377e5a021e04733f7ea8087b810ee434d932297b039ddd5a5690c92cefb4955e62de9b13df9f536a85b949f0d174800efaaa623331e6ae503b1aad09006c02a9ac3e72067ac15b9da13614cb0920bdfbc13610ac3ce3bc0d5b7677224585b37eea968aa197c28e74bdf692183785aacee9b3494d95d6141fd27d12ef8335995ea8041107bc0006fb7af3eb18215d6efcdc2f1", 0x400, 0xffffffffffffffff, 0x4}, 0x38) 07:11:01 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3, 0x3b1, 0xffffffff}, &(0x7f00000001c0)={{0x4, 0x4, 0x475, 0x9f7}, &(0x7f0000000180)={{0x6, 0x9, 0x5}}}}, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:11:04 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2, @raw_data="325a260a5298a50c9e94da6864cae7a9f4b7c3404ef186899ca6daaca1873e0927aae4ff90cb53237738c3c0076ae9418adda14316d603f7d59f918abe2646b27af9032ae091dc6eb3b555cd27774385de109af5e243a1f1662bc20a8af70c5a6ddae7561d1bd68d51a5323a328d2d4243a0d13485b60baa16455c595a540d8014ba9ce9b66c9a11d71c7bde3608382286513e6f0f2eb0f86d8d7e9d45035445f2a89e27a20deb3d24971d6b35d45f500b24568abe2d5bdbc38b6659fe25ddbc7e3ed0d3ac4bc162"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x6, 0x3, 0x1, {0x1, @sliced={0x1, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8, 0x7ff, 0x80, 0x3, 0x0, 0x0, 0x7, 0x20, 0x0, 0x9], 0xd3e}}, 0x7ff}) 07:11:04 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b7f8bd690cfeb8873d1512fbb8a9acab67197c8759ba1921c4f89b90587fb2548e7e7e7ce0ed42c271c76d1a875eed4621eea8f520897fd6df2a38bc95973fa81e2529587d7938a7c3417a612ea79bc07d9574d68f8077ed10d9988c35505448ba3a7b86703cef48e2b07c419acf70785fe8f02b85a63676e3e03d0b56e3dda0a825edb745bd1d61a93144ac567dcde0257c9f7700512ebc7aef76d0ac7e8e0e5cfb75c7e8f73cea6259bb09e767e6759dd85a80b7839c238b9d1effb3bfe03c378e228bc8e14", 0xd6) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f0000000100)="1abd1770b6126b5e421bee68b040adc90a6aef126ecd42e82f82e2d1d8511d8df835b49a4669ed83922573fce6d692eb6e4532f35d54d4725310c9d528550191337a783888e2e1c17cc57e088ca69f8d06da4e461f8da57799178f5957938937c661a7c4e672b8cf8eccfaeec66edca543b86972c8143ac4811d468e1f1131565e90197e7483e17c643673418b0cbc730b1eea01e948ec9772e8e9263d495d2d326f5808b119e5949e679dad641dfcfd468b148e277cad9ea0fe0042df06e1bc83810f5dab0a8801647c124f92ab3ee2e0b185644a727b1ced21638b9e58243231e23d44c4a98a7bfd0b7060a292de8fd993831248b53f39d40fb8181551", &(0x7f0000000200)=""/122, &(0x7f0000000280)="ffbab184ed0a4ee759730284319670cdf015aa3d3907c9c1547bc2ec5590e304abf45522b41b5b8d43e1040940a1502992dfa30fa4be109d92e1a57e31c0b91544ba15553a0c9fe6ba1b616ad0db2857b624353ebe85eaf3e70f53f651eab904ec0f04d6b218a7eff3edc8cbba1c69d5c3ff82b17cd0dc1bc59ef71194dc4c2973050d08410dd998e99f9d07e72d7ba2f146d51038eed13ef8fda485e8a6bf7c1e39d1a69dfae30e6e243145fc4043842fcd8fb63c1456710f83078b504f2212fb1a203868fa71fac4c25977445a1499dadf212e144ef5ce566b038c4bd9b90336570c04e04327a81742ffdc9a34b032d2f0", &(0x7f0000000380)="a90377e5a021e04733f7ea8087b810ee434d932297b039ddd5a5690c92cefb4955e62de9b13df9f536a85b949f0d174800efaaa623331e6ae503b1aad09006c02a9ac3e72067ac15b9da13614cb0920bdfbc13610ac3ce3bc0d5b7677224585b37eea968aa197c28e74bdf692183785aacee9b3494d95d6141fd27d12ef8335995ea8041107bc0006fb7af3eb18215d6efcdc2f1", 0x400, 0xffffffffffffffff, 0x4}, 0x38) 07:11:04 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3, 0x3b1, 0xffffffff}, &(0x7f00000001c0)={{0x4, 0x4, 0x475, 0x9f7}, &(0x7f0000000180)={{0x6, 0x9, 0x5}}}}, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:11:04 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r1 = socket$inet6(0xa, 0x4, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x9, 0x1, 0x44, @mcast1, @mcast1, 0x20, 0x700, 0xfffffff7, 0xfffffffe}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8}) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async) socket$inet6(0xa, 0x4, 0x80) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x9, 0x1, 0x44, @mcast1, @mcast1, 0x20, 0x700, 0xfffffff7, 0xfffffffe}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8}) (async) 07:11:04 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0x3, 0x1, {0x1, @sliced={0x1, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8, 0x7ff, 0x80, 0x3, 0x0, 0x0, 0x7, 0x20, 0x0, 0x9], 0xd3e}}, 0x7ff}) 07:11:04 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@fd={0x1000, 0x3, 0x4, 0x4000, 0x4, {0x77359400}, {0x5, 0x2, 0x9, 0x2d, 0x4, 0x5, "a5da14cf"}, 0x5, 0x4, {}, 0x419f, 0x0, r1}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2}) 07:11:04 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b7f8bd690cfeb8873d1512fbb8a9acab67197c8759ba1921c4f89b90587fb2548e7e7e7ce0ed42c271c76d1a875eed4621eea8f520897fd6df2a38bc95973fa81e2529587d7938a7c3417a612ea79bc07d9574d68f8077ed10d9988c35505448ba3a7b86703cef48e2b07c419acf70785fe8f02b85a63676e3e03d0b56e3dda0a825edb745bd1d61a93144ac567dcde0257c9f7700512ebc7aef76d0ac7e8e0e5cfb75c7e8f73cea6259bb09e767e6759dd85a80b7839c238b9d1effb3bfe03c378e228bc8e14", 0xd6) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f0000000100)="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", &(0x7f0000000200)=""/122, &(0x7f0000000280)="ffbab184ed0a4ee759730284319670cdf015aa3d3907c9c1547bc2ec5590e304abf45522b41b5b8d43e1040940a1502992dfa30fa4be109d92e1a57e31c0b91544ba15553a0c9fe6ba1b616ad0db2857b624353ebe85eaf3e70f53f651eab904ec0f04d6b218a7eff3edc8cbba1c69d5c3ff82b17cd0dc1bc59ef71194dc4c2973050d08410dd998e99f9d07e72d7ba2f146d51038eed13ef8fda485e8a6bf7c1e39d1a69dfae30e6e243145fc4043842fcd8fb63c1456710f83078b504f2212fb1a203868fa71fac4c25977445a1499dadf212e144ef5ce566b038c4bd9b90336570c04e04327a81742ffdc9a34b032d2f0", &(0x7f0000000380)="a90377e5a021e04733f7ea8087b810ee434d932297b039ddd5a5690c92cefb4955e62de9b13df9f536a85b949f0d174800efaaa623331e6ae503b1aad09006c02a9ac3e72067ac15b9da13614cb0920bdfbc13610ac3ce3bc0d5b7677224585b37eea968aa197c28e74bdf692183785aacee9b3494d95d6141fd27d12ef8335995ea8041107bc0006fb7af3eb18215d6efcdc2f1", 0x400, 0xffffffffffffffff, 0x4}, 0x38) 07:11:04 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3, 0x3b1, 0xffffffff}, &(0x7f00000001c0)={{0x4, 0x4, 0x475, 0x9f7}, &(0x7f0000000180)={{0x6, 0x9, 0x5}}}}, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:11:04 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@userptr={0x4, 0x1, 0x4, 0x400, 0xe451, {}, {0x1, 0xc, 0x1, 0x65, 0x1, 0x7, "7843a804"}, 0x9, 0x2, {&(0x7f0000000140)}, 0x2}) 07:11:04 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3, 0x3b1, 0xffffffff}, &(0x7f00000001c0)={{0x4, 0x4, 0x475, 0x9f7}, &(0x7f0000000180)={{0x6, 0x9, 0x5}}}}, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:11:04 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b7f8bd690cfeb8873d1512fbb8a9acab67197c8759ba1921c4f89b90587fb2548e7e7e7ce0ed42c271c76d1a875eed4621eea8f520897fd6df2a38bc95973fa81e2529587d7938a7c3417a612ea79bc07d9574d68f8077ed10d9988c35505448ba3a7b86703cef48e2b07c419acf70785fe8f02b85a63676e3e03d0b56e3dda0a825edb745bd1d61a93144ac567dcde0257c9f7700512ebc7aef76d0ac7e8e0e5cfb75c7e8f73cea6259bb09e767e6759dd85a80b7839c238b9d1effb3bfe03c378e228bc8e14", 0xd6) 07:11:04 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3, 0x3b1, 0xffffffff}, &(0x7f00000001c0)={{0x4, 0x4, 0x475, 0x9f7}, &(0x7f0000000180)={{0x6, 0x9, 0x5}}}}, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) [ 1806.898565] oom_reaper: reaped process 24386 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 1806.972950] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1806.991256] in:imklog cpuset=/ mems_allowed=0-1 [ 1806.995964] CPU: 0 PID: 24369 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 1807.003411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1807.012938] Call Trace: [ 1807.015538] dump_stack+0x1fc/0x2ef [ 1807.019177] dump_header+0x15d/0xc3f [ 1807.022897] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1807.028001] ? ___ratelimit+0x319/0x590 [ 1807.031981] oom_kill_process.cold+0x10/0x692 [ 1807.036484] ? check_preemption_disabled+0x41/0x280 [ 1807.041511] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1807.046789] out_of_memory+0x1072/0x1390 [ 1807.050961] ? oom_killer_disable+0x270/0x270 [ 1807.055461] ? mutex_trylock+0x15f/0x1a0 [ 1807.059528] __alloc_pages_nodemask+0x23a2/0x2890 [ 1807.064382] ? find_get_entry+0x4cd/0x8a0 [ 1807.068545] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1807.073414] alloc_pages_current+0x193/0x2a0 [ 1807.077832] filemap_fault+0x146e/0x2180 [ 1807.081884] ext4_filemap_fault+0x84/0xb0 [ 1807.086026] __do_fault+0x10b/0x4b0 [ 1807.089646] __handle_mm_fault+0x273b/0x41c0 [ 1807.094050] ? vm_insert_page+0x9c0/0x9c0 [ 1807.098181] ? lock_downgrade+0x720/0x720 [ 1807.102331] ? check_preemption_disabled+0x41/0x280 [ 1807.107420] handle_mm_fault+0x436/0xb10 [ 1807.111475] __do_page_fault+0x68e/0xd60 [ 1807.115533] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1807.120533] ? spurious_fault+0x840/0x840 [ 1807.124677] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1807.129514] ? page_fault+0x8/0x30 [ 1807.133034] page_fault+0x1e/0x30 [ 1807.136479] RIP: 0033:0x7efc1d03622d [ 1807.140450] Code: Bad RIP value. [ 1807.143802] RSP: 002b:00007efc1a9d2580 EFLAGS: 00010293 [ 1807.149148] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007efc1d03622d [ 1807.156402] RDX: 0000000000001fa0 RSI: 00007efc1a9d2da0 RDI: 0000000000000004 [ 1807.163658] RBP: 00005636301749d0 R08: 0000000000000000 R09: 0000000000000000 [ 1807.170950] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007efc1a9d2da0 [ 1807.178200] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007efc1a9d4553 [ 1807.187818] Mem-Info: [ 1807.190267] active_anon:16901 inactive_anon:35219 isolated_anon:0 [ 1807.190267] active_file:16 inactive_file:12 isolated_file:0 [ 1807.190267] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1807.190267] slab_reclaimable:14047 slab_unreclaimable:119727 [ 1807.190267] mapped:22457 shmem:35932 pagetables:607 bounce:0 [ 1807.190267] free:13846 free_pcp:905 free_cma:0 [ 1807.207892] syz-executor.1: vmalloc: allocation failure, allocated 1670209536 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1807.223742] Node 0 active_anon:64616kB inactive_anon:40332kB active_file:48kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58408kB dirty:0kB writeback:0kB shmem:42460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1807.252641] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1807.272300] Node 1 active_anon:2988kB inactive_anon:100544kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31420kB dirty:0kB writeback:0kB shmem:101268kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1807.281076] CPU: 1 PID: 24386 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1807.304569] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1807.307655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1807.307660] Call Trace: [ 1807.307682] dump_stack+0x1fc/0x2ef [ 1807.307706] warn_alloc.cold+0x7b/0x18f [ 1807.338877] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1807.343543] ? zone_watermark_ok_safe+0x260/0x260 [ 1807.346284] Node 0 DMA32 free:17884kB min:35996kB low:44992kB high:53988kB active_anon:64616kB inactive_anon:40332kB active_file:56kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7456kB pagetables:2052kB bounce:0kB free_pcp:1620kB local_pcp:1280kB free_cma:0kB [ 1807.349910] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1807.353897] lowmem_reserve[]: 0 0 1 1 1 [ 1807.359092] ? retint_kernel+0x2d/0x2d [ 1807.359120] __vmalloc_area_node+0x4fd/0x780 [ 1807.359141] ? __vmalloc_node_range+0x180/0x180 [ 1807.359154] ? _raw_spin_unlock+0x29/0x40 [ 1807.359165] ? __get_vm_area_node+0x2e2/0x3a0 [ 1807.359187] __vmalloc_node_range+0xed/0x180 [ 1807.359204] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1807.359220] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1807.359231] vmalloc_user+0x70/0xe0 [ 1807.359244] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1807.359259] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1807.359275] __vb2_queue_alloc+0x472/0xe60 [ 1807.359298] vb2_core_create_bufs+0x273/0x7e0 [ 1807.359313] ? __vb2_queue_free+0x870/0x870 [ 1807.359330] ? mutex_trylock+0x1a0/0x1a0 [ 1807.359347] ? __video_do_ioctl+0x632/0xcd0 [ 1807.359367] vb2_create_bufs+0x332/0x620 [ 1807.359386] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1807.359400] ? __video_do_ioctl+0x632/0xcd0 [ 1807.359413] ? mutex_trylock+0x1a0/0x1a0 [ 1807.359429] ? mark_held_locks+0xf0/0xf0 [ 1807.359446] ? futex_wait_queue_me+0x404/0x5e0 [ 1807.359464] vb2_ioctl_create_bufs+0x20d/0x360 [ 1807.359479] ? memset+0x20/0x40 [ 1807.359498] v4l_create_bufs+0xb2/0x160 [ 1807.359517] __video_do_ioctl+0x49a/0xcd0 [ 1807.359538] ? v4l_querycap+0x340/0x340 [ 1807.359558] ? __might_fault+0x192/0x1d0 [ 1807.359577] ? v4l_querycap+0x340/0x340 [ 1807.359593] video_usercopy+0x13f/0xfa0 [ 1807.359614] ? v4l_enumstd+0x60/0x60 [ 1807.359629] ? do_futex+0x171/0x1880 [ 1807.359644] ? mark_held_locks+0xf0/0xf0 [ 1807.359663] ? debug_check_no_obj_freed+0x201/0x490 [ 1807.359687] ? video_usercopy+0xfa0/0xfa0 [ 1807.359699] v4l2_ioctl+0x147/0x1a0 [ 1807.359712] ? video_devdata+0xa0/0xa0 [ 1807.359728] do_vfs_ioctl+0xcdb/0x12e0 [ 1807.359744] ? lock_downgrade+0x720/0x720 [ 1807.359760] ? check_preemption_disabled+0x41/0x280 [ 1807.359774] ? ioctl_preallocate+0x200/0x200 [ 1807.359793] ? __fget+0x356/0x510 [ 1807.359810] ? do_dup2+0x450/0x450 [ 1807.359825] ? __se_sys_futex+0x298/0x3b0 [ 1807.359847] ksys_ioctl+0x9b/0xc0 [ 1807.359864] __x64_sys_ioctl+0x6f/0xb0 [ 1807.359879] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1807.359892] do_syscall_64+0xf9/0x620 [ 1807.359911] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1807.359923] RIP: 0033:0x7ff9055210f9 [ 1807.359938] Code: Bad RIP value. [ 1807.359946] RSP: 002b:00007ff903a93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1807.359959] RAX: ffffffffffffffda RBX: 00007ff905640f80 RCX: 00007ff9055210f9 [ 1807.359968] RDX: 0000000020000640 RSI: 00000000c100565c RDI: 0000000000000003 [ 1807.359976] RBP: 00007ff90557cae9 R08: 0000000000000000 R09: 0000000000000000 [ 1807.359984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1807.359992] R13: 00007ffefb208e4f R14: 00007ff903a93300 R15: 0000000000022000 [ 1807.370562] Mem-Info: [ 1807.407439] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1807.421235] active_anon:16901 inactive_anon:35219 isolated_anon:0 [ 1807.421235] active_file:16 inactive_file:12 isolated_file:0 [ 1807.421235] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1807.421235] slab_reclaimable:14047 slab_unreclaimable:119727 [ 1807.421235] mapped:22457 shmem:35932 pagetables:607 bounce:0 [ 1807.421235] free:13846 free_pcp:905 free_cma:0 [ 1807.425302] lowmem_reserve[]: 0 0 0 0 0 [ 1807.436560] Node 0 active_anon:64616kB inactive_anon:40332kB active_file:48kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58408kB dirty:0kB writeback:0kB shmem:42460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1807.440464] Node 1 Normal free:26608kB min:53876kB low:67344kB high:80812kB active_anon:2988kB inactive_anon:100544kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:376kB bounce:0kB free_pcp:2000kB local_pcp:480kB free_cma:0kB [ 1807.443277] Node 1 active_anon:2988kB inactive_anon:100544kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31420kB dirty:0kB writeback:0kB shmem:101268kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1807.451803] lowmem_reserve[]: 0 0 0 0 0 [ 1807.471508] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1807.475181] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 1807.489510] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1807.492844] Node 0 DMA32: 731*4kB (ME) 546*8kB (ME) 133*16kB (UME) 43*32kB (ME) 18*64kB (M) 5*128kB (M) 1*256kB (U) 0*512kB 1*1024kB (U) 2*2048kB (M) 0*4096kB = 17964kB [ 1807.501596] Node 0 DMA32 free:17884kB min:35996kB low:44992kB high:53988kB active_anon:64616kB inactive_anon:40332kB active_file:56kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7456kB pagetables:2052kB bounce:0kB free_pcp:1620kB local_pcp:340kB free_cma:0kB [ 1807.506097] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1807.519893] lowmem_reserve[]: 0 0 1 1 1 [ 1807.521633] Node 1 Normal: 304*4kB (UME) 226*8kB (ME) 220*16kB (M) 133*32kB (M) 27*64kB (ME) 8*128kB (M) 5*256kB (ME) 3*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 1*4096kB (M) = 26608kB [ 1807.525690] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1807.529744] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1807.529754] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1807.529764] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1807.529773] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1807.529779] 35963 total pagecache pages [ 1807.529797] 0 pages in swap cache [ 1807.539809] lowmem_reserve[]: 0 0 0 0 0 [ 1807.541226] Swap cache stats: add 0, delete 0, find 0/0 [ 1807.545619] Node 1 Normal free:26608kB min:53876kB low:67344kB high:80812kB active_anon:2988kB inactive_anon:100544kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:376kB bounce:0kB free_pcp:2000kB local_pcp:1520kB free_cma:0kB [ 1807.550717] Free swap = 0kB [ 1807.550722] Total swap = 0kB [ 1807.550730] 2097051 pages RAM [ 1807.550734] 0 pages HighMem/MovableOnly [ 1807.550739] 369649 pages reserved [ 1807.550743] 0 pages cma reserved [ 1807.550751] Unreclaimable slab info: [ 1807.550756] Name Used Total [ 1807.550768] pid_2 40KB 88KB [ 1807.570316] lowmem_reserve[]: 0 0 0 0 0 [ 1807.572468] batadv_tt_change_cache 1KB 7KB [ 1807.584624] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 1807.586440] batadv_tl_cache 5KB 16KB [ 1807.592502] Node 0 DMA32: 731*4kB (ME) 546*8kB (ME) 133*16kB (UME) 43*32kB (ME) 18*64kB (M) 5*128kB (M) 1*256kB (U) 0*512kB 1*1024kB (U) 2*2048kB (M) 0*4096kB = 17964kB [ 1807.593008] TIPC 31KB 45KB [ 1807.603276] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1807.609604] SCTPv6 16KB 37KB [ 1807.617402] Node 1 Normal: 304*4kB (UME) 226*8kB (ME) 220*16kB (M) 133*32kB (M) 27*64kB (ME) 8*128kB (M) 5*256kB (ME) 3*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 1*4096kB (M) = 26608kB [ 1807.619389] DCCPv6 17KB 37KB [ 1807.621045] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1807.632075] DCCP 16KB 35KB [ 1807.643183] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1807.645190] L2TP/IPv6 21KB 26KB [ 1807.665729] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1807.665741] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1807.665746] 35963 total pagecache pages [ 1807.665758] 0 pages in swap cache [ 1807.665766] Swap cache stats: add 0, delete 0, find 0/0 [ 1807.665772] Free swap = 0kB [ 1807.665777] Total swap = 0kB [ 1807.665785] 2097051 pages RAM [ 1807.665790] 0 pages HighMem/MovableOnly [ 1807.665795] 369649 pages reserved [ 1807.665800] 0 pages cma reserved [ 1808.278869] RXRPC 13KB 26KB [ 1808.284265] rxrpc_call_jar 90KB 118KB [ 1808.304608] bridge_fdb_cache 10KB 27KB [ 1808.312483] fib6_nodes 184KB 264KB [ 1808.332717] ip6_dst_cache 566KB 678KB [ 1808.343832] RAWv6 81KB 101KB [ 1808.358866] UDPv6 30KB 41KB [ 1808.364356] TCPv6 27KB 30KB [ 1808.385382] nf_conntrack 13KB 18KB [ 1808.394810] t10_alua_lu_gp_cache 0KB 3KB [ 1808.417803] sd_ext_cdb 0KB 7KB [ 1808.423217] scsi_sense_cache 1056KB 1060KB [ 1808.436194] virtio_scsi_cmd 16KB 16KB [ 1808.450583] sgpool-128 8KB 8KB [ 1808.457673] sgpool-64 4KB 12KB [ 1808.463634] sgpool-32 2KB 15KB [ 1808.473787] sgpool-16 1KB 7KB [ 1808.482093] sgpool-8 0KB 7KB [ 1808.493638] mqueue_inode_cache 12KB 30KB [ 1808.501355] bio_post_read_ctx 14KB 15KB [ 1808.512064] bio-2 14KB 15KB [ 1808.518890] jfs_mp 7KB 7KB [ 1808.525474] cifs_small_rq 15KB 16KB [ 1808.535801] cifs_request 67KB 67KB [ 1808.542271] cifs_mpx_ids 0KB 7KB [ 1808.552302] nfs_commit_data 3KB 14KB [ 1808.559155] nfs_write_data 34KB 44KB [ 1808.565232] ext4_system_zone 1KB 7KB [ 1808.576770] bio-1 1KB 7KB [ 1808.582745] pid_namespace 2KB 11KB [ 1808.588658] rpc_buffers 17KB 25KB [ 1808.594465] rpc_tasks 2KB 7KB [ 1808.600368] UNIX 1168KB 1278KB [ 1808.606394] tcp_bind_bucket 1KB 4KB [ 1808.611777] ip_fib_trie 27KB 47KB [ 1808.618194] ip_fib_alias 132KB 189KB [ 1808.624156] ip_dst_cache 9KB 16KB [ 1808.630110] RAW 49KB 75KB [ 1808.635480] UDP 60KB 74KB [ 1808.641361] TCP 14KB 16KB [ 1808.648308] hugetlbfs_inode_cache 3KB 15KB [ 1808.654611] fscache_cookie_jar 1KB 11KB [ 1808.661091] eventpoll_pwq 22KB 67KB [ 1808.686524] eventpoll_epi 41KB 63KB [ 1808.691933] inotify_inode_mark 18KB 31KB [ 1808.698217] request_queue 199KB 199KB [ 1808.716944] blkdev_requests 1KB 3KB [ 1808.722346] blkdev_ioc 26KB 38KB [ 1808.736641] bio-0 1251KB 1252KB [ 1808.742041] biovec-max 1575KB 1575KB [ 1808.756304] biovec-64 1082KB 1086KB [ 1808.761700] biovec-16 103KB 105KB [ 1808.776823] bio_integrity_payload 1KB 8KB [ 1808.782562] khugepaged_mm_slot 10KB 31KB [ 1808.806402] uid_cache 0KB 4KB [ 1808.811801] dmaengine-unmap-2 0KB 3KB [ 1808.817697] skbuff_fclone_cache 78KB 78KB [ 1808.823261] skbuff_head_cache 8090KB 8647KB [ 1808.828889] configfs_dir_cache 3KB 7KB [ 1808.834542] file_lock_cache 71KB 83KB [ 1808.840408] file_lock_ctx 9KB 11KB [ 1808.845900] fsnotify_mark_connector 8KB 23KB [ 1808.851876] net_namespace 70KB 70KB [ 1808.857291] shmem_inode_cache 8146KB 8275KB [ 1808.862663] task_delay_info 206KB 383KB [ 1808.868215] taskstats 69KB 91KB [ 1808.873588] proc_dir_entry 794KB 877KB [ 1808.879091] pde_opener 11KB 58KB [ 1808.884747] seq_file 249KB 417KB [ 1808.890651] sigqueue 46KB 66KB [ 1808.896063] kernfs_node_cache 18234KB 18246KB [ 1808.901906] mnt_cache 191KB 216KB [ 1808.912015] filp 6877KB 7927KB [ 1808.917603] names_cache 133590KB 133590KB [ 1808.922991] iint_cache 35KB 47KB [ 1808.933413] key_jar 4KB 7KB [ 1808.938963] uts_namespace 3KB 7KB [ 1808.944329] nsproxy 1KB 7KB [ 1808.954718] vm_area_struct 3251KB 4095KB [ 1808.960164] mm_struct 559KB 728KB [ 1808.965535] fs_cache 184KB 376KB [ 1808.976861] files_cache 755KB 1095KB [ 1808.982254] signal_cache 1303KB 1962KB [ 1808.991881] sighand_cache 538KB 631KB [ 1808.998758] task_struct 6451KB 6539KB [ 1809.004140] cred_jar 1978KB 3004KB [ 1809.013515] anon_vma_chain 1049KB 1547KB [ 1809.019887] anon_vma 135KB 327KB [ 1809.025272] pid 104KB 236KB [ 1809.034573] Acpi-Operand 156KB 202KB [ 1809.041065] Acpi-ParseExt 9KB 11KB [ 1809.052430] Acpi-Parse 41KB 47KB [ 1809.058813] Acpi-State 52KB 63KB [ 1809.064217] Acpi-Namespace 20KB 27KB [ 1809.073827] numa_policy 0KB 3KB [ 1809.080071] debug_objects_cache 1588KB 1968KB [ 1809.085622] trace_event_file 297KB 298KB [ 1809.094965] ftrace_event_field 398KB 401KB [ 1809.101099] pool_workqueue 128KB 156KB [ 1809.106828] page->ptl 550KB 1035KB [ 1809.112265] kmalloc-2097152 2050KB 2050KB [ 1809.117700] kmalloc-524288 2056KB 2056KB [ 1809.123090] kmalloc-262144 1290KB 1290KB [ 1809.128559] kmalloc-131072 650KB 650KB [ 1809.133924] kmalloc-65536 2112KB 2178KB [ 1809.139507] kmalloc-32768 1815KB 1914KB [ 1809.144882] kmalloc-16384 1072KB 1188KB [ 1809.150332] kmalloc-8192 4488KB 4587KB [ 1809.155702] kmalloc-4096 21343KB 21381KB [ 1809.161148] kmalloc-2048 13572KB 16473KB [ 1809.166576] kmalloc-1024 10157KB 13686KB [ 1809.171946] kmalloc-512 15470KB 16215KB [ 1809.177396] kmalloc-256 4781KB 6296KB [ 1809.182765] kmalloc-128 1156KB 1724KB [ 1809.188209] kmalloc-96 3651KB 4404KB [ 1809.193578] kmalloc-64 2636KB 3748KB [ 1809.198998] kmalloc-32 1962KB 2476KB [ 1809.204368] kmalloc-192 1861KB 3040KB [ 1809.210253] kmem_cache 177KB 183KB [ 1809.215646] Out of memory (oom_kill_allocating_task): Kill process 24369 (in:imklog) score 0 or sacrifice child [ 1809.230079] Killed process 24348 (rsyslogd) total-vm:254332kB, anon-rss:524kB, file-rss:0kB, shmem-rss:0kB [ 1809.243755] oom_reaper: reaped process 24348 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 07:11:12 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x4, 0x0, 0x0) 07:11:12 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@userptr={0x4, 0x1, 0x4, 0x400, 0xe451, {}, {0x1, 0xc, 0x1, 0x65, 0x1, 0x7, "7843a804"}, 0x9, 0x2, {&(0x7f0000000140)}, 0x2}) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@userptr={0x4, 0x1, 0x4, 0x400, 0xe451, {}, {0x1, 0xc, 0x1, 0x65, 0x1, 0x7, "7843a804"}, 0x9, 0x2, {&(0x7f0000000140)}, 0x2}) (async) 07:11:12 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b7f8bd690cfeb8873d1512fbb8a9acab67197c8759ba1921c4f89b90587fb2548e7e7e7ce0ed42c271c76d1a875eed4621eea8f520897fd6df2a38bc95973fa81e2529587d7938a7c3417a612ea79bc07d9574d68f8077ed10d9988c35505448ba3a7b86703cef48e2b07c419acf70785fe8f02b85a63676e3e03d0b56e3dda0a825edb745bd1d61a93144ac567dcde0257c9f7700512ebc7aef76d0ac7e8e0e5cfb75c7e8f73cea6259bb09e767e6759dd85a80b7839c238b9d1effb3bfe03c378e228bc8e14", 0xd6) 07:11:12 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8, @pix_mp={0xfffffffe, 0x4, 0x30385056, 0x5, 0x0, [{0x5a800000, 0x1f}, {0x1, 0x80000001}, {0x7fffffff, 0x8}, {0x4, 0x3}, {0x9, 0x1}, {0x11eb, 0x7}, {0x9, 0xccb1}, {0xfffff05b, 0x8}], 0x9, 0xf5, 0x7, 0x2, 0x3}}) 07:11:15 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x4, 0x0, 0x0) 07:11:15 executing program 5: syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3, 0x3b1, 0xffffffff}, &(0x7f00000001c0)={{0x4, 0x4, 0x475, 0x9f7}, &(0x7f0000000180)={{0x6, 0x9, 0x5}}}}, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:11:15 executing program 4: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b7f8bd690cfeb8873d1512fbb8a9acab67197c8759ba1921c4f89b90587fb2548e7e7e7ce0ed42c271c76d1a875eed4621eea8f520897fd6df2a38bc95973fa81e2529587d7938a7c3417a612ea79bc07d9574d68f8077ed10d9988c35505448ba3a7b86703cef48e2b07c419acf70785fe8f02b85a63676e3e03d0b56e3dda0a825edb745bd1d61a93144ac567dcde0257c9f7700512ebc7aef76d0ac7e8e0e5cfb75c7e8f73cea6259bb09e767e6759dd85a80b7839c238b9d1effb3bfe03c378e228bc8e14", 0xd6) 07:11:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0x0, 0x1, {0x1, @sliced={0x1, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8, 0x7ff, 0x80, 0x3, 0x0, 0x0, 0x7, 0x20, 0x0, 0x9], 0xd3e}}, 0x7ff}) 07:11:15 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@userptr={0x4, 0x1, 0x4, 0x400, 0xe451, {}, {0x1, 0xc, 0x1, 0x65, 0x1, 0x7, "7843a804"}, 0x9, 0x2, {&(0x7f0000000140)}, 0x2}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@userptr={0x4, 0x1, 0x4, 0x400, 0xe451, {}, {0x1, 0xc, 0x1, 0x65, 0x1, 0x7, "7843a804"}, 0x9, 0x2, {&(0x7f0000000140)}, 0x2}) 07:11:15 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8, @pix_mp={0xfffffffe, 0x4, 0x30385056, 0x5, 0x0, [{0x5a800000, 0x1f}, {0x1, 0x80000001}, {0x7fffffff, 0x8}, {0x4, 0x3}, {0x9, 0x1}, {0x11eb, 0x7}, {0x9, 0xccb1}, {0xfffff05b, 0x8}], 0x9, 0xf5, 0x7, 0x2, 0x3}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8, @pix_mp={0xfffffffe, 0x4, 0x30385056, 0x5, 0x0, [{0x5a800000, 0x1f}, {0x1, 0x80000001}, {0x7fffffff, 0x8}, {0x4, 0x3}, {0x9, 0x1}, {0x11eb, 0x7}, {0x9, 0xccb1}, {0xfffff05b, 0x8}], 0x9, 0xf5, 0x7, 0x2, 0x3}}) (async) 07:11:15 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x4, 0x0, 0x0) 07:11:15 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x401, 0x0, 0x0, 0x0, 0x2}) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000180)={0x7, 0x1, 0x3, 0x0, 0x9}) 07:11:15 executing program 5: syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3, 0x3b1, 0xffffffff}, &(0x7f00000001c0)={{0x4, 0x4, 0x475, 0x9f7}, &(0x7f0000000180)={{0x6, 0x9, 0x5}}}}, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:11:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0x0, 0x1, {0x1, @sliced={0x1, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8, 0x7ff, 0x80, 0x3, 0x0, 0x0, 0x7, 0x20, 0x0, 0x9], 0xd3e}}, 0x7ff}) 07:11:15 executing program 4: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b7f8bd690cfeb8873d1512fbb8a9acab67197c8759ba1921c4f89b90587fb2548e7e7e7ce0ed42c271c76d1a875eed4621eea8f520897fd6df2a38bc95973fa81e2529587d7938a7c3417a612ea79bc07d9574d68f8077ed10d9988c35505448ba3a7b86703cef48e2b07c419acf70785fe8f02b85a63676e3e03d0b56e3dda0a825edb745bd1d61a93144ac567dcde0257c9f7700512ebc7aef76d0ac7e8e0e5cfb75c7e8f73cea6259bb09e767e6759dd85a80b7839c238b9d1effb3bfe03c378e228bc8e14", 0xd6) 07:11:15 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8, @pix_mp={0xfffffffe, 0x4, 0x30385056, 0x5, 0x0, [{0x5a800000, 0x1f}, {0x1, 0x80000001}, {0x7fffffff, 0x8}, {0x4, 0x3}, {0x9, 0x1}, {0x11eb, 0x7}, {0x9, 0xccb1}, {0xfffff05b, 0x8}], 0x9, 0xf5, 0x7, 0x2, 0x3}}) 07:11:15 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x401, 0x0, 0x0, 0x0, 0x2}) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000180)={0x7, 0x1, 0x3, 0x0, 0x9}) 07:11:15 executing program 2: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) 07:11:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0x0, 0x1, {0x1, @sliced={0x1, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8, 0x7ff, 0x80, 0x3, 0x0, 0x0, 0x7, 0x20, 0x0, 0x9], 0xd3e}}, 0x7ff}) 07:11:15 executing program 4: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b7f8bd690cfeb8873d1512fbb8a9acab67197c8759ba1921c4f89b90587fb2548e7e7e7ce0ed42c271c76d1a875eed4621eea8f520897fd6df2a38bc95973fa81e2529587d7938a7c3417a612ea79bc07d9574d68f8077ed10d9988c35505448ba3a7b86703cef48e2b07c419acf70785fe8f02b85a63676e3e03d0b56e3dda0a825edb745bd1d61a93144ac567dcde0257c9f7700512ebc7aef76d0ac7e8e0e5cfb75c7e8f73cea6259bb09e767e6759dd85a80b7839c238b9d1effb3bfe03c378e228bc8e14", 0xd6) 07:11:15 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) syz_open_dev$vim2m(&(0x7f0000000140), 0x20, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000003c0)={0x3, 0x1, 0x3, 0x0, 0x5}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) r2 = syz_open_dev$sndctrl(&(0x7f0000000180), 0xd70, 0x458802) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000340)={0x0, 0x6, 0x400, 0x101, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}]}) 07:11:15 executing program 5: syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3, 0x3b1, 0xffffffff}, &(0x7f00000001c0)={{0x4, 0x4, 0x475, 0x9f7}, &(0x7f0000000180)={{0x6, 0x9, 0x5}}}}, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:11:15 executing program 2: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) 07:11:15 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x401, 0x0, 0x0, 0x0, 0x2}) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000180)={0x7, 0x1, 0x3, 0x0, 0x9}) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x401, 0x0, 0x0, 0x0, 0x2}) (async) syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000180)={0x7, 0x1, 0x3, 0x0, 0x9}) (async) 07:11:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0x3, 0x0, {0x1, @sliced={0x1, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8, 0x7ff, 0x80, 0x3, 0x0, 0x0, 0x7, 0x20, 0x0, 0x9], 0xd3e}}, 0x7ff}) 07:11:15 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async, rerun: 32) syz_open_dev$vim2m(&(0x7f0000000140), 0x20, 0x2) (rerun: 32) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000003c0)={0x3, 0x1, 0x3, 0x0, 0x5}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000180), 0xd70, 0x458802) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000340)={0x0, 0x6, 0x400, 0x101, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}]}) 07:11:15 executing program 4: socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b7f8bd690cfeb8873d1512fbb8a9acab67197c8759ba1921c4f89b90587fb2548e7e7e7ce0ed42c271c76d1a875eed4621eea8f520897fd6df2a38bc95973fa81e2529587d7938a7c3417a612ea79bc07d9574d68f8077ed10d9988c35505448ba3a7b86703cef48e2b07c419acf70785fe8f02b85a63676e3e03d0b56e3dda0a825edb745bd1d61a93144ac567dcde0257c9f7700512ebc7aef76d0ac7e8e0e5cfb75c7e8f73cea6259bb09e767e6759dd85a80b7839c238b9d1effb3bfe03c378e228bc8e14", 0xd6) 07:11:15 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 07:11:15 executing program 2: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) 07:11:15 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000180)={0x0, 0x1, 0x1}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2}) 07:11:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0x3, 0x0, {0x1, @sliced={0x1, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8, 0x7ff, 0x80, 0x3, 0x0, 0x0, 0x7, 0x20, 0x0, 0x9], 0xd3e}}, 0x7ff}) 07:11:15 executing program 4: socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b7f8bd690cfeb8873d1512fbb8a9acab67197c8759ba1921c4f89b90587fb2548e7e7e7ce0ed42c271c76d1a875eed4621eea8f520897fd6df2a38bc95973fa81e2529587d7938a7c3417a612ea79bc07d9574d68f8077ed10d9988c35505448ba3a7b86703cef48e2b07c419acf70785fe8f02b85a63676e3e03d0b56e3dda0a825edb745bd1d61a93144ac567dcde0257c9f7700512ebc7aef76d0ac7e8e0e5cfb75c7e8f73cea6259bb09e767e6759dd85a80b7839c238b9d1effb3bfe03c378e228bc8e14", 0xd6) 07:11:15 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000140), 0x20, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000003c0)={0x3, 0x1, 0x3, 0x0, 0x5}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000180), 0xd70, 0x458802) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000340)={0x0, 0x6, 0x400, 0x101, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}]}) 07:11:15 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 07:11:15 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) 07:11:15 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000180)={0x0, 0x1, 0x1}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2}) 07:11:15 executing program 4: socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b7f8bd690cfeb8873d1512fbb8a9acab67197c8759ba1921c4f89b90587fb2548e7e7e7ce0ed42c271c76d1a875eed4621eea8f520897fd6df2a38bc95973fa81e2529587d7938a7c3417a612ea79bc07d9574d68f8077ed10d9988c35505448ba3a7b86703cef48e2b07c419acf70785fe8f02b85a63676e3e03d0b56e3dda0a825edb745bd1d61a93144ac567dcde0257c9f7700512ebc7aef76d0ac7e8e0e5cfb75c7e8f73cea6259bb09e767e6759dd85a80b7839c238b9d1effb3bfe03c378e228bc8e14", 0xd6) 07:11:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0x3, 0x0, {0x1, @sliced={0x1, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8, 0x7ff, 0x80, 0x3, 0x0, 0x0, 0x7, 0x20, 0x0, 0x9], 0xd3e}}, 0x7ff}) 07:11:15 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 07:11:15 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000180)) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x6, 0x2) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x8}) 07:11:15 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async, rerun: 64) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000180)={0x0, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2}) 07:11:15 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) 07:11:15 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b7f8bd690cfeb8873d1512fbb8a9acab67197c8759ba1921c4f89b90587fb2548e7e7e7ce0ed42c271c76d1a875eed4621eea8f520897fd6df2a38bc95973fa81e2529587d7938a7c3417a612ea79bc07d9574d68f8077ed10d9988c35505448ba3a7b86703cef48e2b07c419acf70785fe8f02b85a63676e3e03d0b56e3dda0a825edb745bd1d61a93144ac567dcde0257c9f7700512ebc7aef76d0ac7e8e0e5cfb75c7e8f73cea6259bb09e767e6759dd85a80b7839c238b9d1effb3bfe03c378e228bc8e14", 0xd6) 07:11:15 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x0, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3, 0x3b1, 0xffffffff}, &(0x7f00000001c0)={{0x4, 0x4, 0x475, 0x9f7}, &(0x7f0000000180)={{0x6, 0x9, 0x5}}}}, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:11:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0x3, 0x1, {0x0, @sliced={0x1, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8, 0x7ff, 0x80, 0x3, 0x0, 0x0, 0x7, 0x20, 0x0, 0x9], 0xd3e}}, 0x7ff}) 07:11:16 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) 07:11:16 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0x3, 0x1, {0x0, @sliced={0x1, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8, 0x7ff, 0x80, 0x3, 0x0, 0x0, 0x7, 0x20, 0x0, 0x9], 0xd3e}}, 0x7ff}) 07:11:16 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b7f8bd690cfeb8873d1512fbb8a9acab67197c8759ba1921c4f89b90587fb2548e7e7e7ce0ed42c271c76d1a875eed4621eea8f520897fd6df2a38bc95973fa81e2529587d7938a7c3417a612ea79bc07d9574d68f8077ed10d9988c35505448ba3a7b86703cef48e2b07c419acf70785fe8f02b85a63676e3e03d0b56e3dda0a825edb745bd1d61a93144ac567dcde0257c9f7700512ebc7aef76d0ac7e8e0e5cfb75c7e8f73cea6259bb09e767e6759dd85a80b7839c238b9d1effb3bfe03c378e228bc8e14", 0xd6) 07:11:16 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) 07:11:16 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x0, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3, 0x3b1, 0xffffffff}, &(0x7f00000001c0)={{0x4, 0x4, 0x475, 0x9f7}, &(0x7f0000000180)={{0x6, 0x9, 0x5}}}}, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) [ 1813.257490] block nbd3: shutting down sockets 07:11:16 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000180)) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x6, 0x2) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x8}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) (async) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000180)) (async) syz_open_dev$vim2m(&(0x7f0000000140), 0x6, 0x2) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x800) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) (async) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x8}) (async) 07:11:16 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x4, 0x6, 0xfffffff8, 0x1, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4, 0xc}, 0x48) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000040)) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000340)) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000300)=0x3) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0x58, &(0x7f0000000380)}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="a4c67d4bda42af6867c6f395dd21e1fcbaf6cff63b9882f5804e1be2327a55f5c27f2c37c03a843256e0b2a93284bda7b3ad55e93d418bb25a66376b7fbf46f4bb191bd1ca6bbbdb0484f988c6e54d534e8ccc326ab67c888830fa87b002ff67a55eaa350cdc2791e63e25f43cf0fb4bb85712ac6e73101a6a0d211a64f39da98fbdc5a2fe539929bf718fd56c88bb56e2d6e7f25e9a529e42be0668c27c22916fe2e6b76aef04ee84b8d5b2c138d9b71a7caf131fa517f418211d3a710e54ad8e5dfa0e0eab4097729db0867b9ebd591c82cc68586b4541a82b3503d5310c1dd5a8494f268692ab07fc6eda0e7bc80dbaa677"}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) 07:11:16 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0x3, 0x1, {0x0, @sliced={0x1, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8, 0x7ff, 0x80, 0x3, 0x0, 0x0, 0x7, 0x20, 0x0, 0x9], 0xd3e}}, 0x7ff}) 07:11:16 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b7f8bd690cfeb8873d1512fbb8a9acab67197c8759ba1921c4f89b90587fb2548e7e7e7ce0ed42c271c76d1a875eed4621eea8f520897fd6df2a38bc95973fa81e2529587d7938a7c3417a612ea79bc07d9574d68f8077ed10d9988c35505448ba3a7b86703cef48e2b07c419acf70785fe8f02b85a63676e3e03d0b56e3dda0a825edb745bd1d61a93144ac567dcde0257c9f7700512ebc7aef76d0ac7e8e0e5cfb75c7e8f73cea6259bb09e767e6759dd85a80b7839c238b9d1effb3bfe03c378e228bc8e14", 0xd6) 07:11:16 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x0, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3, 0x3b1, 0xffffffff}, &(0x7f00000001c0)={{0x4, 0x4, 0x475, 0x9f7}, &(0x7f0000000180)={{0x6, 0x9, 0x5}}}}, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:11:16 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) 07:11:16 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8, 0x7ff, 0x80, 0x3, 0x0, 0x0, 0x7, 0x20, 0x0, 0x9], 0xd3e}}, 0x7ff}) 07:11:16 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x4, 0x6, 0xfffffff8, 0x1, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4, 0xc}, 0x48) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000040)) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000340)) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000300)=0x3) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0x58, &(0x7f0000000380)}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="a4c67d4bda42af6867c6f395dd21e1fcbaf6cff63b9882f5804e1be2327a55f5c27f2c37c03a843256e0b2a93284bda7b3ad55e93d418bb25a66376b7fbf46f4bb191bd1ca6bbbdb0484f988c6e54d534e8ccc326ab67c888830fa87b002ff67a55eaa350cdc2791e63e25f43cf0fb4bb85712ac6e73101a6a0d211a64f39da98fbdc5a2fe539929bf718fd56c88bb56e2d6e7f25e9a529e42be0668c27c22916fe2e6b76aef04ee84b8d5b2c138d9b71a7caf131fa517f418211d3a710e54ad8e5dfa0e0eab4097729db0867b9ebd591c82cc68586b4541a82b3503d5310c1dd5a8494f268692ab07fc6eda0e7bc80dbaa677"}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x4, 0x6, 0xfffffff8, 0x1, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4, 0xc}, 0x48) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000340)) (async) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000300)=0x3) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0x58, &(0x7f0000000380)}, 0x10) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="a4c67d4bda42af6867c6f395dd21e1fcbaf6cff63b9882f5804e1be2327a55f5c27f2c37c03a843256e0b2a93284bda7b3ad55e93d418bb25a66376b7fbf46f4bb191bd1ca6bbbdb0484f988c6e54d534e8ccc326ab67c888830fa87b002ff67a55eaa350cdc2791e63e25f43cf0fb4bb85712ac6e73101a6a0d211a64f39da98fbdc5a2fe539929bf718fd56c88bb56e2d6e7f25e9a529e42be0668c27c22916fe2e6b76aef04ee84b8d5b2c138d9b71a7caf131fa517f418211d3a710e54ad8e5dfa0e0eab4097729db0867b9ebd591c82cc68586b4541a82b3503d5310c1dd5a8494f268692ab07fc6eda0e7bc80dbaa677"}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) 07:11:16 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, 0x0, 0x0) 07:11:16 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:11:16 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) 07:11:16 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x401, 0x0, 0x0, 0x0, 0x2}) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000180)={0x7, 0x1, 0x3, 0x0, 0x9}) 07:11:16 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000180)) (async) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000180)) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x6, 0x2) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) (async) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) (async) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x8}) 07:11:16 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) [ 1813.493340] block nbd3: shutting down sockets 07:11:16 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, 0x0, 0x0) 07:11:16 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:11:16 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, 0x0, 0x0) 07:11:16 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x0, 0x3b1, 0xffffffff}, &(0x7f00000001c0)={{0x4, 0x4, 0x475, 0x9f7}, &(0x7f0000000180)={{0x6, 0x9, 0x5}}}}, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) [ 1813.639977] block nbd3: Device being setup by another task [ 1813.706099] block nbd3: Device being setup by another task [ 1813.715188] block nbd3: shutting down sockets [ 1818.428668] oom_reaper: reaped process 24591 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 1818.464010] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1818.481335] in:imklog cpuset=/ mems_allowed=0-1 [ 1818.486172] CPU: 0 PID: 24422 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 1818.493721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1818.503190] Call Trace: [ 1818.505792] dump_stack+0x1fc/0x2ef [ 1818.509423] dump_header+0x15d/0xc3f [ 1818.513143] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1818.518240] ? ___ratelimit+0x319/0x590 [ 1818.522218] oom_kill_process.cold+0x10/0x692 [ 1818.526709] ? check_preemption_disabled+0x41/0x280 [ 1818.531717] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1818.536994] out_of_memory+0x1072/0x1390 [ 1818.541075] ? oom_killer_disable+0x270/0x270 [ 1818.545557] ? mutex_trylock+0x15f/0x1a0 [ 1818.549784] __alloc_pages_nodemask+0x23a2/0x2890 [ 1818.554664] ? find_get_entry+0x4cd/0x8a0 [ 1818.558838] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1818.563699] alloc_pages_current+0x193/0x2a0 [ 1818.568100] filemap_fault+0x146e/0x2180 [ 1818.572156] ext4_filemap_fault+0x84/0xb0 [ 1818.576305] __do_fault+0x10b/0x4b0 [ 1818.579932] __handle_mm_fault+0x273b/0x41c0 [ 1818.584347] ? vm_insert_page+0x9c0/0x9c0 [ 1818.588506] ? lock_downgrade+0x720/0x720 [ 1818.592657] ? check_preemption_disabled+0x41/0x280 [ 1818.597679] handle_mm_fault+0x436/0xb10 [ 1818.601737] __do_page_fault+0x68e/0xd60 [ 1818.605822] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1818.611057] ? spurious_fault+0x840/0x840 [ 1818.615192] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1818.620023] ? page_fault+0x8/0x30 [ 1818.623579] page_fault+0x1e/0x30 [ 1818.627034] RIP: 0033:0x7efed35b922d [ 1818.630747] Code: Bad RIP value. [ 1818.634115] RSP: 002b:00007efed0f55580 EFLAGS: 00010293 [ 1818.639470] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007efed35b922d [ 1818.646879] RDX: 0000000000001fa0 RSI: 00007efed0f55da0 RDI: 0000000000000004 [ 1818.654145] RBP: 000056510b8909d0 R08: 0000000000000000 R09: 0000000000000000 [ 1818.661427] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007efed0f55da0 [ 1818.668698] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007efed0f55e15 [ 1818.680922] Mem-Info: [ 1818.683377] active_anon:15884 inactive_anon:35218 isolated_anon:0 [ 1818.683377] active_file:51 inactive_file:18 isolated_file:0 [ 1818.683377] unevictable:0 dirty:28 writeback:0 unstable:0 [ 1818.683377] slab_reclaimable:14302 slab_unreclaimable:122036 [ 1818.683377] mapped:22514 shmem:35932 pagetables:576 bounce:0 [ 1818.683377] free:13771 free_pcp:817 free_cma:0 [ 1818.686008] syz-executor.1: vmalloc: allocation failure, allocated 1664991232 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1818.722191] Node 0 active_anon:60396kB inactive_anon:40328kB active_file:108kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58504kB dirty:88kB writeback:0kB shmem:42460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1818.739784] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1818.762477] Node 1 active_anon:3140kB inactive_anon:100544kB active_file:96kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31552kB dirty:24kB writeback:0kB shmem:101268kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1818.764064] CPU: 1 PID: 24591 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1818.795041] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1818.799325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1818.799330] Call Trace: [ 1818.799354] dump_stack+0x1fc/0x2ef [ 1818.799380] warn_alloc.cold+0x7b/0x18f [ 1818.833895] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1818.835131] ? zone_watermark_ok_safe+0x260/0x260 [ 1818.837745] Node 0 DMA32 free:17856kB min:35996kB low:44992kB high:53988kB active_anon:60396kB inactive_anon:40328kB active_file:184kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:1896kB bounce:0kB free_pcp:1932kB local_pcp:1456kB free_cma:0kB [ 1818.841318] ? rcu_nmi_exit+0xb3/0x180 [ 1818.845273] lowmem_reserve[]: 0 0 1 1 1 [ 1818.850416] __vmalloc_area_node+0x4fd/0x780 [ 1818.850436] ? __vmalloc_node_range+0x180/0x180 [ 1818.850450] ? _raw_spin_unlock+0x29/0x40 [ 1818.850462] ? __get_vm_area_node+0x2e2/0x3a0 [ 1818.850480] __vmalloc_node_range+0xed/0x180 [ 1818.850498] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1818.857612] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1818.884606] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1818.884620] vmalloc_user+0x70/0xe0 [ 1818.884633] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1818.884647] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1818.884661] __vb2_queue_alloc+0x472/0xe60 [ 1818.884687] vb2_core_create_bufs+0x273/0x7e0 [ 1818.884701] ? __vb2_queue_free+0x870/0x870 [ 1818.891200] lowmem_reserve[]: 0 0 0 0 0 [ 1818.892547] ? mutex_trylock+0x1a0/0x1a0 [ 1818.897060] Node 1 Normal free:26792kB min:53876kB low:67344kB high:80812kB active_anon:3148kB inactive_anon:100544kB active_file:8kB inactive_file:288kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:408kB bounce:0kB free_pcp:1512kB local_pcp:4kB free_cma:0kB [ 1818.901601] ? __video_do_ioctl+0x632/0xcd0 [ 1818.905720] lowmem_reserve[]: 0 0 0 0 0 [ 1818.910222] vb2_create_bufs+0x332/0x620 [ 1818.910239] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1818.910253] ? __video_do_ioctl+0x632/0xcd0 [ 1818.910266] ? mutex_trylock+0x1a0/0x1a0 [ 1818.910280] ? mark_held_locks+0xf0/0xf0 [ 1818.910294] ? futex_wait_queue_me+0x404/0x5e0 [ 1818.910312] vb2_ioctl_create_bufs+0x20d/0x360 [ 1818.933469] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB [ 1818.944960] ? memset+0x20/0x40 [ 1818.944978] v4l_create_bufs+0xb2/0x160 [ 1818.944994] __video_do_ioctl+0x49a/0xcd0 [ 1818.945014] ? v4l_querycap+0x340/0x340 [ 1818.945030] ? __might_fault+0x192/0x1d0 [ 1818.945047] ? v4l_querycap+0x340/0x340 [ 1818.960424] Node 0 DMA32: 814*4kB (UME) 423*8kB (UME) 129*16kB (UME) 46*32kB (UME) 18*64kB (M) 5*128kB (M) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (M) 0*4096kB = 17856kB [ 1818.962495] video_usercopy+0x13f/0xfa0 [ 1818.966786] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1818.971381] ? v4l_enumstd+0x60/0x60 [ 1818.975670] Node 1 Normal: 320*4kB (M) 253*8kB (ME) 250*16kB (ME) 129*32kB (UME) 16*64kB (ME) 8*128kB (M) 6*256kB (UME) 3*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 1*4096kB (M) = 26792kB [ 1818.979637] ? do_futex+0x171/0x1880 [ 1818.979653] ? mark_held_locks+0xf0/0xf0 [ 1818.979669] ? debug_check_no_obj_freed+0x201/0x490 [ 1818.979692] ? video_usercopy+0xfa0/0xfa0 [ 1818.979704] v4l2_ioctl+0x147/0x1a0 [ 1818.979716] ? video_devdata+0xa0/0xa0 [ 1818.979732] do_vfs_ioctl+0xcdb/0x12e0 [ 1818.979749] ? lock_downgrade+0x720/0x720 [ 1818.992532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1819.012503] ? check_preemption_disabled+0x41/0x280 [ 1819.012518] ? ioctl_preallocate+0x200/0x200 [ 1819.012535] ? __fget+0x356/0x510 [ 1819.012550] ? do_dup2+0x450/0x450 [ 1819.012565] ? __se_sys_futex+0x298/0x3b0 [ 1819.012586] ksys_ioctl+0x9b/0xc0 [ 1819.012602] __x64_sys_ioctl+0x6f/0xb0 [ 1819.012619] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1819.024914] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1819.024947] do_syscall_64+0xf9/0x620 [ 1819.032461] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1819.034356] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1819.048451] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1819.051670] RIP: 0033:0x7ff9055210f9 [ 1819.064909] 35996 total pagecache pages [ 1819.068098] Code: Bad RIP value. [ 1819.068107] RSP: 002b:00007ff903a93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1819.068119] RAX: ffffffffffffffda RBX: 00007ff905640f80 RCX: 00007ff9055210f9 [ 1819.068127] RDX: 0000000020000640 RSI: 00000000c100565c RDI: 0000000000000003 [ 1819.068135] RBP: 00007ff90557cae9 R08: 0000000000000000 R09: 0000000000000000 [ 1819.068143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1819.068150] R13: 00007ffefb208e4f R14: 00007ff903a93300 R15: 0000000000022000 [ 1819.068981] Mem-Info: [ 1819.086241] 0 pages in swap cache [ 1819.088721] active_anon:15862 inactive_anon:35218 isolated_anon:0 [ 1819.088721] active_file:14 inactive_file:13 isolated_file:0 [ 1819.088721] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1819.088721] slab_reclaimable:14302 slab_unreclaimable:121896 [ 1819.088721] mapped:22490 shmem:35932 pagetables:575 bounce:0 [ 1819.088721] free:13879 free_pcp:861 free_cma:0 [ 1819.117001] Swap cache stats: add 0, delete 0, find 0/0 [ 1819.119690] Node 0 active_anon:60304kB inactive_anon:40328kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58408kB dirty:0kB writeback:0kB shmem:42460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1819.123302] Free swap = 0kB [ 1819.123311] Total swap = 0kB [ 1819.140041] Node 1 active_anon:3144kB inactive_anon:100544kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31552kB dirty:0kB writeback:0kB shmem:101268kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1819.140047] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1819.140077] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1819.140096] Node 0 DMA32 free:17856kB min:35996kB low:44992kB high:53988kB active_anon:60304kB inactive_anon:40328kB active_file:44kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:1892kB bounce:0kB free_pcp:1932kB local_pcp:476kB free_cma:0kB [ 1819.140127] lowmem_reserve[]: 0 0 1 1 1 [ 1819.140143] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1819.140171] lowmem_reserve[]: 0 0 0 0 0 [ 1819.140190] Node 1 Normal free:26792kB min:53876kB low:67344kB high:80812kB active_anon:3144kB inactive_anon:100544kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:408kB bounce:0kB free_pcp:1512kB local_pcp:1508kB free_cma:0kB [ 1819.140221] lowmem_reserve[]: 0 0 0 0 0 [ 1819.140240] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB [ 1819.140316] Node 0 DMA32: 814*4kB (UME) 423*8kB (UME) 129*16kB (UME) 46*32kB (UME) 18*64kB (M) 5*128kB (M) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (M) 0*4096kB = 17856kB [ 1819.140396] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1819.140450] Node 1 Normal: 320*4kB (M) 253*8kB (ME) 250*16kB (ME) 129*32kB (UME) 16*64kB (ME) 8*128kB (M) 6*256kB (UME) 3*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 1*4096kB (M) = 26792kB [ 1819.140535] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1819.140545] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1819.140555] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1819.140564] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1819.140570] 35959 total pagecache pages [ 1819.140583] 0 pages in swap cache [ 1819.140591] Swap cache stats: add 0, delete 0, find 0/0 [ 1819.140595] Free swap = 0kB [ 1819.140600] Total swap = 0kB [ 1819.140608] 2097051 pages RAM [ 1819.140613] 0 pages HighMem/MovableOnly [ 1819.140617] 369649 pages reserved [ 1819.140622] 0 pages cma reserved [ 1819.675994] 2097051 pages RAM [ 1819.679145] 0 pages HighMem/MovableOnly [ 1819.683114] 369649 pages reserved [ 1819.686711] 0 pages cma reserved [ 1819.690076] Unreclaimable slab info: [ 1819.693789] Name Used Total [ 1819.699414] pid_2 56KB 84KB [ 1819.705056] batadv_tt_change_cache 0KB 7KB [ 1819.711138] batadv_tl_cache 5KB 16KB [ 1819.716609] TIPC 28KB 45KB [ 1819.721995] SCTPv6 16KB 37KB [ 1819.727441] DCCPv6 17KB 37KB [ 1819.732826] DCCP 16KB 35KB [ 1819.738381] L2TP/IPv6 48KB 52KB [ 1819.743777] RXRPC 11KB 26KB [ 1819.750859] rxrpc_call_jar 78KB 110KB [ 1819.756315] bridge_fdb_cache 9KB 27KB [ 1819.761690] fib6_nodes 170KB 264KB [ 1819.767124] ip6_dst_cache 363KB 633KB [ 1819.772515] RAWv6 81KB 101KB [ 1819.777993] UDPv6 26KB 41KB [ 1819.783379] TCPv6 24KB 24KB [ 1819.788821] nf_conntrack 14KB 18KB [ 1819.794246] t10_alua_lu_gp_cache 0KB 3KB [ 1819.800005] sd_ext_cdb 0KB 7KB [ 1819.805383] scsi_sense_cache 1056KB 1060KB [ 1819.810830] virtio_scsi_cmd 16KB 16KB [ 1819.816359] sgpool-128 8KB 8KB [ 1819.821903] sgpool-64 4KB 12KB [ 1819.827348] sgpool-32 2KB 15KB [ 1819.832712] sgpool-16 1KB 7KB [ 1819.838159] sgpool-8 0KB 7KB [ 1819.843539] mqueue_inode_cache 10KB 30KB [ 1819.851295] bio_post_read_ctx 14KB 15KB [ 1819.856934] bio-2 14KB 15KB [ 1819.862306] jfs_mp 7KB 7KB [ 1819.867893] cifs_small_rq 15KB 16KB [ 1819.873267] cifs_request 67KB 67KB [ 1819.878742] cifs_mpx_ids 0KB 7KB [ 1819.884226] nfs_commit_data 3KB 14KB [ 1819.889720] nfs_write_data 34KB 44KB [ 1819.895129] ext4_system_zone 1KB 7KB [ 1819.900629] bio-1 1KB 7KB [ 1819.906049] pid_namespace 2KB 11KB [ 1819.911450] rpc_buffers 17KB 25KB [ 1819.916894] rpc_tasks 2KB 7KB [ 1819.922350] UNIX 845KB 945KB [ 1819.927908] tcp_bind_bucket 1KB 4KB [ 1819.933306] ip_fib_trie 26KB 47KB [ 1819.942230] ip_fib_alias 123KB 189KB [ 1819.947681] ip_dst_cache 6KB 16KB [ 1819.955112] RAW 48KB 67KB [ 1819.968994] UDP 55KB 74KB [ 1819.974560] TCP 8KB 11KB [ 1819.982402] hugetlbfs_inode_cache 3KB 15KB [ 1819.994165] fscache_cookie_jar 1KB 11KB [ 1820.002267] eventpoll_pwq 18KB 67KB [ 1820.013536] eventpoll_epi 29KB 63KB [ 1820.021380] inotify_inode_mark 21KB 31KB [ 1820.029756] request_queue 199KB 199KB [ 1820.035282] blkdev_requests 1KB 3KB [ 1820.043473] blkdev_ioc 27KB 38KB [ 1820.053623] bio-0 1372KB 1425KB [ 1820.062759] biovec-max 1575KB 1575KB [ 1820.071728] biovec-64 1062KB 1126KB [ 1820.080714] biovec-16 94KB 112KB [ 1820.089629] bio_integrity_payload 1KB 8KB [ 1820.098577] khugepaged_mm_slot 11KB 31KB [ 1820.104146] uid_cache 0KB 4KB [ 1820.111967] dmaengine-unmap-2 0KB 3KB [ 1820.121090] skbuff_fclone_cache 112KB 120KB [ 1820.130413] skbuff_head_cache 7355KB 8167KB [ 1820.139441] configfs_dir_cache 3KB 7KB [ 1820.145471] file_lock_cache 83KB 91KB [ 1820.160031] file_lock_ctx 9KB 11KB [ 1820.169003] fsnotify_mark_connector 11KB 23KB [ 1820.190423] net_namespace 61KB 61KB [ 1820.195917] shmem_inode_cache 8181KB 8271KB [ 1820.201296] task_delay_info 192KB 383KB [ 1820.231171] taskstats 76KB 91KB [ 1820.236680] proc_dir_entry 754KB 873KB [ 1820.242057] pde_opener 8KB 58KB [ 1820.252779] seq_file 252KB 417KB [ 1820.260340] sigqueue 38KB 66KB [ 1820.270616] kernfs_node_cache 18234KB 18246KB [ 1820.276323] mnt_cache 174KB 208KB [ 1820.281780] filp 6711KB 7923KB [ 1820.292114] names_cache 138647KB 138647KB [ 1820.297638] iint_cache 34KB 47KB [ 1820.303010] key_jar 4KB 7KB [ 1820.313223] uts_namespace 2KB 3KB [ 1820.318815] nsproxy 1KB 7KB [ 1820.324247] vm_area_struct 3082KB 4064KB [ 1820.334416] mm_struct 518KB 715KB [ 1820.339931] fs_cache 155KB 364KB [ 1820.345304] files_cache 590KB 1008KB [ 1820.357291] signal_cache 1217KB 1911KB [ 1820.364946] sighand_cache 548KB 631KB [ 1820.373636] task_struct 6691KB 6779KB [ 1820.380854] cred_jar 1840KB 3004KB [ 1820.389501] anon_vma_chain 988KB 1547KB [ 1820.394881] anon_vma 124KB 327KB [ 1820.402105] pid 89KB 236KB [ 1820.419548] Acpi-Operand 156KB 202KB [ 1820.424942] Acpi-ParseExt 9KB 11KB [ 1820.440437] Acpi-Parse 41KB 47KB [ 1820.446539] Acpi-State 52KB 63KB [ 1820.451971] Acpi-Namespace 20KB 27KB [ 1820.457421] numa_policy 0KB 3KB [ 1820.463433] debug_objects_cache 1558KB 1968KB [ 1820.470102] trace_event_file 297KB 298KB [ 1820.475572] ftrace_event_field 398KB 401KB [ 1820.481098] pool_workqueue 122KB 156KB [ 1820.487282] page->ptl 551KB 1035KB [ 1820.492704] kmalloc-2097152 2050KB 2050KB [ 1820.498231] kmalloc-524288 2056KB 2056KB [ 1820.504167] kmalloc-262144 1290KB 1290KB [ 1820.510437] kmalloc-131072 650KB 650KB [ 1820.516527] kmalloc-65536 2112KB 2178KB [ 1820.522794] kmalloc-32768 1782KB 1848KB [ 1820.528772] kmalloc-16384 957KB 1089KB [ 1820.534933] kmalloc-8192 4133KB 4232KB [ 1820.542015] kmalloc-4096 19524KB 19584KB [ 1820.547959] kmalloc-2048 12286KB 15484KB [ 1820.553804] kmalloc-1024 8836KB 13379KB [ 1820.559874] kmalloc-512 14491KB 15997KB [ 1820.566072] kmalloc-256 4423KB 6262KB [ 1820.572073] kmalloc-128 1077KB 1724KB [ 1820.578141] kmalloc-96 3598KB 4404KB [ 1820.584014] kmalloc-64 2627KB 3748KB [ 1820.589822] kmalloc-32 1928KB 2476KB [ 1820.595901] kmalloc-192 1759KB 3024KB [ 1820.601832] kmem_cache 177KB 183KB [ 1820.607364] Out of memory (oom_kill_allocating_task): Kill process 24422 (in:imklog) score 0 or sacrifice child [ 1820.617903] Killed process 24420 (rsyslogd) total-vm:254332kB, anon-rss:416kB, file-rss:0kB, shmem-rss:0kB [ 1820.629522] oom_reaper: reaped process 24420 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 07:11:26 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x0, 0x3b1, 0xffffffff}, &(0x7f00000001c0)={{0x4, 0x4, 0x475, 0x9f7}, &(0x7f0000000180)={{0x6, 0x9, 0x5}}}}, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:11:26 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000), 0x0) 07:11:26 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8, @raw_data="d50a3a59a0201e65957a5ff380000aea8268ea94e35799825f02b2860bcb8e1c0a3c246344cc9b4145cc88cf2a52d1c620795f758f6a68ce012a5438d3ea7bcb03dcfbfc0b13ebc4ec58e3d9a3b84516893574d0683916bd54153edce51d8255f49dfb68b873ceeb676904381b3d32d2ff26d7e42bf2b6cb809923bad74e4e90640f90b2e6c071b39cabdf09e9585582da8f5ae6d29f0403697ecc5842e1fda7b9067aa7e88ca9cf598c7efaf9fa62e9c4d98c00"}) 07:11:26 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x40004) 07:11:26 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x4, 0x6, 0xfffffff8, 0x1, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4, 0xc}, 0x48) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000040)) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000340)) (async) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000300)=0x3) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0x58, &(0x7f0000000380)}, 0x10) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="a4c67d4bda42af6867c6f395dd21e1fcbaf6cff63b9882f5804e1be2327a55f5c27f2c37c03a843256e0b2a93284bda7b3ad55e93d418bb25a66376b7fbf46f4bb191bd1ca6bbbdb0484f988c6e54d534e8ccc326ab67c888830fa87b002ff67a55eaa350cdc2791e63e25f43cf0fb4bb85712ac6e73101a6a0d211a64f39da98fbdc5a2fe539929bf718fd56c88bb56e2d6e7f25e9a529e42be0668c27c22916fe2e6b76aef04ee84b8d5b2c138d9b71a7caf131fa517f418211d3a710e54ad8e5dfa0e0eab4097729db0867b9ebd591c82cc68586b4541a82b3503d5310c1dd5a8494f268692ab07fc6eda0e7bc80dbaa677"}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 07:11:26 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8, 0x7ff, 0x80, 0x3, 0x0, 0x0, 0x7, 0x20], 0xd3e}}, 0x7ff}) 07:11:26 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x0, 0x3b1, 0xffffffff}, &(0x7f00000001c0)={{0x4, 0x4, 0x475, 0x9f7}, &(0x7f0000000180)={{0x6, 0x9, 0x5}}}}, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:11:26 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8, @raw_data="d50a3a59a0201e65957a5ff380000aea8268ea94e35799825f02b2860bcb8e1c0a3c246344cc9b4145cc88cf2a52d1c620795f758f6a68ce012a5438d3ea7bcb03dcfbfc0b13ebc4ec58e3d9a3b84516893574d0683916bd54153edce51d8255f49dfb68b873ceeb676904381b3d32d2ff26d7e42bf2b6cb809923bad74e4e90640f90b2e6c071b39cabdf09e9585582da8f5ae6d29f0403697ecc5842e1fda7b9067aa7e88ca9cf598c7efaf9fa62e9c4d98c00"}) 07:11:26 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000), 0x0) 07:11:26 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x40004) 07:11:26 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x0, 0x0, 0x1, 0x4, 0x2, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x46}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x5f, &(0x7f00000001c0)=""/95, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x4, 0x0, 0x4006}, 0x10}, 0x80) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2}) 07:11:26 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000), 0x0) 07:11:26 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3, 0x0, 0xffffffff}, &(0x7f00000001c0)={{0x4, 0x4, 0x475, 0x9f7}, &(0x7f0000000180)={{0x6, 0x9, 0x5}}}}, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) [ 1828.816522] oom_reaper: reaped process 24658 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 1828.852001] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1828.875792] in:imklog cpuset=/ mems_allowed=0-1 [ 1828.880640] CPU: 0 PID: 24631 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 1828.888087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1828.897541] Call Trace: [ 1828.900147] dump_stack+0x1fc/0x2ef [ 1828.903939] dump_header+0x15d/0xc3f [ 1828.907647] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1828.912760] ? ___ratelimit+0x319/0x590 [ 1828.916893] oom_kill_process.cold+0x10/0x692 [ 1828.921409] ? check_preemption_disabled+0x41/0x280 [ 1828.926447] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1828.931959] out_of_memory+0x1072/0x1390 [ 1828.936127] ? oom_killer_disable+0x270/0x270 [ 1828.940613] ? mutex_trylock+0x15f/0x1a0 [ 1828.944686] __alloc_pages_nodemask+0x23a2/0x2890 [ 1828.949531] ? find_get_entry+0x4cd/0x8a0 [ 1828.953761] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1828.958608] alloc_pages_current+0x193/0x2a0 [ 1828.963012] filemap_fault+0x146e/0x2180 [ 1828.967247] ext4_filemap_fault+0x84/0xb0 [ 1828.971396] __do_fault+0x10b/0x4b0 [ 1828.975011] __handle_mm_fault+0x273b/0x41c0 [ 1828.979409] ? vm_insert_page+0x9c0/0x9c0 [ 1828.983541] ? lock_downgrade+0x720/0x720 [ 1828.987680] ? check_preemption_disabled+0x41/0x280 [ 1828.992687] handle_mm_fault+0x436/0xb10 [ 1828.996863] __do_page_fault+0x68e/0xd60 [ 1829.000929] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1829.005931] ? spurious_fault+0x840/0x840 [ 1829.010062] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1829.014932] ? page_fault+0x8/0x30 [ 1829.018471] page_fault+0x1e/0x30 [ 1829.021933] RIP: 0033:0x7fa85ced522d [ 1829.025633] Code: Bad RIP value. [ 1829.028981] RSP: 002b:00007fa85a871580 EFLAGS: 00010293 [ 1829.034327] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007fa85ced522d [ 1829.041580] RDX: 0000000000001fa0 RSI: 00007fa85a871da0 RDI: 0000000000000004 [ 1829.048834] RBP: 00005570c8f699d0 R08: 0000000000000000 R09: 0000000000000000 [ 1829.056096] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007fa85a871da0 [ 1829.063375] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007fa85a873553 [ 1829.080537] syz-executor.1: vmalloc: allocation failure, allocated 1657769984 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1829.083022] Mem-Info: [ 1829.097715] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1829.102849] CPU: 1 PID: 24658 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1829.107101] active_anon:16452 inactive_anon:35218 isolated_anon:0 [ 1829.107101] active_file:12 inactive_file:13 isolated_file:0 [ 1829.107101] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1829.107101] slab_reclaimable:14365 slab_unreclaimable:123068 [ 1829.107101] mapped:22523 shmem:35932 pagetables:589 bounce:0 [ 1829.107101] free:13822 free_pcp:864 free_cma:0 [ 1829.110750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1829.153482] Call Trace: [ 1829.154449] Node 0 active_anon:62292kB inactive_anon:40324kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58408kB dirty:0kB writeback:0kB shmem:42456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1829.156168] dump_stack+0x1fc/0x2ef [ 1829.156185] warn_alloc.cold+0x7b/0x18f [ 1829.156203] ? zone_watermark_ok_safe+0x260/0x260 [ 1829.156216] ? rcu_nmi_exit+0xb3/0x180 [ 1829.156249] __vmalloc_area_node+0x4fd/0x780 [ 1829.196185] Node 1 active_anon:3516kB inactive_anon:100548kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31684kB dirty:0kB writeback:0kB shmem:101272kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1829.196388] ? __vmalloc_node_range+0x180/0x180 [ 1829.200266] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1829.204701] ? _raw_spin_unlock+0x29/0x40 [ 1829.242125] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1829.263144] ? __get_vm_area_node+0x2e2/0x3a0 [ 1829.263163] __vmalloc_node_range+0xed/0x180 [ 1829.263180] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1829.263193] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1829.263205] vmalloc_user+0x70/0xe0 [ 1829.263218] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1829.263231] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1829.263245] __vb2_queue_alloc+0x472/0xe60 [ 1829.263271] vb2_core_create_bufs+0x273/0x7e0 [ 1829.263288] ? __vb2_queue_free+0x870/0x870 [ 1829.263308] ? mutex_trylock+0x1a0/0x1a0 [ 1829.279381] Node 0 DMA32 free:17580kB min:35996kB low:44992kB high:53988kB active_anon:62292kB inactive_anon:40324kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7296kB pagetables:1932kB bounce:0kB free_pcp:1700kB local_pcp:1408kB free_cma:0kB [ 1829.281599] ? __video_do_ioctl+0x632/0xcd0 [ 1829.289539] lowmem_reserve[]: 0 0 1 1 1 [ 1829.291314] vb2_create_bufs+0x332/0x620 [ 1829.294910] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1829.299233] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1829.299248] ? __video_do_ioctl+0x632/0xcd0 [ 1829.299261] ? mutex_trylock+0x1a0/0x1a0 [ 1829.299275] ? mark_held_locks+0xf0/0xf0 [ 1829.299290] ? futex_wait_queue_me+0x404/0x5e0 [ 1829.299307] vb2_ioctl_create_bufs+0x20d/0x360 [ 1829.299320] ? memset+0x20/0x40 [ 1829.299336] v4l_create_bufs+0xb2/0x160 [ 1829.312377] lowmem_reserve[]: 0 0 0 0 0 [ 1829.316507] __video_do_ioctl+0x49a/0xcd0 [ 1829.316526] ? v4l_querycap+0x340/0x340 [ 1829.316545] ? __might_fault+0x192/0x1d0 [ 1829.316564] ? v4l_querycap+0x340/0x340 [ 1829.320707] Node 1 Normal free:26840kB min:53876kB low:67344kB high:80812kB active_anon:3516kB inactive_anon:100548kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:424kB bounce:0kB free_pcp:1756kB local_pcp:60kB free_cma:0kB [ 1829.350064] video_usercopy+0x13f/0xfa0 [ 1829.350084] ? v4l_enumstd+0x60/0x60 [ 1829.350098] ? do_futex+0x171/0x1880 [ 1829.350113] ? mark_held_locks+0xf0/0xf0 [ 1829.350132] ? debug_check_no_obj_freed+0x201/0x490 [ 1829.350160] ? video_usercopy+0xfa0/0xfa0 [ 1829.350175] v4l2_ioctl+0x147/0x1a0 [ 1829.362569] lowmem_reserve[]: 0 0 0 0 0 [ 1829.388341] ? video_devdata+0xa0/0xa0 [ 1829.388358] do_vfs_ioctl+0xcdb/0x12e0 [ 1829.388373] ? lock_downgrade+0x720/0x720 [ 1829.388390] ? check_preemption_disabled+0x41/0x280 [ 1829.388404] ? ioctl_preallocate+0x200/0x200 [ 1829.388420] ? __fget+0x356/0x510 [ 1829.388433] ? do_dup2+0x450/0x450 [ 1829.388446] ? __se_sys_futex+0x298/0x3b0 [ 1829.388468] ksys_ioctl+0x9b/0xc0 [ 1829.388484] __x64_sys_ioctl+0x6f/0xb0 [ 1829.388496] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1829.388511] do_syscall_64+0xf9/0x620 [ 1829.388531] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1829.388542] RIP: 0033:0x7ff9055210f9 [ 1829.388556] Code: Bad RIP value. [ 1829.388563] RSP: 002b:00007ff903a93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1829.388576] RAX: ffffffffffffffda RBX: 00007ff905640f80 RCX: 00007ff9055210f9 [ 1829.388584] RDX: 0000000020000640 RSI: 00000000c100565c RDI: 0000000000000003 [ 1829.388592] RBP: 00007ff90557cae9 R08: 0000000000000000 R09: 0000000000000000 [ 1829.388600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1829.388608] R13: 00007ffefb208e4f R14: 00007ff903a93300 R15: 0000000000022000 [ 1829.401567] Mem-Info: [ 1829.413979] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB [ 1829.422241] active_anon:16452 inactive_anon:35218 isolated_anon:0 [ 1829.422241] active_file:12 inactive_file:13 isolated_file:0 [ 1829.422241] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1829.422241] slab_reclaimable:14365 slab_unreclaimable:123068 [ 1829.422241] mapped:22523 shmem:35932 pagetables:589 bounce:0 [ 1829.422241] free:13822 free_pcp:864 free_cma:0 [ 1829.424696] Node 0 DMA32: 699*4kB (UME) 450*8kB (ME) 125*16kB (ME) 43*32kB (ME) 18*64kB (M) 6*128kB (UM) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (M) 0*4096kB = 17580kB [ 1829.428959] Node 0 active_anon:62292kB inactive_anon:40324kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58408kB dirty:0kB writeback:0kB shmem:42456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1829.441759] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1829.445434] Node 1 active_anon:3516kB inactive_anon:100548kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31684kB dirty:0kB writeback:0kB shmem:101272kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1829.483832] Node 1 Normal: 290*4kB (UM) 206*8kB (UME) 252*16kB (UME) 135*32kB (UME) 15*64kB (ME) 5*128kB (UM) 7*256kB (UME) 2*512kB (M) 1*1024kB (E) 1*2048kB (E) 2*4096kB (UM) = 26840kB [ 1829.490645] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1829.507645] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1829.514006] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1829.520734] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1829.521388] Node 0 DMA32 free:17580kB min:35996kB low:44992kB high:53988kB active_anon:62292kB inactive_anon:40324kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7296kB pagetables:1932kB bounce:0kB free_pcp:1700kB local_pcp:292kB free_cma:0kB [ 1829.533768] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1829.535370] lowmem_reserve[]: 0 0 1 1 1 [ 1829.541630] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1829.542192] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1829.552428] 35957 total pagecache pages [ 1829.559772] lowmem_reserve[]: 0 0 0 0 0 [ 1829.572030] 0 pages in swap cache [ 1829.580467] Node 1 Normal free:26840kB min:53876kB low:67344kB high:80812kB active_anon:3516kB inactive_anon:100548kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:424kB bounce:0kB free_pcp:1756kB local_pcp:1696kB free_cma:0kB [ 1829.595782] Swap cache stats: add 0, delete 0, find 0/0 [ 1829.607910] lowmem_reserve[]: 0 0 0 0 0 [ 1829.619139] Free swap = 0kB [ 1829.636717] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB [ 1829.669074] Total swap = 0kB [ 1829.694689] Node 0 DMA32: 699*4kB (UME) 450*8kB (ME) 125*16kB (ME) 43*32kB (ME) 18*64kB (M) 6*128kB (UM) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (M) 0*4096kB = 17580kB [ 1829.714745] 2097051 pages RAM [ 1829.734247] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1829.753448] 0 pages HighMem/MovableOnly [ 1829.782301] Node 1 Normal: 290*4kB (UM) 206*8kB (UME) 252*16kB (UME) 135*32kB (UME) 15*64kB (ME) 5*128kB (UM) 7*256kB (UME) 2*512kB (M) 1*1024kB (E) 1*2048kB (E) 2*4096kB (UM) = 26840kB [ 1829.798538] 369649 pages reserved [ 1829.814497] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1829.819279] 0 pages cma reserved [ 1829.858451] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1829.869979] Unreclaimable slab info: [ 1829.904744] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1829.909705] Name Used Total [ 1829.940132] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1829.951031] pid_2 61KB 84KB [ 1829.965988] 35957 total pagecache pages [ 1829.991992] batadv_tt_change_cache 0KB 7KB [ 1829.999904] 0 pages in swap cache [ 1830.023421] batadv_tl_cache 4KB 16KB [ 1830.034172] Swap cache stats: add 0, delete 0, find 0/0 [ 1830.042979] TIPC 28KB 45KB [ 1830.048065] Free swap = 0kB [ 1830.052224] SCTPv6 14KB 37KB [ 1830.069376] Total swap = 0kB [ 1830.075194] SCTP 3KB 7KB [ 1830.078334] 2097051 pages RAM [ 1830.081779] DCCPv6 17KB 37KB [ 1830.085223] 0 pages HighMem/MovableOnly [ 1830.095920] DCCP 16KB 35KB [ 1830.095954] L2TP/IPv6 53KB 58KB [ 1830.095972] RXRPC 11KB 26KB [ 1830.095980] rxrpc_call_jar 78KB 110KB [ 1830.095994] bridge_fdb_cache 9KB 27KB [ 1830.096010] fib6_nodes 157KB 264KB [ 1830.096019] ip6_dst_cache 332KB 626KB [ 1830.096031] RAWv6 70KB 101KB [ 1830.096043] UDPv6 26KB 41KB [ 1830.096056] TCPv6 24KB 36KB [ 1830.096074] nf_conntrack 15KB 18KB [ 1830.116328] 369649 pages reserved [ 1830.121883] t10_alua_lu_gp_cache 0KB 3KB [ 1830.133590] 0 pages cma reserved [ 1830.144393] sd_ext_cdb 0KB 7KB [ 1830.218017] scsi_sense_cache 1056KB 1060KB [ 1830.223409] virtio_scsi_cmd 16KB 16KB [ 1830.233896] sgpool-128 8KB 8KB [ 1830.242615] sgpool-64 4KB 12KB [ 1830.253196] sgpool-32 2KB 15KB [ 1830.261730] sgpool-16 1KB 7KB [ 1830.272021] sgpool-8 0KB 7KB [ 1830.281130] mqueue_inode_cache 10KB 30KB [ 1830.293583] bio_post_read_ctx 14KB 15KB [ 1830.299297] bio-2 14KB 15KB [ 1830.304671] jfs_mp 7KB 7KB [ 1830.313720] cifs_small_rq 15KB 16KB [ 1830.319304] cifs_request 67KB 67KB [ 1830.324684] cifs_mpx_ids 0KB 7KB [ 1830.333606] nfs_commit_data 3KB 14KB [ 1830.339535] nfs_write_data 34KB 44KB [ 1830.345027] ext4_system_zone 1KB 7KB [ 1830.353886] bio-1 1KB 7KB [ 1830.359345] pid_namespace 2KB 11KB [ 1830.364725] rpc_buffers 17KB 25KB [ 1830.373792] rpc_tasks 2KB 7KB [ 1830.379257] UNIX 588KB 690KB [ 1830.384648] tcp_bind_bucket 1KB 4KB [ 1830.398953] ip_fib_trie 23KB 47KB [ 1830.404368] ip_fib_alias 112KB 189KB [ 1830.409813] ip_dst_cache 6KB 16KB [ 1830.415184] RAW 42KB 67KB [ 1830.427432] UDP 59KB 74KB [ 1830.432825] TCP 8KB 16KB [ 1830.438303] hugetlbfs_inode_cache 3KB 15KB [ 1830.444019] fscache_cookie_jar 1KB 11KB [ 1830.456181] eventpoll_pwq 17KB 67KB [ 1830.461573] eventpoll_epi 30KB 63KB [ 1830.470338] inotify_inode_mark 21KB 31KB [ 1830.479241] request_queue 199KB 199KB [ 1830.484627] blkdev_requests 1KB 3KB [ 1830.493740] blkdev_ioc 29KB 38KB [ 1830.504203] bio-0 1473KB 1473KB [ 1830.513373] biovec-max 1625KB 1625KB [ 1830.522211] biovec-64 1110KB 1126KB [ 1830.531127] biovec-16 100KB 112KB [ 1830.542348] bio_integrity_payload 1KB 8KB [ 1830.551671] khugepaged_mm_slot 12KB 31KB [ 1830.562034] uid_cache 0KB 4KB [ 1830.567519] Bluetooth: hci2: command 0x0406 tx timeout [ 1830.579871] dmaengine-unmap-2 0KB 3KB [ 1830.585400] skbuff_fclone_cache 119KB 123KB [ 1830.590946] skbuff_head_cache 7170KB 7968KB [ 1830.604743] configfs_dir_cache 3KB 7KB [ 1830.610495] file_lock_cache 88KB 91KB [ 1830.622280] file_lock_ctx 9KB 11KB [ 1830.627788] fsnotify_mark_connector 11KB 23KB [ 1830.633686] net_namespace 52KB 52KB [ 1830.645866] shmem_inode_cache 8181KB 8267KB [ 1830.651344] task_delay_info 170KB 383KB [ 1830.660290] taskstats 80KB 91KB [ 1830.669261] proc_dir_entry 709KB 873KB [ 1830.674650] pde_opener 7KB 54KB [ 1830.683512] seq_file 268KB 417KB [ 1830.692279] sigqueue 34KB 66KB [ 1830.703635] kernfs_node_cache 18235KB 18246KB [ 1830.712435] mnt_cache 173KB 208KB [ 1830.721390] filp 6801KB 7923KB [ 1830.730579] names_cache 145741KB 145779KB [ 1830.739508] iint_cache 37KB 47KB [ 1830.744896] key_jar 4KB 7KB [ 1830.753758] uts_namespace 2KB 3KB [ 1830.762681] nsproxy 1KB 7KB [ 1830.771511] vm_area_struct 3209KB 4064KB [ 1830.780273] mm_struct 497KB 715KB [ 1830.789918] fs_cache 117KB 352KB [ 1830.798899] files_cache 456KB 903KB [ 1830.809788] signal_cache 968KB 1775KB [ 1830.818808] sighand_cache 524KB 631KB [ 1830.824205] task_struct 5643KB 5731KB [ 1830.833024] cred_jar 1816KB 3004KB [ 1830.842057] anon_vma_chain 990KB 1547KB [ 1830.850854] anon_vma 137KB 327KB [ 1830.859797] pid 65KB 232KB [ 1830.869153] Acpi-Operand 156KB 202KB [ 1830.874618] Acpi-ParseExt 9KB 11KB [ 1830.883501] Acpi-Parse 41KB 47KB [ 1830.892483] Acpi-State 52KB 63KB [ 1830.901678] Acpi-Namespace 20KB 27KB [ 1830.913900] numa_policy 0KB 3KB [ 1830.919454] debug_objects_cache 1533KB 1968KB [ 1830.925002] trace_event_file 297KB 298KB [ 1830.931232] ftrace_event_field 398KB 401KB [ 1830.936787] pool_workqueue 121KB 156KB [ 1830.942885] page->ptl 559KB 1035KB [ 1830.948398] kmalloc-2097152 2050KB 2050KB [ 1830.953766] kmalloc-524288 2056KB 2056KB [ 1830.960792] kmalloc-262144 1290KB 1290KB [ 1830.967193] kmalloc-131072 650KB 650KB [ 1830.972748] kmalloc-65536 1848KB 1914KB [ 1830.978406] kmalloc-32768 1650KB 1716KB [ 1830.984602] kmalloc-16384 940KB 1023KB [ 1830.990193] kmalloc-8192 3976KB 4092KB [ 1830.995789] kmalloc-4096 18139KB 18177KB [ 1831.001440] kmalloc-2048 11409KB 14681KB [ 1831.007093] kmalloc-1024 8480KB 13293KB [ 1831.015152] kmalloc-512 15048KB 15926KB [ 1831.020684] kmalloc-256 4291KB 6255KB [ 1831.031771] kmalloc-128 1003KB 1716KB [ 1831.037985] kmalloc-96 3666KB 4404KB [ 1831.044109] kmalloc-64 2578KB 3748KB [ 1831.054861] kmalloc-32 1921KB 2476KB [ 1831.062232] kmalloc-192 1621KB 3012KB [ 1831.073136] kmem_cache 177KB 183KB [ 1831.078752] Out of memory (oom_kill_allocating_task): Kill process 24631 (in:imklog) score 0 or sacrifice child [ 1831.094231] Killed process 24629 (rsyslogd) total-vm:254332kB, anon-rss:516kB, file-rss:0kB, shmem-rss:0kB [ 1831.106194] oom_reaper: reaped process 24629 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 07:11:37 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b7f8bd690cfeb8873d1512fbb8a9acab67197c8759ba1921c4f89b90587fb2548e7e7e7ce0ed42c271c76d1a875eed4621eea8f520897fd6df2a38bc95973fa81e2529587d7938a7c3417a612ea79bc07d9574d68f8077ed10d9988", 0x6b) 07:11:37 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8, 0x7ff, 0x80, 0x3, 0x0, 0x0, 0x7], 0xd3e}}, 0x7ff}) 07:11:37 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x40004) 07:11:37 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3}, &(0x7f00000001c0)={{0x4, 0x4, 0x475, 0x9f7}, &(0x7f0000000180)={{0x6, 0x9, 0x5}}}}, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:11:37 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8, @raw_data="d50a3a59a0201e65957a5ff380000aea8268ea94e35799825f02b2860bcb8e1c0a3c246344cc9b4145cc88cf2a52d1c620795f758f6a68ce012a5438d3ea7bcb03dcfbfc0b13ebc4ec58e3d9a3b84516893574d0683916bd54153edce51d8255f49dfb68b873ceeb676904381b3d32d2ff26d7e42bf2b6cb809923bad74e4e90640f90b2e6c071b39cabdf09e9585582da8f5ae6d29f0403697ecc5842e1fda7b9067aa7e88ca9cf598c7efaf9fa62e9c4d98c00"}) 07:11:37 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x0, 0x0, 0x1, 0x4, 0x2, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x46}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x5f, &(0x7f00000001c0)=""/95, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x4, 0x0, 0x4006}, 0x10}, 0x80) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2}) 07:11:37 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3}}, 0x9, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:11:37 executing program 2: sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x40004) 07:11:37 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000), 0x0) 07:11:37 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x0, 0x0, 0x1, 0x4, 0x2, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x46}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x5f, &(0x7f00000001c0)=""/95, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x4, 0x0, 0x4006}, 0x10}, 0x80) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2}) 07:11:37 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x0, @vbi={0x6e, 0x7fff, 0x8, 0x35315241, [0x10000, 0xffffffff], [0x3d, 0x3f], 0x108}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8, @raw_data="56acb780f2cab72f662deb1e1ba95c5423bc6ffddd87f21609f06a9617b599558ce6700905692d3a0d79a602761bb9bbbb92b535e707ef371fbeb665569bd03dec8533231290e38d2d12d4e5ae68cacbcfa09d2a663a418db462fc9a481feedf390e9bb7490f3d385ea3686bd5f0c5a083e9bf5f32463eea425739e2cfc1277be1dad85429d183f398466b551a3f4aae26d9a85b540afe6ff62564c775938be3c1271db320d55d9c05f7f08944a7fa5e950306e86d1fbd315d380d34b6f81d384d2a94f88608dd05"}) 07:11:37 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3}}, 0x0, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:11:37 executing program 2: sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x40004) [ 1839.707418] oom_reaper: reaped process 24693 (syz-executor.1), now anon-rss:0kB, file-rss:14332kB, shmem-rss:8kB [ 1839.742855] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1839.760789] systemd-journal cpuset=/ mems_allowed=0-1 [ 1839.771089] CPU: 0 PID: 22840 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 1839.779081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1839.788467] Call Trace: [ 1839.791067] dump_stack+0x1fc/0x2ef [ 1839.794698] dump_header+0x15d/0xc3f [ 1839.798421] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1839.803527] ? ___ratelimit+0x319/0x590 [ 1839.807510] oom_kill_process.cold+0x10/0x692 [ 1839.812015] ? check_preemption_disabled+0x41/0x280 [ 1839.817049] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1839.822334] out_of_memory+0x1072/0x1390 [ 1839.826407] ? oom_killer_disable+0x270/0x270 [ 1839.830913] ? mutex_trylock+0x15f/0x1a0 [ 1839.834986] __alloc_pages_nodemask+0x23a2/0x2890 [ 1839.839834] ? find_get_entry+0x4cd/0x8a0 [ 1839.844494] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1839.849726] alloc_pages_current+0x193/0x2a0 [ 1839.854137] filemap_fault+0x146e/0x2180 [ 1839.858202] ext4_filemap_fault+0x84/0xb0 [ 1839.862442] __do_fault+0x10b/0x4b0 [ 1839.866077] __handle_mm_fault+0x273b/0x41c0 [ 1839.870477] ? vm_insert_page+0x9c0/0x9c0 [ 1839.874656] ? check_preemption_disabled+0x41/0x280 [ 1839.879680] handle_mm_fault+0x436/0xb10 [ 1839.883751] __do_page_fault+0x68e/0xd60 [ 1839.887802] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1839.892939] ? spurious_fault+0x840/0x840 [ 1839.897085] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1839.901921] ? page_fault+0x8/0x30 [ 1839.905449] page_fault+0x1e/0x30 [ 1839.908913] RIP: 0033:0x7fb78300b2e3 [ 1839.912618] Code: Bad RIP value. [ 1839.915968] RSP: 002b:00007fffa6b3e848 EFLAGS: 00010246 [ 1839.921331] RAX: 0000000000000001 RBX: 000055642c7f01e0 RCX: 00007fb78300b2e3 [ 1839.928599] RDX: 0000000000000013 RSI: 00007fffa6b3e850 RDI: 000000000000000c [ 1839.935852] RBP: 00007fffa6b3ea40 R08: 00007fffa6bad000 R09: 000001d60d9ced6a [ 1839.943107] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffa6b3e850 [ 1839.950362] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f595129c874f [ 1839.965177] syz-executor.1: vmalloc: allocation failure, allocated 1662021632 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1839.974645] Mem-Info: [ 1839.979213] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1839.986644] CPU: 1 PID: 24693 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1839.994701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1839.994932] active_anon:16457 inactive_anon:35218 isolated_anon:0 [ 1839.994932] active_file:14 inactive_file:8 isolated_file:0 [ 1839.994932] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1839.994932] slab_reclaimable:14391 slab_unreclaimable:121893 [ 1839.994932] mapped:22555 shmem:35932 pagetables:590 bounce:0 [ 1839.994932] free:13906 free_pcp:855 free_cma:0 [ 1840.004071] Call Trace: [ 1840.039802] dump_stack+0x1fc/0x2ef [ 1840.043442] warn_alloc.cold+0x7b/0x18f [ 1840.047426] ? zone_watermark_ok_safe+0x260/0x260 [ 1840.052284] ? retint_kernel+0x2d/0x2d [ 1840.054198] Node 0 active_anon:62224kB inactive_anon:40324kB active_file:40kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58408kB dirty:0kB writeback:0kB shmem:42456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1840.056188] __vmalloc_area_node+0x4fd/0x780 [ 1840.056208] ? __vmalloc_node_range+0x180/0x180 [ 1840.056222] ? _raw_spin_unlock+0x29/0x40 [ 1840.056235] ? __get_vm_area_node+0x2e2/0x3a0 [ 1840.056253] __vmalloc_node_range+0xed/0x180 [ 1840.098979] Node 1 active_anon:3604kB inactive_anon:100548kB active_file:16kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31812kB dirty:0kB writeback:0kB shmem:101272kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1840.101605] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1840.110663] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1840.133224] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1840.133237] vmalloc_user+0x70/0xe0 [ 1840.133253] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1840.133267] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1840.133281] __vb2_queue_alloc+0x472/0xe60 [ 1840.133304] vb2_core_create_bufs+0x273/0x7e0 [ 1840.133318] ? __vb2_queue_free+0x870/0x870 [ 1840.133335] ? mutex_trylock+0x1a0/0x1a0 [ 1840.133351] ? __video_do_ioctl+0x632/0xcd0 [ 1840.133368] vb2_create_bufs+0x332/0x620 [ 1840.133387] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1840.133401] ? __video_do_ioctl+0x632/0xcd0 [ 1840.133413] ? mutex_trylock+0x1a0/0x1a0 [ 1840.133428] ? mark_held_locks+0xf0/0xf0 [ 1840.133448] vb2_ioctl_create_bufs+0x20d/0x360 [ 1840.133463] ? memset+0x20/0x40 [ 1840.133482] v4l_create_bufs+0xb2/0x160 [ 1840.133500] __video_do_ioctl+0x49a/0xcd0 [ 1840.133523] ? v4l_querycap+0x340/0x340 [ 1840.133542] ? __might_fault+0x192/0x1d0 [ 1840.133559] ? v4l_querycap+0x340/0x340 [ 1840.133576] video_usercopy+0x13f/0xfa0 [ 1840.133598] ? v4l_enumstd+0x60/0x60 [ 1840.133613] ? do_futex+0x171/0x1880 [ 1840.133630] ? mark_held_locks+0xf0/0xf0 [ 1840.133649] ? debug_check_no_obj_freed+0x201/0x490 [ 1840.133670] ? video_usercopy+0xfa0/0xfa0 [ 1840.133683] v4l2_ioctl+0x147/0x1a0 [ 1840.133696] ? video_devdata+0xa0/0xa0 [ 1840.133712] do_vfs_ioctl+0xcdb/0x12e0 [ 1840.133728] ? lock_downgrade+0x720/0x720 [ 1840.133743] ? check_preemption_disabled+0x41/0x280 [ 1840.133758] ? ioctl_preallocate+0x200/0x200 [ 1840.133777] ? __fget+0x356/0x510 [ 1840.133793] ? do_dup2+0x450/0x450 [ 1840.133807] ? __se_sys_futex+0x298/0x3b0 [ 1840.133830] ksys_ioctl+0x9b/0xc0 [ 1840.133846] __x64_sys_ioctl+0x6f/0xb0 [ 1840.133861] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1840.133875] do_syscall_64+0xf9/0x620 [ 1840.133895] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1840.133906] RIP: 0033:0x7ff9055210f9 [ 1840.133923] Code: Bad RIP value. [ 1840.133930] RSP: 002b:00007ff903a93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1840.133950] RAX: ffffffffffffffda RBX: 00007ff905640f80 RCX: 00007ff9055210f9 [ 1840.133958] RDX: 0000000020000640 RSI: 00000000c100565c RDI: 0000000000000003 [ 1840.133967] RBP: 00007ff90557cae9 R08: 0000000000000000 R09: 0000000000000000 [ 1840.133974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1840.133982] R13: 00007ffefb208e4f R14: 00007ff903a93300 R15: 0000000000022000 [ 1840.140647] Mem-Info: [ 1840.184287] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1840.192074] active_anon:16457 inactive_anon:35218 isolated_anon:0 [ 1840.192074] active_file:14 inactive_file:8 isolated_file:0 [ 1840.192074] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1840.192074] slab_reclaimable:14391 slab_unreclaimable:121893 [ 1840.192074] mapped:22555 shmem:35932 pagetables:590 bounce:0 [ 1840.192074] free:13906 free_pcp:855 free_cma:0 [ 1840.206411] Node 0 DMA32 free:17920kB min:35996kB low:44992kB high:53988kB active_anon:62224kB inactive_anon:40324kB active_file:40kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7296kB pagetables:1928kB bounce:0kB free_pcp:1664kB local_pcp:1376kB free_cma:0kB [ 1840.213535] Node 0 active_anon:62224kB inactive_anon:40324kB active_file:40kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58408kB dirty:0kB writeback:0kB shmem:42456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1840.213940] lowmem_reserve[]: 0 0 1 1 1 [ 1840.218311] Node 1 active_anon:3604kB inactive_anon:100548kB active_file:16kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31812kB dirty:0kB writeback:0kB shmem:101272kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1840.218316] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1840.218345] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1840.218365] Node 0 DMA32 free:17920kB min:35996kB low:44992kB high:53988kB active_anon:62224kB inactive_anon:40324kB active_file:40kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7296kB pagetables:1928kB bounce:0kB free_pcp:1664kB local_pcp:288kB free_cma:0kB [ 1840.218398] lowmem_reserve[]: 0 0 1 1 1 [ 1840.218417] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1840.218449] lowmem_reserve[]: 0 0 0 0 0 [ 1840.233671] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1840.239795] Node 1 Normal free:26836kB min:53876kB low:67344kB high:80812kB active_anon:3604kB inactive_anon:100548kB active_file:16kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:432kB bounce:0kB free_pcp:1756kB local_pcp:1748kB free_cma:0kB [ 1840.243736] lowmem_reserve[]: 0 0 0 0 0 [ 1840.246672] lowmem_reserve[]: 0 0 0 0 0 [ 1840.246693] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB [ 1840.270029] Node 1 Normal free:26836kB min:53876kB low:67344kB high:80812kB active_anon:3604kB inactive_anon:100548kB active_file:16kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:432kB bounce:0kB free_pcp:1756kB local_pcp:8kB free_cma:0kB [ 1840.270528] Node 0 DMA32: 700*4kB (ME) 440*8kB (UME) 127*16kB (UME) 44*32kB (UME) 18*64kB (M) 5*128kB (M) 1*256kB (U) 0*512kB 0*1024kB 3*2048kB (M) 0*4096kB = 17952kB [ 1840.282464] lowmem_reserve[]: 0 0 0 0 0 [ 1840.283474] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1840.302151] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB [ 1840.305245] Node 1 Normal: 295*4kB (ME) 239*8kB (UM) 244*16kB (M) 130*32kB (M) 19*64kB (UME) 1*128kB (M) 6*256kB (ME) 3*512kB (UM) 1*1024kB (E) 1*2048kB (E) 2*4096kB (UM) = 26836kB [ 1840.313359] Node 0 DMA32: 700*4kB (ME) 440*8kB (UME) 127*16kB (UME) 44*32kB (UME) 18*64kB (M) 5*128kB (M) 1*256kB (U) 0*512kB 0*1024kB 3*2048kB (M) 0*4096kB = 17952kB [ 1840.316507] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1840.316519] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1840.316528] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1840.316540] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1840.337535] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1840.337719] 35954 total pagecache pages [ 1840.341399] Node 1 Normal: 295*4kB (ME) 239*8kB (UM) 244*16kB (M) 130*32kB (M) 19*64kB (UME) 1*128kB (M) 6*256kB (ME) 3*512kB (UM) 1*1024kB (E) 1*2048kB (E) 2*4096kB (UM) = 26836kB [ 1840.344818] 0 pages in swap cache [ 1840.344827] Swap cache stats: add 0, delete 0, find 0/0 [ 1840.344831] Free swap = 0kB [ 1840.344836] Total swap = 0kB [ 1840.344845] 2097051 pages RAM [ 1840.344849] 0 pages HighMem/MovableOnly [ 1840.344853] 369649 pages reserved [ 1840.344858] 0 pages cma reserved [ 1840.895944] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1840.904866] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1840.913453] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1840.922504] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1840.931192] 35954 total pagecache pages [ 1840.935475] 0 pages in swap cache [ 1840.938933] Swap cache stats: add 0, delete 0, find 0/0 [ 1840.946822] Free swap = 0kB [ 1840.949852] Total swap = 0kB [ 1840.952869] 2097051 pages RAM [ 1840.956069] 0 pages HighMem/MovableOnly [ 1840.960039] 369649 pages reserved [ 1840.963503] 0 pages cma reserved [ 1840.966927] Unreclaimable slab info: [ 1840.970639] Name Used Total [ 1840.976258] pid_2 55KB 84KB [ 1840.981691] batadv_tl_cache 4KB 16KB [ 1840.987288] TIPC 22KB 45KB [ 1840.992666] SCTPv6 14KB 37KB [ 1840.998129] SCTP 5KB 7KB [ 1841.003531] DCCPv6 17KB 37KB [ 1841.008975] DCCP 16KB 35KB [ 1841.014367] L2TP/IPv6 48KB 58KB [ 1841.019811] RXRPC 11KB 26KB [ 1841.025249] rxrpc_call_jar 78KB 110KB [ 1841.030647] bridge_fdb_cache 9KB 27KB [ 1841.036092] fib6_nodes 157KB 264KB [ 1841.041458] ip6_dst_cache 266KB 607KB [ 1841.048901] RAWv6 70KB 101KB [ 1841.054282] UDPv6 26KB 41KB [ 1841.059734] TCPv6 24KB 24KB [ 1841.065160] nf_conntrack 16KB 18KB [ 1841.070578] t10_alua_lu_gp_cache 0KB 3KB [ 1841.076283] sd_ext_cdb 0KB 7KB [ 1841.081643] scsi_sense_cache 1056KB 1060KB [ 1841.087094] virtio_scsi_cmd 16KB 16KB [ 1841.092459] sgpool-128 8KB 8KB [ 1841.104873] sgpool-64 4KB 12KB [ 1841.110263] sgpool-32 2KB 15KB [ 1841.119189] sgpool-16 1KB 7KB [ 1841.124565] sgpool-8 0KB 7KB [ 1841.133498] mqueue_inode_cache 10KB 30KB [ 1841.142502] bio_post_read_ctx 14KB 15KB [ 1841.153208] bio-2 14KB 15KB [ 1841.170449] jfs_mp 7KB 7KB [ 1841.179934] cifs_small_rq 15KB 16KB [ 1841.186722] cifs_request 67KB 67KB [ 1841.192123] cifs_mpx_ids 0KB 7KB [ 1841.201560] nfs_commit_data 3KB 14KB [ 1841.210846] nfs_write_data 34KB 44KB [ 1841.220791] ext4_system_zone 1KB 7KB [ 1841.228390] bio-1 1KB 7KB [ 1841.234433] pid_namespace 2KB 11KB [ 1841.246240] rpc_buffers 17KB 25KB [ 1841.254010] rpc_tasks 2KB 7KB [ 1841.263508] UNIX 470KB 570KB [ 1841.270959] tcp_bind_bucket 1KB 4KB [ 1841.281595] ip_fib_trie 23KB 47KB [ 1841.291889] ip_fib_alias 112KB 189KB [ 1841.303928] ip_dst_cache 5KB 16KB [ 1841.313681] RAW 42KB 60KB [ 1841.326586] UDP 60KB 74KB [ 1841.334234] TCP 8KB 11KB [ 1841.344538] hugetlbfs_inode_cache 3KB 15KB [ 1841.353699] fscache_cookie_jar 1KB 11KB [ 1841.364263] eventpoll_pwq 17KB 67KB [ 1841.371092] eventpoll_epi 31KB 63KB [ 1841.380781] inotify_inode_mark 18KB 31KB [ 1841.387583] request_queue 199KB 199KB [ 1841.393625] blkdev_requests 1KB 3KB [ 1841.405650] blkdev_ioc 35KB 38KB [ 1841.411699] bio-0 1662KB 1665KB [ 1841.421351] biovec-max 1683KB 1683KB [ 1841.428719] biovec-64 1308KB 1315KB [ 1841.439656] biovec-16 109KB 112KB [ 1841.447772] bio_integrity_payload 1KB 8KB [ 1841.462201] khugepaged_mm_slot 11KB 31KB [ 1841.469701] uid_cache 0KB 4KB [ 1841.480682] dmaengine-unmap-2 0KB 3KB [ 1841.487912] skbuff_fclone_cache 106KB 123KB [ 1841.493469] skbuff_head_cache 7803KB 7961KB [ 1841.504304] configfs_dir_cache 3KB 7KB [ 1841.511649] file_lock_cache 81KB 91KB [ 1841.522157] file_lock_ctx 9KB 11KB [ 1841.529852] fsnotify_mark_connector 9KB 23KB [ 1841.541082] net_namespace 52KB 52KB [ 1841.548674] shmem_inode_cache 8174KB 8255KB [ 1841.562283] task_delay_info 148KB 379KB [ 1841.569449] taskstats 76KB 91KB [ 1841.580199] proc_dir_entry 695KB 870KB [ 1841.587570] pde_opener 5KB 54KB [ 1841.594176] seq_file 263KB 417KB [ 1841.609793] sigqueue 42KB 66KB [ 1841.621318] kernfs_node_cache 18234KB 18246KB [ 1841.629172] mnt_cache 173KB 208KB [ 1841.634567] filp 6757KB 7923KB [ 1841.643590] names_cache 144270KB 144300KB [ 1841.650858] iint_cache 39KB 47KB [ 1841.661759] key_jar 4KB 7KB [ 1841.669362] uts_namespace 2KB 3KB [ 1841.678329] nsproxy 1KB 7KB [ 1841.683714] vm_area_struct 3045KB 4048KB [ 1841.691225] mm_struct 456KB 715KB [ 1841.700424] fs_cache 84KB 348KB [ 1841.707709] files_cache 315KB 738KB [ 1841.713141] signal_cache 851KB 1725KB [ 1841.722021] sighand_cache 541KB 631KB [ 1841.729291] task_struct 5195KB 5270KB [ 1841.738134] cred_jar 1790KB 3000KB [ 1841.743529] anon_vma_chain 968KB 1547KB [ 1841.750805] anon_vma 129KB 327KB [ 1841.761353] pid 49KB 228KB [ 1841.770234] Acpi-Operand 156KB 202KB [ 1841.779180] Acpi-ParseExt 9KB 11KB [ 1841.784555] Acpi-Parse 41KB 47KB [ 1841.791828] Acpi-State 52KB 63KB [ 1841.800671] Acpi-Namespace 20KB 27KB [ 1841.808877] numa_policy 0KB 3KB [ 1841.814426] debug_objects_cache 1516KB 1968KB [ 1841.823741] trace_event_file 297KB 298KB [ 1841.831076] ftrace_event_field 398KB 401KB [ 1841.840163] pool_workqueue 121KB 156KB [ 1841.847722] page->ptl 535KB 1035KB [ 1841.853144] kmalloc-2097152 2050KB 2050KB [ 1841.864142] kmalloc-524288 2056KB 2056KB [ 1841.871512] kmalloc-262144 1290KB 1290KB [ 1841.880460] kmalloc-131072 650KB 650KB [ 1841.888002] kmalloc-65536 1848KB 1914KB [ 1841.893392] kmalloc-32768 1650KB 1716KB [ 1841.902553] kmalloc-16384 940KB 1023KB [ 1841.909985] kmalloc-8192 3960KB 4042KB [ 1841.918971] kmalloc-4096 17573KB 17603KB [ 1841.924353] kmalloc-2048 10988KB 14356KB [ 1841.931767] kmalloc-1024 8752KB 13293KB [ 1841.944587] kmalloc-512 16223KB 16226KB [ 1841.953089] kmalloc-256 4290KB 6255KB [ 1841.961962] kmalloc-128 922KB 1712KB [ 1841.970286] kmalloc-96 3816KB 4404KB [ 1841.976088] kmalloc-64 2521KB 3748KB [ 1841.981462] kmalloc-32 1910KB 2476KB [ 1841.987202] kmalloc-192 1512KB 2980KB [ 1841.992574] kmem_cache 177KB 183KB [ 1841.998322] Out of memory (oom_kill_allocating_task): Kill process 22840 (systemd-journal) score 0 or sacrifice child [ 1842.009488] Killed process 22840 (systemd-journal) total-vm:46096kB, anon-rss:496kB, file-rss:0kB, shmem-rss:3048kB [ 1842.021659] oom_reaper: reaped process 22840 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:3048kB [ 1842.081573] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1842.098158] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1842.127568] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1842.134402] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1842.142040] systemd[1]: Stopped Journal Service. [ 1842.159121] systemd[1]: Starting Journal Service... [ 1842.340936] systemd-journald[24719]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1842.824133] systemd[1]: Started Journal Service. 07:11:48 executing program 0: syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) 07:11:48 executing program 2: sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x40004) 07:11:48 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x0, @vbi={0x6e, 0x7fff, 0x8, 0x35315241, [0x10000, 0xffffffff], [0x3d, 0x3f], 0x108}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8, @raw_data="56acb780f2cab72f662deb1e1ba95c5423bc6ffddd87f21609f06a9617b599558ce6700905692d3a0d79a602761bb9bbbb92b535e707ef371fbeb665569bd03dec8533231290e38d2d12d4e5ae68cacbcfa09d2a663a418db462fc9a481feedf390e9bb7490f3d385ea3686bd5f0c5a083e9bf5f32463eea425739e2cfc1277be1dad85429d183f398466b551a3f4aae26d9a85b540afe6ff62564c775938be3c1271db320d55d9c05f7f08944a7fa5e950306e86d1fbd315d380d34b6f81d384d2a94f88608dd05"}) 07:11:48 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000), 0x0) 07:11:48 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8, 0x7ff, 0x80, 0x3], 0xd3e}}, 0x7ff}) 07:11:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3}}, 0x0, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:11:48 executing program 0: syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) 07:11:48 executing program 2: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x40004) 07:11:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3}}, 0x0, &(0x7f0000000440)="d53f5aea906457e8d7c1493f0c0dc60087e0cd8a4fa68f3794f0118e5d5504718b4cc88bfe940b0e733fef77de8e90bebb841ce543dea0f7e38d54e8647868997fcde0ed293d2f0b92b4af66b667739817fe45ade36aa3fb25f772c1f18cd3b26e7730a11729207dc6351799c91f5c6ecebb40ed2b252433425c4f57b57a5c075d73d80b5f206b165c65af8ef0e78cc8b716746ce81a8b7657efbce3f79117dd000786406e2d056cac600941f7d8c7b7813909429c16da142cc06e038f180f55735b07f0b780e343ff47a2f3746d6b7175d8fc883a81de52344352d2e154", 0x1}}) 07:11:48 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000), 0x0) 07:11:48 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b7f8bd690cfeb8873d1512fbb8a9acab67197c8759ba1921c4f89b90587fb2548e7e7e7ce0ed4", 0x36) 07:11:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3}}, 0x9, 0x0, 0x1}}) 07:11:48 executing program 2: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x40004) [ 1850.283323] oom_reaper: reaped process 24734 (syz-executor.1), now anon-rss:0kB, file-rss:14332kB, shmem-rss:8kB [ 1850.320141] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1850.335370] systemd-journal cpuset=/ mems_allowed=0-1 [ 1850.340739] CPU: 0 PID: 24719 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 1850.348720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1850.358084] Call Trace: [ 1850.360697] dump_stack+0x1fc/0x2ef [ 1850.364341] dump_header+0x15d/0xc3f [ 1850.368152] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1850.373269] ? ___ratelimit+0x319/0x590 [ 1850.377261] oom_kill_process.cold+0x10/0x692 [ 1850.381771] ? check_preemption_disabled+0x41/0x280 [ 1850.386801] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1850.392369] out_of_memory+0x1072/0x1390 [ 1850.396453] ? oom_killer_disable+0x270/0x270 [ 1850.400969] ? mutex_trylock+0x15f/0x1a0 [ 1850.405042] __alloc_pages_nodemask+0x23a2/0x2890 [ 1850.409934] ? find_get_entry+0x4cd/0x8a0 [ 1850.414098] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1850.419057] alloc_pages_current+0x193/0x2a0 [ 1850.423476] filemap_fault+0x146e/0x2180 [ 1850.427555] ext4_filemap_fault+0x84/0xb0 [ 1850.431335] syz-executor.1: vmalloc: allocation failure, allocated 1646280704 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1850.431707] __do_fault+0x10b/0x4b0 [ 1850.445523] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1850.449116] __handle_mm_fault+0x273b/0x41c0 [ 1850.458721] ? vm_insert_page+0x9c0/0x9c0 [ 1850.462873] ? check_preemption_disabled+0x41/0x280 [ 1850.467885] handle_mm_fault+0x436/0xb10 [ 1850.471941] __do_page_fault+0x68e/0xd60 [ 1850.475999] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1850.481009] ? spurious_fault+0x840/0x840 [ 1850.485146] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1850.489987] ? page_fault+0x8/0x30 [ 1850.493516] page_fault+0x1e/0x30 [ 1850.496962] RIP: 0033:0x7fbadf1a02e3 [ 1850.500673] Code: Bad RIP value. [ 1850.504026] RSP: 002b:00007fff2a254a18 EFLAGS: 00010246 [ 1850.509378] RAX: 0000000000000001 RBX: 000056030a1771e0 RCX: 00007fbadf1a02e3 [ 1850.516636] RDX: 0000000000000013 RSI: 00007fff2a254a20 RDI: 000000000000000c [ 1850.523998] RBP: 00007fff2a254c10 R08: 0000000000000000 R09: 000001d8ef2f849c [ 1850.531273] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff2a254a20 [ 1850.538538] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f595134830aa [ 1850.545853] CPU: 1 PID: 24734 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1850.553845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1850.559346] Mem-Info: [ 1850.563200] Call Trace: [ 1850.568190] dump_stack+0x1fc/0x2ef [ 1850.570762] active_anon:16497 inactive_anon:37250 isolated_anon:0 [ 1850.570762] active_file:6 inactive_file:17 isolated_file:0 [ 1850.570762] unevictable:0 dirty:1 writeback:27 unstable:0 [ 1850.570762] slab_reclaimable:14415 slab_unreclaimable:123189 [ 1850.570762] mapped:22149 shmem:37980 pagetables:588 bounce:0 [ 1850.570762] free:13822 free_pcp:1340 free_cma:0 [ 1850.571838] warn_alloc.cold+0x7b/0x18f [ 1850.609213] ? zone_watermark_ok_safe+0x260/0x260 [ 1850.614061] ? rcu_nmi_exit+0xb3/0x180 [ 1850.615585] Node 0 active_anon:62452kB inactive_anon:48516kB active_file:8kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59860kB dirty:0kB writeback:76kB shmem:50648kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1850.617969] __vmalloc_area_node+0x4fd/0x780 [ 1850.650053] ? __vmalloc_node_range+0x180/0x180 [ 1850.654770] ? _raw_spin_unlock+0x29/0x40 [ 1850.656213] Node 1 active_anon:3536kB inactive_anon:100484kB active_file:16kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28736kB dirty:4kB writeback:32kB shmem:101272kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1850.658931] ? __get_vm_area_node+0x2e2/0x3a0 [ 1850.690839] __vmalloc_node_range+0xed/0x180 [ 1850.695262] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1850.697975] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1850.699592] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1850.731144] vmalloc_user+0x70/0xe0 [ 1850.734788] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1850.735980] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1850.739118] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1850.744111] Node 0 DMA32 free:17504kB min:35996kB low:44992kB high:53988kB active_anon:62452kB inactive_anon:48516kB active_file:68kB inactive_file:32kB unevictable:0kB writepending:176kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7296kB pagetables:1952kB bounce:0kB free_pcp:2704kB local_pcp:1320kB free_cma:0kB [ 1850.748253] __vb2_queue_alloc+0x472/0xe60 [ 1850.748275] vb2_core_create_bufs+0x273/0x7e0 [ 1850.748289] ? __vb2_queue_free+0x870/0x870 [ 1850.748305] ? mutex_trylock+0x1a0/0x1a0 [ 1850.748320] ? __video_do_ioctl+0x632/0xcd0 [ 1850.748345] vb2_create_bufs+0x332/0x620 [ 1850.789466] lowmem_reserve[]: 0 0 1 1 1 [ 1850.790780] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1850.798200] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1850.799235] ? __video_do_ioctl+0x632/0xcd0 [ 1850.803266] lowmem_reserve[]: 0 0 0 0 0 [ 1850.807229] ? mutex_trylock+0x1a0/0x1a0 [ 1850.807244] ? mark_held_locks+0xf0/0xf0 [ 1850.807264] vb2_ioctl_create_bufs+0x20d/0x360 [ 1850.807279] ? memset+0x20/0x40 [ 1850.807297] v4l_create_bufs+0xb2/0x160 [ 1850.807314] __video_do_ioctl+0x49a/0xcd0 [ 1850.807334] ? v4l_querycap+0x340/0x340 [ 1850.807352] ? __might_fault+0x192/0x1d0 [ 1850.807372] ? v4l_querycap+0x340/0x340 [ 1850.821419] Node 1 Normal free:27032kB min:53876kB low:67344kB high:80812kB active_anon:3532kB inactive_anon:100484kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:400kB bounce:0kB free_pcp:2656kB local_pcp:1496kB free_cma:0kB [ 1850.838425] video_usercopy+0x13f/0xfa0 [ 1850.838446] ? v4l_enumstd+0x60/0x60 [ 1850.838460] ? do_futex+0x171/0x1880 [ 1850.838475] ? mark_held_locks+0xf0/0xf0 [ 1850.838493] ? debug_check_no_obj_freed+0x201/0x490 [ 1850.838515] ? video_usercopy+0xfa0/0xfa0 [ 1850.838527] v4l2_ioctl+0x147/0x1a0 [ 1850.838537] ? video_devdata+0xa0/0xa0 [ 1850.838553] do_vfs_ioctl+0xcdb/0x12e0 [ 1850.851289] lowmem_reserve[]: 0 0 0 0 0 [ 1850.854975] ? lock_downgrade+0x720/0x720 [ 1850.854991] ? check_preemption_disabled+0x41/0x280 [ 1850.855005] ? ioctl_preallocate+0x200/0x200 [ 1850.855021] ? __fget+0x356/0x510 [ 1850.855037] ? do_dup2+0x450/0x450 [ 1850.859602] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10872kB [ 1850.862885] ? __se_sys_futex+0x298/0x3b0 [ 1850.878871] Node 0 DMA32: 381*4kB (UME) 155*8kB (UME) 87*16kB (UME) 17*32kB (ME) 3*64kB (M) 1*128kB (M) 2*256kB (UM) 0*512kB 2*1024kB (UM) 5*2048kB (UM) 0*4096kB = 17820kB [ 1850.878988] ksys_ioctl+0x9b/0xc0 [ 1850.882943] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1850.911837] __x64_sys_ioctl+0x6f/0xb0 [ 1850.911851] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1850.911863] do_syscall_64+0xf9/0x620 [ 1850.911881] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1850.911893] RIP: 0033:0x7ff9055210f9 [ 1850.911908] Code: Bad RIP value. [ 1850.911915] RSP: 002b:00007ff903a93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1850.911927] RAX: ffffffffffffffda RBX: 00007ff905640f80 RCX: 00007ff9055210f9 [ 1850.911935] RDX: 0000000020000640 RSI: 00000000c100565c RDI: 0000000000000003 [ 1850.911943] RBP: 00007ff90557cae9 R08: 0000000000000000 R09: 0000000000000000 [ 1850.911950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1850.911957] R13: 00007ffefb208e4f R14: 00007ff903a93300 R15: 0000000000022000 [ 1850.925383] Mem-Info: [ 1850.938184] Node 1 Normal: 440*4kB (ME) 331*8kB (UME) 218*16kB (M) 82*32kB (UM) 16*64kB (UM) 3*128kB (UM) 7*256kB (UME) 2*512kB (M) 2*1024kB (UE) 1*2048kB (E) 2*4096kB (UM) = 27032kB [ 1850.946110] active_anon:16473 inactive_anon:37250 isolated_anon:0 [ 1850.946110] active_file:12 inactive_file:11 isolated_file:0 [ 1850.946110] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1850.946110] slab_reclaimable:14415 slab_unreclaimable:123152 [ 1850.946110] mapped:22114 shmem:37980 pagetables:587 bounce:0 [ 1850.946110] free:13931 free_pcp:1342 free_cma:0 [ 1850.948810] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1850.952794] Node 0 active_anon:62360kB inactive_anon:48516kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59784kB dirty:0kB writeback:0kB shmem:50648kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1850.966943] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1850.977509] Node 1 active_anon:3532kB inactive_anon:100484kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28672kB dirty:0kB writeback:0kB shmem:101272kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1850.998555] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1851.011888] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1851.030947] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1851.038270] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1851.038737] 38003 total pagecache pages [ 1851.042358] Node 0 DMA32 free:17812kB min:35996kB low:44992kB high:53988kB active_anon:62360kB inactive_anon:48516kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7296kB pagetables:1948kB bounce:0kB free_pcp:2712kB local_pcp:1384kB free_cma:0kB [ 1851.055644] 0 pages in swap cache [ 1851.065442] lowmem_reserve[]: 0 0 1 1 1 [ 1851.071555] Swap cache stats: add 0, delete 0, find 0/0 [ 1851.079979] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1851.094170] Free swap = 0kB [ 1851.114079] lowmem_reserve[]: 0 0 0 0 0 [ 1851.157820] Total swap = 0kB [ 1851.179174] Node 1 Normal free:27032kB min:53876kB low:67344kB high:80812kB active_anon:3532kB inactive_anon:100484kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:400kB bounce:0kB free_pcp:2656kB local_pcp:1160kB free_cma:0kB [ 1851.179210] lowmem_reserve[]: 0 0 0 0 0 [ 1851.179231] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10872kB [ 1851.208954] 2097051 pages RAM [ 1851.221100] Node 0 DMA32: 381*4kB (UME) 155*8kB (UME) 87*16kB (UME) 17*32kB (ME) 3*64kB (M) 1*128kB (M) 2*256kB (UM) 0*512kB 2*1024kB (UM) 5*2048kB (UM) 0*4096kB = 17820kB [ 1851.231255] 0 pages HighMem/MovableOnly [ 1851.253857] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1851.270409] 369649 pages reserved [ 1851.300680] Node 1 Normal: 440*4kB (ME) 331*8kB (UME) 218*16kB (M) 82*32kB (UM) 16*64kB (UM) 3*128kB (UM) 7*256kB (UME) 2*512kB (M) 2*1024kB (UE) 1*2048kB (E) 2*4096kB (UM) = 27032kB [ 1851.318263] 0 pages cma reserved [ 1851.345536] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1851.354793] Unreclaimable slab info: [ 1851.381042] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1851.395743] Name Used Total [ 1851.401297] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1851.417878] pid_2 57KB 84KB [ 1851.433446] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1851.458841] batadv_tl_cache 4KB 16KB [ 1851.465702] 38003 total pagecache pages [ 1851.473398] TIPC 19KB 37KB [ 1851.482263] 0 pages in swap cache [ 1851.499453] SCTPv6 14KB 37KB [ 1851.507242] Swap cache stats: add 0, delete 0, find 0/0 [ 1851.507248] Free swap = 0kB [ 1851.507252] Total swap = 0kB [ 1851.507262] 2097051 pages RAM [ 1851.507266] 0 pages HighMem/MovableOnly [ 1851.507271] 369649 pages reserved [ 1851.507275] 0 pages cma reserved [ 1851.557912] SCTP 5KB 7KB [ 1851.563305] DCCPv6 17KB 37KB [ 1851.568923] DCCP 16KB 35KB [ 1851.585748] L2TP/IPv6 50KB 58KB [ 1851.593172] RXRPC 11KB 26KB [ 1851.598747] rxrpc_call_jar 78KB 110KB [ 1851.604123] bridge_fdb_cache 9KB 27KB [ 1851.616318] fib6_nodes 157KB 264KB [ 1851.621702] ip6_dst_cache 210KB 570KB [ 1851.627210] RAWv6 70KB 101KB [ 1851.632578] UDPv6 26KB 41KB [ 1851.644597] TCPv6 24KB 24KB [ 1851.650001] nf_conntrack 16KB 18KB [ 1851.658766] t10_alua_lu_gp_cache 0KB 3KB [ 1851.667771] sd_ext_cdb 0KB 7KB [ 1851.673148] scsi_sense_cache 1056KB 1060KB [ 1851.682100] virtio_scsi_cmd 16KB 16KB [ 1851.690870] sgpool-128 8KB 8KB [ 1851.701157] sgpool-64 4KB 12KB [ 1851.710138] sgpool-32 2KB 15KB [ 1851.718827] sgpool-16 1KB 7KB [ 1851.727852] sgpool-8 0KB 7KB [ 1851.733238] mqueue_inode_cache 10KB 30KB [ 1851.742036] bio_post_read_ctx 14KB 15KB [ 1851.750857] bio-2 14KB 15KB [ 1851.759813] jfs_mp 7KB 7KB [ 1851.768437] cifs_small_rq 15KB 16KB [ 1851.773808] cifs_request 67KB 67KB [ 1851.782536] cifs_mpx_ids 0KB 7KB [ 1851.791577] nfs_commit_data 3KB 14KB [ 1851.801980] nfs_write_data 34KB 44KB [ 1851.810751] ext4_system_zone 1KB 7KB [ 1851.819655] bio-1 1KB 7KB [ 1851.828546] pid_namespace 2KB 11KB [ 1851.833930] rpc_buffers 17KB 25KB [ 1851.842587] rpc_tasks 2KB 7KB [ 1851.851476] UNIX 420KB 521KB [ 1851.860389] tcp_bind_bucket 1KB 4KB [ 1851.868900] ip_fib_trie 23KB 47KB [ 1851.877887] ip_fib_alias 112KB 189KB [ 1851.883288] ip_dst_cache 4KB 16KB [ 1851.891914] RAW 42KB 60KB [ 1851.902205] UDP 55KB 74KB [ 1851.911322] TCP 8KB 11KB [ 1851.919957] hugetlbfs_inode_cache 3KB 15KB [ 1851.929132] fscache_cookie_jar 1KB 11KB [ 1851.938131] eventpoll_pwq 18KB 67KB [ 1851.943539] eventpoll_epi 34KB 63KB [ 1851.952180] inotify_inode_mark 20KB 31KB [ 1851.960989] request_queue 199KB 199KB [ 1851.969992] blkdev_requests 1KB 3KB [ 1851.978671] blkdev_ioc 28KB 38KB [ 1851.984064] bio-0 1591KB 1725KB [ 1851.992691] biovec-max 1674KB 1674KB [ 1852.003106] biovec-64 1303KB 1401KB [ 1852.011870] biovec-16 104KB 120KB [ 1852.020745] bio_integrity_payload 1KB 8KB [ 1852.030216] khugepaged_mm_slot 10KB 31KB [ 1852.038874] uid_cache 0KB 4KB [ 1852.047854] dmaengine-unmap-2 0KB 3KB [ 1852.053233] skbuff_fclone_cache 101KB 123KB [ 1852.062099] skbuff_head_cache 7077KB 7695KB [ 1852.070689] configfs_dir_cache 3KB 7KB [ 1852.079515] file_lock_cache 86KB 95KB [ 1852.088375] file_lock_ctx 9KB 11KB [ 1852.093752] fsnotify_mark_connector 10KB 23KB [ 1852.108029] net_namespace 52KB 52KB [ 1852.113413] shmem_inode_cache 8176KB 8255KB [ 1852.118840] task_delay_info 152KB 379KB [ 1852.130747] taskstats 83KB 91KB [ 1852.136179] proc_dir_entry 694KB 866KB [ 1852.141547] pde_opener 6KB 54KB [ 1852.153735] seq_file 271KB 417KB [ 1852.159179] sigqueue 43KB 66KB [ 1852.171678] kernfs_node_cache 18230KB 18246KB [ 1852.177122] mnt_cache 173KB 208KB [ 1852.182493] filp 6844KB 7923KB [ 1852.194782] names_cache 147173KB 147232KB [ 1852.200190] iint_cache 38KB 51KB [ 1852.207343] key_jar 4KB 7KB [ 1852.212723] uts_namespace 2KB 3KB [ 1852.222041] nsproxy 1KB 7KB [ 1852.228072] vm_area_struct 3101KB 4048KB [ 1852.228082] mm_struct 443KB 715KB [ 1852.228092] fs_cache 86KB 348KB [ 1852.228101] files_cache 324KB 735KB [ 1852.228109] signal_cache 800KB 1703KB [ 1852.228119] sighand_cache 538KB 631KB [ 1852.228129] task_struct 5163KB 5252KB [ 1852.228138] cred_jar 1796KB 3000KB [ 1852.228147] anon_vma_chain 984KB 1547KB [ 1852.228157] anon_vma 132KB 327KB [ 1852.228167] pid 49KB 228KB [ 1852.228175] Acpi-Operand 156KB 202KB [ 1852.228188] Acpi-ParseExt 9KB 11KB [ 1852.299459] Acpi-Parse 41KB 47KB [ 1852.305021] Acpi-State 52KB 63KB [ 1852.312279] Acpi-Namespace 20KB 27KB [ 1852.317897] numa_policy 0KB 3KB [ 1852.323401] debug_objects_cache 1516KB 1968KB [ 1852.333482] trace_event_file 297KB 298KB [ 1852.344142] ftrace_event_field 398KB 401KB [ 1852.350731] pool_workqueue 121KB 156KB [ 1852.361942] page->ptl 519KB 1035KB [ 1852.368132] kmalloc-2097152 2050KB 2050KB [ 1852.381807] kmalloc-524288 2056KB 2056KB [ 1852.387599] kmalloc-262144 1290KB 1290KB [ 1852.393086] kmalloc-131072 650KB 650KB [ 1852.403805] kmalloc-65536 1848KB 1914KB [ 1852.411827] kmalloc-32768 1650KB 1716KB [ 1852.417666] kmalloc-16384 973KB 1056KB [ 1852.423132] kmalloc-8192 3960KB 4009KB [ 1852.428838] kmalloc-4096 17709KB 17731KB [ 1852.434533] kmalloc-2048 10807KB 14203KB [ 1852.440002] kmalloc-1024 8476KB 13245KB [ 1852.445546] kmalloc-512 15104KB 16136KB [ 1852.451094] kmalloc-256 4283KB 6251KB [ 1852.456570] kmalloc-128 889KB 1712KB [ 1852.462419] kmalloc-96 3681KB 4404KB [ 1852.468144] kmalloc-64 2494KB 3748KB [ 1852.473635] kmalloc-32 1897KB 2476KB [ 1852.479352] kmalloc-192 1496KB 2976KB [ 1852.484995] kmem_cache 177KB 183KB [ 1852.490561] Out of memory (oom_kill_allocating_task): Kill process 24719 (systemd-journal) score 0 or sacrifice child [ 1852.501419] Killed process 24719 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1292kB [ 1852.515719] oom_reaper: reaped process 24719 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1292kB [ 1852.584622] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1852.594370] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1852.607171] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1852.617683] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1852.624620] systemd[1]: Stopped Journal Service. [ 1852.649410] systemd[1]: Starting Journal Service... [ 1852.842895] systemd-journald[24768]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1853.373980] systemd[1]: Started Journal Service. [ 1854.085972] ieee802154 phy0 wpan0: encryption failed: -22 [ 1854.091552] ieee802154 phy1 wpan1: encryption failed: -22 07:11:59 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x0, @vbi={0x6e, 0x7fff, 0x8, 0x35315241, [0x10000, 0xffffffff], [0x3d, 0x3f], 0x108}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8, @raw_data="56acb780f2cab72f662deb1e1ba95c5423bc6ffddd87f21609f06a9617b599558ce6700905692d3a0d79a602761bb9bbbb92b535e707ef371fbeb665569bd03dec8533231290e38d2d12d4e5ae68cacbcfa09d2a663a418db462fc9a481feedf390e9bb7490f3d385ea3686bd5f0c5a083e9bf5f32463eea425739e2cfc1277be1dad85429d183f398466b551a3f4aae26d9a85b540afe6ff62564c775938be3c1271db320d55d9c05f7f08944a7fa5e950306e86d1fbd315d380d34b6f81d384d2a94f88608dd05"}) 07:11:59 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d7", 0x1) 07:11:59 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3}}, 0x9, 0x0}}) 07:11:59 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8, 0x7ff, 0x80], 0xd3e}}, 0x7ff}) 07:11:59 executing program 2: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x40004) 07:11:59 executing program 0: syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) 07:11:59 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8}) r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0x800000000000000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000280)={0x80000001, 0x2, 0x3, {0x3, @sdr={0x35323645}}, 0x9}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x7, 0x3, 0x0, {0x3, @sdr={0x32314d56, 0x20}}, 0xffffff14}) socketpair(0x1f, 0x800, 0x3, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x3f7, 0x300, 0x70bd29, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) 07:11:59 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d7", 0x1) 07:11:59 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x2, @sliced={0x81, [0x8001, 0x7, 0x5, 0xff, 0x7fff, 0x2bc3, 0x401, 0xbd, 0xffff, 0x4b6, 0x2, 0xfff, 0xfff, 0x4, 0x167, 0x0, 0x5, 0xffff, 0xa249, 0xffff, 0x101, 0x7, 0x0, 0x100, 0x2, 0x1, 0xc000, 0x1, 0x1, 0x9, 0x3, 0xb, 0xbdc, 0x2d, 0x9, 0xffff, 0x9, 0x2, 0x5, 0xff2a, 0x5, 0x3, 0x8, 0x0, 0x2, 0x7], 0x1f}}) 07:11:59 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x102, 0x2) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000200)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@userptr={0x4, 0x0, 0x4, 0x20, 0x81, {r2, r3/1000+10000}, {0x5, 0x0, 0x8, 0x0, 0x3f, 0x8, "3bd45084"}, 0x2, 0x2, {&(0x7f00000001c0)}, 0x4, 0x0, r4}) 07:11:59 executing program 2: socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x40004) 07:11:59 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d7", 0x1) 07:11:59 executing program 2: socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x40004) [ 1861.283846] Bluetooth: hci1: command 0x0406 tx timeout [ 1861.455675] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1861.476496] in:imklog cpuset=/ mems_allowed=0-1 [ 1861.481335] CPU: 1 PID: 24679 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 1861.488780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1861.498217] Call Trace: [ 1861.500801] dump_stack+0x1fc/0x2ef [ 1861.504416] dump_header+0x15d/0xc3f [ 1861.508120] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1861.513209] ? ___ratelimit+0x319/0x590 [ 1861.517261] oom_kill_process.cold+0x10/0x692 [ 1861.521766] ? check_preemption_disabled+0x41/0x280 [ 1861.526810] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1861.532079] out_of_memory+0x1072/0x1390 [ 1861.536141] ? oom_killer_disable+0x270/0x270 [ 1861.540625] ? mutex_trylock+0x15f/0x1a0 [ 1861.544674] __alloc_pages_nodemask+0x23a2/0x2890 [ 1861.549536] ? find_get_entry+0x4cd/0x8a0 [ 1861.553676] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1861.558516] alloc_pages_current+0x193/0x2a0 [ 1861.562910] filemap_fault+0x146e/0x2180 [ 1861.566981] ext4_filemap_fault+0x84/0xb0 [ 1861.571216] __do_fault+0x10b/0x4b0 [ 1861.574841] __handle_mm_fault+0x273b/0x41c0 [ 1861.579237] ? vm_insert_page+0x9c0/0x9c0 [ 1861.583370] ? lock_downgrade+0x720/0x720 [ 1861.587514] ? check_preemption_disabled+0x41/0x280 [ 1861.592516] handle_mm_fault+0x436/0xb10 [ 1861.596566] __do_page_fault+0x68e/0xd60 [ 1861.600628] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1861.605630] ? spurious_fault+0x840/0x840 [ 1861.609761] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1861.614603] ? page_fault+0x8/0x30 [ 1861.618128] page_fault+0x1e/0x30 [ 1861.621826] RIP: 0033:0x7ffb3bd4773f [ 1861.625528] Code: Bad RIP value. [ 1861.628875] RSP: 002b:00007ffb3b2f6590 EFLAGS: 00010207 [ 1861.634245] RAX: 000000000000003d RBX: 0000000000000000 RCX: 00007ffb3d95a22d [ 1861.641511] RDX: 000000000000003d RSI: 00007ffb3b2f6da0 RDI: 0000000000000000 [ 1861.648765] RBP: 000055a5948789d0 R08: 0000000000000000 R09: 0000000000000000 [ 1861.656019] R10: 2ce33e6c02ce33e7 R11: 0000000000000000 R12: 00007ffb3b2f6da0 [ 1861.663273] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007ffb3b2f6e20 [ 1861.689538] Mem-Info: [ 1861.692046] active_anon:17597 inactive_anon:39282 isolated_anon:0 [ 1861.692046] active_file:55 inactive_file:6 isolated_file:0 [ 1861.692046] unevictable:0 dirty:25 writeback:0 unstable:0 [ 1861.692046] slab_reclaimable:14419 slab_unreclaimable:122761 [ 1861.692046] mapped:22123 shmem:40028 pagetables:606 bounce:0 [ 1861.692046] free:25176 free_pcp:0 free_cma:0 [ 1861.748582] Node 0 active_anon:66796kB inactive_anon:48452kB active_file:108kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58440kB dirty:80kB writeback:0kB shmem:50648kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1861.783259] Node 1 active_anon:3592kB inactive_anon:108676kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30052kB dirty:20kB writeback:0kB shmem:109464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1861.843918] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1861.875412] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1861.880494] Node 0 DMA32 free:36160kB min:35996kB low:44992kB high:53988kB active_anon:66796kB inactive_anon:48452kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:2000kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1861.914694] lowmem_reserve[]: 0 0 1 1 1 [ 1861.936646] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1861.962840] lowmem_reserve[]: 0 0 0 0 0 [ 1861.966887] Node 1 Normal free:53688kB min:53876kB low:67344kB high:80812kB active_anon:3608kB inactive_anon:108676kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:424kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1861.995615] lowmem_reserve[]: 0 0 0 0 0 [ 1861.999607] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10984kB [ 1862.012953] Node 0 DMA32: 733*4kB (ME) 178*8kB (UME) 85*16kB (ME) 28*32kB (ME) 8*64kB (M) 3*128kB (M) 1*256kB (M) 1*512kB (M) 21*1024kB (U) 3*2048kB (UM) 0*4096kB = 35924kB [ 1862.028681] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1862.040011] Node 1 Normal: 388*4kB (ME) 311*8kB (ME) 265*16kB (UM) 135*32kB (M) 16*64kB (UM) 5*128kB (M) 2*256kB (UE) 0*512kB 2*1024kB (UE) 2*2048kB (ME) 8*4096kB (U) = 53688kB [ 1862.056042] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1862.065025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1862.073600] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1862.082479] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1862.091150] 40055 total pagecache pages [ 1862.095282] 0 pages in swap cache [ 1862.098734] Swap cache stats: add 0, delete 0, find 0/0 [ 1862.104134] Free swap = 0kB [ 1862.107150] Total swap = 0kB [ 1862.110174] 2097051 pages RAM [ 1862.113303] 0 pages HighMem/MovableOnly [ 1862.117422] 369649 pages reserved [ 1862.120870] 0 pages cma reserved [ 1862.124269] Unreclaimable slab info: [ 1862.127981] Name Used Total [ 1862.133514] pid_2 55KB 84KB [ 1862.139023] batadv_tl_cache 4KB 16KB [ 1862.144450] TIPC 19KB 37KB [ 1862.149837] SCTPv6 14KB 37KB [ 1862.155257] SCTP 9KB 11KB [ 1862.160630] DCCPv6 17KB 37KB [ 1862.166039] DCCP 16KB 35KB [ 1862.171436] L2TP/IPv6 55KB 65KB [ 1862.176962] RXRPC 11KB 26KB [ 1862.182328] rxrpc_call_jar 78KB 110KB [ 1862.187782] bridge_fdb_cache 9KB 27KB [ 1862.193156] fib6_nodes 157KB 264KB [ 1862.198601] ip6_dst_cache 148KB 521KB [ 1862.204018] RAWv6 70KB 101KB [ 1862.209381] UDPv6 28KB 41KB [ 1862.218448] TCPv6 24KB 24KB [ 1862.223900] nf_conntrack 4KB 18KB [ 1862.229339] t10_alua_lu_gp_cache 0KB 3KB [ 1862.238606] sd_ext_cdb 0KB 7KB [ 1862.244055] scsi_sense_cache 1056KB 1060KB [ 1862.249510] virtio_scsi_cmd 16KB 16KB [ 1862.258565] sgpool-128 8KB 8KB [ 1862.263976] sgpool-64 4KB 12KB [ 1862.269338] sgpool-32 2KB 15KB [ 1862.278401] sgpool-16 1KB 7KB [ 1862.287579] sgpool-8 0KB 7KB [ 1862.292966] mqueue_inode_cache 10KB 30KB [ 1862.299795] bio_post_read_ctx 14KB 15KB [ 1862.308511] bio-2 14KB 15KB [ 1862.317689] jfs_mp 7KB 7KB [ 1862.323202] cifs_small_rq 15KB 16KB [ 1862.332333] cifs_request 67KB 67KB [ 1862.339887] cifs_mpx_ids 0KB 7KB [ 1862.349951] nfs_commit_data 3KB 14KB [ 1862.357481] nfs_write_data 34KB 44KB [ 1862.362890] ext4_system_zone 1KB 7KB [ 1862.369907] bio-1 1KB 7KB [ 1862.378346] pid_namespace 2KB 11KB [ 1862.390224] rpc_buffers 17KB 25KB [ 1862.397287] rpc_tasks 2KB 7KB [ 1862.402780] UNIX 397KB 495KB [ 1862.411908] tcp_bind_bucket 1KB 4KB [ 1862.420923] ip_fib_trie 23KB 47KB [ 1862.429992] ip_fib_alias 112KB 189KB [ 1862.437234] ip_dst_cache 4KB 16KB [ 1862.442727] RAW 42KB 60KB [ 1862.448197] UDP 50KB 74KB [ 1862.453568] TCP 8KB 11KB [ 1862.460873] hugetlbfs_inode_cache 3KB 15KB [ 1862.466822] fscache_cookie_jar 1KB 11KB [ 1862.472277] eventpoll_pwq 20KB 67KB [ 1862.479666] eventpoll_epi 37KB 63KB [ 1862.490062] inotify_inode_mark 20KB 31KB [ 1862.498563] request_queue 199KB 199KB [ 1862.507467] blkdev_requests 1KB 3KB [ 1862.512850] blkdev_ioc 29KB 38KB [ 1862.518300] bio-0 1534KB 1668KB [ 1862.527525] biovec-max 1617KB 1650KB [ 1862.532911] biovec-64 1269KB 1401KB [ 1862.538456] biovec-16 107KB 120KB [ 1862.549206] bio_integrity_payload 1KB 8KB [ 1862.555227] khugepaged_mm_slot 10KB 31KB [ 1862.560695] uid_cache 0KB 4KB [ 1862.569672] dmaengine-unmap-2 0KB 3KB [ 1862.580181] skbuff_fclone_cache 108KB 123KB [ 1862.588265] skbuff_head_cache 7145KB 7301KB [ 1862.593640] configfs_dir_cache 3KB 7KB [ 1862.607337] file_lock_cache 86KB 95KB [ 1862.612715] file_lock_ctx 9KB 11KB [ 1862.618136] fsnotify_mark_connector 10KB 23KB [ 1862.627588] net_namespace 52KB 52KB [ 1862.632987] shmem_inode_cache 8194KB 8252KB [ 1862.638403] task_delay_info 148KB 379KB [ 1862.649217] taskstats 76KB 91KB [ 1862.654677] proc_dir_entry 694KB 866KB [ 1862.660042] pde_opener 6KB 54KB [ 1862.669162] seq_file 284KB 417KB [ 1862.674589] sigqueue 36KB 66KB [ 1862.679955] kernfs_node_cache 18231KB 18246KB [ 1862.689160] mnt_cache 173KB 208KB [ 1862.694579] filp 6873KB 7920KB [ 1862.699980] names_cache 146637KB 146697KB [ 1862.709019] iint_cache 38KB 51KB [ 1862.714434] key_jar 4KB 7KB [ 1862.719801] uts_namespace 2KB 3KB [ 1862.728863] nsproxy 1KB 7KB [ 1862.734295] vm_area_struct 3156KB 4045KB [ 1862.739679] mm_struct 456KB 715KB [ 1862.747008] fs_cache 90KB 348KB [ 1862.752444] files_cache 327KB 735KB [ 1862.758718] signal_cache 774KB 1689KB [ 1862.768620] sighand_cache 531KB 631KB [ 1862.774051] task_struct 5169KB 5201KB [ 1862.779416] cred_jar 1787KB 3000KB [ 1862.790027] anon_vma_chain 995KB 1547KB [ 1862.799117] anon_vma 127KB 327KB [ 1862.808159] pid 48KB 228KB [ 1862.813533] Acpi-Operand 156KB 202KB [ 1862.820750] Acpi-ParseExt 9KB 11KB [ 1862.829811] Acpi-Parse 41KB 47KB [ 1862.838609] Acpi-State 52KB 63KB [ 1862.847645] Acpi-Namespace 20KB 27KB [ 1862.853016] numa_policy 0KB 3KB [ 1862.858493] debug_objects_cache 1516KB 1968KB [ 1862.867457] trace_event_file 297KB 298KB [ 1862.872832] ftrace_event_field 398KB 401KB [ 1862.882731] pool_workqueue 121KB 156KB [ 1862.891026] page->ptl 518KB 1035KB [ 1862.896478] kmalloc-2097152 2050KB 2050KB [ 1862.901836] kmalloc-524288 2056KB 2056KB [ 1862.912191] kmalloc-262144 1290KB 1290KB [ 1862.918533] kmalloc-131072 650KB 650KB [ 1862.927942] kmalloc-65536 1848KB 1914KB [ 1862.933293] kmalloc-32768 1650KB 1716KB [ 1862.939537] kmalloc-16384 1006KB 1056KB [ 1862.948865] kmalloc-8192 3960KB 4001KB [ 1862.955011] kmalloc-4096 18037KB 18058KB [ 1862.960377] kmalloc-2048 10705KB 14088KB [ 1862.969435] kmalloc-1024 8538KB 13214KB [ 1862.974892] kmalloc-512 15325KB 15648KB [ 1862.980255] kmalloc-256 4262KB 6247KB [ 1862.987377] kmalloc-128 883KB 1712KB [ 1862.993082] kmalloc-96 3658KB 4404KB [ 1862.998483] kmalloc-64 2482KB 3744KB [ 1863.007631] kmalloc-32 1886KB 2476KB [ 1863.012999] kmalloc-192 1491KB 2976KB [ 1863.018416] kmem_cache 177KB 183KB [ 1863.025614] Out of memory (oom_kill_allocating_task): Kill process 24679 (in:imklog) score 0 or sacrifice child [ 1863.036020] Killed process 24677 (rsyslogd) total-vm:254332kB, anon-rss:744kB, file-rss:0kB, shmem-rss:0kB [ 1863.051334] oom_reaper: reaped process 24677 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1863.621717] oom_reaper: reaped process 24788 (syz-executor.1), now anon-rss:0kB, file-rss:14332kB, shmem-rss:8kB [ 1863.730446] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1863.751081] systemd-journal cpuset=/ mems_allowed=0-1 [ 1863.756399] CPU: 0 PID: 24768 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 1863.764366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1863.773721] Call Trace: [ 1863.776313] dump_stack+0x1fc/0x2ef [ 1863.779960] dump_header+0x15d/0xc3f [ 1863.783687] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1863.788803] ? ___ratelimit+0x319/0x590 [ 1863.792782] oom_kill_process.cold+0x10/0x692 [ 1863.797369] ? check_preemption_disabled+0x41/0x280 [ 1863.802391] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1863.807679] out_of_memory+0x1072/0x1390 [ 1863.811748] ? oom_killer_disable+0x270/0x270 [ 1863.816245] ? mutex_trylock+0x15f/0x1a0 [ 1863.820315] __alloc_pages_nodemask+0x23a2/0x2890 [ 1863.825169] ? find_get_entry+0x4cd/0x8a0 [ 1863.829633] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1863.834777] alloc_pages_current+0x193/0x2a0 [ 1863.839239] filemap_fault+0x146e/0x2180 [ 1863.843306] ext4_filemap_fault+0x84/0xb0 [ 1863.847567] __do_fault+0x10b/0x4b0 [ 1863.851187] __handle_mm_fault+0x273b/0x41c0 [ 1863.855583] ? vm_insert_page+0x9c0/0x9c0 [ 1863.859729] ? lock_downgrade+0x720/0x720 [ 1863.863925] ? lock_acquire+0x170/0x3c0 [ 1863.867986] ? check_preemption_disabled+0x41/0x280 [ 1863.873074] handle_mm_fault+0x436/0xb10 [ 1863.877139] __do_page_fault+0x68e/0xd60 [ 1863.881204] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1863.886207] ? spurious_fault+0x840/0x840 [ 1863.890435] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1863.895272] ? page_fault+0x8/0x30 [ 1863.898810] page_fault+0x1e/0x30 [ 1863.902244] RIP: 0033:0x5625819c3120 [ 1863.905952] Code: Bad RIP value. [ 1863.909384] RSP: 002b:00007ffe78be79c8 EFLAGS: 00010207 [ 1863.914726] RAX: 00007fde68c1e7fc RBX: 00007ffe78be79e0 RCX: 00007ffe78be7b80 [ 1863.921979] RDX: 0000000000000001 RSI: 000000000000000d RDI: 0000562581c83780 [ 1863.929232] RBP: 00007ffe78be79d8 R08: 0000000000000008 R09: 000001de05ad6b0e [ 1863.936495] R10: 0005738d17c37d94 R11: 0000000000000202 R12: 0000562581c83780 [ 1863.943837] R13: 00007ffe78be7ad8 R14: 00005625819c9958 R15: 0005f59513f3d9d1 [ 1863.964330] syz-executor.1: vmalloc: allocation failure, allocated 1644904448 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1863.972707] Mem-Info: [ 1863.991267] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1863.993301] active_anon:16845 inactive_anon:39282 isolated_anon:0 [ 1863.993301] active_file:17 inactive_file:17 isolated_file:0 [ 1863.993301] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1863.993301] slab_reclaimable:14405 slab_unreclaimable:122243 [ 1863.993301] mapped:22114 shmem:40028 pagetables:574 bounce:0 [ 1863.993301] free:13979 free_pcp:151 free_cma:0 [ 1863.996457] CPU: 0 PID: 24788 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1863.996465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1863.996470] Call Trace: [ 1863.996490] dump_stack+0x1fc/0x2ef [ 1863.996510] warn_alloc.cold+0x7b/0x18f [ 1863.996529] ? zone_watermark_ok_safe+0x260/0x260 [ 1863.996546] ? retint_kernel+0x2d/0x2d [ 1863.996580] __vmalloc_area_node+0x4fd/0x780 [ 1863.996602] ? __vmalloc_node_range+0x180/0x180 [ 1863.996616] ? _raw_spin_unlock+0x29/0x40 [ 1863.996630] ? __get_vm_area_node+0x2e2/0x3a0 [ 1863.996651] __vmalloc_node_range+0xed/0x180 [ 1863.996687] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1864.029982] Node 0 active_anon:64656kB inactive_anon:48452kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58408kB dirty:0kB writeback:0kB shmem:50648kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1864.037790] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1864.037803] vmalloc_user+0x70/0xe0 [ 1864.037820] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1864.047347] Node 1 active_anon:2724kB inactive_anon:108676kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30048kB dirty:0kB writeback:0kB shmem:109464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1864.049884] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1864.053484] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1864.057453] __vb2_queue_alloc+0x472/0xe60 [ 1864.057482] vb2_core_create_bufs+0x273/0x7e0 [ 1864.062297] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1864.066198] ? __vb2_queue_free+0x870/0x870 [ 1864.066214] ? mutex_trylock+0x1a0/0x1a0 [ 1864.066234] ? __video_do_ioctl+0x632/0xcd0 [ 1864.070613] Node 0 DMA32 free:17932kB min:35996kB low:44992kB high:53988kB active_anon:64656kB inactive_anon:48452kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:1996kB bounce:0kB free_pcp:352kB local_pcp:256kB free_cma:0kB [ 1864.075277] vb2_create_bufs+0x332/0x620 [ 1864.075298] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1864.079422] lowmem_reserve[]: 0 0 1 1 1 [ 1864.083907] ? __video_do_ioctl+0x632/0xcd0 [ 1864.083924] ? mutex_trylock+0x1a0/0x1a0 [ 1864.083941] ? mark_held_locks+0xf0/0xf0 [ 1864.088335] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1864.092738] ? futex_wait_queue_me+0x404/0x5e0 [ 1864.120406] lowmem_reserve[]: 0 0 0 0 0 [ 1864.125739] vb2_ioctl_create_bufs+0x20d/0x360 [ 1864.125758] ? memset+0x20/0x40 [ 1864.129357] Node 1 Normal free:27092kB min:53876kB low:67344kB high:80812kB active_anon:2724kB inactive_anon:108676kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:300kB bounce:0kB free_pcp:252kB local_pcp:248kB free_cma:0kB [ 1864.133673] v4l_create_bufs+0xb2/0x160 [ 1864.133696] __video_do_ioctl+0x49a/0xcd0 [ 1864.161277] lowmem_reserve[]: 0 0 0 0 0 [ 1864.165406] ? v4l_querycap+0x340/0x340 [ 1864.165429] ? __might_fault+0x192/0x1d0 [ 1864.191971] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 1864.196189] ? v4l_querycap+0x340/0x340 [ 1864.196209] video_usercopy+0x13f/0xfa0 [ 1864.200676] Node 0 DMA32: 735*4kB (UME) 178*8kB (ME) 86*16kB (UME) 29*32kB (UME) 8*64kB (M) 4*128kB (UM) 2*256kB (UM) 1*512kB (M) 1*1024kB (U) 4*2048kB (UM) 0*4096kB = 17932kB [ 1864.205687] ? v4l_enumstd+0x60/0x60 [ 1864.205705] ? do_futex+0x171/0x1880 [ 1864.209999] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1864.214050] ? mark_held_locks+0xf0/0xf0 [ 1864.214074] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1864.218368] Node 1 Normal: 329*4kB (UME) 267*8kB (UME) 228*16kB (UM) 145*32kB (UM) 30*64kB (UM) 13*128kB (UM) 2*256kB (UE) 0*512kB 1*1024kB (E) 3*2048kB (UME) 1*4096kB (U) = 27100kB [ 1864.247249] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1864.247267] ? video_usercopy+0xfa0/0xfa0 [ 1864.247283] v4l2_ioctl+0x147/0x1a0 [ 1864.251323] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1864.256403] ? video_devdata+0xa0/0xa0 [ 1864.256419] do_vfs_ioctl+0xcdb/0x12e0 [ 1864.256436] ? lock_downgrade+0x720/0x720 [ 1864.260392] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1864.264697] ? ioctl_preallocate+0x200/0x200 [ 1864.264709] ? __fget+0x33e/0x510 [ 1864.264725] ? __fget+0x356/0x510 [ 1864.268764] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1864.272814] ? do_dup2+0x450/0x450 [ 1864.298752] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1864.303299] ? __se_sys_futex+0x298/0x3b0 [ 1864.307266] 40062 total pagecache pages [ 1864.311827] ksys_ioctl+0x9b/0xc0 [ 1864.315213] 0 pages in swap cache [ 1864.344156] __x64_sys_ioctl+0x6f/0xb0 [ 1864.344171] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1864.344186] do_syscall_64+0xf9/0x620 [ 1864.348142] Swap cache stats: add 0, delete 0, find 0/0 [ 1864.352278] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1864.356259] Free swap = 0kB [ 1864.360212] RIP: 0033:0x7ff9055210f9 [ 1864.364272] Total swap = 0kB [ 1864.376722] Code: Bad RIP value. [ 1864.376730] RSP: 002b:00007ff903a93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1864.380706] 2097051 pages RAM [ 1864.384660] RAX: ffffffffffffffda RBX: 00007ff905640f80 RCX: 00007ff9055210f9 [ 1864.384668] RDX: 0000000020000640 RSI: 00000000c100565c RDI: 0000000000000003 [ 1864.384677] RBP: 00007ff90557cae9 R08: 0000000000000000 R09: 0000000000000000 [ 1864.384687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1864.400549] 0 pages HighMem/MovableOnly [ 1864.404231] R13: 00007ffefb208e4f R14: 00007ff903a93300 R15: 0000000000022000 [ 1864.422147] Mem-Info: [ 1864.442791] 369649 pages reserved [ 1864.452296] active_anon:16845 inactive_anon:39282 isolated_anon:0 [ 1864.452296] active_file:17 inactive_file:17 isolated_file:0 [ 1864.452296] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1864.452296] slab_reclaimable:14405 slab_unreclaimable:122243 [ 1864.452296] mapped:22114 shmem:40028 pagetables:574 bounce:0 [ 1864.452296] free:13979 free_pcp:151 free_cma:0 [ 1864.469021] 0 pages cma reserved [ 1864.476755] Node 0 active_anon:64656kB inactive_anon:48452kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58408kB dirty:0kB writeback:0kB shmem:50648kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1864.489351] Unreclaimable slab info: [ 1864.499514] Node 1 active_anon:2724kB inactive_anon:108676kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30048kB dirty:0kB writeback:0kB shmem:109464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1864.512702] Name Used Total [ 1864.527694] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1864.544174] pid_2 54KB 84KB [ 1864.551341] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1864.569237] batadv_tl_cache 4KB 16KB [ 1864.577021] Node 0 DMA32 free:17932kB min:35996kB low:44992kB high:53988kB active_anon:64656kB inactive_anon:48452kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:1996kB bounce:0kB free_pcp:348kB local_pcp:92kB free_cma:0kB [ 1864.584635] TIPC 19KB 37KB [ 1864.592422] lowmem_reserve[]: 0 0 1 1 1 [ 1864.612979] SCTPv6 14KB 37KB [ 1864.621688] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1864.639789] SCTP 9KB 11KB [ 1864.680144] lowmem_reserve[]: 0 0 0 0 0 [ 1864.707798] DCCPv6 17KB 37KB [ 1864.734612] Node 1 Normal free:27092kB min:53876kB low:67344kB high:80812kB active_anon:2724kB inactive_anon:108676kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:300kB bounce:0kB free_pcp:252kB local_pcp:4kB free_cma:0kB [ 1864.751565] DCCP 16KB 35KB [ 1864.772663] lowmem_reserve[]: 0 0 0 0 0 [ 1864.787123] L2TP/IPv6 55KB 65KB [ 1864.821742] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 1864.850572] RXRPC 11KB 26KB [ 1864.866796] Node 0 DMA32: 734*4kB (ME) 179*8kB (UME) 86*16kB (UME) 29*32kB (UME) 8*64kB (M) 4*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (U) 4*2048kB (UM) 0*4096kB = 17680kB [ 1864.894145] rxrpc_call_jar 78KB 110KB [ 1864.917295] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1864.921493] bridge_fdb_cache 9KB 27KB [ 1864.923385] Node 1 Normal: 329*4kB (UME) 267*8kB (UME) 228*16kB (UM) 145*32kB (UM) 30*64kB (UM) 13*128kB (UM) 2*256kB (UE) 0*512kB 1*1024kB (E) 3*2048kB (UME) 1*4096kB (U) = 27100kB [ 1864.954442] fib6_nodes 157KB 264KB [ 1864.962632] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1864.987410] ip6_dst_cache 145KB 517KB [ 1865.008353] RAWv6 70KB 101KB [ 1865.008983] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1865.013875] UDPv6 28KB 41KB [ 1865.013889] TCPv6 24KB 24KB [ 1865.013908] nf_conntrack 3KB 18KB [ 1865.013976] t10_alua_lu_gp_cache 0KB 3KB [ 1865.030533] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1865.042176] sd_ext_cdb 0KB 7KB [ 1865.060508] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1865.067222] scsi_sense_cache 1056KB 1060KB [ 1865.081287] virtio_scsi_cmd 16KB 16KB [ 1865.085193] 40062 total pagecache pages [ 1865.089032] sgpool-128 8KB 8KB [ 1865.090628] 0 pages in swap cache [ 1865.109490] Swap cache stats: add 0, delete 0, find 0/0 [ 1865.110167] sgpool-64 4KB 12KB [ 1865.114924] Free swap = 0kB [ 1865.114930] Total swap = 0kB [ 1865.114939] 2097051 pages RAM [ 1865.114943] 0 pages HighMem/MovableOnly [ 1865.114948] 369649 pages reserved [ 1865.114952] 0 pages cma reserved [ 1865.152800] sgpool-32 2KB 15KB [ 1865.160649] sgpool-16 1KB 7KB [ 1865.178081] sgpool-8 0KB 7KB [ 1865.183474] mqueue_inode_cache 10KB 30KB [ 1865.191288] bio_post_read_ctx 14KB 15KB [ 1865.210585] bio-2 14KB 15KB [ 1865.218421] jfs_mp 7KB 7KB [ 1865.233343] cifs_small_rq 15KB 16KB [ 1865.241147] cifs_request 67KB 67KB [ 1865.258369] cifs_mpx_ids 0KB 7KB [ 1865.270065] nfs_commit_data 3KB 14KB [ 1865.280134] nfs_write_data 34KB 44KB [ 1865.292654] ext4_system_zone 1KB 7KB [ 1865.302769] bio-1 1KB 7KB [ 1865.321383] pid_namespace 2KB 11KB [ 1865.326902] rpc_buffers 17KB 25KB [ 1865.332544] rpc_tasks 2KB 7KB [ 1865.350386] UNIX 397KB 495KB [ 1865.359220] tcp_bind_bucket 1KB 4KB [ 1865.373256] ip_fib_trie 23KB 47KB [ 1865.382136] ip_fib_alias 112KB 189KB [ 1865.399081] ip_dst_cache 4KB 16KB [ 1865.407848] RAW 42KB 60KB [ 1865.428623] UDP 50KB 74KB [ 1865.438787] TCP 8KB 11KB [ 1865.454985] hugetlbfs_inode_cache 3KB 15KB [ 1865.460719] fscache_cookie_jar 1KB 11KB [ 1865.466251] eventpoll_pwq 20KB 67KB [ 1865.471709] eventpoll_epi 37KB 63KB [ 1865.487753] inotify_inode_mark 19KB 31KB [ 1865.493237] request_queue 199KB 199KB [ 1865.498684] blkdev_requests 1KB 3KB [ 1865.515045] blkdev_ioc 38KB 38KB [ 1865.520462] bio-0 1550KB 1668KB [ 1865.525916] biovec-max 1617KB 1650KB [ 1865.531277] biovec-64 1269KB 1401KB [ 1865.547559] biovec-16 115KB 120KB [ 1865.552989] bio_integrity_payload 1KB 8KB [ 1865.558856] khugepaged_mm_slot 10KB 31KB [ 1865.574335] uid_cache 0KB 4KB [ 1865.579754] dmaengine-unmap-2 0KB 3KB [ 1865.591818] skbuff_fclone_cache 108KB 123KB [ 1865.600848] skbuff_head_cache 7386KB 7387KB [ 1865.613057] configfs_dir_cache 3KB 7KB [ 1865.622458] file_lock_cache 86KB 95KB [ 1865.637979] file_lock_ctx 9KB 11KB [ 1865.643364] fsnotify_mark_connector 10KB 23KB [ 1865.652547] net_namespace 52KB 52KB [ 1865.668416] shmem_inode_cache 8193KB 8252KB [ 1865.677291] task_delay_info 148KB 379KB [ 1865.682687] taskstats 76KB 91KB [ 1865.698266] proc_dir_entry 694KB 866KB [ 1865.707153] pde_opener 6KB 54KB [ 1865.712552] seq_file 284KB 417KB [ 1865.728861] sigqueue 36KB 66KB [ 1865.734317] kernfs_node_cache 18231KB 18246KB [ 1865.739686] mnt_cache 173KB 208KB [ 1865.755029] filp 6873KB 7920KB [ 1865.760416] names_cache 145664KB 145724KB [ 1865.769061] iint_cache 38KB 51KB [ 1865.780882] key_jar 4KB 7KB [ 1865.789978] uts_namespace 2KB 3KB [ 1865.801749] nsproxy 1KB 7KB [ 1865.810578] vm_area_struct 3156KB 4045KB [ 1865.827145] mm_struct 455KB 715KB [ 1865.832531] fs_cache 89KB 348KB [ 1865.841348] files_cache 325KB 735KB [ 1865.857125] signal_cache 774KB 1689KB [ 1865.862507] sighand_cache 529KB 631KB [ 1865.871498] task_struct 5176KB 5201KB [ 1865.887746] cred_jar 1787KB 3000KB [ 1865.893147] anon_vma_chain 995KB 1547KB [ 1865.898577] anon_vma 121KB 327KB [ 1865.914634] pid 50KB 228KB [ 1865.920033] Acpi-Operand 156KB 202KB [ 1865.927498] Acpi-ParseExt 9KB 11KB [ 1865.932878] Acpi-Parse 41KB 47KB [ 1865.951210] Acpi-State 52KB 63KB [ 1865.957346] Acpi-Namespace 20KB 27KB [ 1865.963760] numa_policy 0KB 3KB [ 1865.969966] debug_objects_cache 1516KB 1968KB [ 1865.976413] trace_event_file 297KB 298KB [ 1865.982460] ftrace_event_field 398KB 401KB [ 1865.988781] pool_workqueue 121KB 156KB [ 1865.995074] page->ptl 523KB 1035KB [ 1866.001221] kmalloc-2097152 2050KB 2050KB [ 1866.007725] kmalloc-524288 2056KB 2056KB [ 1866.015971] kmalloc-262144 1290KB 1290KB [ 1866.022776] kmalloc-131072 650KB 650KB [ 1866.031079] kmalloc-65536 1848KB 1914KB [ 1866.037430] kmalloc-32768 1650KB 1716KB [ 1866.043681] kmalloc-16384 1006KB 1056KB [ 1866.049767] kmalloc-8192 3960KB 4001KB [ 1866.055889] kmalloc-4096 18066KB 18066KB [ 1866.061547] kmalloc-2048 10705KB 14088KB [ 1866.067540] kmalloc-1024 8660KB 13214KB [ 1866.073147] kmalloc-512 15682KB 15682KB [ 1866.078726] kmalloc-256 4262KB 6247KB [ 1866.084948] kmalloc-128 886KB 1712KB [ 1866.091013] kmalloc-96 3688KB 4404KB [ 1866.097186] kmalloc-64 2482KB 3744KB [ 1866.103398] kmalloc-32 1889KB 2476KB [ 1866.109804] kmalloc-192 1495KB 2976KB [ 1866.116160] kmem_cache 177KB 183KB [ 1866.126523] Out of memory (oom_kill_allocating_task): Kill process 24768 (systemd-journal) score 0 or sacrifice child [ 1866.139651] Killed process 24768 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1296kB [ 1866.152320] oom_reaper: reaped process 24768 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1296kB [ 1866.179857] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1866.192789] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1866.205707] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1866.231923] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1866.244327] systemd[1]: Stopped Journal Service. [ 1866.272767] systemd[1]: Starting Journal Service... [ 1866.292454] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1866.335055] systemd[1]: Stopped System Logging Service. [ 1866.353934] systemd[1]: Starting System Logging Service... [ 1866.441017] systemd-journald[24818]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1866.793875] systemd[1]: Started System Logging Service. 07:12:12 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b7f8bd690cfeb8873d1512fbb", 0x1c) 07:12:12 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0x800000000000000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000280)={0x80000001, 0x2, 0x3, {0x3, @sdr={0x35323645}}, 0x9}) (async) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x7, 0x3, 0x0, {0x3, @sdr={0x32314d56, 0x20}}, 0xffffff14}) (async) socketpair(0x1f, 0x800, 0x3, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x3f7, 0x300, 0x70bd29, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) 07:12:12 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}) (async) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x102, 0x2) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000200)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@userptr={0x4, 0x0, 0x4, 0x20, 0x81, {r2, r3/1000+10000}, {0x5, 0x0, 0x8, 0x0, 0x3f, 0x8, "3bd45084"}, 0x2, 0x2, {&(0x7f00000001c0)}, 0x4, 0x0, r4}) 07:12:12 executing program 2: socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x40004) 07:12:12 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x2, @sliced={0x81, [0x8001, 0x7, 0x5, 0xff, 0x7fff, 0x2bc3, 0x401, 0xbd, 0xffff, 0x4b6, 0x2, 0xfff, 0xfff, 0x4, 0x167, 0x0, 0x5, 0xffff, 0xa249, 0xffff, 0x101, 0x7, 0x0, 0x100, 0x2, 0x1, 0xc000, 0x1, 0x1, 0x9, 0x3, 0xb, 0xbdc, 0x2d, 0x9, 0xffff, 0x9, 0x2, 0x5, 0xff2a, 0x5, 0x3, 0x8, 0x0, 0x2, 0x7], 0x1f}}) 07:12:12 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8, 0x7ff], 0xd3e}}, 0x7ff}) 07:12:12 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d789", 0x2) 07:12:12 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8}) r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0x800000000000000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000280)={0x80000001, 0x2, 0x3, {0x3, @sdr={0x35323645}}, 0x9}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x7, 0x3, 0x0, {0x3, @sdr={0x32314d56, 0x20}}, 0xffffff14}) socketpair(0x1f, 0x800, 0x3, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x3f7, 0x300, 0x70bd29, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8}) (async) syz_open_dev$vim2m(&(0x7f0000000240), 0x800000000000000, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000280)={0x80000001, 0x2, 0x3, {0x3, @sdr={0x35323645}}, 0x9}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x7, 0x3, 0x0, {0x3, @sdr={0x32314d56, 0x20}}, 0xffffff14}) (async) socketpair(0x1f, 0x800, 0x3, &(0x7f0000000380)) (async) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x3f7, 0x300, 0x70bd29, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) 07:12:12 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x40004) 07:12:12 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d789", 0x2) 07:12:12 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x40004) 07:12:13 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d789", 0x2) 07:12:13 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x40004) [ 1875.149034] oom_reaper: reaped process 24836 (syz-executor.1), now anon-rss:0kB, file-rss:14332kB, shmem-rss:8kB [ 1875.191315] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1875.208477] in:imklog cpuset=/ mems_allowed=0-1 [ 1875.213301] CPU: 0 PID: 24821 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 1875.220866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1875.230330] Call Trace: [ 1875.232913] dump_stack+0x1fc/0x2ef [ 1875.236531] dump_header+0x15d/0xc3f [ 1875.240234] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1875.245354] ? ___ratelimit+0x319/0x590 [ 1875.249325] oom_kill_process.cold+0x10/0x692 [ 1875.253835] ? check_preemption_disabled+0x41/0x280 [ 1875.258846] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1875.264594] out_of_memory+0x1072/0x1390 [ 1875.268652] ? oom_killer_disable+0x270/0x270 [ 1875.273148] ? mutex_trylock+0x15f/0x1a0 [ 1875.277212] __alloc_pages_nodemask+0x23a2/0x2890 [ 1875.282061] ? find_get_entry+0x4cd/0x8a0 [ 1875.286205] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1875.291168] alloc_pages_current+0x193/0x2a0 [ 1875.295583] filemap_fault+0x146e/0x2180 [ 1875.299683] ext4_filemap_fault+0x84/0xb0 [ 1875.303821] __do_fault+0x10b/0x4b0 [ 1875.307437] __handle_mm_fault+0x273b/0x41c0 [ 1875.311831] ? vm_insert_page+0x9c0/0x9c0 [ 1875.315968] ? lock_downgrade+0x720/0x720 [ 1875.320128] ? check_preemption_disabled+0x41/0x280 [ 1875.325148] handle_mm_fault+0x436/0xb10 [ 1875.329222] __do_page_fault+0x68e/0xd60 [ 1875.333293] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1875.338327] ? spurious_fault+0x840/0x840 [ 1875.342464] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1875.347295] ? page_fault+0x8/0x30 [ 1875.350837] page_fault+0x1e/0x30 [ 1875.354390] RIP: 0033:0x7f9cae30f22d [ 1875.358092] Code: Bad RIP value. [ 1875.361436] RSP: 002b:00007f9cabcab580 EFLAGS: 00010293 [ 1875.366872] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007f9cae30f22d [ 1875.374127] RDX: 0000000000001fa0 RSI: 00007f9cabcabda0 RDI: 0000000000000004 [ 1875.381396] RBP: 00005625db70e9d0 R08: 00007f9cad488940 R09: 0000000000000000 [ 1875.388662] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f9cabcabda0 [ 1875.395922] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f9cabcad3eb [ 1875.408411] Mem-Info: [ 1875.410861] active_anon:16572 inactive_anon:41314 isolated_anon:0 [ 1875.410861] active_file:15 inactive_file:18 isolated_file:0 [ 1875.410861] unevictable:0 dirty:26 writeback:10 unstable:0 [ 1875.410861] slab_reclaimable:14337 slab_unreclaimable:122301 [ 1875.410861] mapped:22174 shmem:42076 pagetables:588 bounce:0 [ 1875.410861] free:13776 free_pcp:273 free_cma:0 [ 1875.413322] syz-executor.1: vmalloc: allocation failure, allocated 1638137856 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1875.450019] Node 0 active_anon:62360kB inactive_anon:48452kB active_file:32kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58436kB dirty:48kB writeback:20kB shmem:50648kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1875.469714] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1875.490207] Node 1 active_anon:3928kB inactive_anon:116804kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30260kB dirty:56kB writeback:20kB shmem:117656kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1875.493159] CPU: 1 PID: 24836 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1875.522543] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1875.526747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1875.526753] Call Trace: [ 1875.526777] dump_stack+0x1fc/0x2ef [ 1875.526795] warn_alloc.cold+0x7b/0x18f [ 1875.526812] ? zone_watermark_ok_safe+0x260/0x260 [ 1875.526829] ? retint_kernel+0x2d/0x2d [ 1875.526850] ? alloc_pages_current+0x164/0x2a0 [ 1875.526874] __vmalloc_area_node+0x4fd/0x780 [ 1875.526893] ? __vmalloc_node_range+0x180/0x180 [ 1875.526908] ? _raw_spin_unlock+0x29/0x40 [ 1875.526922] ? __get_vm_area_node+0x2e2/0x3a0 [ 1875.526940] __vmalloc_node_range+0xed/0x180 [ 1875.526957] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1875.526973] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1875.526990] vmalloc_user+0x70/0xe0 [ 1875.561865] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1875.563755] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1875.563769] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1875.563783] __vb2_queue_alloc+0x472/0xe60 [ 1875.563807] vb2_core_create_bufs+0x273/0x7e0 [ 1875.563823] ? __vb2_queue_free+0x870/0x870 [ 1875.566397] Node 0 DMA32 free:17704kB min:35996kB low:44992kB high:53988kB active_anon:62360kB inactive_anon:48452kB active_file:8kB inactive_file:64kB unevictable:0kB writepending:68kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7360kB pagetables:1936kB bounce:0kB free_pcp:592kB local_pcp:344kB free_cma:0kB [ 1875.570161] ? lock_downgrade+0x720/0x720 [ 1875.580865] lowmem_reserve[]: 0 0 1 1 1 [ 1875.582881] ? mutex_trylock+0x1a0/0x1a0 [ 1875.587598] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1875.591949] vb2_create_bufs+0x332/0x620 [ 1875.603300] lowmem_reserve[]: 0 0 0 0 0 [ 1875.605217] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1875.609599] Node 1 Normal free:26520kB min:53876kB low:67344kB high:80812kB active_anon:3928kB inactive_anon:116804kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:276kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:416kB bounce:0kB free_pcp:500kB local_pcp:252kB free_cma:0kB [ 1875.613922] ? __video_do_ioctl+0x632/0xcd0 [ 1875.613936] ? mutex_trylock+0x1a0/0x1a0 [ 1875.613951] ? mark_held_locks+0xf0/0xf0 [ 1875.613965] ? futex_wait_queue_me+0x404/0x5e0 [ 1875.613981] vb2_ioctl_create_bufs+0x20d/0x360 [ 1875.613997] ? memset+0x20/0x40 [ 1875.614013] v4l_create_bufs+0xb2/0x160 [ 1875.614030] __video_do_ioctl+0x49a/0xcd0 [ 1875.614050] ? v4l_querycap+0x340/0x340 [ 1875.622673] lowmem_reserve[]: 0 0 0 0 0 [ 1875.623011] ? __might_fault+0x192/0x1d0 [ 1875.631729] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10872kB [ 1875.632511] ? v4l_querycap+0x340/0x340 [ 1875.639794] Node 0 DMA32: 742*4kB (ME) 190*8kB (ME) 90*16kB (UME) 26*32kB (ME) 9*64kB (M) 5*128kB (M) 2*256kB (UM) 2*512kB (UM) 0*1024kB 4*2048kB (UM) 0*4096kB = 17704kB [ 1875.640872] video_usercopy+0x13f/0xfa0 [ 1875.648973] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1875.649767] ? v4l_enumstd+0x60/0x60 [ 1875.688192] Node 1 Normal: 380*4kB (ME) 305*8kB (ME) 240*16kB (ME) 149*32kB (ME) 34*64kB (UME) 8*128kB (UM) 4*256kB (UM) 3*512kB (UM) 4*1024kB (ME) 2*2048kB (M) 0*4096kB = 26520kB [ 1875.690899] ? do_futex+0x171/0x1880 [ 1875.723577] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1875.724754] ? mark_held_locks+0xf0/0xf0 [ 1875.729849] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1875.759247] ? debug_check_no_obj_freed+0x201/0x490 [ 1875.759269] ? video_usercopy+0xfa0/0xfa0 [ 1875.759282] v4l2_ioctl+0x147/0x1a0 [ 1875.759295] ? video_devdata+0xa0/0xa0 [ 1875.759310] do_vfs_ioctl+0xcdb/0x12e0 [ 1875.759324] ? lock_downgrade+0x720/0x720 [ 1875.759337] ? check_preemption_disabled+0x41/0x280 [ 1875.759349] ? ioctl_preallocate+0x200/0x200 [ 1875.759368] ? __fget+0x356/0x510 [ 1875.759385] ? do_dup2+0x450/0x450 [ 1875.759398] ? __se_sys_futex+0x298/0x3b0 [ 1875.759420] ksys_ioctl+0x9b/0xc0 [ 1875.759438] __x64_sys_ioctl+0x6f/0xb0 [ 1875.759450] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1875.759464] do_syscall_64+0xf9/0x620 [ 1875.759484] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1875.759496] RIP: 0033:0x7ff9055210f9 [ 1875.759517] Code: Bad RIP value. [ 1875.759524] RSP: 002b:00007ff903a93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1875.759538] RAX: ffffffffffffffda RBX: 00007ff905640f80 RCX: 00007ff9055210f9 [ 1875.759547] RDX: 0000000020000640 RSI: 00000000c100565c RDI: 0000000000000003 [ 1875.759555] RBP: 00007ff90557cae9 R08: 0000000000000000 R09: 0000000000000000 [ 1875.759563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1875.759570] R13: 00007ffefb208e4f R14: 00007ff903a93300 R15: 0000000000022000 [ 1875.759919] Mem-Info: [ 1875.759952] active_anon:16572 inactive_anon:41314 isolated_anon:0 [ 1875.759952] active_file:15 inactive_file:18 isolated_file:0 [ 1875.759952] unevictable:0 dirty:26 writeback:10 unstable:0 [ 1875.759952] slab_reclaimable:14337 slab_unreclaimable:122301 [ 1875.759952] mapped:22174 shmem:42076 pagetables:588 bounce:0 [ 1875.759952] free:13776 free_pcp:273 free_cma:0 [ 1875.759982] Node 0 active_anon:62360kB inactive_anon:48452kB active_file:32kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58436kB dirty:48kB writeback:20kB shmem:50648kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1875.760007] Node 1 active_anon:3928kB inactive_anon:116804kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30260kB dirty:56kB writeback:20kB shmem:117656kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1875.760012] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1875.760045] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1875.760065] Node 0 DMA32 free:17704kB min:35996kB low:44992kB high:53988kB active_anon:62360kB inactive_anon:48452kB active_file:8kB inactive_file:64kB unevictable:0kB writepending:68kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7360kB pagetables:1936kB bounce:0kB free_pcp:592kB local_pcp:248kB free_cma:0kB [ 1875.760098] lowmem_reserve[]: 0 0 1 1 1 [ 1875.760117] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1875.760147] lowmem_reserve[]: 0 0 0 0 0 [ 1875.760166] Node 1 Normal free:26520kB min:53876kB low:67344kB high:80812kB active_anon:3928kB inactive_anon:116804kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:276kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:416kB bounce:0kB free_pcp:500kB local_pcp:248kB free_cma:0kB [ 1875.760200] lowmem_reserve[]: 0 0 0 0 0 [ 1875.760219] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10872kB [ 1875.760290] Node 0 DMA32: 742*4kB (ME) 190*8kB (ME) 90*16kB (UME) 26*32kB (ME) 9*64kB (M) 5*128kB (M) 2*256kB (UM) 2*512kB (UM) 0*1024kB 4*2048kB (UM) 0*4096kB = 17704kB [ 1875.760367] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1875.760421] Node 1 Normal: 380*4kB (ME) 305*8kB (ME) 240*16kB (ME) 149*32kB (ME) 34*64kB (UME) 8*128kB (UM) 4*256kB (UM) 3*512kB (UM) 4*1024kB (ME) 2*2048kB (M) 0*4096kB = 26520kB [ 1875.760513] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1875.760523] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1875.760534] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1875.760544] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1875.760550] 42143 total pagecache pages [ 1875.760563] 0 pages in swap cache [ 1875.760571] Swap cache stats: add 0, delete 0, find 0/0 [ 1875.760576] Free swap = 0kB [ 1875.760581] Total swap = 0kB [ 1875.760589] 2097051 pages RAM [ 1875.760594] 0 pages HighMem/MovableOnly [ 1875.760599] 369649 pages reserved [ 1875.760604] 0 pages cma reserved [ 1876.374987] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1876.383920] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1876.392500] 42109 total pagecache pages [ 1876.396561] 0 pages in swap cache [ 1876.400017] Swap cache stats: add 0, delete 0, find 0/0 [ 1876.405503] Free swap = 0kB [ 1876.408537] Total swap = 0kB [ 1876.411555] 2097051 pages RAM [ 1876.414751] 0 pages HighMem/MovableOnly [ 1876.418719] 369649 pages reserved [ 1876.422163] 0 pages cma reserved [ 1876.425585] Unreclaimable slab info: [ 1876.429316] Name Used Total [ 1876.434910] pid_2 50KB 84KB [ 1876.440479] batadv_tl_cache 4KB 16KB [ 1876.445959] TIPC 10KB 30KB [ 1876.451347] SCTPv6 14KB 37KB [ 1876.456786] SCTP 17KB 19KB [ 1876.462171] DCCPv6 17KB 37KB [ 1876.467628] DCCP 16KB 35KB [ 1876.474966] L2TP/IPv6 63KB 71KB [ 1876.480972] RXRPC 11KB 26KB [ 1876.486592] rxrpc_call_jar 78KB 110KB [ 1876.491988] bridge_fdb_cache 9KB 27KB [ 1876.497477] fib6_nodes 157KB 264KB [ 1876.502861] ip6_dst_cache 124KB 510KB [ 1876.508377] RAWv6 70KB 101KB [ 1876.513830] UDPv6 35KB 45KB [ 1876.519255] TCPv6 24KB 30KB [ 1876.524723] nf_conntrack 3KB 11KB [ 1876.530154] t10_alua_lu_gp_cache 0KB 3KB [ 1876.535859] sd_ext_cdb 0KB 7KB [ 1876.541234] scsi_sense_cache 1056KB 1060KB [ 1876.550397] virtio_scsi_cmd 16KB 16KB [ 1876.555835] sgpool-128 8KB 8KB [ 1876.561212] sgpool-64 4KB 12KB [ 1876.570558] sgpool-32 2KB 15KB [ 1876.577842] sgpool-16 1KB 7KB [ 1876.583332] sgpool-8 0KB 7KB [ 1876.589568] mqueue_inode_cache 10KB 30KB [ 1876.596004] bio_post_read_ctx 14KB 15KB [ 1876.602128] bio-2 14KB 15KB [ 1876.608009] jfs_mp 7KB 7KB [ 1876.614723] cifs_small_rq 15KB 16KB [ 1876.621022] cifs_request 67KB 67KB [ 1876.627103] cifs_mpx_ids 0KB 7KB [ 1876.633412] nfs_commit_data 3KB 14KB [ 1876.639294] nfs_write_data 34KB 44KB [ 1876.645921] Bluetooth: hci3: command 0x0406 tx timeout [ 1876.651950] ext4_system_zone 1KB 7KB [ 1876.658091] bio-1 1KB 7KB [ 1876.664273] pid_namespace 2KB 11KB [ 1876.670363] rpc_buffers 17KB 25KB [ 1876.677825] rpc_tasks 2KB 7KB [ 1876.683367] UNIX 418KB 495KB [ 1876.689688] tcp_bind_bucket 1KB 4KB [ 1876.695851] ip_fib_trie 23KB 47KB [ 1876.701903] ip_fib_alias 112KB 189KB [ 1876.708022] ip_dst_cache 4KB 16KB [ 1876.714121] RAW 42KB 60KB [ 1876.720029] UDP 50KB 74KB [ 1876.726094] TCP 8KB 16KB [ 1876.732313] hugetlbfs_inode_cache 3KB 15KB [ 1876.738710] fscache_cookie_jar 1KB 11KB [ 1876.744792] eventpoll_pwq 22KB 67KB [ 1876.750636] eventpoll_epi 41KB 63KB [ 1876.757107] inotify_inode_mark 20KB 31KB [ 1876.763314] request_queue 199KB 199KB [ 1876.769196] blkdev_requests 1KB 3KB [ 1876.774722] blkdev_ioc 29KB 38KB [ 1876.781900] bio-0 1608KB 1608KB [ 1876.803168] biovec-max 1625KB 1625KB [ 1876.803183] biovec-64 1375KB 1393KB [ 1876.803193] biovec-16 120KB 123KB [ 1876.803203] bio_integrity_payload 1KB 8KB [ 1876.803212] khugepaged_mm_slot 9KB 31KB [ 1876.803229] uid_cache 0KB 4KB [ 1876.803240] dmaengine-unmap-2 0KB 3KB [ 1876.881898] skbuff_fclone_cache 89KB 112KB [ 1876.887645] skbuff_head_cache 7336KB 7338KB [ 1876.903083] configfs_dir_cache 3KB 7KB [ 1876.908570] file_lock_cache 77KB 95KB [ 1876.923080] file_lock_ctx 9KB 11KB [ 1876.928478] fsnotify_mark_connector 10KB 23KB [ 1876.943101] net_namespace 52KB 52KB [ 1876.948500] shmem_inode_cache 8163KB 8248KB [ 1876.953942] task_delay_info 140KB 379KB [ 1876.959345] taskstats 78KB 91KB [ 1876.964802] proc_dir_entry 694KB 866KB [ 1876.970174] pde_opener 7KB 54KB [ 1876.975619] seq_file 297KB 417KB [ 1876.981087] sigqueue 54KB 66KB [ 1876.986523] kernfs_node_cache 18230KB 18246KB [ 1876.991900] mnt_cache 173KB 208KB [ 1876.997343] filp 6973KB 7920KB [ 1877.002838] names_cache 147547KB 147547KB [ 1877.008296] iint_cache 40KB 51KB [ 1877.013891] key_jar 4KB 7KB [ 1877.019265] uts_namespace 2KB 3KB [ 1877.024696] nsproxy 1KB 7KB [ 1877.030065] vm_area_struct 3130KB 4033KB [ 1877.035505] mm_struct 443KB 702KB [ 1877.040882] fs_cache 81KB 324KB [ 1877.046309] files_cache 304KB 682KB [ 1877.051674] signal_cache 748KB 1653KB [ 1877.057124] sighand_cache 543KB 631KB [ 1877.062520] task_struct 4829KB 4866KB [ 1877.067992] cred_jar 1904KB 3000KB [ 1877.073441] anon_vma_chain 1007KB 1547KB [ 1877.078812] anon_vma 142KB 327KB [ 1877.084327] pid 48KB 228KB [ 1877.089815] Acpi-Operand 156KB 202KB [ 1877.095248] Acpi-ParseExt 9KB 11KB [ 1877.100621] Acpi-Parse 41KB 47KB [ 1877.106054] Acpi-State 52KB 63KB [ 1877.111425] Acpi-Namespace 20KB 27KB [ 1877.116952] numa_policy 0KB 3KB [ 1877.122336] debug_objects_cache 1516KB 1968KB [ 1877.127987] trace_event_file 297KB 298KB [ 1877.133447] ftrace_event_field 398KB 401KB [ 1877.138905] pool_workqueue 121KB 156KB [ 1877.144439] page->ptl 512KB 1035KB [ 1877.149852] kmalloc-2097152 2050KB 2050KB [ 1877.155281] kmalloc-524288 2056KB 2056KB [ 1877.160651] kmalloc-262144 1290KB 1290KB [ 1877.166108] kmalloc-131072 650KB 650KB [ 1877.171482] kmalloc-65536 1848KB 1914KB [ 1877.176941] kmalloc-32768 1650KB 1716KB [ 1877.182320] kmalloc-16384 1039KB 1056KB [ 1877.187763] kmalloc-8192 3960KB 4001KB [ 1877.193211] kmalloc-4096 17527KB 17586KB [ 1877.198580] kmalloc-2048 10559KB 13891KB [ 1877.213054] kmalloc-1024 8560KB 13119KB [ 1877.218449] kmalloc-512 15568KB 15570KB [ 1877.230490] kmalloc-256 4262KB 6247KB [ 1877.236251] kmalloc-128 867KB 1712KB [ 1877.241648] kmalloc-96 3673KB 4404KB [ 1877.251749] kmalloc-64 2456KB 3744KB [ 1877.257210] kmalloc-32 1871KB 2476KB [ 1877.262583] kmalloc-192 1494KB 2976KB [ 1877.272720] kmem_cache 177KB 183KB [ 1877.278554] Out of memory (oom_kill_allocating_task): Kill process 24821 (in:imklog) score 0 or sacrifice child [ 1877.292947] Killed process 24819 (rsyslogd) total-vm:254332kB, anon-rss:528kB, file-rss:0kB, shmem-rss:0kB [ 1877.306037] oom_reaper: reaped process 24819 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 07:12:20 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc52", 0xf) 07:12:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x40004) 07:12:20 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x2, @sliced={0x81, [0x8001, 0x7, 0x5, 0xff, 0x7fff, 0x2bc3, 0x401, 0xbd, 0xffff, 0x4b6, 0x2, 0xfff, 0xfff, 0x4, 0x167, 0x0, 0x5, 0xffff, 0xa249, 0xffff, 0x101, 0x7, 0x0, 0x100, 0x2, 0x1, 0xc000, 0x1, 0x1, 0x9, 0x3, 0xb, 0xbdc, 0x2d, 0x9, 0xffff, 0x9, 0x2, 0x5, 0xff2a, 0x5, 0x3, 0x8, 0x0, 0x2, 0x7], 0x1f}}) 07:12:23 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}) syz_open_dev$vim2m(&(0x7f00000002c0), 0x102, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x102, 0x2) clock_gettime(0x0, &(0x7f0000000180)) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000200)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@userptr={0x4, 0x0, 0x4, 0x20, 0x81, {r2, r3/1000+10000}, {0x5, 0x0, 0x8, 0x0, 0x3f, 0x8, "3bd45084"}, 0x2, 0x2, {&(0x7f00000001c0)}, 0x4, 0x0, r4}) 07:12:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44001}, 0x40004) 07:12:23 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc52", 0xf) 07:12:23 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f, 0x8], 0xd3e}}, 0x7ff}) 07:12:23 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x2, @sliced={0x81, [0x8001, 0x7, 0x5, 0xff, 0x7fff, 0x2bc3, 0x401, 0xbd, 0xffff, 0x4b6, 0x2, 0xfff, 0xfff, 0x4, 0x167, 0x0, 0x5, 0xffff, 0xa249, 0xffff, 0x101, 0x7, 0x0, 0x100, 0x2, 0x1, 0xc000, 0x1, 0x1, 0x9, 0x3, 0xb, 0xbdc, 0x2d, 0x9, 0xffff, 0x9, 0x2, 0x5, 0xff2a, 0x5, 0x3, 0x8, 0x0, 0x2, 0x7], 0x1f}}) 07:12:23 executing program 3: syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0xfffffffffffffffc, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0xfff, 0xba79, 0x1, {0x2, @sliced={0x5, [0x3, 0x9, 0x8, 0xff4e, 0x0, 0x6, 0xffff, 0x1, 0x6, 0xf088, 0x8001, 0x1, 0x2, 0x8000, 0x4, 0xff, 0x2, 0x8, 0x8, 0x129, 0x81, 0x6, 0x524, 0x9, 0x4, 0x4, 0x1f, 0x0, 0x419, 0x30b8, 0x4c46, 0x6, 0x9, 0x3, 0x8000, 0x3f, 0x8, 0x200, 0x5, 0x96b, 0x7, 0xbe, 0x1, 0xd52, 0x5, 0x5, 0x1, 0x1f], 0x20}}, 0x8000}) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x101, 0x2) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x100, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000300)) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x8, @sdr={0xf6671709, 0x7948dfc1}}) 07:12:23 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc52", 0xf) 07:12:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44001}, 0x40004) 07:12:23 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b7f8bd690cfeb", 0x16) 07:12:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44001}, 0x40004) 07:12:23 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b", 0x10) 07:12:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40004) [ 1886.052795] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1886.076717] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1886.081535] CPU: 1 PID: 8100 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 1886.088998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1886.098467] Call Trace: [ 1886.101068] dump_stack+0x1fc/0x2ef [ 1886.104715] dump_header+0x15d/0xc3f [ 1886.108462] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1886.113579] ? ___ratelimit+0x319/0x590 [ 1886.117566] oom_kill_process.cold+0x10/0x692 [ 1886.122076] ? check_preemption_disabled+0x41/0x280 [ 1886.127180] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1886.132465] out_of_memory+0x1072/0x1390 [ 1886.136542] ? oom_killer_disable+0x270/0x270 [ 1886.141480] ? mutex_trylock+0x15f/0x1a0 [ 1886.145685] __alloc_pages_nodemask+0x23a2/0x2890 [ 1886.150643] ? find_get_entry+0x4cd/0x8a0 [ 1886.154806] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1886.159677] alloc_pages_current+0x193/0x2a0 [ 1886.164187] filemap_fault+0x146e/0x2180 [ 1886.168262] ext4_filemap_fault+0x84/0xb0 [ 1886.172421] __do_fault+0x10b/0x4b0 [ 1886.176412] __handle_mm_fault+0x273b/0x41c0 [ 1886.180831] ? vm_insert_page+0x9c0/0x9c0 [ 1886.184997] ? check_preemption_disabled+0x41/0x280 [ 1886.190025] handle_mm_fault+0x436/0xb10 [ 1886.194121] __do_page_fault+0x68e/0xd60 [ 1886.198197] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1886.203228] ? spurious_fault+0x840/0x840 [ 1886.207391] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1886.212253] ? page_fault+0x8/0x30 [ 1886.215818] page_fault+0x1e/0x30 [ 1886.219282] RIP: 0033:0x4421fb [ 1886.222502] Code: Bad RIP value. [ 1886.225871] RSP: 002b:000000c00005ff30 EFLAGS: 00010206 [ 1886.231266] RAX: 000001b720e05800 RBX: 000000c000050000 RCX: 0000000000000000 [ 1886.238542] RDX: 0000000001f4f7d8 RSI: 000000c00005fea0 RDI: 000000c00005fe7c [ 1886.245817] RBP: 000000c00005ff88 R08: 00007ffd49db8000 R09: 000001e3e060c07c [ 1886.253136] R10: 000142165420f4de R11: 0000000000000001 R12: 000000c00005feb0 [ 1886.260410] R13: 000000c001240000 R14: 000000c0000004e0 R15: 00007f214a1d34c3 [ 1886.268504] Mem-Info: [ 1886.270946] active_anon:17630 inactive_anon:41314 isolated_anon:0 [ 1886.270946] active_file:11 inactive_file:62 isolated_file:0 [ 1886.270946] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1886.270946] slab_reclaimable:14314 slab_unreclaimable:122257 [ 1886.270946] mapped:22176 shmem:42076 pagetables:604 bounce:0 [ 1886.270946] free:25404 free_pcp:62 free_cma:0 [ 1886.304328] Node 0 active_anon:67292kB inactive_anon:48456kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58408kB dirty:0kB writeback:0kB shmem:50652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1886.332268] Node 1 active_anon:3228kB inactive_anon:116800kB active_file:188kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30596kB dirty:0kB writeback:0kB shmem:117652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1886.360013] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1886.386616] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1886.391740] Node 0 DMA32 free:35992kB min:35996kB low:44992kB high:53988kB active_anon:67292kB inactive_anon:48456kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:2060kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1886.420527] lowmem_reserve[]: 0 0 1 1 1 [ 1886.424592] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1886.450575] lowmem_reserve[]: 0 0 0 0 0 [ 1886.454685] Node 1 Normal free:53388kB min:53876kB low:67344kB high:80812kB active_anon:3228kB inactive_anon:116800kB active_file:108kB inactive_file:372kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:356kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1886.501003] lowmem_reserve[]: 0 0 0 0 0 [ 1886.509514] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 1886.541448] Node 0 DMA32: 794*4kB (UME) 227*8kB (UME) 104*16kB (UME) 25*32kB (ME) 9*64kB (UM) 2*128kB (M) 1*256kB (M) 1*512kB (M) 21*1024kB (UM) 3*2048kB (UM) 0*4096kB = 36704kB [ 1886.615737] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1886.637508] Node 1 Normal: 376*4kB (UME) 302*8kB (UME) 249*16kB (UME) 125*32kB (ME) 38*64kB (UME) 13*128kB (UM) 4*256kB (M) 4*512kB (UM) 4*1024kB (ME) 3*2048kB (UM) 6*4096kB (U) = 53888kB [ 1886.665302] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1886.683317] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1886.693190] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1886.702903] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1886.716252] 42188 total pagecache pages [ 1886.720261] 0 pages in swap cache [ 1886.723829] Swap cache stats: add 0, delete 0, find 0/0 [ 1886.729202] Free swap = 0kB [ 1886.732232] Total swap = 0kB [ 1886.735321] 2097051 pages RAM [ 1886.738434] 0 pages HighMem/MovableOnly [ 1886.742498] 369649 pages reserved [ 1886.746023] 0 pages cma reserved [ 1886.749388] Unreclaimable slab info: [ 1886.753166] Name Used Total [ 1886.758802] pid_2 48KB 84KB [ 1886.764367] batadv_tl_cache 4KB 16KB [ 1886.769750] TIPC 10KB 30KB [ 1886.788909] SCTPv6 14KB 37KB [ 1886.803257] SCTP 27KB 27KB [ 1886.808659] DCCPv6 17KB 37KB [ 1886.815483] DCCP 16KB 35KB [ 1886.820890] L2TP/IPv6 65KB 71KB [ 1886.826368] RXRPC 11KB 26KB [ 1886.831738] rxrpc_call_jar 78KB 110KB [ 1886.837734] bridge_fdb_cache 9KB 27KB [ 1886.843539] fib6_nodes 157KB 264KB [ 1886.848898] ip6_dst_cache 131KB 506KB [ 1886.854387] RAWv6 70KB 101KB [ 1886.859744] UDPv6 33KB 45KB [ 1886.865201] TCPv6 27KB 36KB [ 1886.870564] nf_conntrack 5KB 11KB [ 1886.875995] t10_alua_lu_gp_cache 0KB 3KB [ 1886.881607] sd_ext_cdb 0KB 7KB [ 1886.887383] scsi_sense_cache 1056KB 1060KB [ 1886.892902] virtio_scsi_cmd 16KB 16KB [ 1886.899316] sgpool-128 8KB 8KB [ 1886.904921] sgpool-64 4KB 12KB [ 1886.910289] sgpool-32 2KB 15KB [ 1886.917133] sgpool-16 1KB 7KB [ 1886.922515] sgpool-8 0KB 7KB [ 1886.931797] mqueue_inode_cache 10KB 30KB [ 1886.937505] bio_post_read_ctx 14KB 15KB [ 1886.943144] bio-2 14KB 15KB [ 1886.948598] jfs_mp 7KB 7KB [ 1886.954741] cifs_small_rq 15KB 16KB [ 1886.960110] cifs_request 67KB 67KB [ 1886.965558] cifs_mpx_ids 0KB 7KB [ 1886.970945] nfs_commit_data 3KB 14KB [ 1886.976388] nfs_write_data 34KB 44KB [ 1886.981759] ext4_system_zone 1KB 7KB [ 1886.987200] bio-1 1KB 7KB [ 1886.992599] pid_namespace 2KB 11KB [ 1886.997972] rpc_buffers 17KB 25KB [ 1887.003384] rpc_tasks 2KB 7KB [ 1887.008730] UNIX 414KB 495KB [ 1887.014131] tcp_bind_bucket 1KB 4KB [ 1887.020834] ip_fib_trie 23KB 47KB [ 1887.026260] ip_fib_alias 112KB 189KB [ 1887.031607] ip_dst_cache 4KB 16KB [ 1887.037034] RAW 42KB 60KB [ 1887.042391] UDP 50KB 74KB [ 1887.051066] TCP 11KB 22KB [ 1887.056530] hugetlbfs_inode_cache 3KB 15KB [ 1887.062240] fscache_cookie_jar 1KB 11KB [ 1887.067824] eventpoll_pwq 26KB 67KB [ 1887.073648] eventpoll_epi 44KB 63KB [ 1887.079010] inotify_inode_mark 17KB 31KB [ 1887.084539] request_queue 199KB 199KB [ 1887.089901] blkdev_requests 1KB 3KB [ 1887.095292] blkdev_ioc 33KB 38KB [ 1887.100640] bio-0 1613KB 1623KB [ 1887.106047] biovec-max 1633KB 1691KB [ 1887.111395] biovec-64 1425KB 1425KB [ 1887.116816] biovec-16 128KB 131KB [ 1887.124382] bio_integrity_payload 1KB 8KB [ 1887.130109] khugepaged_mm_slot 9KB 31KB [ 1887.135614] uid_cache 0KB 4KB [ 1887.140971] dmaengine-unmap-2 0KB 3KB [ 1887.146395] skbuff_fclone_cache 85KB 112KB [ 1887.151925] skbuff_head_cache 7385KB 7387KB [ 1887.157339] configfs_dir_cache 3KB 7KB [ 1887.166007] file_lock_cache 74KB 95KB [ 1887.171387] file_lock_ctx 9KB 11KB [ 1887.176928] fsnotify_mark_connector 9KB 23KB [ 1887.182909] net_namespace 52KB 52KB [ 1887.188448] shmem_inode_cache 8143KB 8248KB [ 1887.196620] task_delay_info 141KB 379KB [ 1887.201990] taskstats 74KB 91KB [ 1887.209260] proc_dir_entry 694KB 866KB [ 1887.214890] pde_opener 6KB 54KB [ 1887.220259] seq_file 291KB 417KB [ 1887.227552] sigqueue 61KB 66KB [ 1887.233533] kernfs_node_cache 18235KB 18246KB [ 1887.238999] mnt_cache 173KB 208KB [ 1887.244430] filp 7010KB 7920KB [ 1887.249797] names_cache 146578KB 146637KB [ 1887.255223] iint_cache 40KB 51KB [ 1887.260677] key_jar 4KB 7KB [ 1887.266108] uts_namespace 2KB 3KB [ 1887.271560] nsproxy 1KB 7KB [ 1887.277052] vm_area_struct 3198KB 4033KB [ 1887.282419] mm_struct 425KB 695KB [ 1887.322569] fs_cache 77KB 320KB [ 1887.338416] files_cache 293KB 660KB [ 1887.346143] signal_cache 733KB 1638KB [ 1887.351603] sighand_cache 552KB 631KB [ 1887.358909] task_struct 4747KB 4816KB [ 1887.367775] cred_jar 1906KB 3000KB [ 1887.376796] anon_vma_chain 1014KB 1547KB [ 1887.382173] anon_vma 161KB 327KB [ 1887.389366] pid 46KB 228KB [ 1887.398310] Acpi-Operand 156KB 202KB [ 1887.406359] Acpi-ParseExt 9KB 11KB [ 1887.411916] Acpi-Parse 41KB 47KB [ 1887.421750] Acpi-State 52KB 63KB [ 1887.430647] Acpi-Namespace 20KB 27KB [ 1887.440389] numa_policy 0KB 3KB [ 1887.447841] debug_objects_cache 1516KB 1968KB [ 1887.456097] trace_event_file 297KB 298KB [ 1887.461479] ftrace_event_field 398KB 401KB [ 1887.468771] pool_workqueue 121KB 156KB [ 1887.476347] page->ptl 506KB 1035KB [ 1887.481749] kmalloc-2097152 2050KB 2050KB [ 1887.491593] kmalloc-524288 2056KB 2056KB [ 1887.498868] kmalloc-262144 1290KB 1290KB [ 1887.505990] kmalloc-131072 650KB 650KB [ 1887.511384] kmalloc-65536 1848KB 1914KB [ 1887.518815] kmalloc-32768 1650KB 1716KB [ 1887.526345] kmalloc-16384 1039KB 1056KB [ 1887.536056] kmalloc-8192 3960KB 4001KB [ 1887.541458] kmalloc-4096 17641KB 17671KB [ 1887.548777] kmalloc-2048 10525KB 13865KB [ 1887.556418] kmalloc-1024 8600KB 13096KB [ 1887.561810] kmalloc-512 15721KB 15723KB [ 1887.571756] kmalloc-256 4259KB 6247KB [ 1887.579150] kmalloc-128 860KB 1712KB [ 1887.586249] kmalloc-96 3703KB 4404KB [ 1887.591636] kmalloc-64 2456KB 3744KB [ 1887.598898] kmalloc-32 1871KB 2476KB [ 1887.607924] kmalloc-192 1493KB 2976KB [ 1887.616901] kmem_cache 177KB 183KB [ 1887.622295] Out of memory (oom_kill_allocating_task): Kill process 8100 (syz-fuzzer) score 0 or sacrifice child [ 1887.636277] Killed process 23814 (syz-executor.4) total-vm:48512kB, anon-rss:428kB, file-rss:0kB, shmem-rss:0kB [ 1887.651794] oom_reaper: reaped process 23814 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 1887.655927] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1887.676288] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1887.687057] CPU: 1 PID: 8130 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 1887.694530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1887.703901] Call Trace: [ 1887.706497] dump_stack+0x1fc/0x2ef [ 1887.710110] dump_header+0x15d/0xc3f [ 1887.713907] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1887.719188] ? ___ratelimit+0x319/0x590 [ 1887.723151] oom_kill_process.cold+0x10/0x692 [ 1887.727633] ? check_preemption_disabled+0x41/0x280 [ 1887.732731] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1887.738005] out_of_memory+0x1072/0x1390 [ 1887.742058] ? oom_killer_disable+0x270/0x270 [ 1887.746544] ? mutex_trylock+0x15f/0x1a0 [ 1887.750592] __alloc_pages_nodemask+0x23a2/0x2890 [ 1887.755427] ? find_get_entry+0x4cd/0x8a0 [ 1887.759570] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1887.764412] alloc_pages_current+0x193/0x2a0 [ 1887.768810] filemap_fault+0x146e/0x2180 [ 1887.772869] ext4_filemap_fault+0x84/0xb0 [ 1887.777089] __do_fault+0x10b/0x4b0 [ 1887.780699] ? do_raw_spin_unlock+0x171/0x230 [ 1887.785195] __handle_mm_fault+0x273b/0x41c0 [ 1887.789688] ? vm_insert_page+0x9c0/0x9c0 [ 1887.793823] ? __fget+0x356/0x510 [ 1887.797300] ? check_preemption_disabled+0x41/0x280 [ 1887.802302] handle_mm_fault+0x436/0xb10 [ 1887.806367] __do_page_fault+0x68e/0xd60 [ 1887.810433] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1887.815436] ? spurious_fault+0x840/0x840 [ 1887.819573] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1887.824410] ? page_fault+0x8/0x30 [ 1887.827953] page_fault+0x1e/0x30 [ 1887.831409] RIP: 0033:0x443b00 [ 1887.834595] Code: Bad RIP value. [ 1887.837942] RSP: 002b:000000c0006dfe48 EFLAGS: 00010246 [ 1887.843306] RAX: 000000c00003e000 RBX: 000001b8c028196e RCX: 0000000000000000 [ 1887.850558] RDX: 0000000000000001 RSI: 000001b8c028196e RDI: 0000000000000001 [ 1887.857812] RBP: 000000c0006dff30 R08: 00007ffd49db8000 R09: 000001e413b957a7 [ 1887.865077] R10: 0018992ff3750705 R11: 0000000000000001 R12: 000000c0006dfde8 [ 1887.872330] R13: 0000000000000000 R14: 000000c0009c8340 R15: 0000000000000000 [ 1887.883783] Mem-Info: [ 1887.886776] active_anon:17505 inactive_anon:41314 isolated_anon:0 [ 1887.886776] active_file:26 inactive_file:47 isolated_file:0 [ 1887.886776] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1887.886776] slab_reclaimable:14314 slab_unreclaimable:122268 [ 1887.886776] mapped:18601 shmem:42076 pagetables:567 bounce:0 [ 1887.886776] free:25325 free_pcp:478 free_cma:0 [ 1887.923050] Node 0 active_anon:66764kB inactive_anon:48456kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):168kB mapped:44172kB dirty:0kB writeback:0kB shmem:50652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1887.952967] Node 1 active_anon:3228kB inactive_anon:116800kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30296kB dirty:0kB writeback:0kB shmem:117652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1887.982018] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1888.009628] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1888.015527] Node 0 DMA32 free:46452kB min:35996kB low:44992kB high:53988kB active_anon:66764kB inactive_anon:48456kB active_file:504kB inactive_file:940kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7456kB pagetables:1952kB bounce:0kB free_pcp:1280kB local_pcp:244kB free_cma:0kB [ 1888.077101] lowmem_reserve[]: 0 0 1 1 1 [ 1888.081299] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1888.109672] lowmem_reserve[]: 0 0 0 0 0 [ 1888.148668] Node 1 Normal free:53620kB min:53876kB low:67344kB high:80812kB active_anon:3228kB inactive_anon:116800kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:356kB bounce:0kB free_pcp:984kB local_pcp:752kB free_cma:0kB [ 1888.254629] lowmem_reserve[]: 0 0 0 0 0 [ 1888.261982] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 1888.332522] Node 0 DMA32: 1379*4kB (UME) 125*8kB (ME) 72*16kB (UME) 19*32kB (ME) 9*64kB (M) 4*128kB (M) 1*256kB (M) 1*512kB (M) 20*1024kB (UM) 3*2048kB (UM) 0*4096kB = 36756kB [ 1888.379145] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1888.402593] Node 1 Normal: 281*4kB (ME) 303*8kB (UME) 249*16kB (UME) 126*32kB (UME) 40*64kB (UME) 14*128kB (UM) 4*256kB (M) 4*512kB (UM) 4*1024kB (ME) 3*2048kB (UM) 6*4096kB (U) = 53804kB [ 1888.472539] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1888.481435] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1888.512517] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1888.521393] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1888.542542] 42142 total pagecache pages [ 1888.546554] 0 pages in swap cache [ 1888.550004] Swap cache stats: add 0, delete 0, find 0/0 [ 1888.567204] Free swap = 0kB [ 1888.570268] Total swap = 0kB [ 1888.581982] 2097051 pages RAM [ 1888.615734] 0 pages HighMem/MovableOnly [ 1888.621171] 369649 pages reserved [ 1888.642647] 0 pages cma reserved [ 1888.646064] Unreclaimable slab info: [ 1888.649870] Name Used Total [ 1888.669328] pid_2 47KB 84KB [ 1888.674856] batadv_tl_cache 4KB 16KB [ 1888.680259] TIPC 10KB 30KB [ 1888.685703] SCTPv6 14KB 37KB [ 1888.691080] SCTP 27KB 27KB [ 1888.696571] DCCPv6 17KB 37KB [ 1888.701937] DCCP 16KB 35KB [ 1888.707601] L2TP/IPv6 63KB 71KB [ 1888.713092] RXRPC 11KB 26KB [ 1888.718605] rxrpc_call_jar 78KB 110KB [ 1888.732585] bridge_fdb_cache 9KB 27KB [ 1888.740195] fib6_nodes 157KB 264KB [ 1888.766694] ip6_dst_cache 128KB 506KB [ 1888.772141] RAWv6 70KB 101KB [ 1888.812588] UDPv6 33KB 45KB [ 1888.817992] TCPv6 27KB 30KB [ 1888.832502] nf_conntrack 5KB 11KB [ 1888.837943] t10_alua_lu_gp_cache 0KB 3KB [ 1888.843807] sd_ext_cdb 0KB 7KB [ 1888.849263] scsi_sense_cache 1056KB 1060KB [ 1888.854687] virtio_scsi_cmd 16KB 16KB [ 1888.860057] sgpool-128 8KB 8KB [ 1888.865532] sgpool-64 4KB 12KB [ 1888.870915] sgpool-32 2KB 15KB [ 1888.876337] sgpool-16 1KB 7KB [ 1888.881700] sgpool-8 0KB 7KB [ 1888.887151] mqueue_inode_cache 10KB 30KB [ 1888.892685] bio_post_read_ctx 14KB 15KB [ 1888.898122] bio-2 14KB 15KB [ 1888.903639] jfs_mp 7KB 7KB [ 1888.909032] cifs_small_rq 15KB 16KB [ 1888.914472] cifs_request 67KB 67KB [ 1888.919834] cifs_mpx_ids 0KB 7KB [ 1888.926062] nfs_commit_data 3KB 14KB [ 1888.934922] nfs_write_data 34KB 44KB [ 1888.942540] ext4_system_zone 1KB 7KB [ 1888.948023] bio-1 1KB 7KB [ 1888.953887] pid_namespace 2KB 11KB [ 1888.959269] rpc_buffers 17KB 25KB [ 1888.964894] rpc_tasks 2KB 7KB [ 1888.970263] UNIX 414KB 495KB [ 1888.975719] tcp_bind_bucket 1KB 4KB [ 1888.981089] ip_fib_trie 23KB 47KB [ 1888.986533] ip_fib_alias 112KB 189KB [ 1888.991895] ip_dst_cache 4KB 16KB [ 1888.997367] RAW 42KB 60KB [ 1889.002814] UDP 50KB 74KB [ 1889.008180] TCP 11KB 16KB [ 1889.013584] hugetlbfs_inode_cache 3KB 15KB [ 1889.019296] fscache_cookie_jar 1KB 11KB [ 1889.024836] eventpoll_pwq 26KB 67KB [ 1889.030236] eventpoll_epi 43KB 63KB [ 1889.035620] inotify_inode_mark 17KB 31KB [ 1889.041064] request_queue 199KB 199KB [ 1889.046510] blkdev_requests 1KB 3KB [ 1889.051904] blkdev_ioc 38KB 38KB [ 1889.058395] bio-0 1699KB 1702KB [ 1889.067793] biovec-max 1757KB 1790KB [ 1889.074916] biovec-64 1539KB 1543KB [ 1889.080290] biovec-16 133KB 135KB [ 1889.098727] bio_integrity_payload 1KB 8KB [ 1889.104655] khugepaged_mm_slot 9KB 31KB [ 1889.110119] uid_cache 0KB 4KB [ 1889.115544] dmaengine-unmap-2 0KB 3KB [ 1889.120902] skbuff_fclone_cache 95KB 108KB [ 1889.126476] skbuff_head_cache 7561KB 7563KB [ 1889.131855] configfs_dir_cache 3KB 7KB [ 1889.137387] file_lock_cache 74KB 95KB [ 1889.142802] file_lock_ctx 9KB 11KB [ 1889.148166] fsnotify_mark_connector 9KB 23KB [ 1889.154110] net_namespace 52KB 52KB [ 1889.159471] shmem_inode_cache 8158KB 8248KB [ 1889.164973] task_delay_info 144KB 379KB [ 1889.170352] taskstats 73KB 91KB [ 1889.176697] proc_dir_entry 694KB 866KB [ 1889.182224] pde_opener 6KB 54KB [ 1889.190034] seq_file 298KB 417KB [ 1889.200838] sigqueue 55KB 66KB [ 1889.223432] kernfs_node_cache 18235KB 18246KB [ 1889.228829] mnt_cache 173KB 208KB [ 1889.234285] filp 6981KB 7920KB [ 1889.239648] names_cache 144848KB 144886KB [ 1889.245135] iint_cache 40KB 51KB [ 1889.250499] key_jar 4KB 7KB [ 1889.255944] uts_namespace 2KB 3KB [ 1889.261312] nsproxy 1KB 7KB [ 1889.266715] vm_area_struct 3183KB 4033KB [ 1889.273671] mm_struct 424KB 695KB [ 1889.279083] fs_cache 92KB 320KB [ 1889.284556] files_cache 308KB 660KB [ 1889.289921] signal_cache 743KB 1610KB [ 1889.296815] sighand_cache 541KB 631KB [ 1889.302198] task_struct 4784KB 4797KB [ 1889.307735] cred_jar 1906KB 3000KB [ 1889.313195] anon_vma_chain 1001KB 1547KB [ 1889.318648] anon_vma 137KB 327KB [ 1889.326828] pid 61KB 228KB [ 1889.332201] Acpi-Operand 156KB 202KB [ 1889.337825] Acpi-ParseExt 9KB 11KB [ 1889.343255] Acpi-Parse 41KB 47KB [ 1889.348618] Acpi-State 52KB 63KB [ 1889.354037] Acpi-Namespace 20KB 27KB [ 1889.359407] numa_policy 0KB 3KB [ 1889.364830] debug_objects_cache 1516KB 1968KB [ 1889.370367] trace_event_file 297KB 298KB [ 1889.377032] ftrace_event_field 398KB 401KB [ 1889.382556] pool_workqueue 121KB 156KB [ 1889.387947] page->ptl 497KB 1035KB [ 1889.393508] kmalloc-2097152 2050KB 2050KB [ 1889.398861] kmalloc-524288 2056KB 2056KB [ 1889.404284] kmalloc-262144 1290KB 1290KB [ 1889.409640] kmalloc-131072 650KB 650KB [ 1889.415392] kmalloc-65536 1848KB 1914KB [ 1889.420755] kmalloc-32768 1650KB 1716KB [ 1889.426171] kmalloc-16384 1039KB 1056KB [ 1889.431549] kmalloc-8192 3960KB 4001KB [ 1889.436956] kmalloc-4096 17701KB 17701KB [ 1889.442306] kmalloc-2048 10472KB 13821KB [ 1889.450416] kmalloc-1024 8708KB 13096KB [ 1889.455864] kmalloc-512 16005KB 16008KB [ 1889.461231] kmalloc-256 4259KB 6247KB [ 1889.466729] kmalloc-128 859KB 1712KB [ 1889.472096] kmalloc-96 3711KB 4404KB [ 1889.478613] kmalloc-64 2444KB 3744KB [ 1889.484059] kmalloc-32 1878KB 2476KB [ 1889.489508] kmalloc-192 1506KB 2976KB [ 1889.495008] kmem_cache 177KB 183KB [ 1889.500390] Out of memory (oom_kill_allocating_task): Kill process 8130 (syz-fuzzer) score 0 or sacrifice child [ 1889.510738] Killed process 23220 (syz-executor.5) total-vm:48512kB, anon-rss:428kB, file-rss:0kB, shmem-rss:0kB [ 1889.521298] oom_reaper: reaped process 23220 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 1890.137765] systemd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1890.186444] systemd cpuset=/ mems_allowed=0-1 [ 1890.191014] CPU: 1 PID: 1 Comm: systemd Not tainted 4.19.211-syzkaller #0 [ 1890.197953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1890.207310] Call Trace: [ 1890.209921] dump_stack+0x1fc/0x2ef [ 1890.213559] dump_header+0x15d/0xc3f [ 1890.217285] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1890.222392] ? ___ratelimit+0x319/0x590 [ 1890.226382] oom_kill_process.cold+0x10/0x692 [ 1890.230896] ? oom_badness.part.0+0x135/0x6e0 [ 1890.235399] ? lock_downgrade+0x720/0x720 [ 1890.239558] ? check_preemption_disabled+0x41/0x280 [ 1890.244588] out_of_memory+0x34d/0x1390 [ 1890.248576] ? oom_killer_disable+0x270/0x270 [ 1890.253202] ? mutex_trylock+0x15f/0x1a0 [ 1890.257283] __alloc_pages_nodemask+0x23a2/0x2890 [ 1890.262159] ? find_get_entry+0x4cd/0x8a0 [ 1890.266326] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1890.271213] alloc_pages_current+0x193/0x2a0 [ 1890.275767] filemap_fault+0x146e/0x2180 [ 1890.279856] ext4_filemap_fault+0x84/0xb0 [ 1890.284011] __do_fault+0x10b/0x4b0 [ 1890.287732] __handle_mm_fault+0x273b/0x41c0 [ 1890.292145] ? vm_insert_page+0x9c0/0x9c0 [ 1890.296323] ? check_preemption_disabled+0x41/0x280 [ 1890.301351] handle_mm_fault+0x436/0xb10 [ 1890.305499] __do_page_fault+0x68e/0xd60 [ 1890.309555] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1890.314576] ? spurious_fault+0x840/0x840 [ 1890.318727] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1890.323582] ? page_fault+0x8/0x30 [ 1890.327127] page_fault+0x1e/0x30 [ 1890.330574] RIP: 0033:0x7f8068f24b50 [ 1890.334290] Code: Bad RIP value. [ 1890.337646] RSP: 002b:00007fff13487928 EFLAGS: 00010246 [ 1890.342998] RAX: 00007f8068f24b50 RBX: 00000000ffffffff RCX: 00007f806a38ab02 [ 1890.350258] RDX: 00005630393f05c0 RSI: 0000000000000000 RDI: 00007fff13487a80 [ 1890.357530] RBP: 00007fff13488010 R08: 0000000000000000 R09: 0000000000000001 [ 1890.364794] R10: 0000000000000020 R11: fffffffffffffdf8 R12: 0000000000000050 [ 1890.372066] R13: 00005630393f04e0 R14: 00000000ffffffff R15: 0000000000000000 [ 1890.399191] Mem-Info: [ 1890.401656] active_anon:17472 inactive_anon:41314 isolated_anon:0 [ 1890.401656] active_file:0 inactive_file:19 isolated_file:0 [ 1890.401656] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1890.401656] slab_reclaimable:14298 slab_unreclaimable:121724 [ 1890.401656] mapped:18645 shmem:42076 pagetables:550 bounce:0 [ 1890.401656] free:25097 free_pcp:85 free_cma:0 [ 1890.541316] Node 0 active_anon:66668kB inactive_anon:48456kB active_file:4kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44172kB dirty:0kB writeback:0kB shmem:50652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1890.685709] Node 1 active_anon:3220kB inactive_anon:116800kB active_file:48kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30408kB dirty:0kB writeback:0kB shmem:117652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1890.820570] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1890.936043] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1890.941127] Node 0 DMA32 free:35916kB min:35996kB low:44992kB high:53988kB active_anon:66668kB inactive_anon:48456kB active_file:76kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:1848kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1891.120340] lowmem_reserve[]: 0 0 1 1 1 [ 1891.139007] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1891.230650] lowmem_reserve[]: 0 0 0 0 0 [ 1891.247605] Node 1 Normal free:53668kB min:53876kB low:67344kB high:80812kB active_anon:3220kB inactive_anon:116800kB active_file:16kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:352kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1891.425802] lowmem_reserve[]: 0 0 0 0 0 [ 1891.429815] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 1891.512666] Node 0 DMA32: 835*4kB (UME) 223*8kB (UME) 109*16kB (UME) 28*32kB (UME) 9*64kB (M) 4*128kB (M) 2*256kB (UM) 2*512kB (UM) 19*1024kB (UM) 3*2048kB (UM) 0*4096kB = 35988kB [ 1891.612766] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1891.671852] Node 1 Normal: 370*4kB (UME) 299*8kB (ME) 248*16kB (ME) 132*32kB (UME) 40*64kB (UME) 15*128kB (UM) 4*256kB (M) 4*512kB (UM) 4*1024kB (ME) 3*2048kB (UM) 6*4096kB (U) = 54432kB [ 1891.761654] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1891.807455] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1891.856700] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1891.901110] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1891.963994] 42131 total pagecache pages [ 1891.968004] 0 pages in swap cache [ 1891.971653] Swap cache stats: add 0, delete 0, find 0/0 [ 1892.040808] Free swap = 0kB [ 1892.057471] Total swap = 0kB [ 1892.060510] 2097051 pages RAM [ 1892.089350] 0 pages HighMem/MovableOnly [ 1892.116078] 369649 pages reserved [ 1892.119563] 0 pages cma reserved [ 1892.158838] Unreclaimable slab info: [ 1892.182395] Name Used Total [ 1892.203291] pid_2 47KB 84KB [ 1892.208758] batadv_tl_cache 4KB 16KB [ 1892.254971] TIPC 10KB 30KB [ 1892.260399] SCTPv6 14KB 37KB [ 1892.331439] SCTP 27KB 27KB [ 1892.373196] DCCPv6 17KB 37KB [ 1892.378603] DCCP 16KB 35KB [ 1892.439037] L2TP/IPv6 63KB 71KB [ 1892.468322] RXRPC 11KB 26KB [ 1892.504638] rxrpc_call_jar 78KB 110KB [ 1892.510050] bridge_fdb_cache 9KB 27KB [ 1892.557113] fib6_nodes 157KB 264KB [ 1892.584495] ip6_dst_cache 135KB 506KB [ 1892.589902] RAWv6 70KB 101KB [ 1892.606688] UDPv6 33KB 45KB [ 1892.612081] TCPv6 21KB 30KB [ 1892.627656] nf_conntrack 5KB 11KB [ 1892.670068] t10_alua_lu_gp_cache 0KB 3KB [ 1892.703095] sd_ext_cdb 0KB 7KB [ 1892.708487] scsi_sense_cache 1056KB 1060KB [ 1892.771723] virtio_scsi_cmd 16KB 16KB [ 1892.801940] sgpool-128 8KB 8KB [ 1892.836941] sgpool-64 4KB 12KB [ 1892.879786] sgpool-32 2KB 15KB [ 1892.914199] sgpool-16 1KB 7KB [ 1892.919619] sgpool-8 0KB 7KB [ 1892.972351] mqueue_inode_cache 10KB 30KB [ 1892.977844] bio_post_read_ctx 14KB 15KB [ 1893.032820] bio-2 14KB 15KB [ 1893.038224] jfs_mp 7KB 7KB [ 1893.087151] cifs_small_rq 15KB 16KB [ 1893.109792] cifs_request 67KB 67KB [ 1893.141282] cifs_mpx_ids 0KB 7KB [ 1893.167693] nfs_commit_data 3KB 14KB [ 1893.177176] nfs_write_data 34KB 44KB [ 1893.237921] ext4_system_zone 1KB 7KB [ 1893.258766] bio-1 1KB 7KB [ 1893.293363] pid_namespace 2KB 11KB [ 1893.298781] rpc_buffers 17KB 25KB [ 1893.347522] rpc_tasks 2KB 7KB [ 1893.370618] UNIX 414KB 495KB [ 1893.401561] tcp_bind_bucket 1KB 4KB [ 1893.432879] ip_fib_trie 23KB 47KB [ 1893.438364] ip_fib_alias 112KB 189KB [ 1893.483332] ip_dst_cache 4KB 16KB [ 1893.489203] RAW 42KB 60KB [ 1893.553946] UDP 50KB 74KB [ 1893.559353] TCP 8KB 16KB [ 1893.639167] hugetlbfs_inode_cache 3KB 15KB [ 1893.676741] fscache_cookie_jar 1KB 11KB [ 1893.712323] eventpoll_pwq 23KB 67KB [ 1893.717733] eventpoll_epi 41KB 63KB [ 1893.769058] inotify_inode_mark 17KB 31KB [ 1893.818326] request_queue 199KB 199KB [ 1893.864729] blkdev_requests 1KB 3KB [ 1893.871286] blkdev_ioc 35KB 38KB [ 1893.905825] bio-0 1706KB 1710KB [ 1893.911221] biovec-max 1757KB 1790KB [ 1893.962939] biovec-64 1515KB 1543KB [ 1893.968334] biovec-16 134KB 135KB [ 1894.026536] bio_integrity_payload 1KB 8KB [ 1894.072286] khugepaged_mm_slot 9KB 31KB [ 1894.077777] uid_cache 0KB 4KB [ 1894.127737] dmaengine-unmap-2 0KB 3KB [ 1894.166634] skbuff_fclone_cache 88KB 108KB [ 1894.193945] skbuff_head_cache 7925KB 7927KB [ 1894.199344] configfs_dir_cache 3KB 7KB [ 1894.242390] file_lock_cache 73KB 95KB [ 1894.247802] file_lock_ctx 9KB 11KB [ 1894.331094] fsnotify_mark_connector 9KB 23KB [ 1894.367928] net_namespace 52KB 52KB [ 1894.400103] shmem_inode_cache 8152KB 8248KB [ 1894.429724] task_delay_info 143KB 379KB [ 1894.468252] taskstats 68KB 91KB [ 1894.499815] proc_dir_entry 694KB 866KB [ 1894.536998] pde_opener 6KB 54KB [ 1894.566354] seq_file 297KB 417KB [ 1894.571751] sigqueue 50KB 66KB [ 1894.619756] kernfs_node_cache 18229KB 18246KB [ 1894.657789] mnt_cache 173KB 208KB [ 1894.704424] filp 6974KB 7920KB [ 1894.709823] names_cache 144283KB 144338KB [ 1894.781043] iint_cache 39KB 51KB [ 1894.805208] key_jar 4KB 7KB [ 1894.810598] uts_namespace 2KB 3KB [ 1894.889795] nsproxy 1KB 7KB [ 1894.930822] vm_area_struct 3182KB 4033KB [ 1894.947213] mm_struct 416KB 689KB [ 1894.987502] fs_cache 86KB 320KB [ 1895.035651] files_cache 298KB 660KB [ 1895.082178] signal_cache 741KB 1610KB [ 1895.087797] sighand_cache 529KB 631KB [ 1895.129531] task_struct 4778KB 4797KB [ 1895.171225] cred_jar 1900KB 3000KB [ 1895.222202] anon_vma_chain 999KB 1547KB [ 1895.227609] anon_vma 130KB 327KB [ 1895.302189] pid 58KB 228KB [ 1895.307703] Acpi-Operand 156KB 202KB [ 1895.381880] Acpi-ParseExt 9KB 11KB [ 1895.399571] Acpi-Parse 41KB 47KB [ 1895.410250] Acpi-State 52KB 63KB [ 1895.416183] Acpi-Namespace 20KB 27KB [ 1895.421591] numa_policy 0KB 3KB [ 1895.427134] debug_objects_cache 1516KB 1968KB [ 1895.432812] trace_event_file 297KB 298KB [ 1895.438261] ftrace_event_field 398KB 401KB [ 1895.443801] pool_workqueue 121KB 156KB [ 1895.449163] page->ptl 496KB 1035KB [ 1895.454850] kmalloc-2097152 2050KB 2050KB [ 1895.460212] kmalloc-524288 2056KB 2056KB [ 1895.465666] kmalloc-262144 1290KB 1290KB [ 1895.471169] kmalloc-131072 650KB 650KB [ 1895.476753] kmalloc-65536 1848KB 1914KB [ 1895.482189] kmalloc-32768 1650KB 1716KB [ 1895.487565] kmalloc-16384 1039KB 1056KB [ 1895.493013] kmalloc-8192 3960KB 4001KB [ 1895.498373] kmalloc-4096 17718KB 17718KB [ 1895.503801] kmalloc-2048 10472KB 13821KB [ 1895.509255] kmalloc-1024 8978KB 13096KB [ 1895.515742] kmalloc-512 16756KB 16758KB [ 1895.521287] kmalloc-256 4284KB 6247KB [ 1895.531332] kmalloc-128 871KB 1712KB [ 1895.536816] kmalloc-96 3771KB 4404KB [ 1895.542230] kmalloc-64 2444KB 3744KB [ 1895.547594] kmalloc-32 1893KB 2476KB [ 1895.553017] kmalloc-192 1506KB 2976KB [ 1895.558377] kmem_cache 177KB 183KB [ 1895.563793] Out of memory: Kill process 24888 (syz-executor.5) score 1002 or sacrifice child [ 1895.572471] Killed process 24896 (syz-executor.5) total-vm:60680kB, anon-rss:2548kB, file-rss:14340kB, shmem-rss:72kB [ 1895.584565] oom_reaper: reaped process 24896 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 1895.657023] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1895.739628] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1895.758109] CPU: 0 PID: 8102 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 1895.765592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1895.774956] Call Trace: [ 1895.777559] dump_stack+0x1fc/0x2ef [ 1895.781194] dump_header+0x15d/0xc3f [ 1895.784918] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1895.790022] ? ___ratelimit+0x319/0x590 [ 1895.794176] oom_kill_process.cold+0x10/0x692 [ 1895.798705] ? check_preemption_disabled+0x41/0x280 [ 1895.803780] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1895.809066] out_of_memory+0x1072/0x1390 [ 1895.813132] ? oom_killer_disable+0x270/0x270 [ 1895.817631] ? mutex_trylock+0x15f/0x1a0 [ 1895.822135] __alloc_pages_nodemask+0x23a2/0x2890 [ 1895.826993] ? find_get_entry+0x4cd/0x8a0 [ 1895.831153] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1895.836118] alloc_pages_current+0x193/0x2a0 [ 1895.840534] filemap_fault+0x146e/0x2180 [ 1895.844614] ext4_filemap_fault+0x84/0xb0 [ 1895.848763] __do_fault+0x10b/0x4b0 [ 1895.852398] ? do_raw_spin_unlock+0x171/0x230 [ 1895.856998] __handle_mm_fault+0x273b/0x41c0 [ 1895.861422] ? vm_insert_page+0x9c0/0x9c0 [ 1895.865607] ? check_preemption_disabled+0x41/0x280 [ 1895.870638] handle_mm_fault+0x436/0xb10 [ 1895.874775] __do_page_fault+0x68e/0xd60 [ 1895.878847] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1895.883867] ? spurious_fault+0x840/0x840 [ 1895.888019] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1895.892890] ? page_fault+0x8/0x30 [ 1895.896448] page_fault+0x1e/0x30 [ 1895.899902] RIP: 0033:0x43ed20 [ 1895.903097] Code: Bad RIP value. [ 1895.906464] RSP: 002b:000000c000759578 EFLAGS: 00010246 [ 1895.911826] RAX: 000000c00003e000 RBX: 000000c00003e000 RCX: 000000c000050800 [ 1895.919094] RDX: 000000c000759608 RSI: 0000000000005ab4 RDI: 0000000000000001 [ 1895.926369] RBP: 000000c0007595a0 R08: 0000000000000000 R09: 0000000000000000 [ 1895.933647] R10: 0000000001000004 R11: 0000000000000202 R12: 000000c000759638 [ 1895.940922] R13: 0000000000000000 R14: 000000c0000011e0 R15: 0000000000000000 [ 1896.033713] Mem-Info: [ 1896.036191] active_anon:16834 inactive_anon:41314 isolated_anon:0 [ 1896.036191] active_file:41 inactive_file:31 isolated_file:0 [ 1896.036191] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1896.036191] slab_reclaimable:14325 slab_unreclaimable:120927 [ 1896.036191] mapped:18620 shmem:42076 pagetables:549 bounce:0 [ 1896.036191] free:25075 free_pcp:374 free_cma:0 [ 1896.080624] Node 0 active_anon:64140kB inactive_anon:48456kB active_file:36kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44072kB dirty:0kB writeback:0kB shmem:50652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1896.119834] Node 1 active_anon:3196kB inactive_anon:116800kB active_file:128kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30408kB dirty:0kB writeback:0kB shmem:117652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1896.164120] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1896.198753] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1896.205249] Node 0 DMA32 free:35728kB min:35996kB low:44992kB high:53988kB active_anon:64140kB inactive_anon:48456kB active_file:36kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:1844kB bounce:0kB free_pcp:460kB local_pcp:456kB free_cma:0kB [ 1896.261020] lowmem_reserve[]: 0 0 1 1 1 [ 1896.275872] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1896.309049] lowmem_reserve[]: 0 0 0 0 0 [ 1896.313159] Node 1 Normal free:53596kB min:53876kB low:67344kB high:80812kB active_anon:3196kB inactive_anon:116800kB active_file:28kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:352kB bounce:0kB free_pcp:1008kB local_pcp:588kB free_cma:0kB [ 1896.357793] lowmem_reserve[]: 0 0 0 0 0 [ 1896.361815] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 1896.380383] Node 0 DMA32: 760*4kB (UM) 215*8kB (ME) 110*16kB (ME) 27*32kB (UME) 9*64kB (M) 5*128kB (UM) 1*256kB (M) 2*512kB (UM) 17*1024kB (UM) 4*2048kB (UM) 0*4096kB = 35480kB [ 1896.416665] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1896.438452] Node 1 Normal: 111*4kB (ME) 298*8kB (UME) 249*16kB (UME) 129*32kB (UME) 34*64kB (UME) 17*128kB (UM) 4*256kB (M) 4*512kB (UM) 4*1024kB (ME) 3*2048kB (UM) 6*4096kB (U) = 53180kB [ 1896.461916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1896.472181] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1896.480868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1896.503997] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1896.515604] 42131 total pagecache pages [ 1896.519692] 0 pages in swap cache [ 1896.528952] Swap cache stats: add 0, delete 0, find 0/0 [ 1896.538855] Free swap = 0kB [ 1896.549153] Total swap = 0kB [ 1896.559868] 2097051 pages RAM [ 1896.570259] 0 pages HighMem/MovableOnly [ 1896.575812] 369649 pages reserved [ 1896.579287] 0 pages cma reserved [ 1896.589021] Unreclaimable slab info: [ 1896.600120] Name Used Total [ 1896.609178] pid_2 47KB 84KB [ 1896.619640] batadv_tl_cache 4KB 16KB [ 1896.625088] TIPC 10KB 30KB [ 1896.630460] SCTPv6 14KB 37KB [ 1896.650028] SCTP 27KB 27KB [ 1896.660628] DCCPv6 17KB 37KB [ 1896.666936] DCCP 16KB 35KB [ 1896.686858] L2TP/IPv6 63KB 71KB [ 1896.695248] RXRPC 11KB 26KB [ 1896.700768] rxrpc_call_jar 78KB 110KB [ 1896.709417] bridge_fdb_cache 9KB 27KB [ 1896.718521] fib6_nodes 157KB 264KB [ 1896.730092] ip6_dst_cache 135KB 506KB [ 1896.741139] RAWv6 70KB 101KB [ 1896.750197] UDPv6 33KB 45KB [ 1896.760813] TCPv6 21KB 24KB [ 1896.776577] nf_conntrack 5KB 11KB [ 1896.781995] t10_alua_lu_gp_cache 0KB 3KB [ 1896.808568] sd_ext_cdb 0KB 7KB [ 1896.814022] scsi_sense_cache 1056KB 1060KB [ 1896.819389] virtio_scsi_cmd 16KB 16KB [ 1896.828109] sgpool-128 8KB 8KB [ 1896.838876] sgpool-64 4KB 12KB [ 1896.844304] sgpool-32 2KB 15KB [ 1896.849832] sgpool-16 1KB 7KB [ 1896.861362] sgpool-8 0KB 7KB [ 1896.869286] mqueue_inode_cache 10KB 30KB [ 1896.874847] bio_post_read_ctx 14KB 15KB [ 1896.880341] bio-2 14KB 15KB [ 1896.899905] jfs_mp 7KB 7KB [ 1896.908623] cifs_small_rq 15KB 16KB [ 1896.926180] cifs_request 67KB 67KB [ 1896.931567] cifs_mpx_ids 0KB 7KB [ 1896.940378] nfs_commit_data 3KB 14KB [ 1896.950876] nfs_write_data 34KB 44KB [ 1896.956396] ext4_system_zone 1KB 7KB [ 1896.961771] bio-1 1KB 7KB [ 1896.981587] pid_namespace 2KB 11KB [ 1896.991091] rpc_buffers 17KB 25KB [ 1896.998764] rpc_tasks 2KB 7KB [ 1897.017616] UNIX 414KB 495KB [ 1897.027456] tcp_bind_bucket 1KB 4KB [ 1897.040722] ip_fib_trie 23KB 47KB [ 1897.049321] ip_fib_alias 112KB 189KB [ 1897.066028] ip_dst_cache 4KB 16KB [ 1897.071424] RAW 42KB 60KB [ 1897.088865] UDP 50KB 74KB [ 1897.095086] TCP 8KB 11KB [ 1897.100568] hugetlbfs_inode_cache 3KB 15KB [ 1897.120117] fscache_cookie_jar 1KB 11KB [ 1897.129869] eventpoll_pwq 22KB 67KB [ 1897.136279] eventpoll_epi 41KB 63KB [ 1897.141675] inotify_inode_mark 17KB 31KB [ 1897.151966] request_queue 199KB 199KB [ 1897.161578] blkdev_requests 1KB 3KB [ 1897.171476] blkdev_ioc 34KB 38KB [ 1897.184281] bio-0 1749KB 1751KB [ 1897.189671] biovec-max 1757KB 1790KB [ 1897.199464] biovec-64 1579KB 1590KB [ 1897.212603] biovec-16 142KB 142KB [ 1897.217991] bio_integrity_payload 1KB 8KB [ 1897.229586] khugepaged_mm_slot 9KB 31KB [ 1897.240865] uid_cache 0KB 4KB [ 1897.248080] dmaengine-unmap-2 0KB 3KB [ 1897.271131] skbuff_fclone_cache 86KB 108KB [ 1897.277496] skbuff_head_cache 8183KB 8186KB [ 1897.294348] configfs_dir_cache 3KB 7KB [ 1897.299832] file_lock_cache 73KB 95KB [ 1897.305305] file_lock_ctx 9KB 11KB [ 1897.310677] fsnotify_mark_connector 9KB 23KB [ 1897.328380] net_namespace 52KB 52KB [ 1897.333861] shmem_inode_cache 8145KB 8248KB [ 1897.339241] task_delay_info 142KB 379KB [ 1897.349910] taskstats 68KB 91KB [ 1897.366509] proc_dir_entry 694KB 866KB [ 1897.371901] pde_opener 6KB 54KB [ 1897.389635] seq_file 297KB 417KB [ 1897.400547] sigqueue 50KB 66KB [ 1897.410462] kernfs_node_cache 18224KB 18246KB [ 1897.428637] mnt_cache 173KB 208KB [ 1897.450015] filp 6916KB 7920KB [ 1897.460108] names_cache 142426KB 142485KB [ 1897.476323] iint_cache 39KB 51KB [ 1897.481715] key_jar 4KB 7KB [ 1897.508181] uts_namespace 2KB 3KB [ 1897.513730] nsproxy 1KB 7KB [ 1897.519115] vm_area_struct 3170KB 4033KB [ 1897.535293] mm_struct 416KB 689KB [ 1897.540694] fs_cache 80KB 320KB [ 1897.546156] files_cache 296KB 660KB [ 1897.551531] signal_cache 740KB 1602KB [ 1897.567727] sighand_cache 529KB 631KB [ 1897.573214] task_struct 4778KB 4797KB [ 1897.578603] cred_jar 1894KB 3000KB [ 1897.595135] anon_vma_chain 994KB 1547KB [ 1897.600528] anon_vma 128KB 327KB [ 1897.605991] pid 55KB 228KB [ 1897.611363] Acpi-Operand 156KB 202KB [ 1897.622822] Acpi-ParseExt 9KB 11KB [ 1897.628203] Acpi-Parse 41KB 47KB [ 1897.645702] Acpi-State 52KB 63KB [ 1897.651088] Acpi-Namespace 20KB 27KB [ 1897.660657] numa_policy 0KB 3KB [ 1897.679993] debug_objects_cache 1516KB 1968KB [ 1897.701727] trace_event_file 297KB 298KB [ 1897.707492] ftrace_event_field 398KB 401KB [ 1897.725103] pool_workqueue 121KB 156KB [ 1897.730505] page->ptl 488KB 1035KB [ 1897.735991] kmalloc-2097152 2050KB 2050KB [ 1897.741379] kmalloc-524288 2056KB 2056KB [ 1897.747663] kmalloc-262144 1290KB 1290KB [ 1897.757372] kmalloc-131072 650KB 650KB [ 1897.762844] kmalloc-65536 1848KB 1914KB [ 1897.768206] kmalloc-32768 1650KB 1716KB [ 1897.779791] kmalloc-16384 1039KB 1056KB [ 1897.789212] kmalloc-8192 3960KB 4001KB [ 1897.796673] kmalloc-4096 17722KB 17722KB [ 1897.821505] kmalloc-2048 10472KB 13821KB [ 1897.830442] kmalloc-1024 9046KB 13096KB [ 1897.841087] kmalloc-512 17085KB 17085KB [ 1897.856277] kmalloc-256 4301KB 6247KB [ 1897.861689] kmalloc-128 871KB 1712KB [ 1897.881392] kmalloc-96 3793KB 4404KB [ 1897.886815] kmalloc-64 2444KB 3744KB [ 1897.895754] kmalloc-32 1901KB 2476KB [ 1897.901137] kmalloc-192 1506KB 2976KB [ 1897.919117] kmem_cache 177KB 183KB [ 1897.925440] Out of memory (oom_kill_allocating_task): Kill process 8102 (syz-fuzzer) score 0 or sacrifice child [ 1897.941611] Killed process 22903 (syz-executor.2) total-vm:48512kB, anon-rss:428kB, file-rss:4kB, shmem-rss:0kB [ 1897.957600] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1897.989907] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1898.027675] CPU: 0 PID: 8102 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 1898.035156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1898.045927] Call Trace: [ 1898.048530] dump_stack+0x1fc/0x2ef [ 1898.052157] dump_header+0x15d/0xc3f [ 1898.055866] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1898.060976] ? ___ratelimit+0x319/0x590 [ 1898.064954] oom_kill_process.cold+0x10/0x692 [ 1898.070903] ? check_preemption_disabled+0x41/0x280 [ 1898.075918] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1898.081194] out_of_memory+0x1072/0x1390 [ 1898.085264] ? oom_killer_disable+0x270/0x270 [ 1898.089757] ? mutex_trylock+0x15f/0x1a0 [ 1898.093813] __alloc_pages_nodemask+0x23a2/0x2890 [ 1898.098663] ? find_get_entry+0x4cd/0x8a0 [ 1898.102802] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1898.107643] alloc_pages_current+0x193/0x2a0 [ 1898.112042] filemap_fault+0x146e/0x2180 [ 1898.116098] ext4_filemap_fault+0x84/0xb0 [ 1898.120246] __do_fault+0x10b/0x4b0 [ 1898.123869] ? do_raw_spin_unlock+0x171/0x230 [ 1898.128352] __handle_mm_fault+0x273b/0x41c0 [ 1898.132753] ? vm_insert_page+0x9c0/0x9c0 [ 1898.136916] ? check_preemption_disabled+0x41/0x280 [ 1898.141921] handle_mm_fault+0x436/0xb10 [ 1898.146166] __do_page_fault+0x68e/0xd60 [ 1898.150218] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1898.155399] ? spurious_fault+0x840/0x840 [ 1898.159622] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1898.164454] ? page_fault+0x8/0x30 [ 1898.167978] page_fault+0x1e/0x30 [ 1898.171429] RIP: 0033:0x43ed20 [ 1898.174651] Code: Bad RIP value. [ 1898.178000] RSP: 002b:000000c000759578 EFLAGS: 00010246 [ 1898.183353] RAX: 000000c00003e000 RBX: 000000c00003e000 RCX: 000000c000050800 [ 1898.190617] RDX: 000000c000759608 RSI: 0000000000005ab4 RDI: 0000000000000001 [ 1898.197886] RBP: 000000c0007595a0 R08: 0000000000000000 R09: 0000000000000000 [ 1898.205582] R10: 0000000001000004 R11: 0000000000000202 R12: 000000c000759638 [ 1898.212852] R13: 0000000000000000 R14: 000000c0000011e0 R15: 0000000000000000 [ 1898.225415] Mem-Info: [ 1898.228532] active_anon:16734 inactive_anon:41314 isolated_anon:0 [ 1898.228532] active_file:14 inactive_file:45 isolated_file:0 [ 1898.228532] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1898.228532] slab_reclaimable:14318 slab_unreclaimable:121024 [ 1898.228532] mapped:15020 shmem:42076 pagetables:549 bounce:0 [ 1898.228532] free:26728 free_pcp:755 free_cma:0 [ 1898.263345] Node 0 active_anon:63740kB inactive_anon:48456kB active_file:20kB inactive_file:332kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:29772kB dirty:0kB writeback:0kB shmem:50652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1898.294338] Node 1 active_anon:3196kB inactive_anon:116800kB active_file:36kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30308kB dirty:0kB writeback:0kB shmem:117652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1898.322920] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1898.402627] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1898.434337] Node 0 DMA32 free:36772kB min:35996kB low:44992kB high:53988kB active_anon:63740kB inactive_anon:48456kB active_file:1128kB inactive_file:952kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7360kB pagetables:1844kB bounce:0kB free_pcp:816kB local_pcp:0kB free_cma:0kB [ 1898.512026] lowmem_reserve[]: 0 0 1 1 1 [ 1898.516266] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1898.572020] lowmem_reserve[]: 0 0 0 0 0 [ 1898.576039] Node 1 Normal free:53836kB min:53876kB low:67344kB high:80812kB active_anon:3196kB inactive_anon:116800kB active_file:36kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:480kB pagetables:352kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1898.606642] lowmem_reserve[]: 0 0 0 0 0 [ 1898.610646] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 1898.624269] Node 0 DMA32: 449*4kB (UME) 206*8kB (UME) 110*16kB (ME) 27*32kB (UME) 9*64kB (UM) 21*128kB (UM) 2*256kB (UM) 1*512kB (M) 17*1024kB (UM) 4*2048kB (UM) 0*4096kB = 35956kB [ 1898.641118] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1898.652442] Node 1 Normal: 358*4kB (UME) 292*8kB (UME) 246*16kB (ME) 141*32kB (UME) 36*64kB (UME) 17*128kB (UM) 4*256kB (M) 4*512kB (UM) 4*1024kB (ME) 3*2048kB (UM) 6*4096kB (U) = 54584kB [ 1898.717827] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1898.761836] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1898.818033] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1898.901999] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1898.910606] 42122 total pagecache pages [ 1898.987764] 0 pages in swap cache [ 1898.991247] Swap cache stats: add 0, delete 0, find 0/0 [ 1899.041234] Free swap = 0kB [ 1899.077718] Total swap = 0kB [ 1899.080760] 2097051 pages RAM [ 1899.119325] 0 pages HighMem/MovableOnly [ 1899.181982] 369649 pages reserved [ 1899.185460] 0 pages cma reserved [ 1899.188832] Unreclaimable slab info: [ 1899.242021] Name Used Total [ 1899.247602] pid_2 47KB 84KB [ 1899.332047] batadv_tl_cache 4KB 16KB [ 1899.337471] TIPC 10KB 30KB [ 1899.409041] SCTPv6 14KB 37KB [ 1899.458335] SCTP 27KB 27KB [ 1899.482014] DCCPv6 17KB 37KB [ 1899.487418] DCCP 16KB 35KB [ 1899.572019] L2TP/IPv6 63KB 71KB [ 1899.577450] RXRPC 11KB 26KB [ 1899.646680] rxrpc_call_jar 78KB 110KB [ 1899.679240] bridge_fdb_cache 9KB 27KB [ 1899.722015] fib6_nodes 157KB 264KB [ 1899.727413] ip6_dst_cache 135KB 506KB [ 1899.822163] RAWv6 70KB 101KB [ 1899.827570] UDPv6 33KB 45KB [ 1899.845502] TCPv6 21KB 24KB [ 1899.858049] nf_conntrack 5KB 11KB [ 1899.863613] t10_alua_lu_gp_cache 0KB 3KB [ 1899.869268] sd_ext_cdb 0KB 7KB [ 1899.874909] scsi_sense_cache 1056KB 1060KB [ 1899.880304] virtio_scsi_cmd 16KB 16KB [ 1899.885719] sgpool-128 8KB 8KB [ 1899.891106] sgpool-64 4KB 12KB [ 1899.896572] sgpool-32 2KB 15KB [ 1899.901995] sgpool-16 1KB 7KB [ 1899.907385] sgpool-8 0KB 7KB [ 1899.912838] mqueue_inode_cache 10KB 30KB [ 1899.918292] bio_post_read_ctx 14KB 15KB [ 1899.925803] bio-2 14KB 15KB [ 1899.931179] jfs_mp 7KB 7KB [ 1899.941592] cifs_small_rq 15KB 16KB [ 1899.947004] cifs_request 67KB 67KB [ 1899.957402] cifs_mpx_ids 0KB 7KB [ 1899.994434] nfs_commit_data 3KB 14KB [ 1899.999822] nfs_write_data 34KB 44KB [ 1900.005274] ext4_system_zone 1KB 7KB [ 1900.010653] bio-1 1KB 7KB [ 1900.016179] pid_namespace 2KB 11KB [ 1900.021551] rpc_buffers 17KB 25KB [ 1900.029070] rpc_tasks 2KB 7KB [ 1900.034562] UNIX 414KB 495KB [ 1900.039932] tcp_bind_bucket 1KB 4KB [ 1900.045357] ip_fib_trie 23KB 47KB [ 1900.050716] ip_fib_alias 112KB 189KB [ 1900.056182] ip_dst_cache 4KB 16KB [ 1900.061546] RAW 42KB 60KB [ 1900.067055] UDP 50KB 74KB [ 1900.072605] TCP 8KB 11KB [ 1900.078004] hugetlbfs_inode_cache 3KB 15KB [ 1900.084821] fscache_cookie_jar 1KB 11KB [ 1900.090357] eventpoll_pwq 22KB 67KB [ 1900.096224] eventpoll_epi 40KB 63KB [ 1900.101594] inotify_inode_mark 17KB 31KB [ 1900.107202] request_queue 199KB 199KB [ 1900.112993] blkdev_requests 1KB 3KB [ 1900.118361] blkdev_ioc 31KB 38KB [ 1900.123814] bio-0 1807KB 1811KB [ 1900.131248] biovec-max 1765KB 1790KB [ 1900.136713] biovec-64 1653KB 1661KB [ 1900.142140] biovec-16 154KB 157KB [ 1900.147510] bio_integrity_payload 1KB 8KB [ 1900.153329] khugepaged_mm_slot 9KB 31KB [ 1900.158786] uid_cache 0KB 4KB [ 1900.165131] dmaengine-unmap-2 0KB 3KB [ 1900.170508] skbuff_fclone_cache 85KB 108KB [ 1900.176182] skbuff_head_cache 8428KB 8430KB [ 1900.181553] configfs_dir_cache 3KB 7KB [ 1900.187072] file_lock_cache 73KB 95KB [ 1900.192672] file_lock_ctx 9KB 11KB [ 1900.198032] fsnotify_mark_connector 9KB 23KB [ 1900.205084] net_namespace 52KB 52KB [ 1900.210464] shmem_inode_cache 8145KB 8248KB [ 1900.216310] task_delay_info 138KB 379KB [ 1900.221675] taskstats 67KB 91KB [ 1900.228832] proc_dir_entry 694KB 866KB [ 1900.234691] pde_opener 6KB 54KB [ 1900.240052] seq_file 297KB 417KB [ 1900.245525] sigqueue 50KB 66KB [ 1900.250978] kernfs_node_cache 18166KB 18246KB [ 1900.256838] mnt_cache 173KB 208KB [ 1900.262273] filp 6849KB 7920KB [ 1900.267632] names_cache 141746KB 141805KB [ 1900.273054] iint_cache 39KB 51KB [ 1900.278470] key_jar 4KB 7KB [ 1900.283911] uts_namespace 2KB 3KB [ 1900.289286] nsproxy 1KB 7KB [ 1900.294717] vm_area_struct 3170KB 4033KB [ 1900.300078] mm_struct 416KB 689KB [ 1900.305483] fs_cache 80KB 320KB [ 1900.310857] files_cache 321KB 660KB [ 1900.316309] signal_cache 750KB 1602KB [ 1900.321676] sighand_cache 552KB 631KB [ 1900.336415] task_struct 4797KB 4797KB [ 1900.344680] cred_jar 1894KB 3000KB [ 1900.350076] anon_vma_chain 994KB 1547KB [ 1900.361040] anon_vma 122KB 327KB [ 1900.366484] pid 52KB 228KB [ 1900.371855] Acpi-Operand 156KB 202KB [ 1900.380529] Acpi-ParseExt 9KB 11KB [ 1900.385971] Acpi-Parse 41KB 47KB [ 1900.391335] Acpi-State 52KB 63KB [ 1900.396902] Acpi-Namespace 20KB 27KB [ 1900.409877] numa_policy 0KB 3KB [ 1900.415419] debug_objects_cache 1516KB 1968KB [ 1900.421044] trace_event_file 297KB 298KB [ 1900.429537] ftrace_event_field 398KB 401KB [ 1900.435163] pool_workqueue 121KB 156KB [ 1900.440579] page->ptl 488KB 1035KB [ 1900.446039] kmalloc-2097152 2050KB 2050KB [ 1900.451407] kmalloc-524288 2056KB 2056KB [ 1900.456852] kmalloc-262144 1290KB 1290KB [ 1900.462616] kmalloc-131072 650KB 650KB [ 1900.468255] kmalloc-65536 1848KB 1914KB [ 1900.474175] kmalloc-32768 1650KB 1716KB [ 1900.479552] kmalloc-16384 1039KB 1056KB [ 1900.485722] kmalloc-8192 3960KB 4001KB [ 1900.491096] kmalloc-4096 17714KB 17714KB [ 1900.512340] kmalloc-2048 10497KB 13821KB [ 1900.517738] kmalloc-1024 9167KB 13096KB [ 1900.531767] kmalloc-512 17467KB 17467KB [ 1900.539218] kmalloc-256 4318KB 6247KB [ 1900.544637] kmalloc-128 871KB 1712KB [ 1900.550006] kmalloc-96 3816KB 4404KB [ 1900.555588] kmalloc-64 2444KB 3744KB [ 1900.561038] kmalloc-32 1904KB 2476KB [ 1900.566451] kmalloc-192 1515KB 2976KB [ 1900.572012] kmem_cache 177KB 183KB [ 1900.577467] Out of memory (oom_kill_allocating_task): Kill process 8102 (syz-fuzzer) score 0 or sacrifice child [ 1900.588188] Killed process 15900 (syz-executor.3) total-vm:48512kB, anon-rss:428kB, file-rss:0kB, shmem-rss:0kB [ 1900.599409] oom_reaper: reaped process 15900 (syz-executor.3), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 1901.238611] systemd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1901.311359] systemd cpuset=/ mems_allowed=0-1 [ 1901.351602] CPU: 0 PID: 1 Comm: systemd Not tainted 4.19.211-syzkaller #0 [ 1901.358558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1901.368024] Call Trace: [ 1901.370627] dump_stack+0x1fc/0x2ef [ 1901.374275] dump_header+0x15d/0xc3f [ 1901.378004] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1901.383125] ? ___ratelimit+0x319/0x590 [ 1901.387120] oom_kill_process.cold+0x10/0x692 [ 1901.391813] ? oom_badness.part.0+0x135/0x6e0 [ 1901.396314] ? lock_downgrade+0x720/0x720 [ 1901.400577] ? check_preemption_disabled+0x41/0x280 [ 1901.405607] out_of_memory+0x34d/0x1390 [ 1901.409590] ? oom_killer_disable+0x270/0x270 [ 1901.414095] ? mutex_trylock+0x15f/0x1a0 [ 1901.418334] __alloc_pages_nodemask+0x23a2/0x2890 [ 1901.423193] ? find_get_entry+0x4cd/0x8a0 [ 1901.427353] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1901.432225] alloc_pages_current+0x193/0x2a0 [ 1901.436824] filemap_fault+0x146e/0x2180 [ 1901.440906] ext4_filemap_fault+0x84/0xb0 [ 1901.445106] __do_fault+0x10b/0x4b0 [ 1901.448824] ? do_raw_spin_unlock+0x171/0x230 [ 1901.453331] __handle_mm_fault+0x273b/0x41c0 [ 1901.457756] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1901.462347] ? vm_insert_page+0x9c0/0x9c0 [ 1901.466499] ? debug_object_active_state+0x254/0x330 [ 1901.471616] ? check_preemption_disabled+0x41/0x280 [ 1901.476740] handle_mm_fault+0x436/0xb10 [ 1901.480827] __do_page_fault+0x68e/0xd60 [ 1901.484900] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1901.489920] ? spurious_fault+0x840/0x840 [ 1901.494075] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1901.498927] ? page_fault+0x8/0x30 [ 1901.502476] page_fault+0x1e/0x30 [ 1901.505933] RIP: 0033:0x7f8068bea9d0 [ 1901.509647] Code: Bad RIP value. [ 1901.513018] RSP: 002b:00007fff134880a8 EFLAGS: 00010246 [ 1901.518381] RAX: 00007f8068f0c5c0 RBX: 00007fff134880e0 RCX: 0000000000000000 [ 1901.525657] RDX: 00007fff13488337 RSI: 00007fff13488320 RDI: 00007fff134880e0 [ 1901.533123] RBP: 00007fff13488337 R08: 0000000000000000 R09: 00005630393f0400 [ 1901.540397] R10: 00007f806a688500 R11: 0000000000000206 R12: 00007fff13488320 [ 1901.547842] R13: 00007fff13488320 R14: 00007fff13488218 R15: 0000000000000001 [ 1901.676557] Mem-Info: [ 1901.679025] active_anon:16672 inactive_anon:41314 isolated_anon:0 [ 1901.679025] active_file:37 inactive_file:0 isolated_file:0 [ 1901.679025] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1901.679025] slab_reclaimable:14309 slab_unreclaimable:120582 [ 1901.679025] mapped:15036 shmem:42076 pagetables:499 bounce:0 [ 1901.679025] free:25014 free_pcp:105 free_cma:0 [ 1901.880942] Node 0 active_anon:63616kB inactive_anon:48456kB active_file:20kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:29736kB dirty:0kB writeback:0kB shmem:50652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1901.919622] Node 1 active_anon:3072kB inactive_anon:116800kB active_file:124kB inactive_file:132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30420kB dirty:0kB writeback:0kB shmem:117652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1901.993389] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1902.117030] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1902.161844] Node 0 DMA32 free:35684kB min:35996kB low:44992kB high:53988kB active_anon:63616kB inactive_anon:48456kB active_file:20kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7328kB pagetables:1740kB bounce:0kB free_pcp:228kB local_pcp:228kB free_cma:0kB [ 1902.356156] lowmem_reserve[]: 0 0 1 1 1 [ 1902.360189] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1902.568674] lowmem_reserve[]: 0 0 0 0 0 [ 1902.601834] Node 1 Normal free:53356kB min:53876kB low:67344kB high:80812kB active_anon:3072kB inactive_anon:116800kB active_file:100kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1902.834275] lowmem_reserve[]: 0 0 0 0 0 [ 1902.838285] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB [ 1902.957969] Node 0 DMA32: 820*4kB (ME) 210*8kB (ME) 110*16kB (ME) 28*32kB (UME) 8*64kB (M) 6*128kB (UM) 2*256kB (UM) 1*512kB (M) 17*1024kB (UM) 4*2048kB (UM) 0*4096kB = 35520kB [ 1903.049285] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1903.139128] Node 1 Normal: 358*4kB (ME) 288*8kB (ME) 246*16kB (ME) 135*32kB (UME) 36*64kB (ME) 15*128kB (UM) 4*256kB (M) 4*512kB (UM) 4*1024kB (ME) 3*2048kB (UM) 6*4096kB (U) = 54104kB [ 1903.270359] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1903.331818] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1903.340541] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1903.481167] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1903.527134] 42109 total pagecache pages [ 1903.531151] 0 pages in swap cache [ 1903.572418] Swap cache stats: add 0, delete 0, find 0/0 [ 1903.577837] Free swap = 0kB [ 1903.580867] Total swap = 0kB [ 1903.641218] 2097051 pages RAM [ 1903.661206] 0 pages HighMem/MovableOnly [ 1903.690154] 369649 pages reserved [ 1903.711814] 0 pages cma reserved [ 1903.715238] Unreclaimable slab info: [ 1903.719041] Name Used Total [ 1903.767679] pid_2 47KB 84KB [ 1903.825104] batadv_tl_cache 4KB 16KB [ 1903.830682] TIPC 10KB 30KB [ 1903.911524] SCTPv6 14KB 37KB [ 1903.945321] SCTP 27KB 27KB [ 1903.950731] DCCPv6 17KB 37KB [ 1904.024402] DCCP 16KB 35KB [ 1904.029941] L2TP/IPv6 63KB 71KB [ 1904.098560] RXRPC 11KB 26KB [ 1904.128635] rxrpc_call_jar 78KB 110KB [ 1904.167334] bridge_fdb_cache 9KB 27KB [ 1904.194903] fib6_nodes 157KB 264KB [ 1904.200297] ip6_dst_cache 131KB 506KB [ 1904.273423] RAWv6 70KB 101KB [ 1904.278834] UDPv6 33KB 45KB [ 1904.347912] TCPv6 21KB 24KB [ 1904.385417] nf_conntrack 5KB 11KB [ 1904.390871] t10_alua_lu_gp_cache 0KB 3KB [ 1904.470758] sd_ext_cdb 0KB 7KB [ 1904.506582] scsi_sense_cache 1056KB 1060KB [ 1904.548724] virtio_scsi_cmd 16KB 16KB [ 1904.613053] sgpool-128 8KB 8KB [ 1904.618465] sgpool-64 4KB 12KB [ 1904.685278] sgpool-32 2KB 15KB [ 1904.690690] sgpool-16 1KB 7KB [ 1904.755298] sgpool-8 0KB 7KB [ 1904.760820] mqueue_inode_cache 10KB 30KB [ 1904.839503] bio_post_read_ctx 14KB 15KB [ 1904.884792] bio-2 14KB 15KB [ 1904.890192] jfs_mp 7KB 7KB [ 1904.952169] cifs_small_rq 15KB 16KB [ 1904.957578] cifs_request 67KB 67KB [ 1905.017638] cifs_mpx_ids 0KB 7KB [ 1905.058439] nfs_commit_data 3KB 14KB [ 1905.092359] nfs_write_data 34KB 44KB [ 1905.097793] ext4_system_zone 1KB 7KB [ 1905.151092] bio-1 1KB 7KB [ 1905.178005] pid_namespace 2KB 11KB [ 1905.210356] rpc_buffers 17KB 25KB [ 1905.259328] rpc_tasks 2KB 7KB [ 1905.300335] UNIX 412KB 495KB [ 1905.336702] tcp_bind_bucket 1KB 4KB [ 1905.387641] ip_fib_trie 23KB 47KB [ 1905.418783] ip_fib_alias 112KB 189KB [ 1905.467412] ip_dst_cache 4KB 16KB [ 1905.498146] RAW 42KB 60KB [ 1905.539858] UDP 50KB 74KB [ 1905.578564] TCP 8KB 11KB [ 1905.615305] hugetlbfs_inode_cache 3KB 15KB [ 1905.621048] fscache_cookie_jar 1KB 11KB [ 1905.701988] eventpoll_pwq 21KB 67KB [ 1905.707392] eventpoll_epi 40KB 63KB [ 1905.793318] inotify_inode_mark 17KB 31KB [ 1905.828323] request_queue 199KB 199KB [ 1905.852018] blkdev_requests 1KB 3KB [ 1905.869180] blkdev_ioc 29KB 38KB [ 1905.902889] bio-0 1755KB 1758KB [ 1905.908387] biovec-max 1773KB 1790KB [ 1906.005749] biovec-64 1688KB 1693KB [ 1906.011142] biovec-16 154KB 157KB [ 1906.084320] bio_integrity_payload 1KB 8KB [ 1906.090070] khugepaged_mm_slot 9KB 31KB [ 1906.148000] uid_cache 0KB 4KB [ 1906.201132] dmaengine-unmap-2 0KB 3KB [ 1906.242320] skbuff_fclone_cache 83KB 108KB [ 1906.251189] skbuff_head_cache 8940KB 8940KB [ 1906.298563] configfs_dir_cache 3KB 7KB [ 1906.340948] file_lock_cache 73KB 95KB [ 1906.389759] file_lock_ctx 9KB 11KB [ 1906.425356] fsnotify_mark_connector 9KB 23KB [ 1906.480551] net_namespace 52KB 52KB [ 1906.517966] shmem_inode_cache 8144KB 8248KB [ 1906.560089] task_delay_info 137KB 379KB [ 1906.591528] taskstats 66KB 91KB [ 1906.641158] proc_dir_entry 694KB 866KB [ 1906.685870] pde_opener 5KB 54KB [ 1906.691277] seq_file 288KB 417KB [ 1906.755539] sigqueue 45KB 66KB [ 1906.761064] kernfs_node_cache 18116KB 18242KB [ 1906.838161] mnt_cache 173KB 208KB [ 1906.884938] filp 6764KB 7916KB [ 1906.890343] names_cache 140360KB 140403KB [ 1906.960930] iint_cache 39KB 51KB [ 1906.996442] key_jar 4KB 7KB [ 1907.032893] uts_namespace 2KB 3KB [ 1907.038299] nsproxy 1KB 7KB [ 1907.125131] vm_area_struct 3143KB 4033KB [ 1907.130656] mm_struct 414KB 689KB [ 1907.197568] fs_cache 84KB 320KB [ 1907.233140] files_cache 346KB 660KB [ 1907.238540] signal_cache 747KB 1602KB [ 1907.318388] sighand_cache 578KB 631KB [ 1907.366986] task_struct 4797KB 4797KB [ 1907.409382] cred_jar 1864KB 3000KB [ 1907.446498] anon_vma_chain 986KB 1547KB [ 1907.490619] anon_vma 111KB 327KB [ 1907.529852] pid 49KB 228KB [ 1907.570422] Acpi-Operand 156KB 202KB [ 1907.611374] Acpi-ParseExt 9KB 11KB [ 1907.650887] Acpi-Parse 41KB 47KB [ 1907.702707] Acpi-State 52KB 63KB [ 1907.708125] Acpi-Namespace 20KB 27KB [ 1907.762007] numa_policy 0KB 3KB [ 1907.767409] debug_objects_cache 1516KB 1968KB [ 1907.834221] trace_event_file 297KB 298KB [ 1907.839765] ftrace_event_field 398KB 401KB [ 1907.899789] pool_workqueue 121KB 156KB [ 1907.936663] page->ptl 483KB 1035KB [ 1907.965498] kmalloc-2097152 2050KB 2050KB [ 1907.978075] kmalloc-524288 2056KB 2056KB [ 1908.011275] kmalloc-262144 1290KB 1290KB [ 1908.041486] kmalloc-131072 650KB 650KB [ 1908.070839] kmalloc-65536 1848KB 1914KB [ 1908.117215] kmalloc-32768 1650KB 1716KB [ 1908.139208] kmalloc-16384 1039KB 1056KB [ 1908.180996] kmalloc-8192 3960KB 4001KB [ 1908.211495] kmalloc-4096 17612KB 17663KB [ 1908.216967] kmalloc-2048 10493KB 13808KB [ 1908.281556] kmalloc-1024 9451KB 13096KB [ 1908.304835] kmalloc-512 18623KB 18626KB [ 1908.328739] kmalloc-256 4352KB 6247KB [ 1908.364224] kmalloc-128 871KB 1712KB [ 1908.369746] kmalloc-96 3906KB 4404KB [ 1908.439666] kmalloc-64 2444KB 3744KB [ 1908.487160] kmalloc-32 1931KB 2476KB [ 1908.523911] kmalloc-192 1509KB 2976KB [ 1908.529428] kmem_cache 177KB 183KB [ 1908.599344] Out of memory: Kill process 24887 (syz-executor.1) score 1002 or sacrifice child [ 1908.654141] Killed process 24894 (syz-executor.1) total-vm:60680kB, anon-rss:2544kB, file-rss:14340kB, shmem-rss:72kB [ 1908.725754] oom_reaper: reaped process 24894 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 1908.798221] oom_reaper: reaped process 24889 (syz-executor.0), now anon-rss:0kB, file-rss:13640kB, shmem-rss:0kB [ 1908.830738] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1908.866905] systemd-journal cpuset=/ mems_allowed=0-1 [ 1908.900727] CPU: 1 PID: 24818 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 1908.908733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1908.918101] Call Trace: [ 1908.920814] dump_stack+0x1fc/0x2ef [ 1908.924456] dump_header+0x15d/0xc3f [ 1908.928275] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1908.933489] ? ___ratelimit+0x319/0x590 [ 1908.937486] oom_kill_process.cold+0x10/0x692 [ 1908.942081] ? check_preemption_disabled+0x41/0x280 [ 1908.947109] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1908.952423] out_of_memory+0x1072/0x1390 [ 1908.956501] ? oom_killer_disable+0x270/0x270 [ 1908.961014] ? mutex_trylock+0x15f/0x1a0 [ 1908.965211] __alloc_pages_nodemask+0x23a2/0x2890 [ 1908.970063] ? find_get_entry+0x4cd/0x8a0 [ 1908.974230] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1908.979140] alloc_pages_current+0x193/0x2a0 [ 1908.983561] filemap_fault+0x146e/0x2180 [ 1908.987642] ext4_filemap_fault+0x84/0xb0 [ 1908.991795] __do_fault+0x10b/0x4b0 [ 1908.995435] __handle_mm_fault+0x273b/0x41c0 [ 1908.999885] ? vm_insert_page+0x9c0/0x9c0 [ 1909.004081] ? check_preemption_disabled+0x41/0x280 [ 1909.009113] handle_mm_fault+0x436/0xb10 [ 1909.013193] __do_page_fault+0x68e/0xd60 [ 1909.017377] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1909.022577] ? spurious_fault+0x840/0x840 [ 1909.026747] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1909.031602] ? page_fault+0x8/0x30 [ 1909.035159] page_fault+0x1e/0x30 [ 1909.038201] syz-executor.1: vmalloc: allocation failure, allocated 1678598144 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1909.038667] RIP: 0033:0x7f1b11f88b10 [ 1909.056268] Code: Bad RIP value. [ 1909.059635] RSP: 002b:00007fffdf862228 EFLAGS: 00010202 [ 1909.064999] RAX: 00007f1b120a5160 RBX: 000055da17185250 RCX: 000055da17185258 [ 1909.068741] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1909.072267] RDX: 000055da17185270 RSI: 0000000000000001 RDI: 000055da17185250 [ 1909.072274] RBP: 0000000000000000 R08: 0000000000000041 R09: 0000000000000018 [ 1909.072281] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 1909.072287] R13: 00000000fffffffe R14: 00007fffdf862530 R15: 000055da171888a0 [ 1909.124204] CPU: 0 PID: 24894 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1909.132121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1909.134260] Mem-Info: [ 1909.141495] Call Trace: [ 1909.141518] dump_stack+0x1fc/0x2ef [ 1909.141537] warn_alloc.cold+0x7b/0x18f [ 1909.141554] ? zone_watermark_ok_safe+0x260/0x260 [ 1909.141569] ? retint_kernel+0x2d/0x2d [ 1909.141599] __vmalloc_area_node+0x4fd/0x780 [ 1909.141619] ? __vmalloc_node_range+0x180/0x180 [ 1909.141633] ? _raw_spin_unlock+0x29/0x40 [ 1909.141647] ? __get_vm_area_node+0x2e2/0x3a0 [ 1909.141669] __vmalloc_node_range+0xed/0x180 [ 1909.141686] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1909.141702] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1909.141715] vmalloc_user+0x70/0xe0 [ 1909.141729] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1909.141744] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1909.141760] __vb2_queue_alloc+0x472/0xe60 [ 1909.141789] vb2_core_create_bufs+0x273/0x7e0 [ 1909.141804] ? __vb2_queue_free+0x870/0x870 [ 1909.141821] ? mutex_trylock+0x1a0/0x1a0 [ 1909.141837] ? __video_do_ioctl+0x632/0xcd0 [ 1909.141857] vb2_create_bufs+0x332/0x620 [ 1909.141875] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1909.141888] ? __video_do_ioctl+0x632/0xcd0 [ 1909.141902] ? mutex_trylock+0x1a0/0x1a0 [ 1909.141917] ? mark_held_locks+0xf0/0xf0 [ 1909.141939] vb2_ioctl_create_bufs+0x20d/0x360 [ 1909.141954] ? memset+0x20/0x40 [ 1909.141978] v4l_create_bufs+0xb2/0x160 [ 1909.141996] __video_do_ioctl+0x49a/0xcd0 [ 1909.142019] ? v4l_querycap+0x340/0x340 [ 1909.142041] ? __might_fault+0x192/0x1d0 [ 1909.147541] active_anon:15604 inactive_anon:41314 isolated_anon:0 [ 1909.147541] active_file:16 inactive_file:17 isolated_file:0 [ 1909.147541] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1909.147541] slab_reclaimable:14331 slab_unreclaimable:120720 [ 1909.147541] mapped:15011 shmem:42076 pagetables:497 bounce:0 [ 1909.147541] free:13875 free_pcp:183 free_cma:0 [ 1909.150648] ? v4l_querycap+0x340/0x340 [ 1909.154658] Node 0 active_anon:59352kB inactive_anon:48456kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:29736kB dirty:0kB writeback:0kB shmem:50652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1909.159446] video_usercopy+0x13f/0xfa0 [ 1909.163364] Node 1 active_anon:3064kB inactive_anon:116800kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30308kB dirty:0kB writeback:0kB shmem:117652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1909.167728] ? v4l_enumstd+0x60/0x60 [ 1909.172397] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1909.176522] ? do_futex+0x171/0x1880 [ 1909.180992] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1909.185393] ? mark_held_locks+0xf0/0xf0 [ 1909.185410] ? debug_check_no_obj_freed+0x201/0x490 [ 1909.185433] ? video_usercopy+0xfa0/0xfa0 [ 1909.189728] Node 0 DMA32 free:17908kB min:35996kB low:44992kB high:53988kB active_anon:59352kB inactive_anon:48456kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7328kB pagetables:1732kB bounce:0kB free_pcp:476kB local_pcp:0kB free_cma:0kB [ 1909.195108] v4l2_ioctl+0x147/0x1a0 [ 1909.195122] ? video_devdata+0xa0/0xa0 [ 1909.195139] do_vfs_ioctl+0xcdb/0x12e0 [ 1909.198743] lowmem_reserve[]: 0 0 1 1 1 [ 1909.203060] ? lock_downgrade+0x720/0x720 [ 1909.203074] ? check_preemption_disabled+0x41/0x280 [ 1909.203090] ? ioctl_preallocate+0x200/0x200 [ 1909.207213] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1909.211443] ? __fget+0x356/0x510 [ 1909.215978] lowmem_reserve[]: 0 0 0 0 0 [ 1909.220289] ? do_dup2+0x450/0x450 [ 1909.224370] Node 1 Normal free:26716kB min:53876kB low:67344kB high:80812kB active_anon:3064kB inactive_anon:116800kB active_file:48kB inactive_file:52kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:256kB bounce:0kB free_pcp:256kB local_pcp:0kB free_cma:0kB [ 1909.228675] ? __se_sys_futex+0x298/0x3b0 [ 1909.232749] lowmem_reserve[]: 0 0 0 0 0 [ 1909.237919] ksys_ioctl+0x9b/0xc0 [ 1909.237937] __x64_sys_ioctl+0x6f/0xb0 [ 1909.237950] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1909.237968] do_syscall_64+0xf9/0x620 [ 1909.237987] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1909.237999] RIP: 0033:0x7ff9055210f9 [ 1909.238014] Code: Bad RIP value. [ 1909.238021] RSP: 002b:00007ff903a93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1909.238036] RAX: ffffffffffffffda RBX: 00007ff905640f80 RCX: 00007ff9055210f9 [ 1909.238044] RDX: 0000000020000640 RSI: 00000000c100565c RDI: 0000000000000003 [ 1909.238052] RBP: 00007ff90557cae9 R08: 0000000000000000 R09: 0000000000000000 [ 1909.238059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1909.238068] R13: 00007ffefb208e4f R14: 00007ff903a93300 R15: 0000000000022000 [ 1909.251211] Mem-Info: [ 1909.281407] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 1909.321951] active_anon:15604 inactive_anon:41314 isolated_anon:0 [ 1909.321951] active_file:16 inactive_file:17 isolated_file:0 [ 1909.321951] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1909.321951] slab_reclaimable:14331 slab_unreclaimable:120720 [ 1909.321951] mapped:15011 shmem:42076 pagetables:497 bounce:0 [ 1909.321951] free:13812 free_pcp:245 free_cma:0 [ 1909.368434] Node 0 DMA32: 816*4kB (ME) 209*8kB (ME) 111*16kB (UME) 28*32kB (UME) 9*64kB (UM) 6*128kB (UM) 2*256kB (UM) 2*512kB (UM) 1*1024kB (M) 3*2048kB (M) 0*4096kB = 17656kB [ 1909.398956] Node 0 active_anon:59352kB inactive_anon:48456kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:29736kB dirty:0kB writeback:0kB shmem:50652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1909.422599] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1909.446270] Node 1 active_anon:3064kB inactive_anon:116800kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30308kB dirty:0kB writeback:0kB shmem:117652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1909.473775] Node 1 Normal: 359*4kB (UME) 288*8kB (ME) 246*16kB (ME) 129*32kB (UME) 37*64kB (UME) 14*128kB (UM) 4*256kB (M) 3*512kB (M) 4*1024kB (ME) 2*2048kB (M) 0*4096kB = 26716kB [ 1909.498358] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1909.529744] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1909.570823] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1909.590336] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1909.620119] Node 0 DMA32 free:17656kB min:35996kB low:44992kB high:53988kB active_anon:59352kB inactive_anon:48456kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7328kB pagetables:1732kB bounce:0kB free_pcp:712kB local_pcp:476kB free_cma:0kB [ 1909.657507] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1909.695929] lowmem_reserve[]: 0 0 1 1 1 [ 1909.723514] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1909.739438] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1909.807112] 42109 total pagecache pages [ 1909.820649] lowmem_reserve[]: 0 0 0 0 0 [ 1909.845788] 0 pages in swap cache [ 1909.872630] Node 1 Normal free:26716kB min:53876kB low:67344kB high:80812kB active_anon:3064kB inactive_anon:116800kB active_file:48kB inactive_file:52kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:256kB bounce:0kB free_pcp:256kB local_pcp:256kB free_cma:0kB [ 1909.897316] Swap cache stats: add 0, delete 0, find 0/0 [ 1909.920721] lowmem_reserve[]: 0 0 0 0 0 [ 1909.971338] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 1909.975131] Free swap = 0kB [ 1910.008166] Node 0 DMA32: 816*4kB (ME) 209*8kB (ME) 111*16kB (UME) 28*32kB (UME) 9*64kB (UM) 6*128kB (UM) 2*256kB (UM) 2*512kB (UM) 1*1024kB (M) 3*2048kB (M) 0*4096kB = 17656kB [ 1910.009037] Total swap = 0kB [ 1910.035660] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1910.046819] Node 1 Normal: 359*4kB (UME) 288*8kB (ME) 246*16kB (ME) 129*32kB (UME) 37*64kB (UME) 14*128kB (UM) 4*256kB (M) 3*512kB (M) 4*1024kB (ME) 2*2048kB (M) 0*4096kB = 26716kB [ 1910.049371] 2097051 pages RAM [ 1910.080226] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1910.088423] 0 pages HighMem/MovableOnly [ 1910.106529] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1910.116794] 369649 pages reserved [ 1910.120256] 0 pages cma reserved [ 1910.135233] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1910.145779] Unreclaimable slab info: [ 1910.149506] Name Used Total [ 1910.151232] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1910.180722] 42109 total pagecache pages [ 1910.185519] pid_2 47KB 84KB [ 1910.190973] batadv_tl_cache 4KB 16KB [ 1910.191222] 0 pages in swap cache [ 1910.216975] Swap cache stats: add 0, delete 0, find 0/0 [ 1910.222179] TIPC 10KB 30KB [ 1910.222425] Free swap = 0kB [ 1910.227733] SCTPv6 14KB 37KB [ 1910.230727] Total swap = 0kB [ 1910.253480] 2097051 pages RAM [ 1910.256607] 0 pages HighMem/MovableOnly [ 1910.260579] 369649 pages reserved [ 1910.263912] SCTP 27KB 27KB [ 1910.269427] DCCPv6 17KB 37KB [ 1910.270588] 0 pages cma reserved [ 1910.302953] DCCP 16KB 35KB [ 1910.308426] L2TP/IPv6 63KB 71KB [ 1910.336835] RXRPC 11KB 26KB [ 1910.362399] rxrpc_call_jar 78KB 110KB [ 1910.368485] bridge_fdb_cache 9KB 27KB [ 1910.398021] fib6_nodes 157KB 264KB [ 1910.403582] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1910.403630] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1910.440228] ip6_dst_cache 138KB 506KB [ 1910.446430] RAWv6 70KB 101KB [ 1910.471894] UDPv6 33KB 45KB [ 1910.477304] TCPv6 21KB 24KB [ 1910.509660] nf_conntrack 5KB 11KB [ 1910.530738] t10_alua_lu_gp_cache 0KB 3KB [ 1910.539913] sd_ext_cdb 0KB 7KB [ 1910.570058] scsi_sense_cache 1056KB 1060KB [ 1910.579115] virtio_scsi_cmd 16KB 16KB [ 1910.603480] sgpool-128 8KB 8KB [ 1910.608992] sgpool-64 4KB 12KB [ 1910.620868] sgpool-32 2KB 15KB [ 1910.650072] sgpool-16 1KB 7KB [ 1910.672850] sgpool-8 0KB 7KB [ 1910.678253] mqueue_inode_cache 10KB 30KB [ 1910.690073] bio_post_read_ctx 14KB 15KB [ 1910.715689] bio-2 14KB 15KB [ 1910.721089] jfs_mp 7KB 7KB [ 1910.740613] cifs_small_rq 15KB 16KB [ 1910.746069] cifs_request 67KB 67KB [ 1910.768438] cifs_mpx_ids 0KB 7KB [ 1910.777572] nfs_commit_data 3KB 14KB [ 1910.800093] nfs_write_data 34KB 44KB [ 1910.809140] ext4_system_zone 1KB 7KB [ 1910.837713] bio-1 1KB 7KB [ 1910.850708] pid_namespace 2KB 11KB [ 1910.859775] rpc_buffers 17KB 25KB [ 1910.885300] rpc_tasks 2KB 7KB [ 1910.890699] UNIX 412KB 495KB [ 1910.910206] tcp_bind_bucket 1KB 4KB [ 1910.915668] ip_fib_trie 23KB 47KB [ 1910.921124] ip_fib_alias 112KB 189KB [ 1910.946663] ip_dst_cache 4KB 16KB [ 1910.965863] RAW 42KB 60KB [ 1910.971258] UDP 50KB 74KB [ 1910.979930] TCP 8KB 11KB [ 1911.005989] hugetlbfs_inode_cache 3KB 15KB [ 1911.018330] fscache_cookie_jar 1KB 11KB [ 1911.040839] eventpoll_pwq 21KB 67KB [ 1911.049383] eventpoll_epi 40KB 63KB [ 1911.072383] inotify_inode_mark 17KB 31KB [ 1911.078013] request_queue 199KB 199KB [ 1911.089652] blkdev_requests 1KB 3KB [ 1911.112459] blkdev_ioc 29KB 38KB [ 1911.117864] bio-0 1753KB 1758KB [ 1911.139716] biovec-max 1773KB 1790KB [ 1911.165548] biovec-64 1684KB 1693KB [ 1911.170948] biovec-16 154KB 157KB [ 1911.177126] bio_integrity_payload 1KB 8KB [ 1911.200470] khugepaged_mm_slot 9KB 31KB [ 1911.206044] uid_cache 0KB 4KB [ 1911.228850] dmaengine-unmap-2 0KB 3KB [ 1911.234331] skbuff_fclone_cache 83KB 105KB [ 1911.239882] skbuff_head_cache 9288KB 9288KB [ 1911.265327] configfs_dir_cache 3KB 7KB [ 1911.270804] file_lock_cache 73KB 95KB [ 1911.290458] file_lock_ctx 9KB 11KB [ 1911.295915] fsnotify_mark_connector 9KB 23KB [ 1911.318661] net_namespace 52KB 52KB [ 1911.347959] shmem_inode_cache 8144KB 8248KB [ 1911.358043] task_delay_info 137KB 379KB [ 1911.370486] taskstats 66KB 91KB [ 1911.396527] proc_dir_entry 694KB 866KB [ 1911.401992] pde_opener 5KB 54KB [ 1911.407365] seq_file 284KB 417KB [ 1911.427051] sigqueue 44KB 66KB [ 1911.432624] kernfs_node_cache 18088KB 18242KB [ 1911.438025] mnt_cache 173KB 208KB [ 1911.460236] filp 6730KB 7912KB [ 1911.469394] names_cache 140305KB 140356KB [ 1911.497841] iint_cache 39KB 51KB [ 1911.510931] key_jar 4KB 7KB [ 1911.519691] uts_namespace 2KB 3KB [ 1911.545246] nsproxy 1KB 7KB [ 1911.550649] vm_area_struct 3126KB 4033KB [ 1911.570209] mm_struct 414KB 689KB [ 1911.575801] fs_cache 82KB 320KB [ 1911.581179] files_cache 336KB 660KB [ 1911.607025] signal_cache 747KB 1602KB [ 1911.626227] sighand_cache 566KB 631KB [ 1911.631770] task_struct 4797KB 4797KB [ 1911.637140] cred_jar 1834KB 3000KB [ 1911.659323] anon_vma_chain 976KB 1547KB [ 1911.668153] anon_vma 108KB 327KB [ 1911.691019] pid 49KB 228KB [ 1911.696493] Acpi-Operand 156KB 202KB [ 1911.719388] Acpi-ParseExt 9KB 11KB [ 1911.724847] Acpi-Parse 41KB 47KB [ 1911.730220] Acpi-State 52KB 63KB [ 1911.749425] Acpi-Namespace 20KB 27KB [ 1911.758409] numa_policy 0KB 3KB [ 1911.777176] debug_objects_cache 1516KB 1968KB [ 1911.786310] trace_event_file 297KB 298KB [ 1911.806088] ftrace_event_field 398KB 401KB [ 1911.811701] pool_workqueue 121KB 156KB [ 1911.817336] page->ptl 482KB 1035KB [ 1911.835874] kmalloc-2097152 2050KB 2050KB [ 1911.848395] kmalloc-524288 2056KB 2056KB [ 1911.860381] kmalloc-262144 1290KB 1290KB [ 1911.879704] kmalloc-131072 650KB 650KB [ 1911.888739] kmalloc-65536 1848KB 1914KB [ 1911.907972] kmalloc-32768 1650KB 1716KB [ 1911.913427] kmalloc-16384 1039KB 1056KB [ 1911.918804] kmalloc-8192 3960KB 4001KB [ 1911.937985] kmalloc-4096 17599KB 17658KB [ 1911.950438] kmalloc-2048 10491KB 13801KB [ 1911.969749] kmalloc-1024 9559KB 13096KB [ 1911.975300] kmalloc-512 18716KB 18716KB [ 1911.980859] kmalloc-256 4360KB 6247KB [ 1912.000183] kmalloc-128 866KB 1712KB [ 1912.005654] kmalloc-96 3913KB 4404KB [ 1912.011022] kmalloc-64 2452KB 3744KB [ 1912.030326] kmalloc-32 1942KB 2476KB [ 1912.035802] kmalloc-192 1502KB 2976KB [ 1912.041174] kmem_cache 177KB 183KB [ 1912.060180] Out of memory (oom_kill_allocating_task): Kill process 24818 (systemd-journal) score 0 or sacrifice child [ 1912.071194] Killed process 24818 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1644kB [ 1912.095995] oom_reaper: reaped process 24818 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1644kB [ 1912.129379] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1912.184042] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1912.190304] CPU: 1 PID: 8130 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 1912.197858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1912.207226] Call Trace: [ 1912.209833] dump_stack+0x1fc/0x2ef [ 1912.213483] dump_header+0x15d/0xc3f [ 1912.217232] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1912.222349] ? ___ratelimit+0x319/0x590 [ 1912.226338] oom_kill_process.cold+0x10/0x692 [ 1912.230845] ? check_preemption_disabled+0x41/0x280 [ 1912.235882] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1912.241178] out_of_memory+0x1072/0x1390 [ 1912.245264] ? oom_killer_disable+0x270/0x270 [ 1912.249782] ? mutex_trylock+0x15f/0x1a0 [ 1912.253867] __alloc_pages_nodemask+0x23a2/0x2890 [ 1912.258737] ? find_get_entry+0x4cd/0x8a0 [ 1912.262907] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1912.267830] alloc_pages_current+0x193/0x2a0 [ 1912.272254] filemap_fault+0x146e/0x2180 [ 1912.276334] ext4_filemap_fault+0x84/0xb0 [ 1912.280495] __do_fault+0x10b/0x4b0 [ 1912.284138] __handle_mm_fault+0x273b/0x41c0 [ 1912.288561] ? do_signal+0x49d/0x1670 [ 1912.292373] ? vm_insert_page+0x9c0/0x9c0 [ 1912.296543] ? check_preemption_disabled+0x41/0x280 [ 1912.301660] handle_mm_fault+0x436/0xb10 [ 1912.305742] __do_page_fault+0x68e/0xd60 [ 1912.309822] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1912.314850] ? spurious_fault+0x840/0x840 [ 1912.319232] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1912.324179] ? page_fault+0x8/0x30 [ 1912.327735] page_fault+0x1e/0x30 [ 1912.331200] RIP: 0033:0x435118 [ 1912.334413] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 48 83 ec 10 48 89 6c 24 08 48 8d 6c 24 08 e8 6d cb 01 00 48 85 c0 74 11 <80> 78 28 01 0f 94 c0 48 8b 6c 24 08 48 83 c4 10 c3 31 c0 48 8b 6c [ 1912.353689] RSP: 002b:000000c005c07908 EFLAGS: 00010206 [ 1912.359072] RAX: 0000000000f60848 RBX: 000000000117c740 RCX: 000000000117c740 [ 1912.366531] RDX: 0000000000197e10 RSI: 0000000000f0e320 RDI: 000000000000386f [ 1912.373848] RBP: 000000c005c07910 R08: 0000000000f0e320 R09: 000000000000044f [ 1912.381131] R10: 00000000004637c0 R11: 0000000000000202 R12: 000000c005c079a0 [ 1912.388416] R13: 0000000000000000 R14: 000000c0009c81a0 R15: 0000000000000000 [ 1912.403178] Mem-Info: [ 1912.405652] active_anon:15529 inactive_anon:41314 isolated_anon:0 [ 1912.405652] active_file:881 inactive_file:723 isolated_file:15 [ 1912.405652] unevictable:0 dirty:100 writeback:0 unstable:0 [ 1912.405652] slab_reclaimable:14316 slab_unreclaimable:119853 [ 1912.405652] mapped:15661 shmem:42076 pagetables:497 bounce:0 [ 1912.405652] free:69839 free_pcp:593 free_cma:0 [ 1912.441225] Node 0 active_anon:59252kB inactive_anon:48456kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:29736kB dirty:0kB writeback:0kB shmem:50652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1912.481089] Node 1 active_anon:2864kB inactive_anon:116800kB active_file:3808kB inactive_file:3812kB unevictable:0kB isolated(anon):0kB isolated(file):60kB mapped:33708kB dirty:400kB writeback:0kB shmem:117652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1912.512867] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1912.546935] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1912.561422] Node 0 DMA32 free:21972kB min:35996kB low:44992kB high:53988kB active_anon:59252kB inactive_anon:48456kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7328kB pagetables:1732kB bounce:0kB free_pcp:840kB local_pcp:372kB free_cma:0kB [ 1912.593896] lowmem_reserve[]: 0 0 1 1 1 [ 1912.599185] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1912.627494] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1912.633084] lowmem_reserve[]: 0 0 0 0 0 [ 1912.656260] Node 1 Normal free:385528kB min:53876kB low:67344kB high:80812kB active_anon:2828kB inactive_anon:116800kB active_file:4164kB inactive_file:6900kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:256kB bounce:0kB free_pcp:2680kB local_pcp:1172kB free_cma:0kB [ 1912.687232] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1912.707355] lowmem_reserve[]: 0 0 0 0 0 [ 1912.715155] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 1912.739481] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1912.748960] Node 0 DMA32: 761*4kB (ME) 749*8kB (UME) 143*16kB (UME) 32*32kB (UME) 9*64kB (UM) 7*128kB (UM) 1*256kB (M) 1*512kB (M) 2*1024kB (UM) 3*2048kB (M) 0*4096kB = 22780kB [ 1912.751100] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1912.779936] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1912.802075] systemd[1]: Stopped Journal Service. [ 1912.811511] Node 1 Normal: 58*4kB (UE) 8*8kB (E) 14*16kB (UE) 53*32kB (UME) 79*64kB (UME) 67*128kB (UM) 44*256kB (UM) 38*512kB (UM) 427*1024kB (UME) 2*2048kB (M) 0*4096kB = 487912kB [ 1912.837380] systemd[1]: Starting Journal Service... [ 1912.889002] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1912.924572] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1912.925404] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1912.948067] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1912.960372] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1912.991924] 45671 total pagecache pages [ 1912.996402] 0 pages in swap cache [ 1913.001674] Swap cache stats: add 0, delete 0, find 0/0 [ 1913.007048] Free swap = 0kB [ 1913.010061] Total swap = 0kB [ 1913.029619] systemd-journald[24939]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1913.037215] 2097051 pages RAM [ 1913.073061] 0 pages HighMem/MovableOnly [ 1913.077156] 369649 pages reserved [ 1913.080615] 0 pages cma reserved [ 1913.097405] Unreclaimable slab info: [ 1913.101147] Name Used Total [ 1913.120252] pid_2 47KB 84KB [ 1913.140522] batadv_tl_cache 4KB 16KB [ 1913.150568] TIPC 10KB 30KB [ 1913.156743] systemd-journald[24939]: /dev/kmsg buffer overrun, some messages lost. [ 1913.170822] SCTPv6 14KB 37KB [ 1913.180941] SCTP 27KB 27KB [ 1913.201207] DCCPv6 17KB 37KB [ 1913.210082] DCCP 16KB 35KB [ 1913.229049] L2TP/IPv6 63KB 71KB [ 1913.245962] RXRPC 11KB 26KB [ 1913.251433] rxrpc_call_jar 78KB 110KB [ 1913.263428] bridge_fdb_cache 9KB 27KB [ 1913.279068] fib6_nodes 157KB 264KB [ 1913.284555] ip6_dst_cache 138KB 506KB [ 1913.300120] RAWv6 70KB 101KB [ 1913.305705] UDPv6 33KB 45KB [ 1913.321388] TCPv6 21KB 24KB [ 1913.326884] nf_conntrack 5KB 11KB [ 1913.341415] t10_alua_lu_gp_cache 0KB 3KB [ 1913.352181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1913.358918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1913.371133] sd_ext_cdb 0KB 7KB [ 1913.376840] scsi_sense_cache 1056KB 1060KB [ 1913.382474] virtio_scsi_cmd 16KB 16KB [ 1913.387852] sgpool-128 8KB 8KB [ 1913.393357] sgpool-64 4KB 12KB [ 1913.398733] sgpool-32 2KB 15KB [ 1913.403785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1913.404262] sgpool-16 1KB 7KB [ 1913.410962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1913.416328] sgpool-8 0KB 7KB [ 1913.428363] mqueue_inode_cache 10KB 30KB [ 1913.448433] bio_post_read_ctx 14KB 15KB [ 1913.454101] bio-2 14KB 15KB [ 1913.455829] device bridge_slave_1 left promiscuous mode [ 1913.469679] jfs_mp 7KB 7KB [ 1913.475314] cifs_small_rq 15KB 16KB [ 1913.486504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1913.490903] cifs_request 67KB 67KB [ 1913.499126] cifs_mpx_ids 0KB 7KB [ 1913.505435] device bridge_slave_0 left promiscuous mode [ 1913.510979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1913.511731] nfs_commit_data 3KB 14KB [ 1913.531689] nfs_write_data 34KB 44KB [ 1913.541854] ext4_system_zone 1KB 7KB [ 1913.547714] device veth1_macvtap left promiscuous mode [ 1913.557619] bio-1 1KB 7KB [ 1913.563445] device veth0_macvtap left promiscuous mode [ 1913.567725] pid_namespace 2KB 11KB [ 1913.568913] device veth1_vlan left promiscuous mode [ 1913.577837] rpc_buffers 17KB 25KB [ 1913.598049] rpc_tasks 2KB 7KB [ 1913.603894] device veth0_vlan left promiscuous mode [ 1913.608191] UNIX 435KB 495KB [ 1913.618298] tcp_bind_bucket 1KB 4KB [ 1913.638558] ip_fib_trie 23KB 47KB [ 1913.644347] ip_fib_alias 112KB 189KB [ 1913.659917] ip_dst_cache 4KB 16KB [ 1913.666238] RAW 42KB 60KB [ 1913.681630] UDP 50KB 74KB [ 1913.687149] TCP 8KB 11KB [ 1913.707368] hugetlbfs_inode_cache 3KB 15KB [ 1913.713502] fscache_cookie_jar 1KB 11KB [ 1913.721844] eventpoll_pwq 35KB 67KB [ 1913.727223] eventpoll_epi 63KB 63KB [ 1913.751331] inotify_inode_mark 17KB 31KB [ 1913.756890] request_queue 199KB 199KB [ 1913.767022] blkdev_requests 1KB 3KB [ 1913.787232] blkdev_ioc 29KB 38KB [ 1913.793028] bio-0 1834KB 1837KB [ 1913.801933] biovec-max 1773KB 1790KB [ 1913.807330] biovec-64 1771KB 1771KB [ 1913.831317] biovec-16 161KB 165KB [ 1913.836818] bio_integrity_payload 1KB 8KB [ 1913.857040] khugepaged_mm_slot 9KB 31KB [ 1913.862958] uid_cache 0KB 4KB [ 1913.872380] dmaengine-unmap-2 0KB 3KB [ 1913.877781] skbuff_fclone_cache 83KB 105KB [ 1913.901316] skbuff_head_cache 9159KB 9345KB [ 1913.906777] configfs_dir_cache 3KB 7KB [ 1913.916878] file_lock_cache 72KB 95KB [ 1913.937091] file_lock_ctx 9KB 11KB [ 1913.942959] fsnotify_mark_connector 9KB 23KB [ 1913.959046] net_namespace 52KB 52KB [ 1913.965364] shmem_inode_cache 8141KB 8248KB [ 1913.980934] task_delay_info 147KB 379KB [ 1913.991043] taskstats 65KB 91KB [ 1914.001143] proc_dir_entry 694KB 866KB [ 1914.011316] pde_opener 12KB 54KB [ 1914.016705] seq_file 299KB 417KB [ 1914.041308] sigqueue 57KB 66KB [ 1914.046760] kernfs_node_cache 17987KB 18191KB [ 1914.056871] mnt_cache 173KB 208KB [ 1914.077082] filp 7050KB 7912KB [ 1914.082874] names_cache 141261KB 141261KB [ 1914.091727] iint_cache 48KB 51KB [ 1914.097108] key_jar 4KB 7KB [ 1914.121315] uts_namespace 2KB 3KB [ 1914.121323] nsproxy 1KB 7KB [ 1914.121332] vm_area_struct 2952KB 4014KB [ 1914.121342] mm_struct 433KB 689KB [ 1914.121352] fs_cache 82KB 320KB [ 1914.121362] files_cache 336KB 660KB [ 1914.121372] signal_cache 764KB 1602KB [ 1914.121381] sighand_cache 566KB 631KB [ 1914.121391] task_struct 4090KB 4147KB [ 1914.121401] cred_jar 2110KB 3000KB [ 1914.121411] anon_vma_chain 996KB 1547KB [ 1914.121420] anon_vma 149KB 327KB [ 1914.121430] pid 49KB 228KB [ 1914.121440] Acpi-Operand 156KB 202KB [ 1914.261984] Acpi-ParseExt 9KB 11KB [ 1914.267388] Acpi-Parse 41KB 47KB [ 1914.291302] Acpi-State 52KB 63KB [ 1914.296852] Acpi-Namespace 20KB 27KB [ 1914.306957] numa_policy 0KB 3KB [ 1914.327189] debug_objects_cache 1516KB 1968KB [ 1914.333305] trace_event_file 297KB 298KB [ 1914.341746] ftrace_event_field 398KB 401KB [ 1914.347216] pool_workqueue 121KB 156KB [ 1914.371308] page->ptl 435KB 1031KB [ 1914.376814] kmalloc-2097152 2050KB 2050KB [ 1914.386886] kmalloc-524288 2056KB 2056KB [ 1914.407120] kmalloc-262144 1290KB 1290KB [ 1914.412902] kmalloc-131072 650KB 650KB [ 1914.421707] kmalloc-65536 1848KB 1914KB [ 1914.427111] kmalloc-32768 1650KB 1716KB [ 1914.451461] kmalloc-16384 1072KB 1072KB [ 1914.456926] kmalloc-8192 3960KB 4001KB [ 1914.467038] kmalloc-4096 16405KB 16443KB [ 1914.487247] kmalloc-2048 10491KB 13801KB [ 1914.493157] kmalloc-1024 9302KB 13033KB [ 1914.501692] kmalloc-512 17685KB 18727KB [ 1914.507073] kmalloc-256 4369KB 6247KB [ 1914.531342] kmalloc-128 866KB 1712KB [ 1914.536818] kmalloc-96 3966KB 4404KB [ 1914.546918] kmalloc-64 2332KB 3744KB [ 1914.567124] kmalloc-32 1856KB 2476KB [ 1914.572881] kmalloc-192 1517KB 2976KB [ 1914.581763] kmem_cache 177KB 183KB [ 1914.587141] Out of memory (oom_kill_allocating_task): Kill process 8130 (syz-fuzzer) score 0 or sacrifice child [ 1914.617917] Killed process 21676 (syz-executor.0) total-vm:48512kB, anon-rss:424kB, file-rss:0kB, shmem-rss:0kB [ 1914.836521] systemd[1]: Started Journal Service. [ 1915.523803] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.529439] ieee802154 phy1 wpan1: encryption failed: -22 07:13:02 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 07:13:02 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b", 0x10) 07:13:02 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x2, @sliced={0x81, [0x8001, 0x7, 0x5, 0xff, 0x7fff, 0x2bc3, 0x401, 0xbd, 0xffff, 0x4b6, 0x2, 0xfff, 0xfff, 0x4, 0x167, 0x0, 0x5, 0xffff, 0xa249, 0xffff, 0x101, 0x7, 0x0, 0x100, 0x2, 0x1, 0xc000, 0x1, 0x1, 0x9, 0x3, 0xb, 0xbdc, 0x2d, 0x9, 0xffff, 0x9, 0x2, 0x5, 0xff2a, 0x5, 0x3, 0x8, 0x0, 0x2, 0x7], 0x1f}}) 07:13:02 executing program 3: syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0xfffffffffffffffc, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0xfff, 0xba79, 0x1, {0x2, @sliced={0x5, [0x3, 0x9, 0x8, 0xff4e, 0x0, 0x6, 0xffff, 0x1, 0x6, 0xf088, 0x8001, 0x1, 0x2, 0x8000, 0x4, 0xff, 0x2, 0x8, 0x8, 0x129, 0x81, 0x6, 0x524, 0x9, 0x4, 0x4, 0x1f, 0x0, 0x419, 0x30b8, 0x4c46, 0x6, 0x9, 0x3, 0x8000, 0x3f, 0x8, 0x200, 0x5, 0x96b, 0x7, 0xbe, 0x1, 0xd52, 0x5, 0x5, 0x1, 0x1f], 0x20}}, 0x8000}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x101, 0x2) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x100, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000300)) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x8, @sdr={0xf6671709, 0x7948dfc1}}) 07:13:02 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1, 0x7f], 0xd3e}}, 0x7ff}) 07:13:02 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0, 0x8, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x2, 0x200, 0x6, 0xe34, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x2, 0x2, 0x3, 0x20, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x48) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x18}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000280)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2}, @exit, @alu={0x4, 0x1, 0xb, 0x2, 0xb, 0xb0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f00000002c0)='GPL\x00', 0xfffffffc, 0xf8, &(0x7f0000000300)=""/248, 0x40f00, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x5, 0x0, 0x1d9c4d4c}, 0x10, r1, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0x1, r3, r4, 0x1]}, 0x80) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001c40)={&(0x7f0000000c00)={0x1010, 0x3ed, 0x8, 0x70bd2b, 0x25dfdbfc, "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", ["", "", "", ""]}, 0x1010}}, 0x4000004) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x1, @pix_mp={0xde4, 0x9, 0x31303553, 0x3, 0x8, [{0x4}, {0x0, 0x9}, {0xffa, 0x8001}, {0x4, 0x2}, {0x5}, {0x1, 0xffffffff}, {0x6, 0x1}, {0x4, 0x3ff}], 0x7f, 0xf7, 0x1, 0x0, 0x1}}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@multiplanar_mmap={0x7601, 0x3, 0x4, 0x4, 0x7, {r5, r6/1000+10000}, {0x2, 0x0, 0x1, 0x1, 0x7, 0x81, "b5432cc9"}, 0x5, 0x1, {&(0x7f0000000180)=[{0x2, 0x43, {0x8}, 0x4}, {0x8, 0xd421, {0x6}, 0x1}]}, 0x6}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b80)={r3, &(0x7f0000000980)="1a398f76eb8ad30436f2c8bfa16f9d828ef95bbeda8daf7f7665d0c54d7e981f4c1bdf16b4c6ff4b5210afe69d07af02aa0f5e3c0282a4023a669028851f05af51f34dc7c9d76b3efeaac65b6f07101c7cb03905dcd5800ba1c22015653135cc2ba95c3579e05a69ae07b6d0872297bbc28a0282050623fac9327936856ef2892d7d4d879c694edce3230d1bbb95cec085e3ddec558ec1baafe8ff39d71436f4c932a31e46339d699a420b3150bef1004caba945ff277c0cafeb71d2743af6af5c107d2229cbc328cee48bc57141b4", &(0x7f0000000a80)=""/244}, 0x20) [ 1922.842418] device hsr_slave_1 left promiscuous mode [ 1922.858320] device hsr_slave_0 left promiscuous mode [ 1922.877480] team0 (unregistering): Port device team_slave_1 removed [ 1922.890217] team0 (unregistering): Port device team_slave_0 removed [ 1922.902959] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1922.917630] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1922.956622] bond0 (unregistering): Released all slaves [ 1923.281539] Bluetooth: hci1: command 0x0409 tx timeout [ 1923.289791] IPVS: ftp: loaded support on port[0] = 21 [ 1923.305465] IPVS: ftp: loaded support on port[0] = 21 [ 1923.317669] IPVS: ftp: loaded support on port[0] = 21 [ 1923.325852] IPVS: ftp: loaded support on port[0] = 21 [ 1923.332246] IPVS: ftp: loaded support on port[0] = 21 [ 1923.354021] syz-executor.0 (21677) used greatest stack depth: 22592 bytes left [ 1923.440924] Bluetooth: hci4: command 0x0409 tx timeout [ 1923.446456] Bluetooth: hci3: command 0x0409 tx timeout [ 1923.454677] Bluetooth: hci2: command 0x0409 tx timeout [ 1923.521011] Bluetooth: hci5: command 0x0409 tx timeout [ 1924.010308] chnl_net:caif_netlink_parms(): no params data found [ 1924.074999] chnl_net:caif_netlink_parms(): no params data found [ 1924.097705] chnl_net:caif_netlink_parms(): no params data found [ 1924.120550] chnl_net:caif_netlink_parms(): no params data found [ 1924.203997] chnl_net:caif_netlink_parms(): no params data found [ 1924.377555] bridge0: port 1(bridge_slave_0) entered blocking state [ 1924.391636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1924.411004] device bridge_slave_0 entered promiscuous mode [ 1924.428924] bridge0: port 1(bridge_slave_0) entered blocking state [ 1924.436492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1924.453481] device bridge_slave_0 entered promiscuous mode [ 1924.502322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1924.508720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1924.526710] device bridge_slave_1 entered promiscuous mode [ 1924.538371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1924.549507] bridge0: port 2(bridge_slave_1) entered disabled state [ 1924.566525] device bridge_slave_1 entered promiscuous mode [ 1924.577693] bridge0: port 1(bridge_slave_0) entered blocking state [ 1924.589801] bridge0: port 1(bridge_slave_0) entered disabled state [ 1924.607248] device bridge_slave_0 entered promiscuous mode [ 1924.675378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1924.689533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1924.702746] device bridge_slave_1 entered promiscuous mode [ 1924.709453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1924.725190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1924.737747] device bridge_slave_0 entered promiscuous mode [ 1924.774899] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1924.813970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1924.820367] bridge0: port 2(bridge_slave_1) entered disabled state [ 1924.828290] device bridge_slave_1 entered promiscuous mode [ 1924.837183] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1924.852410] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1924.872592] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1924.881904] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1924.896005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1924.903007] bridge0: port 1(bridge_slave_0) entered disabled state [ 1924.914566] device bridge_slave_0 entered promiscuous mode [ 1924.953687] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1924.973853] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1924.988667] bridge0: port 2(bridge_slave_1) entered blocking state [ 1924.996142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1925.004468] device bridge_slave_1 entered promiscuous mode [ 1925.031303] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1925.039290] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1925.051290] team0: Port device team_slave_0 added [ 1925.057200] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1925.082992] team0: Port device team_slave_1 added [ 1925.101013] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1925.110305] team0: Port device team_slave_0 added [ 1925.134636] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1925.147524] team0: Port device team_slave_0 added [ 1925.162089] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1925.169653] team0: Port device team_slave_1 added [ 1925.214993] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1925.232602] team0: Port device team_slave_1 added [ 1925.250884] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1925.258871] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1925.267212] team0: Port device team_slave_0 added [ 1925.288556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1925.297730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1925.326024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1925.354306] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1925.362387] Bluetooth: hci1: command 0x041b tx timeout [ 1925.384756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1925.396858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1925.432035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1925.449857] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1925.460192] team0: Port device team_slave_1 added [ 1925.474340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1925.481412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1925.507787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1925.528118] Bluetooth: hci2: command 0x041b tx timeout [ 1925.536540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1925.549309] Bluetooth: hci3: command 0x041b tx timeout [ 1925.555509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1925.589508] Bluetooth: hci4: command 0x041b tx timeout [ 1925.595076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1925.605367] Bluetooth: hci5: command 0x041b tx timeout [ 1925.649878] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1925.662066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1925.668340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1925.704738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1925.728661] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1925.737507] team0: Port device team_slave_0 added [ 1925.744656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1925.752493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1925.779742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1925.799690] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1925.821132] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1925.830621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1925.847931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1925.910935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1925.946598] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1925.955371] team0: Port device team_slave_1 added [ 1925.961552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1925.967803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1925.995084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1926.006762] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1926.045431] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1926.085926] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1926.110164] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1926.129125] device hsr_slave_0 entered promiscuous mode [ 1926.143517] device hsr_slave_1 entered promiscuous mode [ 1926.159096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1926.165915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1926.192679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1926.205758] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1926.224423] device hsr_slave_0 entered promiscuous mode [ 1926.232111] device hsr_slave_1 entered promiscuous mode [ 1926.240148] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1926.252083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1926.258346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1926.284966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1926.310801] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1926.317854] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1926.973813] device hsr_slave_0 entered promiscuous mode [ 1926.983128] device hsr_slave_1 entered promiscuous mode [ 1926.995689] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1927.012353] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1927.323771] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1927.335067] device hsr_slave_0 entered promiscuous mode [ 1927.341840] device hsr_slave_1 entered promiscuous mode [ 1927.348353] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1927.375668] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1927.383826] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1927.440951] Bluetooth: hci1: command 0x040f tx timeout [ 1927.600788] Bluetooth: hci4: command 0x040f tx timeout [ 1927.615383] Bluetooth: hci3: command 0x040f tx timeout [ 1927.638390] Bluetooth: hci2: command 0x040f tx timeout [ 1927.680763] Bluetooth: hci5: command 0x040f tx timeout [ 1927.830399] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1928.256450] device hsr_slave_0 entered promiscuous mode [ 1928.270948] device hsr_slave_1 entered promiscuous mode [ 1928.280327] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1928.361949] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1929.520917] Bluetooth: hci1: command 0x0419 tx timeout [ 1929.680858] Bluetooth: hci2: command 0x0419 tx timeout [ 1929.687925] Bluetooth: hci3: command 0x0419 tx timeout [ 1929.695983] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1929.704588] Bluetooth: hci4: command 0x0419 tx timeout [ 1929.777229] Bluetooth: hci5: command 0x0419 tx timeout [ 1929.787515] oom_reaper: reaped process 24969 (syz-executor.1), now anon-rss:0kB, file-rss:14332kB, shmem-rss:8kB [ 1929.892022] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1929.930583] in:imklog cpuset=/ mems_allowed=0-1 [ 1929.935308] CPU: 0 PID: 24883 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 1929.942843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1929.952201] Call Trace: [ 1929.954801] dump_stack+0x1fc/0x2ef [ 1929.958521] dump_header+0x15d/0xc3f [ 1929.962240] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1929.967344] ? ___ratelimit+0x319/0x590 [ 1929.971327] oom_kill_process.cold+0x10/0x692 [ 1929.975833] ? check_preemption_disabled+0x41/0x280 [ 1929.980855] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1929.986131] out_of_memory+0x1072/0x1390 [ 1929.990202] ? oom_killer_disable+0x270/0x270 [ 1929.994701] ? mutex_trylock+0x15f/0x1a0 [ 1929.998775] __alloc_pages_nodemask+0x23a2/0x2890 [ 1930.003638] ? find_get_entry+0x4cd/0x8a0 [ 1930.007803] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1930.012676] alloc_pages_current+0x193/0x2a0 [ 1930.017088] filemap_fault+0x146e/0x2180 [ 1930.021167] ext4_filemap_fault+0x84/0xb0 [ 1930.025318] __do_fault+0x10b/0x4b0 [ 1930.028941] ? do_raw_spin_unlock+0x171/0x230 [ 1930.033487] __handle_mm_fault+0x273b/0x41c0 [ 1930.037918] ? vm_insert_page+0x9c0/0x9c0 [ 1930.042080] ? lock_downgrade+0x720/0x720 [ 1930.046267] ? check_preemption_disabled+0x41/0x280 [ 1930.051296] handle_mm_fault+0x436/0xb10 [ 1930.055371] __do_page_fault+0x68e/0xd60 [ 1930.059445] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1930.064465] ? spurious_fault+0x840/0x840 [ 1930.068623] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1930.073564] ? page_fault+0x8/0x30 [ 1930.077108] page_fault+0x1e/0x30 [ 1930.080561] RIP: 0033:0x7fc152109580 [ 1930.084274] Code: Bad RIP value. [ 1930.087633] RSP: 002b:00007fc14faa7408 EFLAGS: 00010293 [ 1930.093077] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 00007fc140002258 [ 1930.100354] RDX: 00007fc140002080 RSI: 00007fc14faa7424 RDI: 0000000000000001 [ 1930.107630] RBP: 0000000000000003 R08: 0000000000000000 R09: a3d70a3d70a3d70b [ 1930.114923] R10: 2ce33e6c02ce33e7 R11: 00007fc14faa73d0 R12: 00007fc14faa7da0 [ 1930.122203] R13: 00007fc14faa7da3 R14: 0000000000001f9f R15: 0000558e7e912d70 [ 1930.140546] syz-executor.1: vmalloc: allocation failure, allocated 1634361344 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1930.168035] Mem-Info: [ 1930.177008] active_anon:15241 inactive_anon:43345 isolated_anon:0 [ 1930.177008] active_file:35 inactive_file:15 isolated_file:0 [ 1930.177008] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1930.177008] slab_reclaimable:13554 slab_unreclaimable:123340 [ 1930.177008] mapped:22294 shmem:44120 pagetables:557 bounce:0 [ 1930.177008] free:13838 free_pcp:124 free_cma:0 [ 1930.197073] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1930.246711] Node 0 active_anon:58576kB inactive_anon:48460kB active_file:108kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72776kB dirty:0kB writeback:0kB shmem:50652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1930.260526] CPU: 1 PID: 24969 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1930.282399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1930.291759] Call Trace: [ 1930.294360] dump_stack+0x1fc/0x2ef [ 1930.297588] Node 1 active_anon:2388kB inactive_anon:124920kB active_file:32kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16400kB dirty:0kB writeback:0kB shmem:125828kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1930.297992] warn_alloc.cold+0x7b/0x18f [ 1930.329437] ? zone_watermark_ok_safe+0x260/0x260 [ 1930.334305] ? retint_kernel+0x2d/0x2d [ 1930.338226] __vmalloc_area_node+0x4fd/0x780 [ 1930.342654] ? __vmalloc_node_range+0x180/0x180 [ 1930.344741] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1930.347333] ? _raw_spin_unlock+0x29/0x40 [ 1930.377583] ? __get_vm_area_node+0x2e2/0x3a0 [ 1930.382096] __vmalloc_node_range+0xed/0x180 [ 1930.386530] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1930.390877] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1930.394436] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1930.396252] vmalloc_user+0x70/0xe0 [ 1930.404891] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1930.409233] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1930.413399] __vb2_queue_alloc+0x472/0xe60 [ 1930.417658] vb2_core_create_bufs+0x273/0x7e0 [ 1930.422164] ? __vb2_queue_free+0x870/0x870 [ 1930.426582] ? mutex_trylock+0x1a0/0x1a0 [ 1930.430682] ? __video_do_ioctl+0x632/0xcd0 [ 1930.434661] Node 0 DMA32 free:17712kB min:35996kB low:44992kB high:53988kB active_anon:58576kB inactive_anon:48460kB active_file:108kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7456kB pagetables:1964kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1930.435034] vb2_create_bufs+0x332/0x620 [ 1930.467889] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1930.473004] ? __video_do_ioctl+0x632/0xcd0 [ 1930.477330] ? mutex_trylock+0x1a0/0x1a0 [ 1930.481398] ? mark_held_locks+0xf0/0xf0 [ 1930.485478] vb2_ioctl_create_bufs+0x20d/0x360 [ 1930.490061] ? memset+0x20/0x40 [ 1930.493351] v4l_create_bufs+0xb2/0x160 [ 1930.497413] __video_do_ioctl+0x49a/0xcd0 [ 1930.501593] ? v4l_querycap+0x340/0x340 [ 1930.505584] ? __might_fault+0x192/0x1d0 [ 1930.509661] ? v4l_querycap+0x340/0x340 [ 1930.513646] video_usercopy+0x13f/0xfa0 [ 1930.517841] ? v4l_enumstd+0x60/0x60 [ 1930.521595] ? do_futex+0x171/0x1880 [ 1930.525314] ? mark_held_locks+0xf0/0xf0 [ 1930.529387] ? debug_check_no_obj_freed+0x201/0x490 [ 1930.534425] ? video_usercopy+0xfa0/0xfa0 [ 1930.538587] v4l2_ioctl+0x147/0x1a0 [ 1930.542220] ? video_devdata+0xa0/0xa0 [ 1930.546114] do_vfs_ioctl+0xcdb/0x12e0 [ 1930.550007] ? lock_downgrade+0x720/0x720 [ 1930.554162] ? check_preemption_disabled+0x41/0x280 [ 1930.559186] ? ioctl_preallocate+0x200/0x200 [ 1930.563605] ? __fget+0x356/0x510 [ 1930.567070] ? do_dup2+0x450/0x450 [ 1930.570618] ? __se_sys_futex+0x298/0x3b0 [ 1930.574778] ksys_ioctl+0x9b/0xc0 [ 1930.578246] __x64_sys_ioctl+0x6f/0xb0 [ 1930.582168] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1930.586752] do_syscall_64+0xf9/0x620 [ 1930.590565] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1930.595764] RIP: 0033:0x7ff9055210f9 [ 1930.599488] Code: Bad RIP value. [ 1930.600929] lowmem_reserve[]: 0 0 1 1 1 [ 1930.602864] RSP: 002b:00007ff903a93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1930.606928] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1930.614616] RAX: ffffffffffffffda RBX: 00007ff905640f80 RCX: 00007ff9055210f9 [ 1930.614623] RDX: 0000000020000640 RSI: 00000000c100565c RDI: 0000000000000003 [ 1930.614630] RBP: 00007ff90557cae9 R08: 0000000000000000 R09: 0000000000000000 [ 1930.614637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1930.614644] R13: 00007ffefb208e4f R14: 00007ff903a93300 R15: 0000000000022000 [ 1930.641981] Mem-Info: [ 1930.642017] active_anon:15241 inactive_anon:43345 isolated_anon:0 [ 1930.642017] active_file:35 inactive_file:15 isolated_file:0 [ 1930.642017] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1930.642017] slab_reclaimable:13554 slab_unreclaimable:123340 [ 1930.642017] mapped:22294 shmem:44120 pagetables:557 bounce:0 [ 1930.642017] free:13838 free_pcp:124 free_cma:0 [ 1930.642040] Node 0 active_anon:58576kB inactive_anon:48460kB active_file:108kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72776kB dirty:0kB writeback:0kB shmem:50652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1930.642067] Node 1 active_anon:2388kB inactive_anon:124920kB active_file:32kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16400kB dirty:0kB writeback:0kB shmem:125828kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1930.779080] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1930.804533] lowmem_reserve[]: 0 0 0 0 0 [ 1930.809340] Node 1 Normal free:26760kB min:53876kB low:67344kB high:80812kB active_anon:2388kB inactive_anon:124920kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:576kB pagetables:264kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1930.817952] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1930.849183] lowmem_reserve[]: 0 0 0 0 0 [ 1930.853279] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10872kB [ 1930.857008] Node 0 DMA32 free:17788kB min:35996kB low:44992kB high:53988kB active_anon:58576kB inactive_anon:48460kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7456kB pagetables:1964kB bounce:0kB free_pcp:256kB local_pcp:248kB free_cma:0kB [ 1930.866605] Node 0 DMA32: 1197*4kB (UME) 349*8kB (ME) 140*16kB (ME) 47*32kB (ME) 23*64kB (UMH) 15*128kB (UM) 6*256kB (UMH) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17788kB [ 1930.908166] lowmem_reserve[]: 0 0 1 1 1 [ 1930.912573] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1930.923767] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1930.927882] Node 1 Normal: 388*4kB (UME) 309*8kB (UME) 233*16kB (ME) 132*32kB (UM) 33*64kB (ME) 9*128kB (M) 3*256kB (UM) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 1*4096kB (U) = 26760kB [ 1930.960504] lowmem_reserve[]: 0 0 0 0 0 [ 1930.975443] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1930.977950] Node 1 Normal free:26760kB min:53876kB low:67344kB high:80812kB active_anon:2388kB inactive_anon:124920kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:576kB pagetables:264kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1930.991308] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1931.022466] lowmem_reserve[]: 0 0 0 0 0 [ 1931.022910] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1931.026754] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10872kB [ 1931.043785] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1931.048982] Node 0 DMA32: 1197*4kB (UME) 349*8kB (ME) 140*16kB (ME) 47*32kB (ME) 23*64kB (UMH) 15*128kB (UM) 6*256kB (UMH) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17788kB [ 1931.049055] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1931.049111] Node 1 Normal: 388*4kB (UME) 309*8kB (UME) 233*16kB (ME) 132*32kB (UM) 33*64kB (ME) 9*128kB (M) 3*256kB (UM) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UM) 1*4096kB (U) = 26760kB [ 1931.049200] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1931.049210] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1931.049221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1931.049231] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1931.049236] 44151 total pagecache pages [ 1931.049249] 0 pages in swap cache [ 1931.049257] Swap cache stats: add 0, delete 0, find 0/0 [ 1931.049262] Free swap = 0kB [ 1931.049267] Total swap = 0kB [ 1931.049275] 2097051 pages RAM [ 1931.049280] 0 pages HighMem/MovableOnly [ 1931.049285] 369649 pages reserved [ 1931.049289] 0 pages cma reserved [ 1931.174185] 44151 total pagecache pages [ 1931.178174] 0 pages in swap cache [ 1931.181699] Swap cache stats: add 0, delete 0, find 0/0 [ 1931.187072] Free swap = 0kB [ 1931.190139] Total swap = 0kB [ 1931.193269] 2097051 pages RAM [ 1931.196408] 0 pages HighMem/MovableOnly [ 1931.201252] 369649 pages reserved [ 1931.204697] 0 pages cma reserved [ 1931.208181] Unreclaimable slab info: [ 1931.212014] Name Used Total [ 1931.217595] pid_2 17KB 84KB [ 1931.223109] batadv_tt_change_cache 1KB 3KB [ 1931.228913] batadv_tl_cache 5KB 16KB [ 1931.234424] TIPC 18KB 37KB [ 1931.239804] SCTPv6 26KB 43KB [ 1931.245256] SCTP 21KB 23KB [ 1931.250695] DCCPv6 27KB 45KB [ 1931.257711] DCCP 26KB 42KB [ 1931.263203] L2TP/IPv6 19KB 39KB [ 1931.268579] RXRPC 19KB 32KB [ 1931.274016] rxrpc_call_jar 135KB 141KB [ 1931.279392] bridge_fdb_cache 16KB 27KB [ 1931.284894] fib6_nodes 170KB 264KB [ 1931.290261] ip6_dst_cache 120KB 483KB [ 1931.297668] RAWv6 121KB 121KB [ 1931.303149] UDPv6 43KB 52KB [ 1931.308537] TCPv6 24KB 36KB [ 1931.316318] nf_conntrack 4KB 11KB [ 1931.321913] t10_alua_lu_gp_cache 0KB 3KB [ 1931.327556] sd_ext_cdb 0KB 7KB [ 1931.333033] scsi_sense_cache 1056KB 1060KB [ 1931.338490] virtio_scsi_cmd 16KB 16KB [ 1931.343926] sgpool-128 8KB 8KB [ 1931.349298] sgpool-64 4KB 12KB [ 1931.356353] sgpool-32 2KB 15KB [ 1931.361859] sgpool-16 1KB 7KB [ 1931.367323] sgpool-8 0KB 7KB [ 1931.372796] mqueue_inode_cache 18KB 37KB [ 1931.378260] bio_post_read_ctx 14KB 15KB [ 1931.383894] bio-2 14KB 15KB [ 1931.389261] jfs_mp 7KB 7KB [ 1931.394784] cifs_small_rq 15KB 16KB [ 1931.400151] cifs_request 67KB 67KB [ 1931.405610] cifs_mpx_ids 0KB 7KB [ 1931.412201] nfs_commit_data 3KB 14KB [ 1931.417598] nfs_write_data 34KB 44KB [ 1931.427653] ext4_system_zone 1KB 7KB [ 1931.441869] bio-1 1KB 7KB [ 1931.447252] pid_namespace 3KB 11KB [ 1931.452721] rpc_buffers 17KB 25KB [ 1931.459727] rpc_tasks 2KB 7KB [ 1931.465218] UNIX 723KB 723KB [ 1931.470692] tcp_bind_bucket 1KB 4KB [ 1931.476073] ip_fib_trie 28KB 47KB [ 1931.481538] ip_fib_alias 120KB 189KB [ 1931.486903] ip_dst_cache 10KB 16KB [ 1931.492420] RAW 72KB 82KB [ 1931.497792] UDP 43KB 67KB [ 1931.503268] TCP 8KB 11KB [ 1931.508642] hugetlbfs_inode_cache 3KB 15KB [ 1931.514431] fscache_cookie_jar 1KB 11KB [ 1931.519879] eventpoll_pwq 25KB 67KB [ 1931.525406] eventpoll_epi 45KB 63KB [ 1931.531088] inotify_inode_mark 10KB 27KB [ 1931.536543] request_queue 199KB 199KB [ 1931.543691] blkdev_requests 1KB 3KB [ 1931.549072] blkdev_ioc 32KB 38KB [ 1931.557135] bio-0 1290KB 1530KB [ 1931.564988] biovec-max 1683KB 1757KB [ 1931.570366] biovec-64 1408KB 1590KB [ 1931.575853] biovec-16 153KB 165KB [ 1931.581314] bio_integrity_payload 1KB 8KB [ 1931.587028] khugepaged_mm_slot 4KB 31KB [ 1931.592600] uid_cache 0KB 4KB [ 1931.598081] dmaengine-unmap-2 0KB 3KB [ 1931.603864] skbuff_fclone_cache 31KB 67KB [ 1931.609406] skbuff_head_cache 8501KB 9232KB [ 1931.614880] configfs_dir_cache 3KB 7KB [ 1931.620335] file_lock_cache 25KB 79KB [ 1931.625768] file_lock_ctx 9KB 11KB [ 1931.631301] fsnotify_mark_connector 4KB 23KB [ 1931.637205] net_namespace 96KB 96KB [ 1931.642646] shmem_inode_cache 8044KB 8217KB [ 1931.648106] task_delay_info 268KB 375KB [ 1931.653550] taskstats 26KB 80KB [ 1931.658920] proc_dir_entry 1012KB 1012KB [ 1931.666668] pde_opener 10KB 54KB [ 1931.676692] seq_file 277KB 413KB [ 1931.686873] sigqueue 45KB 66KB [ 1931.700549] kernfs_node_cache 22504KB 22506KB [ 1931.706031] mnt_cache 261KB 268KB [ 1931.719883] filp 7644KB 7912KB [ 1931.725448] names_cache 125749KB 125808KB [ 1931.738702] iint_cache 34KB 51KB [ 1931.744160] key_jar 4KB 7KB [ 1931.749528] uts_namespace 5KB 7KB [ 1931.763447] nsproxy 3KB 7KB [ 1931.770731] vm_area_struct 2449KB 3836KB [ 1931.776196] mm_struct 338KB 617KB [ 1931.782523] fs_cache 304KB 320KB [ 1931.787894] files_cache 1072KB 1072KB [ 1931.794240] signal_cache 1929KB 1933KB [ 1931.799642] sighand_cache 668KB 672KB [ 1931.805604] task_struct 9026KB 9026KB [ 1931.811092] cred_jar 2733KB 3000KB [ 1931.816563] anon_vma_chain 807KB 1539KB [ 1931.822801] anon_vma 171KB 327KB [ 1931.828819] pid 169KB 228KB [ 1931.834877] Acpi-Operand 156KB 202KB [ 1931.840255] Acpi-ParseExt 9KB 11KB [ 1931.845806] Acpi-Parse 41KB 47KB [ 1931.851248] Acpi-State 52KB 63KB [ 1931.857187] Acpi-Namespace 20KB 27KB [ 1931.863264] numa_policy 0KB 3KB [ 1931.876676] debug_objects_cache 1672KB 1968KB [ 1931.882747] trace_event_file 297KB 298KB [ 1931.905015] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1931.916825] ftrace_event_field 398KB 401KB [ 1931.946981] pool_workqueue 146KB 156KB [ 1931.963510] page->ptl 366KB 1031KB [ 1931.998294] kmalloc-2097152 2050KB 2050KB [ 1932.014241] kmalloc-524288 2056KB 2056KB [ 1932.019636] kmalloc-262144 1290KB 1290KB [ 1932.050531] kmalloc-131072 650KB 650KB [ 1932.066101] kmalloc-65536 3168KB 3234KB [ 1932.086302] kmalloc-32768 2475KB 2475KB [ 1932.106517] kmalloc-16384 1287KB 1303KB [ 1932.119836] kmalloc-8192 4958KB 4958KB [ 1932.125585] kmalloc-4096 28785KB 28785KB [ 1932.158692] kmalloc-2048 14581KB 14586KB [ 1932.170555] kmalloc-1024 10998KB 12804KB [ 1932.177373] kmalloc-512 17663KB 18442KB [ 1932.207704] kmalloc-256 5192KB 6247KB [ 1932.213200] kmalloc-128 1068KB 1712KB [ 1932.218562] kmalloc-96 3673KB 4404KB [ 1932.260433] kmalloc-64 2564KB 3744KB [ 1932.265883] kmalloc-32 2023KB 2476KB [ 1932.279762] kmalloc-192 2222KB 2972KB [ 1932.285198] kmem_cache 177KB 183KB [ 1932.319240] Out of memory (oom_kill_allocating_task): Kill process 24883 (in:imklog) score 0 or sacrifice child [ 1932.349174] Killed process 24870 (rsyslogd) total-vm:254332kB, anon-rss:804kB, file-rss:0kB, shmem-rss:0kB [ 1932.361305] oom_reaper: reaped process 24870 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1933.123319] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1933.175247] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1933.716945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1933.773397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1933.782884] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1933.818168] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1933.844988] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1933.862705] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1933.892419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1933.931848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1933.939021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1933.951715] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1933.962323] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1933.968453] 8021q: adding VLAN 0 to HW filter on device team0 [ 1933.978960] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1933.987657] 8021q: adding VLAN 0 to HW filter on device team0 [ 1933.997249] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1934.022223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1934.035235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1934.063628] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1934.075908] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1934.093795] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1934.130465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1934.149986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1934.179089] bridge0: port 1(bridge_slave_0) entered blocking state [ 1934.185557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1934.208190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1934.228421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1934.238431] bridge0: port 1(bridge_slave_0) entered blocking state [ 1934.244895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1934.254168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1934.262015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1934.272090] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1934.282417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1934.291340] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1934.302105] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1934.317567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1934.326923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1934.341914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1934.349869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1934.359705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1934.366184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1934.390730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1934.398804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1934.407755] bridge0: port 2(bridge_slave_1) entered blocking state [ 1934.414212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1934.422697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1934.435536] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1934.452997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1934.461680] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1934.467767] 8021q: adding VLAN 0 to HW filter on device team0 [ 1934.477162] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1934.486986] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1934.500743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1934.508793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1934.520881] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1934.531519] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1934.551665] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1934.561831] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1934.572882] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1934.592542] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1934.611158] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1934.617373] 8021q: adding VLAN 0 to HW filter on device team0 [ 1934.640492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1934.648603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1934.661885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1934.669051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1934.678896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1934.687804] bridge0: port 1(bridge_slave_0) entered blocking state [ 1934.694278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1934.712409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1934.730846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1934.747486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1934.755894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1934.766600] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1934.778574] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1934.788753] 8021q: adding VLAN 0 to HW filter on device team0 [ 1934.813428] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1934.827546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1934.843863] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1934.857067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1934.868976] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1934.886950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1934.898119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1934.917519] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1934.931749] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1934.952075] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1934.973628] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1934.988215] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1934.997286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1935.014418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1935.027998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1935.039981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1935.061540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1935.067924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1935.085335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1935.096687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1935.113687] bridge0: port 1(bridge_slave_0) entered blocking state [ 1935.120065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1935.136830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1935.147709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1935.164746] bridge0: port 2(bridge_slave_1) entered blocking state [ 1935.171207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1935.188972] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1935.199176] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1935.214251] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1935.233366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1935.250667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1935.258681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1935.268150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1935.274584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1935.283194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1935.291831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1935.299527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1935.308368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1935.319182] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1935.330044] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1935.348399] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1935.360614] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1935.610603] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1935.618556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1935.627251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1935.644251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1935.659983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1935.676575] bridge0: port 2(bridge_slave_1) entered blocking state [ 1935.683033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1935.691218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1935.699114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1935.707783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1935.716372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1935.724754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1935.736920] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1935.754986] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1935.772163] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1935.778264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1935.796807] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1935.811665] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1935.817769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1935.829305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1935.851239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1935.859355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1936.128191] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1936.145198] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1936.165166] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1936.197141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1936.213129] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1936.230146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1936.250845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1936.258873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1936.282301] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1936.304743] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1936.324032] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1936.348055] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1936.365128] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1936.378651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1936.393076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1936.417010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1936.425952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1936.442953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1936.457358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1936.687546] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1936.705450] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1936.722574] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1936.743838] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1936.754260] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1936.770820] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1936.778676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1936.797229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1936.807842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1936.825439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1936.837315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1936.850659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1936.861170] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1936.869435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1936.904243] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1936.921652] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1936.929958] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1936.942515] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1936.951265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1936.964318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1936.981604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1936.989337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1937.007933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1937.018334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1937.034762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1937.048302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1937.059991] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1937.075680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1937.321552] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1937.329988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1937.355938] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1937.377943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1937.400663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1937.409315] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1937.425600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1937.439800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1937.470542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1937.478633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1937.544463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1937.565329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1937.582715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1937.589479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1937.614778] device bridge_slave_1 left promiscuous mode [ 1937.629475] bridge0: port 2(bridge_slave_1) entered disabled state [ 1937.637695] device bridge_slave_0 left promiscuous mode [ 1937.652623] bridge0: port 1(bridge_slave_0) entered disabled state [ 1937.668483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1937.677966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1937.694703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1937.702310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1937.711330] device bridge_slave_1 left promiscuous mode [ 1937.716936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1937.725832] device bridge_slave_0 left promiscuous mode [ 1937.736628] bridge0: port 1(bridge_slave_0) entered disabled state [ 1937.755434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1937.765674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1937.780012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1937.796478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1937.808538] device bridge_slave_1 left promiscuous mode [ 1937.822679] bridge0: port 2(bridge_slave_1) entered disabled state [ 1937.836080] device bridge_slave_0 left promiscuous mode [ 1937.845991] bridge0: port 1(bridge_slave_0) entered disabled state [ 1937.865896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1937.877544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1937.890650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1937.897392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1937.906762] device bridge_slave_1 left promiscuous mode [ 1937.913093] bridge0: port 2(bridge_slave_1) entered disabled state [ 1937.931046] device bridge_slave_0 left promiscuous mode [ 1937.936562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1937.967837] device veth1_macvtap left promiscuous mode [ 1937.977917] device veth0_macvtap left promiscuous mode [ 1937.986757] device veth1_vlan left promiscuous mode [ 1937.996991] device veth0_vlan left promiscuous mode [ 1938.006687] device veth1_macvtap left promiscuous mode [ 1938.018087] device veth0_macvtap left promiscuous mode [ 1938.026907] device veth1_vlan left promiscuous mode [ 1938.037201] device veth0_vlan left promiscuous mode [ 1938.046827] device veth1_macvtap left promiscuous mode [ 1938.055457] device veth0_macvtap left promiscuous mode [ 1938.063038] device veth1_vlan left promiscuous mode [ 1938.068158] device veth0_vlan left promiscuous mode [ 1938.075281] device veth1_macvtap left promiscuous mode [ 1938.081154] device veth0_macvtap left promiscuous mode [ 1938.086491] device veth1_vlan left promiscuous mode [ 1938.092105] device veth0_vlan left promiscuous mode 07:13:20 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400, 0x1], 0xd3e}}, 0x7ff}) [ 1945.740897] oom_reaper: reaped process 26047 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 1945.800535] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1945.829811] systemd-journal cpuset=/ mems_allowed=0-1 [ 1945.835397] CPU: 0 PID: 24939 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 1945.843451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1945.852796] Call Trace: [ 1945.855419] dump_stack+0x1fc/0x2ef [ 1945.859047] dump_header+0x15d/0xc3f [ 1945.862763] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1945.867869] ? ___ratelimit+0x319/0x590 [ 1945.871847] oom_kill_process.cold+0x10/0x692 [ 1945.876353] ? check_preemption_disabled+0x41/0x280 [ 1945.881406] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1945.886683] out_of_memory+0x1072/0x1390 [ 1945.890749] ? oom_killer_disable+0x270/0x270 [ 1945.895335] ? mutex_trylock+0x15f/0x1a0 [ 1945.899432] __alloc_pages_nodemask+0x23a2/0x2890 [ 1945.904297] ? find_get_entry+0x4cd/0x8a0 [ 1945.908455] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1945.913325] alloc_pages_current+0x193/0x2a0 [ 1945.917737] filemap_fault+0x146e/0x2180 [ 1945.921813] ext4_filemap_fault+0x84/0xb0 [ 1945.925968] __do_fault+0x10b/0x4b0 [ 1945.929601] __handle_mm_fault+0x273b/0x41c0 [ 1945.934020] ? vm_insert_page+0x9c0/0x9c0 [ 1945.938180] ? check_preemption_disabled+0x41/0x280 [ 1945.943206] handle_mm_fault+0x436/0xb10 [ 1945.947274] __do_page_fault+0x68e/0xd60 [ 1945.951356] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1945.956375] ? spurious_fault+0x840/0x840 [ 1945.960610] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1945.965456] ? page_fault+0x8/0x30 [ 1945.969008] page_fault+0x1e/0x30 [ 1945.972459] RIP: 0033:0x7fe9140cb2e3 [ 1945.976203] Code: Bad RIP value. [ 1945.979565] RSP: 002b:00007ffd08eb3478 EFLAGS: 00010246 [ 1945.984924] RAX: 0000000000000001 RBX: 000055cbcabb91e0 RCX: 00007fe9140cb2e3 [ 1945.992190] RDX: 0000000000000013 RSI: 00007ffd08eb3480 RDI: 000000000000000c [ 1945.999458] RBP: 00007ffd08eb3670 R08: 00007ffd08f55000 R09: 000001f25e6ba718 [ 1946.006726] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd08eb3480 [ 1946.014001] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f59519339ac6 [ 1946.229409] Mem-Info: [ 1946.238640] active_anon:15220 inactive_anon:43337 isolated_anon:0 [ 1946.238640] active_file:22 inactive_file:0 isolated_file:0 [ 1946.238640] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1946.238640] slab_reclaimable:13405 slab_unreclaimable:119887 [ 1946.238640] mapped:22346 shmem:44104 pagetables:557 bounce:0 [ 1946.238640] free:13923 free_pcp:613 free_cma:0 [ 1946.289822] syz-executor.1: vmalloc: allocation failure, allocated 1646915584 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1946.307999] Node 0 active_anon:57880kB inactive_anon:48432kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72744kB dirty:0kB writeback:0kB shmem:50600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1946.349341] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1946.354593] CPU: 0 PID: 26047 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1946.362474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1946.371918] Call Trace: [ 1946.374547] dump_stack+0x1fc/0x2ef [ 1946.378181] warn_alloc.cold+0x7b/0x18f [ 1946.382164] ? zone_watermark_ok_safe+0x260/0x260 [ 1946.387022] ? retint_kernel+0x2d/0x2d [ 1946.390921] ? alloc_pages_current+0x14a/0x2a0 [ 1946.395529] __vmalloc_area_node+0x4fd/0x780 [ 1946.399951] ? __vmalloc_node_range+0x180/0x180 [ 1946.404620] ? _raw_spin_unlock+0x29/0x40 [ 1946.408767] ? __get_vm_area_node+0x2e2/0x3a0 [ 1946.413269] __vmalloc_node_range+0xed/0x180 [ 1946.417679] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1946.422007] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1946.427376] vmalloc_user+0x70/0xe0 [ 1946.431002] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1946.435327] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1946.439476] __vb2_queue_alloc+0x472/0xe60 [ 1946.443724] vb2_core_create_bufs+0x273/0x7e0 [ 1946.448220] ? __vb2_queue_free+0x870/0x870 [ 1946.452667] ? mutex_trylock+0x1a0/0x1a0 [ 1946.456744] ? __video_do_ioctl+0x632/0xcd0 [ 1946.461086] vb2_create_bufs+0x332/0x620 [ 1946.465161] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1946.470289] ? __video_do_ioctl+0x632/0xcd0 [ 1946.474628] ? mutex_trylock+0x1a0/0x1a0 [ 1946.478697] ? mark_held_locks+0xf0/0xf0 [ 1946.482773] ? futex_wait_queue_me+0x404/0x5e0 [ 1946.487377] vb2_ioctl_create_bufs+0x20d/0x360 [ 1946.491967] ? memset+0x20/0x40 [ 1946.495253] v4l_create_bufs+0xb2/0x160 [ 1946.499235] __video_do_ioctl+0x49a/0xcd0 [ 1946.503389] ? v4l_querycap+0x340/0x340 [ 1946.507367] ? __might_fault+0x192/0x1d0 [ 1946.511446] ? v4l_querycap+0x340/0x340 [ 1946.515438] video_usercopy+0x13f/0xfa0 [ 1946.519427] ? v4l_enumstd+0x60/0x60 [ 1946.523156] ? do_futex+0x171/0x1880 [ 1946.526896] ? mark_held_locks+0xf0/0xf0 [ 1946.530967] ? debug_check_no_obj_freed+0x201/0x490 [ 1946.536003] ? video_usercopy+0xfa0/0xfa0 [ 1946.540154] v4l2_ioctl+0x147/0x1a0 [ 1946.543782] ? video_devdata+0xa0/0xa0 [ 1946.547673] do_vfs_ioctl+0xcdb/0x12e0 [ 1946.551649] ? lock_downgrade+0x720/0x720 [ 1946.555799] ? check_preemption_disabled+0x41/0x280 [ 1946.560825] ? ioctl_preallocate+0x200/0x200 [ 1946.565254] ? __fget+0x356/0x510 [ 1946.568736] ? do_dup2+0x450/0x450 [ 1946.572301] ? __se_sys_futex+0x298/0x3b0 [ 1946.576461] ksys_ioctl+0x9b/0xc0 [ 1946.579923] __x64_sys_ioctl+0x6f/0xb0 [ 1946.583814] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1946.588401] do_syscall_64+0xf9/0x620 [ 1946.592241] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1946.597432] RIP: 0033:0x7ff9055210f9 [ 1946.601147] Code: Bad RIP value. [ 1946.604523] RSP: 002b:00007ff903a93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1946.612239] RAX: ffffffffffffffda RBX: 00007ff905640f80 RCX: 00007ff9055210f9 [ 1946.619600] RDX: 0000000020000640 RSI: 00000000c100565c RDI: 0000000000000003 [ 1946.626866] RBP: 00007ff90557cae9 R08: 0000000000000000 R09: 0000000000000000 [ 1946.634142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1946.641409] R13: 00007ffefb208e4f R14: 00007ff903a93300 R15: 0000000000022000 [ 1946.660899] Node 1 active_anon:3000kB inactive_anon:124916kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16640kB dirty:0kB writeback:0kB shmem:125816kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1946.662029] Mem-Info: [ 1946.698956] active_anon:15220 inactive_anon:43337 isolated_anon:0 [ 1946.698956] active_file:22 inactive_file:0 isolated_file:0 [ 1946.698956] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1946.698956] slab_reclaimable:13405 slab_unreclaimable:119887 [ 1946.698956] mapped:22346 shmem:44104 pagetables:557 bounce:0 [ 1946.698956] free:13923 free_pcp:608 free_cma:0 [ 1946.729728] Node 0 DMA free:10876kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1946.740843] Node 0 active_anon:57880kB inactive_anon:48432kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72744kB dirty:0kB writeback:0kB shmem:50600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1946.786172] Node 1 active_anon:3000kB inactive_anon:124916kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16640kB dirty:0kB writeback:0kB shmem:125816kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1946.814077] Node 0 DMA free:10876kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1946.839581] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1946.840897] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1946.845299] Node 0 DMA32 free:17980kB min:35996kB low:44992kB high:53988kB active_anon:57880kB inactive_anon:48432kB active_file:60kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:1904kB bounce:0kB free_pcp:396kB local_pcp:60kB free_cma:0kB [ 1946.850340] Node 0 DMA32 free:17980kB min:35996kB low:44992kB high:53988kB active_anon:57880kB inactive_anon:48432kB active_file:60kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:1904kB bounce:0kB free_pcp:396kB local_pcp:336kB free_cma:0kB [ 1946.850371] lowmem_reserve[]: 0 0 1 1 1 [ 1946.850390] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1946.850418] lowmem_reserve[]: 0 0 0 0 0 [ 1946.850434] Node 1 Normal free:26812kB min:53876kB low:67344kB high:80812kB active_anon:3000kB inactive_anon:124916kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:640kB pagetables:324kB bounce:0kB free_pcp:2044kB local_pcp:1748kB free_cma:0kB [ 1946.850463] lowmem_reserve[]: 0 0 0 0 0 [ 1946.937319] lowmem_reserve[]: 0 0 1 1 1 [ 1946.939342] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10876kB [ 1946.964322] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1946.971859] Node 0 DMA32: 1191*4kB (MEH) 357*8kB (UME) 127*16kB (MEH) 45*32kB (MEH) 26*64kB (MH) 17*128kB (MH) 4*256kB (M) 4*512kB (MH) 0*1024kB 0*2048kB 0*4096kB = 18004kB [ 1946.998347] lowmem_reserve[]: 0 0 0 0 0 [ 1947.019634] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1947.052202] Node 1 Normal: 433*4kB (ME) 303*8kB (ME) 236*16kB (UME) 64*32kB (UME) 31*64kB (ME) 10*128kB (UM) 3*256kB (UM) 1*512kB (M) 2*1024kB (UE) 1*2048kB (M) 2*4096kB (U) = 26812kB [ 1947.055628] Node 1 Normal free:26812kB min:53876kB low:67344kB high:80812kB active_anon:3000kB inactive_anon:124916kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:640kB pagetables:324kB bounce:0kB free_pcp:2044kB local_pcp:296kB free_cma:0kB [ 1947.068843] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1947.068858] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1947.068868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1947.068877] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1947.068883] 44132 total pagecache pages [ 1947.068895] 0 pages in swap cache [ 1947.068903] Swap cache stats: add 0, delete 0, find 0/0 [ 1947.068908] Free swap = 0kB [ 1947.068912] Total swap = 0kB [ 1947.068920] 2097051 pages RAM [ 1947.068930] 0 pages HighMem/MovableOnly [ 1947.116244] lowmem_reserve[]: 0 0 0 0 0 [ 1947.128031] 369649 pages reserved [ 1947.150798] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10876kB [ 1947.155464] 0 pages cma reserved [ 1947.158956] Node 0 DMA32: 1191*4kB (MEH) 357*8kB (UME) 127*16kB (MEH) 45*32kB (MEH) 26*64kB (MH) 17*128kB (MH) 4*256kB (M) 4*512kB (MH) 0*1024kB 0*2048kB 0*4096kB = 18004kB [ 1947.206105] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1947.217228] Node 1 Normal: 433*4kB (ME) 303*8kB (ME) 236*16kB (UME) 64*32kB (UME) 31*64kB (ME) 10*128kB (UM) 3*256kB (UM) 1*512kB (M) 2*1024kB (UE) 1*2048kB (M) 2*4096kB (U) = 26812kB [ 1947.246369] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1947.255389] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1947.271339] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1947.283925] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1947.295882] 44132 total pagecache pages [ 1947.303646] 0 pages in swap cache [ 1947.307100] Swap cache stats: add 0, delete 0, find 0/0 [ 1947.316066] Free swap = 0kB [ 1947.319093] Total swap = 0kB [ 1947.325826] 2097051 pages RAM [ 1947.329177] 0 pages HighMem/MovableOnly [ 1947.347939] 369649 pages reserved [ 1947.357657] 0 pages cma reserved [ 1947.375482] Unreclaimable slab info: [ 1947.379221] Name Used Total [ 1947.397517] pid_2 11KB 64KB [ 1947.404690] batadv_tt_change_cache 6KB 7KB [ 1947.425365] batadv_tl_cache 7KB 16KB [ 1947.436978] TIPC 18KB 37KB [ 1947.450934] SCTPv6 24KB 43KB [ 1947.456330] SCTP 17KB 19KB [ 1947.476782] DCCPv6 27KB 45KB [ 1947.488614] DCCP 26KB 42KB [ 1947.502248] L2TP/IPv6 13KB 32KB [ 1947.507653] RXRPC 19KB 32KB [ 1947.527485] rxrpc_call_jar 135KB 141KB [ 1947.546962] bridge_fdb_cache 17KB 27KB [ 1947.552522] fib6_nodes 189KB 264KB [ 1947.557894] ip6_dst_cache 306KB 483KB [ 1947.577514] RAWv6 121KB 121KB [ 1947.583038] UDPv6 39KB 52KB [ 1947.588415] TCPv6 24KB 36KB [ 1947.609015] nf_conntrack 6KB 11KB [ 1947.626880] t10_alua_lu_gp_cache 0KB 3KB [ 1947.632690] sd_ext_cdb 0KB 7KB [ 1947.638065] scsi_sense_cache 1056KB 1060KB [ 1947.657245] virtio_scsi_cmd 16KB 16KB [ 1947.662760] sgpool-128 8KB 8KB [ 1947.668133] sgpool-64 4KB 12KB [ 1947.694725] sgpool-32 2KB 15KB [ 1947.707336] sgpool-16 1KB 7KB [ 1947.712806] sgpool-8 0KB 7KB [ 1947.718185] mqueue_inode_cache 18KB 37KB [ 1947.734916] bio_post_read_ctx 14KB 15KB [ 1947.756011] bio-2 14KB 15KB [ 1947.767286] jfs_mp 7KB 7KB [ 1947.787829] cifs_small_rq 15KB 16KB [ 1947.798130] cifs_request 67KB 67KB [ 1947.818427] cifs_mpx_ids 0KB 7KB [ 1947.826963] nfs_commit_data 3KB 14KB [ 1947.854042] nfs_write_data 34KB 44KB [ 1947.859477] ext4_system_zone 1KB 7KB [ 1947.878307] bio-1 1KB 7KB [ 1947.889536] pid_namespace 3KB 11KB [ 1947.913067] rpc_buffers 17KB 25KB [ 1947.918469] rpc_tasks 2KB 7KB [ 1947.938750] UNIX 1498KB 1518KB [ 1947.962490] tcp_bind_bucket 1KB 4KB [ 1947.967894] ip_fib_trie 34KB 47KB [ 1947.979461] ip_fib_alias 164KB 189KB [ 1948.003926] ip_dst_cache 6KB 16KB [ 1948.010114] RAW 72KB 82KB [ 1948.015481] UDP 43KB 67KB [ 1948.029761] TCP 8KB 11KB [ 1948.045359] hugetlbfs_inode_cache 3KB 15KB [ 1948.051127] fscache_cookie_jar 1KB 11KB [ 1948.056578] eventpoll_pwq 22KB 67KB [ 1948.079682] eventpoll_epi 42KB 63KB [ 1948.085791] inotify_inode_mark 8KB 27KB [ 1948.109342] request_queue 199KB 199KB [ 1948.115023] blkdev_requests 1KB 3KB [ 1948.121175] blkdev_ioc 27KB 38KB [ 1948.126550] bio-0 1162KB 1398KB [ 1948.132600] biovec-max 1674KB 1699KB [ 1948.137977] biovec-64 1303KB 1527KB [ 1948.143669] biovec-16 145KB 165KB [ 1948.149039] bio_integrity_payload 1KB 8KB [ 1948.155528] khugepaged_mm_slot 3KB 27KB [ 1948.162040] uid_cache 0KB 4KB [ 1948.167967] dmaengine-unmap-2 0KB 3KB [ 1948.173556] skbuff_fclone_cache 20KB 48KB [ 1948.179097] skbuff_head_cache 9180KB 9183KB [ 1948.184650] configfs_dir_cache 3KB 7KB [ 1948.190272] file_lock_cache 15KB 63KB [ 1948.195634] file_lock_ctx 9KB 11KB [ 1948.208510] fsnotify_mark_connector 4KB 23KB [ 1948.214723] net_namespace 96KB 96KB [ 1948.226172] shmem_inode_cache 8005KB 8189KB [ 1948.241977] task_delay_info 265KB 375KB [ 1948.247874] taskstats 18KB 68KB [ 1948.260295] proc_dir_entry 1017KB 1020KB [ 1948.270312] pde_opener 8KB 54KB [ 1948.275692] seq_file 233KB 405KB [ 1948.294833] sigqueue 62KB 66KB [ 1948.309702] kernfs_node_cache 22079KB 22357KB [ 1948.319450] mnt_cache 261KB 268KB [ 1948.325705] filp 7481KB 7912KB [ 1948.331890] names_cache 113101KB 113160KB [ 1948.337728] iint_cache 31KB 51KB [ 1948.343812] key_jar 4KB 7KB [ 1948.350090] uts_namespace 5KB 7KB [ 1948.355969] nsproxy 3KB 7KB [ 1948.361973] vm_area_struct 2404KB 3770KB [ 1948.367836] mm_struct 300KB 604KB [ 1948.373473] fs_cache 300KB 320KB [ 1948.378902] files_cache 1122KB 1132KB [ 1948.384559] signal_cache 2008KB 2026KB [ 1948.390175] sighand_cache 543KB 638KB [ 1948.395545] task_struct 9273KB 9310KB [ 1948.401450] cred_jar 2685KB 2996KB [ 1948.406825] anon_vma_chain 768KB 1535KB [ 1948.419699] anon_vma 117KB 327KB [ 1948.425084] pid 172KB 228KB [ 1948.439694] Acpi-Operand 156KB 202KB [ 1948.445076] Acpi-ParseExt 9KB 11KB [ 1948.469714] Acpi-Parse 41KB 47KB [ 1948.475201] Acpi-State 52KB 63KB [ 1948.489687] Acpi-Namespace 20KB 27KB [ 1948.495076] numa_policy 0KB 3KB [ 1948.509726] debug_objects_cache 1691KB 1968KB [ 1948.515283] trace_event_file 297KB 298KB [ 1948.520847] ftrace_event_field 398KB 401KB [ 1948.526299] pool_workqueue 146KB 156KB [ 1948.531868] page->ptl 330KB 1031KB [ 1948.537269] kmalloc-2097152 2050KB 2050KB [ 1948.542863] kmalloc-524288 2056KB 2056KB [ 1948.548234] kmalloc-262144 1290KB 1290KB [ 1948.553796] kmalloc-131072 650KB 650KB [ 1948.559161] kmalloc-65536 3168KB 3234KB [ 1948.564890] kmalloc-32768 2475KB 2475KB [ 1948.570600] kmalloc-16384 1221KB 1270KB [ 1948.575977] kmalloc-8192 5362KB 5362KB [ 1948.581830] kmalloc-4096 31343KB 31369KB [ 1948.587287] kmalloc-2048 16961KB 16963KB [ 1948.592904] kmalloc-1024 13680KB 13686KB [ 1948.598284] kmalloc-512 17714KB 18288KB [ 1948.609699] kmalloc-256 5985KB 6247KB [ 1948.615089] kmalloc-128 1283KB 1712KB [ 1948.629733] kmalloc-96 3538KB 4404KB [ 1948.635118] kmalloc-64 2699KB 3744KB [ 1948.649688] kmalloc-32 2027KB 2476KB [ 1948.655071] kmalloc-192 2329KB 2972KB [ 1948.669676] kmem_cache 177KB 183KB [ 1948.675072] Out of memory (oom_kill_allocating_task): Kill process 24939 (systemd-journal) score 0 or sacrifice child [ 1948.709708] Killed process 24939 (systemd-journal) total-vm:46096kB, anon-rss:484kB, file-rss:0kB, shmem-rss:2196kB [ 1948.878834] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1948.909979] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1948.938282] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1948.960041] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1948.966893] systemd[1]: Stopped Journal Service. [ 1949.000304] systemd[1]: Starting Journal Service... [ 1949.216188] systemd-journald[26050]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1950.035469] systemd[1]: Started Journal Service. 07:13:38 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400], 0xd3e}}, 0x7ff}) [ 1957.577454] device hsr_slave_1 left promiscuous mode [ 1957.587937] device hsr_slave_0 left promiscuous mode [ 1957.607560] team0 (unregistering): Port device team_slave_1 removed [ 1957.627715] team0 (unregistering): Port device team_slave_0 removed [ 1957.651084] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1957.673126] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1957.746640] bond0 (unregistering): Released all slaves [ 1957.824768] device hsr_slave_1 left promiscuous mode [ 1957.834829] device hsr_slave_0 left promiscuous mode [ 1957.856726] team0 (unregistering): Port device team_slave_1 removed [ 1957.868121] team0 (unregistering): Port device team_slave_0 removed [ 1957.881626] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1957.896000] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1957.939623] bond0 (unregistering): Released all slaves [ 1957.996770] device hsr_slave_1 left promiscuous mode [ 1958.006150] device hsr_slave_0 left promiscuous mode [ 1958.027179] team0 (unregistering): Port device team_slave_1 removed [ 1958.041745] team0 (unregistering): Port device team_slave_0 removed [ 1958.054752] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1958.068056] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1958.111447] bond0 (unregistering): Released all slaves [ 1958.167848] device hsr_slave_1 left promiscuous mode [ 1958.177086] device hsr_slave_0 left promiscuous mode [ 1958.198655] team0 (unregistering): Port device team_slave_1 removed [ 1958.218766] team0 (unregistering): Port device team_slave_0 removed [ 1958.238966] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1958.267789] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1958.337921] bond0 (unregistering): Released all slaves [ 1958.370813] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1958.378770] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1958.388420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1958.403866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1958.420636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1958.495640] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1958.515600] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1958.524997] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1958.542393] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1958.556849] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1958.564776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1958.583488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1958.595443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1958.612387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1958.627480] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1958.646733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1958.664491] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1958.685592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1958.699638] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1958.721713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1958.735185] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1958.756563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1958.773905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1958.792279] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1958.805073] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1958.814745] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1958.822864] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1958.841700] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1958.855897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1958.865422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1958.894246] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1958.914233] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1958.929533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1958.937877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1958.966176] device veth0_vlan entered promiscuous mode [ 1958.981023] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1958.993750] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1959.018104] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1959.038088] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1959.051118] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1959.057549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1959.069090] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1959.078103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1959.090204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1959.103042] device veth1_vlan entered promiscuous mode [ 1959.114637] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1959.126936] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1959.143110] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1959.160878] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1959.168655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1959.198126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1959.211817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1959.220181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1959.230777] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1959.249892] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1959.257390] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1959.270516] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1959.278833] device veth0_vlan entered promiscuous mode [ 1959.293673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1959.303510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1959.322544] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1959.344595] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1959.397108] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1959.418321] device veth1_vlan entered promiscuous mode [ 1959.434590] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1959.464451] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1959.476654] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1959.505931] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1959.535913] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1959.544265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1959.560028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1959.586259] device veth0_vlan entered promiscuous mode [ 1959.613224] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1959.628603] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1959.636367] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1959.651888] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1959.661980] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1959.675523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1959.683911] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1959.696623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1959.705146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1959.718464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1959.726940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1959.741174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1959.748353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1959.766479] device veth1_vlan entered promiscuous mode [ 1959.782090] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1959.796246] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1959.810180] device veth0_vlan entered promiscuous mode [ 1959.822398] device veth0_macvtap entered promiscuous mode [ 1959.828895] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1959.925294] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1959.954028] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1959.969834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1959.977443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1960.002031] device veth0_vlan entered promiscuous mode [ 1960.011490] device veth1_vlan entered promiscuous mode [ 1960.017802] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1960.041622] device veth1_macvtap entered promiscuous mode [ 1960.048096] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1960.070856] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1960.085464] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1960.124883] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1960.133897] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1960.153725] device veth1_vlan entered promiscuous mode [ 1960.161057] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1960.170423] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1960.202397] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1960.211658] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1960.224294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1960.236056] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1960.248273] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1960.261996] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1960.273959] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1960.283430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1960.295375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1960.306087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1960.317695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1960.336208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1960.348751] device veth0_macvtap entered promiscuous mode [ 1960.362267] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1960.370517] device veth0_macvtap entered promiscuous mode [ 1960.377044] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1960.426787] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1960.450417] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1960.460887] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1960.467874] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1960.480503] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1960.487881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1960.520267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1960.531392] device veth1_macvtap entered promiscuous mode [ 1960.560038] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1960.567829] device veth1_macvtap entered promiscuous mode [ 1960.575608] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1960.591533] device veth0_macvtap entered promiscuous mode [ 1960.601585] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1960.610916] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1960.623809] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1960.631338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1960.638708] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1960.654645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1960.663509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1960.677944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1960.689355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1960.700804] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1960.707826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1960.720595] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1960.730795] device veth1_macvtap entered promiscuous mode [ 1960.743052] device veth0_macvtap entered promiscuous mode [ 1960.755199] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1960.762341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1960.771210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1960.780298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1960.796014] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1960.807956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1960.822105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1960.833749] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1960.842322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1960.860383] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1960.868713] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1960.882880] device veth1_macvtap entered promiscuous mode [ 1960.905263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1960.916400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1960.927406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1960.938687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1960.951595] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1960.958613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1960.967808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1960.977307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1960.986437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1960.995305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1961.023169] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1961.047240] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1961.071903] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1961.082977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1961.110555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1961.143552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1961.169092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1961.178361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1961.189801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1961.201879] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1961.208887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1961.217660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1961.228817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1961.238971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1961.250094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1961.269779] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1961.276721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1961.307407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1961.329046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1961.338223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1961.370104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1961.384268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1961.394359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1961.403831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1961.413851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1961.440789] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1961.447798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1961.456310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1961.479801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1961.487807] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1961.510359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1961.518483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1961.540536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1961.550382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1961.569603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1961.578753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1961.613783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1961.659061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1961.669253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1961.680965] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1961.687917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1961.702290] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1961.716686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1961.725238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1961.747100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1961.770748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1961.789064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1961.798798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1961.829045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1961.838778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1961.857124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1961.873059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1961.884716] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1961.897425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1961.906532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1961.934930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1961.947943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1961.963177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1961.974315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1961.989628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1961.998755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1962.014450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1962.024671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1962.040079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1962.055347] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1962.064110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1962.100097] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1962.116925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1962.155667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1962.176624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1962.204778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1962.220092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1962.245473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1962.267410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1962.282199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1962.293976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1962.306537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1962.318209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1962.333515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1962.344779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1962.361742] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1962.368860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1962.402949] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1962.412513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1962.694633] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1962.710212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1962.717367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1962.762235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1962.778619] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1962.791831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1962.828141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1962.837238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1962.931163] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1962.943100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1962.956877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1962.984671] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1963.030284] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1963.070432] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1963.076864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1963.095368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1963.107082] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1963.119539] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1963.130885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1963.138111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1963.158262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1963.169622] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1963.172033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1963.192698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1963.220482] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1963.235802] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1963.253727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1963.256417] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1963.272099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1963.291325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1963.313967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1963.331729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:13:46 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b", 0x10) [ 1963.355197] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1963.360211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1963.368442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1963.371411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1963.407173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1963.420714] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1963.427472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:13:46 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b7f8bd6", 0x13) [ 1963.455784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 07:13:46 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b7f8bd6", 0x13) 07:13:46 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b", 0x10) 07:13:46 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b7f8bd6", 0x13) 07:13:46 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b", 0x10) 07:13:46 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b7f8bd690cf", 0x15) [ 1964.805815] oom_reaper: reaped process 26056 (syz-executor.1), now anon-rss:0kB, file-rss:14332kB, shmem-rss:8kB [ 1964.845060] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1964.917831] in:imklog cpuset=/ mems_allowed=0-1 [ 1964.926789] CPU: 1 PID: 25975 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 1964.934271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1964.943630] Call Trace: [ 1964.946249] dump_stack+0x1fc/0x2ef [ 1964.949911] dump_header+0x15d/0xc3f [ 1964.953636] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1964.958740] ? ___ratelimit+0x319/0x590 [ 1964.962725] oom_kill_process.cold+0x10/0x692 [ 1964.967226] ? check_preemption_disabled+0x41/0x280 [ 1964.972243] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1964.977505] out_of_memory+0x1072/0x1390 [ 1964.981555] ? oom_killer_disable+0x270/0x270 [ 1964.986039] ? mutex_trylock+0x15f/0x1a0 [ 1964.990089] __alloc_pages_nodemask+0x23a2/0x2890 [ 1964.994931] ? find_get_entry+0x4cd/0x8a0 [ 1964.999084] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1965.003948] alloc_pages_current+0x193/0x2a0 [ 1965.008346] filemap_fault+0x146e/0x2180 [ 1965.012404] ext4_filemap_fault+0x84/0xb0 [ 1965.016536] __do_fault+0x10b/0x4b0 [ 1965.020153] __handle_mm_fault+0x273b/0x41c0 [ 1965.024549] ? vm_insert_page+0x9c0/0x9c0 [ 1965.028963] ? lock_downgrade+0x720/0x720 [ 1965.033114] ? check_preemption_disabled+0x41/0x280 [ 1965.038121] handle_mm_fault+0x436/0xb10 [ 1965.042175] __do_page_fault+0x68e/0xd60 [ 1965.046235] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1965.051260] ? spurious_fault+0x840/0x840 [ 1965.055592] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1965.060525] ? page_fault+0x8/0x30 [ 1965.064056] page_fault+0x1e/0x30 [ 1965.067563] RIP: 0033:0x7fb900a9222d [ 1965.071286] Code: Bad RIP value. [ 1965.074643] RSP: 002b:00007fb8fe42e580 EFLAGS: 00010293 [ 1965.079992] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007fb900a9222d [ 1965.087272] RDX: 0000000000001fa0 RSI: 00007fb8fe42eda0 RDI: 0000000000000004 [ 1965.094531] RBP: 000055d5823c99d0 R08: 0000000000000000 R09: 0000000004000001 [ 1965.101797] R10: 0000000000000001 R11: 0000000000000293 R12: 00007fb8fe42eda0 [ 1965.109065] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007fb8fe42edeb [ 1965.117548] syz-executor.1: vmalloc: allocation failure, allocated 1665191936 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1965.134158] Mem-Info: [ 1965.136600] active_anon:15474 inactive_anon:45380 isolated_anon:0 [ 1965.136600] active_file:12 inactive_file:12 isolated_file:0 [ 1965.136600] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1965.136600] slab_reclaimable:13335 slab_unreclaimable:113670 [ 1965.136600] mapped:22161 shmem:46173 pagetables:630 bounce:0 [ 1965.136600] free:13801 free_pcp:235 free_cma:0 [ 1965.160996] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1965.172743] Node 0 active_anon:57560kB inactive_anon:48420kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72764kB dirty:0kB writeback:0kB shmem:50588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1965.201198] CPU: 0 PID: 26056 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1965.205363] Node 1 active_anon:4336kB inactive_anon:133100kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:15880kB dirty:0kB writeback:0kB shmem:134104kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1965.211759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1965.211765] Call Trace: [ 1965.211795] dump_stack+0x1fc/0x2ef [ 1965.211813] warn_alloc.cold+0x7b/0x18f [ 1965.211831] ? zone_watermark_ok_safe+0x260/0x260 [ 1965.211844] ? retint_kernel+0x2d/0x2d [ 1965.211875] __vmalloc_area_node+0x4fd/0x780 [ 1965.211894] ? __vmalloc_node_range+0x180/0x180 [ 1965.239305] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1965.248564] ? _raw_spin_unlock+0x29/0x40 [ 1965.248579] ? __get_vm_area_node+0x2e2/0x3a0 [ 1965.248597] __vmalloc_node_range+0xed/0x180 [ 1965.248615] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1965.248629] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1965.248641] vmalloc_user+0x70/0xe0 [ 1965.248655] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1965.248667] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1965.248681] __vb2_queue_alloc+0x472/0xe60 [ 1965.248708] vb2_core_create_bufs+0x273/0x7e0 [ 1965.248722] ? __vb2_queue_free+0x870/0x870 [ 1965.248737] ? mutex_trylock+0x1a0/0x1a0 [ 1965.248752] ? __video_do_ioctl+0x632/0xcd0 [ 1965.248772] vb2_create_bufs+0x332/0x620 [ 1965.248790] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1965.248803] ? __video_do_ioctl+0x632/0xcd0 [ 1965.248815] ? mutex_trylock+0x1a0/0x1a0 [ 1965.248829] ? mark_held_locks+0xf0/0xf0 [ 1965.248850] vb2_ioctl_create_bufs+0x20d/0x360 [ 1965.248864] ? memset+0x20/0x40 [ 1965.248882] v4l_create_bufs+0xb2/0x160 [ 1965.248899] __video_do_ioctl+0x49a/0xcd0 [ 1965.248920] ? v4l_querycap+0x340/0x340 [ 1965.248939] ? __might_fault+0x192/0x1d0 [ 1965.248956] ? v4l_querycap+0x340/0x340 [ 1965.248972] video_usercopy+0x13f/0xfa0 [ 1965.248992] ? v4l_enumstd+0x60/0x60 [ 1965.249006] ? do_futex+0x171/0x1880 [ 1965.249022] ? mark_held_locks+0xf0/0xf0 [ 1965.249041] ? debug_check_no_obj_freed+0x201/0x490 [ 1965.249063] ? video_usercopy+0xfa0/0xfa0 [ 1965.249076] v4l2_ioctl+0x147/0x1a0 [ 1965.249088] ? video_devdata+0xa0/0xa0 [ 1965.249103] do_vfs_ioctl+0xcdb/0x12e0 [ 1965.249118] ? lock_downgrade+0x720/0x720 [ 1965.249133] ? check_preemption_disabled+0x41/0x280 [ 1965.249148] ? ioctl_preallocate+0x200/0x200 [ 1965.249167] ? __fget+0x356/0x510 [ 1965.249183] ? do_dup2+0x450/0x450 [ 1965.249197] ? __se_sys_futex+0x298/0x3b0 [ 1965.249219] ksys_ioctl+0x9b/0xc0 [ 1965.249235] __x64_sys_ioctl+0x6f/0xb0 [ 1965.249249] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1965.249263] do_syscall_64+0xf9/0x620 [ 1965.249281] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1965.249292] RIP: 0033:0x7ff9055210f9 [ 1965.249305] Code: Bad RIP value. [ 1965.249312] RSP: 002b:00007ff903a93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1965.249325] RAX: ffffffffffffffda RBX: 00007ff905640f80 RCX: 00007ff9055210f9 [ 1965.249334] RDX: 0000000020000640 RSI: 00000000c100565c RDI: 0000000000000003 [ 1965.249341] RBP: 00007ff90557cae9 R08: 0000000000000000 R09: 0000000000000000 [ 1965.249348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1965.249357] R13: 00007ffefb208e4f R14: 00007ff903a93300 R15: 0000000000022000 [ 1965.269101] Mem-Info: [ 1965.275118] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1965.278538] active_anon:15474 inactive_anon:45380 isolated_anon:0 [ 1965.278538] active_file:12 inactive_file:12 isolated_file:0 [ 1965.278538] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1965.278538] slab_reclaimable:13335 slab_unreclaimable:113670 [ 1965.278538] mapped:22161 shmem:46173 pagetables:630 bounce:0 [ 1965.278538] free:13801 free_pcp:230 free_cma:0 [ 1965.305091] Node 0 DMA32 free:17760kB min:35996kB low:44992kB high:53988kB active_anon:57560kB inactive_anon:48420kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7360kB pagetables:1908kB bounce:0kB free_pcp:416kB local_pcp:232kB free_cma:0kB [ 1965.317295] Node 0 active_anon:57560kB inactive_anon:48420kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72764kB dirty:0kB writeback:0kB shmem:50588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1965.331943] lowmem_reserve[]: 0 0 1 1 1 [ 1965.343130] Node 1 active_anon:4336kB inactive_anon:133100kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:15880kB dirty:0kB writeback:0kB shmem:134104kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1965.363391] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1965.375545] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1965.396871] lowmem_reserve[]: 0 0 0 0 0 [ 1965.403403] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1965.406196] Node 1 Normal free:26576kB min:53876kB low:67344kB high:80812kB active_anon:4336kB inactive_anon:133100kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:768kB pagetables:612kB bounce:0kB free_pcp:500kB local_pcp:248kB free_cma:0kB [ 1965.408148] Node 0 DMA32 free:17760kB min:35996kB low:44992kB high:53988kB active_anon:57560kB inactive_anon:48420kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7360kB pagetables:1908kB bounce:0kB free_pcp:396kB local_pcp:180kB free_cma:0kB [ 1965.426231] lowmem_reserve[]: 0 0 0 0 0 [ 1965.435885] lowmem_reserve[]: 0 0 1 1 1 [ 1965.441315] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1965.441372] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1965.441425] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1965.491589] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB [ 1965.496169] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1965.581486] Node 0 DMA32: 1099*4kB (UMEH) 379*8kB (MEH) 116*16kB (UMEH) 44*32kB (UMEH) 18*64kB (M) 14*128kB (MH) 3*256kB (M) 4*512kB (UMH) 1*1024kB (U) 0*2048kB 0*4096kB = 17476kB [ 1965.597710] lowmem_reserve[]: 0 0 0 0 0 [ 1965.636853] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1965.657212] Node 1 Normal free:26576kB min:53876kB low:67344kB high:80812kB active_anon:4336kB inactive_anon:133100kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:768kB pagetables:612kB bounce:0kB free_pcp:500kB local_pcp:252kB free_cma:0kB [ 1965.692514] Node 1 Normal: 478*4kB (ME) 321*8kB (UME) 241*16kB (UME) 120*32kB (ME) 37*64kB (ME) 8*128kB (UM) 1*256kB (U) 1*512kB (U) 2*1024kB (ME) 0*2048kB 2*4096kB (U) = 26576kB [ 1965.715538] lowmem_reserve[]: 0 0 0 0 0 [ 1965.747511] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1965.779879] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB [ 1965.826958] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1965.854401] Node 0 DMA32: 1099*4kB (UMEH) 379*8kB (MEH) 115*16kB (UME) 44*32kB (UMEH) 18*64kB (M) 14*128kB (MH) 3*256kB (M) 4*512kB (UMH) 1*1024kB (U) 0*2048kB 0*4096kB = 17460kB [ 1965.878367] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1965.898002] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1965.938590] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1965.960671] Node 1 Normal: 478*4kB (ME) 322*8kB (UME) 243*16kB (UME) 120*32kB (ME) 37*64kB (ME) 8*128kB (UM) 1*256kB (U) 1*512kB (U) 2*1024kB (ME) 0*2048kB 2*4096kB (U) = 26616kB [ 1965.982767] 46193 total pagecache pages [ 1966.004019] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1966.032950] 0 pages in swap cache [ 1966.049083] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1966.072616] Swap cache stats: add 0, delete 0, find 0/0 [ 1966.074296] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1966.078067] Free swap = 0kB [ 1966.087541] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1966.105861] Total swap = 0kB [ 1966.109536] 46193 total pagecache pages [ 1966.113527] 0 pages in swap cache [ 1966.116981] Swap cache stats: add 0, delete 0, find 0/0 [ 1966.117254] 2097051 pages RAM [ 1966.125621] Free swap = 0kB [ 1966.128697] Total swap = 0kB [ 1966.138570] 2097051 pages RAM [ 1966.140216] 0 pages HighMem/MovableOnly [ 1966.145135] 0 pages HighMem/MovableOnly [ 1966.145669] 369649 pages reserved [ 1966.156518] 369649 pages reserved [ 1966.163664] 0 pages cma reserved [ 1966.174349] 0 pages cma reserved [ 1966.177744] Unreclaimable slab info: [ 1966.199253] Name Used Total [ 1966.204828] pid_2 16KB 60KB [ 1966.214061] batadv_tt_change_cache 4KB 7KB [ 1966.226664] batadv_tl_cache 9KB 16KB [ 1966.235397] TIPC 16KB 37KB [ 1966.248200] SCTPv6 24KB 43KB [ 1966.256958] SCTP 5KB 7KB [ 1966.268285] DCCPv6 17KB 37KB [ 1966.293682] DCCP 19KB 42KB [ 1966.301526] L2TP/IPv6 19KB 19KB [ 1966.306917] RXRPC 17KB 32KB [ 1966.327981] rxrpc_call_jar 123KB 141KB [ 1966.344872] bridge_fdb_cache 17KB 27KB [ 1966.353942] fib6_nodes 284KB 284KB [ 1966.367431] ip6_dst_cache 768KB 768KB [ 1966.387448] RAWv6 121KB 121KB [ 1966.392910] UDPv6 45KB 48KB [ 1966.398286] TCPv6 27KB 42KB [ 1966.411618] nf_conntrack 17KB 18KB [ 1966.417144] t10_alua_lu_gp_cache 0KB 3KB [ 1966.426035] sd_ext_cdb 0KB 7KB [ 1966.435222] scsi_sense_cache 1056KB 1060KB [ 1966.444185] virtio_scsi_cmd 16KB 16KB [ 1966.452901] sgpool-128 8KB 8KB [ 1966.458286] sgpool-64 4KB 12KB [ 1966.468352] sgpool-32 2KB 15KB [ 1966.492722] sgpool-16 1KB 7KB [ 1966.498131] sgpool-8 0KB 7KB [ 1966.522292] mqueue_inode_cache 15KB 30KB [ 1966.527787] bio_post_read_ctx 14KB 15KB [ 1966.548353] bio-2 14KB 15KB [ 1966.558593] jfs_mp 7KB 7KB [ 1966.585361] cifs_small_rq 15KB 16KB [ 1966.605588] cifs_request 67KB 67KB [ 1966.629333] cifs_mpx_ids 0KB 7KB [ 1966.634755] nfs_commit_data 3KB 14KB [ 1966.638879] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1966.640195] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1966.646652] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1966.663944] nfs_write_data 34KB 44KB [ 1966.669579] ext4_system_zone 1KB 7KB [ 1966.674976] bio-1 1KB 7KB [ 1966.690327] pid_namespace 3KB 11KB [ 1966.695765] rpc_buffers 17KB 25KB [ 1966.704612] rpc_tasks 2KB 7KB [ 1966.717217] UNIX 2328KB 2328KB [ 1966.718878] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1966.722728] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1966.729292] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1966.735801] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1966.759558] tcp_bind_bucket 1KB 4KB [ 1966.764966] ip_fib_trie 42KB 47KB [ 1966.770411] ip_fib_alias 198KB 201KB [ 1966.775807] ip_dst_cache 17KB 20KB [ 1966.791244] RAW 72KB 82KB [ 1966.796731] UDP 69KB 74KB [ 1966.805945] TCP 14KB 16KB [ 1966.817870] hugetlbfs_inode_cache 3KB 15KB [ 1966.827190] fscache_cookie_jar 1KB 11KB [ 1966.848184] eventpoll_pwq 30KB 67KB [ 1966.856745] eventpoll_epi 55KB 63KB [ 1966.877119] inotify_inode_mark 14KB 27KB [ 1966.884450] request_queue 199KB 199KB [ 1966.908877] blkdev_requests 1KB 3KB [ 1966.914368] blkdev_ioc 23KB 38KB [ 1966.926805] bio-0 676KB 885KB [ 1966.935905] biovec-max 1493KB 1641KB [ 1966.948093] biovec-64 696KB 937KB [ 1966.957047] biovec-16 104KB 153KB [ 1966.972951] bio_integrity_payload 1KB 8KB [ 1966.978694] khugepaged_mm_slot 6KB 27KB [ 1966.984233] uid_cache 0KB 4KB [ 1967.000167] dmaengine-unmap-2 0KB 3KB [ 1967.005594] skbuff_fclone_cache 34KB 41KB [ 1967.011190] skbuff_head_cache 8836KB 8838KB [ 1967.016571] configfs_dir_cache 3KB 7KB [ 1967.032335] file_lock_cache 18KB 27KB [ 1967.037822] file_lock_ctx 9KB 11KB [ 1967.043392] fsnotify_mark_connector 7KB 19KB [ 1967.059843] net_namespace 96KB 96KB [ 1967.065232] shmem_inode_cache 8026KB 8174KB [ 1967.070648] task_delay_info 299KB 375KB [ 1967.076142] taskstats 24KB 53KB [ 1967.091638] proc_dir_entry 1016KB 1020KB [ 1967.097073] pde_opener 21KB 54KB [ 1967.102563] seq_file 261KB 401KB [ 1967.107937] sigqueue 52KB 63KB [ 1967.123819] kernfs_node_cache 18250KB 18927KB [ 1967.129475] mnt_cache 231KB 260KB [ 1967.134844] filp 7601KB 7931KB [ 1967.150539] names_cache 95102KB 95161KB [ 1967.155947] iint_cache 28KB 51KB [ 1967.161382] key_jar 4KB 7KB [ 1967.166928] uts_namespace 4KB 7KB [ 1967.177297] nsproxy 3KB 7KB [ 1967.198230] vm_area_struct 3155KB 3700KB [ 1967.224004] mm_struct 520KB 598KB [ 1967.229450] fs_cache 350KB 356KB [ 1967.234827] files_cache 1304KB 1308KB [ 1967.258985] signal_cache 2301KB 2307KB [ 1967.264500] sighand_cache 608KB 638KB [ 1967.277264] task_struct 10365KB 10365KB [ 1967.286327] cred_jar 2415KB 2984KB [ 1967.298614] anon_vma_chain 927KB 1535KB [ 1967.307711] anon_vma 152KB 327KB [ 1967.323637] pid 205KB 228KB [ 1967.329102] Acpi-Operand 156KB 202KB [ 1967.334568] Acpi-ParseExt 9KB 11KB [ 1967.350478] Acpi-Parse 41KB 47KB [ 1967.355972] Acpi-State 52KB 63KB [ 1967.362126] Acpi-Namespace 20KB 27KB [ 1967.367509] numa_policy 0KB 3KB [ 1967.383417] debug_objects_cache 1756KB 1968KB [ 1967.389099] trace_event_file 297KB 298KB [ 1967.394468] ftrace_event_field 398KB 401KB [ 1967.410629] pool_workqueue 155KB 160KB [ 1967.416037] page->ptl 461KB 1031KB [ 1967.421552] kmalloc-2097152 2050KB 2050KB [ 1967.426927] kmalloc-524288 2056KB 2056KB [ 1967.442629] kmalloc-262144 1290KB 1290KB [ 1967.448022] kmalloc-131072 650KB 650KB [ 1967.457936] kmalloc-65536 3168KB 3234KB [ 1967.463731] kmalloc-32768 2442KB 2442KB [ 1967.473943] kmalloc-16384 1468KB 1468KB [ 1967.479555] kmalloc-8192 6063KB 6063KB [ 1967.485605] kmalloc-4096 34688KB 34688KB [ 1967.496735] kmalloc-2048 20272KB 20272KB [ 1967.502675] kmalloc-1024 15435KB 15435KB [ 1967.514195] kmalloc-512 15910KB 15911KB [ 1967.520564] kmalloc-256 6412KB 6423KB [ 1967.526745] kmalloc-128 1535KB 1712KB [ 1967.540386] kmalloc-96 3223KB 4404KB [ 1967.545843] kmalloc-64 2917KB 3744KB [ 1967.556773] kmalloc-32 2034KB 2476KB [ 1967.563198] kmalloc-192 2530KB 2972KB [ 1967.574634] kmem_cache 177KB 183KB [ 1967.581076] Out of memory (oom_kill_allocating_task): Kill process 25975 (in:imklog) score 0 or sacrifice child [ 1967.595692] Killed process 25973 (rsyslogd) total-vm:254332kB, anon-rss:744kB, file-rss:0kB, shmem-rss:0kB [ 1967.610104] oom_reaper: reaped process 25973 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 07:13:51 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b7f8bd690", 0x14) 07:13:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x2, @sliced={0x81, [0x8001, 0x7, 0x5, 0xff, 0x7fff, 0x2bc3, 0x401, 0xbd, 0xffff, 0x4b6, 0x2, 0xfff, 0xfff, 0x4, 0x167, 0x0, 0x5, 0xffff, 0xa249, 0xffff, 0x101, 0x7, 0x0, 0x100, 0x2, 0x1, 0xc000, 0x1, 0x1, 0x9, 0x3, 0xb, 0xbdc, 0x2d, 0x9, 0xffff, 0x9, 0x2, 0x5, 0xff2a, 0x5, 0x3, 0x8, 0x0, 0x2, 0x7], 0x1f}}) 07:13:54 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b", 0x10) 07:13:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6], 0xd3e}}, 0x7ff}) 07:13:54 executing program 3: syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0xfffffffffffffffc, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0xfff, 0xba79, 0x1, {0x2, @sliced={0x5, [0x3, 0x9, 0x8, 0xff4e, 0x0, 0x6, 0xffff, 0x1, 0x6, 0xf088, 0x8001, 0x1, 0x2, 0x8000, 0x4, 0xff, 0x2, 0x8, 0x8, 0x129, 0x81, 0x6, 0x524, 0x9, 0x4, 0x4, 0x1f, 0x0, 0x419, 0x30b8, 0x4c46, 0x6, 0x9, 0x3, 0x8000, 0x3f, 0x8, 0x200, 0x5, 0x96b, 0x7, 0xbe, 0x1, 0xd52, 0x5, 0x5, 0x1, 0x1f], 0x20}}, 0x8000}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x101, 0x2) (async) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x100, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000300)) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x8, @sdr={0xf6671709, 0x7948dfc1}}) 07:13:54 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b7f8bd6", 0x13) 07:13:54 executing program 5: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @sliced={0x81, [0x8001, 0x7, 0x5, 0xff, 0x7fff, 0x2bc3, 0x401, 0xbd, 0xffff, 0x4b6, 0x2, 0xfff, 0xfff, 0x4, 0x167, 0x0, 0x5, 0xffff, 0xa249, 0xffff, 0x101, 0x7, 0x0, 0x100, 0x2, 0x1, 0xc000, 0x1, 0x1, 0x9, 0x3, 0xb, 0xbdc, 0x2d, 0x9, 0xffff, 0x9, 0x2, 0x5, 0xff2a, 0x5, 0x3, 0x8, 0x0, 0x2, 0x7], 0x1f}}) 07:13:54 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0, 0x8, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x2, 0x200, 0x6, 0xe34, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x2, 0x2, 0x3, 0x20, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x48) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x18}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000280)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2}, @exit, @alu={0x4, 0x1, 0xb, 0x2, 0xb, 0xb0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f00000002c0)='GPL\x00', 0xfffffffc, 0xf8, &(0x7f0000000300)=""/248, 0x40f00, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x5, 0x0, 0x1d9c4d4c}, 0x10, r1, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0x1, r3, r4, 0x1]}, 0x80) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001c40)={&(0x7f0000000c00)={0x1010, 0x3ed, 0x8, 0x70bd2b, 0x25dfdbfc, "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", ["", "", "", ""]}, 0x1010}}, 0x4000004) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x1, @pix_mp={0xde4, 0x9, 0x31303553, 0x3, 0x8, [{0x4}, {0x0, 0x9}, {0xffa, 0x8001}, {0x4, 0x2}, {0x5}, {0x1, 0xffffffff}, {0x6, 0x1}, {0x4, 0x3ff}], 0x7f, 0xf7, 0x1, 0x0, 0x1}}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@multiplanar_mmap={0x7601, 0x3, 0x4, 0x4, 0x7, {r5, r6/1000+10000}, {0x2, 0x0, 0x1, 0x1, 0x7, 0x81, "b5432cc9"}, 0x5, 0x1, {&(0x7f0000000180)=[{0x2, 0x43, {0x8}, 0x4}, {0x8, 0xd421, {0x6}, 0x1}]}, 0x6}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b80)={r3, &(0x7f0000000980)="1a398f76eb8ad30436f2c8bfa16f9d828ef95bbeda8daf7f7665d0c54d7e981f4c1bdf16b4c6ff4b5210afe69d07af02aa0f5e3c0282a4023a669028851f05af51f34dc7c9d76b3efeaac65b6f07101c7cb03905dcd5800ba1c22015653135cc2ba95c3579e05a69ae07b6d0872297bbc28a0282050623fac9327936856ef2892d7d4d879c694edce3230d1bbb95cec085e3ddec558ec1baafe8ff39d71436f4c932a31e46339d699a420b3150bef1004caba945ff277c0cafeb71d2743af6af5c107d2229cbc328cee48bc57141b4", &(0x7f0000000a80)=""/244}, 0x20) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0, 0x8, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x2, 0x200, 0x6, 0xe34, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x2, 0x2, 0x3, 0x20, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x18}, 0xc) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000280)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2}, @exit, @alu={0x4, 0x1, 0xb, 0x2, 0xb, 0xb0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f00000002c0)='GPL\x00', 0xfffffffc, 0xf8, &(0x7f0000000300)=""/248, 0x40f00, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x5, 0x0, 0x1d9c4d4c}, 0x10, r1, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0x1, r3, r4, 0x1]}, 0x80) (async) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001c40)={&(0x7f0000000c00)={0x1010, 0x3ed, 0x8, 0x70bd2b, 0x25dfdbfc, "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", ["", "", "", ""]}, 0x1010}}, 0x4000004) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x1, @pix_mp={0xde4, 0x9, 0x31303553, 0x3, 0x8, [{0x4}, {0x0, 0x9}, {0xffa, 0x8001}, {0x4, 0x2}, {0x5}, {0x1, 0xffffffff}, {0x6, 0x1}, {0x4, 0x3ff}], 0x7f, 0xf7, 0x1, 0x0, 0x1}}) (async) clock_gettime(0x0, &(0x7f0000000140)) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@multiplanar_mmap={0x7601, 0x3, 0x4, 0x4, 0x7, {r5, r6/1000+10000}, {0x2, 0x0, 0x1, 0x1, 0x7, 0x81, "b5432cc9"}, 0x5, 0x1, {&(0x7f0000000180)=[{0x2, 0x43, {0x8}, 0x4}, {0x8, 0xd421, {0x6}, 0x1}]}, 0x6}) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b80)={r3, &(0x7f0000000980)="1a398f76eb8ad30436f2c8bfa16f9d828ef95bbeda8daf7f7665d0c54d7e981f4c1bdf16b4c6ff4b5210afe69d07af02aa0f5e3c0282a4023a669028851f05af51f34dc7c9d76b3efeaac65b6f07101c7cb03905dcd5800ba1c22015653135cc2ba95c3579e05a69ae07b6d0872297bbc28a0282050623fac9327936856ef2892d7d4d879c694edce3230d1bbb95cec085e3ddec558ec1baafe8ff39d71436f4c932a31e46339d699a420b3150bef1004caba945ff277c0cafeb71d2743af6af5c107d2229cbc328cee48bc57141b4", &(0x7f0000000a80)=""/244}, 0x20) (async) 07:13:54 executing program 2: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b", 0x10) 07:13:54 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b7f8bd6", 0x13) 07:13:54 executing program 5: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @sliced={0x81, [0x8001, 0x7, 0x5, 0xff, 0x7fff, 0x2bc3, 0x401, 0xbd, 0xffff, 0x4b6, 0x2, 0xfff, 0xfff, 0x4, 0x167, 0x0, 0x5, 0xffff, 0xa249, 0xffff, 0x101, 0x7, 0x0, 0x100, 0x2, 0x1, 0xc000, 0x1, 0x1, 0x9, 0x3, 0xb, 0xbdc, 0x2d, 0x9, 0xffff, 0x9, 0x2, 0x5, 0xff2a, 0x5, 0x3, 0x8, 0x0, 0x2, 0x7], 0x1f}}) 07:13:54 executing program 2: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b", 0x10) 07:13:54 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b7f8bd6", 0x13) [ 1976.457545] oom_reaper: reaped process 26371 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 1976.511129] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1976.528813] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1976.533652] CPU: 0 PID: 8132 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 1976.541108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1976.550468] Call Trace: [ 1976.553098] dump_stack+0x1fc/0x2ef [ 1976.556746] dump_header+0x15d/0xc3f [ 1976.560474] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1976.565585] ? ___ratelimit+0x319/0x590 [ 1976.569583] oom_kill_process.cold+0x10/0x692 [ 1976.574093] ? check_preemption_disabled+0x41/0x280 [ 1976.579121] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1976.584489] out_of_memory+0x1072/0x1390 [ 1976.588583] ? oom_killer_disable+0x270/0x270 [ 1976.593089] ? mutex_trylock+0x15f/0x1a0 [ 1976.597186] __alloc_pages_nodemask+0x23a2/0x2890 [ 1976.602053] ? find_get_entry+0x4cd/0x8a0 [ 1976.606220] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1976.611133] alloc_pages_current+0x193/0x2a0 [ 1976.615571] filemap_fault+0x146e/0x2180 [ 1976.619665] ext4_filemap_fault+0x84/0xb0 [ 1976.623819] __do_fault+0x10b/0x4b0 [ 1976.627454] __handle_mm_fault+0x273b/0x41c0 [ 1976.631892] ? vm_insert_page+0x9c0/0x9c0 [ 1976.636052] ? __fget+0x356/0x510 [ 1976.639531] ? check_preemption_disabled+0x41/0x280 [ 1976.644555] handle_mm_fault+0x436/0xb10 [ 1976.648611] __do_page_fault+0x68e/0xd60 [ 1976.652668] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1976.657673] ? spurious_fault+0x840/0x840 [ 1976.661842] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1976.666783] ? page_fault+0x8/0x30 [ 1976.670328] page_fault+0x1e/0x30 [ 1976.673772] RIP: 0033:0x467800 [ 1976.676960] Code: Bad RIP value. [ 1976.680327] RSP: 002b:000000c0006dd7e8 EFLAGS: 00010246 [ 1976.685680] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000467800 [ 1976.692948] RDX: 0000000000000080 RSI: 000000c0006dd840 RDI: 0000000000000004 [ 1976.700205] RBP: 000000c0006dde40 R08: 0000000000000000 R09: 000001cc295c7197 [ 1976.707476] R10: 000000000000015f R11: 0000000000000246 R12: 000000c0006dd870 [ 1976.714767] R13: 0000000000000004 R14: 000000c000a4f1e0 R15: 0000000000000000 [ 1976.725931] Mem-Info: [ 1976.728437] active_anon:15851 inactive_anon:45379 isolated_anon:0 [ 1976.728437] active_file:35 inactive_file:19 isolated_file:0 [ 1976.728437] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1976.728437] slab_reclaimable:13402 slab_unreclaimable:114027 [ 1976.728437] mapped:22214 shmem:46172 pagetables:576 bounce:0 [ 1976.728437] free:13828 free_pcp:62 free_cma:0 [ 1976.735817] syz-executor.1: vmalloc: allocation failure, allocated 1662029824 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1976.765086] Node 0 active_anon:59952kB inactive_anon:48432kB active_file:132kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72844kB dirty:0kB writeback:0kB shmem:50600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1976.787599] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1976.807447] Node 1 active_anon:3448kB inactive_anon:133084kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16012kB dirty:0kB writeback:0kB shmem:134088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1976.821374] CPU: 1 PID: 26371 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1976.841493] Node 0 DMA free:10896kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1976.844021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1976.844031] Call Trace: [ 1976.873746] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1976.879525] dump_stack+0x1fc/0x2ef [ 1976.879543] warn_alloc.cold+0x7b/0x18f [ 1976.879560] ? zone_watermark_ok_safe+0x260/0x260 [ 1976.879574] ? rcu_nmi_exit+0xb3/0x180 [ 1976.879607] __vmalloc_area_node+0x4fd/0x780 [ 1976.882176] Node 0 DMA32 free:18260kB min:35996kB low:44992kB high:53988kB active_anon:59860kB inactive_anon:48432kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:1968kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1976.887224] ? __vmalloc_node_range+0x180/0x180 [ 1976.894409] lowmem_reserve[]: 0 0 1 1 1 [ 1976.894816] ? _raw_spin_unlock+0x29/0x40 [ 1976.899694] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1976.903526] ? __get_vm_area_node+0x2e2/0x3a0 [ 1976.907906] lowmem_reserve[]: 0 0 0 0 0 [ 1976.936507] __vmalloc_node_range+0xed/0x180 [ 1976.936525] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1976.936540] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1976.936553] vmalloc_user+0x70/0xe0 [ 1976.936566] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1976.936578] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1976.936591] __vb2_queue_alloc+0x472/0xe60 [ 1976.936619] vb2_core_create_bufs+0x273/0x7e0 [ 1976.936634] ? __vb2_queue_free+0x870/0x870 [ 1976.936649] ? mutex_trylock+0x1a0/0x1a0 [ 1976.936687] ? __video_do_ioctl+0x632/0xcd0 [ 1976.936706] vb2_create_bufs+0x332/0x620 [ 1976.936724] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1976.936738] ? __video_do_ioctl+0x632/0xcd0 [ 1976.936752] ? mutex_trylock+0x1a0/0x1a0 [ 1976.936767] ? mark_held_locks+0xf0/0xf0 [ 1976.936783] ? futex_wait_queue_me+0x404/0x5e0 [ 1976.936802] vb2_ioctl_create_bufs+0x20d/0x360 [ 1976.936817] ? memset+0x20/0x40 [ 1976.936841] v4l_create_bufs+0xb2/0x160 [ 1976.936860] __video_do_ioctl+0x49a/0xcd0 [ 1976.936881] ? v4l_querycap+0x340/0x340 [ 1976.936900] ? __might_fault+0x192/0x1d0 [ 1976.936919] ? v4l_querycap+0x340/0x340 [ 1976.936935] video_usercopy+0x13f/0xfa0 [ 1976.936956] ? v4l_enumstd+0x60/0x60 [ 1976.936971] ? do_futex+0x171/0x1880 [ 1976.936986] ? mark_held_locks+0xf0/0xf0 [ 1976.937005] ? debug_check_no_obj_freed+0x201/0x490 [ 1976.937029] ? video_usercopy+0xfa0/0xfa0 [ 1976.937041] v4l2_ioctl+0x147/0x1a0 [ 1976.937054] ? video_devdata+0xa0/0xa0 [ 1976.937070] do_vfs_ioctl+0xcdb/0x12e0 [ 1976.937086] ? lock_downgrade+0x720/0x720 [ 1976.937101] ? check_preemption_disabled+0x41/0x280 [ 1976.937116] ? ioctl_preallocate+0x200/0x200 [ 1976.937134] ? __fget+0x356/0x510 [ 1976.937152] ? do_dup2+0x450/0x450 [ 1976.937166] ? __se_sys_futex+0x298/0x3b0 [ 1976.937189] ksys_ioctl+0x9b/0xc0 [ 1976.937205] __x64_sys_ioctl+0x6f/0xb0 [ 1976.937220] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1976.937233] do_syscall_64+0xf9/0x620 [ 1976.937252] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1976.937263] RIP: 0033:0x7ff9055210f9 [ 1976.937277] Code: Bad RIP value. [ 1976.937285] RSP: 002b:00007ff903a93168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1976.937299] RAX: ffffffffffffffda RBX: 00007ff905640f80 RCX: 00007ff9055210f9 [ 1976.937307] RDX: 0000000020000640 RSI: 00000000c100565c RDI: 0000000000000003 [ 1976.937315] RBP: 00007ff90557cae9 R08: 0000000000000000 R09: 0000000000000000 [ 1976.937323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1976.937332] R13: 00007ffefb208e4f R14: 00007ff903a93300 R15: 0000000000022000 [ 1976.943754] Mem-Info: [ 1976.961902] Node 1 Normal free:26952kB min:53876kB low:67344kB high:80812kB active_anon:3448kB inactive_anon:133084kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:332kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1976.980814] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.996409] lowmem_reserve[]: 0 0 0 0 0 [ 1977.008443] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.033847] active_anon:15827 inactive_anon:45379 isolated_anon:0 [ 1977.033847] active_file:11 inactive_file:10 isolated_file:0 [ 1977.033847] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1977.033847] slab_reclaimable:13402 slab_unreclaimable:114021 [ 1977.033847] mapped:22189 shmem:46172 pagetables:575 bounce:0 [ 1977.033847] free:14029 free_pcp:62 free_cma:0 [ 1977.082943] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10896kB [ 1977.092725] Node 0 active_anon:59860kB inactive_anon:48432kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72744kB dirty:0kB writeback:0kB shmem:50600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1977.108391] Node 0 DMA32: 1085*4kB (UME) 428*8kB (UME) 126*16kB (UME) 52*32kB (UME) 5*64kB (UM) 13*128kB (UM) 3*256kB (M) 4*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 18292kB [ 1977.120402] Node 1 active_anon:3448kB inactive_anon:133084kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16012kB dirty:0kB writeback:0kB shmem:134088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1977.128317] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1977.135741] Node 0 DMA free:10896kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1977.141666] Node 1 Normal: 466*4kB (ME) 352*8kB (ME) 234*16kB (ME) 121*32kB (UME) 45*64kB (ME) 8*128kB (UM) 2*256kB (UM) 0*512kB 2*1024kB (ME) 0*2048kB 2*4096kB (U) = 26952kB [ 1977.151103] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1977.168388] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1977.175379] Node 0 DMA32 free:18260kB min:35996kB low:44992kB high:53988kB active_anon:59860kB inactive_anon:48432kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:1968kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1977.193040] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1977.207047] lowmem_reserve[]: 0 0 1 1 1 [ 1977.221235] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1977.230848] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1977.262031] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1977.273517] lowmem_reserve[]: 0 0 0 0 0 [ 1977.310999] 46193 total pagecache pages [ 1977.321532] Node 1 Normal free:26952kB min:53876kB low:67344kB high:80812kB active_anon:3448kB inactive_anon:133084kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:332kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1977.347017] 0 pages in swap cache [ 1977.374074] lowmem_reserve[]: 0 0 0 0 0 [ 1977.396820] Swap cache stats: add 0, delete 0, find 0/0 [ 1977.406773] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10896kB [ 1977.429665] Free swap = 0kB [ 1977.457710] Node 0 DMA32: 1085*4kB (UME) 428*8kB (UME) 126*16kB (UME) 52*32kB (UME) 5*64kB (UM) 13*128kB (UM) 3*256kB (M) 4*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 18292kB [ 1977.493509] Total swap = 0kB [ 1977.500549] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1977.515463] 2097051 pages RAM [ 1977.541832] Node 1 Normal: 466*4kB (ME) 352*8kB (ME) 234*16kB (ME) 121*32kB (UME) 45*64kB (ME) 8*128kB (UM) 2*256kB (UM) 0*512kB 2*1024kB (ME) 0*2048kB 2*4096kB (U) = 26952kB [ 1977.550674] 0 pages HighMem/MovableOnly [ 1977.591042] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1977.595283] 369649 pages reserved [ 1977.605135] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1977.605149] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1977.613294] 0 pages cma reserved [ 1977.635981] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1977.642099] Unreclaimable slab info: [ 1977.644422] 46193 total pagecache pages [ 1977.662991] Name Used Total [ 1977.674208] 0 pages in swap cache [ 1977.676360] pid_2 12KB 60KB [ 1977.686553] Swap cache stats: add 0, delete 0, find 0/0 [ 1977.697563] batadv_tt_change_cache 4KB 7KB [ 1977.709374] Free swap = 0kB [ 1977.713475] batadv_tl_cache 8KB 16KB [ 1977.714082] Total swap = 0kB [ 1977.719661] TIPC 16KB 37KB [ 1977.719682] SCTPv6 24KB 43KB [ 1977.719691] SCTP 1KB 3KB [ 1977.719709] DCCPv6 17KB 30KB [ 1977.719722] DCCP 16KB 28KB [ 1977.734089] 2097051 pages RAM [ 1977.743103] L2TP/IPv6 21KB 26KB [ 1977.748031] 0 pages HighMem/MovableOnly [ 1977.749859] RXRPC 17KB 32KB [ 1977.749870] rxrpc_call_jar 123KB 141KB [ 1977.749883] bridge_fdb_cache 15KB 27KB [ 1977.749897] fib6_nodes 263KB 284KB [ 1977.749908] ip6_dst_cache 836KB 836KB [ 1977.768054] 369649 pages reserved [ 1977.772591] RAWv6 121KB 121KB [ 1977.776538] 0 pages cma reserved [ 1977.781906] UDPv6 41KB 48KB [ 1977.781920] TCPv6 24KB 42KB [ 1977.781939] nf_conntrack 17KB 18KB [ 1977.782001] t10_alua_lu_gp_cache 0KB 3KB [ 1977.782016] sd_ext_cdb 0KB 7KB [ 1977.782026] scsi_sense_cache 1056KB 1060KB [ 1977.782036] virtio_scsi_cmd 16KB 16KB [ 1977.782050] sgpool-128 8KB 8KB [ 1977.782060] sgpool-64 4KB 12KB [ 1977.782070] sgpool-32 2KB 15KB [ 1977.782079] sgpool-16 1KB 7KB [ 1977.782092] sgpool-8 0KB 7KB [ 1977.902748] mqueue_inode_cache 10KB 30KB [ 1977.908219] bio_post_read_ctx 14KB 15KB [ 1977.913692] bio-2 14KB 15KB [ 1977.922408] jfs_mp 7KB 7KB [ 1977.927826] cifs_small_rq 15KB 16KB [ 1977.933233] cifs_request 67KB 67KB [ 1977.941992] cifs_mpx_ids 0KB 7KB [ 1977.947480] nfs_commit_data 3KB 14KB [ 1977.952887] nfs_write_data 34KB 44KB [ 1977.961644] ext4_system_zone 1KB 7KB [ 1977.967126] bio-1 1KB 7KB [ 1977.972551] pid_namespace 3KB 11KB [ 1977.978013] rpc_buffers 17KB 25KB [ 1977.986639] rpc_tasks 2KB 7KB [ 1977.992144] UNIX 2321KB 2351KB [ 1977.997598] tcp_bind_bucket 1KB 4KB [ 1978.006087] ip_fib_trie 39KB 47KB [ 1978.011501] ip_fib_alias 186KB 201KB [ 1978.016875] ip_dst_cache 13KB 20KB [ 1978.025595] RAW 72KB 82KB [ 1978.031052] UDP 67KB 74KB [ 1978.036451] TCP 8KB 16KB [ 1978.044940] hugetlbfs_inode_cache 3KB 15KB [ 1978.050786] fscache_cookie_jar 1KB 11KB [ 1978.056239] eventpoll_pwq 20KB 63KB [ 1978.064806] eventpoll_epi 36KB 63KB [ 1978.070253] inotify_inode_mark 9KB 27KB [ 1978.075703] request_queue 199KB 199KB [ 1978.084221] blkdev_requests 1KB 3KB [ 1978.089811] blkdev_ioc 25KB 38KB [ 1978.095273] bio-0 734KB 885KB [ 1978.103877] biovec-max 1485KB 1592KB [ 1978.109294] biovec-64 682KB 937KB [ 1978.114658] biovec-16 110KB 153KB [ 1978.123180] bio_integrity_payload 1KB 8KB [ 1978.128931] khugepaged_mm_slot 2KB 27KB [ 1978.134408] uid_cache 0KB 4KB [ 1978.142959] dmaengine-unmap-2 0KB 3KB [ 1978.148357] skbuff_fclone_cache 31KB 41KB [ 1978.153893] skbuff_head_cache 8776KB 8872KB [ 1978.162568] configfs_dir_cache 3KB 7KB [ 1978.168025] file_lock_cache 22KB 31KB [ 1978.173435] file_lock_ctx 9KB 11KB [ 1978.182222] fsnotify_mark_connector 4KB 19KB [ 1978.188125] net_namespace 96KB 96KB [ 1978.193526] shmem_inode_cache 8001KB 8170KB [ 1978.202274] task_delay_info 295KB 375KB [ 1978.207761] taskstats 17KB 53KB [ 1978.213196] proc_dir_entry 1002KB 1020KB [ 1978.221979] pde_opener 16KB 54KB [ 1978.227374] seq_file 240KB 401KB [ 1978.235357] sigqueue 31KB 63KB [ 1978.246886] kernfs_node_cache 18234KB 18927KB [ 1978.254786] mnt_cache 180KB 236KB [ 1978.265835] filp 7282KB 7927KB [ 1978.273922] names_cache 97180KB 97218KB [ 1978.285075] iint_cache 31KB 51KB [ 1978.292988] key_jar 4KB 7KB [ 1978.303894] uts_namespace 2KB 7KB [ 1978.311870] nsproxy 1KB 7KB [ 1978.317294] vm_area_struct 3031KB 3681KB [ 1978.330890] mm_struct 520KB 598KB [ 1978.336311] fs_cache 342KB 356KB [ 1978.344088] files_cache 1283KB 1308KB [ 1978.355775] signal_cache 2265KB 2307KB [ 1978.363540] sighand_cache 538KB 631KB [ 1978.374973] task_struct 10339KB 10346KB [ 1978.382762] cred_jar 2343KB 2984KB [ 1978.388133] anon_vma_chain 885KB 1535KB [ 1978.401639] anon_vma 125KB 327KB [ 1978.407017] pid 194KB 228KB [ 1978.414896] Acpi-Operand 156KB 202KB [ 1978.425965] Acpi-ParseExt 9KB 11KB [ 1978.435010] Acpi-Parse 41KB 47KB [ 1978.446007] Acpi-State 52KB 63KB [ 1978.456873] Acpi-Namespace 20KB 27KB [ 1978.467899] numa_policy 0KB 3KB [ 1978.484527] debug_objects_cache 1741KB 1968KB [ 1978.492740] trace_event_file 297KB 298KB [ 1978.498123] ftrace_event_field 398KB 401KB [ 1978.512922] pool_workqueue 142KB 156KB [ 1978.524841] page->ptl 455KB 1031KB [ 1978.535268] kmalloc-2097152 2050KB 2050KB [ 1978.547118] kmalloc-524288 2056KB 2056KB [ 1978.557272] kmalloc-262144 1290KB 1290KB [ 1978.574100] kmalloc-131072 650KB 650KB [ 1978.584389] kmalloc-65536 3168KB 3234KB [ 1978.596489] kmalloc-32768 2376KB 2442KB [ 1978.606917] kmalloc-16384 1435KB 1435KB [ 1978.618956] kmalloc-8192 6022KB 6047KB [ 1978.624431] kmalloc-4096 33252KB 33290KB [ 1978.639421] kmalloc-2048 19864KB 20227KB [ 1978.654140] kmalloc-1024 14740KB 15427KB [ 1978.660709] kmalloc-512 15967KB 15967KB [ 1978.667811] kmalloc-256 6206KB 6423KB [ 1978.679460] kmalloc-128 1524KB 1712KB [ 1978.685506] kmalloc-96 3223KB 4404KB [ 1978.696225] kmalloc-64 2911KB 3744KB [ 1978.702726] kmalloc-32 2030KB 2476KB [ 1978.708141] kmalloc-192 2504KB 2972KB [ 1978.719421] kmem_cache 177KB 183KB [ 1978.724876] Out of memory (oom_kill_allocating_task): Kill process 8132 (syz-fuzzer) score 0 or sacrifice child [ 1978.740796] Killed process 24975 (syz-executor.0) total-vm:48512kB, anon-rss:436kB, file-rss:4kB, shmem-rss:0kB [ 1978.754947] oom_reaper: reaped process 24975 (syz-executor.0), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 1982.206364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1982.216037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1982.230082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1982.236801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1982.246071] device bridge_slave_1 left promiscuous mode [ 1982.252237] bridge0: port 2(bridge_slave_1) entered disabled state [ 1982.259841] device bridge_slave_0 left promiscuous mode [ 1982.265752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1982.276206] device veth1_macvtap left promiscuous mode [ 1982.281863] device veth0_macvtap left promiscuous mode [ 1982.287286] device veth1_vlan left promiscuous mode [ 1982.292637] device veth0_vlan left promiscuous mode 07:14:07 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400], 0xd3e}}, 0x7ff}) 07:14:07 executing program 2: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b", 0x10) 07:14:07 executing program 5: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @sliced={0x81, [0x8001, 0x7, 0x5, 0xff, 0x7fff, 0x2bc3, 0x401, 0xbd, 0xffff, 0x4b6, 0x2, 0xfff, 0xfff, 0x4, 0x167, 0x0, 0x5, 0xffff, 0xa249, 0xffff, 0x101, 0x7, 0x0, 0x100, 0x2, 0x1, 0xc000, 0x1, 0x1, 0x9, 0x3, 0xb, 0xbdc, 0x2d, 0x9, 0xffff, 0x9, 0x2, 0x5, 0xff2a, 0x5, 0x3, 0x8, 0x0, 0x2, 0x7], 0x1f}}) 07:14:07 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400], 0xd3e}}, 0x7ff}) 07:14:07 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0, 0x8, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x2, 0x200, 0x6, 0xe34, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x2, 0x2, 0x3, 0x20, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x48) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x18}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000280)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2}, @exit, @alu={0x4, 0x1, 0xb, 0x2, 0xb, 0xb0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f00000002c0)='GPL\x00', 0xfffffffc, 0xf8, &(0x7f0000000300)=""/248, 0x40f00, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x5, 0x0, 0x1d9c4d4c}, 0x10, r1, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0x1, r3, r4, 0x1]}, 0x80) (async, rerun: 64) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001c40)={&(0x7f0000000c00)={0x1010, 0x3ed, 0x8, 0x70bd2b, 0x25dfdbfc, "aadd2a7fc5214f17e893ae75ecd55871f3b8f6422c29b818e1938b7875270a4ce009baf6054f85e4221df7f167eb922164afe7a3f6491f5df1cea60c981a9515b247d8bdccd7636f1457c54b78a3634ceff0f9f8600530f1223b49c393e1348086c087f22b5f2269f0757e7e2128a3bfac1dd905f62db86e596cfd98bd12b441ec7282e61e81d9ffa7cd53747707fe4a26b3eef1ee41821590ccf2e1b55968765f79c3ab11f1b5c318f4640795d485e021a1c02317319c9e3cf1448e5b2e2a8ff0d1ec65a598510eba346a96fdc0dc0d80c93290d0f96bdd6b0db431d410edc77117b029e7d3506cad6fe99cead6a5795c669bef3b65303583f405987368a5467a45cf3c414aa104e60813c175f0ad59acf7bcecdded45ec5fe1569a192107de6cad5cd6bbc1a8b1cc5a55d2111d1fabc503f36eefb3bf844270f3772291743d8fa51a4bbefe255158e037cd69fd49f2e6b456c038b13dbe8dedc949758e727d867f66e582340a67e4ebfaeb333164c37ae27f6180dbdf99cec13accfcb947efdb8c348dccf5780a7e09539aa06d145f504bae8568c383146538f5d8947cb7503e737bb8c95a7f80bf572861e9c576e527987fa08091fc5685390aca38caa0b0897ed73904719b4ba6f2c2ccb1f3e9ec19f354f16cc9921b41336aef05f04a098ace51cef91ed64e0079286fc6a3d073ab4f0406b8a88d0054ada9c1b120cb6eac0084e222d8cfcb788e2656576469f2f2248bce64bd5651ef57da87fb6ca00a692a19e6b8a01514d1eaa6c8dbce6615d323edeefd7369c08e102be407c9e8176f445dd715612e8eadc3adf038d0bbb505f4e246e6e4f005080b80cbad28d0f4cf10341be288c826513c63b61ece0066357dc2920f3a4cebfb6f646f123d7d44cd34d884b106bf02b7c6b3a2b78edbab9ec22f2bd7eb536ad82416ebb53583c7a628087b5dcb32986c2b836e7cf7c9a740376bdbbdfa4ca2bc091bbb431d46fda6af8bab00a3fbedcb04b82cf2db894dcd6383cd66bce0f5b7a38a80de6634d65f9cd9737345c83ae894a8e2f7033a70bc78bf3f0f7b33671bf25addc92f1930ed6efa15f76d6ca6f4b9b43e963600ec106c249b13bf770bbdbd1c818481f35ac4de893067b5cc108559eed848d77921d39bbaeae0237d8122851c7bd8c995d82c844dd5c14edf162f78ad15baac43457d0b34983d4696b182b35c2059de1736fbd531239187e8d70d1cccf5bc5b817deb8bfd110828742707a8d67cd726ac6c1392537e54b7eb19465142758d31e84247c0a3c838708b0273aa3dd5332bcb6b51b80eee29fc3cab4a10f27fe9ff28697bfce9412c9b89bf863575f9fdef755026a61dee10c761308db7f44eeda7e1c0df25100c87e03cc9ae06d0b4e53aca64d902f04fc3dfc65eff0b3d2bedf3c584220e224236f75a2e72de6d3d5eaf5378e33730899a8ffcf3be435443a3401541c96c0f7ba7f4c4f2dfff83ed0937e78a6ae7a5280daf0a1dfe7f89ce746e6e0d4d18d0f5f9fad00d44f049f3c892e104ef246ab408b6717dfa4af5e31fa93c4027308a057e4e4e34c4d93a5f36861bef4602ed56710c120e3fa809b384c3d0095a86a495e1e7d8d72fe8a3c8615d65eaa70571b6b11e3d4512ae71b24b3e3b8090018051f1bd777a2971354a3f75495887a497b82966fe38c6209b76a5eee1d15f34fff4d21a0145b7cadb9fa7baf3f77aaf17ccc9f4c1dbfbe9ec94c7fd55abcde8392c285db35da0f226078c6aecaef4b8aac21247e3f38f61a88843c1e56927092dc73a17499f8315f7f36170ba6cad2a897f0d688fc65af64ce935285793b04f13ee83e631b9fcd9ff9761e93dbbf055180f1ea2e18ff6972b76c89284b5eeedb50ce4eda5c1c089ff6834a945cdaa278c443bc135b8a2edd241f702029e7daf647a303c1d8d705428bf1239da2aaf22468273eaf543ee7818d09637722b5b6a9d0115e818cfcb5c2a8d35781d94e8e3b60c4badf85d301dc0eca0db7e388662ef52d92f9f5fcb2e2a497ce1176804ddd642a0d0d4a7f3d787eff682bbc664bb3dd4ffc01881eb2241f455bd25dca79157907cbaf10e6184c098fb2937df8378c120f43e1cc984d266c4ba746a693d21668de41476f9aee267b43975ad336f9880e2329e49569ecd37dbb30f2c372136f757c477c393af7594e0f289da3669966cb51b972816fccfef49d8aa787d3acd3d24b6e517bf70f128ec3f43aa1de001619fef5b6c9096c74c11b093f75eb7de3c78ebab4ca4cdfeb4ed5cfa2e67dbcc6ac33b96f0a7970f2a31f04b7be6d6ae38ff092d2fdcd0c498ccff277aa397be9eee7737dcd543726521077dc2dd130192abb12006174e552b9efba3866badb9d9af061cbb3c4d7a11897e82df6d5df017f8084bad99aac01149f3b9213f998ee25490ee0598812d36bd76127201c85112afe111ce5829f5d6c6b725c67f624b273978549120f7054c22f56013dfe5f52e733e31842f77f585b103f5f4fa6abd72574b5c8fa06be32da72a82ce34d80650aa4931d610773944ddca94e08c6b212aca72c5bd7a5e8b153c9ae68154e6806236aadc7324ffe863b7472d55466674fa65816a42b7b196f8b5572bf19fd58bc374e7d24ffcf23e4f90d296fd1f67e5a67790354bcfb9c4f1155e1667db92644c782ccb5c4a9ee3f95f5948df2b35ea9cbbe53ae62bb5cf5cfab53de36af8afcdbc9158c7d26c6ee82eb48b32b0cbc90d779856e2c6a04ebe6048407130923afd15713bd55d2a20bb098c81205d1cc26a473426d81deed37f2482cde3d162df11553f8632f31199fdccf4e83ece6b66522897fae09ab553820c3fd5baaf63185873e670b2c23eb7f1edfd74999942d54707a2dd914f5ea23e01921a5df8d741ff12281f048277f2d32329e54932f016db4f6a62b2c232b92e999aef70881dc3b2a78464d41efe1e241065d1c604cca7a15775c6a5f7f766ad1d2cb1979267cd02de7af764f19a194b312a045f6037566df6123029edc9291a039ffecd1e555f3d6bef53c9fb444ea4e49e384dd072fe19670f54e1591a8e2dd10ad2c51af9720e53a1fdf9561cddbc9b3d605ac46b594fbd17fee85d99b97f98c2abe9ea8e0842f923e4faafc5543c1a5b76a74cfcfcfd38ab62e36c6c5451ac540767f70b55c173756402a8e2879f7e4cfd707a8f00ce888d1b5b756577ba054ab6c651cffe1104489e112ff0e0f27eafc54068693dc85e8fa1ad003d5041706fdde1f78959cd4f534f763b1070ec32bbb459f687ba9690012eb885b0adaf49369ce6118402c5bd6139badbb7097fe6bf616fd3d445fc2afc1684cb244b41197078b1acfafa1bdf89f9f61dec7c17b01321ab0150da254e3b0a97cfd4c7c075b4f93938678800b627e940a1270e07e597808a39408029af31accd27875a8a3ecb208d3351d535c4438379e1417d4575ff5f182c8ef3d88fbde3b4abed159313c72fff304f2fce369066fadb9ce949522ebfca51d0357fd22e6fb4b473b7699a31c2523ab14974290307ac815066b4aaf433339ce1a811a7ae5b90b7783e8155bb2f6869295dbc60e154eec8e44ea56e917c66911add76aa5a2a65b17eae413abf20f5d3a26652399964ffd820f959cdf18f3afeb9f3a102752b6d640e8f946fff9e86bcd69910d5163422c91fae7aa432746a5278d72b5db741d36f2f3a15bebb7a11d2eb2cb8e39bafd9c38315383f8e0a12f4814102bebc1a4954bf2b7eaaca7119824350ec4d6d3f8c0fc2a8ebea5afd2c294e43d76a18daab735a55a7a1d50808a8fcf227ae1305cbcc46ab6aef1092245adbf22caa8ae97b7047ef9b722696f27ff991d2538721d54ec43847be1827903786bc25e067ba54c404b7ece951fcde20b00da06f25f76af802179c08d37e92c438cbb0847ee560c60f7d37be7cba4d2c0ff0fbb2a4a7b2ac9534dabfb516f4d4c2791bd45ecab2888164e6681a7a67f5995cd69a8f54d92a05bac99cb1676df2cfa09ffd9b7dd06b2c72a5add5588746547b67176678d44febae0ee16c701816bca5229df171a98740d9b3c45bf8c63a518adb73fbc871c45021b9c584fbe27a10b38a478449b01713c585a71d70019c4d4f91550e335659c4ac5d395f2467a13dd9e1ee7c26c43dbd71f22186410fb02c130039a3d3b6637dda3b670344dbddeef91c24c598d1ef1787c5db68c13e1e55f7d1b5a4810668ec5f9fae93d29842591edf0d5d1ff1aa1584adfbb7515ff8bf86734dc9a85b7bd20b9c846adc351ea0d9bdd11bf31ff1528d56682860b2e4996e8ff408f7c6a24455f2371e95e7db20e77fb99659539fc22848a1efb546430391afab3b58a54e71cbb61527e5cb372b192f050943094de26f54fa5e03a11e3c44caa30548ff20d2e01c9ae008f568ee65231572f62f4d8d6d03ca11d4d94273780503f2df398dd6e6484441c289e017c735359d607aef72915c78e679ce85e062ed24ac8321d0106c927637576ebb90ef5207817b9765e9591b5dd7e6e13e3b4daff7229ef0e3eb37162495f19388875770b77a7743e59e9398f7e11417c709a6dcb8d39f5c55044fc753e67bb5c06057b58ecfeed5c5936a0a6a20ad55db93466c4d4dea2eb352006f08f9e37bad3b96f08c27751cb5d07aad728c73843211c887d1d7e6bf669cbd7d66fa4dbb8ed6c5191add83680d91dfc719ce1014e16df33a07db6ba717d809e660c880ecccff287117658f1ca9065eb4071206057b44cc8854fc733c0b647e782879f1c7daeaecc94888650e0f9e0a9f99552d350458e917c8bd25a3c581682db8e005a89cbc8e4d63cda468bbf1bc4e63bfa8b7223dee61c48a778b80aa3c2e0ddf546c9e25805f89a27def4e43b61968cfbe9ec236f706b87f56cb8313f73b87cdf0fc9de35deaa069cc2530bd9ffc711c5b2be41263ca6c80ec3b940757591cf3c48f277b93ee610183b66f1a8af6e4c3e7170310f2adc3c126479a72f1a3698f874e92b57434e8731127eb254421f5490994a7c13cd0945fded9998f0ce1b1b66850722b2dec4d6aa9d5d6ed6199e528396c1085a87bbd9be3eb546c318e5aeb66526e004c019726cc15bc9c86059eb12878ab5373763bbfc10befb5a2e21fe34824a655029ea3481c658f98bbe6a1882cd5614879e1d2404e0853649141bd2e3d0956ebd8a3ad2110c465edc90a1c6d2649ab2d6c3a88bc72f3da87a8d276498bdfe33c6df36b0893c46df0ff368c108073a8e3ef2364d1a19ec12f5f51fa71c4268c285a0d79afafa359f016c14c5ca6336f15e860dc80a35afc1706e33d33a63c43ac479868cdfbdcae2563d03f96c24a6f8968b89ae52354c7dbad012d3c32a3a7f362f92f3e598b30f38d4f7b4f70c689df646c578663f513233b69b7e7dd911bff32f44b0ba3c3772d2804c3c6ce30591908e5bfecc6ffda25b4b47f60defacc683a374aac70a97fbf769cae084042e6b46c994e81557f67bd0b8efe812dd6b44243ff9eb1db77db6963156e92687a356eddd3768a0882024d1621e1ee44baac266193bf55a85c9a332cab0fcd431e774926df7e18c8289d6ed42ad39c59f349d49f83a018d81cf9383cb0e57c4e0724b0c4c2f0df459f29ec6827b07ed85a5d95ad38accae0b03ccccef9a728a6c87f763f22ca9e537425c11dcfa1520442effe634b2e81e85f4cb9656aa3e6ebc97a310e0c23e0587b86ea5471af9303616ff0e9f15a17d471977df516d1ebdaf4d99efa1a79850adc9f282e141c6b4b0da9e6ca05d623ac94b3b220ad861312c1a3", ["", "", "", ""]}, 0x1010}}, 0x4000004) (async, rerun: 64) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x1, @pix_mp={0xde4, 0x9, 0x31303553, 0x3, 0x8, [{0x4}, {0x0, 0x9}, {0xffa, 0x8001}, {0x4, 0x2}, {0x5}, {0x1, 0xffffffff}, {0x6, 0x1}, {0x4, 0x3ff}], 0x7f, 0xf7, 0x1, 0x0, 0x1}}) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@multiplanar_mmap={0x7601, 0x3, 0x4, 0x4, 0x7, {r5, r6/1000+10000}, {0x2, 0x0, 0x1, 0x1, 0x7, 0x81, "b5432cc9"}, 0x5, 0x1, {&(0x7f0000000180)=[{0x2, 0x43, {0x8}, 0x4}, {0x8, 0xd421, {0x6}, 0x1}]}, 0x6}) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b80)={r3, &(0x7f0000000980)="1a398f76eb8ad30436f2c8bfa16f9d828ef95bbeda8daf7f7665d0c54d7e981f4c1bdf16b4c6ff4b5210afe69d07af02aa0f5e3c0282a4023a669028851f05af51f34dc7c9d76b3efeaac65b6f07101c7cb03905dcd5800ba1c22015653135cc2ba95c3579e05a69ae07b6d0872297bbc28a0282050623fac9327936856ef2892d7d4d879c694edce3230d1bbb95cec085e3ddec558ec1baafe8ff39d71436f4c932a31e46339d699a420b3150bef1004caba945ff277c0cafeb71d2743af6af5c107d2229cbc328cee48bc57141b4", &(0x7f0000000a80)=""/244}, 0x20) 07:14:07 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8, @pix={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xa}}) 07:14:07 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x2, @sliced={0x81, [0x8001, 0x7, 0x5, 0xff, 0x7fff, 0x2bc3, 0x401, 0xbd, 0xffff, 0x4b6, 0x2, 0xfff, 0xfff, 0x4, 0x167, 0x0, 0x5, 0xffff, 0xa249, 0xffff, 0x101, 0x7, 0x0, 0x100, 0x2, 0x1, 0xc000, 0x1, 0x1, 0x9, 0x3, 0xb, 0xbdc, 0x2d, 0x9, 0xffff, 0x9, 0x2, 0x5, 0xff2a, 0x5, 0x3, 0x8, 0x0, 0x2, 0x7], 0x1f}}) 07:14:07 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8, @pix={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xa}}) 07:14:07 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b", 0x10) 07:14:07 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b", 0x10) 07:14:07 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x2, @sliced={0x81, [0x8001, 0x7, 0x5, 0xff, 0x7fff, 0x2bc3, 0x401, 0xbd, 0xffff, 0x4b6, 0x2, 0xfff, 0xfff, 0x4, 0x167, 0x0, 0x5, 0xffff, 0xa249, 0xffff, 0x101, 0x7, 0x0, 0x100, 0x2, 0x1, 0xc000, 0x1, 0x1, 0x9, 0x3, 0xb, 0xbdc, 0x2d, 0x9, 0xffff, 0x9, 0x2, 0x5, 0xff2a, 0x5, 0x3, 0x8, 0x0, 0x2, 0x7], 0x1f}}) 07:14:07 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b", 0x10) [ 1987.997940] Bluetooth: hci3: command 0x0409 tx timeout [ 1990.077837] Bluetooth: hci3: command 0x041b tx timeout [ 1990.248994] device hsr_slave_1 left promiscuous mode [ 1990.260472] device hsr_slave_0 left promiscuous mode [ 1990.281007] team0 (unregistering): Port device team_slave_1 removed [ 1990.293279] team0 (unregistering): Port device team_slave_0 removed [ 1990.304925] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1990.319132] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1990.371958] bond0 (unregistering): Released all slaves [ 1990.396754] IPVS: ftp: loaded support on port[0] = 21 [ 1990.726282] chnl_net:caif_netlink_parms(): no params data found [ 1990.876204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1990.897977] bridge0: port 1(bridge_slave_0) entered disabled state [ 1990.905490] device bridge_slave_0 entered promiscuous mode [ 1990.939639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1990.946084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1990.956403] device bridge_slave_1 entered promiscuous mode [ 1991.004295] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1991.029752] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1991.070119] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1991.099127] team0: Port device team_slave_0 added [ 1991.104983] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1991.129895] team0: Port device team_slave_1 added [ 1991.163926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1991.178143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1991.237707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1991.250727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1991.258927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1991.317746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1991.338684] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1991.346685] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1991.386726] device hsr_slave_0 entered promiscuous mode [ 1991.411820] device hsr_slave_1 entered promiscuous mode [ 1991.431562] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1991.454105] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1991.675248] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1991.761717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1991.781227] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1991.791884] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1991.798303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1991.805748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1991.831746] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1991.838899] 8021q: adding VLAN 0 to HW filter on device team0 [ 1991.849927] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1991.857694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1991.865706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1991.877277] bridge0: port 1(bridge_slave_0) entered blocking state [ 1991.883725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1991.900874] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1991.913923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1991.923928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1991.938160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1991.945910] bridge0: port 2(bridge_slave_1) entered blocking state [ 1991.952359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1991.969237] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1991.984659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1991.996205] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1992.009958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1992.029287] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1992.036336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1992.051572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1992.066216] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1992.080957] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1992.091410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1992.103172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1992.121085] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1992.130137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1992.142789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1992.156506] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1992.170626] Bluetooth: hci3: command 0x040f tx timeout [ 1992.176167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1992.192613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1992.204519] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1992.215469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1992.315512] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1992.325921] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1992.333189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1992.342048] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1992.358814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1992.422692] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1992.434046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1992.506892] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1992.514726] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1992.527890] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1992.539011] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1992.545727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1992.559208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1992.567385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1992.579993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1992.590118] device veth0_vlan entered promiscuous mode [ 1992.603134] device veth1_vlan entered promiscuous mode [ 1992.609578] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1992.621014] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1992.636341] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1992.646574] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1992.654007] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1992.662441] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1992.670610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1992.678848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1992.689149] device veth0_macvtap entered promiscuous mode [ 1992.697285] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1992.707982] device veth1_macvtap entered promiscuous mode [ 1992.727041] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1992.759907] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1992.784199] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1992.796225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1992.806747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1992.816299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1992.826631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1992.836134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1992.846712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1992.856204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1992.877633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1992.887046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1992.897797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1992.909371] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1992.916433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1992.965530] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1992.978804] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1993.016687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1993.046698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1993.076301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1993.091926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1993.119509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1993.153794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1993.195512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1993.259949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1993.309417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1993.351090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1993.365130] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1993.393297] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1993.394409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1993.398170] CPU: 1 PID: 8100 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 1993.398178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1993.398183] Call Trace: [ 1993.398206] dump_stack+0x1fc/0x2ef [ 1993.398226] dump_header+0x15d/0xc3f [ 1993.434756] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1993.439863] ? ___ratelimit+0x319/0x590 [ 1993.440351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1993.443846] oom_kill_process.cold+0x10/0x692 [ 1993.457431] ? check_preemption_disabled+0x41/0x280 [ 1993.462457] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1993.467744] out_of_memory+0x1072/0x1390 [ 1993.471831] ? oom_killer_disable+0x270/0x270 [ 1993.476340] ? mutex_trylock+0x15f/0x1a0 [ 1993.480412] __alloc_pages_nodemask+0x23a2/0x2890 [ 1993.485361] ? find_get_entry+0x4cd/0x8a0 [ 1993.489535] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1993.494419] alloc_pages_current+0x193/0x2a0 [ 1993.498843] filemap_fault+0x146e/0x2180 [ 1993.499560] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1993.502918] ext4_filemap_fault+0x84/0xb0 [ 1993.513993] __do_fault+0x10b/0x4b0 [ 1993.517632] __handle_mm_fault+0x273b/0x41c0 [ 1993.522050] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1993.527158] ? vm_insert_page+0x9c0/0x9c0 [ 1993.531325] ? check_preemption_disabled+0x41/0x280 [ 1993.536353] handle_mm_fault+0x436/0xb10 [ 1993.540432] __do_page_fault+0x68e/0xd60 [ 1993.544545] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1993.547189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1993.549687] ? spurious_fault+0x840/0x840 [ 1993.549701] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1993.549717] ? page_fault+0x8/0x30 [ 1993.549731] page_fault+0x1e/0x30 [ 1993.549743] RIP: 0033:0x46703d [ 1993.549758] Code: Bad RIP value. [ 1993.549764] RSP: 002b:000000c00005ff10 EFLAGS: 00010202 [ 1993.549774] RAX: 0000000000000000 RBX: 0000000000002710 RCX: 000000000046703d [ 1993.549785] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c00005ff10 [ 1993.598777] RBP: 000000c00005ff20 R08: 0000000000057a3b R09: 000001ff56fcdbb3 [ 1993.606071] R10: 0000000000000000 R11: 0000000000000202 R12: 000000c00005f950 [ 1993.613553] R13: 000000c001240000 R14: 000000c0000004e0 R15: 00007f214a1d34c3 [ 1993.623858] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1993.638259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1993.759609] Mem-Info: [ 1993.762085] active_anon:16363 inactive_anon:45377 isolated_anon:0 [ 1993.762085] active_file:15 inactive_file:16 isolated_file:8 [ 1993.762085] unevictable:0 dirty:44 writeback:1 unstable:0 [ 1993.762085] slab_reclaimable:13509 slab_unreclaimable:114493 [ 1993.762085] mapped:22261 shmem:46168 pagetables:592 bounce:0 [ 1993.762085] free:25165 free_pcp:124 free_cma:0 [ 1993.796180] Node 0 active_anon:61964kB inactive_anon:48432kB active_file:0kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72832kB dirty:96kB writeback:4kB shmem:50600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1993.825090] Node 1 active_anon:3488kB inactive_anon:133076kB active_file:80kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:16212kB dirty:80kB writeback:0kB shmem:134072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1993.852976] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1993.880017] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1993.885052] Node 0 DMA32 free:35936kB min:35996kB low:44992kB high:53988kB active_anon:59916kB inactive_anon:48432kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:2036kB bounce:0kB free_pcp:448kB local_pcp:216kB free_cma:0kB [ 1993.914617] lowmem_reserve[]: 0 0 1 1 1 [ 1993.920471] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1993.946769] lowmem_reserve[]: 0 0 0 0 0 [ 1993.951041] Node 1 Normal free:53776kB min:53876kB low:67344kB high:80812kB active_anon:3488kB inactive_anon:133076kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:332kB bounce:0kB free_pcp:540kB local_pcp:40kB free_cma:0kB [ 1993.979850] lowmem_reserve[]: 0 0 0 0 0 [ 1993.983833] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 5*512kB (U) 0*1024kB 2*2048kB (M) 1*4096kB (M) = 10964kB [ 1993.998279] Node 0 DMA32: 1005*4kB (UME) 413*8kB (UME) 157*16kB (UME) 66*32kB (UME) 30*64kB (UM) 18*128kB (M) 10*256kB (M) 2*512kB (M) 14*1024kB (UM) 1*2048kB (M) 0*4096kB = 36140kB [ 1994.014908] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1994.030325] Node 1 Normal: 463*4kB (ME) 352*8kB (ME) 237*16kB (ME) 111*32kB (ME) 47*64kB (UME) 9*128kB (UME) 1*256kB (M) 0*512kB 3*1024kB (UME) 1*2048kB (U) 8*4096kB (U) = 54316kB [ 1994.046626] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1994.055544] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1994.064274] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1994.073139] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1994.083255] 46197 total pagecache pages [ 1994.087258] 0 pages in swap cache [ 1994.090957] Swap cache stats: add 0, delete 0, find 0/0 [ 1994.096309] Free swap = 0kB [ 1994.099436] Total swap = 0kB [ 1994.102505] 2097051 pages RAM [ 1994.105591] 0 pages HighMem/MovableOnly [ 1994.109637] 369649 pages reserved [ 1994.113172] 0 pages cma reserved [ 1994.116622] Unreclaimable slab info: [ 1994.120506] Name Used Total [ 1994.126992] pid_2 13KB 56KB [ 1994.132766] batadv_tt_change_cache 7KB 7KB [ 1994.138673] batadv_tl_cache 12KB 16KB [ 1994.144057] TIPC 24KB 37KB [ 1994.149931] SCTPv6 26KB 37KB [ 1994.155298] SCTP 1KB 3KB [ 1994.160759] DCCPv6 17KB 30KB [ 1994.166126] DCCP 19KB 28KB [ 1994.171528] L2TP/IPv6 26KB 32KB [ 1994.176882] RXRPC 19KB 32KB [ 1994.182328] rxrpc_call_jar 131KB 141KB [ 1994.187763] bridge_fdb_cache 19KB 27KB [ 1994.193309] fib6_nodes 267KB 284KB [ 1994.198759] ip6_dst_cache 975KB 975KB [ 1994.204123] RAWv6 123KB 128KB [ 1994.209582] UDPv6 37KB 48KB [ 1994.214943] TCPv6 24KB 30KB [ 1994.220372] nf_conntrack 11KB 18KB [ 1994.226802] t10_alua_lu_gp_cache 0KB 3KB [ 1994.232485] sd_ext_cdb 0KB 7KB [ 1994.238286] Bluetooth: hci3: command 0x0419 tx timeout [ 1994.239941] scsi_sense_cache 1056KB 1060KB [ 1994.253141] virtio_scsi_cmd 16KB 16KB [ 1994.260023] sgpool-128 8KB 8KB [ 1994.268749] sgpool-64 4KB 12KB [ 1994.274144] sgpool-32 2KB 15KB [ 1994.279985] sgpool-16 1KB 7KB [ 1994.285357] sgpool-8 0KB 7KB [ 1994.290827] mqueue_inode_cache 12KB 30KB [ 1994.296278] bio_post_read_ctx 14KB 15KB [ 1994.301773] bio-2 14KB 15KB [ 1994.307142] jfs_mp 7KB 7KB [ 1994.312595] cifs_small_rq 15KB 16KB [ 1994.318105] cifs_request 67KB 67KB [ 1994.323485] cifs_mpx_ids 0KB 7KB [ 1994.330940] nfs_commit_data 3KB 14KB [ 1994.336460] nfs_write_data 34KB 44KB [ 1994.341907] ext4_system_zone 1KB 7KB [ 1994.347277] bio-1 1KB 7KB [ 1994.352695] pid_namespace 2KB 7KB [ 1994.358281] rpc_buffers 17KB 25KB [ 1994.363656] rpc_tasks 2KB 7KB [ 1994.369112] UNIX 2323KB 2325KB [ 1994.374489] tcp_bind_bucket 2KB 4KB [ 1994.379925] ip_fib_trie 43KB 47KB [ 1994.385275] ip_fib_alias 194KB 201KB [ 1994.392071] ip_dst_cache 14KB 20KB [ 1994.398453] RAW 73KB 82KB [ 1994.403827] UDP 67KB 74KB [ 1994.409369] TCP 8KB 11KB [ 1994.414736] hugetlbfs_inode_cache 3KB 15KB [ 1994.420550] fscache_cookie_jar 1KB 11KB [ 1994.426000] eventpoll_pwq 22KB 63KB [ 1994.433013] eventpoll_epi 41KB 63KB [ 1994.438506] inotify_inode_mark 10KB 27KB [ 1994.444073] request_queue 199KB 199KB [ 1994.449589] blkdev_requests 1KB 3KB [ 1994.454952] blkdev_ioc 23KB 38KB [ 1994.460403] bio-0 939KB 971KB [ 1994.465757] biovec-max 1518KB 1592KB [ 1994.471163] biovec-64 905KB 952KB [ 1994.476700] biovec-16 114KB 153KB [ 1994.482986] bio_integrity_payload 1KB 8KB [ 1994.488759] khugepaged_mm_slot 3KB 27KB [ 1994.494212] uid_cache 0KB 4KB [ 1994.499638] dmaengine-unmap-2 0KB 3KB [ 1994.505011] skbuff_fclone_cache 32KB 41KB [ 1994.510972] skbuff_head_cache 9043KB 9045KB [ 1994.516436] configfs_dir_cache 3KB 7KB [ 1994.521992] file_lock_cache 25KB 31KB [ 1994.527391] file_lock_ctx 9KB 11KB [ 1994.533845] fsnotify_mark_connector 4KB 19KB [ 1994.539976] net_namespace 96KB 105KB [ 1994.545349] shmem_inode_cache 8036KB 8170KB [ 1994.550894] task_delay_info 264KB 375KB [ 1994.556355] taskstats 20KB 45KB [ 1994.562129] proc_dir_entry 1002KB 1016KB [ 1994.567586] pde_opener 19KB 54KB [ 1994.573082] seq_file 266KB 401KB [ 1994.578528] sigqueue 40KB 63KB [ 1994.583889] kernfs_node_cache 18162KB 18179KB [ 1994.589296] mnt_cache 193KB 228KB [ 1994.594654] filp 7286KB 7927KB [ 1994.600176] names_cache 105680KB 105701KB [ 1994.605596] iint_cache 34KB 51KB [ 1994.611065] key_jar 4KB 7KB [ 1994.616560] uts_namespace 3KB 7KB [ 1994.621991] nsproxy 1KB 7KB [ 1994.627377] vm_area_struct 3319KB 3681KB [ 1994.633080] mm_struct 560KB 598KB [ 1994.640530] fs_cache 300KB 356KB [ 1994.645903] files_cache 905KB 1147KB [ 1994.651353] signal_cache 1426KB 2055KB [ 1994.656733] sighand_cache 633KB 638KB [ 1994.662207] task_struct 6116KB 6142KB [ 1994.667614] cred_jar 2096KB 2972KB [ 1994.673051] anon_vma_chain 988KB 1535KB [ 1994.678507] anon_vma 142KB 327KB [ 1994.683918] pid 170KB 228KB [ 1994.689415] Acpi-Operand 156KB 202KB [ 1994.694780] Acpi-ParseExt 9KB 11KB [ 1994.700234] Acpi-Parse 41KB 47KB [ 1994.705594] Acpi-State 52KB 63KB [ 1994.711080] Acpi-Namespace 20KB 27KB [ 1994.716439] numa_policy 0KB 3KB [ 1994.723615] debug_objects_cache 1764KB 1968KB [ 1994.729340] trace_event_file 297KB 298KB [ 1994.734709] ftrace_event_field 398KB 401KB [ 1994.741717] pool_workqueue 143KB 156KB [ 1994.747181] page->ptl 498KB 1031KB [ 1994.752942] kmalloc-2097152 2050KB 2050KB [ 1994.758482] kmalloc-524288 2056KB 2056KB [ 1994.763850] kmalloc-262144 1290KB 1290KB [ 1994.769325] kmalloc-131072 650KB 650KB [ 1994.774779] kmalloc-65536 3168KB 3234KB [ 1994.780253] kmalloc-32768 2475KB 2475KB [ 1994.785627] kmalloc-16384 1386KB 1419KB [ 1994.791054] kmalloc-8192 5997KB 6022KB [ 1994.796426] kmalloc-4096 28968KB 28968KB [ 1994.802343] kmalloc-2048 19945KB 20189KB [ 1994.807980] kmalloc-1024 15329KB 15419KB [ 1994.813352] kmalloc-512 16383KB 16383KB [ 1994.818821] kmalloc-256 6051KB 6423KB [ 1994.824188] kmalloc-128 1539KB 1712KB [ 1994.829680] kmalloc-96 3441KB 4404KB [ 1994.835043] kmalloc-64 2830KB 3744KB [ 1994.841477] kmalloc-32 2033KB 2476KB [ 1994.846855] kmalloc-192 2345KB 2972KB [ 1994.852349] kmem_cache 177KB 183KB [ 1994.857797] Out of memory (oom_kill_allocating_task): Kill process 8100 (syz-fuzzer) score 0 or sacrifice child [ 1994.868385] Killed process 24972 (syz-executor.4) total-vm:48512kB, anon-rss:428kB, file-rss:0kB, shmem-rss:0kB [ 1994.879859] oom_reaper: reaped process 24972 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 1994.893471] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1994.916740] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1994.921718] CPU: 0 PID: 8100 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 1994.929346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1994.938683] Call Trace: [ 1994.941282] dump_stack+0x1fc/0x2ef [ 1994.944895] dump_header+0x15d/0xc3f [ 1994.953806] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1994.958984] ? ___ratelimit+0x319/0x590 [ 1994.962956] oom_kill_process.cold+0x10/0x692 [ 1994.967451] ? check_preemption_disabled+0x41/0x280 [ 1994.972460] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1994.977734] out_of_memory+0x1072/0x1390 [ 1994.981792] ? oom_killer_disable+0x270/0x270 [ 1994.986271] ? mutex_trylock+0x15f/0x1a0 [ 1994.990331] __alloc_pages_nodemask+0x23a2/0x2890 [ 1994.995162] ? find_get_entry+0x4cd/0x8a0 [ 1994.999300] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1995.004149] alloc_pages_current+0x193/0x2a0 [ 1995.008546] filemap_fault+0x146e/0x2180 [ 1995.012599] ext4_filemap_fault+0x84/0xb0 [ 1995.016730] __do_fault+0x10b/0x4b0 [ 1995.020352] __handle_mm_fault+0x273b/0x41c0 [ 1995.024750] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1995.029841] ? vm_insert_page+0x9c0/0x9c0 [ 1995.033981] ? check_preemption_disabled+0x41/0x280 [ 1995.038995] handle_mm_fault+0x436/0xb10 [ 1995.043046] __do_page_fault+0x68e/0xd60 [ 1995.047159] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1995.052172] ? spurious_fault+0x840/0x840 [ 1995.056319] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1995.061149] ? page_fault+0x8/0x30 [ 1995.064674] page_fault+0x1e/0x30 [ 1995.068110] RIP: 0033:0x46703d [ 1995.071289] Code: Bad RIP value. [ 1995.074642] RSP: 002b:000000c00005ff10 EFLAGS: 00010202 [ 1995.079988] RAX: 0000000000000000 RBX: 0000000000002710 RCX: 000000000046703d [ 1995.087246] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c00005ff10 [ 1995.094499] RBP: 000000c00005ff20 R08: 0000000000057a3b R09: 000001ff56fcdbb3 [ 1995.101759] R10: 0000000000000000 R11: 0000000000000202 R12: 000000c00005f950 [ 1995.109198] R13: 000000c001240000 R14: 000000c0000004e0 R15: 00007f214a1d34c3 [ 1995.123137] Mem-Info: [ 1995.125587] active_anon:16338 inactive_anon:45377 isolated_anon:0 [ 1995.125587] active_file:14 inactive_file:15 isolated_file:0 [ 1995.125587] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1995.125587] slab_reclaimable:13505 slab_unreclaimable:114554 [ 1995.125587] mapped:22239 shmem:46168 pagetables:555 bounce:0 [ 1995.125587] free:25051 free_pcp:221 free_cma:0 [ 1995.161791] Node 0 active_anon:61864kB inactive_anon:48432kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72744kB dirty:0kB writeback:0kB shmem:50600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1995.191310] Node 1 active_anon:3488kB inactive_anon:133076kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16212kB dirty:0kB writeback:0kB shmem:134072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1995.221078] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1995.248451] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1995.253587] Node 0 DMA32 free:35420kB min:35996kB low:44992kB high:53988kB active_anon:59816kB inactive_anon:48432kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:1888kB bounce:0kB free_pcp:576kB local_pcp:208kB free_cma:0kB [ 1995.291586] lowmem_reserve[]: 0 0 1 1 1 [ 1995.295599] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1995.326165] lowmem_reserve[]: 0 0 0 0 0 [ 1995.330259] Node 1 Normal free:53812kB min:53876kB low:67344kB high:80812kB active_anon:3488kB inactive_anon:133076kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:332kB bounce:0kB free_pcp:268kB local_pcp:20kB free_cma:0kB [ 1995.364849] lowmem_reserve[]: 0 0 0 0 0 [ 1995.369822] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 5*512kB (U) 0*1024kB 2*2048kB (M) 1*4096kB (M) = 10964kB [ 1995.384822] Node 0 DMA32: 1005*4kB (UME) 413*8kB (UME) 156*16kB (ME) 67*32kB (UME) 29*64kB (M) 19*128kB (UM) 11*256kB (UM) 2*512kB (M) 13*1024kB (UM) 1*2048kB (M) 0*4096kB = 35452kB [ 1995.412339] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1995.423485] Node 1 Normal: 463*4kB (ME) 353*8kB (UME) 237*16kB (ME) 111*32kB (ME) 47*64kB (UME) 9*128kB (UME) 1*256kB (M) 1*512kB (U) 2*1024kB (ME) 1*2048kB (U) 8*4096kB (U) = 53812kB [ 1995.450844] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1995.466783] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1995.484649] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1995.495429] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1995.508009] 46197 total pagecache pages [ 1995.512006] 0 pages in swap cache [ 1995.515457] Swap cache stats: add 0, delete 0, find 0/0 [ 1995.525014] Free swap = 0kB [ 1995.529930] Total swap = 0kB [ 1995.532947] 2097051 pages RAM [ 1995.536032] 0 pages HighMem/MovableOnly [ 1995.543971] 369649 pages reserved [ 1995.551235] 0 pages cma reserved [ 1995.554599] Unreclaimable slab info: [ 1995.561355] Name Used Total [ 1995.566916] pid_2 13KB 56KB [ 1995.581736] batadv_tt_change_cache 7KB 7KB [ 1995.591607] batadv_tl_cache 12KB 16KB [ 1995.596981] TIPC 24KB 37KB [ 1995.603444] SCTPv6 26KB 37KB [ 1995.616646] SCTP 1KB 3KB [ 1995.622583] DCCPv6 17KB 30KB [ 1995.631366] DCCP 19KB 28KB [ 1995.636756] L2TP/IPv6 26KB 32KB [ 1995.650991] RXRPC 19KB 32KB [ 1995.656378] rxrpc_call_jar 131KB 141KB [ 1995.667160] bridge_fdb_cache 19KB 27KB [ 1995.675084] fib6_nodes 274KB 284KB [ 1995.681247] ip6_dst_cache 997KB 997KB [ 1995.686779] RAWv6 123KB 128KB [ 1995.700926] UDPv6 37KB 48KB [ 1995.706310] TCPv6 24KB 30KB [ 1995.714017] nf_conntrack 11KB 18KB [ 1995.720988] t10_alua_lu_gp_cache 0KB 3KB [ 1995.726711] sd_ext_cdb 0KB 7KB [ 1995.741121] scsi_sense_cache 1056KB 1060KB [ 1995.746692] virtio_scsi_cmd 16KB 16KB [ 1995.757675] sgpool-128 8KB 8KB [ 1995.763943] sgpool-64 4KB 12KB [ 1995.774027] sgpool-32 2KB 15KB [ 1995.783369] sgpool-16 1KB 7KB [ 1995.792348] sgpool-8 0KB 7KB [ 1995.799603] mqueue_inode_cache 12KB 30KB [ 1995.805073] bio_post_read_ctx 14KB 15KB [ 1995.812030] bio-2 14KB 15KB [ 1995.819670] jfs_mp 7KB 7KB [ 1995.825056] cifs_small_rq 15KB 16KB [ 1995.834857] cifs_request 67KB 67KB [ 1995.844486] cifs_mpx_ids 0KB 7KB [ 1995.852152] nfs_commit_data 3KB 14KB [ 1995.861728] nfs_write_data 34KB 44KB [ 1995.872299] ext4_system_zone 1KB 7KB [ 1995.877858] bio-1 1KB 7KB [ 1995.883233] pid_namespace 2KB 7KB [ 1995.889648] rpc_buffers 17KB 25KB [ 1995.895021] rpc_tasks 2KB 7KB [ 1995.912617] UNIX 2323KB 2325KB [ 1995.920314] tcp_bind_bucket 2KB 4KB [ 1995.925684] ip_fib_trie 43KB 47KB [ 1995.936409] ip_fib_alias 194KB 201KB [ 1995.945459] ip_dst_cache 14KB 20KB [ 1995.956167] RAW 73KB 82KB [ 1995.963430] UDP 67KB 74KB [ 1995.974795] TCP 8KB 11KB [ 1995.980279] hugetlbfs_inode_cache 3KB 15KB [ 1995.986044] fscache_cookie_jar 1KB 11KB [ 1995.993070] eventpoll_pwq 22KB 63KB [ 1996.003773] eventpoll_epi 41KB 63KB [ 1996.016048] inotify_inode_mark 10KB 27KB [ 1996.023437] request_queue 199KB 199KB [ 1996.034471] blkdev_requests 1KB 3KB [ 1996.040786] blkdev_ioc 23KB 38KB [ 1996.046264] bio-0 939KB 971KB [ 1996.056014] biovec-max 1518KB 1592KB [ 1996.064361] biovec-64 905KB 952KB [ 1996.081359] biovec-16 114KB 153KB [ 1996.086783] bio_integrity_payload 1KB 8KB [ 1996.095085] khugepaged_mm_slot 3KB 27KB [ 1996.104691] uid_cache 0KB 4KB [ 1996.112299] dmaengine-unmap-2 0KB 3KB [ 1996.121422] skbuff_fclone_cache 32KB 41KB [ 1996.126965] skbuff_head_cache 9185KB 9187KB [ 1996.132454] configfs_dir_cache 3KB 7KB [ 1996.139796] file_lock_cache 25KB 31KB [ 1996.145150] file_lock_ctx 9KB 11KB [ 1996.150583] fsnotify_mark_connector 4KB 19KB [ 1996.156469] net_namespace 96KB 105KB [ 1996.165861] shmem_inode_cache 8036KB 8170KB [ 1996.172892] task_delay_info 264KB 375KB [ 1996.181517] taskstats 20KB 45KB [ 1996.186893] proc_dir_entry 1002KB 1016KB [ 1996.201070] pde_opener 19KB 54KB [ 1996.206455] seq_file 266KB 401KB [ 1996.211883] sigqueue 40KB 63KB [ 1996.217247] kernfs_node_cache 18162KB 18179KB [ 1996.226037] mnt_cache 193KB 228KB [ 1996.240307] filp 7286KB 7927KB [ 1996.245737] names_cache 105680KB 105701KB [ 1996.252225] iint_cache 34KB 51KB [ 1996.257670] key_jar 4KB 7KB [ 1996.263058] uts_namespace 3KB 7KB [ 1996.272085] nsproxy 1KB 7KB [ 1996.278996] vm_area_struct 3319KB 3681KB [ 1996.284367] mm_struct 560KB 598KB [ 1996.293350] fs_cache 300KB 356KB [ 1996.298872] files_cache 905KB 1147KB [ 1996.304234] signal_cache 1426KB 2055KB [ 1996.315027] sighand_cache 633KB 638KB [ 1996.320566] task_struct 6116KB 6142KB [ 1996.325934] cred_jar 2096KB 2972KB [ 1996.333081] anon_vma_chain 988KB 1535KB [ 1996.350778] anon_vma 142KB 327KB [ 1996.356179] pid 170KB 228KB [ 1996.363235] Acpi-Operand 156KB 202KB [ 1996.371969] Acpi-ParseExt 9KB 11KB [ 1996.379740] Acpi-Parse 41KB 47KB [ 1996.385108] Acpi-State 52KB 63KB [ 1996.394016] Acpi-Namespace 20KB 27KB [ 1996.401930] numa_policy 0KB 3KB [ 1996.408389] debug_objects_cache 1764KB 1968KB [ 1996.413951] trace_event_file 297KB 298KB [ 1996.431172] ftrace_event_field 398KB 401KB [ 1996.436638] pool_workqueue 143KB 156KB [ 1996.442154] page->ptl 498KB 1031KB [ 1996.451272] kmalloc-2097152 2050KB 2050KB [ 1996.456650] kmalloc-524288 2056KB 2056KB [ 1996.462156] kmalloc-262144 1290KB 1290KB [ 1996.471330] kmalloc-131072 650KB 650KB [ 1996.476807] kmalloc-65536 3168KB 3234KB [ 1996.483781] kmalloc-32768 2475KB 2475KB [ 1996.492829] kmalloc-16384 1386KB 1419KB [ 1996.498406] kmalloc-8192 5997KB 6022KB [ 1996.503768] kmalloc-4096 28968KB 28968KB [ 1996.514358] kmalloc-2048 19996KB 20189KB [ 1996.521734] kmalloc-1024 15369KB 15419KB [ 1996.527095] kmalloc-512 16612KB 16612KB [ 1996.543505] kmalloc-256 6051KB 6423KB [ 1996.548921] kmalloc-128 1539KB 1712KB [ 1996.554280] kmalloc-96 3463KB 4404KB [ 1996.561113] kmalloc-64 2830KB 3744KB [ 1996.566502] kmalloc-32 2036KB 2476KB [ 1996.578880] kmalloc-192 2345KB 2972KB [ 1996.585468] kmem_cache 177KB 183KB [ 1996.596143] Out of memory (oom_kill_allocating_task): Kill process 8100 (syz-fuzzer) score 0 or sacrifice child [ 1996.618871] Killed process 24973 (syz-executor.2) total-vm:48512kB, anon-rss:432kB, file-rss:4kB, shmem-rss:0kB [ 1996.645267] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1996.669516] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1996.674327] CPU: 1 PID: 8100 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 1996.681772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1996.691122] Call Trace: [ 1996.693704] dump_stack+0x1fc/0x2ef [ 1996.697321] dump_header+0x15d/0xc3f [ 1996.701026] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1996.706226] ? ___ratelimit+0x319/0x590 [ 1996.710190] oom_kill_process.cold+0x10/0x692 [ 1996.714671] ? check_preemption_disabled+0x41/0x280 [ 1996.719705] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1996.724968] out_of_memory+0x1072/0x1390 [ 1996.729032] ? oom_killer_disable+0x270/0x270 [ 1996.733528] ? mutex_trylock+0x15f/0x1a0 [ 1996.737587] __alloc_pages_nodemask+0x23a2/0x2890 [ 1996.742522] ? find_get_entry+0x4cd/0x8a0 [ 1996.746683] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1996.751544] alloc_pages_current+0x193/0x2a0 [ 1996.755943] filemap_fault+0x146e/0x2180 [ 1996.760018] ext4_filemap_fault+0x84/0xb0 [ 1996.764167] __do_fault+0x10b/0x4b0 [ 1996.767779] __handle_mm_fault+0x273b/0x41c0 [ 1996.772191] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1996.777277] ? vm_insert_page+0x9c0/0x9c0 [ 1996.781438] ? check_preemption_disabled+0x41/0x280 [ 1996.786460] handle_mm_fault+0x436/0xb10 [ 1996.790534] __do_page_fault+0x68e/0xd60 [ 1996.794589] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1996.799592] ? spurious_fault+0x840/0x840 [ 1996.803725] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1996.808941] ? page_fault+0x8/0x30 [ 1996.812607] page_fault+0x1e/0x30 [ 1996.816072] RIP: 0033:0x46703d [ 1996.819255] Code: Bad RIP value. [ 1996.822601] RSP: 002b:000000c00005ff10 EFLAGS: 00010202 [ 1996.827977] RAX: 0000000000000000 RBX: 0000000000002710 RCX: 000000000046703d [ 1996.835247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c00005ff10 [ 1996.842520] RBP: 000000c00005ff20 R08: 0000000000057a3b R09: 000001ff56fcdbb3 [ 1996.849777] R10: 0000000000000000 R11: 0000000000000202 R12: 000000c00005f950 [ 1996.857150] R13: 000000c001240000 R14: 000000c0000004e0 R15: 00007f214a1d34c3 [ 1996.867895] Mem-Info: [ 1996.870627] active_anon:16201 inactive_anon:45377 isolated_anon:0 [ 1996.870627] active_file:14 inactive_file:15 isolated_file:0 [ 1996.870627] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1996.870627] slab_reclaimable:13505 slab_unreclaimable:114630 [ 1996.870627] mapped:18655 shmem:46168 pagetables:540 bounce:0 [ 1996.870627] free:25546 free_pcp:426 free_cma:0 [ 1996.948533] Node 0 active_anon:61348kB inactive_anon:48432kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58408kB dirty:0kB writeback:0kB shmem:50600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1997.005616] Node 1 active_anon:3456kB inactive_anon:133076kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16212kB dirty:0kB writeback:0kB shmem:134072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1997.041610] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1997.085438] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1997.147405] Node 0 DMA32 free:36812kB min:35996kB low:44992kB high:53988kB active_anon:59300kB inactive_anon:48432kB active_file:492kB inactive_file:188kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7360kB pagetables:1836kB bounce:0kB free_pcp:2784kB local_pcp:1448kB free_cma:0kB [ 1997.260901] lowmem_reserve[]: 0 0 1 1 1 [ 1997.264956] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1997.366134] lowmem_reserve[]: 0 0 0 0 0 [ 1997.377106] Node 1 Normal free:53672kB min:53876kB low:67344kB high:80812kB active_anon:3456kB inactive_anon:133076kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:640kB pagetables:324kB bounce:0kB free_pcp:352kB local_pcp:248kB free_cma:0kB [ 1997.421518] lowmem_reserve[]: 0 0 0 0 0 [ 1997.425534] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 5*512kB (U) 0*1024kB 2*2048kB (M) 1*4096kB (M) = 10964kB [ 1997.454569] Node 0 DMA32: 743*4kB (UME) 361*8kB (UME) 159*16kB (UME) 72*32kB (UME) 33*64kB (UM) 19*128kB (UM) 15*256kB (UM) 3*512kB (M) 13*1024kB (UM) 1*2048kB (M) 0*4096kB = 35988kB [ 1997.485315] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1997.512375] Node 1 Normal: 459*4kB (UME) 336*8kB (ME) 236*16kB (ME) 113*32kB (UME) 47*64kB (ME) 9*128kB (UME) 2*256kB (UM) 0*512kB 2*1024kB (ME) 1*2048kB (U) 8*4096kB (U) = 53452kB [ 1997.543514] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1997.566709] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1997.589981] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1997.614701] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1997.626791] 46235 total pagecache pages [ 1997.644883] 0 pages in swap cache [ 1997.651908] Swap cache stats: add 0, delete 0, find 0/0 [ 1997.668915] Free swap = 0kB [ 1997.672508] Total swap = 0kB [ 1997.676026] 2097051 pages RAM [ 1997.697508] 0 pages HighMem/MovableOnly [ 1997.701499] 369649 pages reserved [ 1997.704972] 0 pages cma reserved [ 1997.710350] Unreclaimable slab info: [ 1997.714080] Name Used Total [ 1997.719720] pid_2 13KB 56KB [ 1997.725159] batadv_tt_change_cache 6KB 7KB [ 1997.731050] batadv_tl_cache 11KB 16KB [ 1997.736420] TIPC 16KB 37KB [ 1997.741859] SCTPv6 24KB 37KB [ 1997.747220] SCTP 1KB 3KB [ 1997.752653] DCCPv6 17KB 30KB [ 1997.758156] DCCP 16KB 28KB [ 1997.763539] L2TP/IPv6 26KB 32KB [ 1997.768980] RXRPC 16KB 32KB [ 1997.774374] rxrpc_call_jar 103KB 133KB [ 1997.779766] bridge_fdb_cache 18KB 27KB [ 1997.785117] fib6_nodes 274KB 284KB [ 1997.790518] ip6_dst_cache 1005KB 1005KB [ 1997.795970] RAWv6 121KB 128KB [ 1997.801352] UDPv6 35KB 48KB [ 1997.806706] TCPv6 24KB 30KB [ 1997.815441] nf_conntrack 17KB 18KB [ 1997.821020] t10_alua_lu_gp_cache 0KB 3KB [ 1997.826658] sd_ext_cdb 0KB 7KB [ 1997.832073] scsi_sense_cache 1056KB 1060KB [ 1997.837476] virtio_scsi_cmd 16KB 16KB [ 1997.842856] sgpool-128 8KB 8KB [ 1997.848365] sgpool-64 4KB 12KB [ 1997.853720] sgpool-32 2KB 15KB [ 1997.859138] sgpool-16 1KB 7KB [ 1997.864517] sgpool-8 0KB 7KB [ 1997.869924] mqueue_inode_cache 12KB 30KB [ 1997.875372] bio_post_read_ctx 14KB 15KB [ 1997.880804] bio-2 14KB 15KB [ 1997.886176] jfs_mp 7KB 7KB [ 1997.891627] cifs_small_rq 15KB 16KB [ 1997.896995] cifs_request 67KB 67KB [ 1997.902405] cifs_mpx_ids 0KB 7KB [ 1997.908001] nfs_commit_data 3KB 14KB [ 1997.914461] nfs_write_data 34KB 44KB [ 1997.920550] ext4_system_zone 1KB 7KB [ 1997.925947] bio-1 1KB 7KB [ 1997.933511] pid_namespace 2KB 7KB [ 1997.981923] rpc_buffers 17KB 25KB [ 1997.991087] rpc_tasks 2KB 7KB [ 1997.996465] UNIX 2323KB 2325KB [ 1998.018386] tcp_bind_bucket 1KB 4KB [ 1998.023785] ip_fib_trie 42KB 47KB [ 1998.034483] ip_fib_alias 194KB 201KB [ 1998.044795] ip_dst_cache 14KB 20KB [ 1998.063017] RAW 72KB 82KB [ 1998.085308] UDP 67KB 74KB [ 1998.092533] TCP 8KB 11KB [ 1998.100792] hugetlbfs_inode_cache 3KB 15KB [ 1998.106533] fscache_cookie_jar 1KB 11KB [ 1998.114262] eventpoll_pwq 22KB 63KB [ 1998.136812] eventpoll_epi 40KB 63KB [ 1998.145703] inotify_inode_mark 10KB 27KB [ 1998.154713] request_queue 199KB 199KB [ 1998.164500] blkdev_requests 1KB 3KB [ 1998.173878] blkdev_ioc 23KB 38KB [ 1998.185577] bio-0 959KB 986KB [ 1998.196464] biovec-max 1518KB 1592KB [ 1998.207257] biovec-64 911KB 952KB [ 1998.214883] biovec-16 131KB 153KB [ 1998.225703] bio_integrity_payload 1KB 8KB [ 1998.236804] khugepaged_mm_slot 3KB 27KB [ 1998.254866] uid_cache 0KB 4KB [ 1998.263879] dmaengine-unmap-2 0KB 3KB [ 1998.273823] skbuff_fclone_cache 31KB 41KB [ 1998.279546] skbuff_head_cache 9350KB 9352KB [ 1998.284897] configfs_dir_cache 3KB 7KB [ 1998.307119] file_lock_cache 25KB 31KB [ 1998.316216] file_lock_ctx 9KB 11KB [ 1998.326464] fsnotify_mark_connector 4KB 19KB [ 1998.333932] net_namespace 96KB 96KB [ 1998.353721] shmem_inode_cache 8036KB 8170KB [ 1998.362764] task_delay_info 243KB 375KB [ 1998.372694] taskstats 20KB 45KB [ 1998.385226] proc_dir_entry 1000KB 1016KB [ 1998.392035] pde_opener 19KB 54KB [ 1998.415166] seq_file 263KB 401KB [ 1998.420756] sigqueue 40KB 63KB [ 1998.442252] kernfs_node_cache 18160KB 18179KB [ 1998.449938] mnt_cache 193KB 228KB [ 1998.455319] filp 7286KB 7927KB [ 1998.462737] names_cache 103827KB 103887KB [ 1998.486003] iint_cache 31KB 51KB [ 1998.491457] key_jar 4KB 7KB [ 1998.496817] uts_namespace 3KB 7KB [ 1998.521784] nsproxy 1KB 7KB [ 1998.527197] vm_area_struct 3317KB 3681KB [ 1998.547125] mm_struct 552KB 598KB [ 1998.556120] fs_cache 270KB 356KB [ 1998.576170] files_cache 895KB 1147KB [ 1998.581728] signal_cache 1436KB 2055KB [ 1998.587089] sighand_cache 622KB 638KB [ 1998.606907] task_struct 6142KB 6142KB [ 1998.616385] cred_jar 2051KB 2972KB [ 1998.636242] anon_vma_chain 986KB 1535KB [ 1998.645246] anon_vma 137KB 327KB [ 1998.662692] pid 155KB 228KB [ 1998.673929] Acpi-Operand 156KB 202KB [ 1998.683702] Acpi-ParseExt 9KB 11KB [ 1998.704815] Acpi-Parse 41KB 47KB [ 1998.712871] Acpi-State 52KB 63KB [ 1998.720865] Acpi-Namespace 20KB 27KB [ 1998.726255] numa_policy 0KB 3KB [ 1998.735848] debug_objects_cache 1764KB 1968KB [ 1998.757111] trace_event_file 297KB 298KB [ 1998.764292] ftrace_event_field 398KB 401KB [ 1998.774224] pool_workqueue 140KB 152KB [ 1998.784749] page->ptl 497KB 1031KB [ 1998.793795] kmalloc-2097152 2050KB 2050KB [ 1998.806252] kmalloc-524288 2056KB 2056KB [ 1998.826781] kmalloc-262144 1290KB 1290KB [ 1998.832244] kmalloc-131072 650KB 650KB [ 1998.852347] kmalloc-65536 3168KB 3234KB [ 1998.857858] kmalloc-32768 2409KB 2409KB [ 1998.863228] kmalloc-16384 1353KB 1386KB [ 1998.883505] kmalloc-8192 5981KB 6022KB [ 1998.888966] kmalloc-4096 28989KB 28989KB [ 1998.894342] kmalloc-2048 19996KB 20189KB [ 1998.914357] kmalloc-1024 15419KB 15419KB [ 1998.926373] kmalloc-512 16931KB 16931KB [ 1998.953083] kmalloc-256 6051KB 6423KB [ 1998.965676] kmalloc-128 1539KB 1712KB [ 1998.974655] kmalloc-96 3478KB 4404KB [ 1998.991061] kmalloc-64 2830KB 3744KB [ 1998.996483] kmalloc-32 2044KB 2476KB [ 1999.005589] kmalloc-192 2345KB 2972KB [ 1999.026388] kmem_cache 177KB 183KB [ 1999.031829] Out of memory (oom_kill_allocating_task): Kill process 8100 (syz-fuzzer) score 0 or sacrifice child [ 1999.052905] Killed process 24974 (syz-executor.5) total-vm:48512kB, anon-rss:424kB, file-rss:4kB, shmem-rss:0kB [ 1999.067097] oom_reaper: reaped process 24974 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 1999.088127] systemd-journal invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1999.107536] systemd-journal cpuset=/ mems_allowed=0-1 [ 1999.112774] CPU: 0 PID: 26050 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 1999.120748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1999.130196] Call Trace: [ 1999.132797] dump_stack+0x1fc/0x2ef [ 1999.136435] dump_header+0x15d/0xc3f [ 1999.140162] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1999.145275] ? ___ratelimit+0x319/0x590 [ 1999.149271] oom_kill_process.cold+0x10/0x692 [ 1999.153788] ? check_preemption_disabled+0x41/0x280 [ 1999.158818] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1999.164103] out_of_memory+0x1072/0x1390 [ 1999.168174] ? oom_killer_disable+0x270/0x270 [ 1999.172674] ? mutex_trylock+0x15f/0x1a0 [ 1999.176746] __alloc_pages_nodemask+0x23a2/0x2890 [ 1999.181614] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1999.186455] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1999.191295] ? kmem_cache_alloc+0x122/0x370 [ 1999.195621] ? prepare_creds+0x39/0x510 [ 1999.199598] ? do_faccessat+0x94/0x7a0 [ 1999.203504] ? ____cache_alloc_node+0x156/0x1d0 [ 1999.208180] ? cache_grow_begin+0x64/0x8a0 [ 1999.212428] cache_grow_begin+0xa4/0x8a0 [ 1999.216502] fallback_alloc+0x213/0x2e0 [ 1999.220490] kmem_cache_alloc+0x1e4/0x370 [ 1999.224647] getname_flags+0xce/0x590 [ 1999.228475] user_path_at_empty+0x2a/0x50 [ 1999.232635] do_faccessat+0x248/0x7a0 [ 1999.236446] ? __ia32_sys_fallocate+0x140/0x140 [ 1999.241121] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1999.246497] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1999.251526] ? do_syscall_64+0x21/0x620 [ 1999.255499] do_syscall_64+0xf9/0x620 [ 1999.259305] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1999.264496] RIP: 0033:0x7f1eecb679c7 [ 1999.268213] Code: Bad RIP value. [ 1999.271579] RSP: 002b:00007ffc9a2b80f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1999.279290] RAX: ffffffffffffffda RBX: 00007ffc9a2bb010 RCX: 00007f1eecb679c7 [ 1999.286561] RDX: 00007f1eed5d8a00 RSI: 0000000000000000 RDI: 0000563b0bb199a3 [ 1999.294105] RBP: 00007ffc9a2b8130 R08: 0000000000000000 R09: 0000000000000000 [ 1999.301468] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1999.308742] R13: 0000000000000000 R14: 00007ffc9a2bb010 R15: 00007ffc9a2b8620 [ 1999.325350] Mem-Info: [ 1999.328059] active_anon:16101 inactive_anon:45377 isolated_anon:0 [ 1999.328059] active_file:13 inactive_file:15 isolated_file:0 [ 1999.328059] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1999.328059] slab_reclaimable:13500 slab_unreclaimable:113913 [ 1999.328059] mapped:15080 shmem:46168 pagetables:503 bounce:0 [ 1999.328059] free:25034 free_pcp:349 free_cma:0 [ 1999.405553] Node 0 active_anon:60952kB inactive_anon:48432kB active_file:128kB inactive_file:332kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44108kB dirty:0kB writeback:0kB shmem:50600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1999.666921] Node 1 active_anon:3452kB inactive_anon:133076kB active_file:24kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16212kB dirty:0kB writeback:0kB shmem:134072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1999.856124] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1999.927272] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1999.932348] Node 0 DMA32 free:35920kB min:35996kB low:44992kB high:53988kB active_anon:58804kB inactive_anon:48432kB active_file:28kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7328kB pagetables:1732kB bounce:0kB free_pcp:184kB local_pcp:184kB free_cma:0kB [ 2000.175185] lowmem_reserve[]: 0 0 1 1 1 [ 2000.201172] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2000.305542] lowmem_reserve[]: 0 0 0 0 0 [ 2000.315926] Node 1 Normal free:53840kB min:53876kB low:67344kB high:80812kB active_anon:3428kB inactive_anon:133076kB active_file:8kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:320kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2000.547204] lowmem_reserve[]: 0 0 0 0 0 [ 2000.551232] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 5*512kB (U) 0*1024kB 2*2048kB (M) 1*4096kB (M) = 10964kB [ 2000.659537] Node 0 DMA32: 1033*4kB (MEH) 433*8kB (MEH) 153*16kB (MEH) 72*32kB (ME) 34*64kB (MH) 19*128kB (M) 11*256kB (MH) 3*512kB (M) 12*1024kB (UM) 1*2048kB (M) 0*4096kB = 35644kB [ 2000.759818] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2000.833843] Node 1 Normal: 454*4kB (UME) 349*8kB (UME) 237*16kB (UME) 112*32kB (ME) 47*64kB (ME) 10*128kB (UME) 1*256kB (M) 1*512kB (U) 2*1024kB (ME) 1*2048kB (U) 8*4096kB (U) = 53904kB [ 2000.945024] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2001.014656] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2001.075046] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2001.150018] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2001.215533] 46197 total pagecache pages [ 2001.242810] 0 pages in swap cache [ 2001.246287] Swap cache stats: add 0, delete 0, find 0/0 [ 2001.301929] Free swap = 0kB [ 2001.304985] Total swap = 0kB [ 2001.338052] 2097051 pages RAM [ 2001.341187] 0 pages HighMem/MovableOnly [ 2001.345170] 369649 pages reserved [ 2001.403578] 0 pages cma reserved [ 2001.407005] Unreclaimable slab info: [ 2001.449350] Name Used Total [ 2001.454937] pid_2 13KB 56KB [ 2001.521232] batadv_tt_change_cache 5KB 7KB [ 2001.527063] batadv_tl_cache 10KB 16KB [ 2001.582502] TIPC 13KB 37KB [ 2001.624243] SCTPv6 24KB 37KB [ 2001.658121] SCTP 1KB 3KB [ 2001.680723] DCCPv6 17KB 30KB [ 2001.686120] DCCP 16KB 28KB [ 2001.749478] L2TP/IPv6 26KB 32KB [ 2001.754882] RXRPC 14KB 32KB [ 2001.765307] rxrpc_call_jar 97KB 133KB [ 2001.770735] bridge_fdb_cache 17KB 27KB [ 2001.776102] fib6_nodes 274KB 284KB [ 2001.792432] ip6_dst_cache 1020KB 1020KB [ 2001.797907] RAWv6 121KB 128KB [ 2001.804776] UDPv6 35KB 48KB [ 2001.820938] TCPv6 24KB 30KB [ 2001.826344] nf_conntrack 17KB 18KB [ 2001.831914] t10_alua_lu_gp_cache 0KB 3KB [ 2001.845758] sd_ext_cdb 0KB 7KB [ 2001.861916] scsi_sense_cache 1056KB 1060KB [ 2001.872360] virtio_scsi_cmd 16KB 16KB [ 2001.882541] sgpool-128 8KB 8KB [ 2001.891469] sgpool-64 4KB 12KB [ 2001.896937] sgpool-32 2KB 15KB [ 2001.903878] sgpool-16 1KB 7KB [ 2001.921372] sgpool-8 0KB 7KB [ 2001.926762] mqueue_inode_cache 12KB 30KB [ 2001.935901] bio_post_read_ctx 14KB 15KB [ 2001.951673] bio-2 14KB 15KB [ 2001.957086] jfs_mp 7KB 7KB [ 2001.981832] cifs_small_rq 15KB 16KB [ 2001.994304] cifs_request 67KB 67KB [ 2002.003519] cifs_mpx_ids 0KB 7KB [ 2002.026227] nfs_commit_data 3KB 14KB [ 2002.034679] nfs_write_data 34KB 44KB [ 2002.046463] ext4_system_zone 1KB 7KB [ 2002.054669] bio-1 1KB 7KB [ 2002.075891] pid_namespace 2KB 7KB [ 2002.082649] rpc_buffers 17KB 25KB [ 2002.099108] rpc_tasks 2KB 7KB [ 2002.104522] UNIX 2313KB 2325KB [ 2002.111535] tcp_bind_bucket 1KB 4KB [ 2002.116946] ip_fib_trie 41KB 47KB [ 2002.123069] ip_fib_alias 191KB 201KB [ 2002.133724] ip_dst_cache 13KB 20KB [ 2002.152107] RAW 72KB 82KB [ 2002.166013] UDP 67KB 74KB [ 2002.185952] TCP 8KB 11KB [ 2002.192560] hugetlbfs_inode_cache 3KB 15KB [ 2002.219632] fscache_cookie_jar 1KB 11KB [ 2002.225393] eventpoll_pwq 21KB 63KB [ 2002.249819] eventpoll_epi 40KB 63KB [ 2002.255220] inotify_inode_mark 10KB 27KB [ 2002.273372] request_queue 199KB 199KB [ 2002.294848] blkdev_requests 1KB 3KB [ 2002.300289] blkdev_ioc 22KB 38KB [ 2002.305754] bio-0 966KB 993KB [ 2002.328564] biovec-max 1518KB 1592KB [ 2002.334045] biovec-64 916KB 952KB [ 2002.350678] biovec-16 131KB 153KB [ 2002.356073] bio_integrity_payload 1KB 8KB [ 2002.371045] khugepaged_mm_slot 3KB 27KB [ 2002.376533] uid_cache 0KB 4KB [ 2002.383945] dmaengine-unmap-2 0KB 3KB [ 2002.395741] skbuff_fclone_cache 31KB 41KB [ 2002.416745] skbuff_head_cache 9628KB 9630KB [ 2002.425436] configfs_dir_cache 3KB 7KB [ 2002.436554] file_lock_cache 25KB 31KB [ 2002.465083] file_lock_ctx 9KB 11KB [ 2002.472706] fsnotify_mark_connector 4KB 19KB [ 2002.480719] net_namespace 96KB 96KB [ 2002.486096] shmem_inode_cache 8035KB 8170KB [ 2002.493231] task_delay_info 238KB 375KB [ 2002.505394] taskstats 20KB 45KB [ 2002.532683] proc_dir_entry 999KB 1016KB [ 2002.542092] pde_opener 18KB 54KB [ 2002.554507] seq_file 260KB 401KB [ 2002.565193] sigqueue 40KB 63KB [ 2002.586394] kernfs_node_cache 18154KB 18179KB [ 2002.594304] mnt_cache 192KB 228KB [ 2002.612230] filp 7286KB 7927KB [ 2002.626570] names_cache 103793KB 103853KB [ 2002.634015] iint_cache 30KB 51KB [ 2002.652695] key_jar 4KB 7KB [ 2002.661887] uts_namespace 3KB 7KB [ 2002.672270] nsproxy 1KB 7KB [ 2002.681383] vm_area_struct 3315KB 3681KB [ 2002.686751] mm_struct 549KB 598KB [ 2002.700818] fs_cache 264KB 356KB [ 2002.706203] files_cache 885KB 1136KB [ 2002.715859] signal_cache 1433KB 2055KB [ 2002.723552] sighand_cache 610KB 638KB [ 2002.730800] task_struct 6142KB 6142KB [ 2002.736226] cred_jar 2051KB 2972KB [ 2002.745262] anon_vma_chain 982KB 1535KB [ 2002.750947] anon_vma 126KB 327KB [ 2002.756485] pid 152KB 228KB [ 2002.765592] Acpi-Operand 156KB 202KB [ 2002.771048] Acpi-ParseExt 9KB 11KB [ 2002.776689] Acpi-Parse 41KB 47KB [ 2002.785768] Acpi-State 52KB 63KB [ 2002.791203] Acpi-Namespace 20KB 27KB [ 2002.796568] numa_policy 0KB 3KB [ 2002.808270] debug_objects_cache 1761KB 1968KB [ 2002.813833] trace_event_file 297KB 298KB [ 2002.822215] ftrace_event_field 398KB 401KB [ 2002.829204] pool_workqueue 139KB 152KB [ 2002.834573] page->ptl 494KB 1031KB [ 2002.839975] kmalloc-2097152 2050KB 2050KB [ 2002.845355] kmalloc-524288 2056KB 2056KB [ 2002.850766] kmalloc-262144 1290KB 1290KB [ 2002.856124] kmalloc-131072 650KB 650KB [ 2002.861513] kmalloc-65536 3168KB 3234KB [ 2002.866857] kmalloc-32768 2343KB 2409KB [ 2002.872275] kmalloc-16384 1353KB 1386KB [ 2002.877678] kmalloc-8192 5964KB 6022KB [ 2002.883046] kmalloc-4096 28989KB 28989KB [ 2002.888642] kmalloc-2048 19996KB 20189KB [ 2002.894345] kmalloc-1024 15458KB 15458KB [ 2002.899753] kmalloc-512 17433KB 17433KB [ 2002.905121] kmalloc-256 6060KB 6423KB [ 2002.910566] kmalloc-128 1538KB 1712KB [ 2002.915933] kmalloc-96 3531KB 4404KB [ 2002.921327] kmalloc-64 2830KB 3744KB [ 2002.926776] kmalloc-32 2055KB 2476KB [ 2002.933095] kmalloc-192 2345KB 2972KB [ 2002.939283] kmem_cache 177KB 183KB [ 2002.944639] Out of memory (oom_kill_allocating_task): Kill process 26050 (systemd-journal) score 0 or sacrifice child [ 2002.955512] Killed process 26050 (systemd-journal) total-vm:46096kB, anon-rss:480kB, file-rss:0kB, shmem-rss:1780kB [ 2002.968064] oom_reaper: reaped process 26050 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1780kB [ 2003.218599] syz-executor.0 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2003.255021] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2003.260321] CPU: 0 PID: 26450 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2003.268201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2003.277560] Call Trace: [ 2003.280162] dump_stack+0x1fc/0x2ef [ 2003.283799] dump_header+0x15d/0xc3f [ 2003.287537] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2003.292892] ? ___ratelimit+0x319/0x590 [ 2003.296877] oom_kill_process.cold+0x10/0x692 [ 2003.301390] ? check_preemption_disabled+0x41/0x280 [ 2003.306417] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2003.311874] out_of_memory+0x1072/0x1390 [ 2003.315947] ? oom_killer_disable+0x270/0x270 [ 2003.320446] ? mutex_trylock+0x15f/0x1a0 [ 2003.324640] __alloc_pages_nodemask+0x23a2/0x2890 [ 2003.329602] ? find_get_entry+0x4cd/0x8a0 [ 2003.333779] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2003.338652] alloc_pages_current+0x193/0x2a0 [ 2003.343225] filemap_fault+0x146e/0x2180 [ 2003.347403] ext4_filemap_fault+0x84/0xb0 [ 2003.351582] __do_fault+0x10b/0x4b0 [ 2003.355219] __handle_mm_fault+0x273b/0x41c0 [ 2003.359645] ? mark_held_locks+0xa6/0xf0 [ 2003.363712] ? vm_insert_page+0x9c0/0x9c0 [ 2003.368000] ? check_preemption_disabled+0x41/0x280 [ 2003.373052] handle_mm_fault+0x436/0xb10 [ 2003.377127] __do_page_fault+0x68e/0xd60 [ 2003.381207] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2003.386231] ? spurious_fault+0x840/0x840 [ 2003.390389] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2003.395238] ? page_fault+0x8/0x30 [ 2003.398791] page_fault+0x1e/0x30 [ 2003.402274] RIP: 0033:0x7f3dd68dc210 [ 2003.405988] Code: Bad RIP value. [ 2003.409358] RSP: 002b:00007ffc55927698 EFLAGS: 00010246 [ 2003.414731] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000018 [ 2003.422089] RDX: 00000000ac93b802 RSI: 00007f3dd699f637 RDI: 00007f3dd699f637 [ 2003.429376] RBP: 00007f3dd699f637 R08: 0000000000000004 R09: 0000000000000006 [ 2003.436646] R10: 00007ffc55927adc R11: 00007ffc5592772c R12: 0000000000000003 [ 2003.443916] R13: 0000000000000003 R14: 00007ffc5592772c R15: 0000000000000040 [ 2003.533532] Mem-Info: [ 2003.536675] active_anon:15951 inactive_anon:45377 isolated_anon:0 [ 2003.536675] active_file:155 inactive_file:162 isolated_file:0 [ 2003.536675] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2003.536675] slab_reclaimable:13499 slab_unreclaimable:112947 [ 2003.536675] mapped:14796 shmem:46168 pagetables:514 bounce:0 [ 2003.536675] free:25220 free_pcp:176 free_cma:0 [ 2003.577700] Node 0 active_anon:60844kB inactive_anon:48432kB active_file:32kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44072kB dirty:0kB writeback:0kB shmem:50600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2003.633128] Node 1 active_anon:2960kB inactive_anon:133076kB active_file:164kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14412kB dirty:0kB writeback:0kB shmem:134072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2003.801238] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2003.938734] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2003.943797] Node 0 DMA32 free:35476kB min:35996kB low:44992kB high:53988kB active_anon:58796kB inactive_anon:48432kB active_file:12kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7328kB pagetables:1732kB bounce:0kB free_pcp:268kB local_pcp:268kB free_cma:0kB [ 2003.974595] lowmem_reserve[]: 0 0 1 1 1 [ 2003.978651] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2004.004592] lowmem_reserve[]: 0 0 0 0 0 [ 2004.008812] Node 1 Normal free:53824kB min:53876kB low:67344kB high:80812kB active_anon:2988kB inactive_anon:133072kB active_file:44kB inactive_file:52kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:244kB bounce:0kB free_pcp:48kB local_pcp:48kB free_cma:0kB [ 2004.037531] lowmem_reserve[]: 0 0 0 0 0 [ 2004.041519] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 5*512kB (U) 0*1024kB 2*2048kB (M) 1*4096kB (M) = 10964kB [ 2004.054818] Node 0 DMA32: 1035*4kB (ME) 435*8kB (ME) 155*16kB (UME) 74*32kB (UME) 39*64kB (UM) 21*128kB (UM) 12*256kB (UM) 3*512kB (M) 11*1024kB (UM) 1*2048kB (M) 0*4096kB = 35572kB [ 2004.087376] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2004.119046] Node 1 Normal: 434*4kB (UME) 335*8kB (ME) 233*16kB (ME) 117*32kB (ME) 46*64kB (ME) 9*128kB (ME) 4*256kB (UM) 0*512kB 2*1024kB (ME) 1*2048kB (U) 8*4096kB (U) = 53872kB [ 2004.139802] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2004.148729] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2004.157457] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2004.167453] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2004.176045] 46201 total pagecache pages [ 2004.180072] 0 pages in swap cache [ 2004.183545] Swap cache stats: add 0, delete 0, find 0/0 [ 2004.194218] Free swap = 0kB [ 2004.197305] Total swap = 0kB [ 2004.200317] 2097051 pages RAM [ 2004.203411] 0 pages HighMem/MovableOnly [ 2004.207716] 369649 pages reserved [ 2004.211166] 0 pages cma reserved [ 2004.214549] Unreclaimable slab info: [ 2004.218461] Name Used Total [ 2004.224093] pid_2 13KB 56KB [ 2004.229559] batadv_tt_change_cache 5KB 7KB [ 2004.235374] batadv_tl_cache 9KB 16KB [ 2004.240815] TIPC 13KB 37KB [ 2004.246180] SCTPv6 24KB 37KB [ 2004.251557] SCTP 1KB 3KB [ 2004.256919] DCCPv6 17KB 30KB [ 2004.263494] DCCP 16KB 28KB [ 2004.268941] L2TP/IPv6 26KB 32KB [ 2004.274306] RXRPC 14KB 32KB [ 2004.279700] rxrpc_call_jar 95KB 133KB [ 2004.285053] bridge_fdb_cache 17KB 27KB [ 2004.290431] fib6_nodes 271KB 284KB [ 2004.295776] ip6_dst_cache 1020KB 1020KB [ 2004.301176] RAWv6 121KB 128KB [ 2004.306533] UDPv6 35KB 48KB [ 2004.315039] TCPv6 21KB 30KB [ 2004.320676] nf_conntrack 16KB 18KB [ 2004.326103] t10_alua_lu_gp_cache 0KB 3KB [ 2004.332203] sd_ext_cdb 0KB 7KB [ 2004.337614] scsi_sense_cache 1056KB 1060KB [ 2004.343172] virtio_scsi_cmd 16KB 16KB [ 2004.348578] sgpool-128 8KB 8KB [ 2004.353940] sgpool-64 4KB 12KB [ 2004.359339] sgpool-32 2KB 15KB [ 2004.365823] sgpool-16 1KB 7KB [ 2004.371403] sgpool-8 0KB 7KB [ 2004.376782] mqueue_inode_cache 12KB 30KB [ 2004.382620] bio_post_read_ctx 14KB 15KB [ 2004.388049] bio-2 14KB 15KB [ 2004.393413] jfs_mp 7KB 7KB [ 2004.399092] cifs_small_rq 15KB 16KB [ 2004.404449] cifs_request 67KB 67KB [ 2004.409831] cifs_mpx_ids 0KB 7KB [ 2004.415280] nfs_commit_data 3KB 14KB [ 2004.420829] nfs_write_data 34KB 44KB [ 2004.426197] ext4_system_zone 1KB 7KB [ 2004.434678] bio-1 1KB 7KB [ 2004.440089] pid_namespace 2KB 7KB [ 2004.445648] rpc_buffers 17KB 25KB [ 2004.453509] rpc_tasks 2KB 7KB [ 2004.458908] UNIX 2313KB 2317KB [ 2004.464267] tcp_bind_bucket 1KB 4KB [ 2004.471201] ip_fib_trie 40KB 47KB [ 2004.476567] ip_fib_alias 191KB 201KB [ 2004.482576] ip_dst_cache 13KB 20KB [ 2004.488099] RAW 72KB 82KB [ 2004.493551] UDP 67KB 74KB [ 2004.499281] TCP 8KB 11KB [ 2004.504640] hugetlbfs_inode_cache 3KB 15KB [ 2004.510385] fscache_cookie_jar 1KB 11KB [ 2004.515825] eventpoll_pwq 21KB 63KB [ 2004.521222] eventpoll_epi 39KB 63KB [ 2004.526579] inotify_inode_mark 10KB 27KB [ 2004.532131] request_queue 199KB 199KB [ 2004.537625] blkdev_requests 1KB 3KB [ 2004.543074] blkdev_ioc 27KB 38KB [ 2004.551315] bio-0 1011KB 1012KB [ 2004.556728] biovec-max 1518KB 1592KB [ 2004.562132] biovec-64 996KB 1000KB [ 2004.569436] biovec-16 131KB 153KB [ 2004.574822] bio_integrity_payload 1KB 8KB [ 2004.580650] khugepaged_mm_slot 3KB 27KB [ 2004.586174] uid_cache 0KB 4KB [ 2004.591578] dmaengine-unmap-2 0KB 3KB [ 2004.596942] skbuff_fclone_cache 41KB 41KB [ 2004.602549] skbuff_head_cache 9783KB 9783KB [ 2004.607983] configfs_dir_cache 3KB 7KB [ 2004.613433] file_lock_cache 25KB 31KB [ 2004.621145] file_lock_ctx 9KB 11KB [ 2004.626549] fsnotify_mark_connector 4KB 19KB [ 2004.633984] net_namespace 96KB 96KB [ 2004.640715] shmem_inode_cache 8035KB 8170KB [ 2004.646078] task_delay_info 221KB 375KB [ 2004.653067] taskstats 19KB 45KB [ 2004.659812] proc_dir_entry 998KB 1016KB [ 2004.665166] pde_opener 16KB 54KB [ 2004.671609] seq_file 257KB 401KB [ 2004.677040] sigqueue 53KB 63KB [ 2004.682402] kernfs_node_cache 18153KB 18179KB [ 2004.688150] mnt_cache 192KB 228KB [ 2004.693649] filp 7106KB 7927KB [ 2004.699065] names_cache 101094KB 101154KB [ 2004.704430] iint_cache 30KB 51KB [ 2004.709821] key_jar 4KB 7KB [ 2004.715168] uts_namespace 3KB 7KB [ 2004.720596] nsproxy 1KB 7KB [ 2004.725949] vm_area_struct 3322KB 3681KB [ 2004.731509] mm_struct 549KB 598KB [ 2004.736956] fs_cache 240KB 356KB [ 2004.742341] files_cache 843KB 1128KB [ 2004.747990] signal_cache 1450KB 2055KB [ 2004.753342] sighand_cache 596KB 638KB [ 2004.758734] task_struct 6186KB 6186KB [ 2004.764094] cred_jar 1982KB 2964KB [ 2004.769462] anon_vma_chain 982KB 1535KB [ 2004.775694] anon_vma 120KB 327KB [ 2004.781125] pid 140KB 228KB [ 2004.786479] Acpi-Operand 156KB 202KB [ 2004.794629] Acpi-ParseExt 9KB 11KB [ 2004.800194] Acpi-Parse 41KB 47KB [ 2004.805570] Acpi-State 52KB 63KB [ 2004.814989] Acpi-Namespace 20KB 27KB [ 2004.820494] numa_policy 0KB 3KB [ 2004.825946] debug_objects_cache 1760KB 1968KB [ 2004.847170] trace_event_file 297KB 298KB [ 2004.852540] ftrace_event_field 398KB 401KB [ 2004.866991] pool_workqueue 139KB 152KB [ 2004.872362] page->ptl 499KB 1031KB [ 2004.912333] kmalloc-2097152 2050KB 2050KB [ 2004.926082] kmalloc-524288 2056KB 2056KB [ 2004.936599] kmalloc-262144 1290KB 1290KB [ 2004.947553] kmalloc-131072 650KB 650KB [ 2004.952925] kmalloc-65536 3168KB 3234KB [ 2004.958553] kmalloc-32768 2343KB 2343KB [ 2004.963931] kmalloc-16384 1353KB 1353KB [ 2004.969385] kmalloc-8192 5964KB 6006KB [ 2004.974746] kmalloc-4096 29031KB 29031KB [ 2004.980143] kmalloc-2048 19996KB 20189KB [ 2004.985493] kmalloc-1024 15474KB 15474KB [ 2004.990920] kmalloc-512 17707KB 17707KB [ 2004.996292] kmalloc-256 6068KB 6423KB [ 2005.001831] kmalloc-128 1550KB 1712KB [ 2005.007311] kmalloc-96 3538KB 4404KB [ 2005.012800] kmalloc-64 2830KB 3744KB [ 2005.018221] kmalloc-32 2063KB 2476KB [ 2005.023588] kmalloc-192 2321KB 2972KB [ 2005.029020] kmem_cache 177KB 183KB [ 2005.034380] Out of memory (oom_kill_allocating_task): Kill process 26450 (syz-executor.0) score 0 or sacrifice child [ 2005.045441] Killed process 26450 (syz-executor.0) total-vm:56708kB, anon-rss:456kB, file-rss:14240kB, shmem-rss:0kB [ 2005.056715] oom_reaper: reaped process 26450 (syz-executor.0), now anon-rss:0kB, file-rss:14240kB, shmem-rss:0kB [ 2005.287609] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2005.345188] in:imklog cpuset=/ mems_allowed=0-1 [ 2005.372122] CPU: 1 PID: 26347 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 2005.379592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2005.388951] Call Trace: [ 2005.391550] dump_stack+0x1fc/0x2ef [ 2005.395224] dump_header+0x15d/0xc3f [ 2005.398953] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2005.404059] ? ___ratelimit+0x319/0x590 [ 2005.408039] oom_kill_process.cold+0x10/0x692 [ 2005.412542] ? check_preemption_disabled+0x41/0x280 [ 2005.417596] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2005.422877] out_of_memory+0x1072/0x1390 [ 2005.426949] ? oom_killer_disable+0x270/0x270 [ 2005.431460] ? mutex_trylock+0x15f/0x1a0 [ 2005.435530] __alloc_pages_nodemask+0x23a2/0x2890 [ 2005.440393] ? find_get_entry+0x4cd/0x8a0 [ 2005.444565] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2005.449527] alloc_pages_current+0x193/0x2a0 [ 2005.453941] filemap_fault+0x146e/0x2180 [ 2005.458021] ext4_filemap_fault+0x84/0xb0 [ 2005.462200] __do_fault+0x10b/0x4b0 [ 2005.465852] __handle_mm_fault+0x273b/0x41c0 [ 2005.470270] ? vm_insert_page+0x9c0/0x9c0 [ 2005.474519] ? check_preemption_disabled+0x41/0x280 [ 2005.479658] handle_mm_fault+0x436/0xb10 [ 2005.483727] __do_page_fault+0x68e/0xd60 [ 2005.487976] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2005.493088] ? spurious_fault+0x840/0x840 [ 2005.497242] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2005.502092] ? page_fault+0x8/0x30 [ 2005.505636] page_fault+0x1e/0x30 [ 2005.509089] RIP: 0033:0x55e5b72c3e70 [ 2005.512816] Code: Bad RIP value. [ 2005.516197] RSP: 002b:00007f2ed0e62498 EFLAGS: 00010247 [ 2005.521717] RAX: 0000000000000004 RBX: 0000000000000009 RCX: 00007f2ec4002258 [ 2005.528996] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00007f2ec4002080 [ 2005.536275] RBP: 0000000000000004 R08: 0000000000000003 R09: 0000000000000070 [ 2005.543545] R10: 2ce33e6c02ce33e7 R11: 00007f2ed0e623d0 R12: 00007f2ed0e62da0 [ 2005.550817] R13: 00007f2ed0e62da3 R14: 0000000000001f9f R15: 00007f2ed0e62e09 [ 2006.798431] Mem-Info: [ 2006.800884] active_anon:15944 inactive_anon:45376 isolated_anon:0 [ 2006.800884] active_file:7 inactive_file:21 isolated_file:5 [ 2006.800884] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2006.800884] slab_reclaimable:13488 slab_unreclaimable:113010 [ 2006.800884] mapped:14601 shmem:46168 pagetables:481 bounce:0 [ 2006.800884] free:24956 free_pcp:108 free_cma:0 [ 2006.834544] Node 0 active_anon:60788kB inactive_anon:48432kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44068kB dirty:0kB writeback:0kB shmem:50600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2006.862208] Node 1 active_anon:2988kB inactive_anon:133072kB active_file:12kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:14336kB dirty:0kB writeback:0kB shmem:134072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2006.889744] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2006.916221] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2006.924509] Node 0 DMA32 free:34884kB min:35996kB low:44992kB high:53988kB active_anon:58740kB inactive_anon:48432kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7328kB pagetables:1680kB bounce:0kB free_pcp:392kB local_pcp:220kB free_cma:0kB [ 2006.953668] lowmem_reserve[]: 0 0 1 1 1 [ 2006.958038] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2006.984060] lowmem_reserve[]: 0 0 0 0 0 [ 2006.988162] Node 1 Normal free:53700kB min:53876kB low:67344kB high:80812kB active_anon:2988kB inactive_anon:133072kB active_file:12kB inactive_file:68kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:244kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 2007.017004] lowmem_reserve[]: 0 0 0 0 0 [ 2007.020991] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 5*512kB (U) 0*1024kB 2*2048kB (M) 1*4096kB (M) = 10964kB [ 2007.035200] Node 0 DMA32: 1041*4kB (ME) 434*8kB (ME) 153*16kB (UME) 71*32kB (ME) 34*64kB (M) 21*128kB (UM) 11*256kB (M) 3*512kB (M) 11*1024kB (UM) 1*2048kB (M) 0*4096kB = 34884kB [ 2007.053818] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2007.065213] Node 1 Normal: 433*4kB (ME) 335*8kB (ME) 233*16kB (ME) 119*32kB (UME) 46*64kB (ME) 9*128kB (ME) 4*256kB (UM) 0*512kB 2*1024kB (ME) 1*2048kB (U) 8*4096kB (U) = 53932kB [ 2007.081381] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2007.090275] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2007.098958] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2007.107840] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2007.116409] 46201 total pagecache pages [ 2007.120397] 0 pages in swap cache [ 2007.123870] Swap cache stats: add 0, delete 0, find 0/0 [ 2007.130744] Free swap = 0kB [ 2007.133779] Total swap = 0kB [ 2007.136793] 2097051 pages RAM [ 2007.139917] 0 pages HighMem/MovableOnly [ 2007.143874] 369649 pages reserved [ 2007.147371] 0 pages cma reserved [ 2007.150731] Unreclaimable slab info: [ 2007.154426] Name Used Total [ 2007.160004] pid_2 13KB 56KB [ 2007.165452] batadv_tt_change_cache 5KB 7KB [ 2007.174123] batadv_tl_cache 9KB 16KB [ 2007.180744] TIPC 12KB 37KB [ 2007.186149] SCTPv6 24KB 37KB [ 2007.191597] SCTP 1KB 3KB [ 2007.197356] DCCPv6 17KB 30KB [ 2007.202736] DCCP 16KB 28KB [ 2007.208164] L2TP/IPv6 26KB 32KB [ 2007.213540] RXRPC 13KB 32KB [ 2007.218934] rxrpc_call_jar 93KB 133KB [ 2007.224290] bridge_fdb_cache 16KB 27KB [ 2007.230805] fib6_nodes 267KB 284KB [ 2007.236195] ip6_dst_cache 1035KB 1035KB [ 2007.241690] RAWv6 121KB 128KB [ 2007.247099] UDPv6 35KB 48KB [ 2007.252497] TCPv6 21KB 30KB [ 2007.258085] nf_conntrack 12KB 18KB [ 2007.263504] t10_alua_lu_gp_cache 0KB 3KB [ 2007.269229] sd_ext_cdb 0KB 7KB [ 2007.274624] scsi_sense_cache 1056KB 1060KB [ 2007.280117] virtio_scsi_cmd 16KB 16KB [ 2007.285930] sgpool-128 8KB 8KB [ 2007.292758] sgpool-64 4KB 12KB [ 2007.298586] sgpool-32 2KB 15KB [ 2007.304045] sgpool-16 1KB 7KB [ 2007.309754] sgpool-8 0KB 7KB [ 2007.315138] mqueue_inode_cache 12KB 30KB [ 2007.320653] bio_post_read_ctx 14KB 15KB [ 2007.326088] bio-2 14KB 15KB [ 2007.331681] jfs_mp 7KB 7KB [ 2007.337168] cifs_small_rq 15KB 16KB [ 2007.342541] cifs_request 67KB 67KB [ 2007.348026] cifs_mpx_ids 0KB 7KB [ 2007.353399] nfs_commit_data 3KB 14KB [ 2007.358840] nfs_write_data 34KB 44KB [ 2007.364231] ext4_system_zone 1KB 7KB [ 2007.369721] bio-1 1KB 7KB [ 2007.375087] pid_namespace 2KB 7KB [ 2007.380494] rpc_buffers 17KB 25KB [ 2007.385849] rpc_tasks 2KB 7KB [ 2007.391251] UNIX 2313KB 2317KB [ 2007.396714] tcp_bind_bucket 1KB 4KB [ 2007.403578] ip_fib_trie 40KB 47KB [ 2007.409730] ip_fib_alias 190KB 201KB [ 2007.415101] ip_dst_cache 13KB 20KB [ 2007.420706] RAW 72KB 82KB [ 2007.426079] UDP 67KB 74KB [ 2007.431499] TCP 8KB 11KB [ 2007.436907] hugetlbfs_inode_cache 3KB 15KB [ 2007.442717] fscache_cookie_jar 1KB 11KB [ 2007.448232] eventpoll_pwq 21KB 63KB [ 2007.453598] eventpoll_epi 39KB 63KB [ 2007.459024] inotify_inode_mark 10KB 27KB [ 2007.464481] request_queue 199KB 199KB [ 2007.469925] blkdev_requests 1KB 3KB [ 2007.475284] blkdev_ioc 27KB 38KB [ 2007.480688] bio-0 1011KB 1012KB [ 2007.486073] biovec-max 1518KB 1592KB [ 2007.491487] biovec-64 996KB 1000KB [ 2007.496889] biovec-16 130KB 153KB [ 2007.502249] bio_integrity_payload 1KB 8KB [ 2007.508014] khugepaged_mm_slot 3KB 27KB [ 2007.513463] uid_cache 0KB 4KB [ 2007.519595] dmaengine-unmap-2 0KB 3KB [ 2007.524957] skbuff_fclone_cache 34KB 41KB [ 2007.530945] skbuff_head_cache 9986KB 9986KB [ 2007.536329] configfs_dir_cache 3KB 7KB [ 2007.544040] file_lock_cache 25KB 31KB [ 2007.549499] file_lock_ctx 9KB 11KB [ 2007.554859] fsnotify_mark_connector 4KB 19KB [ 2007.560784] net_namespace 96KB 96KB [ 2007.566141] shmem_inode_cache 8035KB 8170KB [ 2007.571556] task_delay_info 213KB 375KB [ 2007.576960] taskstats 19KB 45KB [ 2007.582421] proc_dir_entry 998KB 1016KB [ 2007.587870] pde_opener 16KB 54KB [ 2007.593235] seq_file 256KB 401KB [ 2007.598661] sigqueue 48KB 63KB [ 2007.604042] kernfs_node_cache 18147KB 18179KB [ 2007.609555] mnt_cache 192KB 228KB [ 2007.614934] filp 7100KB 7927KB [ 2007.620318] names_cache 101035KB 101094KB [ 2007.625667] iint_cache 30KB 51KB [ 2007.631084] key_jar 4KB 7KB [ 2007.636440] uts_namespace 3KB 7KB [ 2007.643212] nsproxy 1KB 7KB [ 2007.649303] vm_area_struct 3322KB 3681KB [ 2007.654676] mm_struct 549KB 598KB [ 2007.663876] fs_cache 228KB 356KB [ 2007.669785] files_cache 830KB 1121KB [ 2007.675170] signal_cache 1453KB 2055KB [ 2007.683527] sighand_cache 573KB 638KB [ 2007.689426] task_struct 6211KB 6211KB [ 2007.694869] cred_jar 1976KB 2960KB [ 2007.702338] anon_vma_chain 982KB 1535KB [ 2007.708582] anon_vma 115KB 327KB [ 2007.713959] pid 136KB 228KB [ 2007.723523] Acpi-Operand 156KB 202KB [ 2007.729854] Acpi-ParseExt 9KB 11KB [ 2007.735233] Acpi-Parse 41KB 47KB [ 2007.742522] Acpi-State 52KB 63KB [ 2007.747963] Acpi-Namespace 20KB 27KB [ 2007.753329] numa_policy 0KB 3KB [ 2007.761919] debug_objects_cache 1760KB 1968KB [ 2007.768801] trace_event_file 297KB 298KB [ 2007.774198] ftrace_event_field 398KB 401KB [ 2007.784838] pool_workqueue 138KB 152KB [ 2007.792149] page->ptl 499KB 1031KB [ 2007.805253] kmalloc-2097152 2050KB 2050KB [ 2007.814366] kmalloc-524288 2056KB 2056KB [ 2007.831944] kmalloc-262144 1290KB 1290KB [ 2007.843639] kmalloc-131072 650KB 650KB [ 2007.852005] kmalloc-65536 3168KB 3234KB [ 2007.860840] kmalloc-32768 2343KB 2343KB [ 2007.866198] kmalloc-16384 1353KB 1353KB [ 2007.891681] kmalloc-8192 5956KB 6006KB [ 2007.897869] kmalloc-4096 29048KB 29048KB [ 2007.903241] kmalloc-2048 19981KB 20189KB [ 2007.926709] kmalloc-1024 15505KB 15505KB [ 2007.932354] kmalloc-512 18097KB 18097KB [ 2007.943370] kmalloc-256 6065KB 6423KB [ 2007.950323] kmalloc-128 1550KB 1712KB [ 2007.955706] kmalloc-96 3568KB 4404KB [ 2007.971318] kmalloc-64 2830KB 3744KB [ 2007.976728] kmalloc-32 2069KB 2476KB [ 2007.983917] kmalloc-192 2321KB 2972KB [ 2007.994858] kmem_cache 177KB 183KB [ 2008.011807] Out of memory (oom_kill_allocating_task): Kill process 26347 (in:imklog) score 0 or sacrifice child [ 2008.033780] Killed process 26345 (rsyslogd) total-vm:254332kB, anon-rss:752kB, file-rss:0kB, shmem-rss:0kB [ 2008.058312] oom_reaper: reaped process 26345 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2008.071484] syz-executor.5 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 2008.084888] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2008.118066] CPU: 0 PID: 24976 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2008.125990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2008.135372] Call Trace: [ 2008.137972] dump_stack+0x1fc/0x2ef [ 2008.141628] dump_header+0x15d/0xc3f [ 2008.145346] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2008.150454] ? ___ratelimit+0x319/0x590 [ 2008.154435] oom_kill_process.cold+0x10/0x692 [ 2008.159026] ? oom_badness.part.0+0x135/0x6e0 [ 2008.163522] ? lock_downgrade+0x720/0x720 [ 2008.167674] ? check_preemption_disabled+0x41/0x280 [ 2008.172708] out_of_memory+0x34d/0x1390 [ 2008.176689] ? oom_killer_disable+0x270/0x270 [ 2008.181189] ? mutex_trylock+0x15f/0x1a0 [ 2008.185280] __alloc_pages_nodemask+0x23a2/0x2890 [ 2008.190143] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2008.194989] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2008.199870] ? mark_held_locks+0xa6/0xf0 [ 2008.203942] ? ____cache_alloc_node+0x156/0x1d0 [ 2008.208612] ? cache_grow_begin+0x64/0x8a0 [ 2008.212849] cache_grow_begin+0xa4/0x8a0 [ 2008.216918] fallback_alloc+0x213/0x2e0 [ 2008.220899] kmem_cache_alloc_node+0xe3/0x3b0 [ 2008.225401] __alloc_skb+0x71/0x560 [ 2008.229036] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 2008.233625] rollback_registered_many+0x8ce/0xe70 [ 2008.238474] ? generic_xdp_install+0x550/0x550 [ 2008.243154] ? round_jiffies_up_relative+0xd0/0xd0 [ 2008.248093] ? mark_held_locks+0xa6/0xf0 [ 2008.252157] rollback_registered+0xe9/0x1b0 [ 2008.256480] ? rollback_registered_many+0xe70/0xe70 [ 2008.261504] ? linkwatch_schedule_work+0x135/0x170 [ 2008.266535] unregister_netdevice_queue+0x1de/0x3e0 [ 2008.271564] __tun_detach+0x100d/0x1320 [ 2008.275585] ? __tun_detach+0x1320/0x1320 [ 2008.279885] tun_chr_close+0xd9/0x180 [ 2008.283745] __fput+0x2ce/0x890 [ 2008.287039] task_work_run+0x148/0x1c0 [ 2008.290943] do_exit+0xbf3/0x2be0 [ 2008.294411] ? mm_update_next_owner+0x650/0x650 [ 2008.299090] ? get_signal+0x388/0x1f70 [ 2008.302989] ? lock_downgrade+0x720/0x720 [ 2008.307140] ? lock_acquire+0x170/0x3c0 [ 2008.311125] do_group_exit+0x125/0x310 [ 2008.315108] get_signal+0x3f2/0x1f70 [ 2008.318840] ? iov_iter_init+0xb8/0x1d0 [ 2008.322830] do_signal+0x8f/0x1670 [ 2008.326376] ? setup_sigcontext+0x820/0x820 [ 2008.330719] ? debug_object_init_on_stack+0x20/0x20 [ 2008.335757] ? security_file_permission+0x1c0/0x220 [ 2008.340809] ? vfs_read+0x15c/0x3c0 [ 2008.344455] ? ksys_read+0x1c8/0x2a0 [ 2008.348209] ? exit_to_usermode_loop+0x36/0x2a0 [ 2008.352886] exit_to_usermode_loop+0x204/0x2a0 [ 2008.357472] do_syscall_64+0x538/0x620 [ 2008.361382] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2008.366662] RIP: 0033:0x7fc2b80f8f1c [ 2008.370378] Code: Bad RIP value. [ 2008.373740] RSP: 002b:00007ffd82fb11e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2008.381460] RAX: fffffffffffffe00 RBX: 00007ffd82fb1290 RCX: 00007fc2b80f8f1c [ 2008.388731] RDX: 0000000000000040 RSI: 00007fc2b8263020 RDI: 00000000000000f9 [ 2008.396013] RBP: 0000000000000003 R08: 0000000000000000 R09: ffff000000000000 [ 2008.403284] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000032 [ 2008.410556] R13: 00000000001e495e R14: 0000000000000002 R15: 00007ffd82fb12d0 [ 2009.782839] Mem-Info: [ 2009.785307] active_anon:15728 inactive_anon:45376 isolated_anon:0 [ 2009.785307] active_file:27 inactive_file:18 isolated_file:0 [ 2009.785307] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2009.785307] slab_reclaimable:13488 slab_unreclaimable:113158 [ 2009.785307] mapped:14601 shmem:46168 pagetables:451 bounce:0 [ 2009.785307] free:24823 free_pcp:62 free_cma:0 [ 2009.837131] Node 0 active_anon:60788kB inactive_anon:48432kB active_file:32kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44068kB dirty:0kB writeback:0kB shmem:50600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2009.867803] Node 1 active_anon:2124kB inactive_anon:133072kB active_file:4kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14336kB dirty:0kB writeback:0kB shmem:134072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2009.899200] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2009.926862] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2009.931912] Node 0 DMA32 free:34848kB min:35996kB low:44992kB high:53988kB active_anon:58740kB inactive_anon:48432kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7328kB pagetables:1680kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2009.960711] lowmem_reserve[]: 0 0 1 1 1 [ 2009.964718] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2010.020341] lowmem_reserve[]: 0 0 0 0 0 [ 2010.024373] Node 1 Normal free:53756kB min:53876kB low:67344kB high:80812kB active_anon:2124kB inactive_anon:133072kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2010.192684] lowmem_reserve[]: 0 0 0 0 0 [ 2010.197749] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 5*512kB (U) 0*1024kB 2*2048kB (M) 1*4096kB (M) = 10964kB [ 2010.248808] Node 0 DMA32: 1054*4kB (UME) 445*8kB (UME) 156*16kB (UME) 74*32kB (UME) 35*64kB (M) 20*128kB (M) 12*256kB (UM) 4*512kB (UM) 10*1024kB (UM) 1*2048kB (M) 0*4096kB = 34848kB [ 2010.342476] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2010.410974] Node 1 Normal: 337*4kB (UME) 279*8kB (ME) 227*16kB (UME) 150*32kB (ME) 49*64kB (UME) 14*128kB (ME) 4*256kB (UM) 0*512kB 3*1024kB (UME) 0*2048kB 8*4096kB (U) = 53804kB [ 2010.510338] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2010.563223] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2010.619344] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2010.676976] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2010.685602] 46200 total pagecache pages [ 2010.738667] 0 pages in swap cache [ 2010.742140] Swap cache stats: add 0, delete 0, find 0/0 [ 2010.782526] Free swap = 0kB [ 2010.785585] Total swap = 0kB [ 2010.825041] 2097051 pages RAM [ 2010.850188] 0 pages HighMem/MovableOnly [ 2010.854189] 369649 pages reserved [ 2010.892793] 0 pages cma reserved [ 2010.896300] Unreclaimable slab info: [ 2010.934877] Name Used Total [ 2010.975431] pid_2 13KB 56KB [ 2011.006236] batadv_tt_change_cache 4KB 7KB [ 2011.043061] batadv_tl_cache 9KB 16KB [ 2011.077619] TIPC 12KB 37KB [ 2011.083028] SCTPv6 24KB 37KB [ 2011.140711] SCTP 1KB 3KB [ 2011.146116] DCCPv6 17KB 30KB [ 2011.205967] DCCP 16KB 28KB [ 2011.237153] L2TP/IPv6 26KB 32KB [ 2011.242565] RXRPC 13KB 32KB [ 2011.300873] rxrpc_call_jar 91KB 126KB [ 2011.306282] bridge_fdb_cache 16KB 27KB [ 2011.382779] fib6_nodes 265KB 284KB [ 2011.418806] ip6_dst_cache 1033KB 1035KB [ 2011.424209] RAWv6 121KB 128KB [ 2011.492312] UDPv6 35KB 48KB [ 2011.529629] TCPv6 21KB 30KB [ 2011.535103] nf_conntrack 11KB 18KB [ 2011.585799] t10_alua_lu_gp_cache 0KB 3KB [ 2011.629522] sd_ext_cdb 0KB 7KB [ 2011.653614] scsi_sense_cache 1056KB 1060KB [ 2011.682984] virtio_scsi_cmd 16KB 16KB [ 2011.714882] sgpool-128 8KB 8KB [ 2011.744716] sgpool-64 4KB 12KB [ 2011.781938] sgpool-32 2KB 15KB [ 2011.814726] sgpool-16 1KB 7KB [ 2011.855360] sgpool-8 0KB 7KB [ 2011.885341] mqueue_inode_cache 12KB 30KB [ 2011.911805] bio_post_read_ctx 14KB 15KB [ 2011.955399] bio-2 14KB 15KB [ 2011.989177] jfs_mp 7KB 7KB [ 2011.994610] cifs_small_rq 15KB 16KB [ 2012.038024] cifs_request 67KB 67KB [ 2012.045512] cifs_mpx_ids 0KB 7KB [ 2012.096803] nfs_commit_data 3KB 14KB [ 2012.102260] nfs_write_data 34KB 44KB [ 2012.121404] ext4_system_zone 1KB 7KB [ 2012.192784] bio-1 1KB 7KB [ 2012.218750] pid_namespace 2KB 7KB [ 2012.224230] rpc_buffers 17KB 25KB [ 2012.286581] rpc_tasks 2KB 7KB [ 2012.321783] UNIX 2311KB 2317KB [ 2012.360068] tcp_bind_bucket 1KB 4KB [ 2012.369025] ip_fib_trie 39KB 47KB [ 2012.374416] ip_fib_alias 189KB 201KB [ 2012.417009] ip_dst_cache 13KB 20KB [ 2012.441135] RAW 72KB 82KB [ 2012.446522] UDP 67KB 74KB [ 2012.454332] TCP 8KB 11KB [ 2012.464791] hugetlbfs_inode_cache 3KB 15KB [ 2012.472884] fscache_cookie_jar 1KB 11KB [ 2012.478544] eventpoll_pwq 21KB 63KB [ 2012.483908] eventpoll_epi 39KB 63KB [ 2012.489279] inotify_inode_mark 10KB 27KB [ 2012.494758] request_queue 199KB 199KB [ 2012.500192] blkdev_requests 1KB 3KB [ 2012.505555] blkdev_ioc 23KB 38KB [ 2012.510947] bio-0 1012KB 1016KB [ 2012.516301] biovec-max 1518KB 1592KB [ 2012.521674] biovec-64 996KB 1000KB [ 2012.527048] biovec-16 128KB 153KB [ 2012.532406] bio_integrity_payload 1KB 8KB [ 2012.538153] khugepaged_mm_slot 3KB 27KB [ 2012.543605] uid_cache 0KB 4KB [ 2012.548980] dmaengine-unmap-2 0KB 3KB [ 2012.554338] skbuff_fclone_cache 33KB 41KB [ 2012.560009] skbuff_head_cache 10207KB 10207KB [ 2012.565374] configfs_dir_cache 3KB 7KB [ 2012.571144] file_lock_cache 25KB 31KB [ 2012.576683] file_lock_ctx 9KB 11KB [ 2012.582062] fsnotify_mark_connector 4KB 19KB [ 2012.588911] net_namespace 96KB 96KB [ 2012.594280] shmem_inode_cache 8035KB 8170KB [ 2012.599685] task_delay_info 194KB 375KB [ 2012.605046] taskstats 26KB 45KB [ 2012.610438] proc_dir_entry 997KB 1016KB [ 2012.615804] pde_opener 16KB 54KB [ 2012.621217] seq_file 255KB 401KB [ 2012.626582] sigqueue 42KB 63KB [ 2012.631981] kernfs_node_cache 18115KB 18175KB [ 2012.637831] mnt_cache 192KB 228KB [ 2012.643245] filp 7065KB 7927KB [ 2012.648708] names_cache 101035KB 101086KB [ 2012.654073] iint_cache 30KB 51KB [ 2012.661315] key_jar 4KB 7KB [ 2012.666818] uts_namespace 3KB 7KB [ 2012.672167] nsproxy 1KB 7KB [ 2012.677577] vm_area_struct 3318KB 3681KB [ 2012.682931] mm_struct 547KB 598KB [ 2012.689358] fs_cache 198KB 352KB [ 2012.694824] files_cache 779KB 1095KB [ 2012.700246] signal_cache 1451KB 2055KB [ 2012.705605] sighand_cache 555KB 631KB [ 2012.750144] task_struct 6211KB 6211KB [ 2012.755552] cred_jar 1946KB 2960KB [ 2012.825287] anon_vma_chain 982KB 1535KB [ 2012.845022] anon_vma 106KB 327KB [ 2012.854906] pid 121KB 228KB [ 2012.901810] Acpi-Operand 156KB 202KB [ 2012.929533] Acpi-ParseExt 9KB 11KB [ 2012.935102] Acpi-Parse 41KB 47KB [ 2012.983068] Acpi-State 52KB 63KB [ 2013.012401] Acpi-Namespace 20KB 27KB [ 2013.044096] numa_policy 0KB 3KB [ 2013.063067] debug_objects_cache 1760KB 1968KB [ 2013.106238] trace_event_file 297KB 298KB [ 2013.149304] ftrace_event_field 398KB 401KB [ 2013.154786] pool_workqueue 138KB 152KB [ 2013.210270] page->ptl 495KB 1031KB [ 2013.215704] kmalloc-2097152 2050KB 2050KB [ 2013.275467] kmalloc-524288 2056KB 2056KB [ 2013.314721] kmalloc-262144 1290KB 1290KB [ 2013.344580] kmalloc-131072 650KB 650KB [ 2013.370827] kmalloc-65536 3168KB 3234KB [ 2013.427048] kmalloc-32768 2343KB 2343KB [ 2013.445230] kmalloc-16384 1353KB 1353KB [ 2013.493206] kmalloc-8192 5907KB 5989KB [ 2013.522254] kmalloc-4096 28985KB 29023KB [ 2013.544860] kmalloc-2048 19964KB 20189KB [ 2013.580297] kmalloc-1024 15508KB 15521KB [ 2013.585885] kmalloc-512 18637KB 18637KB [ 2013.629700] kmalloc-256 6065KB 6423KB [ 2013.635103] kmalloc-128 1545KB 1712KB [ 2013.689298] kmalloc-96 3613KB 4404KB [ 2013.694700] kmalloc-64 2825KB 3744KB [ 2013.751292] kmalloc-32 2080KB 2476KB [ 2013.796475] kmalloc-192 2285KB 2972KB [ 2013.828072] kmem_cache 177KB 183KB [ 2013.833475] Out of memory: Kill process 26420 (syz-executor.4) score 1002 or sacrifice child [ 2013.921905] Killed process 26429 (syz-executor.4) total-vm:62728kB, anon-rss:2548kB, file-rss:14336kB, shmem-rss:76kB [ 2013.996698] oom_reaper: reaped process 26429 (syz-executor.4), now anon-rss:0kB, file-rss:14332kB, shmem-rss:12kB [ 2014.019231] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2014.066668] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2014.071505] CPU: 1 PID: 8132 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2014.078950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2014.088294] Call Trace: [ 2014.090887] dump_stack+0x1fc/0x2ef [ 2014.094505] dump_header+0x15d/0xc3f [ 2014.098208] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2014.103301] ? ___ratelimit+0x319/0x590 [ 2014.107272] oom_kill_process.cold+0x10/0x692 [ 2014.111758] ? check_preemption_disabled+0x41/0x280 [ 2014.116767] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2014.122031] out_of_memory+0x1072/0x1390 [ 2014.126094] ? oom_killer_disable+0x270/0x270 [ 2014.130598] ? mutex_trylock+0x15f/0x1a0 [ 2014.134650] __alloc_pages_nodemask+0x23a2/0x2890 [ 2014.139493] ? find_get_entry+0x4cd/0x8a0 [ 2014.143640] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2014.148486] alloc_pages_current+0x193/0x2a0 [ 2014.152970] filemap_fault+0x146e/0x2180 [ 2014.157031] ext4_filemap_fault+0x84/0xb0 [ 2014.161174] __do_fault+0x10b/0x4b0 [ 2014.164786] ? do_raw_spin_unlock+0x171/0x230 [ 2014.169271] __handle_mm_fault+0x273b/0x41c0 [ 2014.173668] ? __might_fault+0xef/0x1d0 [ 2014.177631] ? vm_insert_page+0x9c0/0x9c0 [ 2014.181777] ? check_preemption_disabled+0x41/0x280 [ 2014.186785] handle_mm_fault+0x436/0xb10 [ 2014.190844] __do_page_fault+0x68e/0xd60 [ 2014.194897] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2014.199901] ? spurious_fault+0x840/0x840 [ 2014.204051] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2014.208882] ? page_fault+0x8/0x30 [ 2014.212411] page_fault+0x1e/0x30 [ 2014.215852] RIP: 0033:0x40c780 [ 2014.219039] Code: Bad RIP value. [ 2014.222515] RSP: 002b:000000c000752ed8 EFLAGS: 00010202 [ 2014.228051] RAX: 0000000000000020 RBX: 0000000000a51ea0 RCX: 0000000000000001 [ 2014.235318] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000000 [ 2014.242595] RBP: 000000c000752ef8 R08: 0000000000000000 R09: 0000000000000000 [ 2014.249884] R10: 00007f2149cce680 R11: 0000000000000000 R12: 0000000000203000 [ 2014.257237] R13: 0000000000c0cd98 R14: 000000c000611a00 R15: 00007f214a1e8f08 [ 2014.325257] Mem-Info: [ 2014.327868] active_anon:15116 inactive_anon:45376 isolated_anon:0 [ 2014.327868] active_file:19 inactive_file:31 isolated_file:0 [ 2014.327868] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2014.327868] slab_reclaimable:13471 slab_unreclaimable:113040 [ 2014.327868] mapped:14601 shmem:46168 pagetables:451 bounce:0 [ 2014.327868] free:13847 free_pcp:0 free_cma:0 [ 2014.361345] syz-executor.4: vmalloc: allocation failure, allocated 1699459072 of 2147491840 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2014.375291] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2014.380562] CPU: 0 PID: 26429 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 2014.388445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2014.397805] Call Trace: [ 2014.400403] dump_stack+0x1fc/0x2ef [ 2014.404041] warn_alloc.cold+0x7b/0x18f [ 2014.408031] ? zone_watermark_ok_safe+0x260/0x260 [ 2014.412918] ? rcu_nmi_exit+0xb3/0x180 [ 2014.416850] __vmalloc_area_node+0x4fd/0x780 [ 2014.421283] ? __vmalloc_node_range+0x180/0x180 [ 2014.425963] ? _raw_spin_unlock+0x29/0x40 [ 2014.430178] ? __get_vm_area_node+0x2e2/0x3a0 [ 2014.435320] __vmalloc_node_range+0xed/0x180 [ 2014.439753] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2014.444085] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2014.449457] vmalloc_user+0x70/0xe0 [ 2014.453101] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2014.457464] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2014.461634] __vb2_queue_alloc+0x472/0xe60 [ 2014.465985] vb2_core_create_bufs+0x273/0x7e0 [ 2014.470515] ? __vb2_queue_free+0x870/0x870 [ 2014.474851] ? mutex_trylock+0x1a0/0x1a0 [ 2014.478937] ? __video_do_ioctl+0x632/0xcd0 [ 2014.483277] vb2_create_bufs+0x332/0x620 [ 2014.487353] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2014.492470] ? __video_do_ioctl+0x632/0xcd0 [ 2014.496819] ? mutex_trylock+0x1a0/0x1a0 [ 2014.500898] ? mark_held_locks+0xf0/0xf0 [ 2014.504965] ? futex_wait_queue_me+0x404/0x5e0 [ 2014.509569] vb2_ioctl_create_bufs+0x20d/0x360 [ 2014.514168] ? memset+0x20/0x40 [ 2014.517481] v4l_create_bufs+0xb2/0x160 [ 2014.521464] __video_do_ioctl+0x49a/0xcd0 [ 2014.525649] ? v4l_querycap+0x340/0x340 [ 2014.529638] ? __might_fault+0x192/0x1d0 [ 2014.533711] ? v4l_querycap+0x340/0x340 [ 2014.537699] video_usercopy+0x13f/0xfa0 [ 2014.541728] ? v4l_enumstd+0x60/0x60 [ 2014.545447] ? do_futex+0x171/0x1880 [ 2014.549168] ? mark_held_locks+0xf0/0xf0 [ 2014.553246] ? debug_check_no_obj_freed+0x201/0x490 [ 2014.555978] Node 0 active_anon:58340kB inactive_anon:48432kB active_file:0kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44068kB dirty:0kB writeback:0kB shmem:50600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2014.558355] ? video_usercopy+0xfa0/0xfa0 [ 2014.558371] v4l2_ioctl+0x147/0x1a0 [ 2014.558385] ? video_devdata+0xa0/0xa0 [ 2014.558400] do_vfs_ioctl+0xcdb/0x12e0 [ 2014.558416] ? lock_downgrade+0x720/0x720 [ 2014.558431] ? check_preemption_disabled+0x41/0x280 [ 2014.558445] ? ioctl_preallocate+0x200/0x200 [ 2014.615115] ? __fget+0x356/0x510 [ 2014.618581] ? do_dup2+0x450/0x450 [ 2014.622128] ? __se_sys_futex+0x298/0x3b0 [ 2014.626291] ksys_ioctl+0x9b/0xc0 [ 2014.629763] __x64_sys_ioctl+0x6f/0xb0 [ 2014.633657] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2014.638244] do_syscall_64+0xf9/0x620 [ 2014.642054] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2014.647248] RIP: 0033:0x7f3553c220f9 [ 2014.650969] Code: Bad RIP value. [ 2014.654333] RSP: 002b:00007f3552194168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2014.662049] RAX: ffffffffffffffda RBX: 00007f3553d41f80 RCX: 00007f3553c220f9 [ 2014.669326] RDX: 0000000020000640 RSI: 00000000c100565c RDI: 0000000000000003 [ 2014.676605] RBP: 00007f3553c7dae9 R08: 0000000000000000 R09: 0000000000000000 [ 2014.683875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2014.691159] R13: 00007ffd4d44ad8f R14: 00007f3552194300 R15: 0000000000022000 [ 2014.708489] Node 1 active_anon:2124kB inactive_anon:133072kB active_file:116kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14336kB dirty:0kB writeback:0kB shmem:134072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2014.716598] net_ratelimit: 18 callbacks suppressed [ 2014.716605] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2014.748713] Node 0 DMA free:10876kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2014.787963] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2014.793022] Node 0 DMA32 free:17584kB min:35996kB low:44992kB high:53988kB active_anon:58340kB inactive_anon:48432kB active_file:0kB inactive_file:76kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7328kB pagetables:1680kB bounce:0kB free_pcp:232kB local_pcp:0kB free_cma:0kB [ 2014.834807] lowmem_reserve[]: 0 0 1 1 1 [ 2014.843128] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2014.881145] lowmem_reserve[]: 0 0 0 0 0 [ 2014.885164] Node 1 Normal free:27264kB min:53876kB low:67344kB high:80812kB active_anon:2104kB inactive_anon:133072kB active_file:36kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:124kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 2014.921122] lowmem_reserve[]: 0 0 0 0 0 [ 2014.925404] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10872kB [ 2014.945773] Node 0 DMA32: 1038*4kB (UME) 429*8kB (UME) 142*16kB (UME) 66*32kB (UME) 30*64kB (M) 15*128kB (M) 8*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17856kB [ 2014.968277] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2014.979445] Node 1 Normal: 334*4kB (UME) 294*8kB (UME) 230*16kB (UME) 152*32kB (UME) 50*64kB (UME) 15*128kB (UME) 3*256kB (M) 0*512kB 3*1024kB (UME) 1*2048kB (U) 1*4096kB (U) = 27336kB [ 2015.003233] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2015.012163] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2015.027843] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2015.040301] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2015.055885] 46200 total pagecache pages [ 2015.063480] 0 pages in swap cache [ 2015.073933] Swap cache stats: add 0, delete 0, find 0/0 [ 2015.082858] Free swap = 0kB [ 2015.085884] Total swap = 0kB [ 2015.095879] 2097051 pages RAM [ 2015.102550] 0 pages HighMem/MovableOnly [ 2015.113567] 369649 pages reserved [ 2015.120631] 0 pages cma reserved [ 2015.124093] Unreclaimable slab info: [ 2015.134949] Name Used Total [ 2015.144057] pid_2 13KB 56KB [ 2015.156215] batadv_tt_change_cache 4KB 7KB [ 2015.165627] batadv_tl_cache 9KB 16KB [ 2015.181585] Mem-Info: [ 2015.184045] active_anon:15090 inactive_anon:45376 isolated_anon:0 [ 2015.184045] active_file:16 inactive_file:16 isolated_file:0 [ 2015.184045] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2015.184045] slab_reclaimable:13471 slab_unreclaimable:112964 [ 2015.184045] mapped:14601 shmem:46168 pagetables:450 bounce:0 [ 2015.184045] free:13920 free_pcp:135 free_cma:0 [ 2015.228917] TIPC 12KB 37KB [ 2015.234322] SCTPv6 24KB 37KB [ 2015.239794] SCTP 1KB 3KB [ 2015.245169] DCCPv6 17KB 30KB [ 2015.254126] Node 0 active_anon:58256kB inactive_anon:48432kB active_file:28kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44068kB dirty:0kB writeback:0kB shmem:50600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2015.276514] DCCP 16KB 28KB [ 2015.304621] Node 1 active_anon:2104kB inactive_anon:133072kB active_file:36kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14336kB dirty:0kB writeback:0kB shmem:134072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2015.306572] L2TP/IPv6 26KB 32KB [ 2015.347981] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2015.388609] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2015.393674] Node 0 DMA32 free:17792kB min:35996kB low:44992kB high:53988kB active_anon:58256kB inactive_anon:48432kB active_file:28kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7296kB pagetables:1676kB bounce:0kB free_pcp:288kB local_pcp:192kB free_cma:0kB [ 2015.406516] RXRPC 13KB 32KB [ 2015.437721] lowmem_reserve[]: 0 0 1 1 1 [ 2015.441749] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2015.466507] rxrpc_call_jar 90KB 126KB [ 2015.473092] bridge_fdb_cache 16KB 27KB [ 2015.480445] lowmem_reserve[]: 0 0 0 0 0 [ 2015.484459] Node 1 Normal free:27012kB min:53876kB low:67344kB high:80812kB active_anon:2104kB inactive_anon:133072kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:124kB bounce:0kB free_pcp:192kB local_pcp:188kB free_cma:0kB [ 2015.498702] fib6_nodes 265KB 284KB [ 2015.528003] lowmem_reserve[]: 0 0 0 0 0 [ 2015.532018] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 2015.534104] ip6_dst_cache 1038KB 1038KB [ 2015.558522] Node 0 DMA32: 1038*4kB (UME) 429*8kB (UME) 142*16kB (UME) 66*32kB (UME) 30*64kB (M) 15*128kB (M) 8*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17856kB [ 2015.571971] RAWv6 121KB 128KB [ 2015.586996] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2015.594074] UDPv6 35KB 48KB [ 2015.604612] Node 1 Normal: 333*4kB (ME) 309*8kB (UME) 225*16kB (UME) 152*32kB (UME) 50*64kB (UME) 15*128kB (UME) 3*256kB (M) 0*512kB 3*1024kB (UME) 1*2048kB (U) 1*4096kB (U) = 27372kB [ 2015.605830] TCPv6 21KB 30KB [ 2015.636338] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2015.641019] nf_conntrack 11KB 18KB [ 2015.658465] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2015.670522] t10_alua_lu_gp_cache 0KB 3KB [ 2015.673559] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2015.683728] sd_ext_cdb 0KB 7KB [ 2015.725357] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2015.730077] scsi_sense_cache 1056KB 1060KB [ 2015.780490] virtio_scsi_cmd 16KB 16KB [ 2015.783939] 46200 total pagecache pages [ 2015.785892] sgpool-128 8KB 8KB [ 2015.823995] 0 pages in swap cache [ 2015.825717] sgpool-64 4KB 12KB [ 2015.833697] Swap cache stats: add 0, delete 0, find 0/0 [ 2015.842586] Free swap = 0kB [ 2015.845614] Total swap = 0kB [ 2015.862983] sgpool-32 2KB 15KB [ 2015.865410] 2097051 pages RAM [ 2015.874326] 0 pages HighMem/MovableOnly [ 2015.876359] sgpool-16 1KB 7KB [ 2015.892644] 369649 pages reserved [ 2015.896116] 0 pages cma reserved [ 2015.901079] sgpool-8 0KB 7KB [ 2015.925173] mqueue_inode_cache 12KB 30KB [ 2015.934082] bio_post_read_ctx 14KB 15KB [ 2015.954011] bio-2 14KB 15KB [ 2015.959448] jfs_mp 7KB 7KB [ 2015.964843] cifs_small_rq 15KB 16KB [ 2015.983655] cifs_request 67KB 67KB [ 2015.989125] cifs_mpx_ids 0KB 7KB [ 2015.994513] nfs_commit_data 3KB 14KB [ 2016.014148] nfs_write_data 34KB 44KB [ 2016.023170] ext4_system_zone 1KB 7KB [ 2016.042582] bio-1 1KB 7KB [ 2016.048060] pid_namespace 2KB 7KB [ 2016.053442] rpc_buffers 17KB 25KB [ 2016.113005] rpc_tasks 2KB 7KB [ 2016.121579] UNIX 2302KB 2310KB [ 2016.180047] tcp_bind_bucket 1KB 4KB [ 2016.185451] ip_fib_trie 39KB 47KB [ 2016.204375] ip_fib_alias 189KB 201KB [ 2016.216409] ip_dst_cache 13KB 20KB [ 2016.241720] RAW 72KB 82KB [ 2016.284834] UDP 67KB 74KB [ 2016.344901] TCP 8KB 11KB [ 2016.350387] hugetlbfs_inode_cache 3KB 15KB [ 2016.356106] fscache_cookie_jar 1KB 11KB [ 2016.414046] eventpoll_pwq 21KB 63KB [ 2016.419591] eventpoll_epi 39KB 63KB [ 2016.425064] inotify_inode_mark 10KB 27KB [ 2016.465750] request_queue 199KB 199KB [ 2016.496286] blkdev_requests 1KB 3KB [ 2016.524497] blkdev_ioc 22KB 38KB [ 2016.561193] bio-0 1012KB 1016KB [ 2016.585619] biovec-max 1518KB 1592KB [ 2016.626236] biovec-64 996KB 1000KB [ 2016.663832] biovec-16 128KB 153KB [ 2016.687062] bio_integrity_payload 1KB 8KB [ 2016.692819] khugepaged_mm_slot 3KB 27KB [ 2016.715689] uid_cache 0KB 4KB [ 2016.724878] dmaengine-unmap-2 0KB 3KB [ 2016.777807] skbuff_fclone_cache 33KB 41KB [ 2016.783387] skbuff_head_cache 10443KB 10443KB [ 2016.810025] configfs_dir_cache 3KB 7KB [ 2016.815612] file_lock_cache 25KB 31KB [ 2016.869336] file_lock_ctx 9KB 11KB [ 2016.874740] fsnotify_mark_connector 4KB 19KB [ 2016.909578] net_namespace 96KB 96KB [ 2016.914978] shmem_inode_cache 8035KB 8170KB [ 2016.964958] task_delay_info 177KB 375KB [ 2016.983903] taskstats 26KB 45KB [ 2016.989346] proc_dir_entry 996KB 1016KB [ 2016.994719] pde_opener 16KB 54KB [ 2017.014366] seq_file 252KB 397KB [ 2017.023484] sigqueue 42KB 63KB [ 2017.042655] kernfs_node_cache 18107KB 18171KB [ 2017.051510] mnt_cache 192KB 228KB [ 2017.072379] filp 7031KB 7927KB [ 2017.085974] names_cache 100257KB 100317KB [ 2017.109715] iint_cache 30KB 51KB [ 2017.115140] key_jar 4KB 7KB [ 2017.143626] uts_namespace 3KB 7KB [ 2017.155156] nsproxy 1KB 7KB [ 2017.185504] vm_area_struct 3318KB 3681KB [ 2017.191003] mm_struct 567KB 598KB [ 2017.215232] fs_cache 174KB 336KB [ 2017.244825] files_cache 737KB 1076KB [ 2017.265598] signal_cache 1461KB 2048KB [ 2017.276179] sighand_cache 550KB 631KB [ 2017.303954] task_struct 6186KB 6211KB [ 2017.333747] cred_jar 1922KB 2960KB [ 2017.365936] anon_vma_chain 980KB 1535KB [ 2017.394943] anon_vma 105KB 327KB [ 2017.402771] pid 109KB 228KB [ 2017.432941] Acpi-Operand 156KB 202KB [ 2017.471987] Acpi-ParseExt 9KB 11KB [ 2017.496075] Acpi-Parse 41KB 47KB [ 2017.505085] Acpi-State 52KB 63KB [ 2017.534697] Acpi-Namespace 20KB 27KB [ 2017.555555] numa_policy 0KB 3KB [ 2017.564493] debug_objects_cache 1760KB 1968KB [ 2017.594578] trace_event_file 297KB 298KB [ 2017.600313] ftrace_event_field 398KB 401KB [ 2017.605785] pool_workqueue 138KB 152KB [ 2017.623112] page->ptl 493KB 1031KB [ 2017.629800] kmalloc-2097152 2050KB 2050KB [ 2017.635600] kmalloc-524288 2056KB 2056KB [ 2017.641807] kmalloc-262144 1290KB 1290KB [ 2017.666706] kmalloc-131072 650KB 650KB [ 2017.672697] kmalloc-65536 3168KB 3234KB [ 2017.686174] kmalloc-32768 2343KB 2343KB [ 2017.716445] kmalloc-16384 1353KB 1353KB [ 2017.722446] kmalloc-8192 5832KB 5948KB [ 2017.728621] kmalloc-4096 28662KB 28721KB [ 2017.734623] kmalloc-2048 19945KB 20176KB [ 2017.766482] kmalloc-1024 15508KB 15521KB [ 2017.771938] kmalloc-512 19010KB 19012KB [ 2017.778817] kmalloc-256 6065KB 6423KB [ 2017.784201] kmalloc-128 1545KB 1712KB [ 2017.804741] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2017.860209] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 2017.886440] kmalloc-96 3643KB 4404KB [ 2017.893494] kmalloc-64 2825KB 3744KB [ 2017.914077] systemd[1]: rsyslog.service: Unit entered failed state. [ 2017.917497] kmalloc-32 2084KB 2476KB [ 2017.932593] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 2017.949211] kmalloc-192 2284KB 2972KB [ 2017.954633] kmem_cache 177KB 183KB [ 2017.961236] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2017.976681] Out of memory (oom_kill_allocating_task): Kill process 8132 (syz-fuzzer) score 0 or sacrifice child [ 2017.996462] Killed process 24971 (syz-executor.3) total-vm:48512kB, anon-rss:424kB, file-rss:0kB, shmem-rss:0kB [ 2018.050457] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2018.076749] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2018.084861] systemd[1]: Stopped Journal Service. [ 2018.142567] systemd[1]: Starting Journal Service... [ 2018.197959] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 2018.365167] systemd-journald[26692]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2019.527488] IPVS: ftp: loaded support on port[0] = 21 07:14:42 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400], 0xd3e}}, 0x7ff}) 07:14:42 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x2, @sliced={0x81, [0x8001, 0x7, 0x5, 0xff, 0x7fff, 0x2bc3, 0x401, 0xbd, 0xffff, 0x4b6, 0x2, 0xfff, 0xfff, 0x4, 0x167, 0x0, 0x5, 0xffff, 0xa249, 0xffff, 0x101, 0x7, 0x0, 0x100, 0x2, 0x1, 0xc000, 0x1, 0x1, 0x9, 0x3, 0xb, 0xbdc, 0x2d, 0x9, 0xffff, 0x9, 0x2, 0x5, 0xff2a, 0x5, 0x3, 0x8, 0x0, 0x2, 0x7], 0x1f}}) 07:14:42 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b", 0x10) [ 2020.723287] chnl_net:caif_netlink_parms(): no params data found [ 2021.054403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2021.074099] IPVS: ftp: loaded support on port[0] = 21 [ 2021.094390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2021.122652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2021.140004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2021.164363] device bridge_slave_1 left promiscuous mode [ 2021.170689] bridge0: port 2(bridge_slave_1) entered disabled state [ 2021.185507] device bridge_slave_0 left promiscuous mode [ 2021.191949] bridge0: port 1(bridge_slave_0) entered disabled state [ 2021.210209] device veth1_macvtap left promiscuous mode [ 2021.215608] device veth0_macvtap left promiscuous mode [ 2021.228032] device veth1_vlan left promiscuous mode [ 2021.233196] device veth0_vlan left promiscuous mode [ 2021.436145] Bluetooth: hci1: command 0x0409 tx timeout 07:14:45 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400, 0x6, 0x2400], 0xd3e}}, 0x7ff}) [ 2023.047270] Bluetooth: hci2: command 0x0409 tx timeout [ 2023.126025] Bluetooth: hci3: command 0x0409 tx timeout [ 2023.515930] Bluetooth: hci1: command 0x041b tx timeout [ 2025.115966] Bluetooth: hci2: command 0x041b tx timeout [ 2025.195990] Bluetooth: hci3: command 0x041b tx timeout [ 2025.596378] Bluetooth: hci1: command 0x040f tx timeout [ 2026.236248] Bluetooth: hci6: command 0x0409 tx timeout [ 2027.195652] Bluetooth: hci2: command 0x040f tx timeout [ 2027.275658] Bluetooth: hci3: command 0x040f tx timeout [ 2027.501098] device hsr_slave_1 left promiscuous mode [ 2027.510660] device hsr_slave_0 left promiscuous mode [ 2027.525062] team0 (unregistering): Port device team_slave_1 removed [ 2027.539370] team0 (unregistering): Port device team_slave_0 removed [ 2027.551219] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2027.562314] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2027.593252] bond0 (unregistering): Released all slaves [ 2027.615451] bridge0: port 1(bridge_slave_0) entered blocking state [ 2027.621958] bridge0: port 1(bridge_slave_0) entered disabled state [ 2027.630107] IPVS: ftp: loaded support on port[0] = 21 [ 2027.633821] device bridge_slave_0 entered promiscuous mode [ 2027.644274] bridge0: port 2(bridge_slave_1) entered blocking state [ 2027.654139] bridge0: port 2(bridge_slave_1) entered disabled state [ 2027.661578] device bridge_slave_1 entered promiscuous mode [ 2027.675835] Bluetooth: hci1: command 0x0419 tx timeout [ 2028.003113] IPVS: ftp: loaded support on port[0] = 21 [ 2028.021143] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2028.037175] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2028.109224] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2028.117153] team0: Port device team_slave_0 added [ 2028.153404] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2028.161820] team0: Port device team_slave_1 added [ 2028.241579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2028.253027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2028.284602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2028.310883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2028.317489] Bluetooth: hci6: command 0x041b tx timeout [ 2028.329736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2028.361595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2028.377632] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2028.395816] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2028.421541] chnl_net:caif_netlink_parms(): no params data found [ 2028.504779] device hsr_slave_0 entered promiscuous mode [ 2028.515053] device hsr_slave_1 entered promiscuous mode [ 2028.581736] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2028.604103] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2028.621829] chnl_net:caif_netlink_parms(): no params data found [ 2028.662365] chnl_net:caif_netlink_parms(): no params data found [ 2028.741695] bridge0: port 1(bridge_slave_0) entered blocking state [ 2028.756068] bridge0: port 1(bridge_slave_0) entered disabled state [ 2028.765152] device bridge_slave_0 entered promiscuous mode [ 2028.824031] bridge0: port 2(bridge_slave_1) entered blocking state [ 2028.840800] bridge0: port 2(bridge_slave_1) entered disabled state [ 2028.852719] device bridge_slave_1 entered promiscuous mode [ 2028.933928] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2028.989858] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2029.014808] bridge0: port 1(bridge_slave_0) entered blocking state [ 2029.029586] bridge0: port 1(bridge_slave_0) entered disabled state [ 2029.041747] device bridge_slave_0 entered promiscuous mode [ 2029.053501] bridge0: port 1(bridge_slave_0) entered blocking state [ 2029.060865] bridge0: port 1(bridge_slave_0) entered disabled state [ 2029.070072] device bridge_slave_0 entered promiscuous mode [ 2029.087101] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2029.094429] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2029.102376] team0: Port device team_slave_0 added [ 2029.109607] bridge0: port 2(bridge_slave_1) entered blocking state [ 2029.121008] bridge0: port 2(bridge_slave_1) entered disabled state [ 2029.132255] device bridge_slave_1 entered promiscuous mode [ 2029.143863] bridge0: port 2(bridge_slave_1) entered blocking state [ 2029.154028] bridge0: port 2(bridge_slave_1) entered disabled state [ 2029.169770] device bridge_slave_1 entered promiscuous mode [ 2029.183308] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2029.191480] team0: Port device team_slave_1 added [ 2029.210337] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2029.224642] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2029.259013] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2029.275171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2029.281740] Bluetooth: hci2: command 0x0419 tx timeout [ 2029.287166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2029.314021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2029.326661] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2029.347149] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2029.356983] team0: Port device team_slave_0 added [ 2029.362960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2029.369747] Bluetooth: hci3: command 0x0419 tx timeout [ 2029.375570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2029.401444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2029.422374] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2029.430372] team0: Port device team_slave_1 added [ 2029.437367] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2029.445136] team0: Port device team_slave_0 added [ 2029.453648] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2029.462442] team0: Port device team_slave_1 added [ 2029.493123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2029.502375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2029.535361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2029.567937] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2029.578615] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2029.587599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2029.593898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2029.624899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2029.639613] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2029.648561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2029.655023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2029.680895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2029.713520] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2029.721641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2029.728551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2029.754177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2029.780158] device hsr_slave_0 entered promiscuous mode [ 2029.786240] device hsr_slave_1 entered promiscuous mode [ 2029.806403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2029.813248] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2029.824781] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2029.832777] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2029.856331] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2029.866842] device hsr_slave_0 entered promiscuous mode [ 2029.872594] device hsr_slave_1 entered promiscuous mode [ 2029.880243] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2029.891866] device hsr_slave_0 entered promiscuous mode [ 2029.898353] device hsr_slave_1 entered promiscuous mode [ 2029.904560] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2029.912403] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2029.928227] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2029.935225] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2029.943308] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2029.968450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2029.976133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2029.984110] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2029.991153] 8021q: adding VLAN 0 to HW filter on device team0 [ 2030.395364] Bluetooth: hci6: command 0x040f tx timeout [ 2030.671105] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2030.690368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2030.698606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2030.707740] bridge0: port 1(bridge_slave_0) entered blocking state [ 2030.714302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2031.050971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2031.067049] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2031.403280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2031.411203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2031.418905] bridge0: port 2(bridge_slave_1) entered blocking state [ 2031.425348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2031.750350] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2031.767965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2031.794805] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2031.812343] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2031.819663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2031.828577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2031.836674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2031.844351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2031.863583] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2031.987322] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2031.999583] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2032.021398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2032.029726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2032.143617] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2032.161561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2032.169951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2032.193004] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2032.209906] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2032.217551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2032.230039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2032.247356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2032.255818] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2032.261908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2032.383983] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2032.403490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2032.412418] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2032.427693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2032.434786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2032.445486] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2032.455677] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2032.461882] 8021q: adding VLAN 0 to HW filter on device team0 [ 2032.475540] Bluetooth: hci6: command 0x0419 tx timeout [ 2032.779511] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2032.790308] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2032.802379] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2032.812279] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2032.819531] 8021q: adding VLAN 0 to HW filter on device team0 [ 2032.826756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2032.836358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2032.844301] bridge0: port 1(bridge_slave_0) entered blocking state [ 2032.850767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2032.857832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2032.864786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2032.872867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2032.882806] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2032.896272] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2033.205333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2033.213336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2033.221746] bridge0: port 2(bridge_slave_1) entered blocking state [ 2033.228174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2033.235214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2033.241974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2033.252806] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2033.263948] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2033.276157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2033.599051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2033.606961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2033.617535] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2033.631382] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2033.641756] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2033.651599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2033.660464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2033.668863] bridge0: port 1(bridge_slave_0) entered blocking state [ 2033.675287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2033.682593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2033.691384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2033.700072] bridge0: port 2(bridge_slave_1) entered blocking state [ 2033.706494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2033.713388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2033.721943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2033.730022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2033.737375] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2034.048978] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2034.061348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2034.073439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2034.084765] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2034.096417] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2034.106371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2034.114138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2034.123488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2034.131669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2034.142391] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2034.452460] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2034.461792] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2034.470250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2034.479210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2034.487058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2034.497358] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2034.500357] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2034.503590] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2034.514498] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2034.536525] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2034.546114] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2034.552207] 8021q: adding VLAN 0 to HW filter on device team0 [ 2034.561331] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2034.570726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2034.579244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2034.587162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2034.595629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2034.603305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2034.611088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2034.618859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2034.626648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2034.634092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2034.641980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2034.649771] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2034.659577] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2034.665992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2034.677267] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2034.793956] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2034.804163] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2034.810677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2034.818605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2034.831349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2034.839439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2034.851297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2034.859106] bridge0: port 1(bridge_slave_0) entered blocking state [ 2034.865524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2034.878027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2034.928035] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2034.951834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2034.972294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2034.999963] bridge0: port 2(bridge_slave_1) entered blocking state [ 2035.006409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2035.022223] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2035.143126] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2035.150940] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2035.158883] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2035.168922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2035.180586] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2035.190409] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2035.202579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2035.211267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2035.220757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2035.230839] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2035.240123] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2035.359116] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2035.366232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2035.373224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2035.380262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2035.390560] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2035.398976] device veth0_vlan entered promiscuous mode [ 2035.413743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2035.421651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2035.431820] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2035.443791] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2035.453844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2035.463338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2035.477785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2035.488691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2035.502768] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2035.515356] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2035.525147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2035.532919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2035.541218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2035.548909] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2035.654835] device veth1_vlan entered promiscuous mode [ 2035.671052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2035.679728] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2035.686858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2035.695784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2035.711769] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2035.720523] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2035.731141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2035.753684] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2035.764226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2035.773378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2035.899810] device veth0_macvtap entered promiscuous mode [ 2035.907134] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2035.920057] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2035.931865] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2035.943445] device veth1_macvtap entered promiscuous mode [ 2035.952009] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2035.961879] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2036.084545] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2036.104433] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2036.111900] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2036.120298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2036.128818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2036.138081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2036.147019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2036.158197] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2036.166869] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2036.176014] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2036.189859] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2036.198077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2036.217222] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2036.233898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2036.242226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2036.251735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2036.259297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2036.268395] device bridge_slave_1 left promiscuous mode [ 2036.273858] bridge0: port 2(bridge_slave_1) entered disabled state [ 2036.281834] device bridge_slave_0 left promiscuous mode [ 2036.287872] bridge0: port 1(bridge_slave_0) entered disabled state [ 2036.297188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2036.303903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2036.312843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2036.320162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2036.329392] device bridge_slave_1 left promiscuous mode [ 2036.335465] bridge0: port 2(bridge_slave_1) entered disabled state [ 2036.342669] device bridge_slave_0 left promiscuous mode [ 2036.348911] bridge0: port 1(bridge_slave_0) entered disabled state [ 2036.358165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2036.365249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2036.373602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2036.380556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2036.389425] device bridge_slave_1 left promiscuous mode [ 2036.395900] bridge0: port 2(bridge_slave_1) entered disabled state [ 2036.403030] device bridge_slave_0 left promiscuous mode [ 2036.408860] bridge0: port 1(bridge_slave_0) entered disabled state [ 2036.417919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2036.424768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2036.432980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2036.440188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2036.448946] device bridge_slave_1 left promiscuous mode [ 2036.454444] bridge0: port 2(bridge_slave_1) entered disabled state [ 2036.462466] device bridge_slave_0 left promiscuous mode [ 2036.468362] bridge0: port 1(bridge_slave_0) entered disabled state [ 2036.482447] device veth1_macvtap left promiscuous mode [ 2036.488701] device veth0_macvtap left promiscuous mode [ 2036.494046] device veth1_vlan left promiscuous mode [ 2036.499676] device veth0_vlan left promiscuous mode [ 2036.505748] device veth1_macvtap left promiscuous mode [ 2036.511226] device veth0_macvtap left promiscuous mode [ 2036.517197] device veth1_vlan left promiscuous mode [ 2036.522252] device veth0_vlan left promiscuous mode [ 2036.528146] device veth1_macvtap left promiscuous mode [ 2036.533444] device veth0_macvtap left promiscuous mode [ 2036.539319] device veth1_vlan left promiscuous mode [ 2036.544422] device veth0_vlan left promiscuous mode [ 2036.550272] device veth1_macvtap left promiscuous mode [ 2036.556479] device veth0_macvtap left promiscuous mode [ 2036.561979] device veth1_vlan left promiscuous mode [ 2036.567142] device veth0_vlan left promiscuous mode [ 2038.396688] ieee802154 phy0 wpan0: encryption failed: -22 [ 2038.402303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2050.211345] device hsr_slave_1 left promiscuous mode [ 2050.219244] device hsr_slave_0 left promiscuous mode [ 2050.240690] team0 (unregistering): Port device team_slave_1 removed [ 2050.253070] team0 (unregistering): Port device team_slave_0 removed [ 2050.262858] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2050.275455] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2050.307850] bond0 (unregistering): Released all slaves [ 2050.351131] device hsr_slave_1 left promiscuous mode [ 2050.359989] device hsr_slave_0 left promiscuous mode [ 2050.375956] team0 (unregistering): Port device team_slave_1 removed [ 2050.386431] team0 (unregistering): Port device team_slave_0 removed [ 2050.397476] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2050.407990] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2050.440555] bond0 (unregistering): Released all slaves [ 2050.483219] device hsr_slave_1 left promiscuous mode [ 2050.495545] device hsr_slave_0 left promiscuous mode [ 2050.509354] team0 (unregistering): Port device team_slave_1 removed [ 2050.519171] team0 (unregistering): Port device team_slave_0 removed [ 2050.530965] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2050.544294] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2050.575427] bond0 (unregistering): Released all slaves [ 2050.618603] device hsr_slave_1 left promiscuous mode [ 2050.626265] device hsr_slave_0 left promiscuous mode [ 2050.645130] team0 (unregistering): Port device team_slave_1 removed [ 2050.656154] team0 (unregistering): Port device team_slave_0 removed [ 2050.666310] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2050.676959] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2050.709650] bond0 (unregistering): Released all slaves [ 2050.728262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2050.758834] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2050.766699] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2050.774268] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2050.786808] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2050.798120] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2050.805871] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2050.813105] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2050.820646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2050.829386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2050.841526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2050.849995] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2050.860570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2050.870790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2050.881186] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2050.888275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2050.897549] device veth0_vlan entered promiscuous mode [ 2050.910361] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2050.918062] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2050.927463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2050.936353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2050.944474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2050.954416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2050.964731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2050.975946] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2050.983280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2050.994010] device veth0_vlan entered promiscuous mode [ 2051.004668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2051.011770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2051.020191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2051.028763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2051.046595] device veth1_vlan entered promiscuous mode [ 2051.052723] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2051.062191] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2051.076225] device veth1_vlan entered promiscuous mode [ 2051.082380] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2051.091152] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2051.101011] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2051.112191] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2051.126215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2051.135466] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2051.146762] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2051.154317] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2051.161536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2051.171517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2051.189792] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2051.199528] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2051.210442] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2051.220306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2051.228724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2051.241876] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2051.250368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2051.258811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2051.268367] device veth0_macvtap entered promiscuous mode [ 2051.275636] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2051.284009] device veth0_macvtap entered promiscuous mode [ 2051.290373] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2051.300011] device veth1_macvtap entered promiscuous mode [ 2051.307587] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2051.318050] device veth1_macvtap entered promiscuous mode [ 2051.325256] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2051.334745] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2051.341888] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2051.349206] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2051.360588] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2051.370787] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2051.381046] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2051.392827] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2051.403407] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2051.410896] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2051.420895] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2051.429013] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2051.436798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2051.444647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2051.453062] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2051.463188] device veth0_vlan entered promiscuous mode [ 2051.470676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2051.478144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2051.487878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2051.498164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2051.507357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2051.517707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2051.528066] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2051.535261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2051.543050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2051.552990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2051.562722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2051.572626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2051.581851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2051.591618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2051.602393] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2051.609620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2051.618916] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2051.627782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2051.636514] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2051.645284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2051.654934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2051.665185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2051.675055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2051.684995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2051.695740] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2051.703066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2051.721203] device veth1_vlan entered promiscuous mode [ 2051.737345] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2051.750150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2051.762545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2051.773994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2051.783819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2051.792928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2051.802681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2051.812937] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2051.820010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2051.827108] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2051.835328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2051.843108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2051.851596] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2051.859703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2051.886859] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2051.925030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2051.932173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2051.959382] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2051.976526] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2051.987424] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2052.007734] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2052.018566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2052.030220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2052.041749] device veth0_macvtap entered promiscuous mode [ 2052.048424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2052.063425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2052.086261] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2052.096600] device veth1_macvtap entered promiscuous mode [ 2052.103120] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2052.118401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2052.127918] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2052.140246] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2052.152224] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready 07:15:15 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8, @pix={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xa}}) 07:15:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400], 0xd3e}}, 0x7ff}) [ 2052.178685] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2052.210600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 07:15:15 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r1 = syz_open_dev$vim2m(&(0x7f00000003c0), 0xffff, 0x2) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000004c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000500)=@multiplanar_fd={0x6, 0x3, 0x4, 0x10010, 0x0, {r2, r3/1000+60000}, {0x1, 0x1, 0x6, 0x1, 0x9e, 0x0, "09570457"}, 0x8001, 0x4, {&(0x7f0000000440)=[{0x6, 0x1, {}, 0x4}, {0xfff, 0x4, {}, 0x7fffffff}]}, 0x3fffc000, 0x0, r4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}}, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4e00001a", @ANYRES16=r8, @ANYBLOB="000226bd7000ffdbdf25030000eb0b000180080006000300000008000200010000000800020000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4080881}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2}) [ 2052.261420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2052.308698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2052.322502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2052.332033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2052.342927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2052.352988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2052.363368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2052.374885] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2052.382162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2052.392730] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2052.402756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2052.441176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2052.465491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2052.490718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2052.511475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2052.530545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2052.555706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2052.574842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2052.594716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2052.620912] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2052.629639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2052.693085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2052.710749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2052.856476] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2052.876702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2052.905741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2052.949295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2052.964683] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2052.976403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2052.992001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2053.038592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2053.052989] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2053.072470] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2053.098751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2053.111677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2053.129482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2053.139380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2053.159690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2053.174877] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 07:15:16 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b", 0x10) 07:15:16 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000000000)="d78935ef9894bf013df9ce7c8cbc525b", 0x10) [ 2053.372787] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2053.391635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2053.417695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:15:16 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, 0x0, 0x0) [ 2053.453682] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2053.473059] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2053.482886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:15:16 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0x0, 0x3, 0x1, {0x1, @sliced={0x0, [0x3, 0x1ff, 0x0, 0x101, 0x5, 0x7, 0x896d, 0x3, 0x1, 0x4, 0x8000, 0x3, 0x40, 0xfe00, 0x7, 0xfffc, 0x81, 0x1, 0x7cae, 0xfbff, 0x1, 0x2, 0x2, 0x101, 0x1ff, 0x5, 0x6, 0x6, 0x90, 0x9, 0x400], 0xd3e}}, 0x7ff}) [ 2053.506344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2053.552024] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2053.572706] IPVS: ftp: loaded support on port[0] = 21 07:15:16 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x2, @sliced={0x81, [0x8001, 0x7, 0x5, 0xff, 0x7fff, 0x2bc3, 0x401, 0xbd, 0xffff, 0x4b6, 0x2, 0xfff, 0xfff, 0x4, 0x167, 0x0, 0x5, 0xffff, 0xa249, 0xffff, 0x101, 0x7, 0x0, 0x100, 0x2, 0x1, 0xc000, 0x1, 0x1, 0x9, 0x3, 0xb, 0xbdc, 0x2d, 0x9, 0xffff, 0x9, 0x2, 0x5, 0xff2a, 0x5, 0x3, 0x8, 0x0, 0x2, 0x7], 0x1f}}) 07:15:16 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x2, @sliced={0x81, [0x8001, 0x7, 0x5, 0xff, 0x7fff, 0x2bc3, 0x401, 0xbd, 0xffff, 0x4b6, 0x2, 0xfff, 0xfff, 0x4, 0x167, 0x0, 0x5, 0xffff, 0xa249, 0xffff, 0x101, 0x7, 0x0, 0x100, 0x2, 0x1, 0xc000, 0x1, 0x1, 0x9, 0x3, 0xb, 0xbdc, 0x2d, 0x9, 0xffff, 0x9, 0x2, 0x5, 0xff2a, 0x5, 0x3, 0x8, 0x0, 0x2, 0x7], 0x1f}}) 07:15:16 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x2, @sliced={0x81, [0x8001, 0x7, 0x5, 0xff, 0x7fff, 0x2bc3, 0x401, 0xbd, 0xffff, 0x4b6, 0x2, 0xfff, 0xfff, 0x4, 0x167, 0x0, 0x5, 0xffff, 0xa249, 0xffff, 0x101, 0x7, 0x0, 0x100, 0x2, 0x1, 0xc000, 0x1, 0x1, 0x9, 0x3, 0xb, 0xbdc, 0x2d, 0x9, 0xffff, 0x9, 0x2, 0x5, 0xff2a, 0x5, 0x3, 0x8, 0x0, 0x2, 0x7], 0x1f}}) 07:15:16 executing program 5: syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @sliced={0x81, [0x8001, 0x7, 0x5, 0xff, 0x7fff, 0x2bc3, 0x401, 0xbd, 0xffff, 0x4b6, 0x2, 0xfff, 0xfff, 0x4, 0x167, 0x0, 0x5, 0xffff, 0xa249, 0xffff, 0x101, 0x7, 0x0, 0x100, 0x2, 0x1, 0xc000, 0x1, 0x1, 0x9, 0x3, 0xb, 0xbdc, 0x2d, 0x9, 0xffff, 0x9, 0x2, 0x5, 0xff2a, 0x5, 0x3, 0x8, 0x0, 0x2, 0x7], 0x1f}}) [ 2054.012203] chnl_net:caif_netlink_parms(): no params data found [ 2054.148235] bridge0: port 1(bridge_slave_0) entered blocking state [ 2054.162841] bridge0: port 1(bridge_slave_0) entered disabled state [ 2054.190090] device bridge_slave_0 entered promiscuous mode [ 2054.212606] bridge0: port 2(bridge_slave_1) entered blocking state [ 2054.231272] bridge0: port 2(bridge_slave_1) entered disabled state [ 2054.246956] device bridge_slave_1 entered promiscuous mode [ 2054.299899] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2054.310014] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2054.350142] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2054.364145] team0: Port device team_slave_0 added [ 2054.370077] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2054.384123] team0: Port device team_slave_1 added [ 2054.419523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2054.426214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2054.460797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2054.482333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2054.488998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2054.520709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2054.543983] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2054.552139] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2054.596884] device hsr_slave_0 entered promiscuous mode [ 2054.606414] device hsr_slave_1 entered promiscuous mode [ 2054.612892] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2054.627036] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2054.848078] bridge0: port 2(bridge_slave_1) entered blocking state [ 2054.854536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2054.861286] bridge0: port 1(bridge_slave_0) entered blocking state [ 2054.867714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2055.018374] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2055.024825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2055.043950] bridge0: port 1(bridge_slave_0) entered disabled state [ 2055.053858] bridge0: port 2(bridge_slave_1) entered disabled state [ 2055.070200] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2055.091083] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2055.106248] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2055.120708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2055.129041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2055.140203] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2055.147613] 8021q: adding VLAN 0 to HW filter on device team0 [ 2055.159567] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2055.167859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2055.179864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2055.199468] bridge0: port 1(bridge_slave_0) entered blocking state [ 2055.205954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2055.240625] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2055.250125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2055.260697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2055.269483] bridge0: port 2(bridge_slave_1) entered blocking state [ 2055.275942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2055.293925] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2055.305549] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2055.312747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2055.322832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2055.335850] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2055.344305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2055.352814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2055.371276] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2055.379279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2055.393272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2055.401509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2055.418590] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2055.430168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2055.442288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2055.461397] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2055.470848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2055.485379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2055.500094] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2055.507028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2055.560138] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2055.569770] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2055.577589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2055.586616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2055.600928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2055.608193] Bluetooth: hci4: command 0x0409 tx timeout [ 2055.675281] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2055.687389] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2055.694724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2055.702847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2055.776334] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2055.789083] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2055.797912] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2055.814771] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2055.821473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2055.836155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2055.850641] device veth0_vlan entered promiscuous mode [ 2055.859971] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2055.872637] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2055.887384] device veth1_vlan entered promiscuous mode [ 2055.899594] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2055.910907] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2055.931972] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2055.950977] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2055.960179] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2055.976316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2055.987705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2056.001505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2056.016003] device veth0_macvtap entered promiscuous mode [ 2056.022701] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2056.039745] device veth1_macvtap entered promiscuous mode [ 2056.048775] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2056.061154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2056.078181] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2056.090650] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2056.101845] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2056.111534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2056.122439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.132238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2056.142301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.151576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2056.162115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.171392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2056.182040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.191346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2056.201235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.212128] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2056.219389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2056.226507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2056.235479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2056.250077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2056.260802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.270670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2056.282536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.296995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2056.308226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.321799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2056.337881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.347810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2056.362980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.379272] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2056.386419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2056.401596] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2056.411765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2056.599138] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2056.610793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2056.621995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2056.637496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2056.667232] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2056.674645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2056.681886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2056.694125] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2057.673725] Bluetooth: hci4: command 0x041b tx timeout [ 2059.752627] Bluetooth: hci4: command 0x040f tx timeout [ 2060.336650] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2060.348769] systemd-journal cpuset=/ mems_allowed=0-1 [ 2060.354038] CPU: 1 PID: 26692 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2060.362110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2060.371462] Call Trace: [ 2060.374063] dump_stack+0x1fc/0x2ef [ 2060.377695] dump_header+0x15d/0xc3f [ 2060.381415] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2060.386533] ? ___ratelimit+0x319/0x590 [ 2060.390515] oom_kill_process.cold+0x10/0x692 [ 2060.395119] ? check_preemption_disabled+0x41/0x280 [ 2060.400144] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2060.405427] out_of_memory+0x1072/0x1390 [ 2060.409509] ? oom_killer_disable+0x270/0x270 [ 2060.414009] ? mutex_trylock+0x15f/0x1a0 [ 2060.418253] __alloc_pages_nodemask+0x23a2/0x2890 [ 2060.423122] ? find_get_entry+0x4cd/0x8a0 [ 2060.427464] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2060.432422] alloc_pages_current+0x193/0x2a0 [ 2060.436922] filemap_fault+0x146e/0x2180 [ 2060.441090] ext4_filemap_fault+0x84/0xb0 [ 2060.445247] __do_fault+0x10b/0x4b0 [ 2060.448888] ? do_raw_spin_unlock+0x171/0x230 [ 2060.453388] __handle_mm_fault+0x273b/0x41c0 [ 2060.457805] ? vm_insert_page+0x9c0/0x9c0 [ 2060.461972] ? check_preemption_disabled+0x41/0x280 [ 2060.466995] handle_mm_fault+0x436/0xb10 [ 2060.471064] __do_page_fault+0x68e/0xd60 [ 2060.475138] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2060.480161] ? spurious_fault+0x840/0x840 [ 2060.484314] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2060.489166] ? page_fault+0x8/0x30 [ 2060.492730] page_fault+0x1e/0x30 [ 2060.496191] RIP: 0033:0x7f36287f3504 [ 2060.499910] Code: Bad RIP value. [ 2060.503278] RSP: 002b:00007ffc28316c30 EFLAGS: 00010202 [ 2060.508640] RAX: 0000000000000000 RBX: 00007ffc283174d8 RCX: 0000000000000008 [ 2060.516026] RDX: 00007ffc283174d8 RSI: 0000000000000008 RDI: 00007ffc283174d0 [ 2060.523295] RBP: 00007ffc283174d8 R08: 00007f362880dd40 R09: 0000000000000000 [ 2060.530563] R10: 0000000000000000 R11: 00007f3627e37040 R12: 00007ffc28316cb8 [ 2060.537833] R13: 0000000000000038 R14: 00005579980ef958 R15: 0005f595201503aa [ 2060.550943] Mem-Info: [ 2060.555943] active_anon:18624 inactive_anon:47414 isolated_anon:0 [ 2060.555943] active_file:43 inactive_file:0 isolated_file:0 [ 2060.555943] unevictable:0 dirty:3 writeback:0 unstable:0 [ 2060.555943] slab_reclaimable:13021 slab_unreclaimable:114837 [ 2060.555943] mapped:22366 shmem:48221 pagetables:665 bounce:0 [ 2060.555943] free:25042 free_pcp:62 free_cma:0 [ 2060.595016] Node 0 active_anon:70512kB inactive_anon:48464kB active_file:116kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58436kB dirty:12kB writeback:0kB shmem:50652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 22528kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2060.628334] Node 1 active_anon:3984kB inactive_anon:141192kB active_file:56kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31028kB dirty:0kB writeback:0kB shmem:142232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2060.706888] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2060.767553] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2060.790820] Node 0 DMA32 free:35356kB min:35996kB low:44992kB high:53988kB active_anon:70512kB inactive_anon:48464kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:12kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7648kB pagetables:2168kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 2060.898305] lowmem_reserve[]: 0 0 1 1 1 [ 2060.902325] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2060.968872] lowmem_reserve[]: 0 0 0 0 0 [ 2060.978127] Node 1 Normal free:53852kB min:53876kB low:67344kB high:80812kB active_anon:3984kB inactive_anon:141192kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:492kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2061.020115] lowmem_reserve[]: 0 0 0 0 0 [ 2061.036057] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10980kB [ 2061.073770] Node 0 DMA32: 886*4kB (ME) 371*8kB (UME) 130*16kB (UME) 41*32kB (UME) 37*64kB (UME) 24*128kB (UM) 15*256kB (UM) 6*512kB (UM) 7*1024kB (UM) 3*2048kB (U) 0*4096kB = 35568kB [ 2061.134849] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2061.160517] Node 1 Normal: 404*4kB (ME) 320*8kB (ME) 268*16kB (UME) 196*32kB (ME) 68*64kB (ME) 32*128kB (ME) 16*256kB (UM) 4*512kB (M) 4*1024kB (UME) 2*2048kB (UM) 4*4096kB (U) = 53904kB [ 2061.197664] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2061.233279] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2061.242080] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2061.298814] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2061.343261] 48246 total pagecache pages [ 2061.347271] 0 pages in swap cache [ 2061.350720] Swap cache stats: add 0, delete 0, find 0/0 [ 2061.392611] Free swap = 0kB [ 2061.397462] Total swap = 0kB [ 2061.400499] 2097051 pages RAM [ 2061.413599] 0 pages HighMem/MovableOnly [ 2061.417589] 369649 pages reserved [ 2061.421034] 0 pages cma reserved [ 2061.436324] Unreclaimable slab info: [ 2061.441509] Name Used Total [ 2061.447125] pid_2 10KB 48KB [ 2061.459129] batadv_tt_change_cache 4KB 7KB [ 2061.471640] batadv_tl_cache 9KB 16KB [ 2061.477198] TIPC 16KB 45KB [ 2061.493462] SCTPv6 24KB 30KB [ 2061.510090] DCCPv6 17KB 22KB [ 2061.528387] DCCP 16KB 28KB [ 2061.550303] L2TP/IPv6 8KB 26KB [ 2061.564741] RXRPC 19KB 39KB [ 2061.570127] rxrpc_call_jar 123KB 133KB [ 2061.590367] bridge_fdb_cache 18KB 27KB [ 2061.612583] fib6_nodes 285KB 288KB [ 2061.617962] ip6_dst_cache 830KB 877KB [ 2061.640423] RAWv6 121KB 141KB [ 2061.671420] UDPv6 41KB 52KB [ 2061.694649] TCPv6 27KB 36KB [ 2061.700138] nf_conntrack 18KB 18KB [ 2061.746827] t10_alua_lu_gp_cache 0KB 3KB [ 2061.767642] sd_ext_cdb 0KB 7KB [ 2061.776110] scsi_sense_cache 1056KB 1060KB [ 2061.781486] virtio_scsi_cmd 16KB 16KB [ 2061.791879] sgpool-128 8KB 8KB [ 2061.810364] sgpool-64 4KB 12KB [ 2061.832436] Bluetooth: hci4: command 0x0419 tx timeout [ 2061.833252] sgpool-32 2KB 15KB [ 2061.847614] sgpool-16 1KB 7KB [ 2061.853174] sgpool-8 0KB 7KB [ 2061.858537] mqueue_inode_cache 13KB 37KB [ 2061.869079] bio_post_read_ctx 14KB 15KB [ 2061.874594] bio-2 14KB 15KB [ 2061.879955] jfs_mp 7KB 7KB [ 2061.885498] cifs_small_rq 15KB 16KB [ 2061.890857] cifs_request 67KB 67KB [ 2061.896232] cifs_mpx_ids 0KB 7KB [ 2061.901713] nfs_commit_data 3KB 14KB [ 2061.908994] nfs_write_data 34KB 44KB [ 2061.919917] ext4_system_zone 1KB 7KB [ 2061.929345] bio-1 1KB 7KB [ 2061.937213] pid_namespace 2KB 7KB [ 2061.942821] rpc_buffers 17KB 25KB [ 2061.948180] rpc_tasks 2KB 7KB [ 2061.958519] UNIX 2323KB 2396KB [ 2061.963978] tcp_bind_bucket 1KB 4KB [ 2061.969350] ip_fib_trie 42KB 47KB [ 2061.979473] ip_fib_alias 200KB 205KB [ 2061.990055] ip_dst_cache 21KB 24KB [ 2061.998845] RAW 72KB 97KB [ 2062.004259] UDP 67KB 81KB [ 2062.010952] TCP 11KB 16KB [ 2062.021339] hugetlbfs_inode_cache 3KB 15KB [ 2062.027144] fscache_cookie_jar 1KB 11KB [ 2062.035422] eventpoll_pwq 22KB 63KB [ 2062.040783] eventpoll_epi 41KB 63KB [ 2062.046386] inotify_inode_mark 9KB 19KB [ 2062.051841] request_queue 199KB 199KB [ 2062.059897] blkdev_requests 1KB 3KB [ 2062.069047] blkdev_ioc 16KB 30KB [ 2062.076096] bio-0 209KB 468KB [ 2062.081478] biovec-max 1386KB 1460KB [ 2062.090533] biovec-64 255KB 480KB [ 2062.095984] biovec-16 87KB 135KB [ 2062.101348] bio_integrity_payload 1KB 8KB [ 2062.110789] khugepaged_mm_slot 3KB 27KB [ 2062.118074] uid_cache 0KB 4KB [ 2062.127171] dmaengine-unmap-2 0KB 3KB [ 2062.132591] skbuff_fclone_cache 16KB 41KB [ 2062.138127] skbuff_head_cache 8336KB 8340KB [ 2062.147158] configfs_dir_cache 3KB 7KB [ 2062.152728] file_lock_cache 12KB 27KB [ 2062.158135] file_lock_ctx 9KB 11KB [ 2062.167059] fsnotify_mark_connector 4KB 19KB [ 2062.173003] net_namespace 96KB 96KB [ 2062.178368] shmem_inode_cache 8023KB 8143KB [ 2062.187392] task_delay_info 292KB 375KB [ 2062.192796] taskstats 16KB 42KB [ 2062.198158] proc_dir_entry 1015KB 1102KB [ 2062.207197] pde_opener 17KB 54KB [ 2062.212598] seq_file 206KB 374KB [ 2062.220043] sigqueue 35KB 63KB [ 2062.229215] kernfs_node_cache 18239KB 18258KB [ 2062.234622] mnt_cache 221KB 256KB [ 2062.239983] filp 7729KB 7998KB [ 2062.248991] names_cache 99484KB 99543KB [ 2062.254454] iint_cache 23KB 47KB [ 2062.259813] key_jar 4KB 7KB [ 2062.269169] uts_namespace 3KB 11KB [ 2062.278161] nsproxy 3KB 7KB [ 2062.287337] vm_area_struct 2934KB 3546KB [ 2062.296370] mm_struct 510KB 585KB [ 2062.301838] fs_cache 345KB 352KB [ 2062.310839] files_cache 1324KB 1327KB [ 2062.320069] signal_cache 2410KB 2436KB [ 2062.328310] sighand_cache 592KB 631KB [ 2062.336967] task_struct 10270KB 10302KB [ 2062.342438] cred_jar 2575KB 2960KB [ 2062.347816] anon_vma_chain 886KB 1512KB [ 2062.354965] anon_vma 143KB 327KB [ 2062.360341] pid 199KB 228KB [ 2062.371091] Acpi-Operand 156KB 202KB [ 2062.377384] Acpi-ParseExt 9KB 11KB [ 2062.389804] Acpi-Parse 41KB 47KB [ 2062.397004] Acpi-State 52KB 63KB [ 2062.406194] Acpi-Namespace 20KB 27KB [ 2062.411580] numa_policy 0KB 3KB [ 2062.419576] debug_objects_cache 1836KB 1968KB [ 2062.427109] trace_event_file 297KB 298KB [ 2062.436039] ftrace_event_field 398KB 401KB [ 2062.441493] pool_workqueue 148KB 156KB [ 2062.449440] page->ptl 441KB 1031KB [ 2062.455723] kmalloc-2097152 2050KB 2050KB [ 2062.461102] kmalloc-524288 2056KB 2056KB [ 2062.468410] kmalloc-262144 1290KB 1290KB [ 2062.477661] kmalloc-131072 650KB 650KB [ 2062.486977] kmalloc-65536 3168KB 3234KB [ 2062.494249] kmalloc-32768 2442KB 2508KB [ 2062.499693] kmalloc-16384 1386KB 1485KB [ 2062.508946] kmalloc-8192 6072KB 6113KB [ 2062.517961] kmalloc-4096 33672KB 33694KB [ 2062.526366] kmalloc-2048 20423KB 20635KB [ 2062.531746] kmalloc-1024 14878KB 14994KB [ 2062.539348] kmalloc-512 15318KB 16117KB [ 2062.546012] kmalloc-256 6264KB 6390KB [ 2062.551385] kmalloc-128 1537KB 1701KB [ 2062.558588] kmalloc-96 3156KB 4404KB [ 2062.568170] kmalloc-64 2862KB 3740KB [ 2062.577190] kmalloc-32 1981KB 2476KB [ 2062.584496] kmalloc-192 2518KB 2956KB [ 2062.589853] kmem_cache 177KB 183KB [ 2062.599005] Out of memory (oom_kill_allocating_task): Kill process 26692 (systemd-journal) score 0 or sacrifice child [ 2062.610893] Killed process 26692 (systemd-journal) total-vm:46096kB, anon-rss:492kB, file-rss:0kB, shmem-rss:2364kB [ 2062.637689] oom_reaper: reaped process 27697 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 2062.800481] systemd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2062.813725] systemd cpuset=/ mems_allowed=0-1 [ 2062.818346] CPU: 1 PID: 1 Comm: systemd Not tainted 4.19.211-syzkaller #0 [ 2062.825312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 2062.834671] Call Trace: [ 2062.837268] dump_stack+0x1fc/0x2ef [ 2062.840902] dump_header+0x15d/0xc3f [ 2062.844624] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2062.849730] ? ___ratelimit+0x319/0x590 [ 2062.853741] oom_kill_process.cold+0x10/0x692 [ 2062.858238] ? oom_badness.part.0+0x135/0x6e0 [ 2062.862739] ? lock_downgrade+0x720/0x720 [ 2062.866912] ? check_preemption_disabled+0x41/0x280 [ 2062.872111] out_of_memory+0x34d/0x1390 [ 2062.876100] ? oom_killer_disable+0x270/0x270 [ 2062.880599] ? mutex_trylock+0x15f/0x1a0 [ 2062.884672] __alloc_pages_nodemask+0x23a2/0x2890 [ 2062.889531] ? find_get_entry+0x4cd/0x8a0 [ 2062.893692] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2062.898649] alloc_pages_current+0x193/0x2a0 [ 2062.903071] filemap_fault+0x146e/0x2180 [ 2062.907167] ext4_filemap_fault+0x84/0xb0 [ 2062.911324] __do_fault+0x10b/0x4b0 [ 2062.914956] __handle_mm_fault+0x273b/0x41c0 [ 2062.919366] ? vm_insert_page+0x9c0/0x9c0 [ 2062.923531] ? check_preemption_disabled+0x41/0x280 [ 2062.928556] handle_mm_fault+0x436/0xb10 [ 2062.932715] __do_page_fault+0x68e/0xd60 [ 2062.936785] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2062.941805] ? spurious_fault+0x840/0x840 [ 2062.945957] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2062.951006] ? page_fault+0x8/0x30 [ 2062.954640] page_fault+0x1e/0x30 [ 2062.958096] RIP: 0033:0x7f8068c6b560 [ 2062.961813] Code: Bad RIP value. [ 2062.965171] RSP: 002b:00007fff13488438 EFLAGS: 00010293 [ 2062.970619] RAX: 0000000000000001 RBX: 00005630392b9f50 RCX: 00007f8068c5f303 [ 2062.977885] RDX: 0000000000000001 RSI: 00007fff13488450 RDI: 0000000000000000 [ 2062.985155] RBP: 00007fff13488730 R08: 57f377b3a2488542 R09: 0000000000005810 [ 2062.992423] R10: 00000000ffffffff R11: 0000000000000293 R12: 00007fff13488450 [ 2062.999692] R13: 0000000000000001 R14: ffffffffffffffff R15: 0000000000000002 [ 2063.014288] Mem-Info: [ 2063.016810] active_anon:17967 inactive_anon:47413 isolated_anon:0 [ 2063.016810] active_file:13 inactive_file:12 isolated_file:0 [ 2063.016810] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2063.016810] slab_reclaimable:12995 slab_unreclaimable:114881 [ 2063.016810] mapped:21769 shmem:48221 pagetables:640 bounce:0 [ 2063.016810] free:13908 free_pcp:210 free_cma:0 [ 2063.057351] Node 0 active_anon:68344kB inactive_anon:48464kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58404kB dirty:0kB writeback:0kB shmem:50652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 20480kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2063.097532] Node 1 active_anon:3524kB inactive_anon:141188kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28672kB dirty:0kB writeback:0kB shmem:142232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2063.138565] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2063.165626] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2063.170667] Node 0 DMA32 free:18000kB min:35996kB low:44992kB high:53988kB active_anon:68344kB inactive_anon:48464kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7648kB pagetables:2164kB bounce:0kB free_pcp:576kB local_pcp:328kB free_cma:0kB