x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x3, 0x800}, 0x1896, 0x4, 0x6, 0x9, 0x7fff, 0xa8bc0000, 0xfdce}, r1, 0x10, 0xffffffffffffffff, 0xa) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000000c0)) mmap(&(0x7f0000030000/0x1000)=nil, 0x1000, 0x0, 0x32, r0, 0x0) [ 666.935388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.954358] batman_adv: batadv0: Removing interface: batadv_slave_1 18:28:24 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private2, 0x0, 0x0, 0x0, 0xa}, &(0x7f00000000c0)=0x20) [ 666.983415] device bridge_slave_1 left promiscuous mode [ 667.003717] oom_reaper: reaped process 22907 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 667.010753] bridge0: port 2(bridge_slave_1) entered disabled state 18:28:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000002a00)={&(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0}, 0x20000000) [ 667.078052] device bridge_slave_0 left promiscuous mode [ 667.117101] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.176658] device veth1_macvtap left promiscuous mode 18:28:24 executing program 0: syz_emit_ethernet(0xc0, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "aa4bd0", 0x8a, 0x0, 0x0, @remote, @local, {[@routing={0x0, 0x10, 0x0, 0x0, 0x0, [@private2, @local, @dev, @rand_addr=' \x01\x00', @local, @mcast1, @private2, @private1]}], "3b81"}}}}}, 0x0) [ 667.203339] device veth0_macvtap left promiscuous mode [ 667.234418] device veth1_vlan left promiscuous mode [ 667.260981] device veth0_vlan left promiscuous mode 18:28:24 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x1600bd5b, &(0x7f0000000000), 0x4) 18:28:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc) 18:28:24 executing program 0: r0 = openat$ptmx(0xffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, "a01824e9f4ac6ad6b2225f8d6c9eeb68dd88ee"}) [ 667.824654] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 667.848188] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 667.858846] CPU: 0 PID: 22188 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 667.866738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 667.876080] Call Trace: [ 667.878661] dump_stack+0x1b2/0x283 [ 667.882278] dump_header+0x178/0x82f [ 667.885974] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 667.891057] ? ___ratelimit+0x2cd/0x522 [ 667.895010] oom_kill_process.cold+0x10/0xb18 [ 667.899497] out_of_memory+0xe3e/0x1190 [ 667.903455] ? oom_killer_disable+0x1c0/0x1c0 [ 667.907927] ? mutex_trylock+0x152/0x1a0 [ 667.912179] __alloc_pages_nodemask+0x23e1/0x2720 [ 667.917023] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 667.921902] alloc_pages_current+0x155/0x260 [ 667.926290] filemap_fault+0xea3/0x1980 [ 667.930249] ext4_filemap_fault+0x84/0xb0 [ 667.934496] __do_fault+0xfa/0x380 [ 667.938022] __handle_mm_fault+0x2497/0x4620 [ 667.942412] ? vm_insert_page+0x7c0/0x7c0 [ 667.946549] ? HARDIRQ_verbose+0x10/0x10 [ 667.950594] ? HARDIRQ_verbose+0x10/0x10 [ 667.954640] handle_mm_fault+0x391/0x860 [ 667.958684] __do_page_fault+0x549/0xad0 [ 667.962726] ? spurious_fault+0x640/0x640 [ 667.966852] ? do_page_fault+0x60/0x4f2 [ 667.970822] ? page_fault+0x2f/0x50 [ 667.974427] page_fault+0x45/0x50 [ 667.977857] RIP: 000c:0x32 [ 667.980679] RSP: 0bb8:00000000000a2dee EFLAGS: 0000007c [ 667.980770] device hsr_slave_1 left promiscuous mode [ 667.999988] Mem-Info: [ 668.002471] active_anon:151195 inactive_anon:1193191 isolated_anon:0 [ 668.002471] active_file:12 inactive_file:92 isolated_file:0 [ 668.002471] unevictable:67933 dirty:0 writeback:0 unstable:0 [ 668.002471] slab_reclaimable:14443 slab_unreclaimable:115529 [ 668.002471] mapped:56903 shmem:11059 pagetables:7906 bounce:0 [ 668.002471] free:25302 free_pcp:31 free_cma:0 [ 668.038373] Node 0 active_anon:596720kB inactive_anon:1225412kB active_file:76kB inactive_file:88kB unevictable:193204kB isolated(anon):0kB isolated(file):0kB mapped:50528kB dirty:0kB writeback:0kB shmem:43156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 622592kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 668.069923] Node 1 active_anon:8060kB inactive_anon:3547352kB active_file:12kB inactive_file:0kB unevictable:79748kB isolated(anon):0kB isolated(file):0kB mapped:178208kB dirty:0kB writeback:0kB shmem:1080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 668.118691] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:644kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 668.153790] device hsr_slave_0 left promiscuous mode [ 668.169383] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 668.174694] Node 0 DMA32 free:35720kB min:36200kB low:45248kB high:54296kB active_anon:596720kB inactive_anon:1224768kB active_file:0kB inactive_file:60kB unevictable:194480kB writepending:0kB present:3129332kB managed:2788160kB mlocked:194480kB kernel_stack:9024kB pagetables:12120kB bounce:0kB free_pcp:152kB local_pcp:0kB free_cma:0kB [ 668.210565] lowmem_reserve[]: 0 0 0 0 0 [ 668.214731] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 668.223440] team0 (unregistering): Port device team_slave_1 removed [ 668.245005] lowmem_reserve[]: 0 0 0 0 0 [ 668.250963] Node 1 Normal free:53472kB min:53696kB low:67120kB high:80544kB active_anon:8060kB inactive_anon:3547352kB active_file:0kB inactive_file:44kB unevictable:79752kB writepending:0kB present:4194304kB managed:4128256kB mlocked:79752kB kernel_stack:4320kB pagetables:19500kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 668.281093] team0 (unregistering): Port device team_slave_0 removed [ 668.285248] lowmem_reserve[]: 0 0 0 0 0 [ 668.291781] Node 0 DMA: 36*4kB (M) 2*8kB (M) 1*16kB (M) 2*32kB (UM) 9*64kB (UM) 4*128kB (UM) 6*256kB (UM) 2*512kB (UM) 3*1024kB (UM) 2*2048kB (M) 0*4096kB = 11056kB [ 668.312217] Node 0 DMA32: 48*4kB (UMH) 50*8kB (UMH) 636*16kB (UH) 787*32kB (UH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35952kB [ 668.325971] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 668.338827] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 668.341488] Node 1 Normal: 428*4kB (UE) 260*8kB (UME) 169*16kB (UME) 98*32kB (UME) 95*64kB (UE) 57*128kB (UM) 15*256kB (UE) 30*512kB (U) 1*1024kB (M) 3*2048kB (UM) 1*4096kB (U) = 53472kB [ 668.368441] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 668.377472] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 668.391096] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 668.403022] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 668.414470] 24680 total pagecache pages [ 668.418657] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 668.418738] 0 pages in swap cache [ 668.434480] Swap cache stats: add 0, delete 0, find 0/0 [ 668.440015] Free swap = 0kB [ 668.443137] Total swap = 0kB [ 668.446277] 2097051 pages RAM [ 668.454730] 0 pages HighMem/MovableOnly [ 668.458812] 363840 pages reserved [ 668.467309] 0 pages cma reserved [ 668.475944] Out of memory (oom_kill_allocating_task): Kill process 22188 (syz-executor.4) score 0 or sacrifice child [ 668.497019] Killed process 22955 (syz-executor.4) total-vm:93480kB, anon-rss:36832kB, file-rss:34496kB, shmem-rss:0kB [ 668.656168] bond0 (unregistering): Released all slaves [ 668.672099] oom_reaper: reaped process 22955 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 668.985192] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 669.010814] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 669.015746] CPU: 0 PID: 7975 Comm: syz-fuzzer Not tainted 4.14.215-syzkaller #0 [ 669.023190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 669.032529] Call Trace: [ 669.035126] dump_stack+0x1b2/0x283 [ 669.038752] dump_header+0x178/0x82f [ 669.042476] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 669.047578] ? ___ratelimit+0x2cd/0x522 [ 669.051550] oom_kill_process.cold+0x10/0xb18 [ 669.056054] out_of_memory+0xe3e/0x1190 [ 669.060030] ? oom_killer_disable+0x1c0/0x1c0 [ 669.064516] ? mutex_trylock+0x152/0x1a0 [ 669.068572] __alloc_pages_nodemask+0x23e1/0x2720 [ 669.073424] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 669.078284] alloc_pages_current+0x155/0x260 [ 669.082686] filemap_fault+0xea3/0x1980 [ 669.086665] ext4_filemap_fault+0x84/0xb0 [ 669.091069] __do_fault+0xfa/0x380 [ 669.094602] __handle_mm_fault+0x2497/0x4620 [ 669.099003] ? vm_insert_page+0x7c0/0x7c0 [ 669.103145] ? HARDIRQ_verbose+0x10/0x10 [ 669.107199] ? HARDIRQ_verbose+0x10/0x10 [ 669.111294] handle_mm_fault+0x391/0x860 [ 669.115352] __do_page_fault+0x549/0xad0 [ 669.119419] ? spurious_fault+0x640/0x640 [ 669.123559] ? do_page_fault+0x60/0x4f2 [ 669.127529] ? page_fault+0x2f/0x50 [ 669.131145] page_fault+0x45/0x50 [ 669.134587] RIP: 1ac0ec0:0xb355a6 [ 669.138025] RSP: 0007:00007fffe80854c0 EFLAGS: 000000fa [ 669.142112] Mem-Info: [ 669.150157] active_anon:151220 inactive_anon:1187884 isolated_anon:0 [ 669.150157] active_file:12 inactive_file:45 isolated_file:0 [ 669.150157] unevictable:73584 dirty:0 writeback:0 unstable:0 [ 669.150157] slab_reclaimable:14443 slab_unreclaimable:115088 [ 669.150157] mapped:59722 shmem:11059 pagetables:7908 bounce:0 [ 669.150157] free:25321 free_pcp:55 free_cma:0 [ 669.191397] Node 0 active_anon:596688kB inactive_anon:1229932kB active_file:20kB inactive_file:40kB unevictable:193220kB isolated(anon):0kB isolated(file):0kB mapped:53328kB dirty:0kB writeback:0kB shmem:43156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 622592kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 669.251506] Node 1 active_anon:8192kB inactive_anon:3522104kB active_file:28kB inactive_file:0kB unevictable:101116kB isolated(anon):0kB isolated(file):0kB mapped:185560kB dirty:0kB writeback:0kB shmem:1080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 669.434963] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:644kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 669.605162] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 669.633388] Node 0 DMA32 free:36012kB min:36200kB low:45248kB high:54296kB active_anon:596688kB inactive_anon:1229188kB active_file:120kB inactive_file:0kB unevictable:192820kB writepending:0kB present:3129332kB managed:2788160kB mlocked:192820kB kernel_stack:8992kB pagetables:12232kB bounce:0kB free_pcp:264kB local_pcp:0kB free_cma:0kB [ 669.724619] lowmem_reserve[]: 0 0 0 0 0 [ 669.728772] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 669.773221] lowmem_reserve[]: 0 0 0 0 0 [ 669.777235] Node 1 Normal free:53652kB min:53696kB low:67120kB high:80544kB active_anon:8192kB inactive_anon:3522104kB active_file:12kB inactive_file:100kB unevictable:101116kB writepending:0kB present:4194304kB managed:4128256kB mlocked:101116kB kernel_stack:4352kB pagetables:19396kB bounce:0kB free_pcp:104kB local_pcp:40kB free_cma:0kB [ 669.943580] lowmem_reserve[]: 0 0 0 0 0 [ 669.947611] Node 0 DMA: 36*4kB (M) 2*8kB (M) 1*16kB (M) 2*32kB (UM) 9*64kB (UM) 4*128kB (UM) 6*256kB (UM) 2*512kB (UM) 3*1024kB (UM) 2*2048kB (M) 0*4096kB = 11056kB [ 670.006540] Node 0 DMA32: 174*4kB (UM) 112*8kB (UM) 689*16kB (UM) 795*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38056kB [ 670.021063] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 670.032719] Node 1 Normal: 472*4kB (UME) 60*8kB (UME) 324*16kB (UME) 102*32kB (UME) 144*64kB (UME) 57*128kB (UM) 15*256kB (UE) 30*512kB (U) 1*1024kB (M) 3*2048kB (UM) 1*4096kB (U) = 57792kB [ 670.051232] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 670.061177] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 670.079136] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 670.088126] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 670.097781] 26581 total pagecache pages [ 670.135017] 0 pages in swap cache [ 670.169465] Swap cache stats: add 0, delete 0, find 0/0 [ 670.174937] Free swap = 0kB [ 670.177947] Total swap = 0kB [ 670.222560] 2097051 pages RAM [ 670.225693] 0 pages HighMem/MovableOnly [ 670.252417] 363840 pages reserved [ 670.255888] 0 pages cma reserved [ 670.282763] Out of memory (oom_kill_allocating_task): Kill process 7975 (syz-fuzzer) score 0 or sacrifice child [ 670.319106] Killed process 22187 (syz-executor.4) total-vm:85024kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 670.382469] oom_reaper: reaped process 22187 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 671.661760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.668477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.676718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.684141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.694062] device bridge_slave_1 left promiscuous mode [ 671.700251] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.707321] device bridge_slave_0 left promiscuous mode [ 671.713395] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.723339] device veth1_macvtap left promiscuous mode [ 671.728633] device veth0_macvtap left promiscuous mode [ 671.734579] device veth1_vlan left promiscuous mode [ 671.740044] device veth0_vlan left promiscuous mode [ 671.811305] device hsr_slave_1 left promiscuous mode [ 671.818442] device hsr_slave_0 left promiscuous mode [ 671.833099] team0 (unregistering): Port device team_slave_1 removed [ 671.844326] team0 (unregistering): Port device team_slave_0 removed [ 671.855360] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 671.865535] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 671.890844] bond0 (unregistering): Released all slaves [ 673.470729] IPVS: ftp: loaded support on port[0] = 21 [ 673.574760] chnl_net:caif_netlink_parms(): no params data found [ 673.664280] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.670856] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.677739] device bridge_slave_0 entered promiscuous mode [ 673.686965] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.694151] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.701454] device bridge_slave_1 entered promiscuous mode [ 673.720666] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 673.729730] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 673.748351] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 673.755625] team0: Port device team_slave_0 added [ 673.761669] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 673.768872] team0: Port device team_slave_1 added [ 673.785885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.792277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.817587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.828840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.835076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.860307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.871395] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 673.878680] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 673.901175] device hsr_slave_0 entered promiscuous mode [ 673.906790] device hsr_slave_1 entered promiscuous mode [ 673.912995] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 673.920341] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 673.993581] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.999963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.006533] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.012936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.045581] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 674.052063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.061640] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 674.070465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 674.077526] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.085118] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.095634] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 674.101997] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.110806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 674.118587] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.124992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.140472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 674.148038] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.154453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.162432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 674.170298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 674.185387] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 674.195379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 674.206644] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 674.214083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 674.221857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 674.229952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 674.237901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 674.252769] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 674.261042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 674.267750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 674.278565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.335638] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 674.346932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 674.376461] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 674.384092] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 674.390927] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 674.400630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 674.408089] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 674.416303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 674.425491] device veth0_vlan entered promiscuous mode [ 674.434948] device veth1_vlan entered promiscuous mode [ 674.441039] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 674.450106] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 674.463080] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 674.472417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 674.480110] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 674.487359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 674.496945] device veth0_macvtap entered promiscuous mode [ 674.503457] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 674.513173] device veth1_macvtap entered promiscuous mode [ 674.523032] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 674.532343] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 674.543449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 674.553458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.563027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 674.572773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.581945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 674.591831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.601524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 674.611308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.621714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.628581] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 674.636264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 674.644557] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 674.654733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 674.664750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.674029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 674.684784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.693954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 674.703720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.712895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 674.722839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.733093] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 674.740169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.747377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 674.755639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 675.529425] Bluetooth: hci1 command 0x0409 tx timeout [ 677.598574] Bluetooth: hci1 command 0x041b tx timeout 18:28:35 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:28:35 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7a203a2cff784e4107038f7de913a8cc557e51a9531e05a2b54d1d017590d0dee49e03fad82b5a3780a8", 0xce}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:28:35 executing program 3: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) mlockall(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000580)=""/245) shmat(r0, &(0x7f0000284000/0x1000)=nil, 0x1000) 18:28:35 executing program 5: mremap(&(0x7f000040a000/0x12000)=nil, 0x12000, 0x2000, 0x7, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f00004ab000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:28:35 executing program 1: mlockall(0x3) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x6000) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x3, 0x0, 0x4) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:28:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0xffe}, 0x14) 18:28:35 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x33) sendmmsg$sock(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x2400c800) 18:28:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000180)={0x4c, 0x12, 0x1}, 0x4c}}, 0x0) 18:28:35 executing program 0: r0 = openat$ptmx(0xffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "c858f6dd555839757f70ec83c812e395a8fca7"}) [ 678.113018] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 18:28:35 executing program 0: r0 = openat$ptmx(0xffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "c858f6dd555839757f70ec83c812e395a8fca7"}) 18:28:35 executing program 0: r0 = openat$ptmx(0xffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "c858f6dd555839757f70ec83c812e395a8fca7"}) 18:28:35 executing program 0: r0 = openat$ptmx(0xffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "c858f6dd555839757f70ec83c812e395a8fca7"}) [ 679.678610] Bluetooth: hci1 command 0x040f tx timeout 18:28:38 executing program 1: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup3(r0, r0, 0x80000) [ 681.592679] syz-executor.1 invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 681.604975] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 681.618546] CPU: 1 PID: 24934 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0 [ 681.626534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.635884] Call Trace: [ 681.638480] dump_stack+0x1b2/0x283 [ 681.642112] dump_header+0x178/0x82f [ 681.645828] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 681.650931] ? ___ratelimit+0x2cd/0x522 [ 681.654909] oom_kill_process.cold+0x10/0xb18 [ 681.659413] out_of_memory+0xe3e/0x1190 [ 681.663394] ? oom_killer_disable+0x1c0/0x1c0 [ 681.667885] ? mutex_trylock+0x152/0x1a0 [ 681.671946] __alloc_pages_nodemask+0x23e1/0x2720 [ 681.676791] ? check_preemption_disabled+0x35/0x240 [ 681.681814] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 681.686649] ? perf_swevent_event+0x460/0x460 [ 681.691140] ? page_evictable+0x11e/0x1f0 [ 681.695302] alloc_pages_vma+0xd2/0x6d0 [ 681.699280] wp_page_copy+0x1f5/0x25c0 [ 681.703174] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 681.707664] ? __lock_acquire+0x5fc/0x3f20 [ 681.711900] do_wp_page+0x245/0x1db0 [ 681.715612] ? __handle_mm_fault+0x129c/0x4620 [ 681.720193] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 681.724862] __handle_mm_fault+0x234f/0x4620 [ 681.729274] ? vm_insert_page+0x7c0/0x7c0 [ 681.733419] ? HARDIRQ_verbose+0x10/0x10 [ 681.737484] ? do_raw_spin_unlock+0x164/0x220 [ 681.741990] handle_mm_fault+0x391/0x860 [ 681.746048] __get_user_pages+0x445/0x11d0 [ 681.750289] ? follow_page_mask+0x18a0/0x18a0 [ 681.754787] ? lock_acquire+0x170/0x3f0 [ 681.758775] populate_vma_page_range+0x17b/0x210 [ 681.763535] __mm_populate+0x195/0x2c0 [ 681.767423] ? populate_vma_page_range+0x210/0x210 [ 681.772466] ? security_capable+0x88/0xb0 [ 681.776616] SyS_mlockall+0x3ff/0x520 [ 681.780412] ? SyS_munlock+0xf0/0xf0 [ 681.784124] do_syscall_64+0x1d5/0x640 [ 681.788016] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 681.793199] RIP: 0033:0x45e219 [ 681.796380] RSP: 002b:00007fe7f7a92c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 681.804086] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045e219 [ 681.811350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 681.818614] RBP: 000000000119bfb0 R08: 0000000000000000 R09: 0000000000000000 [ 681.825880] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 681.833146] R13: 00007ffdc767644f R14: 00007fe7f7a939c0 R15: 000000000119bf8c [ 681.842818] Bluetooth: hci1 command 0x0419 tx timeout [ 681.858562] Mem-Info: [ 681.861001] active_anon:146977 inactive_anon:1208415 isolated_anon:0 [ 681.861001] active_file:26 inactive_file:32 isolated_file:0 [ 681.861001] unevictable:58689 dirty:0 writeback:0 unstable:0 [ 681.861001] slab_reclaimable:14481 slab_unreclaimable:113387 [ 681.861001] mapped:52068 shmem:11064 pagetables:7801 bounce:0 [ 681.861001] free:25162 free_pcp:30 free_cma:0 [ 681.928450] Node 0 active_anon:585568kB inactive_anon:1222976kB active_file:40kB inactive_file:52kB unevictable:199524kB isolated(anon):0kB isolated(file):0kB mapped:67168kB dirty:0kB writeback:0kB shmem:43180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 628736kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 681.957720] Node 1 active_anon:2340kB inactive_anon:3610684kB active_file:64kB inactive_file:76kB unevictable:35232kB isolated(anon):0kB isolated(file):0kB mapped:141104kB dirty:0kB writeback:0kB shmem:1076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 682.005065] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:644kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 682.039934] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 682.045038] Node 0 DMA32 free:36116kB min:36200kB low:45248kB high:54296kB active_anon:585568kB inactive_anon:1222332kB active_file:44kB inactive_file:44kB unevictable:199524kB writepending:0kB present:3129332kB managed:2788160kB mlocked:199524kB kernel_stack:8992kB pagetables:12000kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 682.080559] lowmem_reserve[]: 0 0 0 0 0 [ 682.084601] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 682.118216] lowmem_reserve[]: 0 0 0 0 0 [ 682.122254] Node 1 Normal free:53592kB min:53696kB low:67120kB high:80544kB active_anon:2340kB inactive_anon:3610684kB active_file:24kB inactive_file:12kB unevictable:35232kB writepending:0kB present:4194304kB managed:4128256kB mlocked:35232kB kernel_stack:4096kB pagetables:19204kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 682.186012] lowmem_reserve[]: 0 0 0 0 0 [ 682.190294] Node 0 DMA: 36*4kB (M) 2*8kB (M) 1*16kB (M) 2*32kB (UM) 9*64kB (UM) 4*128kB (UM) 6*256kB (UM) 2*512kB (UM) 3*1024kB (UM) 2*2048kB (M) 0*4096kB = 11056kB [ 682.234357] Node 0 DMA32: 1153*4kB (UME) 938*8kB (UME) 486*16kB (UME) 444*32kB (UM) 8*64kB (UM) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (U) 0*2048kB 0*4096kB = 36148kB [ 682.281623] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 682.322732] Node 1 Normal: 24*4kB (ME) 33*8kB (UME) 21*16kB (UME) 9*32kB (UME) 54*64kB (UE) 58*128kB (UM) 17*256kB (UE) 57*512kB (UME) 2*1024kB (UM) 3*2048kB (UM) 0*4096kB = 53592kB [ 682.391336] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 682.427068] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 682.457634] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 682.484540] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 682.508180] 16544 total pagecache pages [ 682.512179] 0 pages in swap cache [ 682.515628] Swap cache stats: add 0, delete 0, find 0/0 [ 682.535206] Free swap = 0kB [ 682.538408] Total swap = 0kB [ 682.541437] 2097051 pages RAM [ 682.544545] 0 pages HighMem/MovableOnly [ 682.561670] 363840 pages reserved [ 682.565141] 0 pages cma reserved [ 682.569135] Out of memory (oom_kill_allocating_task): Kill process 24934 (syz-executor.1) score 0 or sacrifice child [ 682.579905] Killed process 24937 (syz-executor.1) total-vm:93480kB, anon-rss:36832kB, file-rss:34816kB, shmem-rss:0kB [ 682.731642] oom_reaper: reaped process 24937 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 683.862193] IPVS: ftp: loaded support on port[0] = 21 [ 684.029622] chnl_net:caif_netlink_parms(): no params data found [ 684.116899] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.124056] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.132375] device bridge_slave_0 entered promiscuous mode [ 684.140864] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.147336] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.154586] device bridge_slave_1 entered promiscuous mode [ 684.175418] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 684.184295] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 684.206048] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 684.213230] team0: Port device team_slave_0 added [ 684.218978] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 684.226094] team0: Port device team_slave_1 added [ 684.245185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.251636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.276877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.288543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.294793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.320281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.331427] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 684.339031] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 684.361621] device hsr_slave_0 entered promiscuous mode [ 684.367308] device hsr_slave_1 entered promiscuous mode [ 684.373563] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 684.380861] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 684.457156] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.463536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.470208] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.476567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.511305] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 684.517372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.526194] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 684.535925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 684.543183] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.550324] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.561813] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 684.567879] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.577276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 684.585563] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.591953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.602055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 684.609993] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.616320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.632608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 684.640700] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 684.653356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 684.665115] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 684.675750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 684.686367] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 684.693218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 684.701043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 684.709120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 684.724115] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 684.731527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 684.739487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 684.749853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.806880] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 684.817655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 684.849710] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 684.856824] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 684.864341] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 684.874849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 684.882822] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 684.890559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 684.900134] device veth0_vlan entered promiscuous mode [ 684.909585] device veth1_vlan entered promiscuous mode [ 684.915312] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 684.924689] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 684.935979] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 684.946647] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 684.954138] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 684.962868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 684.972797] device veth0_macvtap entered promiscuous mode [ 684.979529] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 684.987946] device veth1_macvtap entered promiscuous mode [ 684.997114] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 685.006847] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 685.015982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 685.026118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.035497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 685.045990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.055241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 685.065166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.074345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 685.084118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.093303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 685.103154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.113904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.121226] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 685.133286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 685.141774] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 685.154029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 685.164001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.173200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 685.183219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.192437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 685.205963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.215128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 685.225460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.234627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 685.244486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.254909] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 685.261916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.269149] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 685.276983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:28:42 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) dup(r0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x9, 0x78, 0x24, 0x7, 0x0, 0x8000, 0xd54c0, 0xb, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0xfbfa}, 0x800, 0x1ff, 0x40, 0x7, 0x80000001, 0x4, 0x1000}, 0xffffffffffffffff, 0x4, r2, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000921000/0x1000)=nil) 18:28:42 executing program 1: mlockall(0x3) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:28:42 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7a203a2cff784e4107038f7de913a8cc557e51a9531e05a2b54d1d017590d0dee49e03fad82b5a3780a8", 0xce}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:28:42 executing program 3: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, 0x0, 0x0) sendmsg$AUDIT_GET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdc00, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x894}, 0x4000044) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 18:28:42 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:28:42 executing program 0: r0 = openat$ptmx(0xffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "c858f6dd555839757f70ec83c812e395a8fca7"}) 18:28:42 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:28:42 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:28:42 executing program 0: r0 = openat$ptmx(0xffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "c858f6dd555839757f70ec83c812e395a8fca7"}) 18:28:42 executing program 0: r0 = openat$ptmx(0xffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "c858f6dd555839757f70ec83c812e395a8fca7"}) 18:28:42 executing program 0: ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "c858f6dd555839757f70ec83c812e395a8fca7"}) [ 685.792744] syz-executor.1 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 685.813493] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 685.818862] CPU: 1 PID: 25184 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0 [ 685.826743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 685.836094] Call Trace: [ 685.838686] dump_stack+0x1b2/0x283 [ 685.842329] dump_header+0x178/0x82f [ 685.846050] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 685.851156] ? ___ratelimit+0x2cd/0x522 [ 685.855136] oom_kill_process.cold+0x10/0xb18 [ 685.859643] out_of_memory+0xe3e/0x1190 [ 685.863621] ? oom_killer_disable+0x1c0/0x1c0 [ 685.868110] ? mutex_trylock+0x152/0x1a0 [ 685.872171] __alloc_pages_nodemask+0x23e1/0x2720 [ 685.877024] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 685.881858] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 685.886696] ? __lock_acquire+0x5fc/0x3f20 [ 685.890938] alloc_pages_vma+0xd2/0x6d0 [ 685.894905] __handle_mm_fault+0x25fa/0x4620 [ 685.899307] ? vm_insert_page+0x7c0/0x7c0 [ 685.903444] ? HARDIRQ_verbose+0x10/0x10 [ 685.907550] ? do_raw_spin_unlock+0x164/0x220 [ 685.912036] handle_mm_fault+0x391/0x860 [ 685.916124] __get_user_pages+0x445/0x11d0 [ 685.918305] Bluetooth: hci3 command 0x0409 tx timeout [ 685.920350] ? follow_page_mask+0x18a0/0x18a0 [ 685.930026] ? lock_acquire+0x170/0x3f0 [ 685.933996] populate_vma_page_range+0x17b/0x210 [ 685.938747] __mm_populate+0x195/0x2c0 [ 685.942623] ? populate_vma_page_range+0x210/0x210 [ 685.947530] ? security_capable+0x88/0xb0 [ 685.951672] SyS_mlockall+0x3ff/0x520 [ 685.955464] ? SyS_munlock+0xf0/0xf0 [ 685.959168] do_syscall_64+0x1d5/0x640 [ 685.963057] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 685.968237] RIP: 0033:0x45e219 [ 685.971426] RSP: 002b:00007fe7f7a92c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 685.979135] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045e219 [ 685.986398] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 685.993785] RBP: 000000000119bfb0 R08: 0000000000000000 R09: 0000000000000000 [ 686.001051] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 686.008324] R13: 00007ffdc767644f R14: 00007fe7f7a939c0 R15: 000000000119bf8c [ 686.021834] Mem-Info: [ 686.024344] active_anon:147310 inactive_anon:1201487 isolated_anon:0 [ 686.024344] active_file:13 inactive_file:12 isolated_file:0 [ 686.024344] unevictable:57279 dirty:0 writeback:0 unstable:0 [ 686.024344] slab_reclaimable:14494 slab_unreclaimable:113002 [ 686.024344] mapped:55923 shmem:11069 pagetables:8043 bounce:0 [ 686.024344] free:25156 free_pcp:50 free_cma:0 [ 686.058280] Node 0 active_anon:586540kB inactive_anon:1215324kB active_file:16kB inactive_file:16kB unevictable:198032kB isolated(anon):0kB isolated(file):0kB mapped:77448kB dirty:0kB writeback:0kB shmem:43200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 628736kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 686.118129] Node 1 active_anon:2700kB inactive_anon:3590624kB active_file:36kB inactive_file:32kB unevictable:31084kB isolated(anon):0kB isolated(file):0kB mapped:146244kB dirty:0kB writeback:0kB shmem:1076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 686.152014] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:644kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 686.186079] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 686.191298] Node 0 DMA32 free:35596kB min:36200kB low:45248kB high:54296kB active_anon:586540kB inactive_anon:1214680kB active_file:16kB inactive_file:16kB unevictable:198032kB writepending:0kB present:3129332kB managed:2788160kB mlocked:198032kB kernel_stack:9152kB pagetables:12376kB bounce:0kB free_pcp:208kB local_pcp:104kB free_cma:0kB [ 686.232747] lowmem_reserve[]: 0 0 0 0 0 [ 686.236855] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 686.270467] lowmem_reserve[]: 0 0 0 0 0 [ 686.274575] Node 1 Normal free:53400kB min:53696kB low:67120kB high:80544kB active_anon:2700kB inactive_anon:3590624kB active_file:36kB inactive_file:32kB unevictable:31084kB writepending:0kB present:4194304kB managed:4128256kB mlocked:31084kB kernel_stack:4384kB pagetables:19792kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 686.314510] lowmem_reserve[]: 0 0 0 0 0 [ 686.324299] Node 0 DMA: 36*4kB (M) 2*8kB (M) 1*16kB (M) 2*32kB (UM) 9*64kB (UM) 4*128kB (UM) 6*256kB (UM) 2*512kB (UM) 3*1024kB (UM) 2*2048kB (M) 0*4096kB = 11056kB [ 686.352346] Node 0 DMA32: 366*4kB (ME) 372*8kB (UME) 532*16kB (UME) 429*32kB (UMH) 43*64kB (M) 9*128kB (M) 5*256kB (UM) 1*512kB (M) 3*1024kB (M) 0*2048kB 0*4096kB = 35448kB [ 686.381150] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 686.397337] Node 1 Normal: 34*4kB (UME) 36*8kB (UME) 11*16kB (UME) 612*32kB (ME) 39*64kB (UME) 2*128kB (M) 1*256kB (E) 57*512kB (UME) 1*1024kB (M) 0*2048kB 0*4096kB = 53400kB [ 686.424976] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 686.436592] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 686.456645] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 686.468478] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 686.477327] 14245 total pagecache pages [ 686.490188] 0 pages in swap cache [ 686.493788] Swap cache stats: add 0, delete 0, find 0/0 [ 686.507504] Free swap = 0kB [ 686.513454] Total swap = 0kB [ 686.516582] 2097051 pages RAM [ 686.527766] 0 pages HighMem/MovableOnly [ 686.534496] 363840 pages reserved [ 686.546016] 0 pages cma reserved [ 686.552188] Out of memory (oom_kill_allocating_task): Kill process 25184 (syz-executor.1) score 0 or sacrifice child [ 686.576274] Killed process 25183 (syz-executor.1) total-vm:93480kB, anon-rss:19860kB, file-rss:40232kB, shmem-rss:0kB [ 686.634318] oom_reaper: reaped process 25183 (syz-executor.1), now anon-rss:19952kB, file-rss:5420kB, shmem-rss:0kB [ 686.685391] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 686.742789] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 686.748401] CPU: 1 PID: 23506 Comm: syz-executor.0 Not tainted 4.14.215-syzkaller #0 [ 686.756455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 686.765945] Call Trace: [ 686.768726] dump_stack+0x1b2/0x283 [ 686.772369] dump_header+0x178/0x82f [ 686.776098] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 686.781298] ? ___ratelimit+0x2cd/0x522 [ 686.785437] oom_kill_process.cold+0x10/0xb18 [ 686.789949] out_of_memory+0xe3e/0x1190 [ 686.793939] ? oom_killer_disable+0x1c0/0x1c0 [ 686.798451] ? mutex_trylock+0x152/0x1a0 [ 686.802541] __alloc_pages_nodemask+0x23e1/0x2720 [ 686.807424] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 686.812463] alloc_pages_current+0x155/0x260 [ 686.816888] filemap_fault+0xea3/0x1980 [ 686.820881] ext4_filemap_fault+0x84/0xb0 [ 686.825172] __do_fault+0xfa/0x380 [ 686.828721] __handle_mm_fault+0x2497/0x4620 [ 686.833138] ? vm_insert_page+0x7c0/0x7c0 [ 686.837291] ? HARDIRQ_verbose+0x10/0x10 [ 686.841358] ? HARDIRQ_verbose+0x10/0x10 [ 686.845447] handle_mm_fault+0x391/0x860 [ 686.849525] __do_page_fault+0x549/0xad0 [ 686.853604] ? spurious_fault+0x640/0x640 [ 686.857763] ? do_page_fault+0x60/0x4f2 [ 686.861745] ? page_fault+0x2f/0x50 [ 686.865528] page_fault+0x45/0x50 [ 686.868986] RIP: 0000:0x32 [ 686.871830] RSP: 0bb8:00000000000a7721 EFLAGS: 000000ae [ 686.883926] Mem-Info: [ 686.895807] active_anon:147310 inactive_anon:1201516 isolated_anon:0 [ 686.895807] active_file:89 inactive_file:295 isolated_file:24 [ 686.895807] unevictable:51504 dirty:0 writeback:0 unstable:0 [ 686.895807] slab_reclaimable:14494 slab_unreclaimable:112865 [ 686.895807] mapped:55143 shmem:11069 pagetables:8043 bounce:0 [ 686.895807] free:30208 free_pcp:428 free_cma:0 [ 686.937536] Node 0 active_anon:586540kB inactive_anon:1215340kB active_file:32kB inactive_file:8kB unevictable:192032kB isolated(anon):0kB isolated(file):96kB mapped:75828kB dirty:0kB writeback:0kB shmem:43200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 628736kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 686.972417] Node 1 active_anon:2700kB inactive_anon:3590628kB active_file:312kB inactive_file:600kB unevictable:13924kB isolated(anon):0kB isolated(file):0kB mapped:144556kB dirty:0kB writeback:0kB shmem:1076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 687.006981] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:644kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 687.040439] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 687.045998] Node 0 DMA32 free:42168kB min:36200kB low:45248kB high:54296kB active_anon:586556kB inactive_anon:1214680kB active_file:40kB inactive_file:44kB unevictable:192020kB writepending:0kB present:3129332kB managed:2788160kB mlocked:192020kB kernel_stack:9056kB pagetables:12284kB bounce:0kB free_pcp:1292kB local_pcp:652kB free_cma:0kB [ 687.082681] lowmem_reserve[]: 0 0 0 0 0 [ 687.087310] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 687.137479] lowmem_reserve[]: 0 0 0 0 0 [ 687.156264] Node 1 Normal free:66628kB min:53696kB low:67120kB high:80544kB active_anon:2700kB inactive_anon:3590628kB active_file:132kB inactive_file:0kB unevictable:16444kB writepending:0kB present:4194304kB managed:4128256kB mlocked:16444kB kernel_stack:4352kB pagetables:19760kB bounce:0kB free_pcp:800kB local_pcp:120kB free_cma:0kB [ 687.275285] lowmem_reserve[]: 0 0 0 0 0 [ 687.301258] Node 0 DMA: 36*4kB (M) 2*8kB (M) 1*16kB (M) 2*32kB (UM) 9*64kB (UM) 4*128kB (UM) 6*256kB (UM) 2*512kB (UM) 3*1024kB (UM) 2*2048kB (M) 0*4096kB = 11056kB [ 687.334885] Node 0 DMA32: 405*4kB (UME) 293*8kB (UMEH) 708*16kB (UME) 434*32kB (UMH) 1*64kB (M) 6*128kB (M) 5*256kB (UM) 1*512kB (M) 3*1024kB (M) 1*2048kB (M) 0*4096kB = 36924kB [ 687.357377] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 687.397891] Node 1 Normal: 90*4kB (UME) 51*8kB (UME) 17*16kB (UME) 665*32kB (UME) 40*64kB (ME) 2*128kB (M) 2*256kB (UE) 53*512kB (UME) 1*1024kB (M) 0*2048kB 0*4096kB = 53808kB [ 687.461516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 687.471216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 687.480218] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 687.489518] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 687.498550] 16136 total pagecache pages [ 687.502988] 0 pages in swap cache [ 687.506541] Swap cache stats: add 0, delete 0, find 0/0 [ 687.512983] Free swap = 0kB [ 687.516115] Total swap = 0kB [ 687.527445] 2097051 pages RAM [ 687.530813] 0 pages HighMem/MovableOnly [ 687.534920] 363840 pages reserved [ 687.543664] 0 pages cma reserved [ 687.555989] Out of memory (oom_kill_allocating_task): Kill process 23506 (syz-executor.0) score 0 or sacrifice child [ 687.571095] Killed process 23775 (syz-executor.0) total-vm:85280kB, anon-rss:10792kB, file-rss:34496kB, shmem-rss:0kB [ 687.645097] oom_reaper: reaped process 23775 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 687.998054] Bluetooth: hci3 command 0x041b tx timeout [ 688.096182] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 688.123203] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 688.130407] CPU: 1 PID: 7979 Comm: syz-fuzzer Not tainted 4.14.215-syzkaller #0 [ 688.137870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 688.147492] Call Trace: [ 688.150221] dump_stack+0x1b2/0x283 [ 688.153848] dump_header+0x178/0x82f [ 688.157626] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 688.163035] ? ___ratelimit+0x2cd/0x522 [ 688.167008] oom_kill_process.cold+0x10/0xb18 [ 688.171575] out_of_memory+0xe3e/0x1190 [ 688.175547] ? oom_killer_disable+0x1c0/0x1c0 [ 688.180120] ? mutex_trylock+0x152/0x1a0 [ 688.184179] __alloc_pages_nodemask+0x23e1/0x2720 [ 688.189182] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 688.194030] alloc_pages_current+0x155/0x260 [ 688.198486] filemap_fault+0xea3/0x1980 [ 688.202458] ext4_filemap_fault+0x84/0xb0 [ 688.206601] __do_fault+0xfa/0x380 [ 688.210137] __handle_mm_fault+0x2497/0x4620 [ 688.214541] ? vm_insert_page+0x7c0/0x7c0 [ 688.218683] ? HARDIRQ_verbose+0x10/0x10 [ 688.222734] ? HARDIRQ_verbose+0x10/0x10 [ 688.226798] handle_mm_fault+0x391/0x860 [ 688.230851] __do_page_fault+0x549/0xad0 [ 688.234906] ? spurious_fault+0x640/0x640 [ 688.239048] ? do_page_fault+0x60/0x4f2 [ 688.243017] ? page_fault+0x2f/0x50 [ 688.246635] page_fault+0x45/0x50 [ 688.250077] RIP: e85d958: (null) [ 688.254213] RSP: 78602373:000000c000f0dbe8 EFLAGS: 00000003 [ 688.288333] Mem-Info: [ 688.296892] active_anon:147373 inactive_anon:1198838 isolated_anon:0 [ 688.296892] active_file:41 inactive_file:18 isolated_file:1 [ 688.296892] unevictable:62280 dirty:0 writeback:0 unstable:0 [ 688.296892] slab_reclaimable:14505 slab_unreclaimable:112494 [ 688.296892] mapped:59390 shmem:11069 pagetables:7987 bounce:0 [ 688.296892] free:25078 free_pcp:0 free_cma:0 [ 688.331345] Node 0 active_anon:586568kB inactive_anon:1207176kB active_file:68kB inactive_file:12kB unevictable:209676kB isolated(anon):0kB isolated(file):4kB mapped:83500kB dirty:0kB writeback:0kB shmem:43200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 626688kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 688.360202] Node 1 active_anon:2924kB inactive_anon:3588176kB active_file:52kB inactive_file:72kB unevictable:39492kB isolated(anon):0kB isolated(file):0kB mapped:154104kB dirty:0kB writeback:0kB shmem:1076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 688.389135] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:644kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 688.430700] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 688.436148] Node 0 DMA32 free:36320kB min:36200kB low:45248kB high:54296kB active_anon:586572kB inactive_anon:1206532kB active_file:200kB inactive_file:0kB unevictable:209712kB writepending:0kB present:3129332kB managed:2788160kB mlocked:209712kB kernel_stack:9088kB pagetables:12288kB bounce:0kB free_pcp:644kB local_pcp:172kB free_cma:0kB [ 688.489021] lowmem_reserve[]: 0 0 0 0 0 [ 688.493351] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 688.586834] lowmem_reserve[]: 0 0 0 0 0 [ 688.648681] Node 1 Normal free:58168kB min:53696kB low:67120kB high:80544kB active_anon:2824kB inactive_anon:3594564kB active_file:4548kB inactive_file:5308kB unevictable:17008kB writepending:0kB present:4194304kB managed:4128256kB mlocked:16676kB kernel_stack:4192kB pagetables:19660kB bounce:0kB free_pcp:1172kB local_pcp:656kB free_cma:0kB 18:28:45 executing program 0: ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "c858f6dd555839757f70ec83c812e395a8fca7"}) 18:28:45 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7a203a2cff784e4107038f7de913a8cc557e51a9531e05a2b54d1d017590d0dee49e03fad82b5a3780a8", 0xce}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:28:46 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:28:46 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0xb7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb}) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 688.749024] lowmem_reserve[]: 0 0 0 0 0 [ 688.753141] Node 0 DMA: 36*4kB (M) 2*8kB (M) 1*16kB (M) 2*32kB (UM) 9*64kB (UM) 4*128kB (UM) 6*256kB (UM) 2*512kB (UM) 3*1024kB (UM) 2*2048kB (M) 0*4096kB = 11056kB [ 688.773257] Node 0 DMA32: 462*4kB (UME) 473*8kB (UMEH) 1218*16kB (UME) 461*32kB (UMEH) 23*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 41344kB 18:28:46 executing program 0: ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "c858f6dd555839757f70ec83c812e395a8fca7"}) [ 688.852541] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 688.896645] Node 1 Normal: 1070*4kB (UME) 522*8kB (UME) 688*16kB (UME) 479*32kB (UME) 41*64kB (UME) 3*128kB (UM) 2*256kB (UE) 48*512kB (UME) 4*1024kB (UM) 4*2048kB (U) 1*4096kB (U) = 79272kB 18:28:46 executing program 0: r0 = openat$ptmx(0xffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "c858f6dd555839757f70ec83c812e395a8fca7"}) 18:28:46 executing program 3: mlockall(0x3) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(r0, &(0x7f0000bda000/0x4000)=nil, 0x6000) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 688.965099] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 688.997271] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 18:28:46 executing program 0: r0 = openat$ptmx(0xffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "c858f6dd555839757f70ec83c812e395a8fca7"}) [ 689.034306] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 18:28:46 executing program 0: r0 = openat$ptmx(0xffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "c858f6dd555839757f70ec83c812e395a8fca7"}) [ 689.075190] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 689.095726] 14748 total pagecache pages [ 689.104288] 0 pages in swap cache [ 689.119752] Swap cache stats: add 0, delete 0, find 0/0 [ 689.133117] Free swap = 0kB [ 689.139877] Total swap = 0kB [ 689.152934] 2097051 pages RAM [ 689.162843] 0 pages HighMem/MovableOnly [ 689.182945] 363840 pages reserved [ 689.204108] 0 pages cma reserved [ 689.221869] Out of memory (oom_kill_allocating_task): Kill process 7979 (syz-fuzzer) score 0 or sacrifice child [ 689.250873] Killed process 24642 (syz-executor.2) total-vm:85024kB, anon-rss:1732kB, file-rss:44kB, shmem-rss:0kB [ 689.301703] oom_reaper: reaped process 24642 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 689.626108] syz-executor.5 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 689.665177] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 689.672467] CPU: 0 PID: 25225 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 689.680452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 689.689904] Call Trace: [ 689.692502] dump_stack+0x1b2/0x283 [ 689.696142] dump_header+0x178/0x82f [ 689.699871] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 689.704982] ? ___ratelimit+0x2cd/0x522 [ 689.708963] oom_kill_process.cold+0x10/0xb18 [ 689.713774] out_of_memory+0xe3e/0x1190 [ 689.717911] ? oom_killer_disable+0x1c0/0x1c0 [ 689.722415] ? mutex_trylock+0x152/0x1a0 [ 689.726630] __alloc_pages_nodemask+0x23e1/0x2720 [ 689.731755] ? ____cache_alloc_node+0xf4/0x1d0 [ 689.736336] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 689.741173] ? do_raw_spin_unlock+0x164/0x220 [ 689.745660] ? _raw_spin_unlock+0x29/0x40 [ 689.750053] ? ____cache_alloc_node+0xf4/0x1d0 [ 689.754638] ? kmem_cache_alloc_node+0x38b/0x410 [ 689.759388] copy_process.part.0+0x265/0x71c0 [ 689.764021] ? prot_none_test+0x10/0x10 [ 689.768271] ? vma_set_page_prot+0x121/0x180 [ 689.773020] ? mprotect_fixup+0x4c0/0x8c0 [ 689.777595] ? __cleanup_sighand+0x40/0x40 [ 689.781972] _do_fork+0x184/0xc80 [ 689.785521] ? fork_idle+0x270/0x270 [ 689.789231] ? SyS_mmap_pgoff+0x25e/0x510 [ 689.793529] ? mprotect_fixup+0x8c0/0x8c0 [ 689.797676] ? find_mergeable_anon_vma+0x230/0x230 [ 689.802608] ? __do_page_fault+0x159/0xad0 [ 689.806836] ? do_mprotect_pkey+0x7e0/0x7e0 [ 689.811151] ? do_syscall_64+0x4c/0x640 [ 689.815115] ? sys_vfork+0x20/0x20 [ 689.818649] do_syscall_64+0x1d5/0x640 [ 689.822551] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 689.827852] RIP: 0033:0x460be9 [ 689.831031] RSP: 002b:00007ffdd833b238 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 689.838903] RAX: ffffffffffffffda RBX: 00007f9f6fd75700 RCX: 0000000000460be9 [ 689.846528] RDX: 00007f9f6fd759d0 RSI: 00007f9f6fd74db0 RDI: 00000000003d0f00 [ 689.853880] RBP: 00007ffdd833b450 R08: 00007f9f6fd75700 R09: 00007f9f6fd75700 [ 689.861564] R10: 00007f9f6fd759d0 R11: 0000000000000202 R12: 0000000000000000 [ 689.868987] R13: 00007ffdd833b2ef R14: 00007f9f6fd759c0 R15: 000000000119c0dc [ 689.880228] Mem-Info: [ 689.889517] active_anon:146975 inactive_anon:1206398 isolated_anon:0 [ 689.889517] active_file:78 inactive_file:49 isolated_file:25 [ 689.889517] unevictable:63325 dirty:12 writeback:1 unstable:0 [ 689.889517] slab_reclaimable:14491 slab_unreclaimable:113164 [ 689.889517] mapped:54192 shmem:11071 pagetables:7915 bounce:0 [ 689.889517] free:25115 free_pcp:263 free_cma:0 [ 689.925114] Node 0 active_anon:585032kB inactive_anon:1225920kB active_file:224kB inactive_file:104kB unevictable:226772kB isolated(anon):0kB isolated(file):100kB mapped:61276kB dirty:44kB writeback:0kB shmem:43212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 626688kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 689.954919] Node 1 active_anon:2868kB inactive_anon:3599672kB active_file:88kB inactive_file:92kB unevictable:26528kB isolated(anon):0kB isolated(file):0kB mapped:155492kB dirty:4kB writeback:4kB shmem:1072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 689.983046] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:644kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 690.013299] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 690.019822] Node 0 DMA32 free:36628kB min:36200kB low:45248kB high:54296kB active_anon:585032kB inactive_anon:1225276kB active_file:76kB inactive_file:200kB unevictable:226776kB writepending:28kB present:3129332kB managed:2788160kB mlocked:226776kB kernel_stack:9024kB pagetables:11980kB bounce:0kB free_pcp:180kB local_pcp:148kB free_cma:0kB [ 690.054057] lowmem_reserve[]: 0 0 0 0 0 [ 690.078209] Bluetooth: hci3 command 0x040f tx timeout [ 690.116816] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 690.219541] lowmem_reserve[]: 0 0 0 0 0 [ 690.256503] Node 1 Normal free:53640kB min:53696kB low:67120kB high:80544kB active_anon:2868kB inactive_anon:3599672kB active_file:92kB inactive_file:0kB unevictable:26528kB writepending:0kB present:4194304kB managed:4128256kB mlocked:26528kB kernel_stack:4320kB pagetables:19676kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 690.455323] lowmem_reserve[]: 0 0 0 0 0 [ 690.474052] Node 0 DMA: 36*4kB (M) 2*8kB (M) 1*16kB (M) 2*32kB (UM) 9*64kB (UM) 4*128kB (UM) 6*256kB (UM) 2*512kB (UM) 3*1024kB (UM) 2*2048kB (M) 0*4096kB = 11056kB [ 690.586520] Node 0 DMA32: 4*4kB (UM) 20*8kB (M) 881*16kB (UM) 678*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35968kB [ 690.673091] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 690.731049] Node 1 Normal: 76*4kB (UME) 45*8kB (UME) 19*16kB (UME) 474*32kB (UME) 42*64kB (UME) 2*128kB (M) 1*256kB (E) 49*512kB (UME) 1*1024kB (M) 2*2048kB (U) 1*4096kB (U) = 53640kB [ 690.852492] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 690.909956] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 690.957466] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 691.009491] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 691.075805] 21319 total pagecache pages [ 691.103871] 0 pages in swap cache [ 691.122932] Swap cache stats: add 0, delete 0, find 0/0 [ 691.162313] Free swap = 0kB [ 691.182936] Total swap = 0kB [ 691.205004] 2097051 pages RAM [ 691.222828] 0 pages HighMem/MovableOnly [ 691.234713] 363840 pages reserved [ 691.276943] 0 pages cma reserved [ 691.300688] Out of memory (oom_kill_allocating_task): Kill process 25225 (syz-executor.5) score 0 or sacrifice child [ 691.372629] Killed process 25241 (syz-executor.5) total-vm:81200kB, anon-rss:16132kB, file-rss:34816kB, shmem-rss:0kB [ 691.452963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 691.472850] oom_reaper: reaped process 25241 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 691.490854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 691.520503] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 691.536982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 691.547201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.557388] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 691.574759] CPU: 1 PID: 25227 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 691.582798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 691.592252] Call Trace: [ 691.594856] dump_stack+0x1b2/0x283 [ 691.598702] warn_alloc.cold+0x96/0x1cc [ 691.602692] ? zone_watermark_ok_safe+0x220/0x220 [ 691.607560] __alloc_pages_nodemask+0x2127/0x2720 [ 691.612424] ? lock_acquire+0x170/0x3f0 [ 691.616512] ? gfp_pfmemalloc_allowed+0x150/0x150 18:28:48 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7a203a2cff784e4107038f7de913a8cc557e51a9531e05a2b54d1d017590d0dee49e03fad82b5a3780a8", 0xce}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) tkill(r0, 0x3d) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 691.621379] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 691.626977] ? __mutex_unlock_slowpath+0x75/0x770 [ 691.631836] alloc_pages_current+0x155/0x260 [ 691.636260] ion_page_pool_alloc+0x118/0x1b0 [ 691.640683] ion_system_heap_allocate+0x133/0x8c0 [ 691.645656] ? ion_alloc+0x187/0x810 [ 691.649393] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 691.655015] ? ion_system_contig_heap_create+0x130/0x130 [ 691.660476] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 691.665630] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 691.670491] ion_alloc+0x204/0x810 [ 691.674051] ? ion_dma_buf_release+0x40/0x40 [ 691.678481] ? __might_fault+0x177/0x1b0 [ 691.682704] ion_ioctl+0xea/0x1ee [ 691.686167] ? ion_alloc.cold+0x3b/0x3b [ 691.690157] ? HARDIRQ_verbose+0x10/0x10 [ 691.694314] ? lock_downgrade+0x740/0x740 [ 691.698625] ? ion_alloc.cold+0x3b/0x3b [ 691.702702] do_vfs_ioctl+0x75a/0xff0 [ 691.706518] ? ioctl_preallocate+0x1a0/0x1a0 [ 691.710939] ? lock_downgrade+0x740/0x740 [ 691.715108] ? __fget+0x225/0x360 [ 691.718667] ? do_vfs_ioctl+0xff0/0xff0 [ 691.722783] ? security_file_ioctl+0x83/0xb0 [ 691.727302] SyS_ioctl+0x7f/0xb0 [ 691.730680] ? do_vfs_ioctl+0xff0/0xff0 [ 691.734671] do_syscall_64+0x1d5/0x640 [ 691.738582] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 691.743781] RIP: 0033:0x45e219 [ 691.746982] RSP: 002b:00007f9f6fdb6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 691.754702] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 691.762137] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 691.769504] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 691.776965] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 691.784248] R13: 00007ffdd833b2ef R14: 00007f9f6fdb79c0 R15: 000000000119bf8c [ 691.804836] device bridge_slave_1 left promiscuous mode [ 691.813991] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.836246] device bridge_slave_0 left promiscuous mode [ 691.842275] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.874584] Mem-Info: [ 691.874718] device veth1_macvtap left promiscuous mode [ 691.883292] active_anon:147075 inactive_anon:1202423 isolated_anon:0 [ 691.883292] active_file:399 inactive_file:408 isolated_file:32 [ 691.883292] unevictable:64661 dirty:0 writeback:0 unstable:0 [ 691.883292] slab_reclaimable:14491 slab_unreclaimable:113106 [ 691.883292] mapped:55334 shmem:11071 pagetables:7878 bounce:0 [ 691.883292] free:25595 free_pcp:268 free_cma:0 [ 691.909753] device veth0_macvtap left promiscuous mode [ 691.919792] Node 0 active_anon:585432kB inactive_anon:1214320kB active_file:648kB inactive_file:836kB unevictable:232016kB isolated(anon):0kB isolated(file):0kB mapped:64032kB dirty:0kB writeback:0kB shmem:43212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 626688kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 691.995258] Node 1 active_anon:2868kB inactive_anon:3595372kB active_file:32kB inactive_file:32kB unevictable:26628kB isolated(anon):0kB isolated(file):0kB mapped:155504kB dirty:0kB writeback:0kB shmem:1072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 692.039146] device veth1_vlan left promiscuous mode [ 692.058343] device veth0_vlan left promiscuous mode [ 692.069012] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:644kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 692.109510] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 692.116692] Node 0 DMA32 free:42916kB min:36200kB low:45248kB high:54296kB active_anon:585428kB inactive_anon:1206560kB active_file:1196kB inactive_file:2032kB unevictable:234064kB writepending:44kB present:3129332kB managed:2788160kB mlocked:234064kB kernel_stack:8992kB pagetables:12132kB bounce:0kB free_pcp:968kB local_pcp:336kB free_cma:0kB [ 692.157848] Bluetooth: hci3 command 0x0419 tx timeout [ 692.212209] lowmem_reserve[]: 0 0 0 0 0 [ 692.227290] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 692.284590] lowmem_reserve[]: 0 0 0 0 0 [ 692.297008] Node 1 Normal free:72072kB min:53696kB low:67120kB high:80544kB active_anon:2744kB inactive_anon:3588540kB active_file:8kB inactive_file:0kB unevictable:13524kB writepending:0kB present:4194304kB managed:4128256kB mlocked:13888kB kernel_stack:4256kB pagetables:19440kB bounce:0kB free_pcp:1376kB local_pcp:664kB free_cma:0kB [ 692.328393] lowmem_reserve[]: 0 0 0 0 0 [ 692.332587] Node 0 DMA: 36*4kB (M) 2*8kB (M) 1*16kB (M) 2*32kB (UM) 9*64kB (UM) 4*128kB (UM) 6*256kB (UM) 2*512kB (UM) 3*1024kB (UM) 2*2048kB (M) 0*4096kB = 11056kB [ 692.347775] Node 0 DMA32: 1243*4kB (UME) 936*8kB (UME) 1002*16kB (UME) 707*32kB (UME) 31*64kB (M) 15*128kB (M) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55788kB [ 692.363125] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 692.374241] Node 1 Normal: 1542*4kB (UME) 416*8kB (UME) 663*16kB (UME) 604*32kB (UME) 44*64kB (UME) 4*128kB (UM) 2*256kB (UE) 40*512kB (UME) 1*1024kB (M) 2*2048kB (U) 1*4096kB (U) = 72968kB [ 692.391932] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 692.392734] device hsr_slave_1 left promiscuous mode [ 692.400833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 692.400840] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 692.400846] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 692.400850] 21428 total pagecache pages [ 692.400859] 0 pages in swap cache [ 692.400865] Swap cache stats: add 0, delete 0, find 0/0 [ 692.400868] Free swap = 0kB [ 692.400872] Total swap = 0kB [ 692.400878] 2097051 pages RAM [ 692.400881] 0 pages HighMem/MovableOnly [ 692.400885] 363840 pages reserved [ 692.400888] 0 pages cma reserved [ 692.486033] device hsr_slave_0 left promiscuous mode [ 692.501230] team0 (unregistering): Port device team_slave_1 removed [ 692.511983] team0 (unregistering): Port device team_slave_0 removed [ 692.524394] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 692.535491] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 692.567353] bond0 (unregistering): Released all slaves 18:28:50 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:28:50 executing program 0: r0 = openat$ptmx(0xffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "c858f6dd555839757f70ec83c812e395a8fca7"}) 18:28:50 executing program 1: mlockall(0x4) mlockall(0x2) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:28:50 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f00001e8000/0x1000)=nil, 0x1000, 0x8, 0x40010, 0xffffffffffffffff, 0xb3b33000) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000000c0)) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f00000000c0)) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000280)={{r4}, 0x0, 0x1e, @unused=[0xffffffff, 0x55, 0x8, 0x6], @name="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"}) dup2(r0, r1) 18:28:50 executing program 0: r0 = openat$ptmx(0xffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "c858f6dd555839757f70ec83c812e395a8fca7"}) 18:28:50 executing program 3: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x8, 0x0, 0x0, 0xff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x8) clone(0x80074200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:28:50 executing program 0: r0 = openat$ptmx(0xffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "c858f6dd555839757f70ec83c812e395a8fca7"}) 18:28:50 executing program 0: r0 = openat$ptmx(0xffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "c858f6dd555839757f70ec83c812e395a8fca7"}) 18:28:50 executing program 0: r0 = openat$ptmx(0xffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "c858f6dd555839757f70ec83c812e395a8fca7"}) 18:28:50 executing program 0: r0 = openat$ptmx(0xffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "c858f6dd555839757f70ec83c812e395a8fca7"}) 18:28:50 executing program 0: r0 = openat$ptmx(0xffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "c858f6dd555839757f70ec83c812e395a8fca7"}) [ 694.180777] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 694.194048] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 694.207452] CPU: 0 PID: 7976 Comm: syz-fuzzer Not tainted 4.14.215-syzkaller #0 [ 694.215093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 694.224600] Call Trace: [ 694.227200] dump_stack+0x1b2/0x283 [ 694.230883] dump_header+0x178/0x82f [ 694.234609] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 694.239723] ? ___ratelimit+0x2cd/0x522 [ 694.243709] oom_kill_process.cold+0x10/0xb18 [ 694.248384] out_of_memory+0xe3e/0x1190 [ 694.252485] ? oom_killer_disable+0x1c0/0x1c0 [ 694.257002] ? mutex_trylock+0x152/0x1a0 [ 694.261162] __alloc_pages_nodemask+0x23e1/0x2720 [ 694.266114] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 694.270984] alloc_pages_current+0x155/0x260 [ 694.275542] filemap_fault+0xea3/0x1980 [ 694.279551] ext4_filemap_fault+0x84/0xb0 [ 694.283707] __do_fault+0xfa/0x380 [ 694.287258] __handle_mm_fault+0x2497/0x4620 [ 694.291679] ? vm_insert_page+0x7c0/0x7c0 [ 694.295845] ? HARDIRQ_verbose+0x10/0x10 [ 694.299910] ? HARDIRQ_verbose+0x10/0x10 [ 694.304111] handle_mm_fault+0x391/0x860 [ 694.308185] __do_page_fault+0x549/0xad0 [ 694.312258] ? spurious_fault+0x640/0x640 [ 694.316413] ? do_page_fault+0x60/0x4f2 [ 694.320393] ? page_fault+0x2f/0x50 [ 694.324012] page_fault+0x45/0x50 [ 694.327455] RIP: eeffe0:0x8 [ 694.330456] RSP: 4e20:000000c00003df28 EFLAGS: 00438920 [ 694.330874] Mem-Info: [ 694.338884] active_anon:148815 inactive_anon:1200833 isolated_anon:0 [ 694.338884] active_file:2 inactive_file:1 isolated_file:0 [ 694.338884] unevictable:67804 dirty:4 writeback:0 unstable:0 [ 694.338884] slab_reclaimable:14470 slab_unreclaimable:112635 [ 694.338884] mapped:51627 shmem:11068 pagetables:7923 bounce:0 [ 694.338884] free:25183 free_pcp:0 free_cma:0 [ 694.372669] Node 0 active_anon:591796kB inactive_anon:1210800kB active_file:8kB inactive_file:0kB unevictable:238728kB isolated(anon):0kB isolated(file):0kB mapped:54844kB dirty:16kB writeback:0kB shmem:43200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 626688kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 694.401311] Node 1 active_anon:3464kB inactive_anon:3592532kB active_file:0kB inactive_file:4kB unevictable:32488kB isolated(anon):0kB isolated(file):0kB mapped:151664kB dirty:0kB writeback:0kB shmem:1072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 694.429107] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:644kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 694.455965] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 694.461090] Node 0 DMA32 free:35992kB min:36200kB low:45248kB high:54296kB active_anon:591796kB inactive_anon:1210156kB active_file:36kB inactive_file:100kB unevictable:238448kB writepending:16kB present:3129332kB managed:2788160kB mlocked:238448kB kernel_stack:9120kB pagetables:12352kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 694.572865] lowmem_reserve[]: 0 0 0 0 0 [ 694.577088] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 694.647364] lowmem_reserve[]: 0 0 0 0 0 [ 694.651505] Node 1 Normal free:53684kB min:53696kB low:67120kB high:80544kB active_anon:3464kB inactive_anon:3592532kB active_file:0kB inactive_file:4kB unevictable:32488kB writepending:0kB present:4194304kB managed:4128256kB mlocked:32488kB kernel_stack:4160kB pagetables:19336kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 694.811073] lowmem_reserve[]: 0 0 0 0 0 [ 694.829458] Node 0 DMA: 36*4kB (M) 2*8kB (M) 1*16kB (M) 2*32kB (UM) 9*64kB (UM) 4*128kB (UM) 6*256kB (UM) 2*512kB (UM) 3*1024kB (UM) 2*2048kB (M) 0*4096kB = 11056kB [ 694.855723] Node 0 DMA32: 135*4kB (UM) 2*8kB (UM) 849*16kB (UM) 685*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36060kB [ 694.887391] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 694.927367] Node 1 Normal: 100*4kB (UME) 51*8kB (UME) 18*16kB (UME) 488*32kB (UME) 42*64kB (UME) 2*128kB (M) 1*256kB (E) 48*512kB (UME) 1*1024kB (M) 2*2048kB (U) 1*4096kB (U) = 53704kB [ 694.969192] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 694.981225] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 694.990007] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 694.998894] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 695.023920] 18594 total pagecache pages [ 695.040712] 0 pages in swap cache [ 695.045472] Swap cache stats: add 0, delete 0, find 0/0 [ 695.067223] Free swap = 0kB [ 695.087360] Total swap = 0kB [ 695.090408] 2097051 pages RAM [ 695.093514] 0 pages HighMem/MovableOnly [ 695.139795] 363840 pages reserved [ 695.143443] 0 pages cma reserved [ 695.146816] Out of memory (oom_kill_allocating_task): Kill process 7976 (syz-fuzzer) score 0 or sacrifice child [ 695.197654] Killed process 24938 (syz-executor.4) total-vm:85024kB, anon-rss:64kB, file-rss:44kB, shmem-rss:0kB [ 695.215911] oom_reaper: reaped process 24938 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 696.237537] Bluetooth: hci5 command 0x0406 tx timeout [ 696.255965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.263835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.306796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.329829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.366067] device bridge_slave_1 left promiscuous mode [ 696.408253] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.435014] device bridge_slave_0 left promiscuous mode [ 696.454741] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.494793] device veth1_macvtap left promiscuous mode [ 696.545165] device veth0_macvtap left promiscuous mode [ 696.580341] device veth1_vlan left promiscuous mode [ 696.609304] device veth0_vlan left promiscuous mode [ 696.892329] device hsr_slave_1 left promiscuous mode [ 696.913760] device hsr_slave_0 left promiscuous mode [ 696.960292] team0 (unregistering): Port device team_slave_1 removed [ 696.988613] team0 (unregistering): Port device team_slave_0 removed [ 697.013802] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 697.039273] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 697.109607] bond0 (unregistering): Released all slaves [ 699.295469] IPVS: ftp: loaded support on port[0] = 21 [ 699.421850] chnl_net:caif_netlink_parms(): no params data found [ 699.487856] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.494362] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.502405] device bridge_slave_0 entered promiscuous mode [ 699.509630] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.515986] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.523299] device bridge_slave_1 entered promiscuous mode [ 699.544236] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 699.553038] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 699.574104] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 699.581402] team0: Port device team_slave_0 added [ 699.586965] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 699.594978] team0: Port device team_slave_1 added [ 699.611518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.617809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.643737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.655080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.661847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.687675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.699200] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 699.706505] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 699.728830] device hsr_slave_0 entered promiscuous mode [ 699.734520] device hsr_slave_1 entered promiscuous mode [ 699.741516] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 699.749000] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 699.821311] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.827710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.834292] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.840673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.871245] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 699.878606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.886405] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 699.895283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 699.902715] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.909723] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.922148] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 699.928323] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.936582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 699.944607] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.951011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.960616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 699.968426] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.974866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.994858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 700.005008] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 700.016458] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 700.023674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 700.031503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 700.039872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 700.047478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 700.054963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 700.061871] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 700.073539] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 700.082638] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 700.089496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 700.102953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.157290] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 700.167371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 700.195193] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 700.202752] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 700.209715] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 700.219799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 700.228492] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 700.235283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 700.244349] device veth0_vlan entered promiscuous mode [ 700.253790] device veth1_vlan entered promiscuous mode [ 700.259925] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 700.269223] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 700.282152] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 700.291140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 700.298481] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 700.305623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 700.315269] device veth0_macvtap entered promiscuous mode [ 700.321891] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 700.330384] device veth1_macvtap entered promiscuous mode [ 700.339087] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 700.349021] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 700.357688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 700.368244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.378492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 700.388297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.397725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 700.407473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.416561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 700.426485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.437076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.444091] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 700.451629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 700.460533] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 700.469995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 700.480181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.489599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 700.499814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.508994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 700.518915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.528115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 700.537946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.548297] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 700.555184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.563062] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 700.570933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 701.357864] Bluetooth: hci1 command 0x0409 tx timeout [ 703.436877] Bluetooth: hci1 command 0x041b tx timeout 18:29:00 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7a203a2cff784e4107038f7de913a8cc557e51a9531e05a2b54d1d017590d0dee49e03fad82b5a3780a8", 0xce}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) tkill(r0, 0x3d) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:29:00 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getnexthop={0x5c, 0x6a, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NHA_ID={0x8}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ID={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ID={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:29:00 executing program 0: r0 = openat$ptmx(0xffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "c858f6dd555839757f70ec83c812e395a8fca7"}) 18:29:00 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:29:00 executing program 1: mlockall(0x3) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) shmctl$SHM_UNLOCK(r0, 0xc) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:29:00 executing program 3: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2000200, &(0x7f0000000000)="2f529ee02d9afadcc589a2b661a53017645e93574c", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="797588c050fa5e715c9a2e9710cb4e7e4cca718068eac5e714d8f5bebfc01a9e08bcb98ae10076ea0f8dc3530cf1f95ef5a706d52ed1d005cb01cbf2ae8fa654d7dc555a3dbdc75d0d982b285acd9ebfe650f701fe880029df69f236470c7553897f7c0c59acb5aa3ed1a0a9d231dd30fd50b1ba10606a42c69d6800e7ac06255629df85ed37e77e87e977d02d938ae26d9cdca71034396d604e8aaeb19f330d291094beae9077504ac4cd7681ff10089980a200bbe1fe60e484") mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x10, 0xffffffffffffffff, 0x37ac7000) 18:29:00 executing program 0: r0 = openat$ptmx(0xffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "c858f6dd555839757f70ec83c812e395a8fca7"}) 18:29:01 executing program 0: r0 = openat$ptmx(0xffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "c858f6dd555839757f70ec83c812e395a8fca7"}) 18:29:01 executing program 0: r0 = openat$ptmx(0xffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "c858f6dd555839757f70ec83c812e395a8fca7"}) 18:29:01 executing program 0: r0 = openat$ptmx(0xffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "c858f6dd555839757f70ec83c812e395a8fca7"}) 18:29:01 executing program 0: r0 = openat$ptmx(0xffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x1) ioctl$TCSETSF(r0, 0x5404, 0x0) 18:29:01 executing program 0: r0 = openat$ptmx(0xffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x1) ioctl$TCSETSF(r0, 0x5404, 0x0) [ 704.860346] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 704.880851] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 704.885645] CPU: 1 PID: 7976 Comm: syz-fuzzer Not tainted 4.14.215-syzkaller #0 [ 704.893082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 704.902433] Call Trace: [ 704.905021] dump_stack+0x1b2/0x283 [ 704.908650] dump_header+0x178/0x82f [ 704.912397] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 704.917499] ? ___ratelimit+0x2cd/0x522 [ 704.921478] oom_kill_process.cold+0x10/0xb18 [ 704.925980] out_of_memory+0xe3e/0x1190 [ 704.929958] ? oom_killer_disable+0x1c0/0x1c0 [ 704.934452] ? mutex_trylock+0x152/0x1a0 [ 704.938520] __alloc_pages_nodemask+0x23e1/0x2720 [ 704.943373] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 704.948232] alloc_pages_current+0x155/0x260 [ 704.952639] filemap_fault+0xea3/0x1980 [ 704.956617] ext4_filemap_fault+0x84/0xb0 [ 704.960763] __do_fault+0xfa/0x380 [ 704.964313] __handle_mm_fault+0x2497/0x4620 [ 704.968724] ? vm_insert_page+0x7c0/0x7c0 [ 704.972869] ? HARDIRQ_verbose+0x10/0x10 [ 704.976926] ? HARDIRQ_verbose+0x10/0x10 [ 704.980996] handle_mm_fault+0x391/0x860 [ 704.985061] __do_page_fault+0x549/0xad0 [ 704.989123] ? spurious_fault+0x640/0x640 [ 704.993269] ? do_page_fault+0x60/0x4f2 [ 704.997247] ? page_fault+0x2f/0x50 [ 705.000870] page_fault+0x45/0x50 [ 705.004314] RIP: eeffe0:0x8 [ 705.007237] RSP: 4e20:000000c00003df28 EFLAGS: 00438920 [ 705.029370] Mem-Info: [ 705.070398] active_anon:148517 inactive_anon:1198893 isolated_anon:0 [ 705.070398] active_file:16 inactive_file:14 isolated_file:0 [ 705.070398] unevictable:71433 dirty:0 writeback:0 unstable:0 [ 705.070398] slab_reclaimable:14374 slab_unreclaimable:111276 [ 705.070398] mapped:56546 shmem:11067 pagetables:7895 bounce:0 [ 705.070398] free:25225 free_pcp:0 free_cma:0 [ 705.284769] Node 0 active_anon:590612kB inactive_anon:1207168kB active_file:116kB inactive_file:40kB unevictable:237860kB isolated(anon):0kB isolated(file):0kB mapped:89864kB dirty:0kB writeback:0kB shmem:43176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 626688kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 705.427425] Node 1 active_anon:3456kB inactive_anon:3588404kB active_file:8kB inactive_file:4kB unevictable:47872kB isolated(anon):0kB isolated(file):0kB mapped:136320kB dirty:0kB writeback:0kB shmem:1092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 705.516976] Bluetooth: hci1 command 0x040f tx timeout [ 705.584379] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:644kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 705.774051] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 705.807178] Node 0 DMA32 free:36152kB min:36200kB low:45248kB high:54296kB active_anon:590612kB inactive_anon:1206524kB active_file:52kB inactive_file:32kB unevictable:237860kB writepending:0kB present:3129332kB managed:2788160kB mlocked:237860kB kernel_stack:8768kB pagetables:11768kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 705.960860] lowmem_reserve[]: 0 0 0 0 0 [ 705.984490] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 706.112854] lowmem_reserve[]: 0 0 0 0 0 [ 706.125539] Node 1 Normal free:53608kB min:53696kB low:67120kB high:80544kB active_anon:3456kB inactive_anon:3588404kB active_file:4kB inactive_file:8kB unevictable:47932kB writepending:0kB present:4194304kB managed:4128256kB mlocked:47932kB kernel_stack:4608kB pagetables:19808kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 706.306605] lowmem_reserve[]: 0 0 0 0 0 [ 706.310647] Node 0 DMA: 36*4kB (M) 2*8kB (M) 1*16kB (M) 2*32kB (UM) 9*64kB (UM) 4*128kB (UM) 6*256kB (UM) 2*512kB (UM) 3*1024kB (UM) 2*2048kB (M) 0*4096kB = 11056kB [ 706.400975] Node 0 DMA32: 3*4kB (U) 46*8kB (UM) 784*16kB (UM) 712*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35708kB [ 706.469254] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 706.522735] Node 1 Normal: 81*4kB (UME) 52*8kB (UME) 11*16kB (UME) 197*32kB (UME) 107*64kB (UME) 48*128kB (UM) 13*256kB (UME) 43*512kB (UME) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (U) = 53748kB [ 706.594966] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 706.653735] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 706.707101] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 706.716168] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 706.814148] 23699 total pagecache pages [ 706.818332] 0 pages in swap cache [ 706.821792] Swap cache stats: add 0, delete 0, find 0/0 [ 706.876426] Free swap = 0kB [ 706.887281] Total swap = 0kB [ 706.890319] 2097051 pages RAM [ 706.893415] 0 pages HighMem/MovableOnly [ 706.916636] 363840 pages reserved [ 706.924022] 0 pages cma reserved [ 706.937651] Out of memory (oom_kill_allocating_task): Kill process 7976 (syz-fuzzer) score 0 or sacrifice child [ 706.960586] Killed process 25306 (syz-executor.2) total-vm:85024kB, anon-rss:64kB, file-rss:964kB, shmem-rss:0kB [ 707.788682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.795381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.803613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.810877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.819936] device bridge_slave_1 left promiscuous mode [ 707.825476] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.833014] device bridge_slave_0 left promiscuous mode [ 707.838782] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.847985] device veth1_macvtap left promiscuous mode [ 707.853374] device veth0_macvtap left promiscuous mode [ 707.858908] device veth1_vlan left promiscuous mode [ 707.863974] device veth0_vlan left promiscuous mode [ 707.961869] device hsr_slave_1 left promiscuous mode [ 707.972589] device hsr_slave_0 left promiscuous mode [ 707.991019] team0 (unregistering): Port device team_slave_1 removed [ 708.001385] team0 (unregistering): Port device team_slave_0 removed [ 708.012388] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 708.023795] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 708.060240] bond0 (unregistering): Released all slaves [ 710.333142] IPVS: ftp: loaded support on port[0] = 21 [ 710.461894] chnl_net:caif_netlink_parms(): no params data found [ 710.524503] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.531220] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.538945] device bridge_slave_0 entered promiscuous mode [ 710.545614] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.552716] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.560079] device bridge_slave_1 entered promiscuous mode [ 710.580313] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 710.589189] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 710.609575] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 710.617038] team0: Port device team_slave_0 added [ 710.622390] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 710.629749] team0: Port device team_slave_1 added [ 710.648502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.654734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.680562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.691937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.698613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.724400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.735758] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 710.743649] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 710.766252] device hsr_slave_0 entered promiscuous mode [ 710.771958] device hsr_slave_1 entered promiscuous mode [ 710.778920] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 710.785879] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 710.861705] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.868098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.874673] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.881070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.912759] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 710.919425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.928997] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 710.937986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 710.945116] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.952154] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.962188] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 710.968954] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.977694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 710.985279] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.991689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.001594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 711.009576] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.015914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.037530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 711.045532] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 711.054081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 711.061709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 711.070138] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 711.076173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 711.087312] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 711.099239] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 711.107456] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 711.114198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 711.124951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.180746] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 711.192381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 711.224430] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 711.231764] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 711.239523] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 711.248994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 711.257343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 711.264217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 711.273091] device veth0_vlan entered promiscuous mode [ 711.282741] device veth1_vlan entered promiscuous mode [ 711.288779] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 711.298619] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 711.312277] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 711.321751] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 711.329405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 711.337261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 711.346679] device veth0_macvtap entered promiscuous mode [ 711.352753] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 711.362508] device veth1_macvtap entered promiscuous mode [ 711.371718] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 711.381003] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 711.390532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 711.400734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.410524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 711.420532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.429746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 711.439537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.448778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 711.458551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.469074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.475875] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 711.483351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 711.491832] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 711.501471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 711.511529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.521017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 711.531365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.540525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 711.550301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.559525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 711.569290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.579344] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 711.586366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.593455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 711.601465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:29:08 executing program 0: r0 = openat$ptmx(0xffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x1) ioctl$TCSETSF(r0, 0x5404, 0x0) 18:29:08 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x800005, 0x29, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) dup(r3) 18:29:08 executing program 1: mlockall(0x3) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) shmat(r0, &(0x7f0000956000/0x4000)=nil, 0x2000) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:29:08 executing program 3: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:29:08 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7a203a2cff784e4107038f7de913a8cc557e51a9531e05a2b54d1d017590d0dee49e03fad82b5a3780a8", 0xce}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) tkill(r0, 0x3d) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:29:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:29:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:29:09 executing program 0: shmat(0x0, &(0x7f0000f0e000/0x3000)=nil, 0x0) 18:29:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(0x0, 0x3d) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 18:29:09 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000500)='ns/pid\x00') 18:29:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(0x0, 0x3d) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 18:29:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(0x0, 0x3d) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 18:29:09 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/185, 0xb9}}, 0x120) [ 712.057457] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.095226] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.127203] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.151615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.185815] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.218074] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.248877] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.281183] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.325043] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.358045] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.394617] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.460077] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.483989] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.526241] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.532967] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.576313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.583053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.632815] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.653081] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.666770] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.681208] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.695674] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.703153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.729564] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.737557] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.757927] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.772353] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.788026] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 712.802877] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.820624] systemd-journal cpuset=/ mems_allowed=0-1 [ 712.830292] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 712.838205] CPU: 1 PID: 23344 Comm: systemd-journal Not tainted 4.14.215-syzkaller #0 [ 712.846175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 712.855527] Call Trace: [ 712.858118] dump_stack+0x1b2/0x283 [ 712.861746] dump_header+0x178/0x82f [ 712.865540] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 712.870634] ? ___ratelimit+0x2cd/0x522 [ 712.874601] oom_kill_process.cold+0x10/0xb18 [ 712.879085] out_of_memory+0xe3e/0x1190 [ 712.883045] ? oom_killer_disable+0x1c0/0x1c0 [ 712.887528] ? mutex_trylock+0x152/0x1a0 [ 712.891579] __alloc_pages_nodemask+0x23e1/0x2720 [ 712.896556] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 712.901579] ? cache_grow_begin+0x41/0x630 [ 712.905844] cache_grow_begin+0x91/0x630 [ 712.909890] ? cache_grow_begin+0x91/0x630 [ 712.914116] fallback_alloc+0x207/0x2c0 [ 712.918090] kmem_cache_alloc+0x1e5/0x3c0 [ 712.922246] getname_flags+0xc8/0x550 [ 712.926233] user_path_at_empty+0x2a/0x50 [ 712.930412] SyS_faccessat+0x21b/0x680 [ 712.934300] ? SyS_fallocate+0x80/0x80 [ 712.938185] ? do_syscall_64+0x4c/0x640 [ 712.942166] ? SyS_faccessat+0x680/0x680 [ 712.946231] do_syscall_64+0x1d5/0x640 [ 712.950138] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 712.955334] RIP: 0033:0x7f11ae7ed9c7 [ 712.959043] RSP: 002b:00007ffe28ed68a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 712.966753] RAX: ffffffffffffffda RBX: 00007ffe28ed68f0 RCX: 00007f11ae7ed9c7 [ 712.974137] RDX: 0000000000000013 RSI: 0000000000000000 RDI: 00007ffe28ed68b0 [ 712.981432] RBP: 00007ffe28ed79a0 R08: 000000000000c0ff R09: 0000000000000120 [ 712.988703] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe28ed79c0 [ 712.995984] R13: 000055bc1f3bd368 R14: 0000000000000018 R15: 00007ffe28ed68b0 [ 713.023823] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.033362] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.044253] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.061204] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.068043] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.074729] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.088379] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.095076] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.108598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.112662] Mem-Info: [ 713.115400] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.124500] active_anon:147046 inactive_anon:1201514 isolated_anon:0 [ 713.124500] active_file:43 inactive_file:10 isolated_file:0 [ 713.124500] unevictable:73234 dirty:29 writeback:0 unstable:0 [ 713.124500] slab_reclaimable:14238 slab_unreclaimable:109953 [ 713.124500] mapped:57064 shmem:11069 pagetables:8003 bounce:0 [ 713.124500] free:25135 free_pcp:417 free_cma:0 [ 713.127558] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.171291] Node 0 active_anon:585668kB inactive_anon:1207144kB active_file:152kB inactive_file:0kB unevictable:237056kB isolated(anon):0kB isolated(file):0kB mapped:94608kB dirty:40kB writeback:0kB shmem:43196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 626688kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 713.179893] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.212051] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.218942] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.224067] Node 1 active_anon:2516kB inactive_anon:3598912kB active_file:20kB inactive_file:40kB unevictable:55880kB isolated(anon):0kB isolated(file):0kB mapped:133648kB dirty:76kB writeback:0kB shmem:1080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 713.225849] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.270413] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:644kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 713.272346] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.303492] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.310487] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 713.315708] Node 0 DMA32 free:35892kB min:36200kB low:45248kB high:54296kB active_anon:585668kB inactive_anon:1206400kB active_file:88kB inactive_file:0kB unevictable:236616kB writepending:0kB present:3129332kB managed:2788160kB mlocked:237016kB kernel_stack:8896kB pagetables:11960kB bounce:0kB free_pcp:1352kB local_pcp:712kB free_cma:0kB [ 713.320709] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.360170] lowmem_reserve[]: 0 0 0 0 0 [ 713.364364] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.364384] Node 0 [ 713.373596] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.384962] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 713.391360] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.423405] lowmem_reserve[]: 0 0 0 0 0 [ 713.428428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.433369] Node 1 Normal free:53460kB min:53696kB low:67120kB high:80544kB active_anon:2516kB inactive_anon:3598756kB active_file:8kB inactive_file:56kB unevictable:55900kB writepending:0kB present:4194304kB managed:4128256kB mlocked:55900kB kernel_stack:4640kB pagetables:20048kB bounce:0kB free_pcp:304kB local_pcp:12kB free_cma:0kB [ 713.435244] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.481729] lowmem_reserve[]: 0 0 0 0 0 [ 713.483714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.485884] Node 0 DMA: 36*4kB (M) 2*8kB (M) 1*16kB (M) 2*32kB (UM) 9*64kB (UM) 4*128kB (UM) 6*256kB (UM) 2*512kB (UM) 3*1024kB (UM) 2*2048kB (M) 0*4096kB = 11056kB [ 713.500252] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.514170] Node 0 DMA32: 43*4kB (UMH) 8*8kB (UM) 583*16kB (UH) 822*32kB (UH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35868kB [ 713.514295] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.534536] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 713.545445] Node 1 Normal: 69*4kB (UME) 56*8kB (UME) 214*16kB (UE) 148*32kB (UE) 89*64kB (UE) 42*128kB (UM) 11*256kB (UE) 28*512kB (UME) 4*1024kB (UM) 4*2048kB (U) 1*4096kB (U) = 53492kB [ 713.551744] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.568911] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 713.580566] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 713.585490] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.593581] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 713.604175] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.611629] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 713.611635] 24040 total pagecache pages [ 713.611644] 0 pages in swap cache [ 713.611649] Swap cache stats: add 0, delete 0, find 0/0 [ 713.611652] Free swap = 0kB [ 713.611655] Total swap = 0kB [ 713.611661] 2097051 pages RAM [ 713.611665] 0 pages HighMem/MovableOnly [ 713.611668] 363840 pages reserved [ 713.611671] 0 pages cma reserved [ 713.611677] Out of memory (oom_kill_allocating_task): Kill process 23344 (systemd-journal) score 0 or sacrifice child [ 713.611850] Killed process 23344 (systemd-journal) total-vm:46096kB, anon-rss:480kB, file-rss:0kB, shmem-rss:2452kB [ 713.637960] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.646659] oom_reaper: reaped process 23344 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2452kB [ 713.663841] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.680173] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 713.711535] systemd cpuset=/ mems_allowed=0-1 [ 713.715221] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.716256] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.215-syzkaller #0 [ 713.729620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 713.738968] Call Trace: [ 713.741555] dump_stack+0x1b2/0x283 [ 713.743216] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.745179] dump_header+0x178/0x82f [ 713.745192] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 713.745202] ? ___ratelimit+0x2cd/0x522 [ 713.751993] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.755568] oom_kill_process.cold+0x10/0xb18 [ 713.755580] ? lock_downgrade+0x740/0x740 [ 713.755593] out_of_memory+0x2dc/0x1190 [ 713.760767] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.764633] ? oom_killer_disable+0x1c0/0x1c0 [ 713.764642] ? mutex_trylock+0x152/0x1a0 [ 713.764653] __alloc_pages_nodemask+0x23e1/0x2720 [ 713.771396] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.775783] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 713.775810] alloc_pages_current+0x155/0x260 [ 713.780008] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.783877] filemap_fault+0xea3/0x1980 [ 713.783904] ext4_filemap_fault+0x84/0xb0 [ 713.790641] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.795020] __do_fault+0xfa/0x380 [ 713.795031] __handle_mm_fault+0x2497/0x4620 [ 713.795043] ? vm_insert_page+0x7c0/0x7c0 [ 713.799178] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.803910] ? HARDIRQ_verbose+0x10/0x10 [ 713.803918] ? HARDIRQ_verbose+0x10/0x10 [ 713.803938] handle_mm_fault+0x391/0x860 [ 713.810669] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.815425] __do_page_fault+0x549/0xad0 [ 713.815438] ? spurious_fault+0x640/0x640 [ 713.815447] ? do_page_fault+0x60/0x4f2 [ 713.819935] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.826480] ? page_fault+0x2f/0x50 [ 713.826490] page_fault+0x45/0x50 [ 713.826498] RIP: 0001:0xffffffffffffffff [ 713.826503] RSP: cea61f50:00007ffd3e034ad0 EFLAGS: 7ffd3e0347f0 [ 713.828309] Mem-Info: [ 713.830570] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.834697] active_anon:146946 inactive_anon:1201514 isolated_anon:0 [ 713.834697] active_file:43 inactive_file:10 isolated_file:0 [ 713.834697] unevictable:73234 dirty:29 writeback:0 unstable:0 [ 713.834697] slab_reclaimable:14238 slab_unreclaimable:109953 [ 713.834697] mapped:56439 shmem:11069 pagetables:8003 bounce:0 [ 713.834697] free:25127 free_pcp:530 free_cma:0 [ 713.869330] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.878852] Node 0 active_anon:585568kB inactive_anon:1207144kB active_file:152kB inactive_file:0kB unevictable:237056kB isolated(anon):0kB isolated(file):0kB mapped:92108kB dirty:40kB writeback:0kB shmem:43196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 626688kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 713.900851] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.905796] Node 1 active_anon:2216kB inactive_anon:3598912kB active_file:20kB inactive_file:40kB unevictable:55880kB isolated(anon):0kB isolated(file):0kB mapped:133648kB dirty:76kB writeback:0kB shmem:1080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 713.924392] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.928737] Node 0 [ 713.980682] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 713.998640] DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:644kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 714.022781] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.041036] lowmem_reserve[]: [ 714.059472] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.084055] 0 2717 2718 2718 2718 [ 714.095454] Node 0 DMA32 free:36000kB min:36200kB low:45248kB high:54296kB active_anon:585548kB inactive_anon:1206392kB active_file:24kB inactive_file:24kB unevictable:236616kB writepending:0kB present:3129332kB managed:2788160kB mlocked:237016kB kernel_stack:8864kB pagetables:11956kB bounce:0kB free_pcp:1324kB local_pcp:692kB free_cma:0kB [ 714.102642] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.141644] lowmem_reserve[]: 0 0 0 0 0 [ 714.145743] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 714.146637] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.192479] lowmem_reserve[]: 0 0 0 0 0 [ 714.193056] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.204985] Node 1 Normal free:53492kB min:53696kB low:67120kB high:80544kB active_anon:2152kB inactive_anon:3598756kB active_file:0kB inactive_file:64kB unevictable:55900kB writepending:0kB present:4194304kB managed:4128256kB mlocked:55900kB kernel_stack:4640kB pagetables:19956kB bounce:0kB free_pcp:784kB local_pcp:492kB free_cma:0kB [ 714.209690] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.250921] lowmem_reserve[]: 0 0 0 0 0 [ 714.255007] Node 0 DMA: 36*4kB (M) 2*8kB (M) 1*16kB (M) 2*32kB (UM) 9*64kB (UM) 4*128kB (UM) 6*256kB (UM) 2*512kB (UM) 3*1024kB (UM) 2*2048kB (M) 0*4096kB = 11056kB [ 714.255613] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.284394] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.291244] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.301193] Node 0 DMA32: 54*4kB (UMH) 15*8kB (UM) 583*16kB (UH) 823*32kB (UH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36000kB [ 714.304774] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.331406] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 714.333602] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.361259] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.362955] Node 1 [ 714.373099] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.385932] Normal: 69*4kB (UME) 56*8kB (UME) 214*16kB (UE) 148*32kB (UE) 89*64kB (UE) 42*128kB (UM) 11*256kB (UE) 28*512kB (UME) 4*1024kB (UM) 4*2048kB (U) 1*4096kB (U) = 53492kB [ 714.394081] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.426663] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.433497] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.433541] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 714.448586] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.455846] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.472467] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.473216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 714.481536] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.502110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.511399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.514602] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 714.524441] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.536369] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.543154] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.555227] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 714.556994] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.580483] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.592380] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.594584] 24030 total pagecache pages [ 714.603359] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.615117] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.623059] 0 pages in swap cache [ 714.626273] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.633480] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.654100] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.654439] Swap cache stats: add 0, delete 0, find 0/0 [ 714.663194] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.680995] Free swap = 0kB [ 714.684072] Total swap = 0kB [ 714.686868] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.692021] 2097051 pages RAM [ 714.693842] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.704018] 0 pages HighMem/MovableOnly [ 714.713795] 363840 pages reserved [ 714.717368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.724234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.724466] 0 pages cma reserved [ 714.791728] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.799764] Out of memory: Kill process 25837 (syz-executor.5) score 1011 or sacrifice child [ 714.825798] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.861656] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.899807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.943054] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.978455] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 714.994191] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 715.019273] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.050043] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 715.052167] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.124391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.149495] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.153421] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 715.170497] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 715.176189] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.183467] systemd[1]: Stopped Journal Service. [ 715.189383] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.206334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.213049] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.230055] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.232057] systemd[1]: Starting Journal Service... [ 715.250309] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.257077] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.276471] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.283170] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.306591] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.323531] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.343780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.350655] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.366089] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.383047] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.398292] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.415234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.439280] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.469879] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.486138] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.513785] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.523323] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.542842] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.550731] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.566612] systemd-journald[25875]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 715.586102] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.603071] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.616102] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.622891] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.646057] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.663051] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.669848] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.686034] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.702986] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.709860] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.726030] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.743094] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.753240] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.766022] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.772830] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.796007] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.812871] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.826277] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.843188] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.866007] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.872852] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.879965] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.886771] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.893462] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.901284] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.908070] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.914758] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.921819] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.928597] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.935283] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.942063] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.948803] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.955491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.962297] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.969049] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.975734] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.982534] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 715.989287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 716.000235] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 716.011991] Bluetooth: hci1 command 0x0409 tx timeout [ 716.113038] systemd[1]: Started Journal Service. [ 718.014611] IPVS: ftp: loaded support on port[0] = 21 [ 718.079560] Bluetooth: hci1 command 0x041b tx timeout [ 718.171116] chnl_net:caif_netlink_parms(): no params data found [ 718.254862] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.261878] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.269567] device bridge_slave_0 entered promiscuous mode [ 718.276895] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.283295] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.290580] device bridge_slave_1 entered promiscuous mode [ 718.310205] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 718.318981] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 718.339129] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 718.346475] team0: Port device team_slave_0 added [ 718.352001] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 718.359380] team0: Port device team_slave_1 added [ 718.377890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.384117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.410197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.421383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.427677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.452993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.463912] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 718.471490] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 718.496070] device hsr_slave_0 entered promiscuous mode [ 718.501850] device hsr_slave_1 entered promiscuous mode [ 718.508051] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 718.515030] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 718.589629] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.596021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.602593] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.609088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.641046] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 718.647436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.655260] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 718.664618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 718.672355] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.679713] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.690502] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 718.696888] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.705202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 718.712904] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.719297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.730280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 718.738106] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.744432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.767292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 718.774953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 718.783404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 718.791489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 718.801087] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 718.807325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 718.814460] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 718.830770] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 718.839042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 718.845667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 718.856557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.914468] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 718.924660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 718.953450] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 718.961209] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 718.968552] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 718.978548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 718.986809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 718.993654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 719.002604] device veth0_vlan entered promiscuous mode [ 719.012736] device veth1_vlan entered promiscuous mode [ 719.018909] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 719.027649] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 719.042083] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 719.052387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 719.060293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 719.068807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 719.080039] device veth0_macvtap entered promiscuous mode [ 719.086494] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 719.094800] device veth1_macvtap entered promiscuous mode [ 719.103971] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 719.113641] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 719.123096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 719.133953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.143376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 719.153205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.162842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 719.172606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.181973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 719.192339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.201657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 719.211462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.222050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 719.229559] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 719.237458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 719.245430] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 719.255009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 719.264971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.274211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 719.284023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.293393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 719.303166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.312490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 719.322895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.332042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 719.341814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.352104] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 719.359119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 719.366265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 719.373925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 720.076620] Bluetooth: hci3 command 0x0409 tx timeout [ 720.166717] Bluetooth: hci1 command 0x040f tx timeout [ 722.155610] Bluetooth: hci3 command 0x041b tx timeout [ 722.235625] Bluetooth: hci1 command 0x0419 tx timeout 18:29:19 executing program 1: mlockall(0x3) mlockall(0x4) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x16, 0x32, 0xffffffffffffffff, 0xffffd000) 18:29:19 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00001e7000/0x1000)=nil, 0x1000}, 0x2}) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:29:19 executing program 3: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2cc0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x4080, 0x0) mmap(&(0x7f00002ab000/0x3000)=nil, 0x3000, 0x1800008, 0x40010, r0, 0xb8873000) 18:29:19 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:29:19 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7a203a2cff784e4107038f7de913a8cc557e51a9531e05a2b54d1d017590d0dee49e03fad82b5a3780a8", 0xce}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:29:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000100)={'syztnl0\x00', 0x0}) 18:29:19 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 723.027057] syz-executor.0 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 723.130074] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 723.168051] CPU: 0 PID: 26149 Comm: syz-executor.0 Not tainted 4.14.215-syzkaller #0 [ 723.175960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 723.185303] Call Trace: [ 723.187901] dump_stack+0x1b2/0x283 [ 723.191530] dump_header+0x178/0x82f [ 723.195244] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 723.200345] ? ___ratelimit+0x2cd/0x522 [ 723.204325] oom_kill_process.cold+0x10/0xb18 [ 723.208833] out_of_memory+0xe3e/0x1190 [ 723.212825] ? oom_killer_disable+0x1c0/0x1c0 [ 723.217318] ? mutex_trylock+0x152/0x1a0 [ 723.221412] __alloc_pages_nodemask+0x23e1/0x2720 [ 723.226257] ? ____cache_alloc_node+0xf4/0x1d0 [ 723.230840] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 723.235682] ? do_raw_spin_unlock+0x164/0x220 [ 723.240174] ? _raw_spin_unlock+0x29/0x40 [ 723.244318] ? ____cache_alloc_node+0xf4/0x1d0 [ 723.248903] ? kmem_cache_alloc_node+0x38b/0x410 [ 723.253652] copy_process.part.0+0x265/0x71c0 [ 723.258143] ? __handle_mm_fault+0x2095/0x4620 [ 723.262722] ? lock_downgrade+0x740/0x740 [ 723.266860] ? __lru_cache_add+0x178/0x250 [ 723.271117] ? do_raw_spin_unlock+0x164/0x220 [ 723.275618] ? _raw_spin_unlock+0x29/0x40 [ 723.279767] ? __cleanup_sighand+0x40/0x40 [ 723.283994] ? HARDIRQ_verbose+0x10/0x10 [ 723.288060] ? HARDIRQ_verbose+0x10/0x10 [ 723.292115] _do_fork+0x184/0xc80 [ 723.295572] ? fork_idle+0x270/0x270 [ 723.299281] ? up_read+0x17/0x30 [ 723.302639] ? __do_page_fault+0x159/0xad0 [ 723.306863] ? do_syscall_64+0x4c/0x640 [ 723.310826] ? sys_vfork+0x20/0x20 [ 723.314358] do_syscall_64+0x1d5/0x640 [ 723.318246] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 723.323430] RIP: 0033:0x460be9 [ 723.326608] RSP: 002b:00007fff6e253bf8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 723.334313] RAX: ffffffffffffffda RBX: 00007ff786ca8700 RCX: 0000000000460be9 [ 723.341580] RDX: 00007ff786ca89d0 RSI: 00007ff786ca7db0 RDI: 00000000003d0f00 [ 723.348846] RBP: 00007fff6e253e10 R08: 00007ff786ca8700 R09: 00007ff786ca8700 [ 723.356107] R10: 00007ff786ca89d0 R11: 0000000000000202 R12: 0000000000000000 [ 723.363367] R13: 00007fff6e253caf R14: 00007ff786ca89c0 R15: 000000000119c034 [ 724.245812] Bluetooth: hci3 command 0x040f tx timeout [ 724.843489] Mem-Info: [ 724.866351] active_anon:151478 inactive_anon:1203515 isolated_anon:0 [ 724.866351] active_file:9 inactive_file:2 isolated_file:0 [ 724.866351] unevictable:53656 dirty:0 writeback:0 unstable:0 [ 724.866351] slab_reclaimable:14135 slab_unreclaimable:114653 [ 724.866351] mapped:54995 shmem:13120 pagetables:8103 bounce:0 [ 724.866351] free:25222 free_pcp:0 free_cma:0 [ 725.194215] Node 0 active_anon:599720kB inactive_anon:1217976kB active_file:72kB inactive_file:0kB unevictable:194724kB isolated(anon):0kB isolated(file):0kB mapped:70116kB dirty:0kB writeback:0kB shmem:51404kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 626688kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 725.464198] Node 1 active_anon:6244kB inactive_anon:3596084kB active_file:0kB inactive_file:24kB unevictable:20152kB isolated(anon):0kB isolated(file):0kB mapped:149764kB dirty:0kB writeback:0kB shmem:1076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 725.708418] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:644kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 725.952886] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 725.996357] Node 0 DMA32 free:36452kB min:36200kB low:45248kB high:54296kB active_anon:599720kB inactive_anon:1217332kB active_file:32kB inactive_file:32kB unevictable:194724kB writepending:0kB present:3129332kB managed:2788160kB mlocked:194724kB kernel_stack:9088kB pagetables:12548kB bounce:0kB free_pcp:436kB local_pcp:268kB free_cma:0kB [ 726.075256] lowmem_reserve[]: 0 0 0 0 0 [ 726.079360] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 726.107883] lowmem_reserve[]: 0 0 0 0 0 [ 726.111894] Node 1 Normal free:56156kB min:53696kB low:67120kB high:80544kB active_anon:6244kB inactive_anon:3602636kB active_file:516kB inactive_file:460kB unevictable:8056kB writepending:0kB present:4194304kB managed:4128256kB mlocked:8212kB kernel_stack:4480kB pagetables:19880kB bounce:0kB free_pcp:684kB local_pcp:4kB free_cma:0kB [ 726.141807] lowmem_reserve[]: 0 0 0 0 0 [ 726.153976] Node 0 DMA: 8*4kB (M) 3*8kB (M) 1*16kB (M) 2*32kB (UM) 9*64kB (UM) 3*128kB (UM) 5*256kB (UM) 1*512kB (U) 2*1024kB (UM) 3*2048kB (M) 0*4096kB = 11080kB [ 726.189500] Node 0 DMA32: 1338*4kB (UME) 1099*8kB (UME) 364*16kB (UME) 867*32kB (UM) 2*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 47840kB [ 726.230197] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 726.256782] Node 1 Normal: 748*4kB (UME) 655*8kB (UME) 478*16kB (UME) 665*32kB (UME) 56*64kB (UME) 11*128kB (M) 9*256kB (UME) 19*512kB (ME) 1*1024kB (M) 3*2048kB (U) 1*4096kB (U) = 65448kB [ 726.317209] Bluetooth: hci3 command 0x0419 tx timeout [ 726.335730] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 726.383677] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 726.431931] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 726.441759] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 726.461486] 19531 total pagecache pages [ 726.472613] 0 pages in swap cache [ 726.504013] Swap cache stats: add 0, delete 0, find 0/0 [ 726.553819] Free swap = 0kB [ 726.560054] Total swap = 0kB [ 726.583439] 2097051 pages RAM 18:29:23 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7a203a2cff784e4107038f7de913a8cc557e51a9531e05a2b54d1d017590d0dee49e03fad82b5a3780a8", 0xce}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 726.601638] 0 pages HighMem/MovableOnly 18:29:23 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 726.637503] 363840 pages reserved [ 726.668156] 0 pages cma reserved 18:29:23 executing program 3: mlockall(0x3) mlockall(0x2) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 726.690135] Out of memory (oom_kill_allocating_task): Kill process 26149 (syz-executor.0) score 0 or sacrifice child [ 726.774401] Killed process 26149 (syz-executor.0) total-vm:93480kB, anon-rss:128kB, file-rss:34332kB, shmem-rss:0kB 18:29:24 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0xbf, 0x7, 0x8, 0x0, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x48e00, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 726.861531] oom_reaper: reaped process 26149 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 727.341482] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 727.354709] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 727.368493] CPU: 1 PID: 26172 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0 [ 727.376384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 727.385731] Call Trace: [ 727.388320] dump_stack+0x1b2/0x283 [ 727.391949] dump_header+0x178/0x82f [ 727.395671] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 727.400772] ? ___ratelimit+0x2cd/0x522 [ 727.404738] oom_kill_process.cold+0x10/0xb18 [ 727.409239] out_of_memory+0xe3e/0x1190 [ 727.413215] ? oom_killer_disable+0x1c0/0x1c0 [ 727.417814] ? mutex_trylock+0x152/0x1a0 [ 727.421881] __alloc_pages_nodemask+0x23e1/0x2720 [ 727.426916] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 727.431755] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 727.436509] ? __lock_acquire+0x5fc/0x3f20 [ 727.440758] alloc_pages_vma+0xd2/0x6d0 [ 727.444723] __handle_mm_fault+0x25fa/0x4620 [ 727.449125] ? vm_insert_page+0x7c0/0x7c0 [ 727.453262] ? HARDIRQ_verbose+0x10/0x10 [ 727.457309] ? do_raw_spin_unlock+0x164/0x220 [ 727.461814] ? sync_mm_rss+0xf2/0x160 [ 727.465609] handle_mm_fault+0x391/0x860 [ 727.469671] __get_user_pages+0x445/0x11d0 [ 727.473898] ? follow_page_mask+0x18a0/0x18a0 [ 727.478384] ? lock_acquire+0x170/0x3f0 [ 727.482353] populate_vma_page_range+0x17b/0x210 [ 727.487104] __mm_populate+0x195/0x2c0 [ 727.490989] ? populate_vma_page_range+0x210/0x210 [ 727.495911] ? security_capable+0x88/0xb0 [ 727.500058] SyS_mlockall+0x3ff/0x520 [ 727.503845] ? SyS_munlock+0xf0/0xf0 [ 727.507551] do_syscall_64+0x1d5/0x640 [ 727.511441] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 727.516632] RIP: 0033:0x45e219 [ 727.519812] RSP: 002b:00007f8fc1afdc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 727.527512] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045e219 [ 727.534768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 727.542023] RBP: 000000000119bfb0 R08: 0000000000000000 R09: 0000000000000000 [ 727.549288] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 727.556553] R13: 00007fff182d792f R14: 00007f8fc1afe9c0 R15: 000000000119bf8c [ 727.567668] Mem-Info: [ 727.570102] active_anon:154552 inactive_anon:1203512 isolated_anon:0 [ 727.570102] active_file:11 inactive_file:11 isolated_file:0 [ 727.570102] unevictable:50856 dirty:0 writeback:0 unstable:0 [ 727.570102] slab_reclaimable:14089 slab_unreclaimable:114609 [ 727.570102] mapped:53951 shmem:13119 pagetables:8040 bounce:0 [ 727.570102] free:25124 free_pcp:190 free_cma:0 [ 727.605086] Node 0 active_anon:604596kB inactive_anon:1217964kB active_file:40kB inactive_file:20kB unevictable:191932kB isolated(anon):0kB isolated(file):0kB mapped:66156kB dirty:0kB writeback:0kB shmem:51392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 626688kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 727.644072] Node 1 active_anon:13612kB inactive_anon:3596084kB active_file:16kB inactive_file:12kB unevictable:11492kB isolated(anon):0kB isolated(file):0kB mapped:149648kB dirty:0kB writeback:0kB shmem:1084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 727.677115] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:644kB active_file:0kB inactive_file:0kB unevictable:56kB writepending:0kB present:15992kB managed:15908kB mlocked:56kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 727.707036] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 727.712088] Node 0 DMA32 free:35828kB min:36200kB low:45248kB high:54296kB active_anon:604528kB inactive_anon:1217320kB active_file:4kB inactive_file:56kB unevictable:191936kB writepending:0kB present:3129332kB managed:2788160kB mlocked:191936kB kernel_stack:8960kB pagetables:12336kB bounce:0kB free_pcp:640kB local_pcp:204kB free_cma:0kB [ 727.744049] lowmem_reserve[]: 0 0 0 0 0 [ 727.753230] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 727.786439] lowmem_reserve[]: 0 0 0 0 0 [ 727.790457] Node 1 Normal free:53604kB min:53696kB low:67120kB high:80544kB active_anon:13612kB inactive_anon:3596084kB active_file:0kB inactive_file:28kB unevictable:11492kB writepending:0kB present:4194304kB managed:4128256kB mlocked:11492kB kernel_stack:4416kB pagetables:19820kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 727.825530] lowmem_reserve[]: 0 0 0 0 0 [ 727.829555] Node 0 DMA: 8*4kB (UM) 3*8kB (UM) 2*16kB (UM) 1*32kB (M) 9*64kB (UM) 3*128kB (UM) 5*256kB (UM) 1*512kB (U) 2*1024kB (UM) 3*2048kB (M) 0*4096kB = 11064kB [ 727.848246] Node 0 DMA32: 1*4kB (M) 340*8kB (U) 379*16kB (UE) 845*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35828kB [ 727.861325] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 727.873958] Node 1 Normal: 173*4kB (UME) 16*8kB (UE) 287*16kB (UME) 666*32kB (UME) 54*64kB (ME) 15*128kB (UM) 8*256kB (ME) 20*512kB (UME) 1*1024kB (M) 2*2048kB (U) 1*4096kB (U) = 53604kB [ 727.902164] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 727.912278] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 727.924205] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 727.933240] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 727.941859] 14495 total pagecache pages [ 727.945868] 0 pages in swap cache [ 727.949310] Swap cache stats: add 0, delete 0, find 0/0 [ 727.954659] Free swap = 0kB [ 727.957701] Total swap = 0kB [ 727.960713] 2097051 pages RAM [ 727.963807] 0 pages HighMem/MovableOnly [ 727.967859] 363840 pages reserved [ 727.971317] 0 pages cma reserved [ 727.974702] Out of memory (oom_kill_allocating_task): Kill process 26172 (syz-executor.3) score 0 or sacrifice child [ 727.985410] Killed process 26170 (syz-executor.3) total-vm:93348kB, anon-rss:24008kB, file-rss:39292kB, shmem-rss:0kB [ 728.006413] oom_reaper: reaped process 26170 (syz-executor.3), now anon-rss:24020kB, file-rss:5416kB, shmem-rss:0kB 18:29:25 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:29:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, 0x0) 18:29:25 executing program 1: mlockall(0x3) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000864000/0x4000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x5) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mlockall(0x3) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:29:25 executing program 3: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000086d000/0x4000)=nil) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:29:25 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:29:25 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) [ 728.365330] ptrace attach of "/root/syz-executor.4"[26187] was attempted by "/root/syz-executor.4"[26189] [ 728.485764] ptrace attach of "/root/syz-executor.4"[26193] was attempted by "/root/syz-executor.4"[26194] [ 728.843033] syz-executor.1 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 728.863742] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 728.872648] CPU: 1 PID: 26184 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0 [ 728.880544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 728.889897] Call Trace: [ 728.892484] dump_stack+0x1b2/0x283 [ 728.896110] dump_header+0x178/0x82f [ 728.899828] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 728.904923] ? ___ratelimit+0x2cd/0x522 [ 728.908896] oom_kill_process.cold+0x10/0xb18 [ 728.913395] out_of_memory+0xe3e/0x1190 [ 728.917488] ? oom_killer_disable+0x1c0/0x1c0 [ 728.921979] ? mutex_trylock+0x152/0x1a0 [ 728.926041] __alloc_pages_nodemask+0x23e1/0x2720 [ 728.930900] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 728.935735] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 728.941106] ? __lock_acquire+0x5fc/0x3f20 [ 728.945356] alloc_pages_vma+0xd2/0x6d0 [ 728.949332] __handle_mm_fault+0x25fa/0x4620 [ 728.953731] ? vm_insert_page+0x7c0/0x7c0 [ 728.957864] ? HARDIRQ_verbose+0x10/0x10 [ 728.961921] ? do_raw_spin_unlock+0x164/0x220 [ 728.966428] handle_mm_fault+0x391/0x860 [ 728.970481] __get_user_pages+0x445/0x11d0 [ 728.974699] ? follow_page_mask+0x18a0/0x18a0 [ 728.979193] ? lock_acquire+0x170/0x3f0 [ 728.983160] populate_vma_page_range+0x17b/0x210 [ 728.987911] __mm_populate+0x195/0x2c0 [ 728.991790] ? populate_vma_page_range+0x210/0x210 [ 728.996707] ? security_capable+0x88/0xb0 [ 729.000858] SyS_mlockall+0x3ff/0x520 [ 729.004648] ? SyS_munlock+0xf0/0xf0 [ 729.008354] do_syscall_64+0x1d5/0x640 [ 729.012241] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 729.017421] RIP: 0033:0x45e219 [ 729.020610] RSP: 002b:00007fe7f7a92c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 729.028313] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045e219 [ 729.035578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 729.042838] RBP: 000000000119bfb0 R08: 0000000000000000 R09: 0000000000000000 [ 729.050105] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 729.057366] R13: 00007ffdc767644f R14: 00007fe7f7a939c0 R15: 000000000119bf8c [ 729.072468] Mem-Info: [ 729.083313] active_anon:155238 inactive_anon:1203513 isolated_anon:0 [ 729.083313] active_file:19 inactive_file:2 isolated_file:0 [ 729.083313] unevictable:50055 dirty:0 writeback:0 unstable:0 [ 729.083313] slab_reclaimable:14089 slab_unreclaimable:114885 [ 729.083313] mapped:52974 shmem:13119 pagetables:8134 bounce:0 [ 729.083313] free:25019 free_pcp:0 free_cma:0 [ 729.263958] Node 0 active_anon:607524kB inactive_anon:1217972kB active_file:68kB inactive_file:0kB unevictable:187812kB isolated(anon):0kB isolated(file):0kB mapped:64544kB dirty:0kB writeback:0kB shmem:51400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 626688kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 729.323508] Node 1 active_anon:13428kB inactive_anon:3596080kB active_file:8kB inactive_file:8kB unevictable:12408kB isolated(anon):0kB isolated(file):0kB mapped:147352kB dirty:0kB writeback:0kB shmem:1076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 729.388064] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:644kB active_file:0kB inactive_file:0kB unevictable:56kB writepending:0kB present:15992kB managed:15908kB mlocked:56kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 729.519057] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 729.545909] Node 0 DMA32 free:36172kB min:36200kB low:45248kB high:54296kB active_anon:607464kB inactive_anon:1217328kB active_file:0kB inactive_file:0kB unevictable:187756kB writepending:0kB present:3129332kB managed:2788160kB mlocked:187756kB kernel_stack:9152kB pagetables:12716kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 729.599522] lowmem_reserve[]: 0 0 0 0 0 [ 729.603615] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 729.666729] lowmem_reserve[]: 0 0 0 0 0 [ 729.677449] Node 1 Normal free:52828kB min:53696kB low:67120kB high:80544kB active_anon:13428kB inactive_anon:3596080kB active_file:8kB inactive_file:8kB unevictable:12408kB writepending:0kB present:4194304kB managed:4128256kB mlocked:12408kB kernel_stack:4384kB pagetables:19816kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 729.831519] lowmem_reserve[]: 0 0 0 0 0 [ 729.851078] Node 0 DMA: 9*4kB (M) 2*8kB (M) 1*16kB (M) 2*32kB (UM) 9*64kB (UM) 3*128kB (UM) 5*256kB (UM) 1*512kB (U) 2*1024kB (UM) 3*2048kB (M) 0*4096kB = 11076kB [ 729.928289] Node 0 DMA32: 67*4kB (UME) 208*8kB (UM) 445*16kB (UME) 848*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36188kB [ 730.000939] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 730.059719] Node 1 Normal: 173*4kB (UME) 13*8kB (UME) 250*16kB (UME) 665*32kB (UME) 55*64kB (UME) 14*128kB (UM) 8*256kB (ME) 20*512kB (UME) 1*1024kB (M) 2*2048kB (U) 1*4096kB (U) = 52892kB [ 730.159025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 730.217323] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 730.256784] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 730.293652] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 730.328672] 13524 total pagecache pages [ 730.360065] 0 pages in swap cache [ 730.375894] Swap cache stats: add 0, delete 0, find 0/0 [ 730.409855] Free swap = 0kB [ 730.428835] Total swap = 0kB [ 730.446522] 2097051 pages RAM [ 730.465081] 0 pages HighMem/MovableOnly [ 730.491451] 363840 pages reserved [ 730.512502] 0 pages cma reserved [ 730.533765] Out of memory (oom_kill_allocating_task): Kill process 26184 (syz-executor.1) score 0 or sacrifice child [ 730.602166] Killed process 26182 (syz-executor.1) total-vm:93348kB, anon-rss:7904kB, file-rss:35424kB, shmem-rss:0kB [ 730.693747] oom_reaper: reaped process 26182 (syz-executor.1), now anon-rss:7928kB, file-rss:1384kB, shmem-rss:0kB [ 730.838819] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 730.927812] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 730.950007] CPU: 0 PID: 26188 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0 [ 730.957908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 730.967258] Call Trace: [ 730.969848] dump_stack+0x1b2/0x283 [ 730.973476] dump_header+0x178/0x82f [ 730.977183] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 730.982281] ? ___ratelimit+0x2cd/0x522 [ 730.986256] oom_kill_process.cold+0x10/0xb18 [ 730.990749] out_of_memory+0xe3e/0x1190 [ 730.994703] ? oom_killer_disable+0x1c0/0x1c0 [ 730.999177] ? mutex_trylock+0x152/0x1a0 [ 731.003217] __alloc_pages_nodemask+0x23e1/0x2720 [ 731.008046] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 731.012867] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 731.017601] ? __lock_acquire+0x5fc/0x3f20 [ 731.021844] alloc_pages_vma+0xd2/0x6d0 [ 731.025802] __handle_mm_fault+0x25fa/0x4620 [ 731.030188] ? vm_insert_page+0x7c0/0x7c0 [ 731.034312] ? HARDIRQ_verbose+0x10/0x10 [ 731.038375] ? do_raw_spin_unlock+0x164/0x220 [ 731.042856] handle_mm_fault+0x391/0x860 [ 731.046900] __get_user_pages+0x445/0x11d0 [ 731.051120] ? follow_page_mask+0x18a0/0x18a0 [ 731.055598] ? lock_acquire+0x170/0x3f0 [ 731.059556] populate_vma_page_range+0x17b/0x210 [ 731.064292] __mm_populate+0x195/0x2c0 [ 731.068158] ? populate_vma_page_range+0x210/0x210 [ 731.073060] ? security_capable+0x88/0xb0 [ 731.077187] SyS_mlockall+0x3ff/0x520 [ 731.080962] ? SyS_munlock+0xf0/0xf0 [ 731.084652] do_syscall_64+0x1d5/0x640 [ 731.088522] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 731.093701] RIP: 0033:0x45e219 [ 731.096866] RSP: 002b:00007f8fc1afdc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 731.104550] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045e219 [ 731.111794] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 731.119048] RBP: 000000000119bfb0 R08: 0000000000000000 R09: 0000000000000000 [ 731.126310] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 731.133565] R13: 00007fff182d792f R14: 00007f8fc1afe9c0 R15: 000000000119bf8c [ 731.146921] Mem-Info: [ 731.150429] active_anon:155225 inactive_anon:1203513 isolated_anon:0 [ 731.150429] active_file:97 inactive_file:178 isolated_file:0 [ 731.150429] unevictable:48796 dirty:8 writeback:0 unstable:0 [ 731.150429] slab_reclaimable:14089 slab_unreclaimable:114695 [ 731.150429] mapped:53095 shmem:13119 pagetables:8103 bounce:0 [ 731.150429] free:26168 free_pcp:265 free_cma:0 [ 731.220878] Node 0 active_anon:607464kB inactive_anon:1217972kB active_file:704kB inactive_file:732kB unevictable:187024kB isolated(anon):0kB isolated(file):0kB mapped:66132kB dirty:0kB writeback:20kB shmem:51400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 626688kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 731.249999] Node 1 active_anon:13428kB inactive_anon:3596080kB active_file:328kB inactive_file:388kB unevictable:9296kB isolated(anon):0kB isolated(file):0kB mapped:148052kB dirty:0kB writeback:32kB shmem:1076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 731.278837] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:644kB active_file:0kB inactive_file:4kB unevictable:52kB writepending:0kB present:15992kB managed:15908kB mlocked:52kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 731.305695] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 731.310862] Node 0 DMA32 free:36668kB min:36200kB low:45248kB high:54296kB active_anon:607404kB inactive_anon:1217328kB active_file:128kB inactive_file:384kB unevictable:187060kB writepending:40kB present:3129332kB managed:2788160kB mlocked:187060kB kernel_stack:9120kB pagetables:12600kB bounce:0kB free_pcp:436kB local_pcp:0kB free_cma:0kB [ 731.368047] lowmem_reserve[]: 0 0 0 0 0 [ 731.381381] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 731.408174] lowmem_reserve[]: 0 0 0 0 0 [ 731.422200] Node 1 Normal free:54108kB min:53696kB low:67120kB high:80544kB active_anon:13428kB inactive_anon:3596080kB active_file:32kB inactive_file:396kB unevictable:9296kB writepending:36kB present:4194304kB managed:4128256kB mlocked:9296kB kernel_stack:4384kB pagetables:19808kB bounce:0kB free_pcp:68kB local_pcp:0kB free_cma:0kB [ 731.454043] lowmem_reserve[]: 0 0 0 0 0 [ 731.458110] Node 0 DMA: 10*4kB (M) 2*8kB (M) 1*16kB (M) 2*32kB (UM) 9*64kB (UM) 3*128kB (UM) 5*256kB (UM) 1*512kB (U) 2*1024kB (UM) 3*2048kB (M) 0*4096kB = 11080kB [ 731.473177] Node 0 DMA32: 71*4kB (UM) 127*8kB (U) 474*16kB (UE) 850*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36084kB [ 731.489143] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 731.507047] Node 1 Normal: 191*4kB (UME) 93*8kB (UME) 318*16kB (UME) 666*32kB (UME) 54*64kB (ME) 13*128kB (UM) 8*256kB (ME) 20*512kB (UME) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (U) = 53508kB [ 731.529375] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 731.541951] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 731.556428] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 731.601367] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 731.618341] 14388 total pagecache pages [ 731.626647] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 731.630867] 0 pages in swap cache [ 731.645001] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 731.650125] CPU: 1 PID: 26197 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 731.657996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 731.667339] Call Trace: [ 731.669930] dump_stack+0x1b2/0x283 [ 731.670757] Swap cache stats: add 0, delete 0, find 0/0 [ 731.673562] warn_alloc.cold+0x96/0x1cc [ 731.673574] ? zone_watermark_ok_safe+0x220/0x220 [ 731.687722] __alloc_pages_nodemask+0x2127/0x2720 [ 731.692565] ? lock_acquire+0x170/0x3f0 [ 731.696544] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 731.701390] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 731.706842] ? __mutex_unlock_slowpath+0x75/0x770 [ 731.711686] alloc_pages_current+0x155/0x260 [ 731.716091] ion_page_pool_alloc+0x118/0x1b0 [ 731.720489] ion_system_heap_allocate+0x133/0x8c0 [ 731.725329] ? ion_alloc+0x187/0x810 [ 731.729040] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 731.734485] ? ion_system_contig_heap_create+0x130/0x130 [ 731.739929] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 731.744944] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 731.749786] ion_alloc+0x204/0x810 [ 731.753328] ? ion_dma_buf_release+0x40/0x40 [ 731.757740] ? __might_fault+0x177/0x1b0 [ 731.761798] ion_ioctl+0xea/0x1ee [ 731.765269] ? ion_alloc.cold+0x3b/0x3b [ 731.769241] ? HARDIRQ_verbose+0x10/0x10 [ 731.773295] ? lock_downgrade+0x740/0x740 [ 731.777434] ? ion_alloc.cold+0x3b/0x3b [ 731.781402] do_vfs_ioctl+0x75a/0xff0 [ 731.785205] ? ioctl_preallocate+0x1a0/0x1a0 [ 731.789606] ? lock_downgrade+0x740/0x740 [ 731.790952] Free swap = 0kB [ 731.793750] ? __fget+0x225/0x360 [ 731.793762] ? do_vfs_ioctl+0xff0/0xff0 [ 731.804159] ? security_file_ioctl+0x83/0xb0 [ 731.808567] SyS_ioctl+0x7f/0xb0 [ 731.811929] ? do_vfs_ioctl+0xff0/0xff0 [ 731.815901] do_syscall_64+0x1d5/0x640 [ 731.819793] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 731.824974] RIP: 0033:0x45e219 [ 731.828152] RSP: 002b:00007f9f6fd95c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 731.835856] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 731.843122] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 731.848012] Total swap = 0kB [ 731.850404] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 731.850410] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 731.850416] R13: 00007ffdd833b2ef R14: 00007f9f6fd969c0 R15: 000000000119c034 [ 732.014972] 2097051 pages RAM [ 732.033832] 0 pages HighMem/MovableOnly [ 732.057728] 363840 pages reserved [ 732.075505] 0 pages cma reserved [ 732.092664] Out of memory (oom_kill_allocating_task): Kill process 26188 (syz-executor.3) score 0 or sacrifice child [ 732.168792] Killed process 26188 (syz-executor.3) total-vm:93348kB, anon-rss:9748kB, file-rss:36200kB, shmem-rss:0kB [ 732.221393] oom_reaper: reaped process 26188 (syz-executor.3), now anon-rss:9748kB, file-rss:1384kB, shmem-rss:0kB [ 732.249741] Mem-Info: [ 732.252192] active_anon:155197 inactive_anon:1204788 isolated_anon:0 [ 732.252192] active_file:6 inactive_file:36 isolated_file:5 [ 732.252192] unevictable:48718 dirty:0 writeback:0 unstable:0 [ 732.252192] slab_reclaimable:14089 slab_unreclaimable:114508 [ 732.252192] mapped:53920 shmem:13119 pagetables:8076 bounce:0 [ 732.252192] free:25089 free_pcp:92 free_cma:0 [ 732.286891] Node 0 active_anon:607340kB inactive_anon:1217972kB active_file:172kB inactive_file:156kB unevictable:184496kB isolated(anon):0kB isolated(file):20kB mapped:67044kB dirty:36kB writeback:0kB shmem:51400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 626688kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 732.316058] Node 1 active_anon:13380kB inactive_anon:3596080kB active_file:0kB inactive_file:28kB unevictable:5452kB isolated(anon):0kB isolated(file):0kB mapped:148632kB dirty:4kB writeback:0kB shmem:1076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 732.344552] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:644kB active_file:0kB inactive_file:16kB unevictable:52kB writepending:0kB present:15992kB managed:15908kB mlocked:52kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 732.371330] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 732.376407] Node 0 DMA32 free:40044kB min:36200kB low:45248kB high:54296kB active_anon:607292kB inactive_anon:1217328kB active_file:420kB inactive_file:560kB unevictable:184144kB writepending:36kB present:3129332kB managed:2788160kB mlocked:184144kB kernel_stack:9024kB pagetables:12480kB bounce:0kB free_pcp:904kB local_pcp:240kB free_cma:0kB [ 732.406872] lowmem_reserve[]: 0 0 0 0 0 [ 732.410863] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 732.436911] lowmem_reserve[]: 0 0 0 0 0 [ 732.440882] Node 1 Normal free:58052kB min:53696kB low:67120kB high:80544kB active_anon:13380kB inactive_anon:3596080kB active_file:4kB inactive_file:20kB unevictable:5452kB writepending:0kB present:4194304kB managed:4128256kB mlocked:5452kB kernel_stack:4352kB pagetables:19696kB bounce:0kB free_pcp:688kB local_pcp:4kB free_cma:0kB [ 732.470573] lowmem_reserve[]: 0 0 0 0 0 [ 732.474565] Node 0 DMA: 10*4kB (M) 2*8kB (M) 1*16kB (M) 2*32kB (UM) 9*64kB (UM) 3*128kB (UM) 5*256kB (UM) 1*512kB (U) 2*1024kB (UM) 3*2048kB (M) 0*4096kB = 11080kB [ 732.489465] Node 0 DMA32: 705*4kB (UME) 336*8kB (UM) 481*16kB (UME) 853*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 40500kB [ 732.503032] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 732.513788] Node 1 Normal: 263*4kB (UME) 339*8kB (UME) 461*16kB (UME) 666*32kB (UME) 54*64kB (ME) 13*128kB (UM) 8*256kB (ME) 20*512kB (UME) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (U) = 58052kB [ 732.530916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 732.539768] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 732.548370] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 732.558570] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 732.567612] 14445 total pagecache pages [ 732.571570] 0 pages in swap cache [ 732.575046] Swap cache stats: add 0, delete 0, find 0/0 [ 732.580391] Free swap = 0kB [ 732.583396] Total swap = 0kB [ 732.586481] 2097051 pages RAM [ 732.589575] 0 pages HighMem/MovableOnly [ 732.593532] 363840 pages reserved [ 732.597101] 0 pages cma reserved 18:29:29 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) read$rfkill(r0, 0x0, 0x0) 18:29:29 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:29:29 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7a203a2cff784e4107038f7de913a8cc557e51a9531e05a2b54d1d017590d0dee49e03fad82b5a3780a8", 0xce}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:29:30 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x1ff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:29:30 executing program 3: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) mlockall(0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:29:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14}, 0x14}, 0x300}, 0x0) [ 732.876293] ptrace attach of "/root/syz-executor.4"[26204] was attempted by "/root/syz-executor.4"[26207] 18:29:30 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:29:30 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x5, 0x0, 0x3}]}, &(0x7f00000003c0)='GPL\x00', 0x4, 0xa9, &(0x7f0000000400)=""/169, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 733.574206] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 733.662038] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 733.695316] CPU: 0 PID: 25892 Comm: syz-executor.2 Not tainted 4.14.215-syzkaller #0 [ 733.703214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 733.712561] Call Trace: [ 733.715150] dump_stack+0x1b2/0x283 [ 733.718778] dump_header+0x178/0x82f [ 733.722493] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 733.727597] ? ___ratelimit+0x2cd/0x522 [ 733.731569] oom_kill_process.cold+0x10/0xb18 [ 733.736068] out_of_memory+0xe3e/0x1190 [ 733.740045] ? oom_killer_disable+0x1c0/0x1c0 [ 733.744531] ? mutex_trylock+0x152/0x1a0 [ 733.748587] __alloc_pages_nodemask+0x23e1/0x2720 [ 733.753436] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 733.758294] alloc_pages_current+0x155/0x260 [ 733.762702] filemap_fault+0xea3/0x1980 [ 733.766683] ext4_filemap_fault+0x84/0xb0 [ 733.770822] __do_fault+0xfa/0x380 [ 733.774356] __handle_mm_fault+0x2497/0x4620 [ 733.778758] ? vm_insert_page+0x7c0/0x7c0 [ 733.782895] ? HARDIRQ_verbose+0x10/0x10 [ 733.786947] ? HARDIRQ_verbose+0x10/0x10 [ 733.791018] handle_mm_fault+0x391/0x860 [ 733.795073] __do_page_fault+0x549/0xad0 [ 733.799131] ? spurious_fault+0x640/0x640 [ 733.803274] ? do_page_fault+0x60/0x4f2 [ 733.807240] ? page_fault+0x2f/0x50 [ 733.810857] page_fault+0x45/0x50 [ 733.814298] RIP: 000e:0x32 [ 733.817143] RSP: 0bb8:00000000000b2f34 EFLAGS: 0000000c [ 734.373474] Mem-Info: [ 734.410957] active_anon:156663 inactive_anon:1203513 isolated_anon:0 [ 734.410957] active_file:24 inactive_file:5 isolated_file:0 [ 734.410957] unevictable:47966 dirty:0 writeback:0 unstable:0 [ 734.410957] slab_reclaimable:14130 slab_unreclaimable:115218 [ 734.410957] mapped:52987 shmem:13119 pagetables:8194 bounce:0 [ 734.410957] free:25106 free_pcp:0 free_cma:0 [ 734.604546] Node 0 active_anon:610212kB inactive_anon:1217968kB active_file:88kB inactive_file:8kB unevictable:188436kB isolated(anon):0kB isolated(file):0kB mapped:64532kB dirty:0kB writeback:0kB shmem:51396kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 626688kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 734.761109] Node 1 active_anon:16440kB inactive_anon:3596084kB active_file:8kB inactive_file:12kB unevictable:3428kB isolated(anon):0kB isolated(file):0kB mapped:147416kB dirty:0kB writeback:0kB shmem:1080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 734.805765] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:644kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 734.844770] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 734.849826] Node 0 DMA32 free:36136kB min:36200kB low:45248kB high:54296kB active_anon:610152kB inactive_anon:1217324kB active_file:96kB inactive_file:0kB unevictable:188108kB writepending:0kB present:3129332kB managed:2788160kB mlocked:188108kB kernel_stack:9056kB pagetables:12844kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 734.912383] lowmem_reserve[]: 0 0 0 0 0 [ 734.916441] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 734.947415] lowmem_reserve[]: 0 0 0 0 0 [ 734.951415] Node 1 Normal free:53532kB min:53696kB low:67120kB high:80544kB active_anon:16440kB inactive_anon:3596084kB active_file:8kB inactive_file:12kB unevictable:3428kB writepending:0kB present:4194304kB managed:4128256kB mlocked:3428kB kernel_stack:4544kB pagetables:19928kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 734.994269] lowmem_reserve[]: 0 0 0 0 0 [ 735.006707] Node 0 DMA: 17*4kB (UM) 2*8kB (M) 1*16kB (M) 1*32kB (M) 9*64kB (UM) 3*128kB (UM) 5*256kB (UM) 1*512kB (U) 2*1024kB (UM) 3*2048kB (M) 0*4096kB = 11076kB [ 735.092338] Node 0 DMA32: 52*4kB (UME) 54*8kB (UME) 523*16kB (UME) 847*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36112kB [ 735.145280] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 735.170246] Node 1 Normal: 174*4kB (UME) 15*8kB (UME) 621*16kB (UME) 669*32kB (UME) 54*64kB (ME) 12*128kB (M) 8*256kB (ME) 20*512kB (UME) 2*1024kB (UM) 1*2048kB (U) 0*4096kB = 53536kB [ 735.195178] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 735.204039] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 735.218061] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 735.226987] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 735.239311] 13514 total pagecache pages [ 735.243354] 0 pages in swap cache [ 735.262263] Swap cache stats: add 0, delete 0, find 0/0 [ 735.271855] Free swap = 0kB [ 735.277602] Total swap = 0kB [ 735.280636] 2097051 pages RAM [ 735.283723] 0 pages HighMem/MovableOnly [ 735.301197] 363840 pages reserved [ 735.304653] 0 pages cma reserved [ 735.312885] Out of memory (oom_kill_allocating_task): Kill process 25892 (syz-executor.2) score 0 or sacrifice child [ 735.333706] Killed process 26206 (syz-executor.2) total-vm:93348kB, anon-rss:156kB, file-rss:35904kB, shmem-rss:0kB [ 735.389556] oom_reaper: reaped process 26206 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 735.460755] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 735.536424] systemd-journal cpuset=/ mems_allowed=0-1 [ 735.570428] CPU: 0 PID: 25875 Comm: systemd-journal Not tainted 4.14.215-syzkaller #0 [ 735.578408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 735.587756] Call Trace: [ 735.590343] dump_stack+0x1b2/0x283 [ 735.593972] dump_header+0x178/0x82f [ 735.597684] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 735.602779] ? ___ratelimit+0x2cd/0x522 [ 735.606748] oom_kill_process.cold+0x10/0xb18 [ 735.611244] out_of_memory+0xe3e/0x1190 [ 735.615218] ? oom_killer_disable+0x1c0/0x1c0 [ 735.619727] ? mutex_trylock+0x152/0x1a0 [ 735.623784] __alloc_pages_nodemask+0x23e1/0x2720 [ 735.628634] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 735.633492] alloc_pages_current+0x155/0x260 [ 735.637894] filemap_fault+0xea3/0x1980 [ 735.641872] ext4_filemap_fault+0x84/0xb0 [ 735.646014] __do_fault+0xfa/0x380 [ 735.649552] __handle_mm_fault+0x2497/0x4620 [ 735.653956] ? vm_insert_page+0x7c0/0x7c0 [ 735.658095] ? HARDIRQ_verbose+0x10/0x10 [ 735.662146] ? HARDIRQ_verbose+0x10/0x10 [ 735.666208] handle_mm_fault+0x391/0x860 [ 735.670263] __do_page_fault+0x549/0xad0 [ 735.674322] ? spurious_fault+0x640/0x640 [ 735.678467] ? do_page_fault+0x60/0x4f2 [ 735.682435] ? page_fault+0x2f/0x50 [ 735.686052] page_fault+0x45/0x50 [ 735.689496] RIP: 1885a040:0x7fffcf5c5700 [ 735.693543] RSP: cf5c5740:000000000000000d EFLAGS: ffffffff [ 735.708117] Mem-Info: [ 735.716357] active_anon:156638 inactive_anon:1203513 isolated_anon:0 [ 735.716357] active_file:39 inactive_file:8 isolated_file:0 [ 735.716357] unevictable:47993 dirty:0 writeback:0 unstable:0 [ 735.716357] slab_reclaimable:14131 slab_unreclaimable:115213 [ 735.716357] mapped:52987 shmem:13119 pagetables:8194 bounce:0 [ 735.716357] free:25173 free_pcp:61 free_cma:0 [ 735.772433] Node 0 active_anon:610212kB inactive_anon:1217968kB active_file:136kB inactive_file:8kB unevictable:188544kB isolated(anon):0kB isolated(file):0kB mapped:64532kB dirty:0kB writeback:0kB shmem:51396kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 626688kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 735.937314] Node 1 active_anon:16340kB inactive_anon:3596084kB active_file:8kB inactive_file:8kB unevictable:3428kB isolated(anon):0kB isolated(file):0kB mapped:147416kB dirty:0kB writeback:0kB shmem:1080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 735.996709] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:644kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 736.023536] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 736.028661] Node 0 DMA32 free:36112kB min:36200kB low:45248kB high:54296kB active_anon:610152kB inactive_anon:1217324kB active_file:0kB inactive_file:52kB unevictable:188516kB writepending:0kB present:3129332kB managed:2788160kB mlocked:188516kB kernel_stack:9056kB pagetables:12752kB bounce:0kB free_pcp:116kB local_pcp:112kB free_cma:0kB [ 736.058761] lowmem_reserve[]: 0 0 0 0 0 [ 736.062753] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 736.088330] lowmem_reserve[]: 0 0 0 0 0 [ 736.092315] Node 1 Normal free:53632kB min:53696kB low:67120kB high:80544kB active_anon:16332kB inactive_anon:3596084kB active_file:8kB inactive_file:8kB unevictable:3428kB writepending:0kB present:4194304kB managed:4128256kB mlocked:3428kB kernel_stack:4448kB pagetables:19908kB bounce:0kB free_pcp:132kB local_pcp:132kB free_cma:0kB [ 736.134705] lowmem_reserve[]: 0 0 0 0 0 [ 736.138718] Node 0 DMA: 17*4kB (UM) 2*8kB (M) 1*16kB (M) 1*32kB (M) 9*64kB (UM) 3*128kB (UM) 5*256kB (UM) 1*512kB (U) 2*1024kB (UM) 3*2048kB (M) 0*4096kB = 11076kB [ 736.162453] Node 0 DMA32: 82*4kB (UME) 69*8kB (UME) 525*16kB (UME) 848*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36416kB [ 736.176148] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 736.186917] Node 1 Normal: 211*4kB (UME) 154*8kB (UME) 659*16kB (UME) 673*32kB (UME) 54*64kB (ME) 12*128kB (M) 8*256kB (ME) 20*512kB (UME) 2*1024kB (UM) 1*2048kB (U) 0*4096kB = 55532kB [ 736.203635] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 736.212502] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 736.221098] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 736.230017] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 736.278277] 14142 total pagecache pages [ 736.293718] 0 pages in swap cache [ 736.314959] Swap cache stats: add 0, delete 0, find 0/0 [ 736.322481] Free swap = 0kB 18:29:33 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:29:33 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31890, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4ac271c4, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 736.329021] Total swap = 0kB [ 736.344702] 2097051 pages RAM [ 736.347819] 0 pages HighMem/MovableOnly [ 736.351790] 363840 pages reserved [ 736.355321] 0 pages cma reserved [ 736.363891] Out of memory (oom_kill_allocating_task): Kill process 25875 (systemd-journal) score 0 or sacrifice child 18:29:33 executing program 1: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) r0 = getpgrp(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x220, 0x3}, 0x18240, 0x80000000000000, 0x0, 0x0, 0x0, 0x2, 0x800}, r0, 0x0, 0xffffffffffffffff, 0x2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:29:33 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x4, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa8000000}}, &(0x7f00000003c0)='GPL\x00', 0x4, 0xa9, &(0x7f0000000400)=""/169, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:29:33 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7a203a2cff784e4107038f7de913a8cc557e51a9531e05a2b54d1d017590d0dee49e03fad82b5a3780a8", 0xce}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:29:33 executing program 3: sendmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="2d241831a84bd42083eb744d8b9191b73cbe382fb8fc0a6b55dc432e19f4130a5c0719bb740a27933659b3060e71b70bcafd3787b061658a8c38dba6eed51b9464683423d852eb9f13bc25fcfd0b8068a8313c36cafc33744c23", 0x5a}, {&(0x7f0000000000)="37236f409c7c2f17016d19a699f10dd39af8d6e7387d6e944a6601a8ba49ecec87aebdd494e647e816c96cdd9d2bb323", 0x30}, {&(0x7f0000000140)="f6feb35430def3adc3d1dc0d9b301f4c9aada2e031f9d8aa933b3dc9d338fe793caddc2e5c8a4784071f15afca4281452e6f3d28720b5dfd97bf5170cca8efc17fb7ec51112d9b186c0e39f2abd75314db9834ef484e27e89fc1ea3d37f6dc58cf20f8cb060356dd810953603caeaa930d5832e849b8d4af445a77", 0x7b}, {&(0x7f00000001c0)="95a1b49f8bcf3acb85da621d11c92bfc38b30181c2e963739afa1bdc15e21742f35012f108e4fc2bebcbe618ab8c54cdc84aa7e07628ecc8c257bda4b5de372b231e598165bcc6bed1a0d5bc0d5066e63bb3d7e85c2fa7d30b73e0945e8f", 0x5e}, {&(0x7f0000000240)="23bab5e3c18202ada5ea3c5761425bdbfe9e59b88c353ea904e272e39565ca8971c1e007db9f30dd8f3be0cc7dba169a7a66326a3d2b0bfb80c59fb396e440ff3b60dfffbc3971aab3dbe0f539b9ed66ab16a9cb3c85d06faec103123e68df1040fda4874f27dc1d087aba3b77a26b49933716206c3726c6449bac0baa2ba77affb832c804e788ee2cdf5d1ed0b131b57ddb51c6d7d4b96acc2000f665e4302b5fc0d560fb7fa9e792190820fafae6fec7", 0xb1}, {&(0x7f0000000300)="3ae369c0c3e6c13d05aea3fb29d7bc8fa3b0fd88ad34b9e0fd955f7c559a4d80bcef15df7f9c4743519e663820c1af2bce1917af5ceb3567b4a97286504271b30d089bde548c490999e1f89d78711017142cb13f604f24c27784700a0d2ad37158cbaa95e3ff9e4365d3fa67a5fcd6e069ee9ac8363cbd19d26b815eeedaf603e02d8bcff04b61dcca893b7e43aba36835395f8048a3ed46e3ce07af40d8dc0e17bda78b514cccedc8d4b2c44de393175f87ebd117680af0ffc5179de4d5e4ec7066f048fba6a66d5f", 0xc9}], 0x6, &(0x7f0000000480), 0x0, 0xc000}, 0x4000000) mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 736.436932] Killed process 25875 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:1536kB 18:29:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, 0x0) 18:29:33 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:29:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16, 0x0, 0x400000, 0x5, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x11]}, 0x40) [ 736.653028] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 737.045309] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 737.192725] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 737.235388] CPU: 1 PID: 7979 Comm: syz-fuzzer Not tainted 4.14.215-syzkaller #0 [ 737.242851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 737.252184] Call Trace: [ 737.254771] dump_stack+0x1b2/0x283 [ 737.258380] dump_header+0x178/0x82f [ 737.262087] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 737.267168] ? ___ratelimit+0x2cd/0x522 [ 737.271121] oom_kill_process.cold+0x10/0xb18 [ 737.275598] out_of_memory+0xe3e/0x1190 [ 737.279566] ? oom_killer_disable+0x1c0/0x1c0 [ 737.284049] ? mutex_trylock+0x152/0x1a0 [ 737.288090] __alloc_pages_nodemask+0x23e1/0x2720 [ 737.292919] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 737.297751] alloc_pages_current+0x155/0x260 [ 737.302138] filemap_fault+0xea3/0x1980 [ 737.306100] ext4_filemap_fault+0x84/0xb0 [ 737.310227] __do_fault+0xfa/0x380 [ 737.313746] __handle_mm_fault+0x2497/0x4620 [ 737.318135] ? vm_insert_page+0x7c0/0x7c0 [ 737.322262] ? HARDIRQ_verbose+0x10/0x10 [ 737.326299] ? HARDIRQ_verbose+0x10/0x10 [ 737.330344] handle_mm_fault+0x391/0x860 [ 737.334386] __do_page_fault+0x549/0xad0 [ 737.338429] ? spurious_fault+0x640/0x640 [ 737.342557] ? do_page_fault+0x60/0x4f2 [ 737.346512] ? page_fault+0x2f/0x50 [ 737.350115] page_fault+0x45/0x50 [ 737.353543] RIP: 0000:0xb35591 [ 737.356711] RSP: 57ef07:000000c000265928 EFLAGS: 000000f1 [ 737.367032] Mem-Info: [ 737.380712] active_anon:156665 inactive_anon:1203512 isolated_anon:0 [ 737.380712] active_file:42 inactive_file:69 isolated_file:6 [ 737.380712] unevictable:47556 dirty:0 writeback:0 unstable:0 [ 737.380712] slab_reclaimable:14197 slab_unreclaimable:115335 [ 737.380712] mapped:52656 shmem:13119 pagetables:8270 bounce:0 [ 737.380712] free:25419 free_pcp:200 free_cma:0 [ 737.415958] Node 0 active_anon:610564kB inactive_anon:1217964kB active_file:72kB inactive_file:312kB unevictable:189144kB isolated(anon):0kB isolated(file):24kB mapped:63120kB dirty:0kB writeback:0kB shmem:51396kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 626688kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 737.456656] Node 1 active_anon:16096kB inactive_anon:3596084kB active_file:96kB inactive_file:464kB unevictable:1080kB isolated(anon):0kB isolated(file):0kB mapped:147704kB dirty:0kB writeback:0kB shmem:1080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 737.496085] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:644kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 737.524419] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 737.534607] Node 0 DMA32 free:35752kB min:36200kB low:45248kB high:54296kB active_anon:610700kB inactive_anon:1217320kB active_file:48kB inactive_file:532kB unevictable:188924kB writepending:0kB present:3129332kB managed:2788160kB mlocked:188924kB kernel_stack:8992kB pagetables:12952kB bounce:0kB free_pcp:1224kB local_pcp:508kB free_cma:0kB [ 737.602207] lowmem_reserve[]: 0 0 0 0 0 [ 737.611873] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 737.638559] lowmem_reserve[]: 0 0 0 0 0 [ 737.642742] Node 1 Normal free:54220kB min:53696kB low:67120kB high:80544kB active_anon:16412kB inactive_anon:3596084kB active_file:8kB inactive_file:20kB unevictable:1104kB writepending:0kB present:4194304kB managed:4128256kB mlocked:1104kB kernel_stack:4448kB pagetables:19996kB bounce:0kB free_pcp:868kB local_pcp:160kB free_cma:0kB [ 737.676206] lowmem_reserve[]: 0 0 0 0 0 [ 737.680771] Node 0 DMA: 17*4kB (UM) 2*8kB (M) 2*16kB (UM) 2*32kB (UM) 8*64kB (M) 3*128kB (UM) 5*256kB (UM) 1*512kB (U) 2*1024kB (UM) 3*2048kB (M) 0*4096kB = 11060kB [ 737.696431] Node 0 DMA32: 47*4kB (UME) 13*8kB (UME) 516*16kB (UE) 849*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35716kB [ 737.710729] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 737.723020] Node 1 Normal: 202*4kB (U) 70*8kB (ME) 684*16kB (ME) 672*32kB (UME) 55*64kB (UME) 13*128kB (UM) 8*256kB (ME) 19*512kB (ME) 1*1024kB (M) 1*2048kB (U) 0*4096kB = 53848kB [ 737.739894] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 737.753378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 737.762647] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 737.777937] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 737.789438] 13562 total pagecache pages [ 737.793509] 0 pages in swap cache [ 737.799422] Swap cache stats: add 0, delete 0, find 0/0 [ 737.808316] Free swap = 0kB [ 737.818133] Total swap = 0kB [ 737.823443] 2097051 pages RAM [ 737.859571] 0 pages HighMem/MovableOnly [ 737.880068] 363840 pages reserved [ 737.900207] 0 pages cma reserved [ 737.913192] Out of memory (oom_kill_allocating_task): Kill process 7979 (syz-fuzzer) score 0 or sacrifice child [ 737.947064] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 737.974289] Killed process 25891 (syz-executor.2) total-vm:85024kB, anon-rss:64kB, file-rss:52kB, shmem-rss:0kB [ 738.049752] oom_reaper: reaped process 25891 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 738.119186] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 738.195202] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 738.231363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 738.239426] CPU: 0 PID: 26252 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 738.247317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 738.256756] Call Trace: [ 738.259347] dump_stack+0x1b2/0x283 [ 738.262977] warn_alloc.cold+0x96/0x1cc [ 738.266955] ? zone_watermark_ok_safe+0x220/0x220 [ 738.270874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 738.271815] __alloc_pages_nodemask+0x2127/0x2720 [ 738.271833] ? lock_acquire+0x170/0x3f0 [ 738.287116] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 738.291965] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 738.297421] ? __mutex_unlock_slowpath+0x75/0x770 [ 738.302265] alloc_pages_current+0x155/0x260 [ 738.306672] ion_page_pool_alloc+0x118/0x1b0 [ 738.311078] ion_system_heap_allocate+0x133/0x8c0 [ 738.315916] ? ion_alloc+0x187/0x810 [ 738.319637] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 738.325070] ? ion_system_contig_heap_create+0x130/0x130 [ 738.330516] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 738.335516] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 738.340343] ion_alloc+0x204/0x810 [ 738.343869] ? ion_dma_buf_release+0x40/0x40 [ 738.348263] ? __might_fault+0x177/0x1b0 [ 738.352307] ion_ioctl+0xea/0x1ee [ 738.355739] ? ion_alloc.cold+0x3b/0x3b [ 738.359696] ? HARDIRQ_verbose+0x10/0x10 [ 738.363737] ? lock_downgrade+0x740/0x740 [ 738.367862] ? ion_alloc.cold+0x3b/0x3b [ 738.371818] do_vfs_ioctl+0x75a/0xff0 [ 738.375618] ? ioctl_preallocate+0x1a0/0x1a0 [ 738.380006] ? lock_downgrade+0x740/0x740 [ 738.384136] ? __fget+0x225/0x360 [ 738.387585] ? do_vfs_ioctl+0xff0/0xff0 [ 738.391542] ? security_file_ioctl+0x83/0xb0 [ 738.395933] SyS_ioctl+0x7f/0xb0 [ 738.399278] ? do_vfs_ioctl+0xff0/0xff0 [ 738.403234] do_syscall_64+0x1d5/0x640 [ 738.407106] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 738.412277] RIP: 0033:0x45e219 [ 738.415447] RSP: 002b:00007f9f6fd95c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 738.423156] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 738.430405] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 738.437655] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 738.444905] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 738.452155] R13: 00007ffdd833b2ef R14: 00007f9f6fd969c0 R15: 000000000119c034 [ 738.467199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 738.473933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 738.509496] Mem-Info: [ 738.516848] device bridge_slave_1 left promiscuous mode [ 738.519219] active_anon:156351 inactive_anon:1203509 isolated_anon:0 [ 738.519219] active_file:322 inactive_file:825 isolated_file:9 [ 738.519219] unevictable:57334 dirty:13 writeback:0 unstable:0 [ 738.519219] slab_reclaimable:14203 slab_unreclaimable:114997 [ 738.519219] mapped:38687 shmem:13115 pagetables:7925 bounce:0 [ 738.519219] free:26601 free_pcp:527 free_cma:0 [ 738.530125] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.627479] Node 0 active_anon:609852kB inactive_anon:1217952kB active_file:1712kB inactive_file:1628kB unevictable:227924kB isolated(anon):0kB isolated(file):140kB mapped:36544kB dirty:52kB writeback:0kB shmem:51380kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 626688kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 738.658044] device bridge_slave_0 left promiscuous mode [ 738.664257] Node 1 active_anon:15652kB inactive_anon:3596084kB active_file:104kB inactive_file:0kB unevictable:8812kB isolated(anon):0kB isolated(file):0kB mapped:117604kB dirty:0kB writeback:0kB shmem:1080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 738.664781] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.701380] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:644kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 738.750646] device veth1_macvtap left promiscuous mode [ 738.758282] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 738.779311] device veth0_macvtap left promiscuous mode [ 738.785763] Node 0 DMA32 free:35832kB min:36200kB low:45248kB high:54296kB active_anon:609888kB inactive_anon:1217308kB active_file:1116kB inactive_file:1776kB unevictable:227868kB writepending:52kB present:3129332kB managed:2788160kB mlocked:227868kB kernel_stack:8960kB pagetables:12144kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 738.816709] device veth1_vlan left promiscuous mode [ 738.821940] device veth0_vlan left promiscuous mode [ 738.828577] lowmem_reserve[]: 0 0 0 0 0 [ 738.832711] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 738.859195] lowmem_reserve[]: 0 0 0 0 0 [ 738.864066] Node 1 Normal free:53496kB min:53696kB low:67120kB high:80544kB active_anon:15952kB inactive_anon:3596084kB active_file:4kB inactive_file:260kB unevictable:9680kB writepending:0kB present:4194304kB managed:4128256kB mlocked:9680kB kernel_stack:4416kB pagetables:19552kB bounce:0kB free_pcp:572kB local_pcp:4kB free_cma:0kB [ 738.897470] lowmem_reserve[]: 0 0 0 0 0 [ 738.901572] Node 0 DMA: 17*4kB (UM) 2*8kB (M) 2*16kB (UM) 2*32kB (UM) 8*64kB (M) 3*128kB (UM) 5*256kB (UM) 1*512kB (U) 2*1024kB (UM) 3*2048kB (M) 0*4096kB = 11060kB [ 738.916822] Node 0 DMA32: 242*4kB (U) 136*8kB (U) 517*16kB (U) 848*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37464kB [ 738.930056] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 738.940810] Node 1 Normal: 274*4kB (U) 14*8kB (UE) 212*16kB (ME) 678*32kB (UME) 59*64kB (UME) 17*128kB (UM) 13*256kB (UME) 29*512kB (UME) 3*1024kB (UM) 0*2048kB 0*4096kB = 53496kB [ 738.957723] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 738.966620] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 738.975241] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 738.984068] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 738.992879] 16571 total pagecache pages [ 738.997189] 0 pages in swap cache [ 739.000801] Swap cache stats: add 0, delete 0, find 0/0 [ 739.006276] Free swap = 0kB [ 739.009442] Total swap = 0kB [ 739.012579] 2097051 pages RAM [ 739.018576] 0 pages HighMem/MovableOnly [ 739.023345] 363840 pages reserved [ 739.027797] 0 pages cma reserved [ 739.365591] syz-executor.5 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 739.379327] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 739.384498] CPU: 0 PID: 26239 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 739.392372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 739.401741] Call Trace: [ 739.404327] dump_stack+0x1b2/0x283 [ 739.407954] dump_header+0x178/0x82f [ 739.411671] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 739.416786] ? ___ratelimit+0x2cd/0x522 [ 739.420767] oom_kill_process.cold+0x10/0xb18 [ 739.425280] out_of_memory+0xe3e/0x1190 [ 739.429259] ? oom_killer_disable+0x1c0/0x1c0 [ 739.433755] ? mutex_trylock+0x152/0x1a0 [ 739.437820] __alloc_pages_nodemask+0x23e1/0x2720 [ 739.442677] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 739.447520] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 739.452303] ? __lock_acquire+0x5fc/0x3f20 [ 739.456547] alloc_pages_vma+0xd2/0x6d0 [ 739.460524] __handle_mm_fault+0x25fa/0x4620 [ 739.464930] ? vm_insert_page+0x7c0/0x7c0 [ 739.469074] ? HARDIRQ_verbose+0x10/0x10 [ 739.473127] ? do_raw_spin_unlock+0x164/0x220 [ 739.477642] handle_mm_fault+0x391/0x860 [ 739.481713] __get_user_pages+0x445/0x11d0 [ 739.485956] ? follow_page_mask+0x18a0/0x18a0 [ 739.490457] ? lock_acquire+0x170/0x3f0 [ 739.494435] populate_vma_page_range+0x17b/0x210 [ 739.499194] __mm_populate+0x195/0x2c0 [ 739.503082] ? populate_vma_page_range+0x210/0x210 [ 739.508008] ? security_capable+0x88/0xb0 [ 739.512274] SyS_mlockall+0x3ff/0x520 [ 739.516072] ? SyS_munlock+0xf0/0xf0 [ 739.519786] do_syscall_64+0x1d5/0x640 [ 739.523706] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 739.528897] RIP: 0033:0x45e219 [ 739.532081] RSP: 002b:00007f9f6fdb6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 739.539787] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045e219 [ 739.547053] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 739.554315] RBP: 000000000119bfb0 R08: 0000000000000000 R09: 0000000000000000 [ 739.561583] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 739.568856] R13: 00007ffdd833b2ef R14: 00007f9f6fdb79c0 R15: 000000000119bf8c [ 739.578474] Mem-Info: [ 739.580905] active_anon:156345 inactive_anon:1203513 isolated_anon:0 [ 739.580905] active_file:23 inactive_file:7 isolated_file:0 [ 739.580905] unevictable:60033 dirty:0 writeback:0 unstable:0 [ 739.580905] slab_reclaimable:14203 slab_unreclaimable:115091 [ 739.580905] mapped:38173 shmem:13111 pagetables:7829 bounce:0 [ 739.580905] free:25164 free_pcp:0 free_cma:0 [ 739.618040] Node 0 active_anon:609772kB inactive_anon:1217956kB active_file:84kB inactive_file:32kB unevictable:229580kB isolated(anon):0kB isolated(file):0kB mapped:33896kB dirty:0kB writeback:0kB shmem:51364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 626688kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 739.651261] Node 1 active_anon:15608kB inactive_anon:3596096kB active_file:8kB inactive_file:0kB unevictable:10552kB isolated(anon):0kB isolated(file):0kB mapped:118796kB dirty:0kB writeback:0kB shmem:1080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 739.711926] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:644kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 739.871265] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 739.926958] Node 0 DMA32 free:36116kB min:36200kB low:45248kB high:54296kB active_anon:609712kB inactive_anon:1217312kB active_file:44kB inactive_file:40kB unevictable:229552kB writepending:0kB present:3129332kB managed:2788160kB mlocked:229552kB kernel_stack:8992kB pagetables:11916kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 740.044418] lowmem_reserve[]: 0 0 0 0 0 [ 740.048463] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 740.104422] lowmem_reserve[]: 0 0 0 0 0 [ 740.108540] Node 1 Normal free:53576kB min:53696kB low:67120kB high:80544kB active_anon:15608kB inactive_anon:3602096kB active_file:732kB inactive_file:584kB unevictable:2952kB writepending:0kB present:4194304kB managed:4128256kB mlocked:2956kB kernel_stack:4256kB pagetables:19248kB bounce:0kB free_pcp:444kB local_pcp:0kB free_cma:0kB [ 740.203690] lowmem_reserve[]: 0 0 0 0 0 [ 740.219777] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 740.229404] Node 0 DMA: 17*4kB (UM) 2*8kB (M) 2*16kB (UM) 2*32kB (UM) 8*64kB (M) 3*128kB (UM) 5*256kB (UM) 1*512kB (U) 2*1024kB (UM) 3*2048kB (M) 0*4096kB = 11060kB [ 740.271826] Node 0 DMA32: 1212*4kB (U) 2046*8kB (U) 685*16kB (U) 853*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 59472kB [ 740.288036] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 740.295798] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 740.307876] systemd[1]: Stopping Flush Journal to Persistent Storage... 18:29:37 executing program 0: socketpair(0x93, 0x0, 0x0, &(0x7f0000000340)) [ 740.316110] Node 1 Normal: 555*4kB (UM) 211*8kB (UME) 587*16kB (UME) 679*32kB (UME) 59*64kB (UME) 17*128kB (UM) 13*256kB (UME) 29*512kB (UME) 3*1024kB (UM) 0*2048kB 0*4096kB = 62228kB [ 740.324057] systemd[1]: Stopped Journal Service. [ 740.334681] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 740.349370] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 18:29:37 executing program 3: mlockall(0x3) mlockall(0x7) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) clone(0xe200, &(0x7f0000002180)="949efa57022dc31ed9decbdf8f58016f098a119360df04c5868defa84aa9ef949d3c6aee402a13146280558cb02aa8ba1cd9ef171e6d80e0fdd75d909c1005b508ba08245799505c03afa3c1d99243835b89d7aa781173e0141d629c3936cd5c6b7fefa783633613c33ffcc9fe6cbd06beb24118e4e00ddebb43a645c384dee129234cbb657d54b8eeb6f1923c4e3c6166421dfec148a522859e7a0114ee8d553d6714683bb04d4c14d109022a8c55ad3887050fe766682c71a31e0cd6283d6355c7bded177134cbe5b83cac64f5d0d2f1da3261f6dc8e4f8770acdda6971b", &(0x7f0000002280), &(0x7f00000022c0), &(0x7f0000002300)="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") read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0xf9, 0x1, 0x3, 0x2, 0x0, 0xfffffffffffffffc, 0x400, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf800, 0x1, @perf_bp={&(0x7f0000000000), 0xe}, 0x0, 0x79, 0x100, 0x6, 0x9, 0x0, 0x1c42}, r0, 0x3, 0xffffffffffffffff, 0x2) [ 740.409630] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 740.412727] systemd[1]: Starting Journal Service... [ 740.431751] device hsr_slave_1 left promiscuous mode 18:29:37 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 740.456049] device hsr_slave_0 left promiscuous mode [ 740.471931] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 740.481571] team0 (unregistering): Port device team_slave_1 removed [ 740.501947] 19006 total pagecache pages 18:29:37 executing program 1: mlockall(0x3) mlockall(0xa) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0x2000000000000, 0xffffffffffffffff, 0xa) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 740.509647] 0 pages in swap cache [ 740.514598] Swap cache stats: add 0, delete 0, find 0/0 [ 740.532683] team0 (unregistering): Port device team_slave_0 removed [ 740.550078] Free swap = 0kB [ 740.556480] systemd[1]: Started Load/Save RF Kill Switch Status. [ 740.560232] Total swap = 0kB [ 740.583488] 2097051 pages RAM [ 740.593408] 0 pages HighMem/MovableOnly [ 740.610295] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 740.612049] 363840 pages reserved [ 740.645270] 0 pages cma reserved [ 740.656499] Out of memory (oom_kill_allocating_task): Kill process 26239 (syz-executor.5) score 0 or sacrifice child [ 740.677606] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 740.711276] Killed process 26239 (syz-executor.5) total-vm:81200kB, anon-rss:13340kB, file-rss:40236kB, shmem-rss:0kB [ 740.769896] oom_reaper: reaped process 26239 (syz-executor.5), now anon-rss:13424kB, file-rss:5420kB, shmem-rss:0kB [ 740.849986] systemd-journald[26270]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 740.882608] bond0 (unregistering): Released all slaves 18:29:38 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000600)={{0x2, 0xffffffffffffffff, 0x0, 0xee01, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 18:29:38 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7a203a2cff784e4107038f7de913a8cc557e51a9531e05a2b54d1d017590d0dee49e03fad82b5a3780a8", 0xce}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:29:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x1) close(r0) r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1143442, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendto$inet(r1, &(0x7f0000000140)="1c", 0x1, 0x200a090, 0x0, 0x0) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x800000000023) 18:29:38 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x720102, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 742.058241] syz-executor.3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 742.154450] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 742.159624] CPU: 0 PID: 26293 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0 [ 742.167498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 742.176845] Call Trace: [ 742.179434] dump_stack+0x1b2/0x283 [ 742.183063] dump_header+0x178/0x82f [ 742.186775] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 742.191878] ? ___ratelimit+0x2cd/0x522 [ 742.195855] oom_kill_process.cold+0x10/0xb18 [ 742.200355] out_of_memory+0xe3e/0x1190 [ 742.204332] ? oom_killer_disable+0x1c0/0x1c0 [ 742.208823] ? mutex_trylock+0x152/0x1a0 [ 742.212885] __alloc_pages_nodemask+0x23e1/0x2720 [ 742.217741] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 742.222596] ? __lock_acquire+0x5fc/0x3f20 [ 742.226831] alloc_pages_current+0x155/0x260 [ 742.231239] pte_alloc_one+0x15/0x100 [ 742.235039] do_fault_around+0x3f1/0x620 [ 742.239100] __handle_mm_fault+0x2b1f/0x4620 [ 742.243506] ? vm_insert_page+0x7c0/0x7c0 [ 742.247646] ? HARDIRQ_verbose+0x10/0x10 [ 742.251702] ? HARDIRQ_verbose+0x10/0x10 [ 742.255771] handle_mm_fault+0x391/0x860 [ 742.259831] __do_page_fault+0x549/0xad0 [ 742.263891] ? spurious_fault+0x640/0x640 [ 742.268045] ? do_page_fault+0x60/0x4f2 [ 742.272017] ? page_fault+0x2f/0x50 [ 742.275640] page_fault+0x45/0x50 [ 742.279089] RIP: 182d792f:0x7f8fc1afe9c0 [ 742.283140] RSP: 0005:000000000119bfd0 EFLAGS: 0119bf8c [ 742.314351] Bluetooth: hci0 command 0x0406 tx timeout [ 742.955490] Mem-Info: [ 742.994241] active_anon:158146 inactive_anon:1209108 isolated_anon:0 [ 742.994241] active_file:27 inactive_file:16 isolated_file:0 [ 742.994241] unevictable:60515 dirty:0 writeback:9 unstable:0 [ 742.994241] slab_reclaimable:14200 slab_unreclaimable:113257 [ 742.994241] mapped:39793 shmem:15159 pagetables:7886 bounce:0 [ 742.994241] free:25108 free_pcp:0 free_cma:0 [ 743.211912] Node 0 active_anon:615424kB inactive_anon:1228764kB active_file:112kB inactive_file:80kB unevictable:218964kB isolated(anon):0kB isolated(file):0kB mapped:38952kB dirty:0kB writeback:0kB shmem:58376kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 626688kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 743.439768] Node 1 active_anon:17160kB inactive_anon:3607684kB active_file:0kB inactive_file:8kB unevictable:23680kB isolated(anon):0kB isolated(file):0kB mapped:120668kB dirty:0kB writeback:0kB shmem:2260kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 743.683102] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:652kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 18:29:40 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x1) close(r0) r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1143442, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendto$inet(r1, &(0x7f0000000140)="1c", 0x1, 0x200a090, 0x0, 0x0) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x800000000023) [ 743.863143] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 743.924216] Node 0 DMA32 free:37552kB min:36200kB low:45248kB high:54296kB active_anon:615364kB inactive_anon:1243640kB active_file:4916kB inactive_file:9204kB unevictable:187516kB writepending:0kB present:3129332kB managed:2788160kB mlocked:187596kB kernel_stack:9024kB pagetables:12552kB bounce:0kB free_pcp:880kB local_pcp:184kB free_cma:0kB 18:29:41 executing program 1: mlockall(0x3) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(r0, &(0x7f00007fb000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 744.144702] lowmem_reserve[]: 0 0 0 0 0 [ 744.185348] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 744.310843] lowmem_reserve[]: 0 0 0 0 0 [ 744.338259] Node 1 Normal free:53264kB min:53696kB low:67120kB high:80544kB active_anon:17124kB inactive_anon:3611020kB active_file:972kB inactive_file:448kB unevictable:11516kB writepending:60kB present:4194304kB managed:4128256kB mlocked:11516kB kernel_stack:4224kB pagetables:19132kB bounce:0kB free_pcp:172kB local_pcp:48kB free_cma:0kB [ 744.468527] lowmem_reserve[]: 0 0 0 0 0 [ 744.472550] Node 0 DMA: 25*4kB (UM) 3*8kB (UM) 1*16kB (M) 1*32kB (M) 8*64kB (M) 3*128kB (UM) 5*256kB (UM) 1*512kB (U) 2*1024kB (UM) 3*2048kB (M) 0*4096kB = 11052kB [ 744.589563] Node 0 DMA32: 161*4kB (UM) 85*8kB (UM) 517*16kB (UM) 846*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36668kB [ 744.647548] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 744.719184] Node 1 Normal: 484*4kB (UM) 48*8kB (UME) 212*16kB (UME) 79*32kB (UME) 120*64kB (UME) 73*128kB (UM) 28*256kB (UME) 31*512kB (UME) 4*1024kB (UM) 1*2048kB (U) 0*4096kB = 54448kB [ 744.854420] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 744.863285] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 744.948088] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 745.016711] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 745.071170] 19883 total pagecache pages [ 745.117212] 0 pages in swap cache [ 745.133001] Swap cache stats: add 0, delete 0, find 0/0 [ 745.158456] Free swap = 0kB [ 745.171448] Total swap = 0kB [ 745.184497] 2097051 pages RAM [ 745.197821] 0 pages HighMem/MovableOnly [ 745.215654] 363840 pages reserved [ 745.230845] 0 pages cma reserved [ 745.258228] Out of memory (oom_kill_allocating_task): Kill process 26293 (syz-executor.3) score 0 or sacrifice child [ 745.314600] Killed process 26293 (syz-executor.3) total-vm:93612kB, anon-rss:28420kB, file-rss:34816kB, shmem-rss:0kB [ 745.767265] systemd[1]: Started Journal Service. [ 746.193727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.208292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.446071] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 746.458866] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 746.463638] CPU: 1 PID: 7976 Comm: syz-fuzzer Not tainted 4.14.215-syzkaller #0 [ 746.471063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 746.480395] Call Trace: [ 746.482965] dump_stack+0x1b2/0x283 [ 746.486580] dump_header+0x178/0x82f [ 746.490279] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 746.495362] ? ___ratelimit+0x2cd/0x522 [ 746.499325] oom_kill_process.cold+0x10/0xb18 [ 746.503806] out_of_memory+0xe3e/0x1190 [ 746.507766] ? oom_killer_disable+0x1c0/0x1c0 [ 746.512267] ? mutex_trylock+0x152/0x1a0 [ 746.516313] __alloc_pages_nodemask+0x23e1/0x2720 [ 746.521145] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 746.526025] alloc_pages_current+0x155/0x260 [ 746.530415] filemap_fault+0xea3/0x1980 [ 746.534401] ext4_filemap_fault+0x84/0xb0 [ 746.538536] __do_fault+0xfa/0x380 [ 746.542064] __handle_mm_fault+0x2497/0x4620 [ 746.546453] ? vm_insert_page+0x7c0/0x7c0 [ 746.550582] ? HARDIRQ_verbose+0x10/0x10 [ 746.554630] ? HARDIRQ_verbose+0x10/0x10 [ 746.558676] handle_mm_fault+0x391/0x860 [ 746.562719] __do_page_fault+0x549/0xad0 [ 746.566760] ? spurious_fault+0x640/0x640 [ 746.570887] ? do_page_fault+0x60/0x4f2 [ 746.574841] ? page_fault+0x2f/0x50 [ 746.578482] page_fault+0x45/0x50 [ 746.581914] RIP: eeffe0:0x8 [ 746.584820] RSP: 4e20:000000c00003df28 EFLAGS: 00438920 [ 746.589481] Mem-Info: [ 746.602995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.609812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.665470] active_anon:159175 inactive_anon:1212394 isolated_anon:0 [ 746.665470] active_file:41 inactive_file:1 isolated_file:0 [ 746.665470] unevictable:54659 dirty:0 writeback:0 unstable:0 [ 746.665470] slab_reclaimable:14183 slab_unreclaimable:114999 [ 746.665470] mapped:40646 shmem:15159 pagetables:7820 bounce:0 [ 746.665470] free:25228 free_pcp:0 free_cma:0 [ 746.803641] Node 0 active_anon:617920kB inactive_anon:1245696kB active_file:92kB inactive_file:0kB unevictable:198444kB isolated(anon):0kB isolated(file):0kB mapped:41620kB dirty:0kB writeback:0kB shmem:58380kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 626688kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 746.834685] Node 1 active_anon:18780kB inactive_anon:3603880kB active_file:64kB inactive_file:40kB unevictable:20192kB isolated(anon):0kB isolated(file):0kB mapped:120964kB dirty:0kB writeback:0kB shmem:2256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 746.834690] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:644kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 746.834713] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 746.834736] Node 0 DMA32 free:36168kB min:36200kB low:45248kB high:54296kB active_anon:617860kB inactive_anon:1245044kB active_file:0kB inactive_file:0kB unevictable:198444kB writepending:0kB present:3129332kB managed:2788160kB mlocked:198444kB kernel_stack:8832kB pagetables:11928kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 746.834754] lowmem_reserve[]: 0 0 0 0 0 [ 746.834776] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 746.834792] lowmem_reserve[]: 0 0 0 0 0 [ 746.834815] Node 1 Normal free:53692kB min:53696kB low:67120kB high:80544kB active_anon:18780kB inactive_anon:3603880kB active_file:108kB inactive_file:0kB unevictable:20148kB writepending:0kB present:4194304kB managed:4128256kB mlocked:20148kB kernel_stack:4320kB pagetables:19348kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 746.834833] lowmem_reserve[]: 0 0 0 0 0 [ 746.834855] Node 0 DMA: 25*4kB (UM) 3*8kB (UM) 1*16kB (M) 1*32kB (M) 8*64kB (M) 3*128kB (UM) 5*256kB (UM) 1*512kB (U) 2*1024kB (UM) 3*2048kB (M) 0*4096kB = 11052kB [ 746.834944] Node 0 DMA32: 88*4kB (UME) 2*8kB (UM) 542*16kB (UM) 850*32kB (UE) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36304kB [ 746.835014] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 746.835063] Node 1 Normal: 337*4kB (UM) 99*8kB (UME) 81*16kB (UME) 147*32kB (ME) 112*64kB (UME) 73*128kB (UM) 28*256kB (UME) 31*512kB (UME) 4*1024kB (UM) 1*2048kB (U) 0*4096kB = 53836kB [ 746.835152] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 746.835158] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 746.835164] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 746.835170] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 746.835174] 20659 total pagecache pages [ 746.835184] 0 pages in swap cache [ 746.835190] Swap cache stats: add 0, delete 0, find 0/0 [ 746.835193] Free swap = 0kB [ 746.835197] Total swap = 0kB [ 746.835203] 2097051 pages RAM [ 746.835207] 0 pages HighMem/MovableOnly [ 746.835211] 363840 pages reserved [ 746.835214] 0 pages cma reserved [ 746.835221] Out of memory (oom_kill_allocating_task): Kill process 7976 (syz-fuzzer) score 0 or sacrifice child [ 746.835289] Killed process 20211 (syz-executor.3) total-vm:85024kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 746.940074] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 746.961018] device bridge_slave_1 left promiscuous mode [ 747.914096] (null), order=0, oom_score_adj=0 [ 747.918658] systemd cpuset=/ mems_allowed=0-1 [ 747.923168] CPU: 1 PID: 1 Comm: systemd Not tainted 4.14.215-syzkaller #0 [ 747.930086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 747.939428] Call Trace: [ 747.942009] dump_stack+0x1b2/0x283 [ 747.945632] dump_header+0x178/0x82f [ 747.949343] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 747.954441] ? ___ratelimit+0x2cd/0x522 [ 747.958414] oom_kill_process.cold+0x10/0xb18 [ 747.962908] ? lock_downgrade+0x740/0x740 [ 747.967056] out_of_memory+0x2dc/0x1190 [ 747.971030] ? oom_killer_disable+0x1c0/0x1c0 [ 747.975522] ? mutex_trylock+0x152/0x1a0 [ 747.980192] __alloc_pages_nodemask+0x23e1/0x2720 [ 747.985042] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 747.989902] alloc_pages_current+0x155/0x260 [ 747.994310] filemap_fault+0xea3/0x1980 [ 747.998288] ext4_filemap_fault+0x84/0xb0 [ 748.002533] __do_fault+0xfa/0x380 [ 748.006074] __handle_mm_fault+0x2497/0x4620 [ 748.010484] ? vm_insert_page+0x7c0/0x7c0 [ 748.014631] ? HARDIRQ_verbose+0x10/0x10 [ 748.018688] ? HARDIRQ_verbose+0x10/0x10 [ 748.022757] handle_mm_fault+0x391/0x860 [ 748.026816] __do_page_fault+0x549/0xad0 [ 748.030877] ? spurious_fault+0x640/0x640 [ 748.035023] ? do_page_fault+0x60/0x4f2 [ 748.039079] ? page_fault+0x2f/0x50 [ 748.042702] page_fault+0x45/0x50 [ 748.046148] RIP: 3e034830:0x557fcea85850 [ 748.050196] RSP: cea85b88:0000557fccc15643 EFLAGS: 557fcea85c78 [ 748.517930] Mem-Info: [ 748.528961] active_anon:159581 inactive_anon:731321 isolated_anon:0 [ 748.528961] active_file:1170 inactive_file:7669 isolated_file:0 [ 748.528961] unevictable:27650 dirty:17 writeback:0 unstable:0 [ 748.528961] slab_reclaimable:14183 slab_unreclaimable:114856 [ 748.528961] mapped:34014 shmem:15159 pagetables:5148 bounce:0 [ 748.528961] free:526996 free_pcp:636 free_cma:0 [ 748.566602] Node 0 active_anon:619404kB inactive_anon:744284kB active_file:9716kB inactive_file:21844kB unevictable:110592kB isolated(anon):0kB isolated(file):0kB mapped:26856kB dirty:48kB writeback:0kB shmem:58380kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 456704kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 748.624736] Node 1 active_anon:18620kB inactive_anon:2180200kB active_file:4164kB inactive_file:132kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:100300kB dirty:20kB writeback:0kB shmem:2256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 748.677766] Node 0 DMA free:11512kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:184kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 748.730066] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 748.739380] Node 0 DMA32 free:602988kB min:36200kB low:45248kB high:54296kB active_anon:620544kB inactive_anon:737360kB active_file:23316kB inactive_file:9344kB unevictable:110592kB writepending:48kB present:3129332kB managed:2788160kB mlocked:110600kB kernel_stack:8064kB pagetables:8300kB bounce:0kB free_pcp:1208kB local_pcp:584kB free_cma:0kB [ 748.818857] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.835532] lowmem_reserve[]: 0 0 0 0 0 [ 748.839552] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 748.865819] device bridge_slave_0 left promiscuous mode [ 748.873708] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.891741] device veth1_macvtap left promiscuous mode [ 748.897242] device veth0_macvtap left promiscuous mode [ 748.912756] device veth1_vlan left promiscuous mode [ 748.918134] device veth0_vlan left promiscuous mode [ 748.943351] lowmem_reserve[]: 0 0 0 0 0 [ 748.953842] Node 1 Normal free:1528320kB min:53696kB low:67120kB high:80544kB active_anon:18620kB inactive_anon:2164900kB active_file:4164kB inactive_file:132kB unevictable:8kB writepending:20kB present:4194304kB managed:4128256kB mlocked:16kB kernel_stack:2656kB pagetables:11992kB bounce:0kB free_pcp:1392kB local_pcp:724kB free_cma:0kB [ 749.033323] lowmem_reserve[]: 0 0 0 0 0 [ 749.037480] Node 0 DMA: 24*4kB (UM) 16*8kB (UM) 10*16kB (M) 4*32kB (M) 8*64kB (M) 4*128kB (UM) 5*256kB (UM) 1*512kB (U) 2*1024kB (UM) 3*2048kB (M) 0*4096kB = 11520kB [ 749.069418] Node 0 DMA32: 9618*4kB (UME) 8945*8kB (UME) 5550*16kB (UME) 2813*32kB (UME) 988*64kB (UM) 313*128kB (UM) 89*256kB (UM) 23*512kB (M) 0*1024kB 63*2048kB (M) 11*4096kB (M) = 600784kB [ 749.123417] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 749.134247] Node 1 Normal: 13484*4kB (UME) 15556*8kB (UME) 14202*16kB (UME) 10535*32kB (UME) 6775*64kB (UME) 1787*128kB (UM) 300*256kB (UME) 67*512kB (UME) 8*1024kB (UM) 2*2048kB (U) 0*4096kB = 1528464kB [ 749.152955] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 749.162253] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 749.171206] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 749.184371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 749.193043] 25657 total pagecache pages [ 749.197293] device hsr_slave_1 left promiscuous mode [ 749.204209] 0 pages in swap cache [ 749.207673] Swap cache stats: add 0, delete 0, find 0/0 [ 749.213071] device hsr_slave_0 left promiscuous mode [ 749.218233] Free swap = 0kB [ 749.221242] Total swap = 0kB [ 749.226752] 2097051 pages RAM [ 749.230226] 0 pages HighMem/MovableOnly [ 749.234657] 363840 pages reserved [ 749.238108] 0 pages cma reserved [ 749.241468] Out of memory: Kill process 26301 (syz-executor.1) score 1010 or sacrifice child [ 749.245074] team0 (unregistering): Port device team_slave_1 removed [ 749.261533] team0 (unregistering): Port device team_slave_0 removed [ 749.272129] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 749.283381] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 749.357328] bond0 (unregistering): Released all slaves [ 750.906346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.913111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.920605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 750.927393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 750.935756] device bridge_slave_1 left promiscuous mode [ 750.941202] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.948730] device bridge_slave_0 left promiscuous mode [ 750.954315] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.962485] device veth1_macvtap left promiscuous mode [ 750.967914] device veth0_macvtap left promiscuous mode [ 750.973305] device veth1_vlan left promiscuous mode [ 750.978345] device veth0_vlan left promiscuous mode [ 751.050280] device hsr_slave_1 left promiscuous mode [ 751.057481] device hsr_slave_0 left promiscuous mode [ 751.072671] team0 (unregistering): Port device team_slave_1 removed [ 751.084375] team0 (unregistering): Port device team_slave_0 removed [ 751.092915] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 751.106255] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 751.131811] bond0 (unregistering): Released all slaves [ 751.793049] IPVS: ftp: loaded support on port[0] = 21 [ 751.894342] chnl_net:caif_netlink_parms(): no params data found [ 751.985027] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.991426] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.000324] device bridge_slave_0 entered promiscuous mode [ 752.007313] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.014361] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.021247] device bridge_slave_1 entered promiscuous mode [ 752.040846] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 752.049865] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 752.070062] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 752.077221] team0: Port device team_slave_0 added [ 752.082678] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 752.090698] team0: Port device team_slave_1 added [ 752.108292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.114560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.140563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.153382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.159617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.184915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.196133] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 752.204376] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 752.225318] device hsr_slave_0 entered promiscuous mode [ 752.230963] device hsr_slave_1 entered promiscuous mode [ 752.237723] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 752.244936] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 752.311668] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 752.348848] IPVS: ftp: loaded support on port[0] = 21 [ 752.463992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.496881] chnl_net:caif_netlink_parms(): no params data found [ 752.506790] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 752.517012] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 752.524052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 752.530912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 752.547882] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 752.554140] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.569251] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 752.576999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 752.585066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 752.592627] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.599056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.606566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 752.616388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 752.624128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 752.631926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 752.640289] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.646672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.657773] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 752.664698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 752.674740] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 752.687848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 752.698459] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 752.711175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 752.721423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 752.729437] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 752.739778] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 752.747375] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.755144] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.762074] device bridge_slave_0 entered promiscuous mode [ 752.769023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 752.777232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 752.785515] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.791848] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.799491] device bridge_slave_1 entered promiscuous mode [ 752.808330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 752.829606] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 752.840194] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 752.851430] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 752.862274] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 752.869320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 752.882267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 752.897072] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 752.904866] team0: Port device team_slave_0 added [ 752.910626] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 752.917968] team0: Port device team_slave_1 added [ 752.937862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.944178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.969651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.983192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.989429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 753.015232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.026437] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 753.034158] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 753.058420] device hsr_slave_0 entered promiscuous mode [ 753.064148] device hsr_slave_1 entered promiscuous mode [ 753.070553] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 753.079359] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 753.094351] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 753.102180] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 753.110141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 753.117428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 753.153858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.218821] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 753.251281] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 753.261958] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 753.271154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 753.280256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 753.301752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.310894] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 753.320231] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 753.327041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 753.334739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 753.345260] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 753.352173] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 753.359194] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 753.367530] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 753.376448] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.385999] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 753.395804] device veth0_vlan entered promiscuous mode [ 753.402256] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 753.409346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 753.416955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 753.424684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 753.432363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 753.440547] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.446995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.460090] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 753.460104] Bluetooth: hci1 command 0x0409 tx timeout [ 753.471843] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 753.480993] device veth1_vlan entered promiscuous mode [ 753.486936] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 753.493698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 753.500545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 753.507514] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 753.514885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 753.521868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 753.529996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 753.537652] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.544048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.551169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 753.562153] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 753.572119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 753.582490] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 753.596308] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 753.605829] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 753.615782] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 753.623392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 753.630961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 753.638938] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 753.647274] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 753.655961] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 753.663249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 753.670792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 753.678609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 753.686506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 753.697311] device veth0_macvtap entered promiscuous mode [ 753.703910] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 753.715554] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 753.725806] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 753.733252] device veth1_macvtap entered promiscuous mode [ 753.739356] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 753.748997] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 753.756735] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 753.764200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 753.771636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 753.779339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 753.787325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 753.798252] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 753.808583] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 753.815112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 753.828390] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 753.838110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 753.848755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.859612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 753.869358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.878534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 753.888533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.899143] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 753.906386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.919506] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 753.926269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 753.934722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 753.944794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 753.954939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.964331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 753.974640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.983875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 753.994659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.005030] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 754.011921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.019760] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 754.027127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 754.035572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 754.043508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 754.050184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 754.069066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 754.151897] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 754.168427] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 754.175908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 754.187930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 754.228565] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 754.239291] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 754.247259] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 754.257242] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 754.264418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 754.271931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 754.281679] device veth0_vlan entered promiscuous mode [ 754.291381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 754.299346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 754.308558] device veth1_vlan entered promiscuous mode [ 754.315162] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 754.325933] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 754.338276] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 754.347451] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 754.355924] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 754.363316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 754.370418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 18:29:51 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:29:51 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x1) close(r0) r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1143442, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendto$inet(r1, &(0x7f0000000140)="1c", 0x1, 0x200a090, 0x0, 0x0) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x800000000023) 18:29:51 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, 0x0, 0x0) sendmsg$AUDIT_GET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdc00, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x894}, 0x4000044) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000785000/0x1000)=nil, 0x1000}, 0x1}) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0xb7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x46a15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x9}, 0x0, 0x0, 0x0, 0xa5d67bd1564910a3, 0xdd41}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r4, 0x0) mlockall(0x1) mlockall(0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f00000000c0)) sendfile(0xffffffffffffffff, r4, &(0x7f0000000200)=0xffffffff80000001, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x80114000, &(0x7f00000000c0)="5ec40009488f270bca376b88d595a05322a8ef9fb6ff8109f5103b83e9cd9ae848a5fbac35ae7078bc2b00ffd581e47ddd9e57d32fa3200e02923cba56d003d8132091bf07d791b0a5e16540f39e0e060800b0f73cdbcbdeaa34f39f7f0a2fe344e43a8aac7909c14543c5625d2e6cc4c38a882b8da2261a", &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000280)="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") 18:29:51 executing program 1: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) clone(0x20200, &(0x7f00000000c0)="c01256ceac64f414943689aa64ca7f7e7b03c0a6e055166c942eac013c5d8caa226701a643870ca11b4542bca4ce929b1f34ae811fdf8a712c74e35f7e38709c3bbd8fdf5bd28eea50944b3e226a77b6e87b20d730b61862fe134343807bacd97aac65962dcb70284e58325cf72ea431acdb8f433f52fa174fc1b6c0c12f7502c8dcbd031452bdef68552969cee0dcf95679a4458a9a5edc5d18db766a623131d3be6758c78b88438fe817b544bec924d6580ac236c4f5be2f9582c421b8c7066e239565b4b86d819021483a8299cc00834d6d05406e2e058965055949", &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000200)="9d2138ee89e161f0d22329d7b9506c520be6254c6dd017bfa58e1f6d67ab29b14f58427e4122e0887ee4836d398c9dd8d4577aee122219be40a39efcf3c5ea9d0033808cc5b6d19a14b6d2caa2ed8bb888ce31322ec389578993090a86edfd52d99bf62d059064d993ac034b6dc898386df27e0a57d50702ace82728cd09c4a3a8d8e69317492fae37abd424e300b808bee3187f589a138e14e788fd12aaba63") r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f00000012c0)='task\x00') ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000000c0)) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f00000000c0)) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f00000002c0)={{r2}, "1caaf332e8ddb9d045d007851ab1dd2d874664f89875f51329061a9bc684a5986b17c3023363f8f87e7a60830bd4ba1999a5ea45d9cd98e5409023379ce1c64bb56af3e2a126561152497e83cdf2366935e768f97d5938e40f7aded89345c51f56c6c8c2e322422c1ac5b45be9bc1b3b0956378603cecf296b6091c5537d898ee36dab3a5bf45145af8f62bc3e7e3c9b037f6ccb22077a77a0b3ae79b0fa1cdf49767f8398d601a03fa09b28643680f646ee318b162d0d8cfb8a75ebecbfb5424f9210e601a4241d7543fdfa858fd2b8fd770c2b2a7204a2d68b5b3b67f23e8c65ea9c4db2a73583650145749d2c26092770aeba9dd9e2b879e5311480efb1121bf6d105e6ccc270c1d026750ee17bd73d0625b28046dc11f5c2a668f38b10bfea6b611b91526d28c96ef37dd1994ed401e6dd661e6377bbdd3dc4dad354afb2f2cc6ea7c324ab258fc677bacae1331fa6f1806ca2b3e95d0a4ba33b6b81240640224b39243718bf063aba9032c5fd1fbb58c0c7c07adb832fa15cb2b38f9e0971ec037a3d9ac54672c107042423f1385f3c3d6fba0684c9dd63223d164ae4dccf07421de3f1e969bfe785d7935ede077b157e2c30e799535b1589bd21cef00e2f10c09b18cdc5f34b2f01f69526dbc4d1cea057b205616da203449a472e83ae4812c2aabd52f99c4414be5e6f9afc87564269c2221e22339bbf630f67a621aabddab8ad0a2c2fb3882fb3c3f7f53ed50f12a3c42c46ff3e86e09b0398a63c9e1224f5dfa85d11a073a43ea823f34e9d2476fb375dcaeb4b6ff4836f06affe9377753fa2ca729f65ea6a52a44f5ee0ed850f1eca48de66b24fa41ab5c85d0e4fc99a2468495c832f2e11d0bdec48aeab4ca41ae4ae1a4a42c520d68014d85e69377e5bf42ab8735afe902567876ea938ae5c31dc48d68005d696f8a4e6eb6ea7a3531ede961118d7135ce7ef2f4cb31ac33801bf761bd5f8e39ebf191d597d34ce44d7624e7313b4190f7172793c09f9646796c36ae8f63154ddf555741eb4bf327d08fc4c044a10fd04c0821883c9872eb5dee4b237c99950f38d6f598b7a45fdd6c5029924be61d337e7c745e89c6799ee66cedb18b92b3dfd1ba082ad388d681ff9a5695164758283db20926b5f3a161f4f1f51adffe82bcee0a59b617fb387c1c4addf924d514db468209c2cb92503262fdc7bac2b184a1c7fd2940170fce4561405960a4f28837619289643354c55ef4ca5ae256d79f2d47ac449fd089916adc0ab361c4214b1b99da71962ac604f14e57957a2745197c26af9bc37209b041d03f501f3fb0fcc4e51c3851a0a159923bfc1927f6e2222b69852715352f43d0f7225f68fdbdc339d2ef2de1b78398d8e0b98dc2af6435675c2250117467be668e2d45d302e69f25ce21a78655714fb6fecc202d0cd28741f42d6cdfd5f998e70d3c1d69ba08981d6ca20cd3793f55a7c02f6e9337719775cf4089635f6cc78598a7f9ca10c045a3ff4b1c65e72095c0977abaacabe0679c61e224f1619a84dd8ca0c724b4a44fcea2c504097e9d6f5f183e7cc01c6e910b0c3cfc7bdd77600bcd33a08ab5fb348fedf77c8d2d77f0f871a404b9649d6081e79b1cfd3e248704bcef402c0c6e11d307d9eb7979a2c1012e51e762168b1093429a45617f623d58eb7afecf6075ebbe967ba579c25a5ab22e74bd468a64ab3e6031921936ad4afbd8c081d16af9d34f273859b20ff9f9858f3213f41d2a1fc091e42ca3d84b0b7e88236505084f5d37bdd4993aa50f5d818452aaadd3605ffea00c805e70cfa671a4e83d31ba8e0845b0f7123801823d18f2f4addab94842841efe8794b6c613a32de5169fde79129e8cf6e45a02f5b340f1df56793d261e24f9468d07b1da4866405c3b0f4dabb0b394937a5199e485d2bbd7c443ce59a378a5985dcbadde7adbbf41c0b8a639920f87809b764257165668bae52c1d69db1649e612500603f9f082d8392b00ccb5ae33f0c1d2e0ef968c06a20a202a8f1b0fdd618ff374b22edd4bfc4b1c372b6667155c5d10f3dfa4a046b325b170f517a3bbcfcbbc79809fcbf277e56249029c0cc0f9a5d57dfc0c3fb633b2e8b8fa171aeb6bd82a3b9164c5803293d8256835a9ab037a5769ed4c59d62d9d8c4a11bb83e749980b3465512db0d461ea6ed025350ae85e20ffca61e27dbe102423eca961cae80c57574563344b426d9b987c7225633ce03f284f9ef46cabb7b60413d07eb0dd1868b1c15c316e37a2696fcc4bdc46a0dcd27901914732608947d1c4fdb4d0f163505b22cb830ed9318e4c5667002aa27bd6fb03864afb2dd4f82a4dbf615000e3eae309dcbf0e5274f5fc631dca51565c0970abc4817b4d74e51b6859278058e2237d65bd132ccdd6cec47a5dcdd4d16b0e90e411471bb8cc577ad83662a401c83a8863db61d3e73ddbbcb575059b285cf9247a89117007315a0fa9947397ede6d3f9f500b92ef66fbf46cacd1ee4c6e551dd0c92832777a4aa6335fb7843f074f9b9a74637c4c4ed0df235d0520f8cb36a659f277fa27e2afc4f0a1e8576acf184ce3ab64ab30f9f7b2df72bd0aa24aa0c4140dae2665f467ab5a84d04099fe0b88a23ce2727c1b0cff5615b9e434a07bd681f42d08408e585c9bfbafbd8d6ff4da22f73362f6fa243d5ea1aaeabe33974e2984bce87aca3fac69eea75feb247229d0eb6a43011cdb3614cec3c58345af6e0964ace8e54dba21c0a981710de6e1dd3b91214eda64cc280cc1bedcafaba8c17f34878faf111951867f2f356329d18dd1bbfc088dc6162910cd7bde33f880a81aeba342cc9135b4587cbcefbbd78530d2e6b1be9a9224216c547c87469b0c7b38071076b39269a4e61caaa8074ca6a13fbe9ee8f6283ebd5c9ad10c4a10168c95e579cfaea866df319d99c21cb493cfaf56b19f797e0640eeb16ef7f1c726f80ca7a6c7e65e848654512174c824ed5ada6166b24fa376be2fb51f81773e74aa5d67d9454b55e0ae1b0e532d7eb554c22b94cf3b4f5f34455eef4c5d42707ef080411f0f43f93d6207f5be596a83a80ba45cc8710e5483c7738b44db2eef17f722c03135fe7c7d1c741bb9d19609d1cb84cd7b90630ce3b7e67d6deb7eda0d71f64f0448566fe2e977e80fcef2e4b05aed38657423c7f5dfb7f782da5d209982c6356bafe6dc49bb0406e37ced72a7b145e5db89691bf1fce53521d1557b6f8fed1bfd6696e9e4daa6fecc811569d3e3d70a3add531f7eb049c2faf8bfb736b5e2542f5974bc9feb41c3c41229cdb89dca4c02b8438c63313782f64c47ec47da77406db2138e1e00d935ebecd65f07c6481839962de253f133263f6ee31e41bd230293dd2c9a49aa1de6395e88c7da0f1ec1e426931b35030b212e4cf9b45baeb4a38ef71dfe2324e74746b62d5bbd629ce4ec4f093bac1dd5c50060a30b48bd1852822e657600de4c44cbded93a77ba330532ae510a7cd3322d00ee7212e052bfb1d5bc1ebb687fb2953afb5a73b530692ab2fb437aac418a22d2cd018932d9dfaa20e03e63735ecd5f576dffd049696d31786ccbc2135d89c8cb66c29ce1b016f2cec1d6243db1a566a62eb73659aa200e69d8ca6311f19c65db7b2cbe2a52175e9ae9ee6c70053079f85d2190450770de5dbc1f8be5afb8bca2f80aaa75d3886e8ecf497840bcadf371b224cd1c19c128ff084537af8a5555bc3188e2da40ce588eec2996873a0eddce46bb89bf817bc1eb8a056a58a644eff3846e9f5470f4979092cef9fb66a1a5e44b018d840b0566420875233e11d6553f387d5453c90943abd3ae8ec1006ef63ac9849165221f7f04d2d1dc342f936bc6431c4ee4d5210c4a7e0332b898e1855b7ea4c7d40be78fed241b5201c76efff37c6bd9643571883af6f580ddb437497c3d51aa95d636a81b2f34c22ae7e9113a855c16c76b2a9f6677e948df8878439961709367657d918231cdbadb232e13522509c5a750fa2556c048ad4c89d9ab34cd60dd18188b7cd2beb0e44b28fdb253557dba130b3ddc8e43996946e9b69c39906bb25bbbb864f7f8ea3a7525f1cfc4c62e935d0935bf8e95f12912568922d7d29a5cc5b14a0836e10ca747d0fd08d58dfef23ea1d5ab1b5f46a455996a09011d51273c1ebcf74fd31e322b32e998f12b374868fb4b7218569694241847c1421597841a9ce243dad9b5017ff426ad651de7c64f8925b35c316c1b865216cdca4e0af75e03960532dd9a3836c4b910d15433007689af75860a233e77e80eb5b521d8283b001a5ed74331a19db27a38a920489968ae29b8d681a635a0762bb5f014bfd4d0fa715d4db882661c11b679310c7451e62717534da1ed36398eb9690eac98bff6107bac21993bf4efd7acac79365792b7f8c2ac5c112123421887541f5226c624813cb5485a06adc6d0b18103fb2c4c6271ad8626ce1c28ec1b8c98fe7cfc873e7e189f9859f8031aaebc649d0490c4aedd10e5f1244e7cad774af565f71e43f9af8032673bea2b540e560c020cc7c7fac58c4ac6994c5feed8255a4a15f9536229244b7b5e8d451f796e04f3cbf872c4e8f5702f036f3d3c8ed2f5f420a7a647ca4b103d619cc4c1cb410a5139ee5f67529a269801d7959fd7699e5bd2e1b70b7beff27dfc2e62504e3e4eed33752bf24443c63285d1f3a10ca9b4012eb1adbc872d2e8aa75ddb6434e2f2f80d62a3a9f207bbdb50eb3afefe9611f8d6d3485ccdb6047868f4eefda78dace67985fdf56898b5a3161a18a9262029e9cbe1ed69eda0dedb91d44c0b2c2ac2d97c69ed324f20a32c32a2e5353f134be3738e94b2e00330b8f488f84c1b2edebd0842a3d738a36f5fe007458df35af032fee2a9dd3a59e2a3a20899a4aa299d4be3b2314e378b0e7601a431150aab8f9c6ebe2282b3298442b1d4c185e0a7ea2078a8565d97e9b3e06c879f9ca99c45d78d27be240ff12b513cabb60d3996a882f213e6481d7566708406f25e2cd44327a3602a7d234aeafab73303c7886f5ac9931b49b357ed08481491537a970f806385b890c7d4871d9fe88751e8c8ba0ed2e9f50036e23b8a5ff7c3e42e7b01ac400304c1a63ff83a99758921ffb80e68662cd64ad20c433d0f9ba76cd70c5d43cebea1c1fd0fc66ff9d4b7b8cb235fca493265499c92a6776082c674c337e21ad7995039e7a3ac6e5cae98bff6ecb8455858c475bcc93451d1a52ac18605843c8b56c738b452e5c4089bd5f71c399fd4278a9199a19fe6b5f4c5c64bb22cff49f071a9d7b38aecd4687caf6b02c78cae8ac9ba2094303a50525fdac1dd1178a5661d00e6d47537810dd970a24e580e3a4a6752d69b34f5e34f9fb8582e572ffc9fa0360c95c850dda15bb05b01b538d74fee6a5bef0a6e1184461622dbece2ba70c2e77e73d8a26967d55ab0cde89c024b5bf77c79bd44b7210e25c3dfbabdae2f79903ccb81f378ecfcbc85af708553e52e626b144166913b710a28f869566a3b48e3e1c5c2fec13a3efef8ba155a4b7643ea930541d5f9f5cac758c474d760f9fbe022d1c9c1311fbd5d2ba9a529db27393cf92cef5f87bf47e997bd8dfdb11b2ca0214373cdacbac593286914b26bb61153bca04c0888db23b47e1d3d63899f0878fa87427ec146c811d177dceed8c5595edc26d42e19070b62e4aa16137021195e6d019860f244db5726dc0bf036ada9c1d81f78e59662151efd96a84940382c112f10f417998557395d0357f57adf52d2844421d7c7df468dc566ac44d5"}) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x2, 0x85) 18:29:51 executing program 3: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x4, 0x86, 0x9, 0xb1, 0x0, 0x0, 0x8000, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xc04, 0x0, @perf_config_ext={0x80000001, 0x5}, 0x8, 0x5, 0x9, 0x0, 0x0, 0x3ff, 0xfffa}, 0xffffffffffffffff, 0x1, r0, 0x1) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:29:51 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 754.378419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 754.389059] device veth0_macvtap entered promiscuous mode [ 754.395501] Bluetooth: hci2 command 0x0409 tx timeout [ 754.410020] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 754.426906] device veth1_macvtap entered promiscuous mode [ 754.433297] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 754.453492] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready 18:29:51 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 754.491005] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 754.532809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 754.568969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.599698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 754.630943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.664036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 754.696570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.727673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 754.759911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.793674] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 754.800709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.857155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 754.868909] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 754.891212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 754.919068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 754.947254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 754.963323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.977001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 754.987522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.040735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 755.076465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.088505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 755.113336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.142613] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 755.165342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.197639] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 755.210047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 755.512889] Bluetooth: hci1 command 0x041b tx timeout [ 756.473354] Bluetooth: hci2 command 0x041b tx timeout [ 757.602052] Bluetooth: hci1 command 0x040f tx timeout [ 757.857819] IPVS: ftp: loaded support on port[0] = 21 [ 757.998643] chnl_net:caif_netlink_parms(): no params data found [ 758.057585] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.064035] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.070912] device bridge_slave_0 entered promiscuous mode [ 758.079205] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.085804] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.093330] device bridge_slave_1 entered promiscuous mode [ 758.111611] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 758.120507] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 758.141766] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 758.148942] team0: Port device team_slave_0 added [ 758.155603] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 758.163018] team0: Port device team_slave_1 added [ 758.180769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.187042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.212796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.224658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.230903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.256566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.267549] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 758.275155] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 758.298739] device hsr_slave_0 entered promiscuous mode [ 758.304483] device hsr_slave_1 entered promiscuous mode [ 758.310367] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 758.318570] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 758.394865] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.401245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.407921] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.414326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.449311] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 758.455426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.464360] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 758.474939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 758.482218] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.488842] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.498859] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 758.505080] 8021q: adding VLAN 0 to HW filter on device team0 [ 758.514026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 758.521565] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.527999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.538497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 758.546577] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.552969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.560335] Bluetooth: hci2 command 0x040f tx timeout [ 758.570193] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 758.579029] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 758.588876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 758.600565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 758.611136] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 758.622946] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 758.628983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 758.636225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 18:29:55 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7a203a2cff784e4107038f7de913a8cc557e51a9531e05a2b54d1d017590d0dee49e03fad82b5a3780a8", 0xce}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:29:55 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x1) close(r0) r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1143442, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendto$inet(r1, &(0x7f0000000140)="1c", 0x1, 0x200a090, 0x0, 0x0) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x800000000023) 18:29:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:29:55 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0}, 0xb7c24f6d) syz_mount_image$adfs(&(0x7f0000000000)='adfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000400)=[{&(0x7f0000000100)="41e863fdf2ee1ab184b3acf64659e08f5e2c60486f74d2b068c420fe56919739b3ca46d5cb917890ca96bed02fd4b2688d5f74e17c1cb0217e83a949eefb17040c532128e2a28ba6aa5269de2cfbe3392529f8fd4868e94fccf5", 0x5a, 0x5}, {&(0x7f0000000180)="b1dd4862316b35c657802958d251cb67bc015d92db7fa17d08acbc0452148d2eb9de440d3dd4085af7c57215934680d2428ac89fcb58d1635b6bc8e68f1a3636e931976f9cde2b61487c8d75e2752a043ded32370c3b37357d70cbc9c6b3cff6aa0b5e4ba3eb8902a0e5ec8929860f31f540448eb18f8df25acf9e002ea61d496ae1119c19e5", 0x86, 0xfff}, {&(0x7f0000000240)="4cde985c4591c34f68a378dbe348b550814d3736ac25f38b2b7202e0d74ff4a1ab1f8abfad4eefcfe95b029b61a249eafe6fb0a75e914fbf932234e3e5d4056fdc1c321c2f7c5e612ccce11ac8ab4d6fac458083063ffb6ade2cb323d92bc799f7853f1de56751fc2bfe389841980f259fb6656908706153a53631acc1d43b352c48eb1b475aeb819012cec414ebd892a160b1cc25eb9ff479dd01a79c2623dd4f5fd89ca138e67a32351fffaf0ec036df5a01d1b23688e5ce14", 0xba, 0x4}, {&(0x7f0000000300)="e3a3f62b", 0x4}, {&(0x7f0000000340)="e13183c2338d1811e6b52a799abf1c7943c44ef54db8f1d4701d1ac877db663f4b654f5a3d4afc4ca6735ca5a1637ce9fd6d2f3e7d3baebc68c3f6f19eb2d7e7e20b1e669fe340ad7b43276c98a8dba5ec1359aa681bd28f6f09284b80a65154b35c93167972fed04c73b49b14bfa00fad4eb16379af3208affa95d39697544dfc2aea62fa5ff2209126d6c88f", 0x8d, 0x2}], 0x20000, &(0x7f00000024c0)={[{'\')\t\x82()+&}]$'}, {'#-%'}, {}, {'*+@-(%}'}, {}, {'\x88$'}, {']%'}, {'-+^i{\xe1'}], [{@subj_role={'subj_role', 0x3d, '[(&'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@euid_eq={'euid', 0x3d, r0}}, {@obj_type={'obj_type', 0x3d, '%!!&:/^+\xa3\xae'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:29:55 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000000c0)={&(0x7f00005d4000/0x3000)=nil}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 758.672963] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 758.682577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 758.689250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 758.704536] 8021q: adding VLAN 0 to HW filter on device batadv0 18:29:56 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={0x0, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, @generic={0x0, "a75f30017b1aaf8d44e07ffd9b36"}, @phonet}) 18:29:56 executing program 0: shmget$private(0x0, 0x1000, 0xad6ab51bdaf36a90, &(0x7f000063e000/0x1000)=nil) 18:29:56 executing program 0: r0 = semget(0x1, 0x0, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x800}], 0x1) [ 758.972093] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 18:29:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x59) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) [ 759.063581] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 759.078172] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 759.102109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 759.110039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 759.196593] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 759.217907] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 759.235521] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 759.256961] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 759.271976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 759.279466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 759.307313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 759.321996] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 759.330531] device veth0_vlan entered promiscuous mode [ 759.357810] device veth1_vlan entered promiscuous mode [ 759.369306] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 759.380089] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 759.391258] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 759.400730] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 759.407681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 759.415398] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 759.422898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 759.430447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 759.440996] device veth0_macvtap entered promiscuous mode [ 759.448016] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 759.457119] device veth1_macvtap entered promiscuous mode [ 759.463521] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 759.472718] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 759.482523] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 759.491207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 759.501100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.510737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 759.520574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.530243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 759.539998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.549174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 759.558908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.568082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 759.577854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.587935] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 759.596216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.605310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 759.615097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.624405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 759.634182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.643358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 759.654128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.663307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 759.673580] Bluetooth: hci1 command 0x0419 tx timeout [ 759.675419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.688100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 759.697913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.708249] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 759.715310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.722295] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 759.729877] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 759.737209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 759.745032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 759.754121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 759.761842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 759.912303] Bluetooth: hci3 command 0x0409 tx timeout 18:29:57 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') 18:29:57 executing program 1: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x9, 0x40, 0x5c, 0x3, 0x0, 0x0, 0x12000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xad3, 0x2, @perf_config_ext={0x9, 0x100000000}, 0x80200, 0x7, 0x200, 0x9, 0xbf, 0x9, 0x4}, r1, 0x8, r0, 0x1) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:29:57 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x9, @ipv4={[], [], @broadcast}, 0x2}, @in={0x2, 0x4e33, @remote}], 0x2c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, 0x0, 0x0) sendmsg$AUDIT_GET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdc00, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x894}, 0x4000044) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb, 0x6}}, 0x0, 0x10, r1, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r4, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 760.642582] Bluetooth: hci2 command 0x0419 tx timeout 18:29:58 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7a203a2cff784e4107038f7de913a8cc557e51a9531e05a2b54d1d017590d0dee49e03fad82b5a3780a8", 0xce}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:29:58 executing program 3: ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='attr/sockcreate\x00') mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:29:58 executing program 0: semop(0x0, &(0x7f0000000000)=[{0x0, 0x101, 0x1000}], 0x1) 18:29:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x8001, 0x5, &(0x7f0000000500)=[{&(0x7f0000000100)="20936cf297ab0df6ecc6464085a73355a0cd27c630faac52171b4b745c93d9336bece843dca167e606a984f401d7fbc2ae385edb76684103b5bd42ac28512f3463041a2be35a02604d7c3d818eb6ac742604fcc5440093fee26ed0a2770153c74d5c938147811b1140847e9531acee4fbaf7ab5459f8fe9c16996172a97b2df5a91b2e4c0e229fd4b4b37711335692d45cd2411584bd5078c55ffc", 0x9b, 0x9}, {&(0x7f00000001c0)="3dca7a57771dbb1378b0b486a0fc83ada2f8d961190d330bb033b5da5c8891dfbacc19ec91fc40f172483e662fc1f650381ed8d8ac3eb01c8cfa6aa2a191a6728f958ffb404c3202c6db5735ef4090375395afaa628ca24710d9e3d5989f5ea879a34e3b988a63f765ab2ddab627b50e7e5c3c9be76c6fc9190a06d10794cf3ce94aad56fb32c30cac87c22979b9f2e6c5dd6767bcec679c817a975f3bff1a4f2db9b42212aaa539841560bc9afa0e3072f81a08e4c1987739f2a657359b", 0xbe, 0x7}, {&(0x7f0000000280)="120f2ea58065112795bb6942b438dcb7f5b0b1c1036b74e725c8e1e1f83b21d58d0821adcb08a760955f95a270b967459cc18489c26d8adcd7d406bba433577a20676e35670c8c7ae4e02126ce104bfd5129946a1a5631796daf8a405f7f2e843630fb9468d7fe5eb7c4870cff8aff", 0x6f, 0x9}, {&(0x7f0000000300)="0ea41784948c9cdd82f097939d28d4d74f56e595286a24cd2ae578ca21a08077c8bab73765bd1bd413038768ce71682d10a567805340c6f8e002d5c8813116b5b1cdd9388f7fa0ccc38b2ad697b71e343881b71f0c094fe6d08033f30ad17423209f34b8b37bd6a2f18e0a734f8221589a90e40f4d881d5223bb9c22051a19bcbd57ba8e7a2309a427ffd088dfb7be99d9add568784b9c1bfb63862d5aa301133e459281a3ac1f559fc3be9e35a6c3da6636965e27bc58617c248a4a4bced61c37dcc49a79c086cbbbc79319fe06187819ff03dbd1cc00a5c7555d8f3810ac695f54c74073a26e4f2b5d3ed5a82a9cc7458033645b", 0xf5, 0x7901}, {&(0x7f0000000400)="05f407d3f3d31a2229d38ba222e0724d88e301e9c5a9115a2efbb6f79089dd0062179ba3d3f2e47c4448a18c43d1540617c43e64da5e977cee213792190127428a9836473a1f59b28adc42c63bc9707ce472c42a70ad587879013b47639121c1d6c92829aea2994b271cb235b9e628a91260306c0b482b80057e3051842866f6f13aee8c88f1d659eaad1f9388b148f472e40cc90cd65fa58b946e99a1e9be8fa06e7d1252c3f8f3162d2793dae1652b8df8377947801386128c2a5a1faf3d22156651e68ce0717a7427cac4ce602e92b732eaf40c72da8faf7d600b52f1ac70aeb550", 0xe3, 0x81}], 0x400020, &(0x7f0000000580)={[{@nodiscard='nodiscard'}, {@nolazytime='nolazytime'}, {@norecovery='norecovery'}, {@minixdf='minixdf'}, {@max_batch_time={'max_batch_time', 0x3d, 0x1c0}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, '+'}}, {@fsname={'fsname'}}]}) mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x80, &(0x7f000074d000/0x4000)=nil) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) chdir(&(0x7f0000000600)='./file0\x00') mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:29:58 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000000c0)) dup(r3) 18:29:58 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:29:59 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='svcrdma_dma_map_rw_err\x00'}, 0x10) 18:29:59 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002880)={0xffffffffffffffff, 0x0, 0x0}, 0x20) [ 761.822706] print_req_error: I/O error, dev loop1, sector 0 18:29:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000180)=0x2, 0x4) 18:29:59 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x43}, @broadcast}}}], 0x20}}, {{&(0x7f0000000240)={0x2, 0x4e21, @private}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x2, 0x0) [ 761.991416] Bluetooth: hci3 command 0x041b tx timeout 18:29:59 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, 0x0}}], 0x1, 0x0) 18:29:59 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="81b0c1ae0010", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "a6d698", 0x8, 0x0, 0x0, @remote, @empty, {[@fragment]}}}}}, 0x0) [ 764.071099] Bluetooth: hci3 command 0x040f tx timeout 18:30:01 executing program 1: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) shmget$private(0x0, 0x4000, 0x80, &(0x7f000099e000/0x4000)=nil) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mlockall(0x4) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x0, 0x28, 0x0, 0x7, 0x0, 0x2, 0x50040, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x81, 0x81}, 0x8000, 0x7f, 0x3, 0x9, 0x4, 0x2, 0x4}, 0x0, 0x5, r0, 0xa) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:30:01 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7a203a2cff784e4107038f7de913a8cc557e51a9531e05a2b54d1d017590d0dee49e03fad82b5a3780a8", 0xce}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:30:01 executing program 0: bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000012c0)={0xffffffffffffffff, 0x0}, 0x20) 18:30:01 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:30:01 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:30:01 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000100)={{0x6, 0x4, 0x8, 0x3, 'syz1\x00', 0xffff}, 0x2, 0x20000000, 0x6, 0x0, 0x7, 0x1, 'syz0\x00', &(0x7f00000000c0)=['@:&!@\x00', '\x00', ',&\x00', '\\,+P\xa3\\^&+#/\'\x00', '$\\/\xf1-$-*\x00', '.+\x00', '##\x00'], 0x26, [], [0x4, 0x7ff, 0x4f6, 0x5]}) mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000580)=""/245) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000240)={0x9, 0x14, [0x9, 0x6, 0x8, 0x9, 0x3]}) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:30:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, &(0x7f0000000180)) 18:30:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000040)=0x200007, 0x4) 18:30:02 executing program 0: syz_emit_ethernet(0x78, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0xfffffffffffffdfb, 0x0, 0x0, @private0, @empty, {[@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@loopback]}], "68a51e547585a2e6fe8c3bfe3b95188425b204c13e6ebce9e5c81e93837f6c6e26c2165f206c0fc25ec9"}}}}}, 0x0) 18:30:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f0000000180)) 18:30:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='bridge_slave_1\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000001180)=[{{&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x1, 0x0) 18:30:02 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000080), 0x4) 18:30:02 executing program 0: process_vm_writev(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000100)=""/85, 0x51}, {&(0x7f0000000600)=""/203, 0xcb}, {&(0x7f0000000000)=""/169, 0xa9}, {&(0x7f0000000300)=""/236, 0xffffffd2}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000a40)=""/215, 0xd7}, {&(0x7f0000000540)=""/8, 0x8}, {&(0x7f0000000800)=""/167, 0xa7}, {&(0x7f0000000b40)=""/4091, 0xffb}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/47, 0x2f}, {&(0x7f0000000280)=""/100, 0x64}, {&(0x7f0000000400)}], 0xe, &(0x7f00000009c0), 0x0, 0x0) [ 766.152479] Bluetooth: hci3 command 0x0419 tx timeout 18:30:05 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7a203a2cff784e4107038f7de913a8cc557e51a9531e05a2b54d1d017590d0dee49e03fad82b5a3780a8", 0xce}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:30:05 executing program 1: mlockall(0x3) shmget$private(0x0, 0x3000, 0x420, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:30:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup2(r1, r0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) 18:30:05 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) mbind(&(0x7f00002a2000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000040)=0xde, 0x6906f79d, 0x1) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xb7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000}, r0, 0x2, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ba2000/0x4000)=nil, 0x4000) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x450000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x3, 0x7, 0x20, 0x4000, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) munlockall() 18:30:05 executing program 3: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, 0x0, 0x0) sendmsg$AUDIT_GET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdc00, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x894}, 0x4000044) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3ff}, [@call={0x85, 0x0, 0x0, 0x61}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @map={0x18, 0xb, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x16}, @generic={0x7f, 0xa, 0x0, 0xe083, 0x9}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0xcc, &(0x7f0000000140)=""/204, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x2, 0x65df, 0x5}, 0x10}, 0x78) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) 18:30:05 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:30:05 executing program 0: mq_open(&(0x7f0000000280)='/dev/ppp\x00', 0x0, 0x0, 0x0) 18:30:05 executing program 0: r0 = getpgrp(0xffffffffffffffff) ptrace$setsig(0x4203, r0, 0x0, 0x0) 18:30:05 executing program 0: r0 = socket(0xf, 0x3, 0x2) accept4$inet6(r0, 0x0, 0x0, 0x0) 18:30:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 18:30:05 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) mlockall(0x7) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:30:06 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, 0x0, 0x0) sendmsg$AUDIT_GET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdc00, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x894}, 0x4000044) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x38, 0x20, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) dup(r3) mmap(&(0x7f0000383000/0x4000)=nil, 0x4000, 0x3000005, 0x4c131, r0, 0x7aaee000) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:30:08 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7a203a2cff784e4107038f7de913a8cc557e51a9531e05a2b54d1d017590d0dee49e03fad82b5a3780a8", 0xce}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) 18:30:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$tun(r0, 0x0, 0x0) 18:30:08 executing program 3: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) mlockall(0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:30:08 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f000090b000/0x1000)=nil, 0x1000, 0x9) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x200200, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x300, 0x0) mmap$perf(&(0x7f0000550000/0x1000)=nil, 0x1000, 0x2, 0x12, r3, 0x2) 18:30:08 executing program 1: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) mremap(&(0x7f00003fc000/0x1000)=nil, 0x1000, 0xc00000, 0x3, &(0x7f00001e2000/0xc00000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:30:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:30:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=[@rights={{0x10}}], 0x10}, 0x0) 18:30:08 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) 18:30:08 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x9}, &(0x7f00000000c0)={0x0, 0xea60}) 18:30:08 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/mcfilter6\x00') read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) 18:30:08 executing program 0: exit(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x22040fb5, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) 18:30:08 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) mincore(&(0x7f00008b4000/0x3000)=nil, 0x3000, &(0x7f0000000100)=""/113) mlock(&(0x7f0000aa5000/0x3000)=nil, 0x3000) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) r3 = accept4$unix(r2, 0x0, &(0x7f0000001540), 0x80000) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f00000000c0)) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000001600)={{r4}, 0x0, 0x2, @inherit={0x58, &(0x7f0000001580)={0x0, 0x2, 0x4, 0x7fffffff, {0x30, 0x3, 0x5, 0x8, 0x581}, [0x80, 0x7]}}, @subvolid=0x1}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:30:11 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7a203a2cff784e4107038f7de913a8cc557e51a9531e05a2b54d1d017590d0dee49e03fad82b5a3780a8", 0xce}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) 18:30:11 executing program 3: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x1040400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:30:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000000040)={0x10, 0x1f, 0x1}, 0x10}], 0x1}, 0x0) 18:30:11 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x80, 0x10000) mmap(&(0x7f0000380000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r3, 0x873b000) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:30:11 executing program 1: mlockall(0x3) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000580)=""/245) shmat(r0, &(0x7f0000613000/0x2000)=nil, 0x5000) shmat(r1, &(0x7f0000098000/0x2000)=nil, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000b38000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000b20000/0x1000)=nil, 0x1000, 0x0, r2) pkey_mprotect(&(0x7f00006c5000/0x2000)=nil, 0x2000, 0x4, r2) shmat(r0, &(0x7f0000896000/0x4000)=nil, 0x3000) 18:30:11 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:30:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x891a, &(0x7f00000003c0)={'veth0_vlan\x00', @ifru_map}) 18:30:11 executing program 3: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x34, 0x19, 0x400, 0x70bd29, 0x25dfdbfe, {0x2, 0x80, 0x20, 0x2, 0xff, 0x3, 0xff, 0xa, 0x2000}, [@RTA_DST={0x8, 0x1, @remote}, @RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}, @RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 18:30:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001180)=[{{&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f00000000c0)="bd", 0x1}], 0x1}}], 0x1, 0x48854) 18:30:11 executing program 0: futex(&(0x7f00000000c0), 0x5, 0x0, 0x0, &(0x7f0000000080)=0x2, 0x2) 18:30:11 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r0, &(0x7f0000005b80)={0x0, 0x0, &(0x7f0000005ac0)=[{&(0x7f0000000740)=ANY=[@ANYBLOB='_'], 0x10}], 0x1}, 0x0) 18:30:11 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x9}, 0x0) 18:30:14 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7a203a2cff784e4107038f7de913a8cc557e51a9531e05a2b54d1d017590d0dee49e03fad82b5a3780a8", 0xce}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) 18:30:14 executing program 1: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:30:14 executing program 3: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:30:14 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000565000/0x2000)=nil, 0x2000, 0x0, 0x8010, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:30:14 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x43}, @broadcast}}}], 0x20}}], 0x1, 0x0) 18:30:14 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:30:14 executing program 0: process_vm_writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000440)=""/81, 0x51}, {&(0x7f0000000140)=""/203, 0xcb}, {&(0x7f0000000240)=""/165, 0xa5}, {&(0x7f0000000300)=""/236, 0xfffffffffffffe71}, {&(0x7f0000000400)=""/15, 0xf}, {&(0x7f0000000a40)=""/215, 0xd7}, {&(0x7f0000000540)=""/14, 0xe}], 0x7, &(0x7f00000009c0)=[{&(0x7f0000000600)=""/141, 0x8d}, {&(0x7f00000006c0)=""/240, 0xf0}, {&(0x7f00000007c0)=""/139, 0x8b}, {&(0x7f0000000880)=""/132, 0x84}, {&(0x7f0000000940)=""/124, 0x7c}], 0x5, 0x0) 18:30:14 executing program 0: syz_emit_ethernet(0x40, &(0x7f0000002400)={@local, @random="81b0c1ae0010", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "a6d698", 0xa, 0x0, 0x0, @private0, @empty, {[@routing={0x2c}], "c28e"}}}}}, 0x0) 18:30:14 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getpgrp(0xffffffffffffffff) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000940)='/dev/zero\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000940)='/dev/zero\x00', 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x1c, 0x1, 0x1, [r1, r1, r2]}}], 0x20}, 0x0) 18:30:14 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getpgrp(0xffffffffffffffff) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000940)='/dev/zero\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000940)='/dev/zero\x00', 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x1c, 0x1, 0x1, [r1, r1, r2]}}], 0x20}, 0x0) 18:30:14 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getpgrp(0xffffffffffffffff) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000940)='/dev/zero\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000940)='/dev/zero\x00', 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x1c, 0x1, 0x1, [r1, r1, r2]}}], 0x20}, 0x0) 18:30:14 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getpgrp(0xffffffffffffffff) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000940)='/dev/zero\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000940)='/dev/zero\x00', 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x1c, 0x1, 0x1, [r1, r1, r2]}}], 0x20}, 0x0) 18:30:17 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7a203a2cff784e4107038f7de913a8cc557e51a9531e05a2b54d1d017590d0dee49e03fad82b5a3780a8", 0xce}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 18:30:17 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xa}, 0x1c) sendmmsg$inet(r0, &(0x7f0000003000)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, 0x0}}, {{&(0x7f0000000500)={0x2, 0x4e22, @broadcast}, 0x10, 0x0}}], 0x2, 0x0) 18:30:17 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000804, 0x10000}, 0x12840, 0x0, 0x0, 0x1, 0x400000000000, 0x3f}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x800008, 0x0, 0x0, 0xffffffffffffffff}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x10800, 0x10) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x7f, 0x33}) r3 = dup(r1) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='f2fs_truncate_partial_nodes\x00', r3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x1, 0x5, 0xff, 0x20, 0x0, 0x4bed, 0x20, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f0000000140)}, 0x0, 0x8, 0x5, 0x3, 0x6164, 0x7, 0x5}, 0x0, 0xc, r4, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:30:17 executing program 3: mlockall(0x3) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(r0, &(0x7f000075b000/0x1000)=nil, 0x5000) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:30:17 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x140, 0x0) mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xb7, 0x0, 0x0, 0x8, 0x0, 0x6, 0x48004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x80000000000000a, 0xfffffffd, 0x2, 0x0, 0xffffffff}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000580)=""/245) ptrace$cont(0x27, r0, 0x1, 0x9) shmat(r2, &(0x7f0000a0e000/0x2000)=nil, 0x4000) ptrace$cont(0x27, 0x0, 0x7, 0x703) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) mlockall(0x2) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x2, 0x7, 0x6, 0x5, 0x0, 0x6, 0x100, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84, 0x2, @perf_config_ext={0x8, 0x10001}, 0x44000, 0x521f, 0x100, 0x6, 0x9, 0x3, 0x40}, 0x0, 0xb, r1, 0x9) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mlockall(0x3) 18:30:17 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:30:17 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00'}, 0x10) 18:30:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_tos_u8={{0x11}}], 0x18}, 0x0) 18:30:17 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)=@buf={0x6e, &(0x7f0000000080)="8bb36630fb703f7f7432f63b92fcdee7e47afbd4fd83d253616a5dc72814127387f4ea99d91f79074813d27678233cf26872b7e23da92aef81fd7e69e2a3aa22e525322085227e279c6c737d75078611f8120a562979e13fc66b7286e6edb021efbb4f07c0bb36f36c7f972f9312"}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000227bd7000ffdb4e5ed57e00000400018008000200060000000400030007000000"], 0x28}}, 0x9000) accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14, 0x1800) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, r2, 0x20, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x5cf1c25b25f623c5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004005}, 0x8004) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r5, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x7}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast1, @private2, 0x0, 0x6e, 0x0, 0x0, 0x1, 0x120252, r4}) fcntl$setflags(r3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ipvlan0\x00', 0x0}) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740)='/dev/bsg\x00', 0x846c3, 0x0) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, r8, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3a}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffe}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000000}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x4008051) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'sit0\x00', r6, 0x2, 0x30, 0x9, 0x7fffffff, 0x12, @mcast2, @remote, 0x10, 0x20, 0x4364, 0x8}}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xc, 0x80000001, 0x0, 0x217, 0x80, 0xffffffffffffffff, 0x1ff, [], r6, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x40) 18:30:17 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 18:30:17 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @random="81b0c1ae0010", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "a6d698", 0x8, 0x11, 0x0, @remote, @local, {[@dstopts]}}}}}, 0x0) 18:30:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800ed"], 0x58}}, 0x0) 18:30:20 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7a203a2cff784e4107038f7de913a8cc557e51a9531e05a2b54d1d017590d0dee49e03fad82b5a3780a8", 0xce}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 18:30:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000000)={'netpci0\x00', @ifru_mtu}) 18:30:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x201}, 0x14}}, 0x0) 18:30:20 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="dcd29735e2f4c9d426e2759d5c5278938d871853ffbdfa1d4215632de507caaadbad551f7e13c4e5847b2f9fc5932e0e1444847f90d83f46bf000c371ba4b5675cff56c422e7fee63a9dd2ba76076741863e0a5b409f698e0f50e771c238944f450fedd274aa89d9d0dfbbb5ad59600f052d4cb8590a38de9a7f8f7e3b6d69cfc1d8775e799953afe55bdc269d8a6e351c53b74733280cfd893a248577edda6aad4e8ed6d95b600723c3e0de6ec9bb742631fd0b33650704e7cf133aef57f66a5c822272218b0008ba90cfd1b7a4faac4bfc967e2a4ac804d4444d05d7c809b2f0d95732ab023fb4d3fbf70a0ffcca16d1", 0xf1}, {&(0x7f0000000000)="ba98108ec66ece08", 0x8}, {&(0x7f00000001c0)="5d09b319a7dda64e87521ccde0326fbf10269a9a9e71", 0x16}], 0x3, 0x3, 0x3) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000601000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000701000/0x2000)=nil) mlock2(&(0x7f000081e000/0x1000)=nil, 0x1000, 0x1) 18:30:20 executing program 3: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x40, 0x3, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x8000, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:30:20 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:30:20 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0x0) 18:30:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x6, 0x201}, 0x14}}, 0x0) 18:30:20 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x43}, @broadcast}}}], 0x20}}, {{&(0x7f0000000080)={0x2, 0x4e20, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @remote}}}], 0x20}}], 0x2, 0x0) 18:30:20 executing program 1: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3938700}}, 0x0) 18:30:20 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r0, &(0x7f0000005b80)={0x0, 0x0, &(0x7f0000005ac0)=[{&(0x7f0000002880)={0xeb4, 0x0, 0x0, 0x0, 0x0, "", [@generic="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"]}, 0xeb4}, {&(0x7f0000000180)={0x10}, 0x10}], 0x2}, 0x0) 18:30:20 executing program 1: r0 = getpgrp(0xffffffffffffffff) waitid(0x1, r0, 0x0, 0x8, 0x0) 18:30:23 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7a203a2cff784e4107038f7de913a8cc557e51a9531e05a2b54d1d017590d0dee49e03fad82b5a3780a8", 0xce}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 18:30:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000040)={'veth1_virt_wifi\x00', @ifru_mtu}) 18:30:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @local}}}], 0x38}, 0x0) 18:30:23 executing program 3: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:30:23 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r3, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) splice(r4, &(0x7f00000000c0)=0xffff, r0, &(0x7f0000000100)=0x7, 0xfffffffffffffff7, 0xb) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:30:23 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:30:23 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006140)={0x2020}, 0x2020) 18:30:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x24, 0x26, 0x1}, 0x24}}, 0x0) 18:30:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x9}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x4, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) 18:30:23 executing program 1: process_vm_writev(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000600)=""/203, 0xcb}, {&(0x7f0000000000)=""/169, 0xa9}, {&(0x7f0000000300)=""/236, 0xec}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000a40)=""/215, 0xd7}, {&(0x7f0000000540)=""/8, 0x8}, {&(0x7f0000000400)=""/167, 0xa7}, {&(0x7f0000000b40)=""/4091, 0xffb}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/47, 0x2f}, {&(0x7f0000000280)=""/100, 0x64}, {&(0x7f0000000180)}], 0x100000000000016f, &(0x7f00000009c0), 0x0, 0x0) 18:30:23 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x7800) 18:30:23 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f00000000c0)=""/136, 0x32, 0x88, 0x1}, 0x20) 18:30:26 executing program 0: add_key$keyring(&(0x7f0000000180)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) 18:30:26 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7a203a2cff784e4107038f7de913a8cc557e51a9531e05a2b54d1d017590d0dee49e03fad82b5a3780a8", 0xce}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 18:30:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0xc, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 18:30:26 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:30:26 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) madvise(&(0x7f000052b000/0x4000)=nil, 0x4000, 0xd) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:30:26 executing program 3: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, 0x0, 0x0) sendmsg$AUDIT_GET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3e8, 0x400, 0x70bd25, 0x25dfdc00, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x894}, 0x4000044) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40010548}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x8, 0x70bd29, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x804) 18:30:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x1, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x0) 18:30:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x18, 0x0, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) 18:30:26 executing program 0: add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) 18:30:26 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000780)='cmdline\x00') read$FUSE(r0, 0x0, 0x0) 18:30:26 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x5}]}) 18:30:26 executing program 0: mount$9p_fd(0xf0, 0x0, 0x0, 0x0, 0x0) [ 789.644458] syz-executor.3 invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 789.662222] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 789.673222] CPU: 1 PID: 27612 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0 [ 789.681110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 789.690458] Call Trace: [ 789.693045] dump_stack+0x1b2/0x283 [ 789.696673] dump_header+0x178/0x82f [ 789.700391] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 789.705490] ? ___ratelimit+0x2cd/0x522 [ 789.709463] oom_kill_process.cold+0x10/0xb18 [ 789.713965] out_of_memory+0xe3e/0x1190 [ 789.717945] ? oom_killer_disable+0x1c0/0x1c0 [ 789.722434] ? mutex_trylock+0x152/0x1a0 [ 789.726755] __alloc_pages_nodemask+0x23e1/0x2720 [ 789.731608] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 789.731815] syz-executor.5: [ 789.736444] ? page_evictable+0x11e/0x1f0 [ 789.736447] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 789.739456] ? lock_downgrade+0x740/0x740 [ 789.739476] alloc_pages_vma+0xd2/0x6d0 [ 789.739493] wp_page_copy+0x1f5/0x25c0 [ 789.739512] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 789.739520] ? __lock_acquire+0x5fc/0x3f20 [ 789.739533] do_wp_page+0x245/0x1db0 [ 789.760592] (null) [ 789.761608] ? __handle_mm_fault+0x129c/0x4620 [ 789.781664] syz-executor.5 cpuset= [ 789.784561] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 789.784578] __handle_mm_fault+0x234f/0x4620 [ 789.797169] ? vm_insert_page+0x7c0/0x7c0 [ 789.801308] ? HARDIRQ_verbose+0x10/0x10 [ 789.805359] ? do_raw_spin_unlock+0x164/0x220 [ 789.806063] / [ 789.809864] handle_mm_fault+0x391/0x860 [ 789.815340] mems_allowed=0-1 [ 789.815625] __get_user_pages+0x445/0x11d0 [ 789.822941] ? follow_page_mask+0x18a0/0x18a0 [ 789.827437] ? lock_acquire+0x170/0x3f0 [ 789.831409] populate_vma_page_range+0x17b/0x210 [ 789.836158] __mm_populate+0x195/0x2c0 [ 789.840040] ? populate_vma_page_range+0x210/0x210 [ 789.845056] ? security_capable+0x88/0xb0 [ 789.849199] SyS_mlockall+0x3ff/0x520 [ 789.852988] ? SyS_munlock+0xf0/0xf0 [ 789.856681] do_syscall_64+0x1d5/0x640 [ 789.860562] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 789.865739] RIP: 0033:0x45e219 [ 789.868913] RSP: 002b:00007f405f8b2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 789.876610] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045e219 [ 789.883863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 789.891119] RBP: 000000000119bfb0 R08: 0000000000000000 R09: 0000000000000000 [ 789.898380] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 789.905640] R13: 00007ffdd753e22f R14: 00007f405f8b39c0 R15: 000000000119bf8c [ 789.912911] CPU: 0 PID: 27609 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 789.920788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 789.930131] Call Trace: [ 789.932703] dump_stack+0x1b2/0x283 [ 789.936334] warn_alloc.cold+0x96/0x1cc [ 789.940291] ? zone_watermark_ok_safe+0x220/0x220 [ 789.945144] __alloc_pages_nodemask+0x2127/0x2720 [ 789.949972] ? lock_acquire+0x170/0x3f0 [ 789.953929] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 789.958769] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 789.964200] ? __mutex_unlock_slowpath+0x75/0x770 [ 789.969026] alloc_pages_current+0x155/0x260 [ 789.973415] ion_page_pool_alloc+0x118/0x1b0 [ 789.977813] ion_system_heap_allocate+0x133/0x8c0 [ 789.982635] ? ion_alloc+0x187/0x810 [ 789.986325] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 789.991774] ? ion_system_contig_heap_create+0x130/0x130 [ 789.997217] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 790.002228] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 790.007057] ion_alloc+0x204/0x810 [ 790.010582] ? ion_dma_buf_release+0x40/0x40 [ 790.014987] ? __might_fault+0x177/0x1b0 [ 790.019030] ion_ioctl+0xea/0x1ee [ 790.022477] ? ion_alloc.cold+0x3b/0x3b [ 790.026432] ? HARDIRQ_verbose+0x10/0x10 [ 790.030471] ? lock_downgrade+0x740/0x740 [ 790.034597] ? ion_alloc.cold+0x3b/0x3b [ 790.038551] do_vfs_ioctl+0x75a/0xff0 [ 790.042334] ? ioctl_preallocate+0x1a0/0x1a0 [ 790.046721] ? lock_downgrade+0x740/0x740 [ 790.050851] ? __fget+0x225/0x360 [ 790.054287] ? do_vfs_ioctl+0xff0/0xff0 [ 790.058251] ? security_file_ioctl+0x83/0xb0 [ 790.062638] SyS_ioctl+0x7f/0xb0 [ 790.065981] ? do_vfs_ioctl+0xff0/0xff0 [ 790.069936] do_syscall_64+0x1d5/0x640 [ 790.073810] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 790.078977] RIP: 0033:0x45e219 [ 790.082144] RSP: 002b:00007f9f6fdb6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 790.089835] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 790.097084] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 790.104330] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 790.111677] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 790.118924] R13: 00007ffdd833b2ef R14: 00007f9f6fdb79c0 R15: 000000000119bf8c [ 790.137688] Mem-Info: [ 790.140468] active_anon:209610 inactive_anon:1091624 isolated_anon:0 [ 790.140468] active_file:25 inactive_file:11 isolated_file:0 [ 790.140468] unevictable:62216 dirty:4 writeback:0 unstable:0 [ 790.140468] slab_reclaimable:13844 slab_unreclaimable:117649 [ 790.140468] mapped:63203 shmem:15173 pagetables:7665 bounce:0 [ 790.140468] free:25060 free_pcp:0 free_cma:0 [ 790.159071] Mem-Info: [ 790.180365] Node 0 active_anon:639088kB inactive_anon:1057512kB active_file:36kB inactive_file:36kB unevictable:235864kB isolated(anon):0kB isolated(file):0kB mapped:151164kB dirty:20kB writeback:0kB shmem:58392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 600064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 790.209177] active_anon:209610 inactive_anon:1091626 isolated_anon:0 [ 790.209177] active_file:14 inactive_file:14 isolated_file:0 [ 790.209177] unevictable:62237 dirty:8 writeback:0 unstable:0 [ 790.209177] slab_reclaimable:13844 slab_unreclaimable:117624 [ 790.209177] mapped:63222 shmem:15173 pagetables:7666 bounce:0 [ 790.209177] free:25201 free_pcp:0 free_cma:0 [ 790.260759] Node 1 active_anon:199352kB inactive_anon:3308992kB active_file:20kB inactive_file:20kB unevictable:13084kB isolated(anon):0kB isolated(file):0kB mapped:101724kB dirty:12kB writeback:0kB shmem:2300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 790.279585] Node 0 active_anon:639088kB inactive_anon:1057512kB active_file:36kB inactive_file:36kB unevictable:235864kB isolated(anon):0kB isolated(file):0kB mapped:151164kB dirty:20kB writeback:0kB shmem:58392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 600064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 790.371866] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:604kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 790.484053] Node 1 active_anon:199352kB inactive_anon:3308992kB active_file:20kB inactive_file:20kB unevictable:13084kB isolated(anon):0kB isolated(file):0kB mapped:101724kB dirty:12kB writeback:0kB shmem:2300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 790.507487] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 790.557198] Node 0 DMA32 free:36036kB min:36200kB low:45248kB high:54296kB active_anon:639028kB inactive_anon:1056908kB active_file:28kB inactive_file:20kB unevictable:235864kB writepending:20kB present:3129332kB managed:2788160kB mlocked:235864kB kernel_stack:8928kB pagetables:11492kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 790.568327] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:604kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 790.714039] lowmem_reserve[]: 0 0 0 0 0 [ 790.736287] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 790.766605] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 790.775974] lowmem_reserve[]: 0 0 0 0 0 [ 790.780114] Node 1 Normal free:53600kB min:53696kB low:67120kB high:80544kB active_anon:199352kB inactive_anon:3308992kB active_file:20kB inactive_file:20kB unevictable:13084kB writepending:12kB present:4194304kB managed:4128256kB mlocked:13084kB kernel_stack:4224kB pagetables:19168kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 790.806719] Node 0 DMA32 free:36036kB min:36200kB low:45248kB high:54296kB active_anon:639028kB inactive_anon:1056908kB active_file:20kB inactive_file:12kB unevictable:235864kB writepending:20kB present:3129332kB managed:2788160kB mlocked:235864kB kernel_stack:8928kB pagetables:11492kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 790.847990] lowmem_reserve[]: 0 0 0 0 0 [ 791.009407] lowmem_reserve[]: 0 0 0 0 0 [ 791.013434] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 791.015866] Node 0 DMA: 7*4kB (UME) 2*8kB (U) 3*16kB (UME) 3*32kB (UME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11068kB [ 791.066374] lowmem_reserve[]: 0 0 0 0 0 [ 791.067689] Node 0 DMA32: 2376*4kB (UME) 839*8kB (UME) 254*16kB (UE) 10*32kB (UE) 1*64kB (U) 0*128kB 16*256kB (UM) 22*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36024kB [ 791.086852] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 791.117926] Node 1 Normal free:53688kB min:53696kB low:67120kB high:80544kB active_anon:199352kB inactive_anon:3308992kB active_file:84kB inactive_file:0kB unevictable:13088kB writepending:0kB present:4194304kB managed:4128256kB mlocked:13088kB kernel_stack:4224kB pagetables:19168kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 791.121714] Node 1 Normal: 220*4kB (UM) 22*8kB (UM) 46*16kB (UME) 318*32kB (UME) 6*64kB (UM) 66*128kB (M) 128*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53568kB [ 791.174536] lowmem_reserve[]: 0 0 0 0 0 [ 791.185244] Node 0 DMA: 7*4kB (UME) 2*8kB (U) 3*16kB (UME) 3*32kB (UME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11068kB [ 791.196237] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 791.207903] Node 0 DMA32: 2376*4kB (UME) 839*8kB (UME) 254*16kB (UE) 10*32kB (UE) 1*64kB (U) 0*128kB 16*256kB (UM) 22*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36024kB [ 791.230673] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 791.232986] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 791.253012] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 791.257227] Node 1 Normal: 220*4kB (UM) 22*8kB (UM) 46*16kB (UME) 318*32kB (UME) 6*64kB (UM) 66*128kB (M) 128*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53568kB [ 791.274788] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 791.283837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 791.300015] 25806 total pagecache pages [ 791.302405] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 791.304039] 0 pages in swap cache [ 791.312673] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 791.312680] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 791.312686] 25806 total pagecache pages [ 791.329605] Swap cache stats: add 0, delete 0, find 0/0 [ 791.343910] 0 pages in swap cache [ 791.352030] Swap cache stats: add 0, delete 0, find 0/0 [ 791.352477] Free swap = 0kB [ 791.357463] Free swap = 0kB [ 791.362679] Total swap = 0kB [ 791.363502] Total swap = 0kB [ 791.366511] 2097051 pages RAM [ 791.382482] 2097051 pages RAM [ 791.382823] 0 pages HighMem/MovableOnly [ 791.385641] 0 pages HighMem/MovableOnly [ 791.391858] 363840 pages reserved [ 791.400506] 363840 pages reserved [ 791.404019] 0 pages cma reserved [ 791.404152] 0 pages cma reserved [ 791.415578] Out of memory (oom_kill_allocating_task): Kill process 27612 (syz-executor.3) score 0 or sacrifice child [ 791.426361] Killed process 27632 (syz-executor.3) total-vm:93480kB, anon-rss:28412kB, file-rss:34816kB, shmem-rss:0kB [ 791.537562] oom_reaper: reaped process 27632 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 791.910767] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 791.924110] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 791.929396] CPU: 1 PID: 27612 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0 [ 791.937274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 791.946632] Call Trace: [ 791.949222] dump_stack+0x1b2/0x283 [ 791.952851] dump_header+0x178/0x82f [ 791.956591] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 791.961689] ? ___ratelimit+0x2cd/0x522 [ 791.965661] oom_kill_process.cold+0x10/0xb18 [ 791.970162] out_of_memory+0xe3e/0x1190 [ 791.974150] ? oom_killer_disable+0x1c0/0x1c0 [ 791.978637] ? mutex_trylock+0x152/0x1a0 [ 791.982695] __alloc_pages_nodemask+0x23e1/0x2720 [ 791.987559] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 791.992399] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 791.997158] ? __lock_acquire+0x5fc/0x3f20 [ 792.001396] alloc_pages_vma+0xd2/0x6d0 [ 792.005371] __handle_mm_fault+0x25fa/0x4620 [ 792.009785] ? vm_insert_page+0x7c0/0x7c0 [ 792.013925] ? HARDIRQ_verbose+0x10/0x10 [ 792.017982] ? do_raw_spin_unlock+0x164/0x220 [ 792.022487] handle_mm_fault+0x391/0x860 [ 792.026561] __get_user_pages+0x445/0x11d0 [ 792.030802] ? follow_page_mask+0x18a0/0x18a0 [ 792.035297] ? lock_acquire+0x170/0x3f0 [ 792.039275] populate_vma_page_range+0x17b/0x210 [ 792.044034] __mm_populate+0x195/0x2c0 [ 792.047924] ? populate_vma_page_range+0x210/0x210 [ 792.052937] ? security_capable+0x88/0xb0 [ 792.057086] SyS_mlockall+0x3ff/0x520 [ 792.060879] ? SyS_munlock+0xf0/0xf0 [ 792.064590] do_syscall_64+0x1d5/0x640 [ 792.068481] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 792.073674] RIP: 0033:0x45e219 [ 792.076856] RSP: 002b:00007f405f8b2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 792.084572] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045e219 [ 792.091835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 792.099099] RBP: 000000000119bfb0 R08: 0000000000000000 R09: 0000000000000000 [ 792.106359] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 792.113621] R13: 00007ffdd753e22f R14: 00007f405f8b39c0 R15: 000000000119bf8c [ 792.139637] Mem-Info: [ 792.156645] active_anon:209606 inactive_anon:1088683 isolated_anon:0 [ 792.156645] active_file:39 inactive_file:10 isolated_file:0 [ 792.156645] unevictable:63529 dirty:0 writeback:0 unstable:0 [ 792.156645] slab_reclaimable:13844 slab_unreclaimable:117609 [ 792.156645] mapped:63222 shmem:15173 pagetables:7666 bounce:0 [ 792.156645] free:25121 free_pcp:0 free_cma:0 [ 792.213650] Node 0 active_anon:639076kB inactive_anon:1050972kB active_file:324kB inactive_file:272kB unevictable:235704kB isolated(anon):0kB isolated(file):0kB mapped:151664kB dirty:0kB writeback:0kB shmem:58392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 600064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 792.263063] Node 1 active_anon:199348kB inactive_anon:3307560kB active_file:20kB inactive_file:20kB unevictable:12012kB isolated(anon):0kB isolated(file):0kB mapped:101724kB dirty:0kB writeback:0kB shmem:2300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 792.296469] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:604kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 792.369903] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 792.375848] Node 0 DMA32 free:37744kB min:36200kB low:45248kB high:54296kB active_anon:639016kB inactive_anon:1061940kB active_file:10304kB inactive_file:12880kB unevictable:200928kB writepending:0kB present:3129332kB managed:2788160kB mlocked:200860kB kernel_stack:8928kB pagetables:11564kB bounce:0kB free_pcp:1056kB local_pcp:376kB free_cma:0kB [ 792.414790] lowmem_reserve[]: 0 0 0 0 0 [ 792.419676] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 792.449636] lowmem_reserve[]: 0 0 0 0 0 [ 792.453652] Node 1 Normal free:63308kB min:53696kB low:67120kB high:80544kB active_anon:199348kB inactive_anon:3301236kB active_file:8kB inactive_file:20kB unevictable:8088kB writepending:0kB present:4194304kB managed:4128256kB mlocked:8088kB kernel_stack:4128kB pagetables:19016kB bounce:0kB free_pcp:800kB local_pcp:88kB free_cma:0kB [ 792.484451] lowmem_reserve[]: 0 0 0 0 0 [ 792.488735] Node 0 DMA: 7*4kB (UME) 2*8kB (U) 3*16kB (UME) 3*32kB (UME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11068kB 18:30:29 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0xa}]}]}}, &(0x7f00000000c0)=""/136, 0x32, 0x88, 0x1}, 0x20) 18:30:29 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7a203a2cff784e4107038f7de913a8cc557e51a9531e05a2b54d1d017590d0dee49e03fad82b5a3780a8", 0xce}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 18:30:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002440)={0x18, 0x6, &(0x7f00000000c0)=@framed={{}, [@alu={0x7, 0x1}, @jmp={0x5, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe}, @jmp={0x7, 0x0, 0x7}]}, &(0x7f0000001380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 792.511406] Node 0 DMA32: 1311*4kB (UE) 1213*8kB (UME) 729*16kB (UME) 18*32kB (UME) 9*64kB (UM) 10*128kB (M) 28*256kB (UM) 22*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 47476kB [ 792.528521] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 792.542704] Node 1 Normal: 421*4kB (UM) 231*8kB (UM) 66*16kB (UME) 358*32kB (UME) 48*64kB (UM) 104*128kB (M) 128*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 65196kB [ 792.570287] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 792.579412] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 792.616249] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 792.626130] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 792.635012] 24960 total pagecache pages [ 792.639156] 0 pages in swap cache [ 792.642612] Swap cache stats: add 0, delete 0, find 0/0 [ 792.652236] Free swap = 0kB [ 792.655260] Total swap = 0kB [ 792.659876] 2097051 pages RAM [ 792.663346] 0 pages HighMem/MovableOnly [ 792.670971] 363840 pages reserved [ 792.674427] 0 pages cma reserved [ 792.680231] Out of memory (oom_kill_allocating_task): Kill process 27612 (syz-executor.3) score 0 or sacrifice child [ 792.691305] Killed process 27612 (syz-executor.3) total-vm:93480kB, anon-rss:19032kB, file-rss:56612kB, shmem-rss:0kB 18:30:29 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{0x800, 0x1, 0x1, 0x1000}, {0x6, 0x2, 0x72, 0xda02}, {0xfff8, 0x20, 0x6, 0x7}, {0xffe1, 0x3f, 0x4}, {0x4, 0x0, 0x6, 0x7}, {0x0, 0x0, 0x8, 0x200}, {0x8, 0x4, 0x5, 0x8000}]}) ioctl$int_out(r2, 0x2, &(0x7f0000000140)) r3 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='jbd2_submit_inode_data\x00', r3}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000004c0)=0x5) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x60, 0x2, 0x6, 0x5, 0xf56, 0x0, {0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x99}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x5cc}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040001}, 0x80) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) syz_open_procfs(r6, &(0x7f0000000200)='mountstats\x00') [ 792.711723] oom_reaper: reaped process 27612 (syz-executor.3), now anon-rss:19104kB, file-rss:21796kB, shmem-rss:0kB 18:30:29 executing program 3: mlockall(0x3) mlockall(0x2) r0 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000062000/0x1000)=nil) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) shmat(r0, &(0x7f0000bd5000/0x4000)=nil, 0x5000) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:30:29 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7a203a2cff784e4107038f7de913a8cc557e51a9531e05a2b54d1d017590d0dee49e03fad82b5a3780a8", 0xce}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 18:30:29 executing program 1: socketpair(0x2, 0x3, 0x79, &(0x7f0000000000)) 18:30:29 executing program 0: mount$9p_fd(0xf0ffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:30:29 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:30:30 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000080)={0x0, "21f62c8b7fccfabedae2efbdc4fa6c9a1afe214c6a2b6f455ccd02fab7058d619a7c30065b17026029f59ce3ec391e27bb56692421ed9b4833f095e85d845d67"}, 0x48, 0xfffffffffffffffd) keyctl$unlink(0x9, r0, r0) 18:30:30 executing program 0: r0 = semget$private(0x0, 0x4, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000440)=""/121) 18:30:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, 0x1, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @broadcast}}}]}]}, 0x2c}}, 0x0) 18:30:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_MARK_MASK={0x8}, @CTA_MARK={0x8}]}, 0x24}}, 0x0) 18:30:30 executing program 0: syz_open_procfs(0x0, &(0x7f0000001c80)='environ\x00') 18:30:30 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f00000000c0), 0x10) [ 793.507636] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 793.523540] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 793.546832] CPU: 1 PID: 26329 Comm: syz-executor.2 Not tainted 4.14.215-syzkaller #0 [ 793.554730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 793.564078] Call Trace: [ 793.566666] dump_stack+0x1b2/0x283 [ 793.570292] dump_header+0x178/0x82f [ 793.574000] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 793.579098] ? ___ratelimit+0x2cd/0x522 [ 793.583068] oom_kill_process.cold+0x10/0xb18 [ 793.587571] out_of_memory+0xe3e/0x1190 [ 793.591547] ? oom_killer_disable+0x1c0/0x1c0 [ 793.596034] ? mutex_trylock+0x152/0x1a0 [ 793.600088] __alloc_pages_nodemask+0x23e1/0x2720 [ 793.604938] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 793.609790] alloc_pages_current+0x155/0x260 [ 793.614195] filemap_fault+0xea3/0x1980 [ 793.618172] ext4_filemap_fault+0x84/0xb0 [ 793.622313] __do_fault+0xfa/0x380 [ 793.625851] __handle_mm_fault+0x2497/0x4620 [ 793.630255] ? vm_insert_page+0x7c0/0x7c0 [ 793.634394] ? HARDIRQ_verbose+0x10/0x10 [ 793.638445] ? HARDIRQ_verbose+0x10/0x10 [ 793.642509] handle_mm_fault+0x391/0x860 [ 793.646566] __do_page_fault+0x549/0xad0 [ 793.650740] ? spurious_fault+0x640/0x640 [ 793.654881] ? do_page_fault+0x60/0x4f2 [ 793.658858] ? page_fault+0x2f/0x50 [ 793.662601] page_fault+0x45/0x50 [ 793.666043] RIP: 000e:0x32 [ 793.668877] RSP: 0bb8:00000000000c1964 EFLAGS: 0000002a [ 793.669704] Mem-Info: [ 793.677542] active_anon:209631 inactive_anon:1088092 isolated_anon:0 [ 793.677542] active_file:6 inactive_file:24 isolated_file:0 [ 793.677542] unevictable:63441 dirty:0 writeback:0 unstable:0 [ 793.677542] slab_reclaimable:13826 slab_unreclaimable:118160 [ 793.677542] mapped:62330 shmem:15173 pagetables:7706 bounce:0 [ 793.677542] free:25170 free_pcp:4 free_cma:0 [ 793.728565] Node 0 active_anon:639224kB inactive_anon:1051132kB active_file:12kB inactive_file:84kB unevictable:235108kB isolated(anon):0kB isolated(file):0kB mapped:136760kB dirty:0kB writeback:0kB shmem:58392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 600064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 793.757378] Node 1 active_anon:199300kB inactive_anon:3301236kB active_file:12kB inactive_file:12kB unevictable:18756kB isolated(anon):0kB isolated(file):0kB mapped:112560kB dirty:4kB writeback:0kB shmem:2300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 793.785304] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:604kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 793.829540] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 793.834602] Node 0 DMA32 free:35912kB min:36200kB low:45248kB high:54296kB active_anon:639564kB inactive_anon:1050528kB active_file:40kB inactive_file:36kB unevictable:234784kB writepending:0kB present:3129332kB managed:2788160kB mlocked:234804kB kernel_stack:9088kB pagetables:11824kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 793.945008] lowmem_reserve[]: 0 0 0 0 0 [ 793.956173] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 793.998045] lowmem_reserve[]: 0 0 0 0 0 [ 794.002069] Node 1 Normal free:53584kB min:53696kB low:67120kB high:80544kB active_anon:199292kB inactive_anon:3301236kB active_file:12kB inactive_file:116kB unevictable:18816kB writepending:0kB present:4194304kB managed:4128256kB mlocked:18816kB kernel_stack:4128kB pagetables:19080kB bounce:0kB free_pcp:320kB local_pcp:120kB free_cma:0kB [ 794.170604] lowmem_reserve[]: 0 0 0 0 0 [ 794.174632] Node 0 DMA: 7*4kB (UME) 2*8kB (U) 3*16kB (UME) 3*32kB (UME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11068kB [ 794.217555] Node 0 DMA32: 2430*4kB (UME) 297*8kB (UME) 125*16kB (UME) 11*32kB (UE) 4*64kB (UM) 2*128kB (UM) 40*256kB (M) 22*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36464kB [ 794.250099] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 794.313980] Node 1 Normal: 222*4kB (UM) 62*8kB (UM) 49*16kB (UME) 352*32kB (UME) 3*64kB (UM) 83*128kB (M) 116*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53944kB [ 794.379576] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 794.418790] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 794.454071] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 794.491717] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 794.529573] 24881 total pagecache pages [ 794.533573] 0 pages in swap cache [ 794.556479] Swap cache stats: add 0, delete 0, find 0/0 [ 794.578048] Free swap = 0kB [ 794.581082] Total swap = 0kB [ 794.584094] 2097051 pages RAM [ 794.617035] 0 pages HighMem/MovableOnly [ 794.621026] 363840 pages reserved [ 794.624469] 0 pages cma reserved [ 794.668582] Out of memory (oom_kill_allocating_task): Kill process 26329 (syz-executor.2) score 0 or sacrifice child [ 794.720481] Killed process 27664 (syz-executor.2) total-vm:93348kB, anon-rss:1808kB, file-rss:35904kB, shmem-rss:0kB [ 794.784922] oom_reaper: reaped process 27664 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 794.887452] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 794.965410] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 794.995813] CPU: 1 PID: 7993 Comm: syz-fuzzer Not tainted 4.14.215-syzkaller #0 [ 795.003291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 795.012635] Call Trace: [ 795.015223] dump_stack+0x1b2/0x283 [ 795.018860] dump_header+0x178/0x82f [ 795.022573] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 795.027681] ? ___ratelimit+0x2cd/0x522 [ 795.031655] oom_kill_process.cold+0x10/0xb18 [ 795.036165] out_of_memory+0xe3e/0x1190 [ 795.040146] ? oom_killer_disable+0x1c0/0x1c0 [ 795.044635] ? mutex_trylock+0x152/0x1a0 [ 795.048690] __alloc_pages_nodemask+0x23e1/0x2720 [ 795.053539] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 795.058396] alloc_pages_current+0x155/0x260 [ 795.062807] filemap_fault+0xea3/0x1980 [ 795.066784] ext4_filemap_fault+0x84/0xb0 [ 795.070943] __do_fault+0xfa/0x380 [ 795.074480] __handle_mm_fault+0x2497/0x4620 [ 795.078884] ? vm_insert_page+0x7c0/0x7c0 [ 795.083024] ? HARDIRQ_verbose+0x10/0x10 [ 795.087077] ? HARDIRQ_verbose+0x10/0x10 [ 795.091140] handle_mm_fault+0x391/0x860 [ 795.095200] __do_page_fault+0x549/0xad0 [ 795.099259] ? spurious_fault+0x640/0x640 [ 795.103412] ? do_page_fault+0x60/0x4f2 [ 795.107381] ? page_fault+0x2f/0x50 [ 795.111002] page_fault+0x45/0x50 [ 795.114447] RIP: 0000:0xb35591 [ 795.117624] RSP: 02d6:000000c000f0fe40 EFLAGS: 000000f1 [ 795.144728] Mem-Info: [ 795.152706] active_anon:209590 inactive_anon:1088110 isolated_anon:0 [ 795.152706] active_file:27 inactive_file:0 isolated_file:0 [ 795.152706] unevictable:63758 dirty:0 writeback:0 unstable:0 [ 795.152706] slab_reclaimable:13805 slab_unreclaimable:118055 [ 795.152706] mapped:62362 shmem:15173 pagetables:7631 bounce:0 [ 795.152706] free:25012 free_pcp:0 free_cma:0 [ 795.196710] Node 0 active_anon:639068kB inactive_anon:1051204kB active_file:32kB inactive_file:44kB unevictable:235804kB isolated(anon):0kB isolated(file):0kB mapped:136808kB dirty:0kB writeback:0kB shmem:58392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 600064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 795.277444] Node 1 active_anon:199292kB inactive_anon:3301236kB active_file:0kB inactive_file:48kB unevictable:19336kB isolated(anon):0kB isolated(file):0kB mapped:112632kB dirty:0kB writeback:0kB shmem:2300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 795.342233] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:604kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 795.426561] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 795.431635] Node 0 DMA32 free:36176kB min:36200kB low:45248kB high:54296kB active_anon:639008kB inactive_anon:1050600kB active_file:12kB inactive_file:40kB unevictable:235804kB writepending:0kB present:3129332kB managed:2788160kB mlocked:235804kB kernel_stack:9024kB pagetables:11476kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 795.553540] lowmem_reserve[]: 0 0 0 0 0 [ 795.561789] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 795.626646] lowmem_reserve[]: 0 0 0 0 0 [ 795.630656] Node 1 Normal free:53316kB min:53696kB low:67120kB high:80544kB active_anon:199292kB inactive_anon:3301236kB active_file:80kB inactive_file:0kB unevictable:19336kB writepending:0kB present:4194304kB managed:4128256kB mlocked:19336kB kernel_stack:4128kB pagetables:19080kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 795.771926] lowmem_reserve[]: 0 0 0 0 0 [ 795.775954] Node 0 DMA: 7*4kB (UME) 2*8kB (U) 3*16kB (UME) 3*32kB (UME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11068kB [ 795.796382] Node 0 DMA32: 2458*4kB (UME) 291*8kB (UE) 125*16kB (UME) 10*32kB (UME) 5*64kB (UM) 1*128kB (U) 39*256kB (M) 22*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36176kB [ 795.859505] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 795.870528] Node 1 Normal: 221*4kB (UM) 63*8kB (UM) 49*16kB (UME) 352*32kB (UME) 1*64kB (U) 80*128kB (M) 116*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53436kB [ 795.885688] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 795.894630] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 795.903286] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 795.912214] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 795.931372] 25056 total pagecache pages [ 795.938706] 0 pages in swap cache [ 795.946587] Swap cache stats: add 0, delete 0, find 0/0 [ 795.957455] Free swap = 0kB [ 795.963801] Total swap = 0kB [ 795.971112] 2097051 pages RAM [ 795.979991] 0 pages HighMem/MovableOnly [ 795.996465] 363840 pages reserved [ 796.020256] 0 pages cma reserved [ 796.023673] Out of memory (oom_kill_allocating_task): Kill process 7993 (syz-fuzzer) score 0 or sacrifice child [ 796.097148] Killed process 26328 (syz-executor.2) total-vm:85024kB, anon-rss:1728kB, file-rss:548kB, shmem-rss:0kB 18:30:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8924, &(0x7f0000000280)={'team0\x00'}) 18:30:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x8}]}, 0x1c}}, 0x0) 18:30:33 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479", 0x34}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:30:33 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, 0x0, 0x0) sendmsg$AUDIT_GET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdc00, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x894}, 0x4000044) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, 0x0, 0x0) sendmsg$AUDIT_GET(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdc00, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x894}, 0x4000044) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000389000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="6565f30f09c4e32d0c1809660ffce0b8000000000f23d00f21f8353000000b0f23f866b856008ed00f019d00380000660f3882b14287000066baf80cb8deeded87ef66bafc0c66edc4e1675cc2b8010000000f01c1", 0x55}], 0x1, 0x8, &(0x7f0000000180), 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r6, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:30:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)={0x0, 0xfe, [], [@generic={0x0, 0x7ef, "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"}]}, 0x800) 18:30:33 executing program 3: mlockall(0x3) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:30:33 executing program 1: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) select(0x40, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)={0x81}, &(0x7f0000000280)={0x0, r0/1000+10000}) 18:30:33 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) 18:30:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@mpls_getnetconf={0x14, 0x52, 0x1011}, 0x14}}, 0x0) 18:30:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x8010, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) 18:30:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b8}, &(0x7f0000000080)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:30:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0xfb}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b8}, &(0x7f0000000080)={0x0, r4+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) [ 797.299531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 797.326171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 797.385274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 797.426836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.471598] device bridge_slave_1 left promiscuous mode [ 797.515784] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.560924] device bridge_slave_0 left promiscuous mode [ 797.597695] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.677048] device veth1_macvtap left promiscuous mode [ 797.687696] device veth0_macvtap left promiscuous mode [ 797.703801] device veth1_vlan left promiscuous mode 18:30:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0xfb}, 0x0) getpid() socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000200)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001300)=""/4127, 0x141b}], 0x200000000000004b) readv(r0, &(0x7f0000000580), 0x3c1) [ 797.728006] device veth0_vlan left promiscuous mode [ 798.080753] device hsr_slave_1 left promiscuous mode [ 798.103510] device hsr_slave_0 left promiscuous mode [ 798.211079] team0 (unregistering): Port device team_slave_1 removed [ 798.260084] team0 (unregistering): Port device team_slave_0 removed [ 798.277329] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 798.290366] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 798.343819] bond0 (unregistering): Released all slaves [ 798.885966] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 798.952059] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 799.000574] CPU: 0 PID: 26327 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 799.008470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 799.017816] Call Trace: [ 799.020410] dump_stack+0x1b2/0x283 [ 799.024034] dump_header+0x178/0x82f [ 799.027743] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 799.032969] ? ___ratelimit+0x2cd/0x522 [ 799.036946] oom_kill_process.cold+0x10/0xb18 [ 799.041444] out_of_memory+0xe3e/0x1190 [ 799.045421] ? oom_killer_disable+0x1c0/0x1c0 [ 799.049910] ? mutex_trylock+0x152/0x1a0 [ 799.053970] __alloc_pages_nodemask+0x23e1/0x2720 [ 799.058825] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 799.063683] alloc_pages_current+0x155/0x260 [ 799.068091] filemap_fault+0xea3/0x1980 [ 799.072072] ext4_filemap_fault+0x84/0xb0 [ 799.076218] __do_fault+0xfa/0x380 [ 799.079754] __handle_mm_fault+0x2497/0x4620 [ 799.084156] ? vm_insert_page+0x7c0/0x7c0 [ 799.088297] ? HARDIRQ_verbose+0x10/0x10 [ 799.092355] ? HARDIRQ_verbose+0x10/0x10 [ 799.096426] handle_mm_fault+0x391/0x860 [ 799.100485] __do_page_fault+0x549/0xad0 [ 799.104545] ? spurious_fault+0x640/0x640 [ 799.108692] ? do_page_fault+0x60/0x4f2 [ 799.112660] ? page_fault+0x2f/0x50 [ 799.116282] page_fault+0x45/0x50 [ 799.119725] RIP: 000d:0x32 [ 799.122559] RSP: 0bb8:00000000000c271c EFLAGS: 00000034 [ 799.592081] Mem-Info: [ 799.600149] active_anon:209239 inactive_anon:1090068 isolated_anon:0 [ 799.600149] active_file:11120 inactive_file:314 isolated_file:0 [ 799.600149] unevictable:42017 dirty:0 writeback:0 unstable:0 [ 799.600149] slab_reclaimable:13834 slab_unreclaimable:118680 [ 799.600149] mapped:45017 shmem:15170 pagetables:7580 bounce:0 [ 799.600149] free:41250 free_pcp:669 free_cma:0 [ 799.635430] Node 0 active_anon:637580kB inactive_anon:1050960kB active_file:40396kB inactive_file:1268kB unevictable:167980kB isolated(anon):0kB isolated(file):0kB mapped:79932kB dirty:0kB writeback:0kB shmem:58380kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 600064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 799.665816] Node 1 active_anon:199376kB inactive_anon:3301312kB active_file:4184kB inactive_file:88kB unevictable:88kB isolated(anon):0kB isolated(file):0kB mapped:100236kB dirty:0kB writeback:0kB shmem:2300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 799.699630] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:604kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 799.775695] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 799.806084] Node 0 DMA32 free:82408kB min:36200kB low:45248kB high:54296kB active_anon:637520kB inactive_anon:1050992kB active_file:41440kB inactive_file:6260kB unevictable:168096kB writepending:0kB present:3129332kB managed:2788160kB mlocked:168304kB kernel_stack:8704kB pagetables:11272kB bounce:0kB free_pcp:860kB local_pcp:156kB free_cma:0kB [ 799.913962] lowmem_reserve[]: 0 0 0 0 0 [ 799.921301] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 799.985999] lowmem_reserve[]: 0 0 0 0 0 [ 799.990022] Node 1 Normal free:74488kB min:53696kB low:67120kB high:80544kB active_anon:199308kB inactive_anon:3301236kB active_file:4364kB inactive_file:0kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:4128kB pagetables:19016kB bounce:0kB free_pcp:1292kB local_pcp:668kB free_cma:0kB [ 800.046064] lowmem_reserve[]: 0 0 0 0 0 [ 800.050075] Node 0 DMA: 7*4kB (UME) 2*8kB (U) 3*16kB (UME) 3*32kB (UME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11068kB [ 800.095894] Node 0 DMA32: 2566*4kB (UME) 4018*8kB (UME) 1722*16kB (UME) 77*32kB (UME) 44*64kB (UM) 19*128kB (UM) 7*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 79464kB [ 800.125938] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 800.146364] Node 1 Normal: 568*4kB (UM) 237*8kB (UM) 139*16kB (UME) 422*32kB (UME) 115*64kB (UM) 113*128kB (UM) 128*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 74488kB [ 800.175875] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 800.184733] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 800.215913] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 800.224766] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 800.245876] 28845 total pagecache pages [ 800.249873] 0 pages in swap cache [ 800.253317] Swap cache stats: add 0, delete 0, find 0/0 [ 800.275855] Free swap = 0kB [ 800.278889] Total swap = 0kB [ 800.286908] 2097051 pages RAM [ 800.290206] 0 pages HighMem/MovableOnly [ 800.294166] 363840 pages reserved [ 800.315912] 0 pages cma reserved [ 800.319301] Out of memory (oom_kill_allocating_task): Kill process 26327 (syz-executor.4) score 0 or sacrifice child [ 800.335981] Killed process 26788 (syz-executor.4) total-vm:93348kB, anon-rss:3852kB, file-rss:35504kB, shmem-rss:0kB 18:30:37 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479", 0x34}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:30:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0xfb}, 0x0) getpid() socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000200)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001300)=""/4127, 0x141b}], 0x200000000000004b) readv(r0, &(0x7f0000000580), 0x3c1) 18:30:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x300}, 0x0) [ 800.377321] oom_reaper: reaped process 26788 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 802.809050] IPVS: ftp: loaded support on port[0] = 21 [ 802.963405] chnl_net:caif_netlink_parms(): no params data found [ 803.037251] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.043926] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.051752] device bridge_slave_0 entered promiscuous mode [ 803.059213] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.066041] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.073087] device bridge_slave_1 entered promiscuous mode [ 803.092927] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 803.101929] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 803.123654] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 803.131327] team0: Port device team_slave_0 added [ 803.137073] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 803.144125] team0: Port device team_slave_1 added [ 803.162835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.169199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 803.194790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 803.206484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 803.212717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 803.238149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.248890] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 803.257184] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 803.280223] device hsr_slave_0 entered promiscuous mode [ 803.285992] device hsr_slave_1 entered promiscuous mode [ 803.291925] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 803.299131] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 803.379522] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.386017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.392668] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.399073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.433261] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 803.439832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.449105] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 803.459892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 803.466994] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.473755] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.484571] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 803.490911] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.499573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 803.507339] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.513670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.526326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 803.533879] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.540303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.556466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 803.564063] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 803.577237] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 803.587041] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 803.598819] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 803.605861] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 803.612826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 803.620942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 803.628732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 803.646102] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 803.653405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 803.660556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 803.672419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.731007] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 803.742808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 803.779288] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 803.787171] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 803.793783] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 803.806202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 803.813679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 803.820718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 803.830321] device veth0_vlan entered promiscuous mode [ 803.840568] device veth1_vlan entered promiscuous mode [ 803.846901] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 803.856733] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 803.870499] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 803.880338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 803.888433] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 803.896781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 803.906752] device veth0_macvtap entered promiscuous mode [ 803.912814] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 803.922701] device veth1_macvtap entered promiscuous mode [ 803.932207] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 803.942396] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 803.950146] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 803.958274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 803.968024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 803.978250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.988082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 803.998144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.007463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 804.017214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.026429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 804.036185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.045284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 804.055741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.066404] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 804.073591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.081738] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 804.090069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 804.099673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 804.110077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.119324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 804.129353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.138524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 804.148375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.157529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 804.167311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.176480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 804.186229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.196737] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 804.203656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.211485] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 804.220079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:30:41 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000140)=@req={0x7fffffff, 0x2}, 0x10) 18:30:41 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, 0x0, 0x0) sendmsg$AUDIT_GET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdc00, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x894}, 0x4000044) mmap$snddsp_status(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x0, 0x4000010, r1, 0x82000000) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r4, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:30:41 executing program 3: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x4, &(0x7f0000c22000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/251) shmctl$SHM_LOCK(r0, 0xb) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:30:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0xfb}, 0x0) getpid() socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000200)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001300)=""/4127, 0x141b}], 0x200000000000004b) readv(r0, &(0x7f0000000580), 0x3c1) 18:30:41 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x1, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000000)={0x18}, 0xfffffffffffffe96) 18:30:41 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479", 0x34}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:30:41 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000040c0)='/proc/thread-self\x00', 0x12000, 0x0) 18:30:41 executing program 2: r0 = socket(0x1, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 18:30:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0xfb}, 0x0) getpid() socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000200)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001300)=""/4127, 0x141b}], 0x200000000000004b) readv(r0, &(0x7f0000000580), 0x3c1) 18:30:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@dellink={0x20, 0x11, 0x1f95dedfed74eae1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 18:30:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001600df252af5631cb7fba09507"], 0x5c}}, 0x0) 18:30:41 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000040), 0x4) 18:30:41 executing program 2: select(0x7a, &(0x7f0000000180), 0x0, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0xea60}) [ 804.865646] Bluetooth: hci2 command 0x0409 tx timeout 18:30:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000001d0001"], 0x2c}}, 0x0) 18:30:42 executing program 3: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:30:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9c"], 0x19c}}, 0x0) 18:30:42 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = gettid() tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$cont(0x1f, 0x0, 0x0, 0x0) ptrace$cont(0x18, 0x0, 0x3, 0x2) ptrace$cont(0x9, r2, 0xffffffffffffff09, 0x80) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x1, 0x3, 0x4, 0x0, 0x0, 0x400, 0x104, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffc5eb, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x10000, 0x9, 0x2a5, 0x2, 0x0, 0x1ff, 0x101}, r2, 0xd, 0xffffffffffffffff, 0x8) r3 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x1800, &(0x7f00000000c0)="f97f6b5186c01ec41e21c4df97bb34f23613b794b5229ad6e339a925fabd976eb9753313d397fc26d8b3c9502afaf2c4e89f4843931ae572964285a8cb75397b2762932aac200c0b5848d484ed03b928e7a6de18840dabe676cda36f26dfefb27158a61564b1", &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000280)="3e8eb5a86db7867bfbb3ce2c2fddcf7281279fae22a1d08851463b979b4c041aebc969bd9ce1a766507a10c2cf9cc9f76172267875ea16e44d985a68480d99fc81aa1bb00a1241d355af4a220337b44bceee0a0836e3b62d8d84b06b58a05f1e191178ef098ea97827486aea6d82dff8f18d37163a28ada3c874700fe0f91889b59080e10f94fad3eddfbf36cfff6db2271407d6dbf8c6b0832b52b8bae88f5a9267b1fb33f0f822927fd1c73bc1c6ccdff323581447737d1fd37e1f7965c6b22b") [ 806.955111] Bluetooth: hci2 command 0x041b tx timeout 18:30:44 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e6", 0x4e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:30:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "4014678934fcecaa39dbf9dd0fc26c0e01e40514f382ba0c48b37db73896696d", "1a2f2c70b0e1bca22a4e5ff93082c67edde951241f1e605e754d94513d949309"}}}]}, 0x268}}, 0x0) 18:30:44 executing program 0: socketpair(0x1, 0x80803, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 18:30:44 executing program 2: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@loopback}) 18:30:44 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x985fca4, 0x5, &(0x7f0000000540)=[{&(0x7f0000000100)="daba90c1f1bf5f9402137641902f801112ee61bba348faa2644ff53effd576dd3aa16e4edd94b5d8494016274a82f8137cddda8194c9c6bd4707570f765c088f25003776954e004aa5fc902c305b6f7a1aa2b7cdc80a224da7bf0884a92d9479c17ff290e38109d08b28d50050e06f41901aab1c414ddc37c18cbc371004bb057099ad7799c07642f46f0aa02c976245d20f10cd73e2ed2d2cb90b4a8f9b5f5ad3fca6588a6d7b1bb464e4ef770f61de09a3132f11aa4dd1f785", 0xba, 0x9}, {&(0x7f0000000280)="5768e93e935e02b2dffc13d5aa4bd1aaef9c5502cb74fa5c46c96e7b1b73986e1f2c45601083d84ce78f57ebd321e9c4c12eb660be2687ef912f5230559bb3dd59711f3c86543a97ca1f007e358afe79af4b96a3cd0de8c9c5119c05a935914957c595271301e05cfdfb37b25fdc880b8ccc367b5dd4c69154d7245d4f39f2750e4fd5cc4bec77eb7608fb122e367f4970c888108894ad002e", 0x99, 0x3}, {&(0x7f00000001c0)="f9b241e3a8f7d8434bac995c7ca5e5de4a3343da8e5f1bb3f82a4081de5676ecbd0351b2831079bba75b2a0b39e111b2033b5a526254fc7e260f8f561c144680c21e498918ad077b9da8f91841e66847d0e90ab149d6d1a39102fcef4ad2", 0x5e, 0x7fff}, {&(0x7f0000000340)="180e208c36d715888c56cd70582485b01b87385a9e48ce05f90a6d72e04403b8048da7a4d992756572188852c83b7c8ec3233726c2384eaf1158b8d0077ac7f0866768a377c6fe4dccc3119ec68d707006fa2ca09759ba1fb3dfa9493ee93eb93f72e7b61132df12b0f30d9640d341f5cc1edc9ea96c5296f92b8f427122ee42ada18583dba0d4ec945425ee671df9480e7c1a19d1d4e81139d932b9486f1d97c17770824c556ffdf9c0b4558add4b5b27398aab6ed25adf874d9811d88f67a95bc91f75c279f2d353c63f971a7841578112b6d18613c80612", 0xd9, 0x3}, {&(0x7f0000000440)="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", 0xfa, 0xfffffffffffeffff}], 0x80, &(0x7f00000005c0)={[{@resize_size={'resize', 0x3d, 0x100000001}}, {@usrquota='usrquota'}, {@gid={'gid', 0x3d, r1}}, {@discard_size={'discard', 0x3d, 0x4}}, {@gid={'gid', 0x3d, 0xee01}}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}]}) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r4, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:30:44 executing program 3: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) mlockall(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:30:44 executing program 1: r0 = eventfd(0x0) write$eventfd(r0, 0x0, 0xfffffffffffffd09) [ 807.405497] jfs: Unrecognized mount option "mask=MAY_EXEC" or missing value 18:30:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x34}}, 0x0) 18:30:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x1, 0x8, 0x301}, 0x14}}, 0x0) 18:30:44 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001840)='fdinfo/4\x00') socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, 0x0, 0x0) 18:30:44 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$alg(r0, 0x0, 0x0, 0x0) 18:30:44 executing program 2: perf_event_open(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 807.823178] jfs: Unrecognized mount option "mask=MAY_EXEC" or missing value [ 808.240597] syz-executor.3 invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 808.263803] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 808.273005] CPU: 0 PID: 28091 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0 [ 808.280897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 808.290238] Call Trace: [ 808.292899] dump_stack+0x1b2/0x283 [ 808.296621] dump_header+0x178/0x82f [ 808.300322] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 808.305426] ? ___ratelimit+0x2cd/0x522 [ 808.309384] oom_kill_process.cold+0x10/0xb18 [ 808.313875] out_of_memory+0xe3e/0x1190 [ 808.317882] ? oom_killer_disable+0x1c0/0x1c0 [ 808.322358] ? mutex_trylock+0x152/0x1a0 [ 808.326405] __alloc_pages_nodemask+0x23e1/0x2720 [ 808.331245] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 808.336072] ? page_evictable+0x11e/0x1f0 [ 808.340259] ? lock_downgrade+0x740/0x740 [ 808.344403] alloc_pages_vma+0xd2/0x6d0 [ 808.348368] wp_page_copy+0x1f5/0x25c0 [ 808.352266] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 808.356745] ? __lock_acquire+0x5fc/0x3f20 [ 808.360994] do_wp_page+0x245/0x1db0 [ 808.364713] ? __handle_mm_fault+0x129c/0x4620 [ 808.369279] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 808.374042] __handle_mm_fault+0x234f/0x4620 [ 808.378437] ? vm_insert_page+0x7c0/0x7c0 [ 808.382567] ? HARDIRQ_verbose+0x10/0x10 [ 808.386610] ? do_raw_spin_unlock+0x164/0x220 [ 808.391108] handle_mm_fault+0x391/0x860 [ 808.395156] __get_user_pages+0x445/0x11d0 [ 808.399380] ? follow_page_mask+0x18a0/0x18a0 [ 808.403884] ? memset+0x20/0x40 [ 808.407166] populate_vma_page_range+0x17b/0x210 [ 808.411907] __mm_populate+0x195/0x2c0 [ 808.415778] ? populate_vma_page_range+0x210/0x210 [ 808.420687] ? security_capable+0x88/0xb0 [ 808.424825] SyS_mlockall+0x3ff/0x520 [ 808.428621] ? SyS_munlock+0xf0/0xf0 [ 808.432317] do_syscall_64+0x1d5/0x640 [ 808.436214] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 808.441402] RIP: 0033:0x45e219 [ 808.444572] RSP: 002b:00007f405f8b2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 808.452265] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045e219 [ 808.459519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 808.466873] RBP: 000000000119bfb0 R08: 0000000000000000 R09: 0000000000000000 [ 808.474124] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 808.481383] R13: 00007ffdd753e22f R14: 00007f405f8b39c0 R15: 000000000119bf8c [ 808.491146] Mem-Info: [ 808.494234] active_anon:156735 inactive_anon:1131376 isolated_anon:0 [ 808.494234] active_file:32 inactive_file:33 isolated_file:0 [ 808.494234] unevictable:64876 dirty:0 writeback:13 unstable:0 [ 808.494234] slab_reclaimable:14094 slab_unreclaimable:121488 [ 808.494234] mapped:63275 shmem:15173 pagetables:7845 bounce:0 [ 808.494234] free:25554 free_pcp:63 free_cma:0 [ 808.529123] Node 0 active_anon:609692kB inactive_anon:1107260kB active_file:28kB inactive_file:324kB unevictable:202964kB isolated(anon):0kB isolated(file):0kB mapped:138464kB dirty:0kB writeback:44kB shmem:58360kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 600064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 808.558705] Node 1 active_anon:17248kB inactive_anon:3418268kB active_file:100kB inactive_file:20kB unevictable:56572kB isolated(anon):0kB isolated(file):0kB mapped:114644kB dirty:0kB writeback:8kB shmem:2332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 808.587315] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:604kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 808.614560] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 808.620725] Node 0 DMA32 free:37100kB min:36200kB low:45248kB high:54296kB active_anon:609660kB inactive_anon:1106656kB active_file:160kB inactive_file:560kB unevictable:202936kB writepending:0kB present:3129332kB managed:2788160kB mlocked:202936kB kernel_stack:8672kB pagetables:10996kB bounce:0kB free_pcp:572kB local_pcp:40kB free_cma:0kB [ 808.651788] lowmem_reserve[]: 0 0 0 0 0 [ 808.656076] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 808.688339] lowmem_reserve[]: 0 0 0 0 0 [ 808.692531] Node 1 Normal free:53348kB min:53696kB low:67120kB high:80544kB active_anon:17248kB inactive_anon:3418296kB active_file:32kB inactive_file:28kB unevictable:56600kB writepending:0kB present:4194304kB managed:4128256kB mlocked:56600kB kernel_stack:4608kB pagetables:20356kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 808.729637] lowmem_reserve[]: 0 0 0 0 0 [ 808.733872] Node 0 DMA: 7*4kB (UME) 1*8kB (U) 3*16kB (UME) 3*32kB (UME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11060kB [ 808.754882] Node 0 DMA32: 1993*4kB (UME) 761*8kB (UME) 724*16kB (UMEH) 178*32kB (UMEH) 44*64kB (UM) 23*128kB (UMH) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37868kB [ 808.771071] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 808.782068] Node 1 Normal: 37*4kB (U) 14*8kB (UM) 18*16kB (UME) 572*32kB (UME) 169*64kB (UM) 99*128kB (UM) 43*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53348kB [ 808.797683] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 808.806734] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 808.815871] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 808.824898] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 808.833981] 25937 total pagecache pages [ 808.838164] 0 pages in swap cache [ 808.841759] Swap cache stats: add 0, delete 0, find 0/0 [ 808.847695] Free swap = 0kB [ 808.850863] Total swap = 0kB [ 808.854416] 2097051 pages RAM [ 808.857707] 0 pages HighMem/MovableOnly [ 808.862196] 363840 pages reserved [ 808.866121] 0 pages cma reserved [ 808.869623] Out of memory (oom_kill_allocating_task): Kill process 28091 (syz-executor.3) score 0 or sacrifice child [ 808.881533] Killed process 28125 (syz-executor.3) total-vm:93480kB, anon-rss:36832kB, file-rss:34816kB, shmem-rss:0kB [ 809.025566] Bluetooth: hci2 command 0x040f tx timeout [ 809.028401] oom_reaper: reaped process 28125 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 18:30:47 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='fd/3\x00') r2 = fcntl$dupfd(r1, 0x0, r0) fchmodat(r2, &(0x7f00000000c0)='./file0\x00', 0x0) 18:30:47 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e6", 0x4e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:30:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x1, 0x8, 0x301}, 0x14}}, 0x0) 18:30:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005600010b"], 0x1c}}, 0x0) 18:30:47 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000000c0)) tee(0xffffffffffffffff, r3, 0x5, 0x8) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:30:47 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000900)='net/sco\x00') syz_genetlink_get_family_id$nl80211(0x0) 18:30:47 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e6", 0x4e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:30:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}]}}}]}, 0x3c}}, 0x0) 18:30:47 executing program 2: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:'}, &(0x7f0000000080)={0x0, "309ddb331eeca8a5e7163b3a70701be547c131a2b644906852162e1fa66f75b4f79880afea257eca124fc0f4a243590d5ba9b8c65108b1bc8ca090b70333db37"}, 0x48, 0xfffffffffffffffc) 18:30:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x1, 0x8, 0x301}, 0x14}}, 0x0) 18:30:47 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @empty, @val, {@ipv6}}, 0x0) 18:30:47 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) r4 = dup2(r3, r3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r6 = dup(r5) dup2(r4, r6) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x26, &(0x7f0000000800)={r2}, &(0x7f0000000840)=0x8) 18:30:47 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000080)=0x8) 18:30:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x1, 0x8, 0x301}, 0x14}}, 0x0) 18:30:47 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000240)={0x10}, 0x10) getsockname$inet(r0, 0x0, &(0x7f0000000340)) 18:30:47 executing program 1: sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x1, 0x8, 0x301}, 0x14}}, 0x0) [ 811.105339] Bluetooth: hci2 command 0x0419 tx timeout [ 811.304632] syz-executor.5 invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 811.317092] syz-executor.5 cpuset= [ 811.317098] syz-executor.5: page allocation failure: order:4 [ 811.320809] / mems_allowed=0-1 [ 811.331092] CPU: 0 PID: 28165 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 811.336440] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 811.338983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 811.338989] Call Trace: [ 811.339007] dump_stack+0x1b2/0x283 [ 811.339027] dump_header+0x178/0x82f [ 811.356013] (null) [ 811.358034] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 811.358048] ? ___ratelimit+0x2cd/0x522 [ 811.363875] syz-executor.5 cpuset= [ 811.365364] oom_kill_process.cold+0x10/0xb18 [ 811.365394] out_of_memory+0xe3e/0x1190 [ 811.368646] / [ 811.372619] ? oom_killer_disable+0x1c0/0x1c0 [ 811.372630] ? mutex_trylock+0x152/0x1a0 [ 811.372645] __alloc_pages_nodemask+0x23e1/0x2720 [ 811.372665] ? check_preemption_disabled+0x35/0x240 [ 811.372685] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 811.372694] ? perf_swevent_event+0x460/0x460 [ 811.372713] ? page_evictable+0x11e/0x1f0 [ 811.372758] alloc_pages_vma+0xd2/0x6d0 [ 811.382147] mems_allowed=0-1 [ 811.384988] wp_page_copy+0x1f5/0x25c0 [ 811.385016] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 811.437844] ? __lock_acquire+0x5fc/0x3f20 [ 811.442168] do_wp_page+0x245/0x1db0 [ 811.445872] ? __handle_mm_fault+0x129c/0x4620 [ 811.450464] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 811.455212] __handle_mm_fault+0x234f/0x4620 [ 811.459613] ? vm_insert_page+0x7c0/0x7c0 [ 811.463748] ? HARDIRQ_verbose+0x10/0x10 [ 811.467817] ? do_raw_spin_unlock+0x164/0x220 [ 811.472318] handle_mm_fault+0x391/0x860 [ 811.476371] __get_user_pages+0x445/0x11d0 [ 811.480627] ? follow_page_mask+0x18a0/0x18a0 [ 811.485118] ? lock_acquire+0x170/0x3f0 [ 811.489081] populate_vma_page_range+0x17b/0x210 [ 811.493827] __mm_populate+0x195/0x2c0 [ 811.497724] ? populate_vma_page_range+0x210/0x210 [ 811.502643] ? security_capable+0x88/0xb0 [ 811.506781] SyS_mlockall+0x3ff/0x520 [ 811.510566] ? SyS_munlock+0xf0/0xf0 [ 811.514268] do_syscall_64+0x1d5/0x640 [ 811.518152] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 811.523330] RIP: 0033:0x45e219 [ 811.526506] RSP: 002b:00007f9f6fd95c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 811.534200] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045e219 [ 811.541459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 811.548721] RBP: 000000000119c058 R08: 0000000000000000 R09: 0000000000000000 [ 811.556064] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 811.563319] R13: 00007ffdd833b2ef R14: 00007f9f6fd969c0 R15: 000000000119c034 [ 811.570600] CPU: 1 PID: 28141 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 811.571687] Mem-Info: [ 811.578485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 811.578490] Call Trace: [ 811.578505] dump_stack+0x1b2/0x283 [ 811.578519] warn_alloc.cold+0x96/0x1cc [ 811.578529] ? zone_watermark_ok_safe+0x220/0x220 [ 811.578550] __alloc_pages_nodemask+0x2127/0x2720 [ 811.578566] ? lock_acquire+0x170/0x3f0 [ 811.578582] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 811.578599] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 811.578612] ? __mutex_unlock_slowpath+0x75/0x770 [ 811.578628] alloc_pages_current+0x155/0x260 [ 811.578642] ion_page_pool_alloc+0x118/0x1b0 [ 811.578654] ion_system_heap_allocate+0x133/0x8c0 [ 811.581465] active_anon:156893 inactive_anon:1136940 isolated_anon:0 [ 811.581465] active_file:42 inactive_file:75 isolated_file:0 [ 811.581465] unevictable:54111 dirty:5 writeback:0 unstable:0 [ 811.581465] slab_reclaimable:14220 slab_unreclaimable:122229 [ 811.581465] mapped:58227 shmem:15173 pagetables:7861 bounce:0 [ 811.581465] free:25253 free_pcp:112 free_cma:0 [ 811.590394] ? ion_alloc+0x187/0x810 [ 811.590406] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 811.590415] ? ion_system_contig_heap_create+0x130/0x130 [ 811.590423] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 811.590434] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 811.590445] ion_alloc+0x204/0x810 [ 811.590459] ? ion_dma_buf_release+0x40/0x40 [ 811.590475] ? __might_fault+0x177/0x1b0 [ 811.590487] ion_ioctl+0xea/0x1ee [ 811.590495] ? ion_alloc.cold+0x3b/0x3b [ 811.590506] ? HARDIRQ_verbose+0x10/0x10 [ 811.590514] ? lock_downgrade+0x740/0x740 [ 811.590520] ? ion_alloc.cold+0x3b/0x3b [ 811.590530] do_vfs_ioctl+0x75a/0xff0 [ 811.590542] ? ioctl_preallocate+0x1a0/0x1a0 [ 811.590549] ? lock_downgrade+0x740/0x740 [ 811.590564] ? __fget+0x225/0x360 [ 811.590574] ? do_vfs_ioctl+0xff0/0xff0 [ 811.590585] ? security_file_ioctl+0x83/0xb0 [ 811.590596] SyS_ioctl+0x7f/0xb0 [ 811.590603] ? do_vfs_ioctl+0xff0/0xff0 [ 811.590616] do_syscall_64+0x1d5/0x640 [ 811.590631] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 811.590639] RIP: 0033:0x45e219 [ 811.590644] RSP: 002b:00007f9f6fdb6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 811.590654] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 811.590660] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 811.590665] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 811.590670] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 811.590675] R13: 00007ffdd833b2ef R14: 00007f9f6fdb79c0 R15: 000000000119bf8c [ 811.602342] Mem-Info: [ 811.610185] Node 0 active_anon:610696kB inactive_anon:1116776kB active_file:120kB inactive_file:288kB unevictable:194604kB isolated(anon):0kB isolated(file):0kB mapped:121488kB dirty:4kB writeback:0kB shmem:58376kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 600064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 811.627354] active_anon:156893 inactive_anon:1136940 isolated_anon:0 [ 811.627354] active_file:39 inactive_file:51 isolated_file:0 [ 811.627354] unevictable:54111 dirty:5 writeback:0 unstable:0 [ 811.627354] slab_reclaimable:14220 slab_unreclaimable:122229 [ 811.627354] mapped:58177 shmem:15173 pagetables:7861 bounce:0 [ 811.627354] free:25263 free_pcp:44 free_cma:0 [ 811.630881] Node 1 active_anon:16876kB inactive_anon:3430984kB active_file:36kB inactive_file:36kB unevictable:21840kB isolated(anon):0kB isolated(file):0kB mapped:111320kB dirty:16kB writeback:0kB shmem:2316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 811.645243] Node 0 active_anon:610696kB inactive_anon:1116776kB active_file:220kB inactive_file:160kB unevictable:194604kB isolated(anon):0kB isolated(file):0kB mapped:121488kB dirty:4kB writeback:0kB shmem:58376kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 600064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 811.678789] Node 0 [ 811.738747] Node 1 active_anon:16876kB inactive_anon:3430984kB active_file:36kB inactive_file:36kB unevictable:21840kB isolated(anon):0kB isolated(file):0kB mapped:111320kB dirty:16kB writeback:0kB shmem:2316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 811.740356] DMA free:11056kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:604kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 811.754306] Node 0 [ 811.760068] lowmem_reserve[]: [ 811.770479] DMA free:11056kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:604kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 811.773355] 0 [ 811.787995] lowmem_reserve[]: [ 811.788163] 2717 [ 811.809738] 0 [ 811.812362] 2718 [ 811.850985] 2717 [ 811.856200] 2718 [ 811.895318] 2718 [ 811.920920] 2718 [ 812.014798] 2718 [ 812.082415] 2718 [ 812.090322] Node 0 DMA32 free:36060kB min:36200kB low:45248kB high:54296kB active_anon:610664kB inactive_anon:1116200kB active_file:56kB inactive_file:0kB unevictable:194604kB writepending:4kB present:3129332kB managed:2788160kB mlocked:194604kB kernel_stack:8800kB pagetables:11564kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 812.091998] Node 0 [ 812.130709] lowmem_reserve[]: 0 0 0 0 0 [ 812.139901] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 812.143096] DMA32 free:36060kB min:36200kB low:45248kB high:54296kB active_anon:610664kB inactive_anon:1116200kB active_file:56kB inactive_file:0kB unevictable:194604kB writepending:4kB present:3129332kB managed:2788160kB mlocked:194604kB kernel_stack:8800kB pagetables:11564kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 812.174660] lowmem_reserve[]: [ 812.204374] lowmem_reserve[]: [ 812.205027] 0 [ 812.207493] 0 0 0 0 0 [ 812.207513] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 812.207533] lowmem_reserve[]: [ 812.210693] 0 [ 812.212419] 0 0 0 0 0 [ 812.212440] Node 1 Normal free:53220kB min:53696kB low:67120kB high:80544kB active_anon:16876kB inactive_anon:3430984kB active_file:36kB inactive_file:36kB unevictable:21840kB writepending:16kB present:4194304kB managed:4128256kB mlocked:21840kB kernel_stack:4480kB pagetables:19876kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 812.221613] 0 [ 812.248051] lowmem_reserve[]: [ 812.256875] 0 0 [ 812.289429] 0 0 0 0 0 [ 812.290192] Node 1 [ 812.292626] Node 0 DMA: 14*4kB (UME) 1*8kB (U) 3*16kB (UME) 2*32kB (ME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11056kB [ 812.294994] Normal free:53220kB min:53696kB low:67120kB high:80544kB active_anon:16876kB inactive_anon:3430984kB active_file:36kB inactive_file:36kB unevictable:21840kB writepending:16kB present:4194304kB managed:4128256kB mlocked:21840kB kernel_stack:4480kB pagetables:19876kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 812.295000] lowmem_reserve[]: [ 812.323755] Node 0 DMA32: 1903*4kB (UME) 1495*8kB (UME) 848*16kB (UMEH) 109*32kB (UMEH) 0*64kB 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36756kB [ 812.344607] 0 0 0 0 0 [ 812.367833] Node 0 DMA: 14*4kB (UME) 1*8kB (U) 3*16kB (UME) 2*32kB (ME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11056kB [ 812.368096] Node 0 [ 812.392910] Node 0 [ 812.393772] Normal: [ 812.395356] DMA32: [ 812.397511] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB [ 812.399878] 1903*4kB [ 812.402055] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 812.402080] Node 1 [ 812.409616] (UME) 1495*8kB (UME) 848*16kB (UMEH) 109*32kB (UMEH) 0*64kB 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36756kB [ 812.422443] Normal: [ 812.433295] Node 0 [ 812.435311] 25*4kB [ 812.435718] Normal: [ 812.437976] (U) 42*8kB (M) 21*16kB (UME) 1155*32kB (UME) [ 812.440261] 0*4kB [ 812.442523] 188*64kB (UM) 27*128kB (M) 0*256kB 0*512kB 0*1024kB [ 812.450380] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 812.463256] 0*2048kB [ 812.468284] Node 1 [ 812.470308] 0*4096kB [ 812.470758] Normal: [ 812.472918] = 53220kB [ 812.472936] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 812.472945] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 812.475435] 25*4kB [ 812.477676] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 812.477683] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 812.477687] 20667 total pagecache pages [ 812.477698] 0 pages in swap cache [ 812.480126] (U) [ 812.501802] Swap cache stats: add 0, delete 0, find 0/0 [ 812.511153] 42*8kB [ 812.530572] Free swap = 0kB [ 812.534478] (M) 21*16kB (UME) 1155*32kB (UME) 188*64kB (UM) 27*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53220kB [ 812.543817] Total swap = 0kB [ 812.550271] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 812.552118] 2097051 pages RAM [ 812.552123] 0 pages HighMem/MovableOnly [ 812.552127] 363840 pages reserved [ 812.552131] 0 pages cma reserved [ 812.575233] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 812.583813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 812.592886] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 812.601571] 20659 total pagecache pages [ 812.608354] 0 pages in swap cache [ 812.611896] Swap cache stats: add 0, delete 0, find 0/0 [ 812.617388] Free swap = 0kB [ 812.620471] Total swap = 0kB [ 812.623552] 2097051 pages RAM [ 812.629941] 0 pages HighMem/MovableOnly [ 812.633934] 363840 pages reserved [ 812.637430] 0 pages cma reserved [ 812.640988] Out of memory (oom_kill_allocating_task): Kill process 28165 (syz-executor.5) score 0 or sacrifice child [ 812.654386] Killed process 28192 (syz-executor.5) total-vm:85408kB, anon-rss:16244kB, file-rss:34816kB, shmem-rss:0kB [ 812.702371] oom_reaper: reaped process 28192 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 812.779009] syz-executor.5 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 812.800025] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 812.842006] CPU: 0 PID: 28139 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 812.849938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 812.859287] Call Trace: [ 812.861871] dump_stack+0x1b2/0x283 [ 812.865482] dump_header+0x178/0x82f [ 812.869219] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 812.874300] ? ___ratelimit+0x2cd/0x522 [ 812.878256] oom_kill_process.cold+0x10/0xb18 [ 812.882738] out_of_memory+0xe3e/0x1190 [ 812.886700] ? oom_killer_disable+0x1c0/0x1c0 [ 812.891173] ? mutex_trylock+0x152/0x1a0 [ 812.895211] __alloc_pages_nodemask+0x23e1/0x2720 [ 812.900049] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 812.904879] ? fs_reclaim_release+0xd0/0x110 [ 812.909483] ? kmem_cache_alloc_node+0x38b/0x410 [ 812.914223] copy_process.part.0+0x265/0x71c0 [ 812.918706] ? prot_none_test+0x10/0x10 [ 812.922680] ? vma_set_page_prot+0x121/0x180 [ 812.927121] ? mprotect_fixup+0x4c0/0x8c0 [ 812.931254] ? __cleanup_sighand+0x40/0x40 [ 812.935471] _do_fork+0x184/0xc80 [ 812.938906] ? fork_idle+0x270/0x270 [ 812.942598] ? SyS_mmap_pgoff+0x25e/0x510 [ 812.946826] ? mprotect_fixup+0x8c0/0x8c0 [ 812.950953] ? find_mergeable_anon_vma+0x230/0x230 [ 812.955859] ? SyS_clock_settime+0x1a0/0x1a0 [ 812.960243] ? do_mprotect_pkey+0x7e0/0x7e0 [ 812.964543] ? do_syscall_64+0x4c/0x640 [ 812.968495] ? sys_vfork+0x20/0x20 [ 812.972024] do_syscall_64+0x1d5/0x640 [ 812.975901] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 812.981072] RIP: 0033:0x460be9 [ 812.984319] RSP: 002b:00007ffdd833b238 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 812.992032] RAX: ffffffffffffffda RBX: 00007f9f6fd54700 RCX: 0000000000460be9 [ 812.999306] RDX: 00007f9f6fd549d0 RSI: 00007f9f6fd53db0 RDI: 00000000003d0f00 [ 813.006660] RBP: 00007ffdd833b450 R08: 00007f9f6fd54700 R09: 00007f9f6fd54700 [ 813.013917] R10: 00007f9f6fd549d0 R11: 0000000000000202 R12: 0000000000000000 [ 813.021165] R13: 00007ffdd833b2ef R14: 00007f9f6fd549c0 R15: 000000000119c184 [ 813.034705] Mem-Info: [ 813.037137] active_anon:156888 inactive_anon:1135415 isolated_anon:0 [ 813.037137] active_file:22 inactive_file:16 isolated_file:25 [ 813.037137] unevictable:54144 dirty:5 writeback:0 unstable:0 [ 813.037137] slab_reclaimable:14220 slab_unreclaimable:122214 [ 813.037137] mapped:58205 shmem:15173 pagetables:7826 bounce:0 [ 813.037137] free:25066 free_pcp:38 free_cma:0 [ 813.071395] Node 0 active_anon:610680kB inactive_anon:1110684kB active_file:28kB inactive_file:28kB unevictable:194756kB isolated(anon):0kB isolated(file):0kB mapped:121388kB dirty:4kB writeback:0kB shmem:58376kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 600064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 813.099939] Node 1 active_anon:16872kB inactive_anon:3430976kB active_file:36kB inactive_file:36kB unevictable:21820kB isolated(anon):0kB isolated(file):0kB mapped:111320kB dirty:16kB writeback:0kB shmem:2316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 813.127968] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:604kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 813.154399] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 813.159430] Node 0 DMA32 free:36124kB min:36200kB low:45248kB high:54296kB active_anon:610648kB inactive_anon:1110080kB active_file:28kB inactive_file:28kB unevictable:194756kB writepending:4kB present:3129332kB managed:2788160kB mlocked:194756kB kernel_stack:8800kB pagetables:11424kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 813.190635] lowmem_reserve[]: 0 0 0 0 0 [ 813.194710] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 813.220334] lowmem_reserve[]: 0 0 0 0 0 [ 813.231945] Node 1 Normal free:53284kB min:53696kB low:67120kB high:80544kB active_anon:16872kB inactive_anon:3430976kB active_file:36kB inactive_file:36kB unevictable:21820kB writepending:16kB present:4194304kB managed:4128256kB mlocked:21820kB kernel_stack:4448kB pagetables:19876kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 813.267287] lowmem_reserve[]: 0 0 0 0 0 [ 813.271301] Node 0 DMA: 14*4kB (UME) 1*8kB (U) 3*16kB (UME) 2*32kB (ME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11056kB [ 813.289859] Node 0 DMA32: 1596*4kB (UME) 1566*8kB (UME) 858*16kB (UMEH) 110*32kB (UMEH) 1*64kB (U) 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36352kB [ 813.307270] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 813.318034] Node 1 Normal: 31*4kB (UM) 43*8kB (M) 21*16kB (UME) 1156*32kB (UME) 188*64kB (UM) 27*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53284kB [ 813.332657] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 813.341521] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 813.350775] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 813.359658] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 813.368268] 20654 total pagecache pages [ 813.372233] 0 pages in swap cache [ 813.375712] Swap cache stats: add 0, delete 0, find 0/0 [ 813.381149] Free swap = 0kB [ 813.384193] Total swap = 0kB [ 813.387227] 2097051 pages RAM [ 813.390321] 0 pages HighMem/MovableOnly [ 813.394369] 363840 pages reserved [ 813.397811] 0 pages cma reserved [ 813.401154] Out of memory (oom_kill_allocating_task): Kill process 28139 (syz-executor.5) score 0 or sacrifice child [ 813.411895] Killed process 28139 (syz-executor.5) total-vm:85540kB, anon-rss:24644kB, file-rss:56608kB, shmem-rss:0kB [ 813.433648] oom_reaper: reaped process 28139 (syz-executor.5), now anon-rss:24664kB, file-rss:21792kB, shmem-rss:0kB 18:30:50 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f00000001c0), &(0x7f0000000300)=0x94) 18:30:51 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0", 0x5b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:30:51 executing program 1: sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x1, 0x8, 0x301}, 0x14}}, 0x0) 18:30:51 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 18:30:51 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='|', 0x1, 0x0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) 18:30:51 executing program 1: sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x1, 0x8, 0x301}, 0x14}}, 0x0) 18:30:51 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, 0x0, 0x0) sendmsg$AUDIT_GET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdc00, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x894}, 0x4000044) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0xf5d7, 0x18, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r4, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f00000000c0)) fadvise64(r5, 0x8, 0x401, 0x4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvfrom(r4, &(0x7f00000000c0)=""/215, 0xd7, 0x40000362, &(0x7f00000001c0)=@isdn={0x22, 0x1, 0x4, 0x2, 0xa9}, 0x80) 18:30:51 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x14) 18:30:51 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, &(0x7f0000000040), &(0x7f0000000080)=0x8) 18:30:51 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x1, 0x8, 0x301}, 0x14}}, 0x0) 18:30:51 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x19, &(0x7f0000000640), 0x8) 18:30:51 executing program 3: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x97}, {r0, 0x2000}], 0x2, 0x0, 0x0, 0x0) 18:30:51 executing program 0: bpf$MAP_CREATE(0x19, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) [ 814.490682] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 814.551083] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 814.577225] CPU: 1 PID: 28217 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 814.585123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 814.587143] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 814.594488] Call Trace: [ 814.594507] dump_stack+0x1b2/0x283 [ 814.594527] warn_alloc.cold+0x96/0x1cc [ 814.594537] ? zone_watermark_ok_safe+0x220/0x220 [ 814.594561] __alloc_pages_nodemask+0x2127/0x2720 [ 814.605668] (null) [ 814.607182] ? lock_acquire+0x170/0x3f0 [ 814.607199] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 814.610857] , order=0, oom_score_adj=0 [ 814.614875] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 814.614888] ? __mutex_unlock_slowpath+0x75/0x770 [ 814.614903] alloc_pages_current+0x155/0x260 [ 814.614919] ion_page_pool_alloc+0x118/0x1b0 [ 814.619898] syz-executor.4 cpuset= [ 814.624678] ion_system_heap_allocate+0x133/0x8c0 [ 814.624691] ? ion_alloc+0x187/0x810 [ 814.624702] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 814.624711] ? ion_system_contig_heap_create+0x130/0x130 [ 814.624718] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 814.624729] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 814.624744] ion_alloc+0x204/0x810 [ 814.634086] / [ 814.635682] ? ion_dma_buf_release+0x40/0x40 [ 814.644908] mems_allowed=0-1 [ 814.645092] ? __might_fault+0x177/0x1b0 [ 814.708221] ion_ioctl+0xea/0x1ee [ 814.711673] ? ion_alloc.cold+0x3b/0x3b [ 814.715647] ? HARDIRQ_verbose+0x10/0x10 [ 814.719701] ? lock_downgrade+0x740/0x740 [ 814.723836] ? ion_alloc.cold+0x3b/0x3b [ 814.727802] do_vfs_ioctl+0x75a/0xff0 [ 814.731598] ? ioctl_preallocate+0x1a0/0x1a0 [ 814.735990] ? lock_downgrade+0x740/0x740 [ 814.740134] ? __fget+0x225/0x360 [ 814.743580] ? do_vfs_ioctl+0xff0/0xff0 [ 814.747541] ? security_file_ioctl+0x83/0xb0 [ 814.751952] SyS_ioctl+0x7f/0xb0 [ 814.755307] ? do_vfs_ioctl+0xff0/0xff0 [ 814.759279] do_syscall_64+0x1d5/0x640 [ 814.763169] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 814.768350] RIP: 0033:0x45e219 [ 814.771534] RSP: 002b:00007f9f6fdb6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 814.779253] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 814.786520] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 814.793783] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 814.801041] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 814.808305] R13: 00007ffdd833b2ef R14: 00007f9f6fdb79c0 R15: 000000000119bf8c [ 814.825157] CPU: 0 PID: 26327 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 814.833058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 814.842494] Call Trace: [ 814.845079] dump_stack+0x1b2/0x283 [ 814.848721] dump_header+0x178/0x82f [ 814.852431] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 814.857529] ? ___ratelimit+0x2cd/0x522 [ 814.861499] oom_kill_process.cold+0x10/0xb18 [ 814.866003] out_of_memory+0xe3e/0x1190 [ 814.867328] Mem-Info: [ 814.869971] ? oom_killer_disable+0x1c0/0x1c0 [ 814.872493] active_anon:157312 inactive_anon:1135415 isolated_anon:0 [ 814.872493] active_file:15 inactive_file:30 isolated_file:0 [ 814.872493] unevictable:54111 dirty:0 writeback:0 unstable:0 [ 814.872493] slab_reclaimable:14312 slab_unreclaimable:122779 [ 814.872493] mapped:58208 shmem:15173 pagetables:7854 bounce:0 [ 814.872493] free:25095 free_pcp:0 free_cma:0 [ 814.876959] ? mutex_trylock+0x152/0x1a0 [ 814.876970] __alloc_pages_nodemask+0x23e1/0x2720 [ 814.877002] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 814.910750] Node 0 active_anon:611540kB inactive_anon:1110680kB active_file:44kB inactive_file:40kB unevictable:204788kB isolated(anon):0kB isolated(file):0kB mapped:125356kB dirty:0kB writeback:0kB shmem:58372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 600064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 814.914784] alloc_pages_current+0x155/0x260 [ 814.919608] Node 1 active_anon:17708kB inactive_anon:3430980kB active_file:16kB inactive_file:80kB unevictable:11656kB isolated(anon):0kB isolated(file):0kB mapped:107476kB dirty:0kB writeback:0kB shmem:2320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 814.924421] filemap_fault+0xea3/0x1980 [ 814.924440] ext4_filemap_fault+0x84/0xb0 [ 814.952893] Node 0 [ 814.957270] __do_fault+0xfa/0x380 [ 814.957280] __handle_mm_fault+0x2497/0x4620 [ 814.957291] ? vm_insert_page+0x7c0/0x7c0 [ 814.985064] DMA free:11056kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:604kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 814.989017] ? HARDIRQ_verbose+0x10/0x10 [ 814.993154] lowmem_reserve[]: [ 814.995373] ? HARDIRQ_verbose+0x10/0x10 [ 814.995391] handle_mm_fault+0x391/0x860 [ 814.995411] __do_page_fault+0x549/0xad0 [ 814.998924] 0 [ 815.003322] ? spurious_fault+0x640/0x640 [ 815.007458] 2717 [ 815.033210] ? do_page_fault+0x60/0x4f2 [ 815.033222] ? page_fault+0x2f/0x50 [ 815.033231] page_fault+0x45/0x50 [ 815.033241] RIP: 000d:0x32 [ 815.037300] 2718 [ 815.040367] RSP: 0bb8:00000000000c6b75 EFLAGS: 00000046 [ 815.085870] Mem-Info: [ 815.118387] active_anon:157287 inactive_anon:1135415 isolated_anon:0 [ 815.118387] active_file:13 inactive_file:33 isolated_file:0 [ 815.118387] unevictable:54136 dirty:0 writeback:0 unstable:0 [ 815.118387] slab_reclaimable:14312 slab_unreclaimable:122805 [ 815.118387] mapped:58208 shmem:15173 pagetables:7817 bounce:0 [ 815.118387] free:24996 free_pcp:2 free_cma:0 [ 815.239948] Node 0 active_anon:611440kB inactive_anon:1110680kB active_file:40kB inactive_file:44kB unevictable:204788kB isolated(anon):0kB isolated(file):0kB mapped:125356kB dirty:0kB writeback:0kB shmem:58372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 600064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 815.243805] 2718 2718 [ 815.339986] Node 0 DMA32 free:35768kB min:36200kB low:45248kB high:54296kB active_anon:611408kB inactive_anon:1110076kB active_file:40kB inactive_file:44kB unevictable:204788kB writepending:0kB present:3129332kB managed:2788160kB mlocked:204788kB kernel_stack:8672kB pagetables:11376kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 815.342592] Node 1 active_anon:17708kB inactive_anon:3430980kB active_file:112kB inactive_file:0kB unevictable:11756kB isolated(anon):0kB isolated(file):0kB mapped:107476kB dirty:0kB writeback:0kB shmem:2320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 815.430642] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:604kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 815.478877] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 815.489733] Node 0 DMA32 free:35768kB min:36200kB low:45248kB high:54296kB active_anon:611408kB inactive_anon:1110076kB active_file:40kB inactive_file:44kB unevictable:204788kB writepending:0kB present:3129332kB managed:2788160kB mlocked:204788kB kernel_stack:8672kB pagetables:11376kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 815.493493] lowmem_reserve[]: 0 0 0 0 0 [ 815.533583] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 815.576220] lowmem_reserve[]: 0 0 0 0 0 [ 815.585836] Node 1 Normal free:53160kB min:53696kB low:67120kB high:80544kB active_anon:17708kB inactive_anon:3430980kB active_file:48kB inactive_file:0kB unevictable:11656kB writepending:0kB present:4194304kB managed:4128256kB mlocked:11656kB kernel_stack:4576kB pagetables:19888kB bounce:0kB free_pcp:84kB local_pcp:24kB free_cma:0kB [ 815.624779] lowmem_reserve[]: 0 0 0 0 0 [ 815.628802] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 815.708745] lowmem_reserve[]: 0 0 0 0 0 [ 815.723929] Node 0 DMA: 14*4kB (UME) 1*8kB (U) 3*16kB (UME) 2*32kB (ME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11056kB [ 815.731578] lowmem_reserve[]: 0 0 0 0 0 [ 815.771161] Node 1 Normal free:53160kB min:53696kB low:67120kB high:80544kB active_anon:17708kB inactive_anon:3430980kB active_file:48kB inactive_file:0kB unevictable:11656kB writepending:0kB present:4194304kB managed:4128256kB mlocked:11656kB kernel_stack:4576kB pagetables:19888kB bounce:0kB free_pcp:84kB local_pcp:60kB free_cma:0kB [ 815.794957] Node 0 DMA32: 1900*4kB (UME) 237*8kB (UME) 1030*16kB (UME) 260*32kB (UME) 2*64kB (UM) 5*128kB (UM) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36088kB [ 815.823211] lowmem_reserve[]: 0 0 0 0 0 [ 815.860819] Node 0 DMA: 14*4kB (UME) 1*8kB (U) 3*16kB (UME) 2*32kB (ME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11056kB [ 815.871747] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 815.923961] Node 1 Normal: 234*4kB (UME) 144*8kB (UME) 77*16kB (UME) 1276*32kB (UME) 155*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54072kB [ 815.960163] Node 0 DMA32: 1900*4kB (UME) 237*8kB (UME) 1030*16kB (UME) 260*32kB (UME) 2*64kB (UM) 5*128kB (UM) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36088kB [ 815.969399] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 815.988330] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 815.997715] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 816.007462] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 816.033846] 20676 total pagecache pages [ 816.042235] 0 pages in swap cache [ 816.049781] Swap cache stats: add 0, delete 0, find 0/0 [ 816.055718] Free swap = 0kB [ 816.059645] Total swap = 0kB [ 816.074215] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 816.080613] 2097051 pages RAM [ 816.113452] 0 pages HighMem/MovableOnly [ 816.135408] 363840 pages reserved [ 816.140563] Node 1 Normal: 255*4kB (UME) 147*8kB (UME) 74*16kB (UME) 1275*32kB (UME) 155*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54100kB [ 816.154220] 0 pages cma reserved [ 816.190693] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 816.237440] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 816.278850] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 816.332282] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 816.340927] 20663 total pagecache pages [ 816.363803] 0 pages in swap cache [ 816.367271] Swap cache stats: add 0, delete 0, find 0/0 [ 816.372646] Free swap = 0kB [ 816.400711] Total swap = 0kB [ 816.411820] 2097051 pages RAM [ 816.424609] 0 pages HighMem/MovableOnly [ 816.428588] 363840 pages reserved [ 816.432029] 0 pages cma reserved [ 816.472857] Out of memory (oom_kill_allocating_task): Kill process 26327 (syz-executor.4) score 0 or sacrifice child [ 816.506392] Killed process 26797 (syz-executor.4) total-vm:93348kB, anon-rss:3852kB, file-rss:34900kB, shmem-rss:0kB [ 816.539226] oom_reaper: reaped process 26797 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 817.255262] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 817.315704] systemd-journal cpuset=/ mems_allowed=0-1 [ 817.320944] CPU: 1 PID: 26270 Comm: systemd-journal Not tainted 4.14.215-syzkaller #0 [ 817.328906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.338257] Call Trace: [ 817.340843] dump_stack+0x1b2/0x283 [ 817.344473] dump_header+0x178/0x82f [ 817.348185] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 817.353282] ? ___ratelimit+0x2cd/0x522 [ 817.357253] oom_kill_process.cold+0x10/0xb18 [ 817.361753] out_of_memory+0xe3e/0x1190 [ 817.365727] ? oom_killer_disable+0x1c0/0x1c0 [ 817.370223] ? mutex_trylock+0x152/0x1a0 [ 817.374282] __alloc_pages_nodemask+0x23e1/0x2720 [ 817.379135] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 817.383991] alloc_pages_current+0x155/0x260 [ 817.388398] filemap_fault+0xea3/0x1980 [ 817.392379] ext4_filemap_fault+0x84/0xb0 [ 817.396521] __do_fault+0xfa/0x380 [ 817.400056] __handle_mm_fault+0x2497/0x4620 [ 817.404460] ? vm_insert_page+0x7c0/0x7c0 [ 817.408600] ? HARDIRQ_verbose+0x10/0x10 [ 817.412654] ? HARDIRQ_verbose+0x10/0x10 [ 817.416721] handle_mm_fault+0x391/0x860 [ 817.420778] __do_page_fault+0x549/0xad0 [ 817.424837] ? spurious_fault+0x640/0x640 [ 817.428976] ? do_page_fault+0x60/0x4f2 [ 817.432948] ? page_fault+0x2f/0x50 [ 817.436574] page_fault+0x45/0x50 [ 817.440019] RIP: 0001:0x1 [ 817.442765] RSP: d8596310:00007fff463e8710 EFLAGS: 7fff463e8520 [ 817.604737] Mem-Info: [ 817.613230] active_anon:156732 inactive_anon:1135415 isolated_anon:0 [ 817.613230] active_file:25 inactive_file:10 isolated_file:0 [ 817.613230] unevictable:54144 dirty:0 writeback:0 unstable:0 [ 817.613230] slab_reclaimable:14317 slab_unreclaimable:122607 [ 817.613230] mapped:58210 shmem:15173 pagetables:7789 bounce:0 [ 817.613230] free:25179 free_pcp:0 free_cma:0 [ 817.674005] Node 0 active_anon:609276kB inactive_anon:1110680kB active_file:4kB inactive_file:80kB unevictable:204788kB isolated(anon):0kB isolated(file):0kB mapped:125364kB dirty:0kB writeback:0kB shmem:58372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 598016kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 817.784629] Node 1 active_anon:17652kB inactive_anon:3430980kB active_file:96kB inactive_file:0kB unevictable:11788kB isolated(anon):0kB isolated(file):0kB mapped:107476kB dirty:0kB writeback:0kB shmem:2320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 817.845327] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:604kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 817.906492] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 817.911568] Node 0 DMA32 free:36032kB min:36200kB low:45248kB high:54296kB active_anon:609244kB inactive_anon:1110076kB active_file:4kB inactive_file:0kB unevictable:204788kB writepending:0kB present:3129332kB managed:2788160kB mlocked:204788kB kernel_stack:8672kB pagetables:11276kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 818.081655] lowmem_reserve[]: 0 0 0 0 0 [ 818.105754] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 818.212860] lowmem_reserve[]: 0 0 0 0 0 [ 818.236019] Node 1 Normal free:53616kB min:53696kB low:67120kB high:80544kB active_anon:17652kB inactive_anon:3430980kB active_file:44kB inactive_file:36kB unevictable:11788kB writepending:0kB present:4194304kB managed:4128256kB mlocked:11788kB kernel_stack:4448kB pagetables:19876kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 818.369365] lowmem_reserve[]: 0 0 0 0 0 [ 818.373391] Node 0 DMA: 14*4kB (UME) 1*8kB (U) 3*16kB (UME) 2*32kB (ME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11056kB [ 818.428212] Node 0 DMA32: 1151*4kB (UME) 318*8kB (UME) 1052*16kB (UME) 270*32kB (UME) 5*64kB (M) 8*128kB (M) 5*256kB (M) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36268kB [ 818.474266] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 818.518330] Node 1 Normal: 229*4kB (UME) 153*8kB (ME) 75*16kB (ME) 1261*32kB (UME) 157*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53740kB [ 818.586993] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 818.627321] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 818.641560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 818.650469] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 818.724140] 20648 total pagecache pages [ 818.728148] 0 pages in swap cache [ 818.731594] Swap cache stats: add 0, delete 0, find 0/0 [ 818.796069] Free swap = 0kB [ 818.799113] Total swap = 0kB [ 818.802125] 2097051 pages RAM [ 818.828886] 0 pages HighMem/MovableOnly [ 818.832879] 363840 pages reserved [ 818.855908] 0 pages cma reserved [ 818.859296] Out of memory (oom_kill_allocating_task): Kill process 26270 (systemd-journal) score 0 or sacrifice child [ 818.871133] Killed process 26270 (systemd-journal) total-vm:46096kB, anon-rss:480kB, file-rss:0kB, shmem-rss:2136kB [ 818.914509] oom_reaper: reaped process 26270 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2136kB [ 819.234370] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 819.264239] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 819.269027] CPU: 0 PID: 7979 Comm: syz-fuzzer Not tainted 4.14.215-syzkaller #0 [ 819.276465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 819.285807] Call Trace: [ 819.288391] dump_stack+0x1b2/0x283 [ 819.292021] dump_header+0x178/0x82f [ 819.295730] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 819.300833] ? ___ratelimit+0x2cd/0x522 [ 819.304804] oom_kill_process.cold+0x10/0xb18 [ 819.309302] out_of_memory+0xe3e/0x1190 [ 819.313280] ? oom_killer_disable+0x1c0/0x1c0 [ 819.317770] ? mutex_trylock+0x152/0x1a0 [ 819.321827] __alloc_pages_nodemask+0x23e1/0x2720 [ 819.326679] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 819.331563] alloc_pages_current+0x155/0x260 [ 819.335967] filemap_fault+0xea3/0x1980 [ 819.339947] ext4_filemap_fault+0x84/0xb0 [ 819.344089] __do_fault+0xfa/0x380 [ 819.347622] __handle_mm_fault+0x2497/0x4620 [ 819.352026] ? vm_insert_page+0x7c0/0x7c0 [ 819.356168] ? HARDIRQ_verbose+0x10/0x10 [ 819.360215] ? HARDIRQ_verbose+0x10/0x10 [ 819.364261] handle_mm_fault+0x391/0x860 [ 819.368305] __do_page_fault+0x549/0xad0 [ 819.372366] ? spurious_fault+0x640/0x640 [ 819.376510] ? do_page_fault+0x60/0x4f2 [ 819.380476] ? page_fault+0x2f/0x50 [ 819.384079] page_fault+0x45/0x50 [ 819.387548] RIP: 0000:0xb35628 [ 819.390714] RSP: 0060:000000c000423710 EFLAGS: 00203005 [ 819.421484] Mem-Info: [ 819.465829] active_anon:156623 inactive_anon:1135414 isolated_anon:0 [ 819.465829] active_file:40 inactive_file:0 isolated_file:0 [ 819.465829] unevictable:54144 dirty:0 writeback:0 unstable:0 [ 819.465829] slab_reclaimable:14312 slab_unreclaimable:122602 [ 819.465829] mapped:57675 shmem:15173 pagetables:7769 bounce:0 [ 819.465829] free:25013 free_pcp:11 free_cma:0 [ 819.651987] Node 0 active_anon:609076kB inactive_anon:1110676kB active_file:0kB inactive_file:0kB unevictable:204788kB isolated(anon):0kB isolated(file):0kB mapped:123224kB dirty:0kB writeback:0kB shmem:58372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 598016kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 819.697114] Node 1 active_anon:17416kB inactive_anon:3430980kB active_file:128kB inactive_file:4kB unevictable:11788kB isolated(anon):0kB isolated(file):0kB mapped:107476kB dirty:0kB writeback:0kB shmem:2320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 819.768174] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:604kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 819.913630] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 819.918697] Node 0 DMA32 free:35812kB min:36200kB low:45248kB high:54296kB active_anon:609044kB inactive_anon:1110072kB active_file:0kB inactive_file:0kB unevictable:204788kB writepending:0kB present:3129332kB managed:2788160kB mlocked:204788kB kernel_stack:8640kB pagetables:11228kB bounce:0kB free_pcp:44kB local_pcp:44kB free_cma:0kB [ 819.981157] lowmem_reserve[]: 0 0 0 0 0 [ 819.995874] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 820.029618] lowmem_reserve[]: 0 0 0 0 0 [ 820.033801] Node 1 Normal free:53308kB min:53696kB low:67120kB high:80544kB active_anon:17416kB inactive_anon:3430980kB active_file:72kB inactive_file:60kB unevictable:11788kB writepending:0kB present:4194304kB managed:4128256kB mlocked:11788kB kernel_stack:4480kB pagetables:19844kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 820.096020] lowmem_reserve[]: 0 0 0 0 0 [ 820.100024] Node 0 DMA: 14*4kB (UME) 1*8kB (U) 3*16kB (UME) 2*32kB (ME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11056kB [ 820.115746] Node 0 DMA32: 1135*4kB (UME) 333*8kB (UME) 1052*16kB (UME) 270*32kB (UME) 5*64kB (M) 8*128kB (M) 5*256kB (M) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36324kB [ 820.131182] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 820.141934] Node 1 Normal: 245*4kB (ME) 165*8kB (UME) 88*16kB (ME) 1236*32kB (UME) 157*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53308kB [ 820.156138] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 820.164987] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 820.173746] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 820.182591] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 820.191299] 20656 total pagecache pages [ 820.195335] 0 pages in swap cache [ 820.198780] Swap cache stats: add 0, delete 0, find 0/0 [ 820.204162] Free swap = 0kB [ 820.207171] Total swap = 0kB [ 820.210184] 2097051 pages RAM [ 820.223737] 0 pages HighMem/MovableOnly [ 820.227718] 363840 pages reserved [ 820.231157] 0 pages cma reserved [ 820.243302] Out of memory (oom_kill_allocating_task): Kill process 7979 (syz-fuzzer) score 0 or sacrifice child [ 820.300477] Killed process 26837 (syz-executor.3) total-vm:85024kB, anon-rss:1728kB, file-rss:88kB, shmem-rss:0kB [ 820.379539] oom_reaper: reaped process 26837 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 820.442158] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 820.690400] systemd-udevd cpuset=/ mems_allowed=0-1 18:30:57 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x7, &(0x7f0000000a00)=@framed={{}, [@initr0, @map_val]}, &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:30:57 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0", 0x5b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:30:57 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x8}, 0xc) 18:30:57 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x1, 0x8, 0x301}, 0x14}}, 0x0) 18:30:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={0x0}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={0x0}}, 0x0) [ 820.773332] CPU: 1 PID: 4626 Comm: systemd-udevd Not tainted 4.14.215-syzkaller #0 [ 820.781068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 820.790431] Call Trace: [ 820.793020] dump_stack+0x1b2/0x283 [ 820.796651] dump_header+0x178/0x82f [ 820.800365] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 820.805464] ? ___ratelimit+0x2cd/0x522 [ 820.809443] oom_kill_process.cold+0x10/0xb18 [ 820.813938] ? lock_downgrade+0x740/0x740 [ 820.818089] out_of_memory+0x2dc/0x1190 [ 820.822070] ? oom_killer_disable+0x1c0/0x1c0 [ 820.826570] ? mutex_trylock+0x152/0x1a0 [ 820.830650] __alloc_pages_nodemask+0x23e1/0x2720 [ 820.835501] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 820.840358] alloc_pages_current+0x155/0x260 [ 820.844783] filemap_fault+0xea3/0x1980 [ 820.848764] ext4_filemap_fault+0x84/0xb0 [ 820.852912] __do_fault+0xfa/0x380 [ 820.856448] __handle_mm_fault+0x2497/0x4620 [ 820.860856] ? vm_insert_page+0x7c0/0x7c0 [ 820.864999] ? HARDIRQ_verbose+0x10/0x10 [ 820.869057] ? HARDIRQ_verbose+0x10/0x10 [ 820.873129] handle_mm_fault+0x391/0x860 [ 820.877189] __do_page_fault+0x549/0xad0 [ 820.881383] ? spurious_fault+0x640/0x640 [ 820.885530] ? do_page_fault+0x60/0x4f2 [ 820.889502] ? page_fault+0x2f/0x50 [ 820.893133] page_fault+0x45/0x50 [ 820.896585] RIP: 1212:0x5647d9287968 [ 820.900294] RSP: d928c6e0:00005647d7b33a70 EFLAGS: 00000007 [ 820.982149] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 821.008994] Mem-Info: [ 821.011472] active_anon:156724 inactive_anon:1000836 isolated_anon:0 [ 821.011472] active_file:713 inactive_file:4966 isolated_file:0 [ 821.011472] unevictable:45197 dirty:57 writeback:0 unstable:0 [ 821.011472] slab_reclaimable:14319 slab_unreclaimable:122092 [ 821.011472] mapped:51600 shmem:15173 pagetables:7021 bounce:0 [ 821.011472] free:163294 free_pcp:654 free_cma:0 [ 821.030103] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 821.048427] Node 0 active_anon:609712kB inactive_anon:1040900kB active_file:3168kB inactive_file:29028kB unevictable:157700kB isolated(anon):0kB isolated(file):0kB mapped:98764kB dirty:284kB writeback:0kB shmem:58372kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 581632kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 821.085887] Node 1 active_anon:17180kB inactive_anon:2971252kB active_file:4768kB inactive_file:164kB unevictable:84kB isolated(anon):0kB isolated(file):0kB mapped:103076kB dirty:0kB writeback:0kB shmem:2320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 18:30:58 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x1, 0x8, 0x301}, 0x14}}, 0x0) 18:30:58 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x3, &(0x7f0000000a00)=@framed, &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:30:58 executing program 0: syz_emit_ethernet(0x14, &(0x7f0000001300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @val={@void}, {@generic={0x0, "57c3"}}}, 0x0) 18:30:58 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) [ 821.151419] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 821.163428] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 821.233642] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 821.246603] Node 0 DMA32 free:172532kB min:36200kB low:45248kB high:54296kB active_anon:611012kB inactive_anon:1022512kB active_file:19568kB inactive_file:14128kB unevictable:157700kB writepending:284kB present:3129332kB managed:2788160kB mlocked:157760kB kernel_stack:8672kB pagetables:11072kB bounce:0kB free_pcp:828kB local_pcp:588kB free_cma:0kB [ 821.275407] systemd[1]: Stopped Flush Journal to Persistent Storage. 18:30:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, 0x0, 0x0) 18:30:58 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f000011c000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xfeffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:30:58 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={0x0}}, 0x0) [ 821.303813] lowmem_reserve[]: 0 0 0 0 0 [ 821.307831] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 821.308468] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 821.338679] lowmem_reserve[]: 0 0 0 0 0 [ 821.352057] systemd[1]: Stopped Journal Service. [ 821.371640] Node 1 Normal free:529920kB min:53696kB low:67120kB high:80544kB active_anon:17080kB inactive_anon:2964352kB active_file:4768kB inactive_file:164kB unevictable:84kB writepending:0kB present:4194304kB managed:4128256kB mlocked:12kB kernel_stack:3808kB pagetables:17100kB bounce:0kB free_pcp:1332kB local_pcp:640kB free_cma:0kB [ 821.391303] systemd[1]: Starting Journal Service... [ 821.431069] lowmem_reserve[]: 0 0 0 0 0 [ 821.444240] Node 0 DMA: 18*4kB (UME) 1*8kB (U) 3*16kB (UME) 2*32kB (ME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11072kB [ 821.462517] Node 0 DMA32: 606*4kB (UE) 1536*8kB (UME) 2946*16kB (UME) 2011*32kB (UME) 157*64kB (M) 77*128kB (M) 7*256kB (M) 4*512kB (M) 0*1024kB 1*2048kB (M) 1*4096kB (M) = 156088kB [ 821.480261] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 821.482105] systemd[1]: Started Load/Save RF Kill Switch Status. [ 821.491258] Node 1 Normal: 6038*4kB (UME) 7169*8kB (UME) 6310*16kB (UME) 5201*32kB (UME) 1934*64kB (M) 448*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 530016kB [ 821.491347] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 821.491353] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 821.491359] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 821.491365] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 821.491369] 26474 total pagecache pages [ 821.491378] 0 pages in swap cache [ 821.491383] Swap cache stats: add 0, delete 0, find 0/0 [ 821.491387] Free swap = 0kB [ 821.491390] Total swap = 0kB [ 821.491396] 2097051 pages RAM [ 821.491399] 0 pages HighMem/MovableOnly [ 821.491405] 363840 pages reserved [ 821.682199] 0 pages cma reserved [ 821.689087] Out of memory: Kill process 28213 (syz-executor.5) score 1011 or sacrifice child [ 821.808635] systemd-journald[28282]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 821.935817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 821.942564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 821.985413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 821.992159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 822.050706] device bridge_slave_1 left promiscuous mode [ 822.072084] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.106750] device bridge_slave_0 left promiscuous mode [ 822.146854] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.181454] device veth1_macvtap left promiscuous mode [ 822.199252] device veth0_macvtap left promiscuous mode [ 822.217106] device veth1_vlan left promiscuous mode [ 822.232380] device veth0_vlan left promiscuous mode [ 822.565239] systemd[1]: Started Journal Service. [ 822.573042] device hsr_slave_1 left promiscuous mode [ 822.597034] device hsr_slave_0 left promiscuous mode [ 822.638820] team0 (unregistering): Port device team_slave_1 removed [ 822.655229] team0 (unregistering): Port device team_slave_0 removed [ 822.674221] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 822.704639] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 822.780220] bond0 (unregistering): Released all slaves 18:31:00 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0", 0x5b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 825.210209] IPVS: ftp: loaded support on port[0] = 21 [ 825.325205] chnl_net:caif_netlink_parms(): no params data found [ 825.404210] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.410656] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.418323] device bridge_slave_0 entered promiscuous mode [ 825.425487] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.431853] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.439177] device bridge_slave_1 entered promiscuous mode [ 825.459183] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 825.468175] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 825.487675] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 825.495010] team0: Port device team_slave_0 added [ 825.500368] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 825.508235] team0: Port device team_slave_1 added [ 825.526838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.533228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.559137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.570576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.577489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.603011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.616290] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 825.624491] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 825.648902] device hsr_slave_0 entered promiscuous mode [ 825.654771] device hsr_slave_1 entered promiscuous mode [ 825.660674] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 825.668809] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 825.745251] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.751602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.758262] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.764679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.797727] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 825.804297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.812258] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 825.821650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 825.829028] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.836668] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.846590] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 825.853396] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.861918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 825.869899] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.876324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.893234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 825.900822] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.907228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.919258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 825.927658] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 825.937927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 825.951746] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 825.962040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 825.972716] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 825.979660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 825.988971] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 825.997262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 826.010258] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 826.018157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 826.025660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 826.037338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.093394] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 826.104134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 826.135283] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 826.143625] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 826.150242] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 826.163844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 826.171273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 826.178934] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 826.187331] device veth0_vlan entered promiscuous mode [ 826.198469] device veth1_vlan entered promiscuous mode [ 826.204571] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 826.213956] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 826.227461] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 826.236899] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 826.244576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 826.251938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 826.264319] device veth0_macvtap entered promiscuous mode [ 826.270437] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 826.279389] device veth1_macvtap entered promiscuous mode [ 826.288142] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 826.298140] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 826.308315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 826.318469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.328097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 826.337889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.347278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 826.357016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.366258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 826.376020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.385219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 826.395262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.406016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 826.413786] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 826.422472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 826.431919] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 826.442214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 826.452415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.461720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 826.472686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.481800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 826.491592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.500777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 826.510669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.520153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 826.530344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.540959] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 826.548085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 826.555349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 826.563863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:31:03 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x4800, 0x0, 0x0) 18:31:03 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) 18:31:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, 0x0, 0x0) 18:31:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200800000000013, &(0x7f0000000000)=0x400100000001, 0x458) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) 18:31:03 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000000c0)) write$binfmt_elf64(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0xbb, 0xfd, 0x1, 0x1, 0x8, 0x3, 0x3d, 0x3, 0x2be, 0x40, 0x18c, 0x8000, 0x4, 0x38, 0x2, 0x7, 0x1, 0x2}, [{0x6, 0x80, 0x7, 0x7fff, 0xdc, 0x2, 0x3f, 0x7fff}, {0x5, 0xfffffffa, 0x40, 0x1, 0x3, 0x7, 0x4, 0x3b1db395}], "38ffa8aa80e6b13dfa1cce5901be813368a65da4d73e411a5ff8cc6013ee9e05658056b365b22b2c2153d1280d38d8226a49dc5ab5475dc25ce051be7ba7a0623288b63aac83cee4c5581be21d97acbe61ef7bf7adafcc67ed738b3c16640e9e09a0d642760caebf25cd20397efa6ac5db7e6f437a40ce582288b14acd599f69986b7a855459db4b6245430f49008df0b959399cd98ec4cd97318586f1f3261f6d132eb4b5abb5673c4859dc42cc48a95d4953af6e9dd883f0e6cd67d2f82bef290249e4df1fb83a45d7d9ba1a81e43fe7aca7a5296732135edb9a40c9acd47f3f35cd7d8cf27d0b58644d10a6f53ffc65", [[], []]}, 0x3a1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:31:03 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c5995", 0x61}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:31:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, 0x0, 0x0) 18:31:04 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 18:31:04 executing program 3: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) ioctl$CHAR_RAW_IOMIN(r0, 0x1278, 0x0) 18:31:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 18:31:04 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) ioctl$CHAR_RAW_PG(r0, 0x1269, 0x0) 18:31:04 executing program 3: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7}, 0xfffffe04) write$P9_RCLUNK(r0, &(0x7f0000000100)={0x7}, 0x7) 18:31:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 18:31:04 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000180)={0x7}, 0xfffffffffffffff3) 18:31:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 18:31:04 executing program 2: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7}, 0xfffffe04) write$P9_RLINK(r0, &(0x7f0000000000)={0x7}, 0x7) [ 827.263481] Bluetooth: hci3 command 0x0409 tx timeout 18:31:04 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000180)={0x7}, 0x0) [ 829.342235] Bluetooth: hci3 command 0x041b tx timeout 18:31:06 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c5995", 0x61}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:31:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) 18:31:06 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000010405000000000000000000000040000500010001"], 0x1c}}, 0x0) close(r2) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8200c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x41754, 0x0, 0x0, 0x0, 0x0, 0xf04}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000000)={0x97, 0x1b}) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r5, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_LIMIT(r5, 0x8030942b, &(0x7f00000000c0)={0x9, {0x20, 0x9, 0x4, 0x100000001, 0x7}}) 18:31:06 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7}, 0xfffffe04) write$P9_RSTAT(r0, &(0x7f0000000100)={0x4a, 0x7d, 0x0, {0x0, 0x43, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x4, '$@.-', 0x4, '\',(#', 0x2, '{.', 0x6, '9P2000'}}, 0x4a) 18:31:06 executing program 3: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7}, 0xfffffe04) write$P9_RVERSION(r0, &(0x7f00000000c0)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) 18:31:06 executing program 2: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7}, 0xfffffe04) write$P9_RSYMLINK(r0, &(0x7f00000000c0)={0x14}, 0x14) 18:31:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) 18:31:07 executing program 2: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7}, 0xfffffe04) write$P9_RLOCK(r0, &(0x7f00000000c0)={0x8}, 0x8) 18:31:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) 18:31:07 executing program 2: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7}, 0xfffffe04) write$P9_RSTATu(r0, &(0x7f0000000140)={0x6d, 0x7d, 0x0, {{0x0, 0x52, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xd, '}#(/,([-}]\x93:-', 0x0, '', 0x5, '^-+\\^', 0xd, '}#(/,([-}]\x93:-'}, 0x6, '^-+:&]'}}, 0x6d) 18:31:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 18:31:07 executing program 2: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$CHAR_RAW_FRASET(r0, 0x1264, 0x0) [ 831.432204] Bluetooth: hci3 command 0x040f tx timeout 18:31:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c5995", 0x61}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:31:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 18:31:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$netlink(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000b00)={0xeb4, 0x0, 0x0, 0x0, 0x0, "", [@nested={0xea1, 0x0, 0x0, 0x1, [@typed={0x4}, @generic="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", @typed={0x8, 0x0, 0x0, 0x0, @u32}]}, @generic]}, 0xeb4}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)={0x10}, 0x10}, {0x0}], 0x9}, 0x0) 18:31:09 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x50931fc42ba7608e) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f00009e3000/0x3000)=nil) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800005, 0xc, 0x0, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) r3 = dup(r2) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:31:09 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001540)='./cgroup/syz0\x00', 0x200002, 0x0) 18:31:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x11, r0, 0x0) 18:31:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 18:31:10 executing program 3: r0 = socket(0x25, 0x1, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={0x0}}, 0x0) 18:31:10 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000a00)={'batadv0\x00'}) 18:31:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x28f, 0xffffffffffffffff, 0x2}, 0x40) 18:31:10 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x383, 0x31}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x1080) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000280)={0x9, [[0x0, 0x1, 0xda5, 0x3, 0x9, 0x400, 0x80000000, 0x7], [0xdfe, 0xdf, 0x8, 0x6847, 0x8, 0xffffffff, 0x8, 0x9e], [0x81, 0x7f, 0x3ff, 0x8001, 0x1, 0x5, 0x81, 0x401]], [], [{0x1, 0xfff, 0x0, 0x1}, {0x101, 0xf7a6, 0x0, 0x1, 0x0, 0x1}, {0x3, 0x5, 0x0, 0x1, 0x1}, {0x10000, 0x3, 0x1, 0x0, 0x1, 0x1}, {0xffff0000, 0x7f, 0x1, 0x0, 0x0, 0x1}, {0x7ff, 0x3ff, 0x1, 0x0, 0x1, 0x1}, {0x8, 0x5f, 0x0, 0x1}, {0xd0, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x2, 0xfff, 0x1, 0x1, 0x1, 0x1}, {0x5, 0x23, 0x1, 0x1, 0x1}, {0x7, 0x5, 0x0, 0x0, 0x1}]}) r3 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:31:10 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001d40)={0xd}, 0x40) [ 833.501842] Bluetooth: hci3 command 0x0419 tx timeout 18:31:13 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364", 0x64}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:31:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 18:31:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={0x0}}, 0x0) 18:31:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x34, 0x5, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x0) 18:31:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}}, 0x0) 18:31:13 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="7a755d1e7c5f2f0e0691db2f8801a872eddaf4009b7f9c7065270999653e1f30f0f4195b55c52161b39b3d8bd4784137648bca1cbdd198460ce954263c7d989e212c7c9c68be37ee", 0x48}], 0x1, 0x9, 0x5, 0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:31:13 executing program 2: pipe(&(0x7f0000000480)={0xffffffffffffffff}) accept4$llc(r0, 0x0, 0x0, 0x80400) 18:31:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f00000031c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000040)="8a", 0x1}], 0x1}}], 0x1, 0x0) 18:31:13 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) getpeername(r0, 0x0, &(0x7f00000001c0)) 18:31:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000008400)={0x14, 0x15, 0x101, 0x0, 0x0, "", [@generic="02"]}, 0x14}], 0x1}, 0x0) 18:31:13 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10}, 0x10}}, 0x0) 18:31:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() sendmmsg$unix(r0, &(0x7f0000001300)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}, @rights={{0x10}}], 0x30}], 0x1, 0x0) 18:31:16 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364", 0x64}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:31:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 18:31:16 executing program 3: openat$ppp(0xffffffffffffff9c, 0x0, 0x200000, 0x0) 18:31:16 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x0, 0x7b8e0aa3bba129ff}, 0x14) 18:31:16 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:31:16 executing program 0: socket(0x26, 0x5, 0x2) 18:31:16 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)="b5", 0x1, 0xc8c7, &(0x7f0000000180)={0xa, 0x4e23, 0x701996d8, @private0}, 0x1c) 18:31:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0x4, 0x4) 18:31:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 18:31:16 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001640)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001400)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}], &(0x7f0000001480)='syzkaller\x00', 0x1, 0xcb, &(0x7f00000014c0)=""/203, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:31:16 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 18:31:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)=[{0x0, 0x7ffff000}, {0x0}, {&(0x7f0000001880)={0x10}, 0x10}], 0x3}, 0x0) 18:31:19 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364", 0x64}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:31:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000100)) 18:31:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, r1, 0x1}, 0x14}}, 0x0) 18:31:19 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0x0, &(0x7f0000000100)) 18:31:19 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x7fffffff, 0x4) 18:31:19 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:31:19 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, &(0x7f0000000480)=""/193, 0x0, 0xc1}, 0x20) 18:31:19 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0xbbf31870fb2c74b0, 0xd, &(0x7f0000000640)=ANY=[@ANYRES32], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 18:31:19 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000001b40)={&(0x7f0000001a00), 0xc, &(0x7f0000001b00)={&(0x7f0000001a40)={0x14, 0x453, 0x100, 0x70bd28, 0x25dfdbfe, "fd"}, 0x14}}, 0x0) 18:31:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) 18:31:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0x20}, 0x0) 18:31:19 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x6, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[], 0xfd45) [ 841.976740] audit: type=1107 audit(1610735479.175:67): pid=28799 uid=0 auid=0 ses=4 msg='ý' 18:31:22 executing program 1: r0 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000001c0), 0x10) 18:31:22 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000140)={@random="4766ac334ca0", @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 18:31:22 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b", 0x66}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:31:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="58000000140019234083feff040d8c560a02580200ff0000000000000000ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c10000000000000000000", 0x58}], 0x1) 18:31:22 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000640)='./bus\x00') 18:31:22 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readahead(r0, 0x800, 0x80) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:31:22 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) write$ppp(r2, &(0x7f0000000100)="14", 0x1) 18:31:22 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5451, 0x0) 18:31:22 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x7, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@map, @ldst={0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0xf2, &(0x7f0000000280)=""/242, 0x0, 0xd, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:31:22 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 18:31:22 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) close(r0) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) 18:31:22 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="dd", 0x200001c1}], 0x1}, 0x0) [ 845.237862] overlayfs: fs on './file0' does not support file handles, falling back to index=off. [ 845.329094] overlayfs: filesystem on './bus' not supported as upperdir [ 845.331434] overlayfs: fs on '.' does not support file handles, falling back to index=off. 18:31:22 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000640)='./bus\x00') [ 845.371162] overlayfs: failed to resolve 'file0': -2 [ 845.448974] overlayfs: fs on './file0' does not support file handles, falling back to index=off. 18:31:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x6, 0x10}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x4, &(0x7f0000000080)=@raw=[@generic={0x81, 0x6, 0xc, 0xd08a, 0x5}, @ldst={0x3, 0x2, 0x2, 0x4, 0xb, 0x20, 0x4}, @map={0x18, 0x4, 0x1, 0x0, r0}], &(0x7f00000000c0)='syzkaller\x00', 0x800, 0x9c, &(0x7f0000000100)=""/156, 0x41000, 0xa, [], 0x0, 0x5, r0, 0x8, &(0x7f00000001c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x3, 0x6ec, 0x1}, 0x10, 0xffffffffffffffff, r0}, 0x78) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map=r1, r2, 0x24}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x5, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x38, 0x0, 0x6f, 0x1}, @struct={0x2, 0x3, 0x0, 0x4, 0x1, 0x14534868, [{0x2, 0x3, 0xfffffff7}, {0xb, 0x4, 0x3}, {0x0, 0x3, 0xffff}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x2}}]}, {0x0, [0x71, 0x5f, 0x0]}}, &(0x7f0000000500)=""/64, 0x75, 0x40}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x4, 0x0}, 0x8) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0xd, &(0x7f0000000300)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x4e}, @jmp={0x5, 0x1, 0x6, 0x7, 0xa, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x49}, @exit, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101}, @map={0x18, 0x9, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f0000000380)='GPL\x00', 0x2, 0x97, &(0x7f00000003c0)=""/151, 0x40f00, 0xf, [], 0x0, 0x1b, r3, 0x8, &(0x7f0000000580)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0xd, 0x81, 0x800}, 0x10, r4}, 0x78) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000a40)={r0}, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000a80)={r0}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000ac0)=r5) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000b00), 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000b40)={r0, r1}, 0xc) 18:31:22 executing program 1: perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 18:31:22 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000640)='./bus\x00') [ 845.751601] overlayfs: fs on './file0' does not support file handles, falling back to index=off. 18:31:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b", 0x66}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:31:25 executing program 5: mremap(&(0x7f000057f000/0x4000)=nil, 0x4000, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:31:25 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r0, &(0x7f000001d840)={0x0, 0x0, &(0x7f000001c7c0)=[{&(0x7f000001b200)=""/83, 0x53}], 0x300, 0x0, 0xf0ffffff7f0000}, 0x0) 18:31:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) 18:31:25 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000640)='./bus\x00') 18:31:25 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000005a80)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfd, &(0x7f0000000100)=""/253, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:31:25 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000580)=[{0x0, 0x40030000000000}, {&(0x7f0000000300)="ea", 0x1}], 0x2}, 0x0) 18:31:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 18:31:25 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f0000000000)={r4}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, &(0x7f0000000180)={0xfff, 0x0, 0x0, 0x0, r5}, 0x10) 18:31:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$lock(r0, 0x0, &(0x7f00000000c0)) 18:31:25 executing program 2: pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r0, &(0x7f0000001680)=[{0x0}], 0x1) [ 848.214743] overlayfs: fs on './file0' does not support file handles, falling back to index=off. 18:31:25 executing program 3: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_BMAP(r1, &(0x7f0000002100)={0x18}, 0xfffffee5) write$P9_RRENAME(r1, &(0x7f00000002c0)={0x7, 0x15, 0x1}, 0x7) write$FUSE_CREATE_OPEN(r1, &(0x7f00000000c0)={0xa0, 0x0, 0x0, {{0x6, 0x0, 0x7, 0x5, 0x7, 0x3, {0x0, 0x765, 0x401, 0x5, 0x800, 0x6, 0x1ff, 0xff, 0x0, 0xa000, 0x81b, 0xee01, 0x0, 0x896, 0x1a}}}}, 0xa0) pipe(&(0x7f0000001880)) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 18:31:28 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b", 0x66}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:31:28 executing program 2: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_BMAP(r1, &(0x7f0000002100)={0x18}, 0xfffffee5) write$P9_RRENAME(r1, &(0x7f00000002c0)={0x7}, 0x7) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18}, 0x18) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 18:31:28 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x0) 18:31:28 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) mlockall(0x7) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x1f, 0x4, 0x5, 0x81, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x4, 0x6}, 0x2b51, 0x5, 0x0, 0x8, 0x7, 0x0, 0x4}, 0x0, 0xf, r2, 0x2) 18:31:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[], 0xa, &(0x7f0000000440)=[{&(0x7f0000000080)="88", 0x1}, {&(0x7f00000000c0)='N', 0x1}, {0x0}, {&(0x7f0000000200)="a3", 0x1}], 0x4}, 0x0) 18:31:28 executing program 3: pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$lock(r0, 0x9, 0x0) 18:31:28 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}, {0x0}, {0x0}], 0x3) 18:31:28 executing program 0: fchmodat(0xffffffffffffffff, 0x0, 0x0) 18:31:28 executing program 1: pipe2(0x0, 0x10000) 18:31:28 executing program 3: socket$inet6(0x18, 0x3, 0x2) 18:31:28 executing program 0: syz_emit_ethernet(0x6e, &(0x7f00000011c0)={@random="5d0511eb659e", @random="0fb2a1726310", @val, {@ipv6}}, 0x0) 18:31:28 executing program 1: syz_emit_ethernet(0x70, &(0x7f0000000140)={@random="5d0511eb659e", @random="0fb2a1726310", @val, {@ipv6}}, 0x0) 18:31:31 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@random="5d0511eb659e", @random="0fb2a1726310", @val, {@ipv6}}, 0x0) 18:31:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000010c0)=ANY=[@ANYBLOB="010136"], 0xa) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 18:31:31 executing program 1: syz_emit_ethernet(0x47, 0x0, 0x0) 18:31:31 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) 18:31:31 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:31:31 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0) 18:31:31 executing program 0: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 18:31:31 executing program 2: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 18:31:31 executing program 1: r0 = socket$inet6(0x1e, 0x3, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 18:31:31 executing program 3: r0 = socket$inet6(0x1e, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$unix(r1, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=[@rights], 0x10}, 0x0) 18:31:31 executing program 1: getgroups(0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setregid(r0, 0x0) setregid(0x0, 0x0) 18:31:31 executing program 2: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 18:31:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00'}) 18:31:31 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioprio_get$pid(0x1, r1) 18:31:31 executing program 1: openat$vsock(0xffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0xbac02, 0x0) 18:31:31 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x8000, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f000042a000/0x4000)=nil, 0x4000}}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) mlock(&(0x7f0000415000/0x4000)=nil, 0x4000) r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x200081) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x80, 0x1, 0x2, 0x1, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x401, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0xa01, 0x992a, 0xb715, 0x7, 0xffff, 0x1, 0x100}, 0x0, 0x3, r2, 0x0) munmap(&(0x7f00002c7000/0x3000)=nil, 0x3000) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r4, 0x0) madvise(&(0x7f000075c000/0x4000)=nil, 0x4000, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:31:34 executing program 0: pselect6(0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, &(0x7f0000000280)={0x0, 0x0, 0x4}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0xff]}, 0x8}) 18:31:34 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x10000000, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:31:34 executing program 2: msgget$private(0x0, 0x0) r0 = getpgrp(0x0) migrate_pages(r0, 0x9, &(0x7f0000000180)=0x6, &(0x7f00000001c0)=0x8001) 18:31:34 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:31:34 executing program 3: openat$vfio(0xffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x20840, 0x0) 18:31:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBLED(r0, 0x4b65, 0x101) 18:31:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000010c0)={'team0\x00'}) 18:31:34 executing program 2: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000280)={0x2}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0xff]}, 0x8}) 18:31:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x1}, 0x1c}}, 0x0) 18:31:34 executing program 1: openat$vsock(0xffffff9c, &(0x7f00000003c0)='/dev/vsock\x00', 0x200, 0x0) 18:31:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000080)=""/203, &(0x7f0000000180)=0xcb) 18:31:34 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_BMAP(r1, &(0x7f0000002100)={0x18}, 0xfffffee5) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18}, 0x18) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getownex(r2, 0x10, 0x0) [ 857.843747] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 857.871687] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 857.877022] CPU: 1 PID: 29059 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 857.884911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 857.894272] Call Trace: [ 857.896963] dump_stack+0x1b2/0x283 [ 857.900598] warn_alloc.cold+0x96/0x1cc [ 857.904574] ? zone_watermark_ok_safe+0x220/0x220 [ 857.909472] __alloc_pages_nodemask+0x2127/0x2720 [ 857.914332] ? lock_acquire+0x170/0x3f0 [ 857.918321] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 857.923182] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 857.928639] ? __mutex_unlock_slowpath+0x75/0x770 [ 857.933490] alloc_pages_current+0x155/0x260 [ 857.937904] ion_page_pool_alloc+0x118/0x1b0 [ 857.942315] ion_system_heap_allocate+0x133/0x8c0 [ 857.947166] ? ion_alloc+0x187/0x810 [ 857.950883] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 857.956338] ? ion_system_contig_heap_create+0x130/0x130 [ 857.961786] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 857.966919] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 857.971773] ion_alloc+0x204/0x810 [ 857.975325] ? ion_dma_buf_release+0x40/0x40 [ 857.979745] ? __might_fault+0x177/0x1b0 [ 857.983812] ion_ioctl+0xea/0x1ee [ 857.987268] ? ion_alloc.cold+0x3b/0x3b [ 857.991248] ? HARDIRQ_verbose+0x10/0x10 [ 857.995309] ? lock_downgrade+0x740/0x740 [ 857.999562] ? ion_alloc.cold+0x3b/0x3b [ 858.003550] do_vfs_ioctl+0x75a/0xff0 [ 858.007362] ? ioctl_preallocate+0x1a0/0x1a0 [ 858.011773] ? lock_downgrade+0x740/0x740 [ 858.015933] ? __fget+0x225/0x360 [ 858.019400] ? do_vfs_ioctl+0xff0/0xff0 [ 858.023387] ? security_file_ioctl+0x83/0xb0 [ 858.027808] SyS_ioctl+0x7f/0xb0 [ 858.031180] ? do_vfs_ioctl+0xff0/0xff0 [ 858.035158] do_syscall_64+0x1d5/0x640 [ 858.039055] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 858.044247] RIP: 0033:0x45e219 [ 858.047435] RSP: 002b:00007f9f6fdb6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 858.055148] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 858.062426] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 858.069698] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 858.076968] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 858.084241] R13: 00007ffdd833b2ef R14: 00007f9f6fdb79c0 R15: 000000000119bf8c [ 858.096133] Mem-Info: [ 858.099331] active_anon:157428 inactive_anon:1105879 isolated_anon:0 [ 858.099331] active_file:362 inactive_file:470 isolated_file:32 [ 858.099331] unevictable:54608 dirty:0 writeback:0 unstable:0 [ 858.099331] slab_reclaimable:14077 slab_unreclaimable:123266 [ 858.099331] mapped:58709 shmem:17211 pagetables:7795 bounce:0 [ 858.099331] free:27348 free_pcp:84 free_cma:0 [ 858.135925] Node 0 active_anon:613208kB inactive_anon:1117780kB active_file:496kB inactive_file:584kB unevictable:183556kB isolated(anon):0kB isolated(file):128kB mapped:109496kB dirty:0kB writeback:0kB shmem:66544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 858.166447] Node 1 active_anon:16480kB inactive_anon:3305788kB active_file:0kB inactive_file:8kB unevictable:34936kB isolated(anon):0kB isolated(file):0kB mapped:123232kB dirty:0kB writeback:0kB shmem:2300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 858.195202] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 858.224740] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 858.230882] Node 0 DMA32 free:42568kB min:36200kB low:45248kB high:54296kB active_anon:613176kB inactive_anon:1117192kB active_file:196kB inactive_file:808kB unevictable:183556kB writepending:0kB present:3129332kB managed:2788160kB mlocked:183556kB kernel_stack:8672kB pagetables:12004kB bounce:0kB free_pcp:184kB local_pcp:72kB free_cma:0kB [ 858.262921] lowmem_reserve[]: 0 0 0 0 0 [ 858.267437] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 858.296310] lowmem_reserve[]: 0 0 0 0 0 [ 858.301396] Node 1 Normal free:55688kB min:53696kB low:67120kB high:80544kB active_anon:16480kB inactive_anon:3305788kB active_file:0kB inactive_file:8kB unevictable:34936kB writepending:0kB present:4194304kB managed:4128256kB mlocked:34936kB kernel_stack:4576kB pagetables:19412kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 858.332516] lowmem_reserve[]: 0 0 0 0 0 [ 858.337459] Node 0 DMA: 17*4kB (ME) 4*8kB (UM) 2*16kB (ME) 2*32kB (ME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11076kB [ 858.357583] Node 0 DMA32: 758*4kB (UMEH) 217*8kB (UMH) 515*16kB (UMH) 846*32kB (UMEH) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 40144kB [ 858.396518] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 858.410866] Node 1 Normal: 90*4kB (UME) 25*8kB (ME) 25*16kB (ME) 16*32kB (UME) 829*64kB (UM) 4*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55040kB [ 858.426927] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 858.456535] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 858.470701] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 858.480433] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 858.489919] 23250 total pagecache pages [ 858.494680] 0 pages in swap cache [ 858.498681] Swap cache stats: add 0, delete 0, find 0/0 [ 858.504822] Free swap = 0kB [ 858.508444] Total swap = 0kB [ 858.511908] 2097051 pages RAM [ 858.515215] 0 pages HighMem/MovableOnly [ 858.519807] 363840 pages reserved [ 858.523915] 0 pages cma reserved 18:31:37 executing program 2: r0 = epoll_create(0x1) epoll_wait(r0, &(0x7f0000002a80)=[{}], 0x1, 0x0) 18:31:37 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:31:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, 0x0, &(0x7f00000001c0)) 18:31:37 executing program 0: perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x9, &(0x7f0000000040)) 18:31:37 executing program 1: perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:31:37 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb}) accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x10, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000000c0)) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f00000000c0)) pipe(&(0x7f0000000100)) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000000c0)) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f00000000c0)) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r6 = dup(r5) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r6, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:31:37 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0) 18:31:37 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) 18:31:37 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000040c0)='/dev/vcsa#\x00', 0x3, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000380)='/dev/nbd#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 18:31:37 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) 18:31:37 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockname(r0, &(0x7f0000000100)=@qipcrtr, &(0x7f00000000c0)=0xfffffffffffffd43) 18:31:37 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8942, &(0x7f0000000000)={'vcan0\x00', @ifru_mtu}) 18:31:37 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8915, &(0x7f0000000000)={'lo\x00', @ifru_mtu}) [ 860.814092] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 860.845136] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 860.850364] CPU: 1 PID: 29134 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 860.858252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 860.867611] Call Trace: [ 860.870298] dump_stack+0x1b2/0x283 [ 860.873936] warn_alloc.cold+0x96/0x1cc [ 860.877919] ? zone_watermark_ok_safe+0x220/0x220 [ 860.882783] __alloc_pages_nodemask+0x2127/0x2720 [ 860.887642] ? lock_acquire+0x170/0x3f0 [ 860.891633] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 860.896497] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 860.901953] ? perf_trace_lock_acquire+0x332/0x510 [ 860.906898] ? __mutex_unlock_slowpath+0x75/0x770 [ 860.911766] alloc_pages_current+0x155/0x260 [ 860.916186] ion_page_pool_alloc+0x118/0x1b0 [ 860.920600] ion_system_heap_allocate+0x133/0x8c0 [ 860.925452] ? ion_alloc+0x187/0x810 [ 860.926668] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 860.929180] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 860.929192] ? ion_system_contig_heap_create+0x130/0x130 [ 860.929199] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 860.929210] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 860.929223] ion_alloc+0x204/0x810 [ 860.929239] ? ion_dma_buf_release+0x40/0x40 [ 860.929255] ? __might_fault+0x177/0x1b0 [ 860.929267] ion_ioctl+0xea/0x1ee [ 860.929275] ? ion_alloc.cold+0x3b/0x3b [ 860.929285] ? HARDIRQ_verbose+0x10/0x10 [ 860.929295] ? lock_downgrade+0x740/0x740 [ 860.966756] (null) [ 860.967351] ? ion_alloc.cold+0x3b/0x3b [ 860.975924] , order=1, oom_score_adj=0 [ 860.978793] do_vfs_ioctl+0x75a/0xff0 [ 860.978807] ? ioctl_preallocate+0x1a0/0x1a0 [ 860.978816] ? lock_downgrade+0x740/0x740 [ 860.978831] ? __fget+0x225/0x360 [ 860.978840] ? do_vfs_ioctl+0xff0/0xff0 [ 860.978850] ? security_file_ioctl+0x83/0xb0 [ 860.978861] SyS_ioctl+0x7f/0xb0 [ 860.978868] ? do_vfs_ioctl+0xff0/0xff0 [ 860.978880] do_syscall_64+0x1d5/0x640 [ 860.978899] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 860.978907] RIP: 0033:0x45e219 [ 860.978911] RSP: 002b:00007f9f6fd95c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 860.990494] systemd-journal cpuset= [ 860.993203] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 860.993209] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 860.993215] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 860.993220] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 860.993228] R13: 00007ffdd833b2ef R14: 00007f9f6fd969c0 R15: 000000000119c034 [ 861.005037] / [ 861.008582] Mem-Info: [ 861.030056] mems_allowed=0-1 [ 861.033428] active_anon:158470 inactive_anon:1112050 isolated_anon:0 [ 861.033428] active_file:31 inactive_file:74 isolated_file:0 [ 861.033428] unevictable:49009 dirty:0 writeback:0 unstable:0 [ 861.033428] slab_reclaimable:14055 slab_unreclaimable:122950 [ 861.033428] mapped:54613 shmem:17211 pagetables:7778 bounce:0 [ 861.033428] free:25323 free_pcp:117 free_cma:0 [ 861.049443] CPU: 0 PID: 28282 Comm: systemd-journal Not tainted 4.14.215-syzkaller #0 [ 861.060064] Node 0 active_anon:614980kB inactive_anon:1128068kB active_file:108kB inactive_file:128kB unevictable:181500kB isolated(anon):0kB isolated(file):0kB mapped:113260kB dirty:0kB writeback:0kB shmem:66548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 861.060080] Node 1 active_anon:18900kB inactive_anon:3320132kB active_file:16kB inactive_file:16kB unevictable:15136kB isolated(anon):0kB isolated(file):0kB mapped:105692kB dirty:0kB writeback:0kB shmem:2296kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 861.067324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 861.067328] Call Trace: [ 861.067344] dump_stack+0x1b2/0x283 [ 861.067357] dump_header+0x178/0x82f [ 861.078931] Node 0 [ 861.081897] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 861.089172] DMA free:11076kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 861.090843] ? ___ratelimit+0x2cd/0x522 [ 861.093224] lowmem_reserve[]: [ 861.096343] oom_kill_process.cold+0x10/0xb18 [ 861.130270] 0 [ 861.138205] out_of_memory+0xe3e/0x1190 [ 861.166815] 2717 [ 861.194564] ? oom_killer_disable+0x1c0/0x1c0 [ 861.194574] ? mutex_trylock+0x152/0x1a0 [ 861.194584] __alloc_pages_nodemask+0x23e1/0x2720 [ 861.194605] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 861.203965] 2718 [ 861.206532] ? cache_grow_begin+0x41/0x630 [ 861.210146] 2718 [ 861.213820] cache_grow_begin+0x91/0x630 [ 861.216028] 2718 [ 861.221141] ? cache_grow_begin+0x91/0x630 [ 861.221152] fallback_alloc+0x207/0x2c0 [ 861.221165] kmem_cache_alloc+0x1e5/0x3c0 [ 861.250867] getname_flags+0xc8/0x550 [ 861.250880] do_sys_open+0x1ce/0x410 [ 861.250889] ? filp_open+0x60/0x60 [ 861.253968] Node 0 [ 861.258443] ? do_syscall_64+0x4c/0x640 [ 861.260270] DMA32 free:36136kB min:36200kB low:45248kB high:54296kB active_anon:614948kB inactive_anon:1127480kB active_file:268kB inactive_file:320kB unevictable:181104kB writepending:0kB present:3129332kB managed:2788160kB mlocked:181104kB kernel_stack:8704kB pagetables:11704kB bounce:0kB free_pcp:260kB local_pcp:8kB free_cma:0kB [ 861.264197] ? do_sys_open+0x410/0x410 [ 861.266232] lowmem_reserve[]: [ 861.270722] do_syscall_64+0x1d5/0x640 [ 861.270738] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 861.270747] RIP: 0033:0x7f8fdf7b7840 [ 861.274780] 0 [ 861.279596] RSP: 002b:00007ffd09aef798 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 861.279606] RAX: ffffffffffffffda RBX: 00007ffd09aefaa0 RCX: 00007f8fdf7b7840 [ 861.279611] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 0000562c6ac725f0 [ 861.279615] RBP: 000000000000000d R08: 000000000000c0c1 R09: 00000000ffffffff [ 861.279621] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 861.284448] 0 [ 861.286505] R13: 0000562c6ac6d040 R14: 00007ffd09aefa60 R15: 0000562c6ac714b0 [ 861.436659] 0 0 0 [ 861.438938] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 861.472422] lowmem_reserve[]: 0 0 0 0 0 [ 861.476452] Node 1 Normal free:53460kB min:53696kB low:67120kB high:80544kB active_anon:18900kB inactive_anon:3320132kB active_file:16kB inactive_file:16kB unevictable:15136kB writepending:0kB present:4194304kB managed:4128256kB mlocked:15136kB kernel_stack:4448kB pagetables:19404kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 861.508014] Mem-Info: [ 861.513849] lowmem_reserve[]: 0 0 0 0 0 [ 861.515422] active_anon:158470 inactive_anon:1112050 isolated_anon:0 [ 861.515422] active_file:27 inactive_file:0 isolated_file:0 [ 861.515422] unevictable:49288 dirty:0 writeback:0 unstable:0 [ 861.515422] slab_reclaimable:14055 slab_unreclaimable:122950 [ 861.515422] mapped:54866 shmem:17211 pagetables:7778 bounce:0 [ 861.515422] free:25076 free_pcp:0 free_cma:0 [ 861.522228] Node 0 DMA: 17*4kB (ME) 4*8kB (UM) 2*16kB (ME) 2*32kB (ME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11076kB [ 861.566718] Node 0 active_anon:614980kB inactive_anon:1128068kB active_file:92kB inactive_file:0kB unevictable:182016kB isolated(anon):0kB isolated(file):0kB mapped:113772kB dirty:0kB writeback:0kB shmem:66548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 861.593394] Node 0 DMA32: 165*4kB (UMH) 314*8kB (UH) 375*16kB (UH) 841*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36084kB [ 861.624559] Node 1 active_anon:18900kB inactive_anon:3320132kB active_file:16kB inactive_file:16kB unevictable:15136kB isolated(anon):0kB isolated(file):0kB mapped:105692kB dirty:0kB writeback:0kB shmem:2296kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 861.643777] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 861.681684] Node 0 [ 861.702833] Node 1 [ 861.704519] DMA free:11076kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 861.705151] Normal: [ 861.707299] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 861.748095] 353*4kB (UME) 224*8kB (UME) 119*16kB (UME) 97*32kB (UME) 707*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53460kB [ 861.754770] Node 0 [ 861.769511] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 861.784810] DMA32 free:35892kB min:36200kB low:45248kB high:54296kB active_anon:614948kB inactive_anon:1127480kB active_file:92kB inactive_file:0kB unevictable:182020kB writepending:0kB present:3129332kB managed:2788160kB mlocked:182020kB kernel_stack:8704kB pagetables:11704kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 861.786342] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 861.830191] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 861.845306] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 861.846591] lowmem_reserve[]: [ 861.861401] 19549 total pagecache pages [ 861.873666] 0 0 0 0 0 [ 861.875857] 0 pages in swap cache [ 861.876199] Node 0 [ 861.879799] Swap cache stats: add 0, delete 0, find 0/0 [ 861.887444] Free swap = 0kB [ 861.897956] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 861.898102] Total swap = 0kB [ 861.933909] 2097051 pages RAM [ 861.937103] 0 pages HighMem/MovableOnly [ 861.941189] 363840 pages reserved [ 861.944699] 0 pages cma reserved [ 861.945998] lowmem_reserve[]: 0 0 0 0 0 [ 861.957191] Node 1 Normal free:53460kB min:53696kB low:67120kB high:80544kB active_anon:18900kB inactive_anon:3320132kB active_file:20kB inactive_file:12kB unevictable:15136kB writepending:0kB present:4194304kB managed:4128256kB mlocked:15136kB kernel_stack:4448kB pagetables:19404kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 861.996854] lowmem_reserve[]: 0 0 0 0 0 [ 862.001047] Node 0 DMA: 17*4kB (ME) 4*8kB (UM) 2*16kB (ME) 2*32kB (ME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11076kB [ 862.024275] Node 0 DMA32: 165*4kB (UMH) 314*8kB (UH) 375*16kB (UH) 842*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36116kB [ 862.037869] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 862.051363] Node 1 Normal: 353*4kB (UME) 225*8kB (UME) 118*16kB (UME) 98*32kB (UME) 707*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53484kB [ 862.081936] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 862.093463] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 862.108283] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 862.124904] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 862.146900] 19504 total pagecache pages [ 862.153457] 0 pages in swap cache [ 862.156916] Swap cache stats: add 0, delete 0, find 0/0 [ 862.172686] Free swap = 0kB [ 862.175723] Total swap = 0kB [ 862.184053] 2097051 pages RAM [ 862.187225] 0 pages HighMem/MovableOnly [ 862.196298] 363840 pages reserved [ 862.205017] 0 pages cma reserved [ 862.211009] Out of memory (oom_kill_allocating_task): Kill process 28282 (systemd-journal) score 0 or sacrifice child [ 862.227037] Killed process 28282 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:1528kB [ 862.246459] oom_reaper: reaped process 28282 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1528kB [ 862.261005] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 862.291206] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 862.296001] CPU: 0 PID: 7976 Comm: syz-fuzzer Not tainted 4.14.215-syzkaller #0 [ 862.303570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 862.312913] Call Trace: [ 862.315488] dump_stack+0x1b2/0x283 [ 862.319099] dump_header+0x178/0x82f [ 862.322794] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 862.327874] ? ___ratelimit+0x2cd/0x522 [ 862.331830] oom_kill_process.cold+0x10/0xb18 [ 862.336307] out_of_memory+0xe3e/0x1190 [ 862.340260] ? oom_killer_disable+0x1c0/0x1c0 [ 862.344735] ? mutex_trylock+0x152/0x1a0 [ 862.348776] __alloc_pages_nodemask+0x23e1/0x2720 [ 862.353605] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 862.358440] alloc_pages_current+0x155/0x260 [ 862.362834] filemap_fault+0xea3/0x1980 [ 862.366799] ext4_filemap_fault+0x84/0xb0 [ 862.370928] __do_fault+0xfa/0x380 [ 862.374451] __handle_mm_fault+0x2497/0x4620 [ 862.378843] ? vm_insert_page+0x7c0/0x7c0 [ 862.382970] ? HARDIRQ_verbose+0x10/0x10 [ 862.387006] ? HARDIRQ_verbose+0x10/0x10 [ 862.391051] handle_mm_fault+0x391/0x860 [ 862.395092] __do_page_fault+0x549/0xad0 [ 862.399135] ? spurious_fault+0x640/0x640 [ 862.403261] ? do_page_fault+0x60/0x4f2 [ 862.407214] ? page_fault+0x2f/0x50 [ 862.410833] page_fault+0x45/0x50 [ 862.414262] RIP: eeffe0:0x8 [ 862.417167] RSP: 147ecdfb:000000c00003dec8 EFLAGS: 00438920 [ 862.420504] Mem-Info: [ 862.428675] active_anon:158352 inactive_anon:1112049 isolated_anon:0 [ 862.428675] active_file:5 inactive_file:23 isolated_file:0 [ 862.428675] unevictable:49298 dirty:0 writeback:0 unstable:0 [ 862.428675] slab_reclaimable:14055 slab_unreclaimable:122947 [ 862.428675] mapped:54490 shmem:17211 pagetables:7754 bounce:0 [ 862.428675] free:25144 free_pcp:179 free_cma:0 [ 862.463089] Node 0 active_anon:614508kB inactive_anon:1128064kB active_file:16kB inactive_file:64kB unevictable:182056kB isolated(anon):0kB isolated(file):0kB mapped:112268kB dirty:0kB writeback:0kB shmem:66548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 862.491653] Node 1 active_anon:18900kB inactive_anon:3320132kB active_file:4kB inactive_file:28kB unevictable:15136kB isolated(anon):0kB isolated(file):0kB mapped:105692kB dirty:0kB writeback:0kB shmem:2296kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 862.519554] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 862.546307] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 862.551473] Node 0 DMA32 free:36016kB min:36200kB low:45248kB high:54296kB active_anon:614476kB inactive_anon:1127476kB active_file:16kB inactive_file:64kB unevictable:182056kB writepending:0kB present:3129332kB managed:2788160kB mlocked:182056kB kernel_stack:8672kB pagetables:11608kB bounce:0kB free_pcp:716kB local_pcp:0kB free_cma:0kB [ 862.581658] lowmem_reserve[]: 0 0 0 0 0 [ 862.585648] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 862.613617] lowmem_reserve[]: 0 0 0 0 0 [ 862.617625] Node 1 Normal free:53484kB min:53696kB low:67120kB high:80544kB active_anon:18900kB inactive_anon:3320132kB active_file:4kB inactive_file:28kB unevictable:15136kB writepending:0kB present:4194304kB managed:4128256kB mlocked:15136kB kernel_stack:4448kB pagetables:19404kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 862.650032] lowmem_reserve[]: 0 0 0 0 0 [ 862.654043] Node 0 DMA: 17*4kB (ME) 4*8kB (UM) 2*16kB (ME) 2*32kB (ME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11076kB [ 862.672114] Node 0 DMA32: 134*4kB (UMH) 313*8kB (UH) 375*16kB (UH) 843*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36016kB [ 862.685999] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 862.696786] Node 1 Normal: 353*4kB (UME) 225*8kB (UME) 118*16kB (UME) 98*32kB (UME) 707*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53484kB [ 862.711238] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 862.720107] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 862.728751] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 862.737608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 862.746217] 19504 total pagecache pages [ 862.750324] 0 pages in swap cache [ 862.753826] Swap cache stats: add 0, delete 0, find 0/0 [ 862.759273] Free swap = 0kB [ 862.762341] Total swap = 0kB [ 862.765404] 2097051 pages RAM [ 862.768599] 0 pages HighMem/MovableOnly [ 862.772625] 363840 pages reserved [ 862.776125] 0 pages cma reserved [ 862.779597] Out of memory (oom_kill_allocating_task): Kill process 7976 (syz-fuzzer) score 0 or sacrifice child [ 862.790002] Killed process 28305 (syz-executor.3) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 862.802938] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 862.835665] in:imklog cpuset=/ mems_allowed=0-1 [ 862.844664] CPU: 0 PID: 24595 Comm: in:imklog Not tainted 4.14.215-syzkaller #0 [ 862.852122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 862.861472] Call Trace: [ 862.864044] dump_stack+0x1b2/0x283 [ 862.867651] dump_header+0x178/0x82f [ 862.871344] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 862.876426] ? ___ratelimit+0x2cd/0x522 [ 862.880379] oom_kill_process.cold+0x10/0xb18 [ 862.884854] out_of_memory+0xe3e/0x1190 [ 862.888823] ? oom_killer_disable+0x1c0/0x1c0 [ 862.893295] ? mutex_trylock+0x152/0x1a0 [ 862.897334] __alloc_pages_nodemask+0x23e1/0x2720 [ 862.902161] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 862.906990] alloc_pages_current+0x155/0x260 [ 862.911375] filemap_fault+0xea3/0x1980 [ 862.915332] ext4_filemap_fault+0x84/0xb0 [ 862.919474] __do_fault+0xfa/0x380 [ 862.922989] __handle_mm_fault+0x2497/0x4620 [ 862.927374] ? vm_insert_page+0x7c0/0x7c0 [ 862.931590] ? HARDIRQ_verbose+0x10/0x10 [ 862.935650] ? HARDIRQ_verbose+0x10/0x10 [ 862.939714] handle_mm_fault+0x391/0x860 [ 862.943758] __do_page_fault+0x549/0xad0 [ 862.947798] ? spurious_fault+0x640/0x640 [ 862.951922] ? do_page_fault+0x60/0x4f2 [ 862.955871] ? page_fault+0x2f/0x50 [ 862.959472] page_fault+0x45/0x50 [ 862.962901] RIP: 1fa0:0x1f9f [ 862.965892] RSP: 0000:00005605b7ecc9d0 EFLAGS: 7ff1014d2da0 [ 862.971612] Mem-Info: [ 862.979785] active_anon:158352 inactive_anon:1112049 isolated_anon:0 [ 862.979785] active_file:5 inactive_file:23 isolated_file:0 [ 862.979785] unevictable:49298 dirty:0 writeback:0 unstable:0 [ 862.979785] slab_reclaimable:14055 slab_unreclaimable:122947 [ 862.979785] mapped:54490 shmem:17211 pagetables:7754 bounce:0 [ 862.979785] free:25144 free_pcp:179 free_cma:0 [ 863.016420] Node 0 active_anon:614508kB inactive_anon:1128064kB active_file:20kB inactive_file:60kB unevictable:182056kB isolated(anon):0kB isolated(file):0kB mapped:112268kB dirty:0kB writeback:0kB shmem:66548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 863.045755] Node 1 active_anon:18900kB inactive_anon:3320132kB active_file:0kB inactive_file:32kB unevictable:15136kB isolated(anon):0kB isolated(file):0kB mapped:105692kB dirty:0kB writeback:0kB shmem:2296kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 863.093373] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 863.129454] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 863.134526] Node 0 DMA32 free:36032kB min:36200kB low:45248kB high:54296kB active_anon:614476kB inactive_anon:1127476kB active_file:40kB inactive_file:40kB unevictable:182056kB writepending:0kB present:3129332kB managed:2788160kB mlocked:182056kB kernel_stack:8672kB pagetables:11608kB bounce:0kB free_pcp:828kB local_pcp:112kB free_cma:0kB [ 863.167717] lowmem_reserve[]: 0 0 0 0 0 [ 863.172228] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 863.197845] lowmem_reserve[]: 0 0 0 0 0 [ 863.201911] Node 1 Normal free:53484kB min:53696kB low:67120kB high:80544kB active_anon:18900kB inactive_anon:3320132kB active_file:16kB inactive_file:16kB unevictable:15136kB writepending:0kB present:4194304kB managed:4128256kB mlocked:15136kB kernel_stack:4448kB pagetables:19404kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 863.231587] lowmem_reserve[]: 0 0 0 0 0 [ 863.235591] Node 0 DMA: 17*4kB (ME) 4*8kB (UM) 2*16kB (ME) 2*32kB (ME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11076kB [ 863.251135] Node 0 DMA32: 134*4kB (UMH) 317*8kB (UMH) 375*16kB (UH) 843*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36048kB [ 863.264811] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 863.275619] Node 1 Normal: 353*4kB (UME) 225*8kB (UME) 118*16kB (UME) 98*32kB (UME) 707*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53484kB [ 863.290055] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 863.298926] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 863.307499] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 863.316396] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 863.325002] 19504 total pagecache pages [ 863.329013] 0 pages in swap cache [ 863.332458] Swap cache stats: add 0, delete 0, find 0/0 [ 863.337808] Free swap = 0kB [ 863.340872] Total swap = 0kB [ 863.343886] 2097051 pages RAM [ 863.346980] 0 pages HighMem/MovableOnly [ 863.350993] 363840 pages reserved [ 863.354438] 0 pages cma reserved [ 863.357792] Out of memory (oom_kill_allocating_task): Kill process 24595 (in:imklog) score 0 or sacrifice child [ 863.368086] Killed process 24566 (rsyslogd) total-vm:254332kB, anon-rss:1104kB, file-rss:0kB, shmem-rss:0kB [ 863.386631] oom_reaper: reaped process 28305 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 863.405047] systemd-udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 863.456531] systemd-udevd cpuset=/ mems_allowed=0-1 [ 863.465473] CPU: 1 PID: 4626 Comm: systemd-udevd Not tainted 4.14.215-syzkaller #0 [ 863.473204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 863.482559] Call Trace: [ 863.485145] dump_stack+0x1b2/0x283 [ 863.488776] dump_header+0x178/0x82f [ 863.492492] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 863.497595] ? ___ratelimit+0x2cd/0x522 [ 863.501570] oom_kill_process.cold+0x10/0xb18 [ 863.506063] ? lock_downgrade+0x740/0x740 [ 863.510198] out_of_memory+0x2dc/0x1190 [ 863.514157] ? oom_killer_disable+0x1c0/0x1c0 [ 863.518630] ? mutex_trylock+0x152/0x1a0 [ 863.522669] __alloc_pages_nodemask+0x23e1/0x2720 [ 863.527501] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 863.532333] ? cache_grow_begin+0x41/0x630 [ 863.536550] cache_grow_begin+0x91/0x630 [ 863.540590] ? cache_grow_begin+0x91/0x630 [ 863.544804] fallback_alloc+0x207/0x2c0 [ 863.548761] kmem_cache_alloc+0x1e5/0x3c0 [ 863.552888] getname_flags+0xc8/0x550 [ 863.556671] user_path_at_empty+0x2a/0x50 [ 863.560816] SyS_readlinkat+0xa8/0x270 [ 863.564684] ? task_work_run+0xfd/0x190 [ 863.568638] ? SyS_newfstat+0xd0/0xd0 [ 863.572418] ? do_syscall_64+0x4c/0x640 [ 863.576369] ? SyS_newfstat+0xd0/0xd0 [ 863.580149] do_syscall_64+0x1d5/0x640 [ 863.584024] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 863.589192] RIP: 0033:0x7f1bf270e0ba [ 863.592898] RSP: 002b:00007ffd436ec7c8 EFLAGS: 00000202 ORIG_RAX: 000000000000010b [ 863.600672] RAX: ffffffffffffffda RBX: 00005647d9285470 RCX: 00007f1bf270e0ba [ 863.607919] RDX: 00005647d9285470 RSI: 00005647d9285290 RDI: 00000000ffffff9c [ 863.615167] RBP: 0000000000000064 R08: 00005647d7b71670 R09: 0000000000000070 [ 863.622415] R10: 0000000000000063 R11: 0000000000000202 R12: 00005647d9285290 [ 863.629664] R13: 00000000ffffff9c R14: 00007ffd436ec820 R15: 0000000000000063 [ 863.888891] Mem-Info: [ 863.891344] active_anon:158042 inactive_anon:1112049 isolated_anon:0 [ 863.891344] active_file:34 inactive_file:13 isolated_file:0 [ 863.891344] unevictable:49298 dirty:0 writeback:0 unstable:0 [ 863.891344] slab_reclaimable:14046 slab_unreclaimable:122920 [ 863.891344] mapped:54489 shmem:17211 pagetables:7699 bounce:0 [ 863.891344] free:25233 free_pcp:0 free_cma:0 [ 863.962197] Node 0 active_anon:613384kB inactive_anon:1128064kB active_file:100kB inactive_file:56kB unevictable:182056kB isolated(anon):0kB isolated(file):0kB mapped:112264kB dirty:0kB writeback:0kB shmem:66548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 864.050101] Node 1 active_anon:18696kB inactive_anon:3320132kB active_file:16kB inactive_file:16kB unevictable:15136kB isolated(anon):0kB isolated(file):0kB mapped:105692kB dirty:0kB writeback:0kB shmem:2296kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 864.091542] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 864.119247] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 864.136552] Node 0 DMA32 free:48432kB min:36200kB low:45248kB high:54296kB active_anon:611828kB inactive_anon:1131004kB active_file:1532kB inactive_file:2056kB unevictable:176008kB writepending:0kB present:3129332kB managed:2788160kB mlocked:175776kB kernel_stack:8640kB pagetables:11404kB bounce:0kB free_pcp:892kB local_pcp:532kB free_cma:0kB 18:31:41 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1278, &(0x7f0000000180)) 18:31:41 executing program 3: io_setup(0x800, &(0x7f0000000080)=0x0) io_destroy(r0) io_submit(r0, 0x0, 0x0) 18:31:41 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 864.339298] lowmem_reserve[]: 0 0 0 0 0 [ 864.350942] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 864.381588] lowmem_reserve[]: 0 0 0 0 0 18:31:41 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001300)=""/208, 0xd0}], 0x1}}], 0x2, 0x0, 0x0) 18:31:41 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000b11000/0x3000)=nil, 0x3000, 0x1000004, 0x100010, r0, 0x45627000) pkey_mprotect(&(0x7f000064a000/0x1000)=nil, 0x1000, 0x1000000, 0xffffffffffffffff) r3 = dup(r2) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 864.386127] Node 1 Normal free:67876kB min:53696kB low:67120kB high:80544kB active_anon:18648kB inactive_anon:3320632kB active_file:256kB inactive_file:152kB unevictable:16kB writepending:0kB present:4194304kB managed:4128256kB mlocked:200kB kernel_stack:4384kB pagetables:19348kB bounce:0kB free_pcp:1352kB local_pcp:712kB free_cma:0kB [ 864.417569] lowmem_reserve[]: 0 0 0 0 0 [ 864.422975] Node 0 DMA: 17*4kB (ME) 4*8kB (UM) 2*16kB (ME) 2*32kB (ME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11076kB 18:31:41 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 864.442765] Node 0 DMA32: 1*4kB (M) 474*8kB (U) 1248*16kB (U) 1180*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 61524kB [ 864.444426] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 864.466620] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 18:31:41 executing program 2: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8916, &(0x7f0000000000)={'lo\x00', @ifru_mtu}) [ 864.499401] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 864.499905] Node 1 Normal: 575*4kB (UME) 351*8kB (UME) 152*16kB (UME) 445*32kB (UME) 717*64kB (UM) 5*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 68308kB [ 864.532199] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 864.547193] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 864.559763] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 864.570004] systemd[1]: Stopped System Logging Service. 18:31:41 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x127b, &(0x7f0000000180)) 18:31:41 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001300)=""/208, 0xd0}], 0x1}}], 0x2, 0x0, 0x0) 18:31:41 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000340)=@req={0x28, &(0x7f0000000300)={'veth1_to_bridge\x00', @ifru_ivalue}}) [ 864.609716] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 864.624401] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 864.658959] 23976 total pagecache pages [ 864.671962] systemd[1]: Starting System Logging Service... [ 864.673264] 0 pages in swap cache [ 864.689932] Swap cache stats: add 0, delete 0, find 0/0 18:31:41 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x24000) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_CLR_FD(r0, 0x4c01) 18:31:41 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001300)=""/208, 0xd0}], 0x1}}], 0x2, 0x0, 0x0) [ 864.728363] Free swap = 0kB 18:31:41 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) fcntl$setflags(r0, 0x6, 0x400000) [ 864.768532] Total swap = 0kB [ 864.772390] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 864.785134] 2097051 pages RAM [ 864.800569] 0 pages HighMem/MovableOnly [ 864.823333] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 864.833741] 363840 pages reserved [ 864.862105] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 864.869367] 0 pages cma reserved [ 864.872749] Out of memory: Kill process 24929 (syz-executor.5) score 1009 or sacrifice child [ 864.912984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 864.931688] systemd[1]: Stopped Journal Service. [ 864.932818] Killed process 24929 (syz-executor.5) total-vm:97820kB, anon-rss:37076kB, file-rss:34496kB, shmem-rss:0kB [ 864.951864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 864.992372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 865.011352] systemd[1]: Starting Journal Service... [ 865.026745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 865.067462] device bridge_slave_1 left promiscuous mode [ 865.097745] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.134143] device bridge_slave_0 left promiscuous mode [ 865.156040] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.177984] device veth1_macvtap left promiscuous mode [ 865.202931] device veth0_macvtap left promiscuous mode [ 865.208416] oom_reaper: reaped process 24929 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 865.210534] device veth1_vlan left promiscuous mode [ 865.276761] device veth0_vlan left promiscuous mode [ 865.324166] systemd-journald[29174]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 865.785167] device hsr_slave_1 left promiscuous mode [ 865.838989] device hsr_slave_0 left promiscuous mode [ 865.906032] team0 (unregistering): Port device team_slave_1 removed [ 865.953140] team0 (unregistering): Port device team_slave_0 removed [ 866.010893] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 866.058618] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 866.220497] bond0 (unregistering): Released all slaves [ 869.124861] IPVS: ftp: loaded support on port[0] = 21 [ 869.281789] chnl_net:caif_netlink_parms(): no params data found [ 869.397698] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.404095] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.412302] device bridge_slave_0 entered promiscuous mode [ 869.420656] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.427009] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.434849] device bridge_slave_1 entered promiscuous mode [ 869.454936] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 869.463981] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 869.485102] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 869.492555] team0: Port device team_slave_0 added [ 869.499171] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 869.506291] team0: Port device team_slave_1 added [ 869.525101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.531392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.556666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.568530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.574763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.600037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 869.610761] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 869.618331] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 869.639366] device hsr_slave_0 entered promiscuous mode [ 869.645017] device hsr_slave_1 entered promiscuous mode [ 869.651256] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 869.658618] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 869.733416] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.739794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.746380] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.752780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.784421] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 869.791085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.801137] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 869.810834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 869.818235] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.835251] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.845635] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 869.851866] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.861624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 869.869490] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.875843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.885611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 869.893563] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.899967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.919198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 869.927441] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 869.939848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 869.951539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 869.962015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 869.972036] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 869.979481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 869.994323] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 870.002009] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 870.009182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 870.020114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.080213] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 870.091380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 870.121959] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 870.130363] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 870.137101] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 870.149077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 870.156569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 870.163918] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 870.172089] device veth0_vlan entered promiscuous mode [ 870.183685] device veth1_vlan entered promiscuous mode [ 870.189530] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 870.199394] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 870.211855] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 870.222706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 870.230322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 870.237598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 870.245343] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 870.255028] device veth0_macvtap entered promiscuous mode [ 870.264796] device veth1_macvtap entered promiscuous mode [ 870.274443] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 870.284230] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 870.293523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 870.304298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.313894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 870.324019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.333223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 870.343026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.352289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 870.362171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.371519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 870.381293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.391779] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 870.399062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 870.406511] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 870.414886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 870.424481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 870.434773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.444397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 870.454645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.464158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 870.473943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.483117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 870.492862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.502056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 870.512167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.522730] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 870.529796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 870.537238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 870.545782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:31:47 executing program 3: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000000)={'lo\x00', @ifru_mtu}) 18:31:47 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001300)=""/208, 0xd0}], 0x1}}], 0x2, 0x0, 0x0) close(0xffffffffffffffff) 18:31:47 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/114, 0x18) 18:31:47 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x430900) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000000c0)={0x3, 0x29}) 18:31:48 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000140)='\x00', r0, &(0x7f0000000080)='./file0\x00', 0x1000) 18:31:48 executing program 3: sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000ac0)) 18:31:47 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001300)=""/208, 0xd0}], 0x1}}], 0x2, 0x0, 0x0) 18:31:47 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:31:48 executing program 2: add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x0, 0x0, @c='abcdefghijklmnopqrstuvwxyz0123456'}, 0x29, 0xfffffffffffffff8) 18:31:48 executing program 0: r0 = socket(0x18, 0x0, 0x2) accept$unix(r0, 0x0, 0x0) 18:31:48 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000002740)='/dev/vcs\x00', 0x0, 0x0) 18:31:48 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:31:48 executing program 0: timer_create(0x3, &(0x7f0000000100)={0x0, 0x37, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) 18:31:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000032c0)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000003480)) 18:31:48 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) [ 871.187937] Bluetooth: hci3 command 0x0409 tx timeout [ 871.367585] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 871.384342] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 871.390229] CPU: 1 PID: 29481 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 871.398133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 871.407485] Call Trace: [ 871.410077] dump_stack+0x1b2/0x283 [ 871.413690] warn_alloc.cold+0x96/0x1cc [ 871.417653] ? zone_watermark_ok_safe+0x220/0x220 [ 871.422497] __alloc_pages_nodemask+0x2127/0x2720 [ 871.427328] ? lock_acquire+0x170/0x3f0 [ 871.431288] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 871.436127] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 871.441559] ? perf_trace_lock_acquire+0x332/0x510 [ 871.446470] ? __mutex_unlock_slowpath+0x75/0x770 [ 871.451313] alloc_pages_current+0x155/0x260 [ 871.455703] ion_page_pool_alloc+0x118/0x1b0 [ 871.460110] ion_system_heap_allocate+0x133/0x8c0 [ 871.464937] ? ion_alloc+0x187/0x810 [ 871.468632] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 871.474078] ? ion_system_contig_heap_create+0x130/0x130 [ 871.479508] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 871.484505] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 871.489330] ion_alloc+0x204/0x810 [ 871.492855] ? ion_dma_buf_release+0x40/0x40 [ 871.497248] ? __might_fault+0x177/0x1b0 [ 871.501293] ion_ioctl+0xea/0x1ee [ 871.504726] ? ion_alloc.cold+0x3b/0x3b [ 871.508681] ? HARDIRQ_verbose+0x10/0x10 [ 871.512810] ? lock_downgrade+0x740/0x740 [ 871.516937] ? ion_alloc.cold+0x3b/0x3b [ 871.520893] do_vfs_ioctl+0x75a/0xff0 [ 871.524678] ? ioctl_preallocate+0x1a0/0x1a0 [ 871.529066] ? lock_downgrade+0x740/0x740 [ 871.533198] ? __fget+0x225/0x360 [ 871.536631] ? do_vfs_ioctl+0xff0/0xff0 [ 871.540589] ? security_file_ioctl+0x83/0xb0 [ 871.544979] SyS_ioctl+0x7f/0xb0 [ 871.548326] ? do_vfs_ioctl+0xff0/0xff0 [ 871.552370] do_syscall_64+0x1d5/0x640 [ 871.556245] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 871.561414] RIP: 0033:0x45e219 [ 871.564586] RSP: 002b:00007f9f6fd95c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 871.572276] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 871.579525] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 871.586863] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 871.594115] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 871.601369] R13: 00007ffdd833b2ef R14: 00007f9f6fd969c0 R15: 000000000119c034 [ 871.680840] Mem-Info: [ 871.683298] active_anon:154069 inactive_anon:1117179 isolated_anon:0 [ 871.683298] active_file:35 inactive_file:36 isolated_file:0 [ 871.683298] unevictable:47882 dirty:22 writeback:18 unstable:0 [ 871.683298] slab_reclaimable:14068 slab_unreclaimable:121653 [ 871.683298] mapped:53986 shmem:19260 pagetables:7897 bounce:0 [ 871.683298] free:25093 free_pcp:60 free_cma:0 [ 871.732702] systemd-udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 871.745963] systemd-udevd cpuset=/ mems_allowed=0-1 [ 871.774758] Node 0 active_anon:605516kB inactive_anon:1154676kB active_file:116kB inactive_file:28kB unevictable:186036kB isolated(anon):0kB isolated(file):0kB mapped:108144kB dirty:88kB writeback:72kB shmem:69204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 871.798047] CPU: 0 PID: 4626 Comm: systemd-udevd Not tainted 4.14.215-syzkaller #0 [ 871.811214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 871.820564] Call Trace: [ 871.823150] dump_stack+0x1b2/0x283 [ 871.826777] dump_header+0x178/0x82f [ 871.830490] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 871.835594] ? ___ratelimit+0x2cd/0x522 [ 871.839574] oom_kill_process.cold+0x10/0xb18 [ 871.844069] ? lock_downgrade+0x740/0x740 [ 871.848324] out_of_memory+0x2dc/0x1190 [ 871.852298] ? oom_killer_disable+0x1c0/0x1c0 [ 871.856787] ? mutex_trylock+0x152/0x1a0 [ 871.860844] __alloc_pages_nodemask+0x23e1/0x2720 [ 871.865696] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 871.870546] ? cache_grow_begin+0x41/0x630 [ 871.874783] cache_grow_begin+0x91/0x630 [ 871.878850] ? cache_grow_begin+0x91/0x630 [ 871.883082] fallback_alloc+0x207/0x2c0 [ 871.887054] kmem_cache_alloc+0x1e5/0x3c0 [ 871.891197] getname_flags+0xc8/0x550 [ 871.894993] user_path_at_empty+0x2a/0x50 [ 871.899140] vfs_statx+0xd1/0x180 [ 871.902588] ? cp_compat_stat+0x890/0x890 [ 871.906860] SyS_newlstat+0x83/0xe0 [ 871.910568] ? SyS_newstat+0xe0/0xe0 [ 871.911930] Node 1 active_anon:10760kB inactive_anon:3314040kB active_file:24kB inactive_file:16kB unevictable:5492kB isolated(anon):0kB isolated(file):0kB mapped:107800kB dirty:0kB writeback:0kB shmem:7836kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 871.914272] ? __secure_computing+0xe5/0x3e0 [ 871.914284] ? syscall_trace_enter+0x486/0xc20 [ 871.950905] ? syscall_slow_exit_work+0x560/0x560 [ 871.955745] ? do_syscall_64+0x4c/0x640 [ 871.959716] ? SyS_newstat+0xe0/0xe0 [ 871.963421] do_syscall_64+0x1d5/0x640 [ 871.967311] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 871.968178] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 871.972499] RIP: 0033:0x7f1bf270c335 [ 871.972506] RSP: 002b:00007ffd436ec768 EFLAGS: 00000246 [ 871.998884] lowmem_reserve[]: [ 872.002563] ORIG_RAX: 0000000000000006 [ 872.002572] RAX: ffffffffffffffda RBX: 00005647d927b120 RCX: 00007f1bf270c335 [ 872.007969] 0 [ 872.011028] RDX: 00007ffd436ec7a0 RSI: 00007ffd436ec7a0 RDI: 00005647d927a120 [ 872.011036] RBP: 00007ffd436ec860 R08: 00007f1bf29cb1f8 R09: 0000000000001010 [ 872.014994] 2717 [ 872.022257] R10: 00007f1bf29cab58 R11: 0000000000000246 R12: 00005647d927a120 [ 872.022261] R13: 00005647d927a134 R14: 00005647d92841ad R15: 00005647d92841b4 [ 872.179141] 2718 2718 2718 [ 872.196738] Node 0 DMA32 free:35608kB min:36200kB low:45248kB high:54296kB active_anon:605472kB inactive_anon:1154092kB active_file:24kB inactive_file:64kB unevictable:186148kB writepending:0kB present:3129332kB managed:2788160kB mlocked:186148kB kernel_stack:8800kB pagetables:12144kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 872.356502] lowmem_reserve[]: 0 0 0 0 0 [ 872.371690] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 872.511067] lowmem_reserve[]: 0 0 0 0 0 [ 872.532798] Node 1 Normal free:53692kB min:53696kB low:67120kB high:80544kB active_anon:10804kB inactive_anon:3314036kB active_file:16kB inactive_file:0kB unevictable:5540kB writepending:0kB present:4194304kB managed:4128256kB mlocked:5540kB kernel_stack:4512kB pagetables:19260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 872.684109] lowmem_reserve[]: 0 0 0 0 0 [ 872.706642] Node 0 DMA: 17*4kB (ME) 1*8kB (M) 2*16kB (ME) 2*32kB (ME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11052kB [ 872.783927] Node 0 DMA32: 681*4kB (UME) 777*8kB (UM) 336*16kB (UM) 603*32kB (UM) 10*64kB (UM) 7*128kB (UM) 1*256kB (M) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 36428kB [ 872.865482] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 872.912718] Node 1 Normal: 84*4kB (UM) 424*8kB (UM) 342*16kB (UM) 509*32kB (UM) 443*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53840kB [ 872.966144] Mem-Info: [ 872.972094] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 872.985583] active_anon:154077 inactive_anon:1117179 isolated_anon:0 [ 872.985583] active_file:37 inactive_file:0 isolated_file:0 [ 872.985583] unevictable:47922 dirty:0 writeback:0 unstable:0 [ 872.985583] slab_reclaimable:14068 slab_unreclaimable:121574 [ 872.985583] mapped:53966 shmem:19260 pagetables:7852 bounce:0 [ 872.985583] free:25193 free_pcp:0 free_cma:0 [ 873.001249] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 873.147290] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 873.181132] Node 0 active_anon:605504kB inactive_anon:1154680kB active_file:44kB inactive_file:72kB unevictable:186348kB isolated(anon):0kB isolated(file):0kB mapped:108052kB dirty:0kB writeback:0kB shmem:69208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 595968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 873.198272] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 873.262922] Bluetooth: hci3 command 0x041b tx timeout [ 873.304744] 20663 total pagecache pages [ 873.305532] Node 1 active_anon:10804kB inactive_anon:3314036kB active_file:0kB inactive_file:4kB unevictable:5640kB isolated(anon):0kB isolated(file):0kB mapped:107764kB dirty:0kB writeback:0kB shmem:7832kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 873.326584] 0 pages in swap cache [ 873.403179] Swap cache stats: add 0, delete 0, find 0/0 [ 873.431312] Free swap = 0kB [ 873.448746] Total swap = 0kB [ 873.463150] 2097051 pages RAM [ 873.464488] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 873.474856] 0 pages HighMem/MovableOnly [ 873.571498] 363840 pages reserved [ 873.596160] 0 pages cma reserved [ 873.612522] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 873.635863] Node 0 DMA32 free:35924kB min:36200kB low:45248kB high:54296kB active_anon:605472kB inactive_anon:1154092kB active_file:44kB inactive_file:88kB unevictable:186148kB writepending:0kB present:3129332kB managed:2788160kB mlocked:186148kB kernel_stack:8768kB pagetables:12144kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 873.751909] lowmem_reserve[]: 0 0 0 0 0 [ 873.755937] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 873.883541] lowmem_reserve[]: 0 0 0 0 0 [ 873.922110] Node 1 Normal free:53692kB min:53696kB low:67120kB high:80544kB active_anon:10804kB inactive_anon:3314036kB active_file:0kB inactive_file:4kB unevictable:5640kB writepending:0kB present:4194304kB managed:4128256kB mlocked:5640kB kernel_stack:4512kB pagetables:19260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 873.984885] lowmem_reserve[]: 0 0 0 0 0 [ 873.989004] Node 0 DMA: 17*4kB (ME) 1*8kB (M) 2*16kB (ME) 2*32kB (ME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11052kB [ 874.009519] Node 0 DMA32: 599*4kB (UME) 781*8kB (UM) 338*16kB (UM) 606*32kB (UM) 10*64kB (UM) 7*128kB (UM) 1*256kB (M) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 36260kB [ 874.030095] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 874.042765] Node 1 Normal: 8*4kB (U) 448*8kB (UM) 342*16kB (UM) 510*32kB (UM) 443*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53760kB [ 874.057795] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 874.066648] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 874.075325] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 874.149190] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 874.175887] 20668 total pagecache pages [ 874.188469] 0 pages in swap cache [ 874.191939] Swap cache stats: add 0, delete 0, find 0/0 [ 874.215811] Free swap = 0kB [ 874.219270] Total swap = 0kB [ 874.222318] 2097051 pages RAM [ 874.225415] 0 pages HighMem/MovableOnly [ 874.276005] 363840 pages reserved [ 874.295923] 0 pages cma reserved [ 874.311133] Out of memory: Kill process 24918 (syz-executor.5) score 1009 or sacrifice child [ 874.356602] Killed process 24918 (syz-executor.5) total-vm:97688kB, anon-rss:36944kB, file-rss:34496kB, shmem-rss:0kB 18:31:51 executing program 0: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x3, &(0x7f00000017c0)=[{&(0x7f0000000500)="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", 0xffa, 0x7}, {&(0x7f0000001500)="ab", 0x1, 0x80000001}, {&(0x7f00000015c0)="c6", 0x1}], 0x0, 0x0) 18:31:51 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xa, 0x1, 0x2, 0x1ff}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r0, 0x4) 18:31:51 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:31:51 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0/file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:31:51 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:31:51 executing program 3: r0 = eventfd2(0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x0) 18:31:51 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x16, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x28}}, 0x0) 18:31:51 executing program 0: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0xc0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, 0x0) 18:31:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xa, 0x1, 0x2, 0x1ff, 0x10}, 0x40) 18:31:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f00000000c0)=0x10) 18:31:52 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x3}}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:31:52 executing program 2: perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 18:31:52 executing program 0: bpf$PROG_LOAD(0xf, 0x0, 0x0) 18:31:52 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x8}, @sadb_x_sec_ctx={0x1}]}, 0x28}}, 0x0) 18:31:52 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000200)=@framed={{}, [@alu={0x4, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xfd, &(0x7f0000000100)=""/253, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 875.337097] Bluetooth: hci3 command 0x040f tx timeout [ 875.417393] Bluetooth: hci1 command 0x0406 tx timeout [ 875.535871] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 875.549123] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 875.554254] CPU: 0 PID: 26327 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 875.562131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 875.571482] Call Trace: [ 875.574071] dump_stack+0x1b2/0x283 [ 875.577698] dump_header+0x178/0x82f [ 875.581410] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 875.586520] ? ___ratelimit+0x2cd/0x522 [ 875.590497] oom_kill_process.cold+0x10/0xb18 [ 875.594998] out_of_memory+0xe3e/0x1190 [ 875.598975] ? oom_killer_disable+0x1c0/0x1c0 [ 875.603560] ? mutex_trylock+0x152/0x1a0 [ 875.607619] __alloc_pages_nodemask+0x23e1/0x2720 [ 875.612475] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 875.617337] alloc_pages_current+0x155/0x260 [ 875.621745] filemap_fault+0xea3/0x1980 [ 875.625725] ext4_filemap_fault+0x84/0xb0 [ 875.629870] __do_fault+0xfa/0x380 [ 875.633408] __handle_mm_fault+0x2497/0x4620 [ 875.637814] ? vm_insert_page+0x7c0/0x7c0 [ 875.641954] ? HARDIRQ_verbose+0x10/0x10 [ 875.646017] ? HARDIRQ_verbose+0x10/0x10 [ 875.650087] handle_mm_fault+0x391/0x860 [ 875.654142] __do_page_fault+0x549/0xad0 [ 875.658185] ? spurious_fault+0x640/0x640 [ 875.662312] ? do_page_fault+0x60/0x4f2 [ 875.666265] ? page_fault+0x2f/0x50 [ 875.669870] page_fault+0x45/0x50 [ 875.673362] RIP: 000d:0x32 [ 875.676184] RSP: 0bb8:00000000000d5932 EFLAGS: 00000079 [ 875.686881] Mem-Info: [ 875.694900] active_anon:154487 inactive_anon:1111185 isolated_anon:0 [ 875.694900] active_file:5 inactive_file:7 isolated_file:0 [ 875.694900] unevictable:52542 dirty:0 writeback:0 unstable:0 [ 875.694900] slab_reclaimable:14185 slab_unreclaimable:121856 [ 875.694900] mapped:58073 shmem:19259 pagetables:7825 bounce:0 [ 875.694900] free:25174 free_pcp:54 free_cma:0 [ 875.729004] Node 0 active_anon:606564kB inactive_anon:1153244kB active_file:20kB inactive_file:24kB unevictable:182560kB isolated(anon):0kB isolated(file):0kB mapped:115828kB dirty:0kB writeback:0kB shmem:69204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 875.758332] Node 1 active_anon:11384kB inactive_anon:3291644kB active_file:0kB inactive_file:48kB unevictable:27608kB isolated(anon):0kB isolated(file):0kB mapped:116460kB dirty:0kB writeback:0kB shmem:7832kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 875.786059] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 875.812515] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 875.818088] Node 0 DMA32 free:36028kB min:36200kB low:45248kB high:54296kB active_anon:606532kB inactive_anon:1152656kB active_file:20kB inactive_file:24kB unevictable:182560kB writepending:0kB present:3129332kB managed:2788160kB mlocked:182560kB kernel_stack:8736kB pagetables:11868kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 875.847931] lowmem_reserve[]: 0 0 0 0 0 [ 875.851920] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 875.877714] lowmem_reserve[]: 0 0 0 0 0 [ 875.881687] Node 1 Normal free:53184kB min:53696kB low:67120kB high:80544kB active_anon:11384kB inactive_anon:3291644kB active_file:0kB inactive_file:44kB unevictable:27608kB writepending:0kB present:4194304kB managed:4128256kB mlocked:27608kB kernel_stack:4448kB pagetables:19428kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 875.912241] lowmem_reserve[]: 0 0 0 0 0 [ 875.916222] Node 0 DMA: 17*4kB (ME) 1*8kB (M) 2*16kB (ME) 2*32kB (ME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11052kB [ 875.931763] Node 0 DMA32: 289*4kB (UE) 341*8kB (UME) 245*16kB (ME) 634*32kB (UM) 4*64kB (U) 2*128kB (U) 1*256kB (U) 2*512kB (U) 2*1024kB (U) 0*2048kB 1*4096kB (U) = 36028kB [ 875.947428] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 875.958293] Node 1 Normal: 65*4kB (UM) 315*8kB (UM) 224*16kB (UM) 736*32kB (UM) 364*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53212kB [ 875.972319] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 875.981735] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 875.990390] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 875.999275] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 876.007924] 24740 total pagecache pages [ 876.011950] 0 pages in swap cache [ 876.015385] Swap cache stats: add 0, delete 0, find 0/0 [ 876.020864] Free swap = 0kB [ 876.023876] Total swap = 0kB [ 876.027193] 2097051 pages RAM [ 876.030281] 0 pages HighMem/MovableOnly [ 876.034229] 363840 pages reserved [ 876.037814] 0 pages cma reserved [ 876.041173] Out of memory (oom_kill_allocating_task): Kill process 26327 (syz-executor.4) score 0 or sacrifice child [ 876.051940] Killed process 29494 (syz-executor.4) total-vm:93348kB, anon-rss:3852kB, file-rss:35900kB, shmem-rss:0kB [ 876.080150] oom_reaper: reaped process 29494 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 876.101168] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 876.171661] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 876.176817] CPU: 1 PID: 26327 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 876.184695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 876.194047] Call Trace: [ 876.196641] dump_stack+0x1b2/0x283 [ 876.200289] dump_header+0x178/0x82f [ 876.204006] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 876.209109] ? ___ratelimit+0x2cd/0x522 [ 876.213085] oom_kill_process.cold+0x10/0xb18 [ 876.217585] out_of_memory+0xe3e/0x1190 [ 876.221560] ? oom_killer_disable+0x1c0/0x1c0 [ 876.226049] ? mutex_trylock+0x152/0x1a0 [ 876.230108] __alloc_pages_nodemask+0x23e1/0x2720 [ 876.234963] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 876.239821] alloc_pages_current+0x155/0x260 [ 876.244231] filemap_fault+0xea3/0x1980 [ 876.248214] ext4_filemap_fault+0x84/0xb0 [ 876.252363] __do_fault+0xfa/0x380 [ 876.255900] __handle_mm_fault+0x2497/0x4620 [ 876.260306] ? vm_insert_page+0x7c0/0x7c0 [ 876.264447] ? HARDIRQ_verbose+0x10/0x10 [ 876.268499] ? HARDIRQ_verbose+0x10/0x10 [ 876.272567] handle_mm_fault+0x391/0x860 [ 876.276630] __do_page_fault+0x549/0xad0 [ 876.280692] ? spurious_fault+0x640/0x640 [ 876.284832] ? do_page_fault+0x60/0x4f2 [ 876.288804] ? page_fault+0x2f/0x50 [ 876.292428] page_fault+0x45/0x50 [ 876.295873] RIP: 000d:0x32 [ 876.298711] RSP: 0bb8:00000000000d5932 EFLAGS: 00000079 [ 876.382543] Mem-Info: [ 876.395251] active_anon:153949 inactive_anon:1111233 isolated_anon:0 [ 876.395251] active_file:28 inactive_file:0 isolated_file:0 [ 876.395251] unevictable:53067 dirty:0 writeback:0 unstable:0 [ 876.395251] slab_reclaimable:14185 slab_unreclaimable:121848 [ 876.395251] mapped:58071 shmem:19259 pagetables:7797 bounce:0 [ 876.395251] free:25160 free_pcp:35 free_cma:0 [ 876.452435] Node 0 active_anon:604500kB inactive_anon:1153288kB active_file:32kB inactive_file:0kB unevictable:184216kB isolated(anon):0kB isolated(file):0kB mapped:115852kB dirty:0kB writeback:0kB shmem:69204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 589824kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 876.565571] Node 1 active_anon:11296kB inactive_anon:3291644kB active_file:76kB inactive_file:84kB unevictable:28052kB isolated(anon):0kB isolated(file):0kB mapped:116432kB dirty:0kB writeback:0kB shmem:7832kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 876.616775] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 876.658956] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 876.694602] Node 0 DMA32 free:36152kB min:36200kB low:45248kB high:54296kB active_anon:604468kB inactive_anon:1152700kB active_file:40kB inactive_file:80kB unevictable:184216kB writepending:0kB present:3129332kB managed:2788160kB mlocked:184216kB kernel_stack:8736kB pagetables:11868kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 876.754716] lowmem_reserve[]: 0 0 0 0 0 [ 876.758875] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 876.797006] lowmem_reserve[]: 0 0 0 0 0 [ 876.801101] Node 1 Normal free:53436kB min:53696kB low:67120kB high:80544kB active_anon:11296kB inactive_anon:3291644kB active_file:76kB inactive_file:0kB unevictable:28052kB writepending:0kB present:4194304kB managed:4128256kB mlocked:28052kB kernel_stack:4416kB pagetables:19316kB bounce:0kB free_pcp:136kB local_pcp:136kB free_cma:0kB [ 876.837759] lowmem_reserve[]: 0 0 0 0 0 [ 876.841850] Node 0 DMA: 17*4kB (ME) 1*8kB (M) 2*16kB (ME) 2*32kB (ME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11052kB [ 876.857432] Node 0 DMA32: 295*4kB (UME) 122*8kB (UME) 247*16kB (ME) 635*32kB (UM) 4*64kB (U) 2*128kB (U) 1*256kB (U) 2*512kB (U) 2*1024kB (U) 1*2048kB (M) 1*4096kB (U) = 36412kB [ 876.873647] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 876.884365] Node 1 Normal: 89*4kB (UM) 316*8kB (UM) 223*16kB (UM) 741*32kB (UM) 364*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53460kB [ 876.898347] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 876.907238] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 876.915803] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 876.924683] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 876.933265] 24747 total pagecache pages [ 876.937380] 0 pages in swap cache [ 876.940829] Swap cache stats: add 0, delete 0, find 0/0 [ 876.946189] Free swap = 0kB [ 876.949212] Total swap = 0kB [ 876.952209] 2097051 pages RAM [ 876.955293] 0 pages HighMem/MovableOnly [ 876.959554] 363840 pages reserved [ 876.962992] 0 pages cma reserved [ 876.966336] Out of memory (oom_kill_allocating_task): Kill process 26327 (syz-executor.4) score 0 or sacrifice child [ 876.977167] Killed process 26800 (syz-executor.4) total-vm:93348kB, anon-rss:3852kB, file-rss:34816kB, shmem-rss:0kB [ 876.995679] oom_reaper: reaped process 26800 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 877.416886] Bluetooth: hci3 command 0x0419 tx timeout [ 877.431095] syz-executor.5 invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 877.443422] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 877.448667] CPU: 1 PID: 29528 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 877.456567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 877.465998] Call Trace: [ 877.468591] dump_stack+0x1b2/0x283 [ 877.472224] dump_header+0x178/0x82f [ 877.475942] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 877.481051] ? ___ratelimit+0x2cd/0x522 [ 877.485032] oom_kill_process.cold+0x10/0xb18 [ 877.489547] out_of_memory+0xe3e/0x1190 [ 877.493541] ? oom_killer_disable+0x1c0/0x1c0 [ 877.498046] ? mutex_trylock+0x152/0x1a0 [ 877.502109] __alloc_pages_nodemask+0x23e1/0x2720 [ 877.506973] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 877.511817] ? page_evictable+0x11e/0x1f0 [ 877.515978] ? lock_downgrade+0x740/0x740 [ 877.520147] alloc_pages_vma+0xd2/0x6d0 [ 877.524128] wp_page_copy+0x1f5/0x25c0 [ 877.528025] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 877.532525] ? __lock_acquire+0x5fc/0x3f20 [ 877.536760] do_wp_page+0x245/0x1db0 [ 877.540480] ? __handle_mm_fault+0x129c/0x4620 [ 877.545080] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 877.549778] __handle_mm_fault+0x234f/0x4620 [ 877.554188] ? vm_insert_page+0x7c0/0x7c0 [ 877.558332] ? HARDIRQ_verbose+0x10/0x10 [ 877.562390] ? do_raw_spin_unlock+0x164/0x220 [ 877.566900] handle_mm_fault+0x391/0x860 [ 877.570981] __get_user_pages+0x445/0x11d0 [ 877.575223] ? follow_page_mask+0x18a0/0x18a0 [ 877.579730] populate_vma_page_range+0x17b/0x210 [ 877.584492] __mm_populate+0x195/0x2c0 [ 877.588408] ? populate_vma_page_range+0x210/0x210 [ 877.593334] ? security_capable+0x88/0xb0 [ 877.597486] SyS_mlockall+0x3ff/0x520 [ 877.601289] ? SyS_munlock+0xf0/0xf0 [ 877.605002] do_syscall_64+0x1d5/0x640 [ 877.608897] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 877.614082] RIP: 0033:0x45e219 [ 877.617267] RSP: 002b:00007f9f6fd95c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 877.624973] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045e219 [ 877.632236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 877.639507] RBP: 000000000119c058 R08: 0000000000000000 R09: 0000000000000000 [ 877.646771] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 877.654037] R13: 00007ffdd833b2ef R14: 00007f9f6fd969c0 R15: 000000000119c034 [ 877.677597] Mem-Info: [ 877.680037] active_anon:153401 inactive_anon:1112082 isolated_anon:0 [ 877.680037] active_file:15 inactive_file:53 isolated_file:0 [ 877.680037] unevictable:53054 dirty:11 writeback:0 unstable:0 [ 877.680037] slab_reclaimable:14185 slab_unreclaimable:121478 [ 877.680037] mapped:58091 shmem:19259 pagetables:7769 bounce:0 [ 877.680037] free:25204 free_pcp:0 free_cma:0 [ 877.729217] Node 0 active_anon:602324kB inactive_anon:1153288kB active_file:84kB inactive_file:84kB unevictable:187052kB isolated(anon):0kB isolated(file):0kB mapped:115932kB dirty:32kB writeback:0kB shmem:69204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 587776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 877.793428] Node 1 active_anon:11280kB inactive_anon:3295040kB active_file:76kB inactive_file:24kB unevictable:25164kB isolated(anon):0kB isolated(file):0kB mapped:116432kB dirty:12kB writeback:0kB shmem:7832kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 877.834082] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 877.860901] lowmem_reserve[]: 0 2717 2718 2718 2718 18:31:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x17, 0x0, &(0x7f00000000c0)) 18:31:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) 18:31:55 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x16, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x38}}, 0x0) 18:31:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:31:55 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast2}}}], 0x20}}], 0x1, 0x0) 18:31:55 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x0) [ 877.866079] Node 0 DMA32 free:36200kB min:36200kB low:45248kB high:54296kB active_anon:602292kB inactive_anon:1151640kB active_file:28kB inactive_file:3868kB unevictable:185016kB writepending:32kB present:3129332kB managed:2788160kB mlocked:185016kB kernel_stack:8672kB pagetables:11608kB bounce:0kB free_pcp:368kB local_pcp:116kB free_cma:0kB [ 877.900727] lowmem_reserve[]: 0 0 0 0 0 [ 877.910012] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 18:31:55 executing program 0: bpf$PROG_LOAD(0x4, 0x0, 0x0) [ 877.962914] lowmem_reserve[]: 0 0 0 0 0 [ 877.967882] Node 1 Normal free:54640kB min:53696kB low:67120kB high:80544kB active_anon:11280kB inactive_anon:3287356kB active_file:2088kB inactive_file:2280kB unevictable:25552kB writepending:12kB present:4194304kB managed:4128256kB mlocked:25552kB kernel_stack:4480kB pagetables:19760kB bounce:0kB free_pcp:940kB local_pcp:208kB free_cma:0kB [ 878.089202] lowmem_reserve[]: 0 0 0 0 0 [ 878.097521] Node 0 DMA: 17*4kB (ME) 1*8kB (M) 2*16kB (ME) 2*32kB (ME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11052kB [ 878.113478] Node 0 DMA32: 145*4kB (UME) 274*8kB (UM) 30*16kB (UME) 597*32kB (UME) 7*64kB (UE) 4*128kB (UM) 2*256kB (UE) 3*512kB (UE) 3*1024kB (UE) 2*2048kB (ME) 1*4096kB (M) = 36628kB [ 878.131496] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 878.165527] Node 1 Normal: 33*4kB (U) 171*8kB (M) 417*16kB (UM) 732*32kB (UM) 364*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54892kB [ 878.194373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 878.239471] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 878.277119] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 878.290954] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 878.300126] 26094 total pagecache pages [ 878.304117] 0 pages in swap cache [ 878.311113] Swap cache stats: add 0, delete 0, find 0/0 [ 878.316496] Free swap = 0kB [ 878.319882] Total swap = 0kB [ 878.322911] 2097051 pages RAM [ 878.326008] 0 pages HighMem/MovableOnly [ 878.330666] 363840 pages reserved [ 878.335388] 0 pages cma reserved [ 878.340464] Out of memory (oom_kill_allocating_task): Kill process 29528 (syz-executor.5) score 0 or sacrifice child [ 878.351707] Killed process 29528 (syz-executor.5) total-vm:85276kB, anon-rss:24532kB, file-rss:56620kB, shmem-rss:0kB [ 878.374793] oom_reaper: reaped process 29528 (syz-executor.5), now anon-rss:24532kB, file-rss:21796kB, shmem-rss:0kB 18:31:55 executing program 1: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 18:31:55 executing program 2: prctl$PR_SET_NAME(0x22, &(0x7f0000000000)='`Z\xce\xd4\f\xc7\xac\r\x9ejQ\xf4\xcb\xc7\xde[\x8a \xf1\xb1\xaf\v\xf1N\f\xba\xc9\xb6\xd3\xfb\xdf\xc1\xcas\x88\xaa\xdfe\x1c\xf1`&\x1c;1\xd1pex\xb7\xbc\x10f#{.#z\xc5\xf6\x12\xcd\xb1\xa0\x9e\xc1\x16\xea7\x9ak\xa7\x18bl\xbb\xf7\xff\xa8\v\xe3#\x1a\xce\x02\xfd\xd9\a\xffl\x97\xc5\xd7\xe8\xd7a\xd0\fN\xd0\x92\x90`\x0f\x8fSK\xbd\x19\x82\xe4\xa5S\xa4\x873\x1f\x03') 18:31:55 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_hsr\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x8}}) 18:31:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x3, 0x3, 0x5}, 0x14}}, 0x0) 18:31:55 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_spirange={0x2}, @sadb_x_sec_ctx={0x2}]}, 0x28}}, 0x0) 18:31:55 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001100), 0x0, &(0x7f0000001140)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 18:31:55 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:31:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000010"], 0x14}}, 0x0) [ 878.655828] FAT-fs (loop1): bogus number of reserved sectors [ 878.663494] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 878.672803] FAT-fs (loop1): Can't find a valid FAT filesystem [ 878.725022] FAT-fs (loop1): bogus number of reserved sectors [ 878.732251] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 878.746253] FAT-fs (loop1): Can't find a valid FAT filesystem [ 879.800649] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 879.884869] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 879.956528] CPU: 0 PID: 7976 Comm: syz-fuzzer Not tainted 4.14.215-syzkaller #0 [ 879.963994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 879.973343] Call Trace: [ 879.975931] dump_stack+0x1b2/0x283 [ 879.979560] dump_header+0x178/0x82f [ 879.983272] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 879.988375] ? ___ratelimit+0x2cd/0x522 [ 879.992347] oom_kill_process.cold+0x10/0xb18 [ 879.996853] out_of_memory+0xe3e/0x1190 [ 880.000833] ? oom_killer_disable+0x1c0/0x1c0 [ 880.005330] ? mutex_trylock+0x152/0x1a0 [ 880.009390] __alloc_pages_nodemask+0x23e1/0x2720 [ 880.014249] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 880.019110] alloc_pages_current+0x155/0x260 [ 880.023517] filemap_fault+0xea3/0x1980 [ 880.027499] ext4_filemap_fault+0x84/0xb0 [ 880.031644] __do_fault+0xfa/0x380 [ 880.035179] __handle_mm_fault+0x2497/0x4620 [ 880.039588] ? vm_insert_page+0x7c0/0x7c0 [ 880.043729] ? HARDIRQ_verbose+0x10/0x10 [ 880.047787] ? HARDIRQ_verbose+0x10/0x10 [ 880.051854] handle_mm_fault+0x391/0x860 [ 880.055912] __do_page_fault+0x549/0xad0 [ 880.059992] ? spurious_fault+0x640/0x640 [ 880.064133] ? do_page_fault+0x60/0x4f2 [ 880.068102] ? page_fault+0x2f/0x50 [ 880.071726] page_fault+0x45/0x50 [ 880.075172] RIP: eeffe0:0x8 [ 880.078091] RSP: 2e000:000000c00003df28 EFLAGS: 00438920 [ 880.088960] Mem-Info: [ 880.096950] active_anon:154172 inactive_anon:1110561 isolated_anon:0 [ 880.096950] active_file:45 inactive_file:59 isolated_file:0 [ 880.096950] unevictable:53599 dirty:0 writeback:0 unstable:0 [ 880.096950] slab_reclaimable:14239 slab_unreclaimable:121372 [ 880.096950] mapped:58120 shmem:19259 pagetables:7891 bounce:0 [ 880.096950] free:25188 free_pcp:140 free_cma:0 [ 880.131057] Node 0 active_anon:605256kB inactive_anon:1152996kB active_file:116kB inactive_file:156kB unevictable:182140kB isolated(anon):0kB isolated(file):0kB mapped:109408kB dirty:0kB writeback:0kB shmem:69204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 880.196503] Node 1 active_anon:11436kB inactive_anon:3289248kB active_file:80kB inactive_file:84kB unevictable:32256kB isolated(anon):0kB isolated(file):0kB mapped:123136kB dirty:0kB writeback:0kB shmem:7832kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 880.459058] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 880.639869] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 880.644943] Node 0 DMA32 free:36148kB min:36200kB low:45248kB high:54296kB active_anon:605224kB inactive_anon:1152408kB active_file:160kB inactive_file:8kB unevictable:182140kB writepending:0kB present:3129332kB managed:2788160kB mlocked:182140kB kernel_stack:8992kB pagetables:12084kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 880.922376] lowmem_reserve[]: 0 0 0 0 0 [ 880.970000] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 881.041501] lowmem_reserve[]: 0 0 0 0 0 [ 881.061285] Node 1 Normal free:53308kB min:53696kB low:67120kB high:80544kB active_anon:11444kB inactive_anon:3289248kB active_file:24kB inactive_file:512kB unevictable:32256kB writepending:0kB present:4194304kB managed:4128256kB mlocked:32256kB kernel_stack:4416kB pagetables:19480kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 881.092304] lowmem_reserve[]: 0 0 0 0 0 [ 881.096530] Node 0 DMA: 17*4kB (ME) 1*8kB (M) 2*16kB (ME) 2*32kB (ME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11052kB [ 881.112150] Node 0 DMA32: 432*4kB (UME) 1143*8kB (UM) 234*16kB (UM) 574*32kB (UM) 4*64kB (UM) 2*128kB (UM) 2*256kB (U) 5*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 36568kB [ 881.132573] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 881.235685] Node 1 Normal: 73*4kB (UM) 85*8kB (UME) 192*16kB (UME) 692*32kB (UM) 437*64kB (ME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54156kB [ 881.315944] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 881.331887] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 881.340661] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 881.354578] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 881.363404] 24763 total pagecache pages [ 881.372571] 0 pages in swap cache [ 881.376076] Swap cache stats: add 0, delete 0, find 0/0 [ 881.381522] Free swap = 0kB [ 881.384546] Total swap = 0kB [ 881.387674] 2097051 pages RAM [ 881.390767] 0 pages HighMem/MovableOnly [ 881.394724] 363840 pages reserved [ 881.398187] 0 pages cma reserved [ 881.401536] Out of memory (oom_kill_allocating_task): Kill process 7976 (syz-fuzzer) score 0 or sacrifice child [ 881.411941] Killed process 26326 (syz-executor.4) total-vm:85024kB, anon-rss:1724kB, file-rss:4kB, shmem-rss:0kB [ 881.472763] oom_reaper: reaped process 26326 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 18:31:58 executing program 3: bpf$PROG_LOAD(0x12, 0x0, 0x0) 18:31:59 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:31:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:31:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x1b, 0x0, &(0x7f00000000c0)) 18:31:59 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x16, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x2, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0x38}}, 0x0) 18:31:59 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) 18:31:59 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x60, 0x0, @in={0x2, 0x0, @private}}]}, 0x28}}, 0x0) 18:31:59 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x28}]}) 18:31:59 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_spirange={0x2}, @sadb_x_sec_ctx={0x1, 0x5}]}, 0x28}}, 0x0) 18:31:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f000000a680)={&(0x7f000000a540), 0xc, &(0x7f000000a640)={&(0x7f000000a580)={0x24, 0x0, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}]}, 0x24}}, 0x0) 18:31:59 executing program 2: bpf$PROG_LOAD(0x7, 0x0, 0x0) 18:31:59 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x0) mlockall(0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) r3 = fcntl$getown(r2, 0x9) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000100"/104], 0x68) getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, 0x0, 0x0) sendmsg$AUDIT_GET(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdc00, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x894}, 0x4000044) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x4, 0x0, 0x2, 0x6, 0x0, 0x1, 0x800, 0x5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x6, 0x4}, 0x14000, 0x0, 0x1, 0x0, 0x9, 0x7fffffff}, r3, 0x8, r5, 0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000000), 0x84000) 18:31:59 executing program 0: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x402, 0x0) [ 882.488964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 882.506909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 882.517342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.545421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.580466] device bridge_slave_1 left promiscuous mode [ 882.586098] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.596007] device bridge_slave_0 left promiscuous mode [ 882.603944] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.615986] device veth1_macvtap left promiscuous mode [ 882.628639] device veth0_macvtap left promiscuous mode [ 882.634277] device veth1_vlan left promiscuous mode [ 882.641795] device veth0_vlan left promiscuous mode [ 882.865261] device hsr_slave_1 left promiscuous mode [ 882.885418] device hsr_slave_0 left promiscuous mode [ 882.924248] team0 (unregistering): Port device team_slave_1 removed [ 882.950144] team0 (unregistering): Port device team_slave_0 removed [ 882.978016] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 883.006585] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 883.091227] bond0 (unregistering): Released all slaves [ 885.930463] IPVS: ftp: loaded support on port[0] = 21 [ 886.081565] chnl_net:caif_netlink_parms(): no params data found [ 886.152269] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.158978] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.165995] device bridge_slave_0 entered promiscuous mode [ 886.172867] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.179816] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.187507] device bridge_slave_1 entered promiscuous mode [ 886.207764] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 886.216939] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 886.237580] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 886.244671] team0: Port device team_slave_0 added [ 886.250411] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 886.257758] team0: Port device team_slave_1 added [ 886.276444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.282683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.308074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.319210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.325556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.350833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 886.361538] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 886.369165] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 886.391764] device hsr_slave_0 entered promiscuous mode [ 886.397452] device hsr_slave_1 entered promiscuous mode [ 886.403307] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 886.410641] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 886.558000] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.564389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.571087] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.577505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.634956] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 886.642012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 886.677102] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 886.692866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 886.700648] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.724056] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.740867] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 886.751664] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.762990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 886.775358] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.781811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.819964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 886.828656] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.835038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.856327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 886.874036] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 886.890509] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 886.901402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 886.912674] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 886.919842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 886.928479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 886.937462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 886.952315] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 886.993274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 887.001055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 887.009250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 887.018746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 887.047033] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 887.311671] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 887.331716] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 887.347964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 887.365497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 887.473936] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 887.493808] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 887.509758] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 887.529557] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 887.539339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 887.562169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 887.574031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 887.586636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 887.608729] device veth0_vlan entered promiscuous mode [ 887.629788] device veth1_vlan entered promiscuous mode [ 887.641457] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 887.651783] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 887.672583] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 887.688672] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 887.695545] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 887.709336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 887.719001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 887.730344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 887.742743] device veth0_macvtap entered promiscuous mode [ 887.756536] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 887.811209] device veth1_macvtap entered promiscuous mode [ 887.824354] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 887.840464] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 887.856665] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 887.872062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 887.882079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.898693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 887.913330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.924825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 887.938376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.950714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 887.963573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.975915] Bluetooth: hci1 command 0x0409 tx timeout [ 887.984328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 887.996556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.008128] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 888.015151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 888.022469] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 888.031988] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 888.039432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 888.047773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 888.060387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 888.070567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.080224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 888.090303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.099528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 888.110357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.125452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 888.142526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.151707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 888.167733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.181865] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 888.191970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 888.201047] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 888.209116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 890.065526] Bluetooth: hci1 command 0x041b tx timeout [ 892.135425] Bluetooth: hci1 command 0x040f tx timeout 18:32:09 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:32:09 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000040)=@framed={{}, [@map_val, @map]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:32:09 executing program 3: socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020c000005"], 0x28}}, 0x0) 18:32:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:32:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0x0) 18:32:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f000000a400)={0x0, 0x0, &(0x7f000000a3c0)={&(0x7f000000a380)={0x14, 0x3, 0x7, 0x401}, 0x14}}, 0x0) 18:32:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x2}, 0x0) 18:32:09 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) 18:32:10 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:32:10 executing program 0: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[{@fat=@check_relaxed='check=relaxed'}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x80000001}}]}) 18:32:10 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) 18:32:10 executing program 2: r0 = socket(0x1, 0x3, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) 18:32:10 executing program 3: symlinkat(&(0x7f0000000480)='./file0\x00', 0xffffffffffffffff, 0x0) 18:32:10 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 893.082517] syz-executor.2 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 893.101380] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 893.114284] CPU: 1 PID: 27765 Comm: syz-executor.2 Not tainted 4.14.215-syzkaller #0 [ 893.122186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 893.131541] Call Trace: [ 893.134129] dump_stack+0x1b2/0x283 [ 893.137762] dump_header+0x178/0x82f [ 893.141473] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 893.146576] ? ___ratelimit+0x2cd/0x522 [ 893.150559] oom_kill_process.cold+0x10/0xb18 [ 893.155064] out_of_memory+0xe3e/0x1190 [ 893.159047] ? oom_killer_disable+0x1c0/0x1c0 [ 893.163543] ? mutex_trylock+0x152/0x1a0 [ 893.167609] __alloc_pages_nodemask+0x23e1/0x2720 [ 893.171131] syz-executor.5: [ 893.172468] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 893.172490] ? cache_grow_begin+0x41/0x630 [ 893.172500] cache_grow_begin+0x91/0x630 [ 893.172510] ? cache_grow_begin+0x91/0x630 [ 893.172519] fallback_alloc+0x207/0x2c0 [ 893.172532] kmem_cache_alloc+0x1e5/0x3c0 [ 893.172541] getname_flags+0xc8/0x550 [ 893.172567] user_path_at_empty+0x2a/0x50 [ 893.172578] vfs_statx+0xd1/0x180 [ 893.172587] ? cp_compat_stat+0x890/0x890 [ 893.172598] ? mntput_no_expire+0xee/0x910 [ 893.172605] ? dput.part.0+0x300/0x710 [ 893.172615] SyS_newlstat+0x83/0xe0 [ 893.172623] ? SyS_newstat+0xe0/0xe0 [ 893.172634] ? do_rmdir+0x3c0/0x3c0 [ 893.172644] ? __detach_mounts+0x400/0x400 [ 893.172657] ? __do_page_fault+0x159/0xad0 [ 893.172665] ? do_syscall_64+0x4c/0x640 [ 893.172674] ? SyS_newstat+0xe0/0xe0 [ 893.211501] page allocation failure: order:4 [ 893.212464] do_syscall_64+0x1d5/0x640 [ 893.255020] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 893.256074] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 893.256084] RIP: 0033:0x45d5d5 [ 893.256088] RSP: 002b:00007ffd89cd0db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 893.256096] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045d5d5 [ 893.256100] RDX: 00007ffd89cd0dd0 RSI: 00007ffd89cd0dd0 RDI: 00007ffd89cd0e60 [ 893.256104] RBP: 00000000000da04e R08: 0000000000000000 R09: 000000000000000f [ 893.256109] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffd89cd1f10 [ 893.256113] R13: 0000000001cefa60 R14: 0000000000000000 R15: 00000000000da030 [ 893.273673] Mem-Info: [ 893.332702] active_anon:153004 inactive_anon:1120785 isolated_anon:0 [ 893.332702] active_file:11 inactive_file:8 isolated_file:0 [ 893.332702] unevictable:46898 dirty:4 writeback:12 unstable:0 [ 893.332702] slab_reclaimable:14330 slab_unreclaimable:116449 [ 893.332702] mapped:54040 shmem:19259 pagetables:7845 bounce:0 [ 893.332702] free:25207 free_pcp:0 free_cma:0 [ 893.378600] Node 0 active_anon:600816kB inactive_anon:1181220kB active_file:28kB inactive_file:20kB unevictable:183000kB isolated(anon):0kB isolated(file):0kB mapped:96352kB dirty:8kB writeback:32kB shmem:69196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 893.391711] (null) [ 893.419162] Node 1 active_anon:11200kB inactive_anon:3301920kB active_file:16kB inactive_file:12kB unevictable:4592kB isolated(anon):0kB isolated(file):0kB mapped:119808kB dirty:8kB writeback:16kB shmem:7840kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 893.434662] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 893.465412] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 893.474390] CPU: 0 PID: 29909 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 893.498692] lowmem_reserve[]: [ 893.502049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 893.502054] Call Trace: [ 893.502075] dump_stack+0x1b2/0x283 [ 893.505219] 0 [ 893.514701] warn_alloc.cold+0x96/0x1cc [ 893.514711] ? zone_watermark_ok_safe+0x220/0x220 [ 893.517370] 2717 [ 893.520927] __alloc_pages_nodemask+0x2127/0x2720 [ 893.522732] 2718 [ 893.526669] ? lock_acquire+0x170/0x3f0 [ 893.526685] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 893.526704] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 893.531553] 2718 [ 893.533604] ? __mutex_unlock_slowpath+0x75/0x770 [ 893.533621] alloc_pages_current+0x155/0x260 [ 893.533634] ion_page_pool_alloc+0x118/0x1b0 [ 893.538594] 2718 [ 893.540515] ion_system_heap_allocate+0x133/0x8c0 [ 893.540528] ? ion_alloc+0x187/0x810 [ 893.540541] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 893.549329] ? ion_system_contig_heap_create+0x130/0x130 [ 893.549337] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 893.549347] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 893.549360] ion_alloc+0x204/0x810 [ 893.549375] ? ion_dma_buf_release+0x40/0x40 [ 893.554842] Node 0 [ 893.556852] ? __might_fault+0x177/0x1b0 [ 893.556864] ion_ioctl+0xea/0x1ee [ 893.556873] ? ion_alloc.cold+0x3b/0x3b [ 893.556885] ? HARDIRQ_verbose+0x10/0x10 [ 893.561764] DMA32 free:36192kB min:36200kB low:45248kB high:54296kB active_anon:600784kB inactive_anon:1180632kB active_file:360kB inactive_file:0kB unevictable:182640kB writepending:40kB present:3129332kB managed:2788160kB mlocked:182640kB kernel_stack:8704kB pagetables:12020kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 893.566102] ? lock_downgrade+0x740/0x740 [ 893.566108] ? ion_alloc.cold+0x3b/0x3b [ 893.566118] do_vfs_ioctl+0x75a/0xff0 [ 893.566131] ? ioctl_preallocate+0x1a0/0x1a0 [ 893.566140] ? lock_downgrade+0x740/0x740 [ 893.570561] lowmem_reserve[]: [ 893.572606] ? __fget+0x225/0x360 [ 893.572618] ? do_vfs_ioctl+0xff0/0xff0 [ 893.577494] 0 [ 893.581132] ? security_file_ioctl+0x83/0xb0 [ 893.581146] SyS_ioctl+0x7f/0xb0 [ 893.586619] 0 [ 893.592002] ? do_vfs_ioctl+0xff0/0xff0 [ 893.592014] do_syscall_64+0x1d5/0x640 [ 893.592032] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 893.597068] 0 [ 893.601845] RIP: 0033:0x45e219 [ 893.601850] RSP: 002b:00007f9f6fd95c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 893.605424] 0 [ 893.609762] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 893.609768] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 893.609773] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 893.609779] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 893.612021] 0 [ 893.616034] R13: 00007ffdd833b2ef R14: 00007f9f6fd969c0 R15: 000000000119c034 [ 893.629507] Mem-Info: [ 893.691748] active_anon:153004 inactive_anon:1120785 isolated_anon:0 [ 893.691748] active_file:11 inactive_file:8 isolated_file:0 [ 893.691748] unevictable:46898 dirty:4 writeback:12 unstable:0 [ 893.691748] slab_reclaimable:14330 slab_unreclaimable:116449 [ 893.691748] mapped:54040 shmem:19259 pagetables:7845 bounce:0 [ 893.691748] free:25207 free_pcp:0 free_cma:0 [ 893.711939] Node 0 [ 893.723826] Node 0 active_anon:600816kB inactive_anon:1181220kB active_file:28kB inactive_file:20kB unevictable:183000kB isolated(anon):0kB isolated(file):0kB mapped:96352kB dirty:8kB writeback:32kB shmem:69196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 893.743078] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 893.769459] Node 1 active_anon:11200kB inactive_anon:3301920kB active_file:16kB inactive_file:12kB unevictable:4592kB isolated(anon):0kB isolated(file):0kB mapped:119808kB dirty:8kB writeback:16kB shmem:7840kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 893.816406] lowmem_reserve[]: [ 893.850849] Node 0 [ 893.872234] 0 [ 893.903883] DMA free:11076kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 893.907238] 0 0 0 0 [ 893.951620] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 893.953173] Node 1 Normal free:53560kB min:53696kB low:67120kB high:80544kB active_anon:11200kB inactive_anon:3301920kB active_file:16kB inactive_file:12kB unevictable:4592kB writepending:24kB present:4194304kB managed:4128256kB mlocked:4592kB kernel_stack:4544kB pagetables:19356kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 893.974507] Node 0 DMA32 free:37776kB min:36200kB low:45248kB high:54296kB active_anon:600780kB inactive_anon:1180632kB active_file:44kB inactive_file:28kB unevictable:183152kB writepending:0kB present:3129332kB managed:2788160kB mlocked:183152kB kernel_stack:8704kB pagetables:12028kB bounce:0kB free_pcp:0kB local_pcp:116kB free_cma:0kB [ 894.025788] lowmem_reserve[]: [ 894.143515] lowmem_reserve[]: 0 0 0 0 0 [ 894.150834] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 894.189192] 0 0 0 0 0 [ 894.206591] Node 0 DMA: 17*4kB (ME) 4*8kB (UM) 2*16kB (ME) 2*32kB (ME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11076kB [ 894.222426] Bluetooth: hci1 command 0x0419 tx timeout [ 894.314612] Node 0 DMA32: 224*4kB (UME) 1443*8kB (UME) 384*16kB (UME) 563*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36600kB [ 894.384870] lowmem_reserve[]: 0 0 0 0 0 [ 894.405304] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 894.410462] Node 1 Normal free:53564kB min:53696kB low:67120kB high:80544kB active_anon:11184kB inactive_anon:3301920kB active_file:8kB inactive_file:108kB unevictable:4608kB writepending:0kB present:4194304kB managed:4128256kB mlocked:4608kB kernel_stack:4544kB pagetables:19356kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 894.497427] Node 1 Normal: 332*4kB (UM) 584*8kB (UM) 799*16kB (UM) 1035*32kB (UM) 30*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53824kB [ 894.601338] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 894.670772] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 894.671610] lowmem_reserve[]: [ 894.713648] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 894.715809] 0 [ 894.745356] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 894.810476] 0 0 0 0 [ 894.812848] Node 0 DMA: 17*4kB (ME) 4*8kB (UM) 2*16kB (ME) 2*32kB (ME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11076kB [ 894.819702] 20684 total pagecache pages [ 894.890198] 0 pages in swap cache [ 894.916959] Swap cache stats: add 0, delete 0, find 0/0 [ 894.943390] Node 0 DMA32: 224*4kB (UME) 1443*8kB (UME) 384*16kB (UME) 563*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36600kB [ 894.952880] Free swap = 0kB [ 894.991900] Total swap = 0kB [ 895.007257] 2097051 pages RAM [ 895.047202] 0 pages HighMem/MovableOnly [ 895.047741] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 895.063515] 363840 pages reserved [ 895.129048] 0 pages cma reserved [ 895.154640] Out of memory (oom_kill_allocating_task): Kill process 27765 (syz-executor.2) score 0 or sacrifice child [ 895.173543] Node 1 Normal: 332*4kB (UM) 588*8kB (UM) 800*16kB (UM) 1035*32kB (UM) 30*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53872kB [ 895.234987] Killed process 27765 (syz-executor.2) total-vm:93216kB, anon-rss:108kB, file-rss:34752kB, shmem-rss:0kB [ 895.272686] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 895.350300] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 895.360924] oom_reaper: reaped process 27765 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 895.425443] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 895.434412] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 895.515663] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 895.525476] 20685 total pagecache pages [ 895.532910] 0 pages in swap cache [ 895.604944] Swap cache stats: add 0, delete 0, find 0/0 [ 895.610333] Free swap = 0kB [ 895.613349] Total swap = 0kB [ 895.678503] 2097051 pages RAM [ 895.681643] 0 pages HighMem/MovableOnly [ 895.756365] 363840 pages reserved [ 895.756691] systemd-journal cpuset= [ 895.775554] 0 pages cma reserved [ 895.776520] / mems_allowed=0-1 [ 895.796952] CPU: 1 PID: 29174 Comm: systemd-journal Not tainted 4.14.215-syzkaller #0 [ 895.804927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 895.814286] Call Trace: [ 895.816879] dump_stack+0x1b2/0x283 [ 895.820517] dump_header+0x178/0x82f [ 895.824240] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 895.829361] ? ___ratelimit+0x2cd/0x522 [ 895.833419] oom_kill_process.cold+0x10/0xb18 [ 895.837923] out_of_memory+0xe3e/0x1190 [ 895.842024] ? oom_killer_disable+0x1c0/0x1c0 [ 895.846519] ? mutex_trylock+0x152/0x1a0 [ 895.850590] __alloc_pages_nodemask+0x23e1/0x2720 [ 895.855449] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 895.860317] alloc_pages_current+0x155/0x260 [ 895.864730] filemap_fault+0xea3/0x1980 [ 895.868717] ext4_filemap_fault+0x84/0xb0 [ 895.872867] __do_fault+0xfa/0x380 [ 895.876408] __handle_mm_fault+0x2497/0x4620 [ 895.880818] ? vm_insert_page+0x7c0/0x7c0 [ 895.884961] ? HARDIRQ_verbose+0x10/0x10 [ 895.889113] ? HARDIRQ_verbose+0x10/0x10 [ 895.893272] handle_mm_fault+0x391/0x860 [ 895.897344] __do_page_fault+0x549/0xad0 [ 895.901408] ? spurious_fault+0x640/0x640 [ 895.905554] ? do_page_fault+0x60/0x4f2 [ 895.909528] ? page_fault+0x2f/0x50 [ 895.913160] page_fault+0x45/0x50 [ 895.916609] RIP: 0001:0x1 [ 895.919368] RSP: 4fb21310:00007ffc4a181a00 EFLAGS: 7ffc4a181810 [ 895.950745] Mem-Info: [ 895.970551] active_anon:152999 inactive_anon:1123060 isolated_anon:0 [ 895.970551] active_file:1882 inactive_file:1921 isolated_file:0 [ 895.970551] unevictable:42517 dirty:25 writeback:0 unstable:0 [ 895.970551] slab_reclaimable:14340 slab_unreclaimable:115940 [ 895.970551] mapped:46040 shmem:19259 pagetables:7810 bounce:0 18:32:13 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:32:13 executing program 0: mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) 18:32:13 executing program 1: bpf$PROG_LOAD(0xa, 0x0, 0x0) 18:32:13 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0xe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0x38}}, 0x0) 18:32:13 executing program 2: r0 = epoll_create1(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) 18:32:13 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2054, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 895.970551] free:30617 free_pcp:413 free_cma:0 18:32:13 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:32:13 executing program 0: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000b11000/0x3000)=nil, 0x3000, 0x1000004, 0x100010, r0, 0x45627000) pkey_mprotect(&(0x7f000064a000/0x1000)=nil, 0x1000, 0x1000000, 0xffffffffffffffff) r3 = dup(r2) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:32:13 executing program 1: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x10000000, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:32:13 executing program 3: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="7a755d1e7c5f2f0e0691db2f8801a872eddaf4009b7f9c7065270999653e1f30f0f4195b55c52161b39b3d8bd4784137648bca1cbdd198460ce954263c7d989e212c7c9c68be37ee", 0x48}], 0x1, 0x9, 0x5, 0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:32:13 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:32:13 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 896.164598] Node 0 active_anon:602668kB inactive_anon:1181316kB active_file:7216kB inactive_file:12588kB unevictable:176184kB isolated(anon):0kB isolated(file):0kB mapped:71004kB dirty:104kB writeback:0kB shmem:69196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 896.302655] Node 1 active_anon:11236kB inactive_anon:3301960kB active_file:152kB inactive_file:824kB unevictable:7800kB isolated(anon):0kB isolated(file):128kB mapped:117880kB dirty:4kB writeback:0kB shmem:7840kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 896.338963] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 896.500978] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 896.545705] Node 0 DMA32 free:37400kB min:36200kB low:45248kB high:54296kB active_anon:603140kB inactive_anon:1180972kB active_file:2972kB inactive_file:2908kB unevictable:197052kB writepending:104kB present:3129332kB managed:2788160kB mlocked:197052kB kernel_stack:9120kB pagetables:12952kB bounce:0kB free_pcp:704kB local_pcp:324kB free_cma:0kB [ 896.637615] lowmem_reserve[]: 0 0 0 0 0 [ 896.644916] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 896.675252] lowmem_reserve[]: 0 0 0 0 0 [ 896.679276] Node 1 Normal free:54900kB min:53696kB low:67120kB high:80544kB active_anon:11136kB inactive_anon:3301960kB active_file:52kB inactive_file:48kB unevictable:10132kB writepending:4kB present:4194304kB managed:4128256kB mlocked:10132kB kernel_stack:4512kB pagetables:19396kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 896.714905] lowmem_reserve[]: 0 0 0 0 0 [ 896.718925] Node 0 DMA: 17*4kB (ME) 4*8kB (UM) 2*16kB (ME) 2*32kB (ME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11076kB [ 896.742933] Node 0 DMA32: 493*4kB (UMEH) 668*8kB (UME) 1111*16kB (UME) 539*32kB (UE) 4*64kB (UM) 1*128kB (U) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 42980kB [ 896.762926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 896.769808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.778305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 896.785109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.793462] device bridge_slave_1 left promiscuous mode [ 896.799056] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.807645] device bridge_slave_0 left promiscuous mode [ 896.813258] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.823122] device veth1_macvtap left promiscuous mode [ 896.828548] device veth0_macvtap left promiscuous mode [ 896.833885] device veth1_vlan left promiscuous mode [ 896.839101] device veth0_vlan left promiscuous mode [ 896.921184] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 896.948550] Node 1 Normal: 267*4kB (UM) 50*8kB (UM) 683*16kB (UM) 1195*32kB (UM) 59*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54412kB [ 896.963991] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 896.973227] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 897.011369] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 897.040144] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 897.051241] 22276 total pagecache pages [ 897.060455] 0 pages in swap cache [ 897.063919] Swap cache stats: add 0, delete 0, find 0/0 [ 897.071800] Free swap = 0kB [ 897.079868] Total swap = 0kB [ 897.082893] 2097051 pages RAM [ 897.086047] 0 pages HighMem/MovableOnly [ 897.090077] 363840 pages reserved [ 897.093507] 0 pages cma reserved [ 897.097023] Out of memory (oom_kill_allocating_task): Kill process 29174 (systemd-journal) score 0 or sacrifice child [ 897.107951] Killed process 29174 (systemd-journal) total-vm:46096kB, anon-rss:480kB, file-rss:0kB, shmem-rss:1740kB [ 897.107954] syz-executor.5: page allocation failure: order:4 [ 897.128030] kworker/1:3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 897.136970] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 897.148291] kworker/1:3 cpuset= [ 897.158597] (null) [ 897.227469] / mems_allowed=0-1 [ 897.235170] CPU: 1 PID: 8970 Comm: kworker/1:3 Not tainted 4.14.215-syzkaller #0 [ 897.242717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 897.252125] Workqueue: events cgroup1_release_agent [ 897.255631] syz-executor.5 cpuset= [ 897.257132] Call Trace: [ 897.260794] / [ 897.263272] dump_stack+0x1b2/0x283 [ 897.268719] dump_header+0x178/0x82f [ 897.272435] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 897.277535] ? ___ratelimit+0x2cd/0x522 [ 897.281511] oom_kill_process.cold+0x10/0xb18 [ 897.286095] ? lock_downgrade+0x740/0x740 [ 897.290243] out_of_memory+0x2dc/0x1190 [ 897.294221] ? oom_killer_disable+0x1c0/0x1c0 [ 897.298714] ? mutex_trylock+0x152/0x1a0 [ 897.302786] __alloc_pages_nodemask+0x23e1/0x2720 [ 897.303800] mems_allowed=0-1 [ 897.307644] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 897.307667] ? mark_held_locks+0xa6/0xf0 [ 897.307677] ? cache_grow_begin+0x41/0x630 [ 897.307688] cache_grow_begin+0x91/0x630 [ 897.327920] ? cache_grow_begin+0x91/0x630 [ 897.332160] fallback_alloc+0x207/0x2c0 [ 897.336142] kmem_cache_alloc_trace+0x1f1/0x3d0 [ 897.340806] cgroup1_release_agent+0xa1/0x250 [ 897.345291] ? cgroup1_check_for_release+0x1b0/0x1b0 [ 897.350389] ? lock_acquire+0x170/0x3f0 [ 897.354360] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 897.359809] process_one_work+0x793/0x14a0 [ 897.364046] ? work_busy+0x320/0x320 [ 897.367747] ? worker_thread+0x158/0xff0 [ 897.371814] worker_thread+0x5cc/0xff0 [ 897.375711] ? rescuer_thread+0xc80/0xc80 [ 897.379853] kthread+0x30d/0x420 [ 897.383215] ? kthread_create_on_node+0xd0/0xd0 [ 897.387885] ret_from_fork+0x24/0x30 [ 897.391644] CPU: 0 PID: 29956 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 897.399532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 897.408986] Call Trace: [ 897.411571] dump_stack+0x1b2/0x283 [ 897.415205] warn_alloc.cold+0x96/0x1cc [ 897.419175] ? zone_watermark_ok_safe+0x220/0x220 [ 897.424034] __alloc_pages_nodemask+0x2127/0x2720 [ 897.428880] ? lock_acquire+0x170/0x3f0 [ 897.432858] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 897.437791] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 897.443240] ? __mutex_unlock_slowpath+0x75/0x770 [ 897.448093] alloc_pages_current+0x155/0x260 [ 897.451951] Mem-Info: [ 897.452517] ion_page_pool_alloc+0x118/0x1b0 [ 897.458252] active_anon:153584 inactive_anon:1120783 isolated_anon:0 [ 897.458252] active_file:24 inactive_file:0 isolated_file:0 [ 897.458252] unevictable:56345 dirty:2 writeback:0 unstable:0 [ 897.458252] slab_reclaimable:14455 slab_unreclaimable:115155 [ 897.458252] mapped:46602 shmem:19255 pagetables:8128 bounce:0 [ 897.458252] free:25089 free_pcp:197 free_cma:0 [ 897.459315] ion_system_heap_allocate+0x133/0x8c0 [ 897.497978] ? ion_alloc+0x187/0x810 [ 897.501695] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 897.507154] ? ion_system_contig_heap_create+0x130/0x130 [ 897.512604] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 897.517626] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 897.522473] ion_alloc+0x204/0x810 [ 897.526020] ? ion_dma_buf_release+0x40/0x40 [ 897.530432] ? __might_fault+0x177/0x1b0 [ 897.534491] ion_ioctl+0xea/0x1ee [ 897.537941] ? ion_alloc.cold+0x3b/0x3b [ 897.541914] ? HARDIRQ_verbose+0x10/0x10 [ 897.545971] ? lock_downgrade+0x740/0x740 [ 897.550111] ? ion_alloc.cold+0x3b/0x3b [ 897.554082] do_vfs_ioctl+0x75a/0xff0 [ 897.557883] ? ioctl_preallocate+0x1a0/0x1a0 [ 897.562288] ? lock_downgrade+0x740/0x740 [ 897.566437] ? __fget+0x225/0x360 [ 897.569887] ? do_vfs_ioctl+0xff0/0xff0 [ 897.573858] ? security_file_ioctl+0x83/0xb0 [ 897.578263] SyS_ioctl+0x7f/0xb0 [ 897.581636] ? do_vfs_ioctl+0xff0/0xff0 [ 897.585608] do_syscall_64+0x1d5/0x640 [ 897.589498] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 897.594687] RIP: 0033:0x45e219 [ 897.597867] RSP: 002b:00007f9f6fd95c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 897.605573] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 897.612838] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 897.620100] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 897.627366] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 897.634630] R13: 00007ffdd833b2ef R14: 00007f9f6fd969c0 R15: 000000000119c034 [ 897.749563] Node 0 active_anon:603000kB inactive_anon:1181220kB active_file:32kB inactive_file:4kB unevictable:212412kB isolated(anon):0kB isolated(file):0kB mapped:68196kB dirty:0kB writeback:0kB shmem:69196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 897.750345] Mem-Info: [ 897.830608] active_anon:153584 inactive_anon:1120783 isolated_anon:0 [ 897.830608] active_file:24 inactive_file:2 isolated_file:0 [ 897.830608] unevictable:56345 dirty:2 writeback:0 unstable:0 [ 897.830608] slab_reclaimable:14455 slab_unreclaimable:115155 [ 897.830608] mapped:46602 shmem:19255 pagetables:8128 bounce:0 [ 897.830608] free:25089 free_pcp:197 free_cma:0 [ 897.933892] Node 1 active_anon:11336kB inactive_anon:3301912kB active_file:64kB inactive_file:4kB unevictable:12968kB isolated(anon):0kB isolated(file):0kB mapped:118212kB dirty:16kB writeback:0kB shmem:7824kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 897.941971] Node 0 active_anon:603000kB inactive_anon:1181220kB active_file:32kB inactive_file:4kB unevictable:212412kB isolated(anon):0kB isolated(file):0kB mapped:68196kB dirty:0kB writeback:0kB shmem:69196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 898.029730] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 898.038629] Node 1 active_anon:11336kB inactive_anon:3301912kB active_file:0kB inactive_file:32kB unevictable:12972kB isolated(anon):0kB isolated(file):0kB mapped:118216kB dirty:12kB writeback:0kB shmem:7824kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 898.060565] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 898.089332] Node 0 DMA32 free:35756kB min:36200kB low:45248kB high:54296kB active_anon:603368kB inactive_anon:1180632kB active_file:44kB inactive_file:28kB unevictable:212316kB writepending:0kB present:3129332kB managed:2788160kB mlocked:212316kB kernel_stack:9216kB pagetables:13184kB bounce:0kB free_pcp:712kB local_pcp:652kB free_cma:0kB [ 898.090704] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 898.123971] lowmem_reserve[]: [ 898.147130] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 898.151143] 0 [ 898.155450] Node 0 [ 898.155476] 0 [ 898.157305] DMA32 free:35756kB min:36200kB low:45248kB high:54296kB active_anon:603368kB inactive_anon:1180632kB active_file:44kB inactive_file:28kB unevictable:212316kB writepending:0kB present:3129332kB managed:2788160kB mlocked:212316kB kernel_stack:9216kB pagetables:13184kB bounce:0kB free_pcp:712kB local_pcp:60kB free_cma:0kB [ 898.159569] 0 [ 898.161336] lowmem_reserve[]: 0 0 0 0 0 [ 898.196341] 0 0 [ 898.196883] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 898.198962] Node 0 [ 898.224575] lowmem_reserve[]: 0 0 0 0 0 [ 898.230997] Node 1 Normal free:53664kB min:53696kB low:67120kB high:80544kB active_anon:11336kB inactive_anon:3301912kB active_file:0kB inactive_file:92kB unevictable:12572kB writepending:8kB present:4194304kB managed:4128256kB mlocked:12536kB kernel_stack:4512kB pagetables:19324kB bounce:0kB free_pcp:76kB local_pcp:0kB free_cma:0kB [ 898.231323] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 898.260691] lowmem_reserve[]: 0 0 0 0 0 [ 898.260714] Node 0 DMA: 17*4kB (ME) 4*8kB [ 898.285798] lowmem_reserve[]: 0 0 0 0 0 [ 898.297050] (UM) 2*16kB (ME) 2*32kB (ME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11076kB [ 898.298421] Node 1 Normal free:53664kB min:53696kB low:67120kB high:80544kB active_anon:11336kB inactive_anon:3301912kB active_file:0kB inactive_file:92kB unevictable:12572kB writepending:8kB present:4194304kB managed:4128256kB mlocked:12536kB kernel_stack:4512kB pagetables:19324kB bounce:0kB free_pcp:76kB local_pcp:76kB free_cma:0kB [ 898.316125] Node 0 DMA32: 42*4kB (UME) 144*8kB (UM) 1096*16kB (UE) 532*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35880kB [ 898.341819] lowmem_reserve[]: 0 0 0 0 0 [ 898.358868] Node 0 DMA: 17*4kB (ME) 4*8kB (UM) 2*16kB (ME) 2*32kB (ME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11076kB [ 898.359326] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB [ 898.374559] Node 0 [ 898.374561] 0*128kB 0*256kB [ 898.380562] DMA32: [ 898.382761] 0*512kB [ 898.385832] 42*4kB (UME) 144*8kB (UM) 1096*16kB (UE) 532*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35880kB [ 898.392281] 0*1024kB 0*2048kB 0*4096kB = 0kB [ 898.402857] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 898.413002] Node 1 Normal: 228*4kB (UME) 25*8kB (UME) 662*16kB (UME) 1193*32kB (UME) 59*64kB (ME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53656kB [ 898.418230] Node 1 Normal: 228*4kB (UME) 25*8kB (UME) 662*16kB (UME) 1193*32kB (UME) 59*64kB (ME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53656kB [ 898.436853] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 898.447191] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 898.462281] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 898.466115] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 898.473906] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 898.482550] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 898.496174] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 898.500580] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 898.513679] 22394 total pagecache pages [ 898.517774] 22394 total pagecache pages [ 898.521719] 0 pages in swap cache [ 898.525750] 0 pages in swap cache [ 898.525755] Swap cache stats: add 0, delete 0, find 0/0 [ 898.525759] Free swap = 0kB [ 898.525763] Total swap = 0kB [ 898.525891] 2097051 pages RAM [ 898.541654] Swap cache stats: add 0, delete 0, find 0/0 [ 898.552954] 0 pages HighMem/MovableOnly [ 898.554239] Free swap = 0kB [ 898.557072] 363840 pages reserved [ 898.559990] Total swap = 0kB [ 898.563495] 0 pages cma reserved [ 898.570009] Out of memory: Kill process 28938 (syz-executor.5) score 1009 or sacrifice child [ 898.570721] 2097051 pages RAM [ 898.579605] Killed process 28938 (syz-executor.5) total-vm:97688kB, anon-rss:36944kB, file-rss:34496kB, shmem-rss:0kB [ 898.593095] 0 pages HighMem/MovableOnly [ 898.601784] 363840 pages reserved [ 898.605355] 0 pages cma reserved [ 898.668898] device hsr_slave_1 left promiscuous mode [ 898.677534] device hsr_slave_0 left promiscuous mode [ 898.695819] team0 (unregistering): Port device team_slave_1 removed [ 898.732401] team0 (unregistering): Port device team_slave_0 removed [ 898.745538] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 898.759307] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 898.795429] bond0 (unregistering): Released all slaves [ 899.539325] systemd[1]: systemd-journald.service: Failed with result 'signal'. 18:32:16 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 899.672485] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. 18:32:16 executing program 0: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000b11000/0x3000)=nil, 0x3000, 0x1000004, 0x100010, r0, 0x45627000) pkey_mprotect(&(0x7f000064a000/0x1000)=nil, 0x1000, 0x1000000, 0xffffffffffffffff) r3 = dup(r2) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:32:17 executing program 3: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="7a755d1e7c5f2f0e0691db2f8801a872eddaf4009b7f9c7065270999653e1f30f0f4195b55c52161b39b3d8bd4784137648bca1cbdd198460ce954263c7d989e212c7c9c68be37ee", 0x48}], 0x1, 0x9, 0x5, 0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 899.933220] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 900.007112] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 900.065881] systemd[1]: Stopped Journal Service. [ 900.223999] systemd[1]: Starting Journal Service... [ 900.436151] systemd[1]: Starting Cleanup of Temporary Directories... [ 900.517022] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 900.576934] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 900.598618] CPU: 1 PID: 29979 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0 [ 900.606529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 900.615887] Call Trace: [ 900.618484] dump_stack+0x1b2/0x283 [ 900.622121] warn_alloc.cold+0x96/0x1cc [ 900.626107] ? zone_watermark_ok_safe+0x220/0x220 [ 900.630977] __alloc_pages_nodemask+0x2127/0x2720 [ 900.635872] ? lock_acquire+0x170/0x3f0 [ 900.639863] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 900.644718] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 900.650173] ? __mutex_unlock_slowpath+0x75/0x770 [ 900.655024] alloc_pages_current+0x155/0x260 [ 900.659438] ion_page_pool_alloc+0x118/0x1b0 [ 900.663847] ion_system_heap_allocate+0x133/0x8c0 [ 900.668698] ? ion_alloc+0x187/0x810 [ 900.672417] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 900.677869] ? ion_system_contig_heap_create+0x130/0x130 [ 900.683316] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 900.688339] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 900.693195] ion_alloc+0x204/0x810 [ 900.696747] ? ion_dma_buf_release+0x40/0x40 [ 900.701164] ? __might_fault+0x177/0x1b0 [ 900.705233] ion_ioctl+0xea/0x1ee [ 900.708701] ? ion_alloc.cold+0x3b/0x3b [ 900.712692] ? HARDIRQ_verbose+0x10/0x10 [ 900.716764] ? lock_downgrade+0x740/0x740 [ 900.720914] ? ion_alloc.cold+0x3b/0x3b [ 900.724897] do_vfs_ioctl+0x75a/0xff0 [ 900.728706] ? ioctl_preallocate+0x1a0/0x1a0 [ 900.733124] ? lock_downgrade+0x740/0x740 [ 900.737278] ? __fget+0x225/0x360 [ 900.740734] ? do_vfs_ioctl+0xff0/0xff0 [ 900.744708] ? security_file_ioctl+0x83/0xb0 [ 900.749118] SyS_ioctl+0x7f/0xb0 [ 900.752486] ? do_vfs_ioctl+0xff0/0xff0 [ 900.756465] do_syscall_64+0x1d5/0x640 [ 900.760363] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 900.765547] RIP: 0033:0x45e219 [ 900.768733] RSP: 002b:00007f9b9a579c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 900.776442] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 900.783711] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 900.790977] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 900.798249] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 900.805516] R13: 00007ffde2f74aff R14: 00007f9b9a57a9c0 R15: 000000000119c034 [ 900.901801] Mem-Info: [ 900.904316] active_anon:153448 inactive_anon:1115634 isolated_anon:0 [ 900.904316] active_file:79 inactive_file:38 isolated_file:0 [ 900.904316] unevictable:60661 dirty:18 writeback:0 unstable:0 [ 900.904316] slab_reclaimable:14635 slab_unreclaimable:112315 [ 900.904316] mapped:52916 shmem:19255 pagetables:8037 bounce:0 [ 900.904316] free:25141 free_pcp:259 free_cma:0 [ 900.960081] Node 0 active_anon:602116kB inactive_anon:1193256kB active_file:264kB inactive_file:384kB unevictable:204712kB isolated(anon):0kB isolated(file):0kB mapped:77848kB dirty:8kB writeback:8kB shmem:69196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 901.037445] Node 1 active_anon:11764kB inactive_anon:3269236kB active_file:52kB inactive_file:0kB unevictable:39704kB isolated(anon):0kB isolated(file):0kB mapped:135488kB dirty:0kB writeback:0kB shmem:7824kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 901.234885] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 901.283772] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 901.311901] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 901.355055] Node 0 DMA32 free:35656kB min:36200kB low:45248kB high:54296kB active_anon:602104kB inactive_anon:1192600kB active_file:60kB inactive_file:20kB unevictable:204716kB writepending:0kB present:3129332kB managed:2788160kB mlocked:204716kB kernel_stack:8928kB pagetables:12432kB bounce:0kB free_pcp:72kB local_pcp:0kB free_cma:0kB [ 901.379070] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 901.465191] CPU: 0 PID: 7993 Comm: syz-fuzzer Not tainted 4.14.215-syzkaller #0 [ 901.472660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 901.482011] Call Trace: [ 901.484600] dump_stack+0x1b2/0x283 [ 901.488228] dump_header+0x178/0x82f [ 901.491943] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 901.497288] ? ___ratelimit+0x2cd/0x522 [ 901.501265] oom_kill_process.cold+0x10/0xb18 [ 901.505769] out_of_memory+0xe3e/0x1190 [ 901.509745] ? oom_killer_disable+0x1c0/0x1c0 [ 901.512034] lowmem_reserve[]: [ 901.514229] ? mutex_trylock+0x152/0x1a0 [ 901.514240] __alloc_pages_nodemask+0x23e1/0x2720 [ 901.514261] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 901.531078] alloc_pages_current+0x155/0x260 [ 901.535488] filemap_fault+0xea3/0x1980 [ 901.537623] 0 [ 901.539465] ext4_filemap_fault+0x84/0xb0 [ 901.539477] __do_fault+0xfa/0x380 [ 901.548926] __handle_mm_fault+0x2497/0x4620 [ 901.550932] 0 [ 901.553352] ? vm_insert_page+0x7c0/0x7c0 [ 901.553360] ? HARDIRQ_verbose+0x10/0x10 [ 901.553369] ? HARDIRQ_verbose+0x10/0x10 [ 901.567477] handle_mm_fault+0x391/0x860 [ 901.571540] __do_page_fault+0x549/0xad0 [ 901.575605] ? spurious_fault+0x640/0x640 [ 901.579750] ? do_page_fault+0x60/0x4f2 [ 901.583722] ? page_fault+0x2f/0x50 [ 901.587346] page_fault+0x45/0x50 [ 901.590798] RIP: 2e2d80:0x1c9 [ 901.593892] RSP: 2e2d80:000000c000f07a58 EFLAGS: c023b9cf90 [ 901.597392] 0 0 0 [ 901.659604] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 901.688611] Mem-Info: [ 901.691095] active_anon:153475 inactive_anon:1115606 isolated_anon:0 [ 901.691095] active_file:12 inactive_file:0 isolated_file:0 [ 901.691095] unevictable:61205 dirty:0 writeback:0 unstable:0 [ 901.691095] slab_reclaimable:14673 slab_unreclaimable:112302 [ 901.691095] mapped:53395 shmem:19255 pagetables:7992 bounce:0 [ 901.691095] free:24989 free_pcp:36 free_cma:0 [ 901.769814] Node 0 active_anon:602136kB inactive_anon:1193188kB active_file:96kB inactive_file:28kB unevictable:204916kB isolated(anon):0kB isolated(file):0kB mapped:77792kB dirty:0kB writeback:0kB shmem:69196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 901.795941] lowmem_reserve[]: 0 0 0 0 0 [ 901.835882] Node 1 Normal free:53224kB min:53696kB low:67120kB high:80544kB active_anon:11764kB inactive_anon:3269236kB active_file:52kB inactive_file:48kB unevictable:39704kB writepending:0kB present:4194304kB managed:4128256kB mlocked:39704kB kernel_stack:4640kB pagetables:19532kB bounce:0kB free_pcp:72kB local_pcp:0kB free_cma:0kB [ 901.952094] Node 1 active_anon:11764kB inactive_anon:3269236kB active_file:0kB inactive_file:0kB unevictable:39904kB isolated(anon):0kB isolated(file):0kB mapped:135788kB dirty:0kB writeback:0kB shmem:7824kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 902.026028] lowmem_reserve[]: 0 0 0 0 0 [ 902.053035] Node 0 DMA: 17*4kB (ME) 4*8kB (UM) 2*16kB (ME) 2*32kB (ME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11076kB [ 902.152220] Node 0 DMA32: 44*4kB (UE) 56*8kB (UME) 1157*16kB (UE) 534*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36224kB [ 902.153572] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 902.240184] Node 0 [ 902.298959] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 902.347455] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 902.353025] Node 0 DMA32 free:35720kB min:36200kB low:45248kB high:54296kB active_anon:602104kB inactive_anon:1192600kB active_file:136kB inactive_file:0kB unevictable:204960kB writepending:0kB present:3129332kB managed:2788160kB mlocked:204960kB kernel_stack:8928kB pagetables:12432kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 902.412301] Node 1 Normal: 28*4kB (UME) 21*8kB (UME) 12*16kB (UME) 1649*32kB (UME) 6*64kB (M) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53752kB [ 902.497519] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 902.530644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 902.580128] lowmem_reserve[]: 0 0 0 0 0 [ 902.590647] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 902.594101] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 902.646156] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 902.765077] 29178 total pagecache pages [ 902.773500] 0 pages in swap cache [ 902.818419] Swap cache stats: add 0, delete 0, find 0/0 [ 902.819247] lowmem_reserve[]: [ 902.857025] Free swap = 0kB [ 902.880767] 0 0 0 0 0 [ 902.888701] Total swap = 0kB [ 902.892067] Node 1 Normal free:53176kB min:53696kB low:67120kB high:80544kB active_anon:11764kB inactive_anon:3269236kB active_file:12kB inactive_file:8kB unevictable:39980kB writepending:0kB present:4194304kB managed:4128256kB mlocked:39980kB kernel_stack:4544kB pagetables:19532kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 902.907082] 2097051 pages RAM [ 903.048036] 0 pages HighMem/MovableOnly [ 903.052035] 363840 pages reserved [ 903.074863] 0 pages cma reserved [ 903.107933] lowmem_reserve[]: 0 0 0 0 0 [ 903.111969] Node 0 DMA: 17*4kB (ME) 4*8kB (UM) 2*16kB (ME) 2*32kB (ME) 10*64kB (UME) 4*128kB (ME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11076kB [ 903.144336] Node 0 DMA32: 665*4kB (UME) 513*8kB (UME) 1129*16kB (UE) 534*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 41916kB [ 903.168327] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 903.214045] Node 1 Normal: 1001*4kB (UM) 623*8kB (UME) 368*16kB (UME) 1808*32kB (UME) 52*64kB (M) 43*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 81564kB [ 903.311631] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 903.349846] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 903.359122] systemd-journald[29977]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 903.400922] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 903.441123] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 903.471504] 28443 total pagecache pages [ 903.475958] 0 pages in swap cache [ 903.479512] Swap cache stats: add 0, delete 0, find 0/0 [ 903.505604] Free swap = 0kB [ 903.508642] Total swap = 0kB [ 903.511664] 2097051 pages RAM [ 903.525845] 0 pages HighMem/MovableOnly [ 903.529930] 363840 pages reserved [ 903.550794] 0 pages cma reserved [ 903.595838] Out of memory (oom_kill_allocating_task): Kill process 7993 (syz-fuzzer) score 0 or sacrifice child [ 903.609341] systemd[1]: Started Cleanup of Temporary Directories. [ 903.636541] Killed process 29194 (syz-executor.3) total-vm:85024kB, anon-rss:72kB, file-rss:4kB, shmem-rss:0kB [ 903.689284] oom_reaper: reaped process 29194 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 903.792449] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 903.935154] systemd[1]: Started Load/Save RF Kill Switch Status. [ 904.427652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 904.434539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 904.442090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 904.450483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 904.458523] device bridge_slave_1 left promiscuous mode [ 904.464418] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.471558] device bridge_slave_0 left promiscuous mode [ 904.477151] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.485931] device veth1_macvtap left promiscuous mode [ 904.491281] device veth0_macvtap left promiscuous mode [ 904.497622] device veth1_vlan left promiscuous mode [ 904.502672] device veth0_vlan left promiscuous mode [ 904.592959] device hsr_slave_1 left promiscuous mode [ 904.602368] device hsr_slave_0 left promiscuous mode [ 904.617345] team0 (unregistering): Port device team_slave_1 removed [ 904.626892] team0 (unregistering): Port device team_slave_0 removed [ 904.639876] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 904.649751] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 904.676691] bond0 (unregistering): Released all slaves [ 906.560568] IPVS: ftp: loaded support on port[0] = 21 [ 906.670974] chnl_net:caif_netlink_parms(): no params data found [ 906.735545] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.741988] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.750717] device bridge_slave_0 entered promiscuous mode [ 906.757973] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.764870] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.771842] device bridge_slave_1 entered promiscuous mode [ 906.792890] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 906.801718] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 906.822237] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 906.829547] team0: Port device team_slave_0 added [ 906.835358] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 906.842521] team0: Port device team_slave_1 added [ 906.860409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.866792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.892181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.903285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.909622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.935378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.946304] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 906.953647] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 906.974867] device hsr_slave_0 entered promiscuous mode [ 906.980608] device hsr_slave_1 entered promiscuous mode [ 906.986867] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 906.994108] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 907.069362] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.075815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.082395] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.088789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.122542] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 907.129967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.139447] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 907.148827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 907.158317] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.165460] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.175643] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 907.181709] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.191129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 907.199150] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.205575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.215337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 907.222878] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.229269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.245384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 907.253024] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 907.261001] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 907.271694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 907.284412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 907.292501] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 907.299960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 907.312514] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 907.320431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 907.327186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 907.339106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 907.396041] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 907.406886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 907.438945] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 907.447078] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 907.454066] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 907.463197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 907.470787] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 907.478136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 907.488381] device veth0_vlan entered promiscuous mode [ 907.498777] device veth1_vlan entered promiscuous mode [ 907.505122] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 907.514826] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 907.528094] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 907.537679] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 907.545253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 907.552507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 907.562168] device veth0_macvtap entered promiscuous mode [ 907.568615] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 907.577975] device veth1_macvtap entered promiscuous mode [ 907.587886] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 907.598408] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 907.608216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 907.618254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.627744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 907.637845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.647559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 907.657383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.666629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 907.676426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.686921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 907.694388] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 907.701337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 907.709490] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 907.719013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 907.729240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.739114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 907.749870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.759107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 907.768871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.778453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 907.788287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.798826] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 907.806161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 907.814077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 907.821857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:32:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:32:25 executing program 2: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000000c0)) tee(0xffffffffffffffff, r3, 0x5, 0x8) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:32:25 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00008aa000/0x2000)=nil, 0x2000, 0x100000a) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000000c0)) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0x2}) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r4 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x20, 0x0, 0x5, 0x1f, 0x0, 0x101, 0xc2200, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x344a, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0x24, 0x7f, 0xc1, 0x4, 0x80000000, 0x1f, 0x7}, 0x0, 0x9, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000000200), 0xffffffffffffffff, &(0x7f0000000280)=0x80000001, 0x2, 0x2) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000100)={0x3f, 0x7, 0x1}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:32:25 executing program 3: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2054, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:32:25 executing program 0: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, 0x0, 0x0) sendmsg$AUDIT_GET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdc00, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x894}, 0x4000044) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0xf5d7, 0x18, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r4, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f00000000c0)) fadvise64(r5, 0x8, 0x401, 0x4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvfrom(r4, &(0x7f00000000c0)=""/215, 0xd7, 0x40000362, &(0x7f00000001c0)=@isdn={0x22, 0x1, 0x4, 0x2, 0xa9}, 0x80) 18:32:25 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c5995", 0x61}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 908.554491] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 908.565106] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 908.610795] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 908.614002] Bluetooth: hci2 command 0x0409 tx timeout [ 908.620289] CPU: 0 PID: 7975 Comm: syz-fuzzer Not tainted 4.14.215-syzkaller #0 [ 908.628264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 908.633180] syz-executor.0 cpuset= [ 908.637727] Call Trace: [ 908.637747] dump_stack+0x1b2/0x283 [ 908.637759] dump_header+0x178/0x82f [ 908.637771] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 908.637779] ? ___ratelimit+0x2cd/0x522 [ 908.637792] oom_kill_process.cold+0x10/0xb18 [ 908.637809] out_of_memory+0xe3e/0x1190 [ 908.637821] ? oom_killer_disable+0x1c0/0x1c0 [ 908.637828] ? mutex_trylock+0x152/0x1a0 [ 908.637838] __alloc_pages_nodemask+0x23e1/0x2720 [ 908.637862] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 908.663340] / [ 908.664842] alloc_pages_current+0x155/0x260 [ 908.691227] mems_allowed=0-1 [ 908.693050] filemap_fault+0xea3/0x1980 [ 908.693070] ext4_filemap_fault+0x84/0xb0 [ 908.693082] __do_fault+0xfa/0x380 [ 908.707791] __handle_mm_fault+0x2497/0x4620 [ 908.712208] ? vm_insert_page+0x7c0/0x7c0 [ 908.716352] ? HARDIRQ_verbose+0x10/0x10 [ 908.720404] ? HARDIRQ_verbose+0x10/0x10 [ 908.724466] handle_mm_fault+0x391/0x860 [ 908.728528] __do_page_fault+0x549/0xad0 [ 908.732587] ? spurious_fault+0x640/0x640 [ 908.736733] ? do_page_fault+0x60/0x4f2 [ 908.740697] ? page_fault+0x2f/0x50 [ 908.744314] page_fault+0x45/0x50 [ 908.747759] RIP: ef49c0:0xc0bb50 [ 908.751116] RSP: c819f0:00007fffe8084e00 EFLAGS: 00c819c0 [ 908.753091] CPU: 1 PID: 30259 Comm: syz-executor.0 Not tainted 4.14.215-syzkaller #0 [ 908.761443] Mem-Info: [ 908.766503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 908.766507] Call Trace: [ 908.766524] dump_stack+0x1b2/0x283 [ 908.766538] warn_alloc.cold+0x96/0x1cc [ 908.766548] ? zone_watermark_ok_safe+0x220/0x220 [ 908.766573] __alloc_pages_nodemask+0x2127/0x2720 [ 908.769058] active_anon:153709 inactive_anon:1117640 isolated_anon:0 [ 908.769058] active_file:12 inactive_file:6 isolated_file:0 [ 908.769058] unevictable:61129 dirty:0 writeback:0 unstable:0 [ 908.769058] slab_reclaimable:14545 slab_unreclaimable:112273 [ 908.769058] mapped:50978 shmem:21304 pagetables:8039 bounce:0 [ 908.769058] free:25041 free_pcp:56 free_cma:0 [ 908.778320] ? lock_acquire+0x170/0x3f0 [ 908.778338] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 908.778355] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 908.778368] ? __mutex_unlock_slowpath+0x75/0x770 [ 908.781012] Node 0 active_anon:602908kB inactive_anon:1195692kB active_file:36kB inactive_file:44kB unevictable:197756kB isolated(anon):0kB isolated(file):0kB mapped:65332kB dirty:0kB writeback:0kB shmem:71756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 908.784556] ? audit_add_tree_rule.cold+0x2f/0x2f [ 908.784574] alloc_pages_current+0x155/0x260 [ 908.784587] ion_page_pool_alloc+0x118/0x1b0 [ 908.784601] ion_system_heap_allocate+0x133/0x8c0 [ 908.784614] ? ion_alloc+0x187/0x810 [ 908.788660] Node 1 active_anon:11928kB inactive_anon:3274868kB active_file:12kB inactive_file:0kB unevictable:46760kB isolated(anon):0kB isolated(file):0kB mapped:138580kB dirty:0kB writeback:0kB shmem:13460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 908.793430] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 908.793441] ? ion_system_contig_heap_create+0x130/0x130 [ 908.793449] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 908.793459] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 908.793473] ion_alloc+0x204/0x810 [ 908.798405] Node 0 [ 908.832092] ? ion_dma_buf_release+0x40/0x40 [ 908.832110] ? __might_fault+0x177/0x1b0 [ 908.832122] ion_ioctl+0xea/0x1ee [ 908.832130] ? ion_alloc.cold+0x3b/0x3b [ 908.832140] ? HARDIRQ_verbose+0x10/0x10 [ 908.832149] ? lock_downgrade+0x740/0x740 [ 908.836234] DMA free:10980kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 908.840951] ? ion_alloc.cold+0x3b/0x3b [ 908.840963] do_vfs_ioctl+0x75a/0xff0 [ 908.840977] ? ioctl_preallocate+0x1a0/0x1a0 [ 908.840986] ? lock_downgrade+0x740/0x740 [ 908.846559] lowmem_reserve[]: [ 908.851254] ? __fget+0x225/0x360 [ 908.851266] ? do_vfs_ioctl+0xff0/0xff0 [ 908.851276] ? security_file_ioctl+0x83/0xb0 [ 908.851286] SyS_ioctl+0x7f/0xb0 [ 908.879755] 0 [ 908.884462] ? do_vfs_ioctl+0xff0/0xff0 [ 908.884476] do_syscall_64+0x1d5/0x640 [ 908.884495] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 908.884506] RIP: 0033:0x45e219 [ 908.888981] 2717 [ 908.893304] RSP: 002b:00007ff786ca7c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 908.893315] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 908.893320] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 908.893325] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 908.893331] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 908.893337] R13: 00007fff6e253caf R14: 00007ff786ca89c0 R15: 000000000119c034 [ 908.912877] Mem-Info: [ 908.943677] 2718 [ 909.011275] active_anon:153709 inactive_anon:1117640 isolated_anon:0 [ 909.011275] active_file:4 inactive_file:16 isolated_file:0 [ 909.011275] unevictable:61143 dirty:0 writeback:0 unstable:0 [ 909.011275] slab_reclaimable:14545 slab_unreclaimable:112283 [ 909.011275] mapped:50975 shmem:21304 pagetables:8039 bounce:0 [ 909.011275] free:25108 free_pcp:46 free_cma:0 [ 909.012188] 2718 [ 909.050761] Node 0 active_anon:602908kB inactive_anon:1195692kB active_file:0kB inactive_file:80kB unevictable:197756kB isolated(anon):0kB isolated(file):0kB mapped:65332kB dirty:0kB writeback:0kB shmem:71756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 909.056510] 2718 [ 909.089502] Node 1 active_anon:11928kB inactive_anon:3274868kB active_file:12kB inactive_file:16kB unevictable:46844kB isolated(anon):0kB isolated(file):0kB mapped:138564kB dirty:0kB writeback:0kB shmem:13460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 909.120532] Node 0 [ 909.153288] Node 0 [ 909.188296] DMA free:10980kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 909.224730] DMA32 free:36056kB min:36200kB low:45248kB high:54296kB active_anon:602876kB inactive_anon:1195104kB active_file:40kB inactive_file:36kB unevictable:197812kB writepending:0kB present:3129332kB managed:2788160kB mlocked:197812kB kernel_stack:8768kB pagetables:12596kB bounce:0kB free_pcp:160kB local_pcp:68kB free_cma:0kB [ 909.246595] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 909.288504] Node 0 DMA32 free:36056kB min:36200kB low:45248kB high:54296kB active_anon:602876kB inactive_anon:1195104kB active_file:40kB inactive_file:36kB unevictable:197812kB writepending:0kB present:3129332kB managed:2788160kB mlocked:197812kB kernel_stack:8768kB pagetables:12596kB bounce:0kB free_pcp:120kB local_pcp:64kB free_cma:0kB [ 909.292339] lowmem_reserve[]: 0 0 0 0 0 [ 909.338027] lowmem_reserve[]: 0 0 0 0 0 [ 909.341375] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 909.342126] Node 0 [ 909.379497] lowmem_reserve[]: 0 0 0 0 0 [ 909.382453] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 909.385979] Node 1 Normal free:53536kB min:53696kB low:67120kB high:80544kB active_anon:11928kB inactive_anon:3274868kB active_file:12kB inactive_file:16kB unevictable:46844kB writepending:0kB present:4194304kB managed:4128256kB mlocked:46844kB kernel_stack:4864kB pagetables:19556kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 909.385998] lowmem_reserve[]: [ 909.415858] lowmem_reserve[]: 0 0 0 0 0 [ 909.452996] Node 1 Normal free:53536kB min:53696kB low:67120kB high:80544kB active_anon:11928kB inactive_anon:3274868kB active_file:12kB inactive_file:16kB unevictable:46844kB writepending:0kB present:4194304kB managed:4128256kB mlocked:46844kB kernel_stack:4864kB pagetables:19556kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 909.460731] 0 0 0 0 0 [ 909.496219] Node 0 DMA: 17*4kB (ME) 6*8kB (MH) 3*16kB (MEH) 2*32kB (ME) 10*64kB (MEH) 5*128kB (MEH) 5*256kB (ME) 2*512kB (EH) 3*1024kB (MEH) 2*2048kB (M) 0*4096kB = 10980kB [ 909.499722] lowmem_reserve[]: [ 909.522434] Node 0 DMA32: 36*4kB (UMH) 21*8kB (MH) 32*16kB (UH) 1098*32kB (UH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35960kB [ 909.528696] 0 [ 909.549284] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 909.557623] 0 0 0 0 [ 909.564323] Node 1 Normal: 14*4kB (UM) 131*8kB (UME) 31*16kB (UME) 1367*32kB (UME) 129*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53600kB [ 909.564394] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 909.564400] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 909.564406] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 909.564411] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 909.564415] 28404 total pagecache pages [ 909.564424] 0 pages in swap cache [ 909.564429] Swap cache stats: add 0, delete 0, find 0/0 [ 909.564432] Free swap = 0kB [ 909.598859] Node 0 [ 909.620276] Total swap = 0kB [ 909.632639] DMA: 17*4kB (ME) 6*8kB (MH) 3*16kB (MEH) 2*32kB (ME) 10*64kB (MEH) 5*128kB (MEH) 5*256kB (ME) 2*512kB (EH) 3*1024kB (MEH) 2*2048kB (M) 0*4096kB = 10980kB [ 909.639393] 2097051 pages RAM [ 909.663110] Node 0 DMA32: 36*4kB (UMH) 22*8kB (UMH) 31*16kB (UH) 1098*32kB (UH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35952kB [ 909.670626] 0 pages HighMem/MovableOnly [ 909.689355] 363840 pages reserved [ 909.692921] 0 pages cma reserved [ 909.696424] Out of memory (oom_kill_allocating_task): Kill process 7975 (syz-fuzzer) score 0 or sacrifice child [ 909.699931] Node 0 [ 909.714709] Killed process 29998 (syz-executor.2) total-vm:85024kB, anon-rss:68kB, file-rss:960kB, shmem-rss:0kB [ 909.724915] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 909.755944] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 909.823496] Node 1 Normal: 14*4kB (UM) 131*8kB (UME) 31*16kB (UME) 1368*32kB (UME) 130*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53696kB [ 909.861576] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 909.892634] CPU: 0 PID: 30256 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 909.897428] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 909.900537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 909.918698] Call Trace: [ 909.921292] dump_stack+0x1b2/0x283 [ 909.925015] dump_header+0x178/0x82f [ 909.928727] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 909.933830] ? ___ratelimit+0x2cd/0x522 [ 909.937806] oom_kill_process.cold+0x10/0xb18 [ 909.942309] out_of_memory+0xe3e/0x1190 [ 909.946288] ? oom_killer_disable+0x1c0/0x1c0 [ 909.950781] ? mutex_trylock+0x152/0x1a0 [ 909.954844] __alloc_pages_nodemask+0x23e1/0x2720 [ 909.959699] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 909.964562] alloc_pages_current+0x155/0x260 [ 909.968971] filemap_fault+0xea3/0x1980 [ 909.972963] ext4_filemap_fault+0x84/0xb0 [ 909.977115] __do_fault+0xfa/0x380 [ 909.980656] __handle_mm_fault+0x2497/0x4620 [ 909.985075] ? vm_insert_page+0x7c0/0x7c0 [ 909.987774] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 909.989215] ? HARDIRQ_verbose+0x10/0x10 [ 910.002001] ? do_raw_spin_unlock+0x164/0x220 [ 910.006511] handle_mm_fault+0x391/0x860 [ 910.010574] __get_user_pages+0x445/0x11d0 [ 910.014824] ? follow_page_mask+0x18a0/0x18a0 [ 910.019327] ? lock_acquire+0x170/0x3f0 [ 910.020291] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 910.023302] populate_vma_page_range+0x17b/0x210 [ 910.036882] __mm_populate+0x195/0x2c0 [ 910.040771] ? populate_vma_page_range+0x210/0x210 [ 910.045696] ? security_capable+0x88/0xb0 [ 910.049854] SyS_mlockall+0x3ff/0x520 [ 910.053650] ? SyS_munlock+0xf0/0xf0 [ 910.057360] do_syscall_64+0x1d5/0x640 [ 910.061250] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 910.066438] RIP: 0033:0x45e219 [ 910.069619] RSP: 002b:00007f9f6fdb6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 910.077322] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045e219 [ 910.084676] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 910.088354] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 910.091938] RBP: 000000000119bfb0 R08: 0000000000000000 R09: 0000000000000000 [ 910.107759] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 910.115024] R13: 00007ffdd833b2ef R14: 00007f9f6fdb79c0 R15: 000000000119bf8c [ 910.155361] 28404 total pagecache pages [ 910.159368] 0 pages in swap cache [ 910.162816] Swap cache stats: add 0, delete 0, find 0/0 [ 910.238315] Free swap = 0kB [ 910.241362] Total swap = 0kB [ 910.251700] Mem-Info: [ 910.279617] 2097051 pages RAM [ 910.282743] 0 pages HighMem/MovableOnly [ 910.303620] active_anon:153671 inactive_anon:1117640 isolated_anon:0 [ 910.303620] active_file:17 inactive_file:9 isolated_file:0 [ 910.303620] unevictable:61164 dirty:0 writeback:0 unstable:0 [ 910.303620] slab_reclaimable:14544 slab_unreclaimable:112336 [ 910.303620] mapped:50988 shmem:21304 pagetables:7990 bounce:0 [ 910.303620] free:25159 free_pcp:118 free_cma:0 [ 910.316143] 363840 pages reserved [ 910.471832] 0 pages cma reserved [ 910.504904] Node 0 active_anon:602852kB inactive_anon:1195692kB active_file:40kB inactive_file:8kB unevictable:197812kB isolated(anon):0kB isolated(file):0kB mapped:65388kB dirty:0kB writeback:0kB shmem:71756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 910.542880] Node 1 active_anon:11832kB inactive_anon:3274868kB active_file:12kB inactive_file:16kB unevictable:46844kB isolated(anon):0kB isolated(file):0kB mapped:138564kB dirty:0kB writeback:0kB shmem:13460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 910.617894] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 910.693515] Bluetooth: hci2 command 0x041b tx timeout [ 910.770555] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 910.800488] Node 0 DMA32 free:35960kB min:36200kB low:45248kB high:54296kB active_anon:602820kB inactive_anon:1195104kB active_file:132kB inactive_file:108kB unevictable:197812kB writepending:0kB present:3129332kB managed:2788160kB mlocked:197812kB kernel_stack:8736kB pagetables:12528kB bounce:0kB free_pcp:200kB local_pcp:188kB free_cma:0kB [ 910.850313] lowmem_reserve[]: 0 0 0 0 0 [ 910.861101] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 910.993399] lowmem_reserve[]: 0 0 0 0 0 [ 910.997529] Node 1 Normal free:53648kB min:53696kB low:67120kB high:80544kB active_anon:11832kB inactive_anon:3274868kB active_file:4kB inactive_file:32kB unevictable:46844kB writepending:0kB present:4194304kB managed:4128256kB mlocked:46844kB kernel_stack:4768kB pagetables:19428kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 911.028414] lowmem_reserve[]: 0 0 0 0 0 [ 911.032475] Node 0 DMA: 17*4kB (ME) 6*8kB (M) 3*16kB (ME) 2*32kB (ME) 10*64kB (ME) 5*128kB (ME) 5*256kB (ME) 2*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10980kB [ 911.047705] Node 0 DMA32: 65*4kB (UE) 14*8kB (U) 28*16kB (UM) 1096*32kB (UM) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35956kB [ 911.061313] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 911.072071] Node 1 Normal: 16*4kB (U) 117*8kB (UME) 32*16kB (UME) 1369*32kB (UME) 131*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53704kB [ 911.086390] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 911.138644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 911.197912] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 911.225299] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 911.263814] 28404 total pagecache pages [ 911.267825] 0 pages in swap cache [ 911.271276] Swap cache stats: add 0, delete 0, find 0/0 [ 911.336755] Free swap = 0kB [ 911.342958] Total swap = 0kB [ 911.363347] 2097051 pages RAM [ 911.370753] 0 pages HighMem/MovableOnly [ 911.385247] 363840 pages reserved [ 911.408229] 0 pages cma reserved [ 911.412023] Out of memory (oom_kill_allocating_task): Kill process 30256 (syz-executor.5) score 0 or sacrifice child [ 911.476234] Killed process 30256 (syz-executor.5) total-vm:81208kB, anon-rss:10788kB, file-rss:36144kB, shmem-rss:0kB [ 911.508833] oom_reaper: reaped process 30256 (syz-executor.5), now anon-rss:10788kB, file-rss:1328kB, shmem-rss:0kB [ 912.097035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 912.113772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 912.131770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 912.153397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 912.187500] device bridge_slave_1 left promiscuous mode [ 912.193092] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.200573] device bridge_slave_0 left promiscuous mode [ 912.206335] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.216163] device veth1_macvtap left promiscuous mode [ 912.221548] device veth0_macvtap left promiscuous mode [ 912.227854] device veth1_vlan left promiscuous mode [ 912.232976] device veth0_vlan left promiscuous mode 18:32:29 executing program 0: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, 0x0, 0x0) sendmsg$AUDIT_GET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdc00, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x894}, 0x4000044) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0xf5d7, 0x18, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r4, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f00000000c0)) fadvise64(r5, 0x8, 0x401, 0x4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvfrom(r4, &(0x7f00000000c0)=""/215, 0xd7, 0x40000362, &(0x7f00000001c0)=@isdn={0x22, 0x1, 0x4, 0x2, 0xa9}, 0x80) 18:32:29 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c5995", 0x61}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:32:29 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:32:29 executing program 2: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000000c0)) tee(0xffffffffffffffff, r3, 0x5, 0x8) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:32:29 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f00007ef000/0x3000)=nil, 0x3000, 0x2, &(0x7f00000000c0)=0x4, 0x6, 0x1) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x1) [ 912.332709] device hsr_slave_1 left promiscuous mode [ 912.339922] device hsr_slave_0 left promiscuous mode [ 912.359372] team0 (unregistering): Port device team_slave_1 removed [ 912.372996] team0 (unregistering): Port device team_slave_0 removed [ 912.399459] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 912.439187] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 912.540947] bond0 (unregistering): Released all slaves [ 913.067647] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 913.120765] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 913.142984] CPU: 0 PID: 30279 Comm: syz-executor.0 Not tainted 4.14.215-syzkaller #0 [ 913.150894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 913.160247] Call Trace: [ 913.162836] dump_stack+0x1b2/0x283 [ 913.166477] warn_alloc.cold+0x96/0x1cc [ 913.170446] ? zone_watermark_ok_safe+0x220/0x220 [ 913.175304] __alloc_pages_nodemask+0x2127/0x2720 [ 913.180155] ? lock_acquire+0x170/0x3f0 [ 913.184135] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 913.188991] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 913.194451] ? __mutex_unlock_slowpath+0x75/0x770 [ 913.199302] alloc_pages_current+0x155/0x260 [ 913.203723] ion_page_pool_alloc+0x118/0x1b0 [ 913.208125] ion_system_heap_allocate+0x133/0x8c0 [ 913.212964] ? ion_alloc+0x187/0x810 [ 913.216685] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 913.222122] ? ion_system_contig_heap_create+0x130/0x130 [ 913.227554] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 913.232552] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 913.237401] ion_alloc+0x204/0x810 [ 913.240926] ? ion_dma_buf_release+0x40/0x40 [ 913.245323] ? __might_fault+0x177/0x1b0 [ 913.249386] ion_ioctl+0xea/0x1ee [ 913.252818] ? ion_alloc.cold+0x3b/0x3b [ 913.256783] ? HARDIRQ_verbose+0x10/0x10 [ 913.260825] ? lock_downgrade+0x740/0x740 [ 913.264952] ? ion_alloc.cold+0x3b/0x3b [ 913.268909] do_vfs_ioctl+0x75a/0xff0 [ 913.272692] ? ioctl_preallocate+0x1a0/0x1a0 [ 913.277078] ? lock_downgrade+0x740/0x740 [ 913.281209] ? __fget+0x225/0x360 [ 913.284650] ? do_vfs_ioctl+0xff0/0xff0 [ 913.288605] ? security_file_ioctl+0x83/0xb0 [ 913.292993] SyS_ioctl+0x7f/0xb0 [ 913.296339] ? do_vfs_ioctl+0xff0/0xff0 [ 913.300294] do_syscall_64+0x1d5/0x640 [ 913.304171] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 913.309341] RIP: 0033:0x45e219 [ 913.312509] RSP: 002b:00007ff786cc8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 913.320214] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 913.327470] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 913.334720] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 913.341982] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 913.349232] R13: 00007fff6e253caf R14: 00007ff786cc99c0 R15: 000000000119bf8c [ 913.401379] Mem-Info: [ 913.404027] active_anon:153220 inactive_anon:1120646 isolated_anon:0 [ 913.404027] active_file:72 inactive_file:90 isolated_file:0 [ 913.404027] unevictable:65386 dirty:11 writeback:0 unstable:0 [ 913.404027] slab_reclaimable:14506 slab_unreclaimable:111832 [ 913.404027] mapped:45984 shmem:21300 pagetables:8006 bounce:0 [ 913.404027] free:25062 free_pcp:194 free_cma:0 [ 913.442439] Node 0 active_anon:601664kB inactive_anon:1207712kB active_file:12kB inactive_file:224kB unevictable:208008kB isolated(anon):0kB isolated(file):0kB mapped:41224kB dirty:24kB writeback:0kB shmem:71756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 913.475127] Node 1 active_anon:11216kB inactive_anon:3274872kB active_file:16kB inactive_file:0kB unevictable:53536kB isolated(anon):0kB isolated(file):0kB mapped:142212kB dirty:20kB writeback:0kB shmem:13444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 913.522955] Node 0 DMA free:10996kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 913.567383] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 913.572591] Node 0 DMA32 free:36196kB min:36200kB low:45248kB high:54296kB active_anon:601632kB inactive_anon:1207016kB active_file:4kB inactive_file:0kB unevictable:207996kB writepending:20kB present:3129332kB managed:2788160kB mlocked:207996kB kernel_stack:8960kB pagetables:12684kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 913.728057] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 913.745686] lowmem_reserve[]: 0 0 0 0 0 [ 913.749709] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 913.793768] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 913.798917] CPU: 0 PID: 29634 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 913.806792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 913.816141] Call Trace: [ 913.818732] dump_stack+0x1b2/0x283 [ 913.822361] dump_header+0x178/0x82f [ 913.826076] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 913.831178] ? ___ratelimit+0x2cd/0x522 [ 913.835152] oom_kill_process.cold+0x10/0xb18 [ 913.839656] out_of_memory+0xe3e/0x1190 [ 913.843630] ? oom_killer_disable+0x1c0/0x1c0 [ 913.848122] ? mutex_trylock+0x152/0x1a0 [ 913.852181] __alloc_pages_nodemask+0x23e1/0x2720 [ 913.857033] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 913.861893] alloc_pages_current+0x155/0x260 [ 913.866301] filemap_fault+0xea3/0x1980 [ 913.870368] ext4_filemap_fault+0x84/0xb0 [ 913.874510] __do_fault+0xfa/0x380 [ 913.878043] __handle_mm_fault+0x2497/0x4620 [ 913.882447] ? vm_insert_page+0x7c0/0x7c0 [ 913.886585] ? HARDIRQ_verbose+0x10/0x10 [ 913.890694] ? HARDIRQ_verbose+0x10/0x10 [ 913.894764] handle_mm_fault+0x391/0x860 [ 913.898819] __do_page_fault+0x549/0xad0 [ 913.902901] ? spurious_fault+0x640/0x640 [ 913.907042] ? do_page_fault+0x60/0x4f2 [ 913.911008] ? page_fault+0x2f/0x50 [ 913.914625] page_fault+0x45/0x50 [ 913.918069] RIP: 000d:0x32 [ 913.920900] RSP: 0bb8:00000000000decb5 EFLAGS: 00000023 [ 913.974008] lowmem_reserve[]: 0 0 0 0 0 [ 913.990923] Node 1 Normal free:54108kB min:53696kB low:67120kB high:80544kB active_anon:11216kB inactive_anon:3274872kB active_file:16kB inactive_file:16kB unevictable:53544kB writepending:4kB present:4194304kB managed:4128256kB mlocked:53544kB kernel_stack:4512kB pagetables:19336kB bounce:0kB free_pcp:36kB local_pcp:36kB free_cma:0kB [ 914.052299] lowmem_reserve[]: 0 0 0 0 0 [ 914.058096] Node 0 DMA: 17*4kB (ME) 6*8kB (M) 4*16kB (ME) 2*32kB (ME) 10*64kB (ME) 5*128kB (ME) 5*256kB (ME) 2*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10996kB [ 914.076654] Node 0 DMA32: 32*4kB (UME) 6*8kB (UM) 40*16kB (UM) 1103*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36112kB [ 914.090304] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 914.104522] Node 1 Normal: 368*4kB (UM) 292*8kB (UM) 143*16kB (UM) 1483*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53552kB [ 914.120072] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 914.130709] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 914.141318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 914.165225] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 914.183069] 31917 total pagecache pages [ 914.187063] 0 pages in swap cache [ 914.190516] Swap cache stats: add 0, delete 0, find 0/0 [ 914.200537] Free swap = 0kB [ 914.203807] Total swap = 0kB [ 914.206823] 2097051 pages RAM [ 914.209916] 0 pages HighMem/MovableOnly [ 914.213972] 363840 pages reserved [ 914.217414] 0 pages cma reserved [ 914.222598] Mem-Info: [ 914.225069] active_anon:153220 inactive_anon:1120769 isolated_anon:0 [ 914.225069] active_file:0 inactive_file:30 isolated_file:15 [ 914.225069] unevictable:65369 dirty:2 writeback:0 unstable:0 [ 914.225069] slab_reclaimable:14506 slab_unreclaimable:111826 [ 914.225069] mapped:45828 shmem:21300 pagetables:8006 bounce:0 [ 914.225069] free:25089 free_pcp:257 free_cma:0 [ 914.259243] Node 0 active_anon:601664kB inactive_anon:1208204kB active_file:0kB inactive_file:40kB unevictable:207532kB isolated(anon):0kB isolated(file):60kB mapped:41140kB dirty:4kB writeback:0kB shmem:71756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 914.288711] Node 1 active_anon:11216kB inactive_anon:3274872kB active_file:16kB inactive_file:80kB unevictable:53944kB isolated(anon):0kB isolated(file):0kB mapped:142172kB dirty:4kB writeback:0kB shmem:13444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 914.316785] Node 0 DMA free:10996kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 914.346337] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 914.351394] Node 0 DMA32 free:36176kB min:36200kB low:45248kB high:54296kB active_anon:601632kB inactive_anon:1207216kB active_file:44kB inactive_file:24kB unevictable:207932kB writepending:4kB present:3129332kB managed:2788160kB mlocked:207932kB kernel_stack:8928kB pagetables:12684kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 914.381697] lowmem_reserve[]: 0 0 0 0 0 [ 914.385737] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 914.412491] lowmem_reserve[]: 0 0 0 0 0 [ 914.416624] Node 1 Normal free:53660kB min:53696kB low:67120kB high:80544kB active_anon:11216kB inactive_anon:3274872kB active_file:16kB inactive_file:16kB unevictable:53544kB writepending:4kB present:4194304kB managed:4128256kB mlocked:53544kB kernel_stack:4512kB pagetables:19336kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 914.446512] lowmem_reserve[]: 0 0 0 0 0 [ 914.450513] Node 0 DMA: 17*4kB (ME) 6*8kB (M) 4*16kB (ME) 2*32kB (ME) 10*64kB (ME) 5*128kB (ME) 5*256kB (ME) 2*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10996kB [ 914.467821] Node 0 DMA32: 3*4kB (UME) 1*8kB (U) 66*16kB (UM) 1103*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36372kB [ 914.480894] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 914.491681] Node 1 Normal: 382*4kB (UM) 299*8kB (UM) 145*16kB (UM) 1483*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53696kB [ 914.505518] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 914.514393] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 914.522965] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 914.552157] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 914.560832] 31917 total pagecache pages [ 914.564851] 0 pages in swap cache [ 914.568294] Swap cache stats: add 0, delete 0, find 0/0 [ 914.573797] Free swap = 0kB [ 914.576894] Total swap = 0kB [ 914.579999] 2097051 pages RAM [ 914.589776] 0 pages HighMem/MovableOnly [ 914.598451] 363840 pages reserved [ 914.606084] 0 pages cma reserved [ 914.613948] Out of memory (oom_kill_allocating_task): Kill process 29634 (syz-executor.4) score 0 or sacrifice child [ 914.635847] Killed process 30274 (syz-executor.4) total-vm:93480kB, anon-rss:164kB, file-rss:35904kB, shmem-rss:0kB [ 914.748614] oom_reaper: reaped process 30274 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 914.869106] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 914.931598] in:imklog cpuset=/ mems_allowed=0-1 [ 914.951466] CPU: 0 PID: 29184 Comm: in:imklog Not tainted 4.14.215-syzkaller #0 [ 914.958938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 914.968292] Call Trace: [ 914.970880] dump_stack+0x1b2/0x283 [ 914.974506] dump_header+0x178/0x82f [ 914.978215] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 914.983313] ? ___ratelimit+0x2cd/0x522 [ 914.987297] oom_kill_process.cold+0x10/0xb18 [ 914.991796] out_of_memory+0xe3e/0x1190 [ 914.995809] ? oom_killer_disable+0x1c0/0x1c0 [ 915.000296] ? mutex_trylock+0x152/0x1a0 [ 915.004355] __alloc_pages_nodemask+0x23e1/0x2720 [ 915.009230] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 915.014093] alloc_pages_current+0x155/0x260 [ 915.018501] filemap_fault+0xea3/0x1980 [ 915.022484] ext4_filemap_fault+0x84/0xb0 [ 915.026629] __do_fault+0xfa/0x380 [ 915.030168] __handle_mm_fault+0x2497/0x4620 [ 915.034574] ? vm_insert_page+0x7c0/0x7c0 [ 915.038718] ? HARDIRQ_verbose+0x10/0x10 [ 915.042776] ? HARDIRQ_verbose+0x10/0x10 [ 915.046844] handle_mm_fault+0x391/0x860 [ 915.050903] __do_page_fault+0x549/0xad0 [ 915.054965] ? spurious_fault+0x640/0x640 [ 915.059109] ? do_page_fault+0x60/0x4f2 [ 915.063080] ? page_fault+0x2f/0x50 [ 915.066705] page_fault+0x45/0x50 [ 915.070153] RIP: ffffffff:0x1f9f [ 915.073509] RSP: 43cfc78b:0000000000000000 EFLAGS: 7f0521865308 [ 915.670988] Mem-Info: [ 915.696210] active_anon:153168 inactive_anon:1125085 isolated_anon:0 [ 915.696210] active_file:6390 inactive_file:5117 isolated_file:64 [ 915.696210] unevictable:44119 dirty:0 writeback:0 unstable:0 [ 915.696210] slab_reclaimable:14506 slab_unreclaimable:112354 [ 915.696210] mapped:41403 shmem:21300 pagetables:7978 bounce:0 [ 915.696210] free:29149 free_pcp:522 free_cma:0 [ 915.843159] Node 0 active_anon:601456kB inactive_anon:1199568kB active_file:8380kB inactive_file:7868kB unevictable:170024kB isolated(anon):48kB isolated(file):0kB mapped:32540kB dirty:0kB writeback:0kB shmem:71756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 915.915822] Node 1 active_anon:11216kB inactive_anon:3275072kB active_file:29052kB inactive_file:428kB unevictable:52kB isolated(anon):0kB isolated(file):128kB mapped:112472kB dirty:0kB writeback:0kB shmem:13444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 915.951444] ion_buffer_destroy: buffer still mapped in the kernel [ 915.968512] Node 0 DMA free:10996kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 916.000498] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 916.007002] Node 0 DMA32 free:69376kB min:36200kB low:45248kB high:54296kB active_anon:601416kB inactive_anon:1195128kB active_file:8404kB inactive_file:7968kB unevictable:169984kB writepending:68kB present:3129332kB managed:2788160kB mlocked:169984kB kernel_stack:8736kB pagetables:12164kB bounce:0kB free_pcp:688kB local_pcp:24kB free_cma:0kB [ 916.041092] lowmem_reserve[]: 0 0 0 0 0 [ 916.045661] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 916.074925] lowmem_reserve[]: 0 0 0 0 0 [ 916.078947] Node 1 Normal free:99208kB min:53696kB low:67120kB high:80544kB active_anon:11208kB inactive_anon:3274856kB active_file:28724kB inactive_file:668kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:4416kB pagetables:19104kB bounce:0kB free_pcp:1444kB local_pcp:724kB free_cma:0kB [ 916.112554] lowmem_reserve[]: 0 0 0 0 0 [ 916.125698] Node 0 DMA: 17*4kB (ME) 6*8kB (M) 4*16kB (ME) 2*32kB (ME) 10*64kB (ME) 5*128kB (ME) 5*256kB (ME) 2*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10996kB [ 916.141894] Node 0 DMA32: 2600*4kB (UME) 590*8kB (UME) 1053*16kB (UM) 1115*32kB (UM) 7*64kB (M) 3*128kB (M) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 68992kB [ 916.160614] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 916.171481] Node 1 Normal: 1340*4kB (UM) 771*8kB (UM) 570*16kB (UM) 1757*32kB (UM) 215*64kB (UM) 65*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 99208kB [ 916.190017] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 916.199039] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 916.210679] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 916.221267] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 916.233875] 33142 total pagecache pages [ 916.237880] 0 pages in swap cache [ 916.241398] Swap cache stats: add 0, delete 0, find 0/0 [ 916.248380] Free swap = 0kB [ 916.251409] Total swap = 0kB [ 916.255985] 2097051 pages RAM [ 916.259547] 0 pages HighMem/MovableOnly [ 916.264061] 363840 pages reserved [ 916.267721] 0 pages cma reserved 18:32:33 executing program 0: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000000c0)) tee(0xffffffffffffffff, r3, 0x5, 0x8) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 916.271133] Out of memory (oom_kill_allocating_task): Kill process 29184 (in:imklog) score 0 or sacrifice child [ 916.282186] Killed process 29160 (rsyslogd) total-vm:254332kB, anon-rss:940kB, file-rss:0kB, shmem-rss:0kB [ 916.294619] oom_reaper: reaped process 29160 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 18:32:33 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) dup(r0) r3 = dup(r2) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, 0x0, 0x0) sendmsg$AUDIT_GET(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdc00, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x894}, 0x4000044) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000000)) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:32:33 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:32:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c5995", 0x61}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 916.931774] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 916.993361] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 917.007005] CPU: 0 PID: 30298 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 917.015023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 917.024381] Call Trace: [ 917.026974] dump_stack+0x1b2/0x283 [ 917.030607] warn_alloc.cold+0x96/0x1cc [ 917.034587] ? zone_watermark_ok_safe+0x220/0x220 [ 917.039454] __alloc_pages_nodemask+0x2127/0x2720 [ 917.044303] ? lock_acquire+0x170/0x3f0 [ 917.048286] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 917.053142] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 917.058599] ? __mutex_unlock_slowpath+0x75/0x770 [ 917.063450] alloc_pages_current+0x155/0x260 [ 917.067857] ion_page_pool_alloc+0x118/0x1b0 [ 917.072264] ion_system_heap_allocate+0x133/0x8c0 [ 917.077100] ? ion_alloc+0x187/0x810 [ 917.080814] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 917.086267] ? ion_system_contig_heap_create+0x130/0x130 [ 917.091695] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 917.096693] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 917.101517] ion_alloc+0x204/0x810 [ 917.105107] ? ion_dma_buf_release+0x40/0x40 [ 917.109520] ? __might_fault+0x177/0x1b0 [ 917.113569] ion_ioctl+0xea/0x1ee [ 917.117001] ? ion_alloc.cold+0x3b/0x3b [ 917.120957] ? HARDIRQ_verbose+0x10/0x10 [ 917.125014] ? lock_downgrade+0x740/0x740 [ 917.129148] ? ion_alloc.cold+0x3b/0x3b [ 917.133112] do_vfs_ioctl+0x75a/0xff0 [ 917.136900] ? ioctl_preallocate+0x1a0/0x1a0 [ 917.141347] ? lock_downgrade+0x740/0x740 [ 917.145500] ? __fget+0x225/0x360 [ 917.148990] ? do_vfs_ioctl+0xff0/0xff0 [ 917.153000] ? security_file_ioctl+0x83/0xb0 [ 917.157396] SyS_ioctl+0x7f/0xb0 [ 917.160860] ? do_vfs_ioctl+0xff0/0xff0 [ 917.164825] do_syscall_64+0x1d5/0x640 [ 917.168719] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 917.173900] RIP: 0033:0x45e219 [ 917.177079] RSP: 002b:00007f9f6fdb6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 917.184821] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 917.192076] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 917.199332] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 917.206593] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 917.213845] R13: 00007ffdd833b2ef R14: 00007f9f6fdb79c0 R15: 000000000119bf8c [ 917.226235] Mem-Info: [ 917.228789] active_anon:153003 inactive_anon:1117659 isolated_anon:0 [ 917.228789] active_file:33 inactive_file:82 isolated_file:0 [ 917.228789] unevictable:62608 dirty:13 writeback:0 unstable:0 [ 917.228789] slab_reclaimable:14501 slab_unreclaimable:112096 [ 917.228789] mapped:53862 shmem:21299 pagetables:8011 bounce:0 [ 917.228789] free:25749 free_pcp:186 free_cma:0 [ 917.263296] Node 0 active_anon:600820kB inactive_anon:1195772kB active_file:128kB inactive_file:520kB unevictable:205872kB isolated(anon):0kB isolated(file):0kB mapped:59128kB dirty:12kB writeback:0kB shmem:71752kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 917.292596] Node 1 active_anon:11192kB inactive_anon:3274864kB active_file:4kB inactive_file:208kB unevictable:45460kB isolated(anon):0kB isolated(file):0kB mapped:157320kB dirty:40kB writeback:0kB shmem:13444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 917.321060] Node 0 DMA free:10996kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 917.349835] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 917.375537] Node 0 DMA32 free:35644kB min:36200kB low:45248kB high:54296kB active_anon:600788kB inactive_anon:1195184kB active_file:128kB inactive_file:96kB unevictable:207492kB writepending:12kB present:3129332kB managed:2788160kB mlocked:207492kB kernel_stack:8896kB pagetables:12692kB bounce:0kB free_pcp:196kB local_pcp:56kB free_cma:0kB [ 917.465171] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 917.472507] lowmem_reserve[]: [ 917.484246] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 917.492124] CPU: 0 PID: 7979 Comm: syz-fuzzer Not tainted 4.14.215-syzkaller #0 [ 917.499560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 917.508904] Call Trace: [ 917.511488] dump_stack+0x1b2/0x283 [ 917.515146] dump_header+0x178/0x82f [ 917.518856] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 917.523950] ? ___ratelimit+0x2cd/0x522 [ 917.527918] oom_kill_process.cold+0x10/0xb18 [ 917.532414] out_of_memory+0xe3e/0x1190 [ 917.535896] 0 [ 917.536388] ? oom_killer_disable+0x1c0/0x1c0 [ 917.536398] ? mutex_trylock+0x152/0x1a0 [ 917.536410] __alloc_pages_nodemask+0x23e1/0x2720 [ 917.538253] 0 [ 917.542691] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 917.542720] alloc_pages_current+0x155/0x260 [ 917.559909] 0 [ 917.562590] filemap_fault+0xea3/0x1980 [ 917.562609] ext4_filemap_fault+0x84/0xb0 [ 917.572483] __do_fault+0xfa/0x380 [ 917.576021] __handle_mm_fault+0x2497/0x4620 [ 917.580429] ? vm_insert_page+0x7c0/0x7c0 [ 917.584572] ? HARDIRQ_verbose+0x10/0x10 [ 917.588638] ? HARDIRQ_verbose+0x10/0x10 [ 917.589567] 0 [ 917.592717] handle_mm_fault+0x391/0x860 [ 917.592733] __do_page_fault+0x549/0xad0 [ 917.592746] ? spurious_fault+0x640/0x640 [ 917.606762] ? do_page_fault+0x60/0x4f2 [ 917.610739] ? page_fault+0x2f/0x50 [ 917.610958] 0 [ 917.614356] page_fault+0x45/0x50 [ 917.614366] RIP: 0005:0xe1074ad952 [ 917.614370] RSP: 2a2008:000000c00003bdb8 EFLAGS: e1074ad952 [ 917.681467] Mem-Info: [ 917.702016] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 917.716978] active_anon:153003 inactive_anon:1117659 isolated_anon:0 [ 917.716978] active_file:45 inactive_file:18 isolated_file:0 [ 917.716978] unevictable:63358 dirty:13 writeback:0 unstable:0 [ 917.716978] slab_reclaimable:14501 slab_unreclaimable:112096 [ 917.716978] mapped:54587 shmem:21299 pagetables:8011 bounce:0 [ 917.716978] free:24999 free_pcp:0 free_cma:0 [ 917.737004] lowmem_reserve[]: 0 0 0 0 0 [ 917.804150] Node 1 Normal free:53356kB min:53696kB low:67120kB high:80544kB active_anon:11192kB inactive_anon:3274864kB active_file:4kB inactive_file:100kB unevictable:45460kB writepending:40kB present:4194304kB managed:4128256kB mlocked:45460kB kernel_stack:4544kB pagetables:19348kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 917.894472] Node 0 active_anon:600820kB inactive_anon:1195772kB active_file:188kB inactive_file:4kB unevictable:207672kB isolated(anon):0kB isolated(file):0kB mapped:60628kB dirty:12kB writeback:0kB shmem:71752kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 917.938016] Node 1 active_anon:11192kB inactive_anon:3274864kB active_file:0kB inactive_file:0kB unevictable:46760kB isolated(anon):0kB isolated(file):0kB mapped:157720kB dirty:40kB writeback:0kB shmem:13444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 917.954409] IPVS: ftp: loaded support on port[0] = 21 [ 917.988971] lowmem_reserve[]: 0 0 0 0 0 [ 918.004562] Node 0 DMA: 17*4kB (ME) 6*8kB (M) 4*16kB (ME) 2*32kB (ME) 10*64kB (ME) 5*128kB (ME) 5*256kB (ME) 2*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10996kB [ 918.018924] Node 0 DMA free:10996kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 918.031412] Node 0 DMA32: 72*4kB (UME) 12*8kB (UM) 5*16kB (U) 1107*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35888kB [ 918.089306] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 918.104837] Node 1 Normal: 12*4kB (UM) 91*8kB (UM) 4*16kB (UM) 1375*32kB (M) 137*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53608kB [ 918.112092] lowmem_reserve[]: [ 918.129792] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 918.137550] 0 [ 918.145315] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 918.151991] 2717 [ 918.165276] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 918.172232] 2718 [ 918.182402] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 918.199459] 2718 2718 [ 918.201918] 31954 total pagecache pages [ 918.202044] Node 0 [ 918.206028] 0 pages in swap cache [ 918.206033] Swap cache stats: add 0, delete 0, find 0/0 [ 918.206037] Free swap = 0kB [ 918.206041] Total swap = 0kB [ 918.206048] 2097051 pages RAM [ 918.206052] 0 pages HighMem/MovableOnly [ 918.206058] 363840 pages reserved [ 918.225217] DMA32 free:35832kB min:36200kB low:45248kB high:54296kB active_anon:600780kB inactive_anon:1196032kB active_file:28kB inactive_file:24kB unevictable:206804kB writepending:12kB present:3129332kB managed:2788160kB mlocked:206804kB kernel_stack:8896kB pagetables:12696kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 918.237932] 0 pages cma reserved [ 918.277977] lowmem_reserve[]: 0 0 0 0 0 [ 918.282095] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 918.317666] lowmem_reserve[]: 0 0 0 0 0 [ 918.321775] Node 1 Normal free:53520kB min:53696kB low:67120kB high:80544kB active_anon:11212kB inactive_anon:3274864kB active_file:60kB inactive_file:0kB unevictable:47236kB writepending:40kB present:4194304kB managed:4128256kB mlocked:47260kB kernel_stack:4576kB pagetables:19352kB bounce:0kB free_pcp:64kB local_pcp:64kB free_cma:0kB [ 918.359195] lowmem_reserve[]: 0 0 0 0 0 [ 918.363261] Node 0 DMA: 17*4kB (ME) 6*8kB (M) 4*16kB (ME) 2*32kB (ME) 10*64kB (ME) 5*128kB (ME) 5*256kB (ME) 2*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10996kB [ 918.381275] Node 0 DMA32: 72*4kB (UME) 12*8kB (UM) 5*16kB (U) 1107*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35888kB [ 918.407895] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 918.421423] Node 1 Normal: 12*4kB (UM) 91*8kB (UM) 4*16kB (UM) 1375*32kB (M) 137*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53608kB [ 918.446270] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 918.460876] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 918.486777] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 918.510106] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 918.530983] 31900 total pagecache pages [ 918.537664] 0 pages in swap cache [ 918.541276] Swap cache stats: add 0, delete 0, find 0/0 [ 918.558264] Free swap = 0kB [ 918.561350] Total swap = 0kB [ 918.570170] 2097051 pages RAM [ 918.580679] 0 pages HighMem/MovableOnly [ 918.587398] 363840 pages reserved [ 918.591006] 0 pages cma reserved [ 918.608040] Out of memory (oom_kill_allocating_task): Kill process 7979 (syz-fuzzer) score 0 or sacrifice child [ 918.620956] Killed process 30301 (syz-executor.3) total-vm:85024kB, anon-rss:64kB, file-rss:964kB, shmem-rss:0kB [ 918.650166] oom_reaper: reaped process 30301 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 918.678107] rsyslogd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 918.695821] rsyslogd cpuset=/ mems_allowed=0-1 [ 918.700445] CPU: 1 PID: 30309 Comm: rsyslogd Not tainted 4.14.215-syzkaller #0 [ 918.707800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 918.717141] Call Trace: [ 918.719733] dump_stack+0x1b2/0x283 [ 918.723362] dump_header+0x178/0x82f [ 918.727073] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 918.732167] ? ___ratelimit+0x2cd/0x522 [ 918.736135] oom_kill_process.cold+0x10/0xb18 [ 918.740655] out_of_memory+0xe3e/0x1190 [ 918.744637] ? oom_killer_disable+0x1c0/0x1c0 [ 918.749122] ? mutex_trylock+0x152/0x1a0 [ 918.753178] __alloc_pages_nodemask+0x23e1/0x2720 [ 918.758044] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 918.762905] alloc_pages_current+0x155/0x260 [ 918.767312] filemap_fault+0xea3/0x1980 [ 918.771306] ext4_filemap_fault+0x84/0xb0 [ 918.775444] __do_fault+0xfa/0x380 [ 918.778987] __handle_mm_fault+0x2497/0x4620 [ 918.783510] ? vm_insert_page+0x7c0/0x7c0 [ 918.787653] ? HARDIRQ_verbose+0x10/0x10 [ 918.791705] ? HARDIRQ_verbose+0x10/0x10 [ 918.795765] handle_mm_fault+0x391/0x860 [ 918.799825] __do_page_fault+0x549/0xad0 [ 918.803886] ? spurious_fault+0x640/0x640 [ 918.808027] ? do_page_fault+0x60/0x4f2 [ 918.811988] ? page_fault+0x2f/0x50 [ 918.815603] page_fault+0x45/0x50 [ 918.819049] RIP: 0000:0x801 [ 918.821963] RSP: 002a:0000000000000000 EFLAGS: 7ffcc4f11880 [ 918.840956] Mem-Info: [ 918.862186] active_anon:152996 inactive_anon:1117877 isolated_anon:0 [ 918.862186] active_file:16 inactive_file:16 isolated_file:0 [ 918.862186] unevictable:63550 dirty:0 writeback:0 unstable:0 [ 918.862186] slab_reclaimable:14501 slab_unreclaimable:111791 [ 918.862186] mapped:54534 shmem:21299 pagetables:7989 bounce:0 [ 918.862186] free:25100 free_pcp:86 free_cma:0 [ 918.910061] Node 0 active_anon:600772kB inactive_anon:1196644kB active_file:56kB inactive_file:56kB unevictable:206932kB isolated(anon):0kB isolated(file):0kB mapped:60460kB dirty:0kB writeback:0kB shmem:71752kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 918.947503] Node 1 active_anon:11212kB inactive_anon:3274864kB active_file:8kB inactive_file:8kB unevictable:47268kB isolated(anon):0kB isolated(file):0kB mapped:157676kB dirty:0kB writeback:0kB shmem:13444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 918.978778] Node 0 DMA free:10996kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 919.023431] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 919.028498] Node 0 DMA32 free:35812kB min:36200kB low:45248kB high:54296kB active_anon:600740kB inactive_anon:1196056kB active_file:56kB inactive_file:56kB unevictable:206932kB writepending:0kB present:3129332kB managed:2788160kB mlocked:206932kB kernel_stack:8896kB pagetables:12656kB bounce:0kB free_pcp:284kB local_pcp:244kB free_cma:0kB [ 919.071211] lowmem_reserve[]: 0 0 0 0 0 [ 919.077904] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 919.115915] lowmem_reserve[]: 0 0 0 0 0 [ 919.119940] Node 1 Normal free:53608kB min:53696kB low:67120kB high:80544kB active_anon:11212kB inactive_anon:3274864kB active_file:4kB inactive_file:12kB unevictable:47268kB writepending:0kB present:4194304kB managed:4128256kB mlocked:47268kB kernel_stack:4544kB pagetables:19296kB bounce:0kB free_pcp:124kB local_pcp:60kB free_cma:0kB [ 919.166504] lowmem_reserve[]: 0 0 0 0 0 [ 919.170610] Node 0 DMA: 17*4kB (ME) 6*8kB (M) 4*16kB (ME) 2*32kB (ME) 10*64kB (ME) 5*128kB (ME) 5*256kB (ME) 2*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 10996kB [ 919.198294] Node 0 DMA32: 41*4kB (UME) 14*8kB (UM) 5*16kB (U) 1108*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35812kB [ 919.214255] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 919.232419] Node 1 Normal: 12*4kB (UM) 91*8kB (UM) 4*16kB (UM) 1375*32kB (M) 137*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53608kB [ 919.254063] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 919.268065] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 919.279194] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 919.291264] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 919.307832] 31900 total pagecache pages [ 919.311826] 0 pages in swap cache [ 919.315471] Swap cache stats: add 0, delete 0, find 0/0 [ 919.320824] Free swap = 0kB [ 919.326810] Total swap = 0kB [ 919.329892] 2097051 pages RAM [ 919.341786] 0 pages HighMem/MovableOnly [ 919.348639] 363840 pages reserved [ 919.352109] 0 pages cma reserved [ 919.359663] Out of memory (oom_kill_allocating_task): Kill process 30309 (rsyslogd) score 0 or sacrifice child [ 919.409091] Killed process 30309 (rsyslogd) total-vm:21560kB, anon-rss:180kB, file-rss:0kB, shmem-rss:0kB [ 919.442570] oom_reaper: reaped process 30309 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 919.972735] Bluetooth: hci2 command 0x0409 tx timeout [ 921.691491] IPVS: ftp: loaded support on port[0] = 21 [ 921.815840] chnl_net:caif_netlink_parms(): no params data found [ 921.897945] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.905191] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.912129] device bridge_slave_0 entered promiscuous mode [ 921.919670] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.926161] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.933644] device bridge_slave_1 entered promiscuous mode [ 921.953156] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 921.962094] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 921.986369] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 921.993659] team0: Port device team_slave_0 added [ 921.999034] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 922.007094] team0: Port device team_slave_1 added [ 922.025625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 922.031913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 922.058297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.069800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 922.076500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 922.102614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 922.113307] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 922.120635] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 922.143768] device hsr_slave_0 entered promiscuous mode [ 922.149462] device hsr_slave_1 entered promiscuous mode [ 922.156957] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 922.164551] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 922.239224] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.245905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 922.252556] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.258908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 922.290858] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 922.298188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 922.307917] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 922.316780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 922.324630] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.331264] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.341575] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 922.347968] 8021q: adding VLAN 0 to HW filter on device team0 [ 922.356733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 922.364492] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.370844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 922.383018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 922.390578] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.396959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 922.416431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 922.424377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 922.431850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 922.440550] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 922.450019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 922.460889] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 922.467095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 922.480399] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 922.488479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 922.495762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 922.511235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.567696] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 922.578615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 922.616178] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 922.623711] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 922.630286] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 922.640705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 922.649001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 922.656115] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 922.666664] device veth0_vlan entered promiscuous mode [ 922.676642] device veth1_vlan entered promiscuous mode [ 922.682867] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 922.691777] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 922.704102] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 922.714443] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 922.721721] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 922.729956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 922.740136] device veth0_macvtap entered promiscuous mode [ 922.746985] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 922.756106] device veth1_macvtap entered promiscuous mode [ 922.767230] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 922.777919] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 922.788021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 922.801524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.812420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 922.823178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.832817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 922.843626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.853997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 922.865241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.876928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 922.886280] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 922.894037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 922.902021] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 922.912654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 922.922729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.931827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 922.941589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.950770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 922.960560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.969828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 922.979595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.989688] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 922.997097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 923.004319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 923.012101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 923.342683] Bluetooth: hci2 command 0x0409 tx timeout [ 923.613016] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 923.625138] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 923.630365] CPU: 1 PID: 30599 Comm: syz-executor.2 Not tainted 4.14.215-syzkaller #0 [ 923.638236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 923.647573] Call Trace: [ 923.650146] dump_stack+0x1b2/0x283 [ 923.653776] warn_alloc.cold+0x96/0x1cc [ 923.657747] ? zone_watermark_ok_safe+0x220/0x220 [ 923.662598] __alloc_pages_nodemask+0x2127/0x2720 [ 923.667433] ? lock_acquire+0x170/0x3f0 [ 923.671398] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 923.676240] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 923.681689] ? perf_trace_lock_acquire+0x332/0x510 [ 923.686618] ? __mutex_unlock_slowpath+0x75/0x770 [ 923.691455] alloc_pages_current+0x155/0x260 [ 923.695907] ion_page_pool_alloc+0x118/0x1b0 [ 923.700297] ion_system_heap_allocate+0x133/0x8c0 [ 923.705129] ? ion_alloc+0x187/0x810 [ 923.708844] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 923.714285] ? ion_system_contig_heap_create+0x130/0x130 [ 923.719749] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 923.724757] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 923.729852] ion_alloc+0x204/0x810 [ 923.733394] ? ion_dma_buf_release+0x40/0x40 [ 923.737790] ? __might_fault+0x177/0x1b0 [ 923.741837] ion_ioctl+0xea/0x1ee [ 923.745285] ? ion_alloc.cold+0x3b/0x3b [ 923.749252] ? HARDIRQ_verbose+0x10/0x10 [ 923.753295] ? lock_downgrade+0x740/0x740 [ 923.757423] ? ion_alloc.cold+0x3b/0x3b [ 923.761380] do_vfs_ioctl+0x75a/0xff0 [ 923.765176] ? ioctl_preallocate+0x1a0/0x1a0 [ 923.769580] ? lock_downgrade+0x740/0x740 [ 923.773712] ? __fget+0x225/0x360 [ 923.777149] ? do_vfs_ioctl+0xff0/0xff0 [ 923.781102] ? security_file_ioctl+0x83/0xb0 [ 923.785503] SyS_ioctl+0x7f/0xb0 [ 923.788860] ? do_vfs_ioctl+0xff0/0xff0 [ 923.792823] do_syscall_64+0x1d5/0x640 [ 923.796696] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 923.801862] RIP: 0033:0x45e219 [ 923.805034] RSP: 002b:00007f9b25732c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 923.812744] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 923.820006] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 923.827268] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 923.834518] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 923.841777] R13: 00007ffff7407b3f R14: 00007f9b257339c0 R15: 000000000119c034 [ 923.852049] Mem-Info: [ 923.855183] active_anon:153077 inactive_anon:1117724 isolated_anon:0 [ 923.855183] active_file:15 inactive_file:152 isolated_file:0 [ 923.855183] unevictable:54117 dirty:0 writeback:0 unstable:0 [ 923.855183] slab_reclaimable:14414 slab_unreclaimable:111565 [ 923.855183] mapped:58188 shmem:21304 pagetables:7996 bounce:0 [ 923.855183] free:26633 free_pcp:109 free_cma:0 [ 923.890414] Node 0 active_anon:600364kB inactive_anon:1195848kB active_file:56kB inactive_file:804kB unevictable:192080kB isolated(anon):0kB isolated(file):0kB mapped:62444kB dirty:0kB writeback:0kB shmem:71760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 923.925357] Node 1 active_anon:11944kB inactive_anon:3275048kB active_file:4kB inactive_file:4kB unevictable:24388kB isolated(anon):0kB isolated(file):0kB mapped:170408kB dirty:0kB writeback:0kB shmem:13456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 923.939855] IPVS: ftp: loaded support on port[0] = 21 [ 923.956864] Node 0 DMA free:11028kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 923.999161] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 924.004940] Node 0 DMA32 free:36888kB min:36200kB low:45248kB high:54296kB active_anon:600416kB inactive_anon:1195260kB active_file:60kB inactive_file:2560kB unevictable:192080kB writepending:16kB present:3129332kB managed:2788160kB mlocked:192080kB kernel_stack:8640kB pagetables:12272kB bounce:0kB free_pcp:312kB local_pcp:216kB free_cma:0kB [ 924.127213] lowmem_reserve[]: 0 0 0 0 0 [ 924.128278] syz-executor.3: [ 924.131267] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 924.131290] lowmem_reserve[]: [ 924.136575] page allocation failure: order:4 [ 924.202113] 0 [ 924.202371] , mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 924.206565] 0 0 0 0 [ 924.206590] Node 1 [ 924.208413] (null) [ 924.228812] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 924.229593] Normal free:53884kB min:53696kB low:67120kB high:80544kB active_anon:11944kB inactive_anon:3275048kB active_file:88kB inactive_file:16kB unevictable:24388kB writepending:16kB present:4194304kB managed:4128256kB mlocked:24388kB kernel_stack:4768kB pagetables:19784kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 924.235184] CPU: 1 PID: 30574 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0 [ 924.272105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 924.281465] Call Trace: [ 924.284050] dump_stack+0x1b2/0x283 [ 924.287677] warn_alloc.cold+0x96/0x1cc [ 924.291648] ? zone_watermark_ok_safe+0x220/0x220 [ 924.296507] __alloc_pages_nodemask+0x2127/0x2720 [ 924.301343] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 924.306353] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 924.307621] lowmem_reserve[]: 0 0 [ 924.311569] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 924.311590] ? mark_held_locks+0xa6/0xf0 [ 924.315148] 0 [ 924.319849] ? cache_grow_begin+0x41/0x630 [ 924.325508] 0 [ 924.325685] cache_grow_begin+0x91/0x630 [ 924.330187] 0 [ 924.331688] ? cache_grow_begin+0x91/0x630 [ 924.331699] fallback_alloc+0x207/0x2c0 [ 924.331714] kmem_cache_alloc_trace+0x1f1/0x3d0 [ 924.331724] ? can_notifier+0x300/0x300 [ 924.331734] can_pernet_init+0x69/0x410 [ 924.331745] ops_init+0xaa/0x3e0 [ 924.331758] setup_net+0x22f/0x530 [ 924.337619] ? rtnl_net_dumpid_one+0x240/0x240 [ 924.337629] ? kmem_cache_alloc+0x35f/0x3c0 [ 924.337638] copy_net_ns+0x19b/0x440 [ 924.337651] create_new_namespaces+0x375/0x720 [ 924.337666] unshare_nsproxy_namespaces+0xa1/0x1d0 [ 924.337678] SyS_unshare+0x308/0x7f0 [ 924.337688] ? walk_process_tree+0x2a0/0x2a0 [ 924.337694] ? task_work_run+0xfd/0x190 [ 924.337710] ? do_syscall_64+0x4c/0x640 [ 924.363041] Node 0 [ 924.365335] ? walk_process_tree+0x2a0/0x2a0 [ 924.365347] do_syscall_64+0x1d5/0x640 [ 924.365363] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 924.365371] RIP: 0033:0x460ce7 [ 924.365375] RSP: 002b:00007ffcaa72bd88 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 924.365383] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000000460ce7 [ 924.365388] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 924.365393] RBP: 00000000000000f8 R08: 0000000000000000 R09: 0000000000000005 [ 924.365398] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffcaa72bdd0 [ 924.365403] R13: 00007ffcaa72c028 R14: 0000000000000000 R15: 0000000000000000 [ 924.476161] DMA: 17*4kB (ME) 6*8kB (M) 4*16kB (ME) 3*32kB (ME) 10*64kB (ME) 5*128kB (ME) 5*256kB (ME) 2*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 0*4096kB = 11028kB [ 924.492170] Node 0 DMA32: 120*4kB (UMH) 485*8kB (UH) 91*16kB (UH) 1084*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 40504kB [ 924.512288] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 924.527918] Node 1 Normal: 179*4kB (UM) 35*8kB (UM) 355*16kB (M) 1491*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54388kB [ 924.546446] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 924.558186] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 924.567890] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 924.578369] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 924.588990] 27018 total pagecache pages [ 924.599105] 0 pages in swap cache [ 924.613169] Swap cache stats: add 0, delete 0, find 0/0 [ 924.643449] Free swap = 0kB [ 924.656759] Total swap = 0kB [ 924.666602] 2097051 pages RAM [ 924.676726] 0 pages HighMem/MovableOnly [ 924.686245] 363840 pages reserved [ 924.695140] 0 pages cma reserved [ 925.187906] chnl_net:caif_netlink_parms(): no params data found [ 925.412210] Bluetooth: hci2 command 0x041b tx timeout [ 925.790085] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.848786] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.906928] device bridge_slave_0 entered promiscuous mode [ 925.943653] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.959157] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.972096] Bluetooth: hci3 command 0x0409 tx timeout [ 925.997478] device bridge_slave_1 entered promiscuous mode [ 926.156536] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 926.232939] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 926.476311] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 926.514359] team0: Port device team_slave_0 added [ 926.625945] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 926.662673] team0: Port device team_slave_1 added [ 926.868408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 926.889309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.915287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.927354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 926.934651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.960184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 926.988195] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 927.047904] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 927.147023] device hsr_slave_0 entered promiscuous mode [ 927.160923] device hsr_slave_1 entered promiscuous mode [ 927.241479] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 927.388377] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 927.491911] Bluetooth: hci2 command 0x040f tx timeout [ 928.052230] Bluetooth: hci3 command 0x041b tx timeout [ 929.578128] Bluetooth: hci2 command 0x0419 tx timeout [ 930.131594] Bluetooth: hci3 command 0x040f tx timeout [ 932.211466] Bluetooth: hci3 command 0x0419 tx timeout [ 935.267663] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 935.414819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.436057] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 935.466421] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 935.474592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 935.486660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 935.517099] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 935.524118] 8021q: adding VLAN 0 to HW filter on device team0 [ 935.548801] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 935.557240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 935.570200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 935.580507] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.586938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 935.600911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 936.516876] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 936.525013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 936.539084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 936.547015] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.553431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 936.627571] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 936.657390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 936.707554] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 936.746935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 936.783906] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 936.799382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 936.808727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 936.823553] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 938.686610] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 938.697836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 938.706158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 938.724620] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 938.731822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 938.739331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 938.756795] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 938.764400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 938.774374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 938.807374] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 938.814909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 938.838311] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 938.846552] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 938.853363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 938.860487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 938.881868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 944.773001] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 944.792496] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 944.800927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 944.809938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 955.768227] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 955.794818] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 955.820824] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 957.178896] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 957.192718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 957.210367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 957.231363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 957.241815] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 957.269288] device veth0_vlan entered promiscuous mode [ 957.304503] device veth1_vlan entered promiscuous mode [ 957.395660] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 957.435527] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 957.446915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 957.458653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 957.474306] device veth0_macvtap entered promiscuous mode [ 957.504749] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 957.526141] device veth1_macvtap entered promiscuous mode [ 957.575577] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 957.637076] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 957.673043] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 957.693338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 957.704877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.728123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 957.820393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.835511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 957.851973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.870228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 957.888090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.910488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 957.930017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.957889] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 957.976011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 957.988570] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 958.001251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 958.008686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 958.022982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 958.337327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 958.347932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.357238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 958.367836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.377759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 958.388256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.397555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 958.407545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.417344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 958.427237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.450419] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 958.457767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 958.476096] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 958.484222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 982.192778] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 982.217024] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 982.221827] CPU: 0 PID: 7979 Comm: syz-fuzzer Not tainted 4.14.215-syzkaller #0 [ 982.229273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 982.239494] Call Trace: [ 982.242095] dump_stack+0x1b2/0x283 [ 982.245720] dump_header+0x178/0x82f [ 982.249435] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 982.254533] ? ___ratelimit+0x2cd/0x522 [ 982.258513] oom_kill_process.cold+0x10/0xb18 [ 982.263049] out_of_memory+0xe3e/0x1190 [ 982.267028] ? oom_killer_disable+0x1c0/0x1c0 [ 982.271518] ? mutex_trylock+0x152/0x1a0 [ 982.275568] __alloc_pages_nodemask+0x23e1/0x2720 [ 982.280416] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 982.285261] alloc_pages_current+0x155/0x260 [ 982.289668] filemap_fault+0xea3/0x1980 [ 982.293650] ext4_filemap_fault+0x84/0xb0 [ 982.297803] __do_fault+0xfa/0x380 [ 982.301343] __handle_mm_fault+0x2497/0x4620 [ 982.305755] ? vm_insert_page+0x7c0/0x7c0 [ 982.309899] ? HARDIRQ_verbose+0x10/0x10 [ 982.313954] ? HARDIRQ_verbose+0x10/0x10 [ 982.318023] handle_mm_fault+0x391/0x860 [ 982.322087] __do_page_fault+0x549/0xad0 [ 982.326142] ? spurious_fault+0x640/0x640 [ 982.330283] ? do_page_fault+0x60/0x4f2 [ 982.334253] ? page_fault+0x2f/0x50 [ 982.337879] page_fault+0x45/0x50 [ 982.341351] RIP: 1500:0x200 [ 982.344269] RSP: 224700:000000c00003bf28 EFLAGS: 00000003 [ 982.398302] Mem-Info: [ 982.409914] active_anon:154834 inactive_anon:1121752 isolated_anon:0 [ 982.409914] active_file:21 inactive_file:21 isolated_file:0 [ 982.409914] unevictable:46501 dirty:0 writeback:0 unstable:0 [ 982.409914] slab_reclaimable:13901 slab_unreclaimable:116150 [ 982.409914] mapped:54097 shmem:21437 pagetables:8438 bounce:0 [ 982.409914] free:25085 free_pcp:1 free_cma:0 [ 982.469729] Node 0 active_anon:606904kB inactive_anon:1199424kB active_file:32kB inactive_file:0kB unevictable:178784kB isolated(anon):0kB isolated(file):0kB mapped:48044kB dirty:0kB writeback:0kB shmem:72248kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 982.540716] Node 1 active_anon:12432kB inactive_anon:3287584kB active_file:52kB inactive_file:16kB unevictable:7220kB isolated(anon):0kB isolated(file):0kB mapped:168344kB dirty:0kB writeback:0kB shmem:13500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 982.591647] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 982.649577] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 982.654724] Node 0 DMA32 free:35832kB min:36200kB low:45248kB high:54296kB active_anon:606872kB inactive_anon:1198836kB active_file:224kB inactive_file:88kB unevictable:178784kB writepending:0kB present:3129332kB managed:2788160kB mlocked:178784kB kernel_stack:9312kB pagetables:13892kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 982.705166] lowmem_reserve[]: 0 0 0 0 0 [ 982.734868] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 982.786475] lowmem_reserve[]: 0 0 0 0 0 [ 982.798167] Node 1 Normal free:53504kB min:53696kB low:67120kB high:80544kB active_anon:12432kB inactive_anon:3287584kB active_file:68kB inactive_file:0kB unevictable:7220kB writepending:0kB present:4194304kB managed:4128256kB mlocked:7220kB kernel_stack:4896kB pagetables:19856kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 982.856316] lowmem_reserve[]: 0 0 0 0 0 [ 982.886351] Node 0 DMA: 19*4kB (UME) 3*8kB (UM) 4*16kB (UME) 3*32kB (ME) 11*64kB (UME) 5*128kB (ME) 7*256kB (UME) 3*512kB (UME) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11076kB [ 982.920190] Node 0 DMA32: 69*4kB (UMEH) 140*8kB (UMEH) 110*16kB (UMEH) 1033*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36212kB [ 982.941764] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 982.955328] Node 1 Normal: 66*4kB (UME) 3*8kB (ME) 748*16kB (UME) 1141*32kB (UM) 38*64kB (ME) 2*128kB (ME) 2*256kB (UE) 1*512kB (U) 1*1024kB (E) 0*2048kB 0*4096kB = 53504kB [ 983.004660] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 983.034390] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 983.064262] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 983.091109] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 983.115034] 22825 total pagecache pages [ 983.124146] 0 pages in swap cache [ 983.143111] Swap cache stats: add 0, delete 0, find 0/0 [ 983.155728] Free swap = 0kB [ 983.211659] Total swap = 0kB [ 983.214715] 2097051 pages RAM [ 983.220426] 0 pages HighMem/MovableOnly [ 983.224394] 363840 pages reserved [ 983.256341] 0 pages cma reserved [ 983.283387] Out of memory (oom_kill_allocating_task): Kill process 7979 (syz-fuzzer) score 0 or sacrifice child [ 983.304321] Killed process 30333 (syz-executor.2) total-vm:85024kB, anon-rss:72kB, file-rss:4kB, shmem-rss:0kB [ 983.430673] oom_reaper: reaped process 30333 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 983.454830] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 983.473039] in:imklog cpuset=/ mems_allowed=0-1 [ 983.479122] CPU: 0 PID: 30355 Comm: in:imklog Not tainted 4.14.215-syzkaller #0 [ 983.486570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 983.495923] Call Trace: [ 983.498514] dump_stack+0x1b2/0x283 [ 983.502149] dump_header+0x178/0x82f [ 983.505864] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 983.510969] ? ___ratelimit+0x2cd/0x522 [ 983.515063] oom_kill_process.cold+0x10/0xb18 [ 983.519570] out_of_memory+0xe3e/0x1190 [ 983.523543] ? oom_killer_disable+0x1c0/0x1c0 [ 983.528053] ? mutex_trylock+0x152/0x1a0 [ 983.532121] __alloc_pages_nodemask+0x23e1/0x2720 [ 983.536966] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 983.541800] alloc_pages_current+0x155/0x260 [ 983.546231] filemap_fault+0xea3/0x1980 [ 983.550224] ext4_filemap_fault+0x84/0xb0 [ 983.554360] __do_fault+0xfa/0x380 [ 983.557881] __handle_mm_fault+0x2497/0x4620 [ 983.562267] ? vm_insert_page+0x7c0/0x7c0 [ 983.566433] ? HARDIRQ_verbose+0x10/0x10 [ 983.570477] ? HARDIRQ_verbose+0x10/0x10 [ 983.574529] handle_mm_fault+0x391/0x860 [ 983.578586] __do_page_fault+0x549/0xad0 [ 983.582685] ? spurious_fault+0x640/0x640 [ 983.586955] ? do_page_fault+0x60/0x4f2 [ 983.590914] ? page_fault+0x2f/0x50 [ 983.594516] page_fault+0x45/0x50 [ 983.598145] RIP: 1fa0:0x1f9f [ 983.601138] RSP: 0000:000055ec9bd739d0 EFLAGS: 7f73c12d3da0 [ 983.613806] Mem-Info: [ 983.623579] active_anon:154811 inactive_anon:1117693 isolated_anon:0 [ 983.623579] active_file:104 inactive_file:686 isolated_file:0 [ 983.623579] unevictable:48278 dirty:3 writeback:0 unstable:0 [ 983.623579] slab_reclaimable:13899 slab_unreclaimable:116147 [ 983.623579] mapped:46270 shmem:21437 pagetables:8369 bounce:0 [ 983.623579] free:25965 free_pcp:408 free_cma:0 [ 983.659341] Node 0 active_anon:606844kB inactive_anon:1195872kB active_file:72kB inactive_file:640kB unevictable:182628kB isolated(anon):0kB isolated(file):0kB mapped:33400kB dirty:8kB writeback:0kB shmem:72248kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 983.785157] Node 1 active_anon:13300kB inactive_anon:3274900kB active_file:2024kB inactive_file:3296kB unevictable:11584kB isolated(anon):0kB isolated(file):128kB mapped:155380kB dirty:4kB writeback:0kB shmem:13500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 984.131484] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 984.435672] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 984.451590] Node 0 DMA32 free:42972kB min:36200kB low:45248kB high:54296kB active_anon:606724kB inactive_anon:1195244kB active_file:1696kB inactive_file:1840kB unevictable:197772kB writepending:16kB present:3129332kB managed:2788160kB mlocked:197772kB kernel_stack:8896kB pagetables:14056kB bounce:0kB free_pcp:1240kB local_pcp:588kB free_cma:0kB [ 984.645531] lowmem_reserve[]: 0 0 0 0 0 [ 984.653616] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 984.808944] lowmem_reserve[]: 0 0 0 0 0 [ 984.860573] Node 1 Normal free:60388kB min:53696kB low:67120kB high:80544kB active_anon:11652kB inactive_anon:3274900kB active_file:2392kB inactive_file:2384kB unevictable:96kB writepending:16kB present:4194304kB managed:4128256kB mlocked:76kB kernel_stack:5152kB pagetables:19412kB bounce:0kB free_pcp:1312kB local_pcp:624kB free_cma:0kB 18:33:42 executing program 3: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2054, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:33:42 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:33:42 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = accept4$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x10, 0x800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setuid(r4) syz_mount_image$minix(&(0x7f0000000100)='minix\x00', &(0x7f0000000140)='./bus/file0\x00', 0x3, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000180)="9dbf9516ab18cdb09d4a72757b9d57cbb4cf", 0x12}, {&(0x7f0000000300)="3f05e658e4f7e8910e35df609ea3e4ac2feb9244afc5bc77c3aea5c6daa16ff9a65eaafb8e5e1aa38182387e2fd4ad03b00735d096414aefc32225181e80f154284942b819d59a297734ab18572ebe824a4b23bf747920d0c4ca42a94e9c965ac7a64d9763b302bb8afdaf86d7c86b9880e2f575eaff0427dd52c3b346ead1d6278ed775f980de0e55753da9ea45e2e657e11c0070376eeb35", 0x99, 0x1}], 0x80100a, &(0x7f00000006c0)={[{'system.posix_acl_default\x00'}, {'overlay\x00'}, {'@('}, {'overlay\x00'}, {'system.posix_acl_default\x00'}, {'p^'}], [{@fsuuid={'fsuuid', 0x3d, {[0x31, 0x61, 0x65, 0x31, 0x2, 0x35, 0x38, 0x39], 0x2d, [0x39, 0x39, 0x63], 0x2d, [0x65, 0x31, 0x66, 0x30], 0x2d, [0x64, 0x34, 0x3c, 0x30], 0x2d, [0x32, 0x52, 0x6a, 0x62, 0x30, 0x36, 0x61, 0x33]}}}, {@smackfstransmute={'smackfstransmute', 0x3d, '^'}}, {@dont_appraise='dont_appraise'}, {@smackfsroot={'smackfsroot', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_role={'subj_role', 0x3d, '^'}}, {@fowner_eq={'fowner'}}, {@context={'context', 0x3d, 'root'}}, {@smackfsroot={'smackfsroot', 0x3d, 'system.posix_acl_default\x00'}}, {@hash='hash'}, {@fowner_lt={'fowner<', r4}}]}) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) fsetxattr$system_posix_acl(r3, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {0x1, 0x4}, [{0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x7, r4}, {0x2, 0x4}], {0x4, 0x4}, [{0x8, 0x2, r5}, {0x8, 0x4}], {0x10, 0x7}}, 0x4c, 0x1) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0xb1, 0x0) memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) ioctl$LOOP_SET_DIRECT_IO(r6, 0x4c08, 0x7fff) setgroups(0x0, 0x0) 18:33:42 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c5995", 0x61}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) 18:33:42 executing program 2: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) dup(r0) r3 = dup(r2) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, 0x0, 0x0) sendmsg$AUDIT_GET(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3e8, 0x400, 0x70bd26, 0x25dfdc00, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x894}, 0x4000044) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000000)) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:33:42 executing program 0: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) mlockall(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 985.115659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 985.133593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 985.139393] lowmem_reserve[]: 0 0 0 0 0 [ 985.187783] Node 0 DMA: 19*4kB (UME) 3*8kB (UM) 4*16kB (UME) 4*32kB (UME) 10*64kB (ME) 5*128kB (ME) 7*256kB (UME) 3*512kB (UME) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11044kB [ 985.218779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 985.299417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 985.325862] device bridge_slave_1 left promiscuous mode [ 985.375176] Node 0 DMA32: 68*4kB (H) 823*8kB (UH) 561*16kB (UEH) 940*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45912kB [ 985.394483] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.473925] device bridge_slave_0 left promiscuous mode [ 985.525165] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 985.536653] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.559434] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 985.616144] device veth1_macvtap left promiscuous mode [ 985.629488] Node 1 Normal: 327*4kB (UME) 674*8kB (ME) 738*16kB (UME) 1102*32kB (M) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53772kB [ 985.642970] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 985.655337] device veth0_macvtap left promiscuous mode [ 985.674174] CPU: 1 PID: 31619 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0 [ 985.682173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 985.691529] Call Trace: [ 985.691689] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 985.694115] dump_stack+0x1b2/0x283 [ 985.694132] warn_alloc.cold+0x96/0x1cc [ 985.694141] ? zone_watermark_ok_safe+0x220/0x220 [ 985.694164] __alloc_pages_nodemask+0x2127/0x2720 [ 985.716172] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 985.720213] ? lock_acquire+0x170/0x3f0 [ 985.720232] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 985.720254] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 985.742385] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 985.743085] ? __mutex_unlock_slowpath+0x75/0x770 [ 985.756741] alloc_pages_current+0x155/0x260 [ 985.761154] ion_page_pool_alloc+0x118/0x1b0 [ 985.762235] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 985.765560] ion_system_heap_allocate+0x133/0x8c0 [ 985.765573] ? ion_alloc+0x187/0x810 [ 985.765586] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 985.765594] ? ion_system_contig_heap_create+0x130/0x130 [ 985.765603] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 985.787496] 23381 total pagecache pages [ 985.788132] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 985.788151] ion_alloc+0x204/0x810 [ 985.788165] ? ion_dma_buf_release+0x40/0x40 [ 985.788179] ? __might_fault+0x177/0x1b0 [ 985.788191] ion_ioctl+0xea/0x1ee [ 985.788199] ? ion_alloc.cold+0x3b/0x3b [ 985.788211] ? HARDIRQ_verbose+0x10/0x10 [ 985.788219] ? lock_downgrade+0x740/0x740 [ 985.788225] ? ion_alloc.cold+0x3b/0x3b [ 985.788236] do_vfs_ioctl+0x75a/0xff0 [ 985.788250] ? ioctl_preallocate+0x1a0/0x1a0 [ 985.788258] ? lock_downgrade+0x740/0x740 [ 985.788274] ? __fget+0x225/0x360 [ 985.788284] ? do_vfs_ioctl+0xff0/0xff0 [ 985.788295] ? security_file_ioctl+0x83/0xb0 [ 985.788306] SyS_ioctl+0x7f/0xb0 [ 985.788317] ? do_vfs_ioctl+0xff0/0xff0 [ 985.794982] 0 pages in swap cache [ 985.798784] do_syscall_64+0x1d5/0x640 [ 985.798805] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 985.798813] RIP: 0033:0x45e219 [ 985.798818] RSP: 002b:00007f57f0a6fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 985.798828] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 985.798836] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 985.807302] Swap cache stats: add 0, delete 0, find 0/0 [ 985.807621] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 985.815450] Free swap = 0kB [ 985.815536] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 985.824253] Total swap = 0kB [ 985.826979] R13: 00007ffcaa72b93f R14: 00007f57f0a709c0 R15: 000000000119c034 [ 985.840475] device veth1_vlan left promiscuous mode [ 985.840516] device veth0_vlan left promiscuous mode [ 986.067062] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 986.145612] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 986.156589] CPU: 0 PID: 31630 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 986.164499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 986.173306] 2097051 pages RAM [ 986.173960] Call Trace: [ 986.173982] dump_stack+0x1b2/0x283 [ 986.174000] warn_alloc.cold+0x96/0x1cc [ 986.179969] warn_alloc_show_mem: 1 callbacks suppressed [ 986.179972] Mem-Info: [ 986.183278] ? zone_watermark_ok_safe+0x220/0x220 [ 986.183318] __alloc_pages_nodemask+0x2127/0x2720 [ 986.188736] 0 pages HighMem/MovableOnly [ 986.192620] ? lock_acquire+0x170/0x3f0 [ 986.195030] 363840 pages reserved [ 986.200154] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 986.200181] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 986.200191] ? perf_trace_lock_acquire+0x332/0x510 [ 986.200208] ? __mutex_unlock_slowpath+0x75/0x770 [ 986.200229] alloc_pages_current+0x155/0x260 [ 986.200247] ion_page_pool_alloc+0x118/0x1b0 [ 986.210157] active_anon:154433 inactive_anon:1117696 isolated_anon:0 [ 986.210157] active_file:56 inactive_file:80 isolated_file:32 [ 986.210157] unevictable:54517 dirty:3 writeback:0 unstable:0 [ 986.210157] slab_reclaimable:14028 slab_unreclaimable:117513 [ 986.210157] mapped:46843 shmem:21456 pagetables:8289 bounce:0 [ 986.210157] free:25612 free_pcp:533 free_cma:0 [ 986.212994] ion_system_heap_allocate+0x133/0x8c0 [ 986.213011] ? ion_alloc+0x187/0x810 [ 986.217804] 0 pages cma reserved [ 986.221273] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 986.221288] ? ion_system_contig_heap_create+0x130/0x130 [ 986.230266] Node 0 active_anon:606076kB inactive_anon:1195876kB active_file:300kB inactive_file:312kB unevictable:211532kB isolated(anon):0kB isolated(file):128kB mapped:40256kB dirty:12kB writeback:0kB shmem:72316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 986.231635] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 986.231653] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 986.237240] Out of memory (oom_kill_allocating_task): Kill process 30355 (in:imklog) score 0 or sacrifice child [ 986.240892] ion_alloc+0x204/0x810 [ 986.240916] ? ion_dma_buf_release+0x40/0x40 [ 986.245329] Node 1 active_anon:11656kB inactive_anon:3274908kB active_file:0kB inactive_file:8kB unevictable:6536kB isolated(anon):0kB isolated(file):0kB mapped:147116kB dirty:0kB writeback:0kB shmem:13508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 986.279571] ? __might_fault+0x177/0x1b0 [ 986.279590] ion_ioctl+0xea/0x1ee [ 986.279601] ? ion_alloc.cold+0x3b/0x3b [ 986.279617] ? HARDIRQ_verbose+0x10/0x10 [ 986.279628] ? lock_downgrade+0x740/0x740 [ 986.279637] ? ion_alloc.cold+0x3b/0x3b [ 986.279651] do_vfs_ioctl+0x75a/0xff0 [ 986.279668] ? ioctl_preallocate+0x1a0/0x1a0 [ 986.279677] ? lock_downgrade+0x740/0x740 [ 986.279700] ? __fget+0x225/0x360 [ 986.279713] ? do_vfs_ioctl+0xff0/0xff0 [ 986.279726] ? security_file_ioctl+0x83/0xb0 [ 986.279741] SyS_ioctl+0x7f/0xb0 [ 986.288824] Killed process 30350 (rsyslogd) total-vm:254332kB, anon-rss:960kB, file-rss:0kB, shmem-rss:0kB [ 986.291758] ? do_vfs_ioctl+0xff0/0xff0 [ 986.291776] do_syscall_64+0x1d5/0x640 [ 986.302956] Node 0 [ 986.331366] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 986.331377] RIP: 0033:0x45e219 [ 986.331383] RSP: 002b:00007f9f6fd95c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 986.331395] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 986.331402] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 986.331408] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 986.331414] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 986.331420] R13: 00007ffdd833b2ef R14: 00007f9f6fd969c0 R15: 000000000119c034 [ 986.842522] device hsr_slave_1 left promiscuous mode [ 986.854057] device hsr_slave_0 left promiscuous mode [ 986.963727] team0 (unregistering): Port device team_slave_1 removed [ 986.994410] team0 (unregistering): Port device team_slave_0 removed [ 987.007908] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 987.021203] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 987.054026] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 987.133410] systemd-journal cpuset=/ mems_allowed=0-1 [ 987.155441] CPU: 0 PID: 29977 Comm: systemd-journal Not tainted 4.14.215-syzkaller #0 [ 987.163434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 987.172789] Call Trace: [ 987.175932] dump_stack+0x1b2/0x283 [ 987.179575] dump_header+0x178/0x82f [ 987.183297] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 987.188400] ? ___ratelimit+0x2cd/0x522 [ 987.192374] oom_kill_process.cold+0x10/0xb18 [ 987.196880] out_of_memory+0xe3e/0x1190 [ 987.200857] ? oom_killer_disable+0x1c0/0x1c0 [ 987.205351] ? mutex_trylock+0x152/0x1a0 [ 987.209412] __alloc_pages_nodemask+0x23e1/0x2720 [ 987.214272] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 987.219131] alloc_pages_current+0x155/0x260 [ 987.223539] filemap_fault+0xea3/0x1980 [ 987.227531] ext4_filemap_fault+0x84/0xb0 [ 987.231675] __do_fault+0xfa/0x380 [ 987.235211] __handle_mm_fault+0x2497/0x4620 [ 987.239623] ? vm_insert_page+0x7c0/0x7c0 [ 987.243767] ? HARDIRQ_verbose+0x10/0x10 [ 987.247822] ? HARDIRQ_verbose+0x10/0x10 [ 987.251893] handle_mm_fault+0x391/0x860 [ 987.255954] __do_page_fault+0x549/0xad0 [ 987.260018] ? spurious_fault+0x640/0x640 [ 987.264161] ? do_page_fault+0x60/0x4f2 [ 987.268135] ? page_fault+0x2f/0x50 [ 987.271759] page_fault+0x45/0x50 [ 987.275207] RIP: fffffffe:0x7ffef9e83ae0 [ 987.279266] RSP: 2b951120:000000000000000d EFLAGS: ffffffff [ 987.303948] bond0 (unregistering): Released all slaves [ 987.332251] DMA free:11036kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 987.370477] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 987.376508] Node 0 DMA32 free:36728kB min:36200kB low:45248kB high:54296kB active_anon:605688kB inactive_anon:1195412kB active_file:388kB inactive_file:548kB unevictable:216340kB writepending:0kB present:3129332kB managed:2788160kB mlocked:216340kB kernel_stack:9024kB pagetables:13640kB bounce:0kB free_pcp:676kB local_pcp:248kB free_cma:0kB [ 987.404090] Mem-Info: [ 987.408098] lowmem_reserve[]: 0 0 0 0 0 [ 987.413058] active_anon:154278 inactive_anon:1117727 isolated_anon:0 [ 987.413058] active_file:31 inactive_file:100 isolated_file:8 [ 987.413058] unevictable:55936 dirty:0 writeback:0 unstable:0 [ 987.413058] slab_reclaimable:13988 slab_unreclaimable:116508 [ 987.413058] mapped:49453 shmem:21456 pagetables:8246 bounce:0 [ 987.413058] free:25294 free_pcp:229 free_cma:0 [ 987.416781] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 987.533092] lowmem_reserve[]: 0 0 0 0 0 [ 987.533541] Node 0 active_anon:605720kB inactive_anon:1196000kB active_file:396kB inactive_file:256kB unevictable:216632kB isolated(anon):0kB isolated(file):0kB mapped:49832kB dirty:0kB writeback:0kB shmem:72316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 987.592070] Node 1 Normal free:53584kB min:53696kB low:67120kB high:80544kB active_anon:11392kB inactive_anon:3274908kB active_file:0kB inactive_file:4kB unevictable:7112kB writepending:0kB present:4194304kB managed:4128256kB mlocked:7112kB kernel_stack:4928kB pagetables:19340kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 987.846107] Node 1 active_anon:11392kB inactive_anon:3274908kB active_file:0kB inactive_file:4kB unevictable:7112kB isolated(anon):0kB isolated(file):0kB mapped:148280kB dirty:0kB writeback:0kB shmem:13508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 987.857526] lowmem_reserve[]: 0 0 0 0 0 [ 987.914886] Node 0 DMA free:11036kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 987.927389] Node 0 DMA: 19*4kB (UME) 2*8kB (M) 4*16kB (UME) 4*32kB (UME) 10*64kB (ME) 5*128kB (ME) 7*256kB (UME) 3*512kB (UME) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11036kB [ 988.261875] Node 0 DMA32: 52*4kB (UMEH) 105*8kB (UMH) 353*16kB (UMH) 934*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36584kB [ 988.327442] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 988.406963] Node 0 DMA32 free:35740kB min:36200kB low:45248kB high:54296kB active_anon:605692kB inactive_anon:1195448kB active_file:76kB inactive_file:0kB unevictable:217520kB writepending:28kB present:3129332kB managed:2788160kB mlocked:217520kB kernel_stack:9024kB pagetables:13768kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 988.429415] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 988.691117] Node 1 Normal: 165*4kB (UME) 741*8kB (UME) 742*16kB (UME) 1102*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53724kB [ 988.834334] lowmem_reserve[]: 0 0 0 0 0 [ 988.902815] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 988.907829] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 989.307549] lowmem_reserve[]: 0 0 0 0 0 [ 989.311580] Node 1 Normal free:53136kB min:53696kB low:67120kB high:80544kB active_anon:11392kB inactive_anon:3274908kB active_file:0kB inactive_file:16kB unevictable:7112kB writepending:0kB present:4194304kB managed:4128256kB mlocked:7112kB kernel_stack:4896kB pagetables:19340kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 989.311967] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 989.789577] lowmem_reserve[]: 0 0 0 0 0 [ 989.792572] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 989.793627] Node 0 [ 989.928774] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 989.978563] DMA: 18*4kB (UME) 3*8kB (ME) 4*16kB (UME) 3*32kB (ME) 11*64kB (UME) 5*128kB (ME) 7*256kB (UME) 3*512kB (UME) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11072kB [ 990.108998] 27155 total pagecache pages [ 990.113012] 0 pages in swap cache [ 990.206071] Swap cache stats: add 0, delete 0, find 0/0 [ 990.211463] Free swap = 0kB [ 990.214472] Total swap = 0kB [ 990.217966] Node 0 DMA32: 132*4kB (UME) 51*8kB (UME) 354*16kB (UM) 933*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36456kB [ 990.384410] 2097051 pages RAM [ 990.422662] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 990.448956] 0 pages HighMem/MovableOnly [ 990.452956] 363840 pages reserved [ 990.547730] 0 pages cma reserved [ 990.586889] Node 1 Normal: 164*4kB (UME) 741*8kB (UME) 742*16kB (UME) 1104*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53784kB [ 990.753365] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 990.893590] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 990.992025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 991.121500] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 991.251303] 27140 total pagecache pages [ 991.255318] 0 pages in swap cache [ 991.322565] Swap cache stats: add 0, delete 0, find 0/0 [ 991.335964] Free swap = 0kB [ 991.338993] Total swap = 0kB [ 991.342003] 2097051 pages RAM [ 991.345094] 0 pages HighMem/MovableOnly [ 991.351399] 363840 pages reserved [ 991.354849] 0 pages cma reserved [ 991.358250] Out of memory (oom_kill_allocating_task): Kill process 29977 (systemd-journal) score 0 or sacrifice child [ 991.369062] Killed process 29977 (systemd-journal) total-vm:46096kB, anon-rss:480kB, file-rss:0kB, shmem-rss:2148kB [ 991.380634] oom_reaper: reaped process 29977 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2148kB [ 991.801415] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 991.818644] systemd-udevd cpuset=/ mems_allowed=0-1 [ 991.823702] CPU: 1 PID: 30663 Comm: systemd-udevd Not tainted 4.14.215-syzkaller #0 [ 991.831487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 991.840842] Call Trace: [ 991.843431] dump_stack+0x1b2/0x283 [ 991.847091] dump_header+0x178/0x82f [ 991.850890] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 991.855986] ? ___ratelimit+0x2cd/0x522 [ 991.859960] oom_kill_process.cold+0x10/0xb18 [ 991.864459] out_of_memory+0xe3e/0x1190 [ 991.868431] ? oom_killer_disable+0x1c0/0x1c0 [ 991.873031] ? mutex_trylock+0x152/0x1a0 [ 991.877090] __alloc_pages_nodemask+0x23e1/0x2720 [ 991.881942] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 991.886806] alloc_pages_current+0x155/0x260 [ 991.891210] filemap_fault+0xea3/0x1980 [ 991.895190] ext4_filemap_fault+0x84/0xb0 [ 991.899332] __do_fault+0xfa/0x380 [ 991.902863] __handle_mm_fault+0x2497/0x4620 [ 991.907266] ? vm_insert_page+0x7c0/0x7c0 [ 991.911507] ? HARDIRQ_verbose+0x10/0x10 [ 991.915544] ? HARDIRQ_verbose+0x10/0x10 [ 991.919590] handle_mm_fault+0x391/0x860 [ 991.923633] __do_page_fault+0x549/0xad0 [ 991.927676] ? spurious_fault+0x640/0x640 [ 991.931812] ? do_page_fault+0x60/0x4f2 [ 991.935765] ? page_fault+0x2f/0x50 [ 991.939428] page_fault+0x45/0x50 [ 991.942858] RIP: 0001:0xffffffff [ 991.946196] RSP: d9287730:00007ffd436e7910 EFLAGS: 5647d7b7168a [ 991.953680] Mem-Info: [ 991.963107] active_anon:154129 inactive_anon:1117727 isolated_anon:0 [ 991.963107] active_file:43 inactive_file:0 isolated_file:4 [ 991.963107] unevictable:56255 dirty:7 writeback:0 unstable:0 [ 991.963107] slab_reclaimable:13940 slab_unreclaimable:116104 [ 991.963107] mapped:49187 shmem:21456 pagetables:8219 bounce:0 [ 991.963107] free:25220 free_pcp:66 free_cma:0 [ 992.001346] Node 0 active_anon:605320kB inactive_anon:1195996kB active_file:36kB inactive_file:36kB unevictable:217908kB isolated(anon):0kB isolated(file):0kB mapped:49660kB dirty:28kB writeback:0kB shmem:72316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 992.033966] Node 1 active_anon:11200kB inactive_anon:3274908kB active_file:32kB inactive_file:32kB unevictable:7112kB isolated(anon):0kB isolated(file):0kB mapped:146992kB dirty:0kB writeback:0kB shmem:13508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 992.068538] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 992.125913] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 992.130982] Node 0 DMA32 free:35788kB min:36200kB low:45248kB high:54296kB active_anon:605288kB inactive_anon:1195408kB active_file:36kB inactive_file:36kB unevictable:217908kB writepending:28kB present:3129332kB managed:2788160kB mlocked:217908kB kernel_stack:8960kB pagetables:13456kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 992.673102] lowmem_reserve[]: 0 0 0 0 0 [ 992.745445] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 993.145816] lowmem_reserve[]: 0 0 0 0 0 [ 993.149847] Node 1 Normal free:53160kB min:53696kB low:67120kB high:80544kB active_anon:11200kB inactive_anon:3274908kB active_file:36kB inactive_file:68kB unevictable:7112kB writepending:0kB present:4194304kB managed:4128256kB mlocked:7112kB kernel_stack:4768kB pagetables:19320kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 993.619321] lowmem_reserve[]: 0 0 0 0 0 [ 993.623381] Node 0 DMA: 18*4kB (UME) 3*8kB (ME) 4*16kB (UME) 3*32kB (ME) 11*64kB (UME) 5*128kB (ME) 7*256kB (UME) 3*512kB (UME) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11072kB [ 993.882150] Node 0 DMA32: 140*4kB (ME) 40*8kB (UM) 353*16kB (UM) 932*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36352kB [ 994.035791] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 994.070166] Node 1 Normal: 129*4kB (UME) 728*8kB (UME) 742*16kB (UME) 1108*32kB (UM) 2*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53796kB [ 994.132850] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 994.175813] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 994.184415] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 994.193320] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 994.201953] 27176 total pagecache pages [ 994.205975] 0 pages in swap cache [ 994.209424] Swap cache stats: add 0, delete 0, find 0/0 [ 994.214782] Free swap = 0kB [ 994.218560] Total swap = 0kB [ 994.221586] 2097051 pages RAM [ 994.224677] 0 pages HighMem/MovableOnly [ 994.228693] 363840 pages reserved [ 994.232141] 0 pages cma reserved [ 994.235505] Out of memory (oom_kill_allocating_task): Kill process 30663 (systemd-udevd) score 0 or sacrifice child [ 994.246968] Killed process 30663 (systemd-udevd) total-vm:43800kB, anon-rss:1192kB, file-rss:0kB, shmem-rss:0kB [ 994.261758] oom_reaper: reaped process 30663 (systemd-udevd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 18:33:43 executing program 0: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) mlockall(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 994.563127] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 994.918245] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 995.031178] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 995.691272] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 995.719608] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 995.739249] systemd[1]: Stopped Journal Service. [ 995.777354] systemd[1]: Starting Journal Service... [ 995.792918] systemd[1]: Stopped System Logging Service. [ 995.820157] systemd[1]: Starting System Logging Service... [ 996.043936] systemd-journald[31732]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. 18:33:53 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c5995", 0x61}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) 18:33:53 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 996.227498] systemd[1]: Started Journal Service. 18:33:53 executing program 3: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2054, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:33:53 executing program 5: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mlockall(0x3) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x4) mbind(&(0x7f000057d000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000100)=0x100000001, 0x2e, 0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800005, 0xb, 0x0, 0xffffffffffffffff}) preadv2(r2, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/11, 0xb}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/99, 0x63}, {&(0x7f0000001400)=""/177, 0xb1}, {&(0x7f0000000200)=""/25, 0x19}], 0x5, 0x0, 0x400, 0x1) r3 = dup(r2) mlockall(0x3) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x40001c, 0x0, 0x11, r3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x800400, &(0x7f0000000140)="8da650b5396faa72551b59b670ec01c8bcf606ee493117fe39fca351d2c4e7a3505d7563e90f82", &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000280)="ecfda88948a3850d833d4abd95f485175a12bb31669854f19f0f5e5a05ded22950b55ccab895e169c6921923cb741627a6ae7172b12578585777861b8f2c8dd942eba360dff9c529fa56b6347906317b5afa877b4975e69e66c625b208fde561c8252eecc00b3a3f03226a0b0137862af29863cd421d9912872872b698300d9fe0aadd387750c448c1f1331891a7b8594ccf925bef0329bd9a458b0419b2d6a4c551c16b78f0e006022eae6810c4f5cd1efc393968b25e099b04034d7085b186be2162766f15c6d6183ef96d68621b221e7e2e5c4008ec9956a7308380590e86b99e760c345e8d0419eb261f665baa1015dc64") mmap(&(0x7f0000a39000/0x3000)=nil, 0x3000, 0x800000, 0x100010, r0, 0xcb10a000) [ 996.882340] syz-executor.0 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 996.927973] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 996.946888] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 996.953454] CPU: 0 PID: 31750 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 996.961372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 996.970736] Call Trace: [ 996.973343] dump_stack+0x1b2/0x283 [ 996.976979] warn_alloc.cold+0x96/0x1cc [ 996.980957] ? zone_watermark_ok_safe+0x220/0x220 [ 996.985869] __alloc_pages_nodemask+0x2127/0x2720 [ 996.990729] ? lock_acquire+0x170/0x3f0 [ 996.994714] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 996.999566] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 997.005149] ? perf_trace_lock_acquire+0x332/0x510 [ 997.010094] ? __mutex_unlock_slowpath+0x75/0x770 [ 997.014953] alloc_pages_current+0x155/0x260 [ 997.019369] ion_page_pool_alloc+0x118/0x1b0 [ 997.023777] ion_system_heap_allocate+0x133/0x8c0 [ 997.028616] ? ion_alloc+0x187/0x810 [ 997.032328] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 997.037774] ? ion_system_contig_heap_create+0x130/0x130 [ 997.043215] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 997.048225] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 997.053062] ion_alloc+0x204/0x810 [ 997.056606] ? ion_dma_buf_release+0x40/0x40 [ 997.061015] ? __might_fault+0x177/0x1b0 [ 997.065076] ion_ioctl+0xea/0x1ee [ 997.068562] ? ion_alloc.cold+0x3b/0x3b [ 997.072535] ? HARDIRQ_verbose+0x10/0x10 [ 997.076591] ? lock_downgrade+0x740/0x740 [ 997.080730] ? ion_alloc.cold+0x3b/0x3b [ 997.084714] do_vfs_ioctl+0x75a/0xff0 [ 997.088519] ? ioctl_preallocate+0x1a0/0x1a0 [ 997.092921] ? lock_downgrade+0x740/0x740 [ 997.097072] ? __fget+0x225/0x360 [ 997.100523] ? do_vfs_ioctl+0xff0/0xff0 [ 997.104494] ? security_file_ioctl+0x83/0xb0 [ 997.108902] SyS_ioctl+0x7f/0xb0 [ 997.112264] ? do_vfs_ioctl+0xff0/0xff0 [ 997.116238] do_syscall_64+0x1d5/0x640 [ 997.120129] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 997.125311] RIP: 0033:0x45e219 [ 997.128494] RSP: 002b:00007f9f6fd95c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 997.136199] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 997.143502] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 997.150792] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 997.158197] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 997.165591] R13: 00007ffdd833b2ef R14: 00007f9f6fd969c0 R15: 000000000119c034 [ 997.180001] warn_alloc_show_mem: 1 callbacks suppressed [ 997.180006] Mem-Info: [ 997.189479] active_anon:153601 inactive_anon:1123779 isolated_anon:0 [ 997.189479] active_file:29 inactive_file:21 isolated_file:36 [ 997.189479] unevictable:50427 dirty:1 writeback:0 unstable:0 [ 997.189479] slab_reclaimable:13766 slab_unreclaimable:119077 [ 997.189479] mapped:45675 shmem:23522 pagetables:8038 bounce:0 [ 997.189479] free:25123 free_pcp:102 free_cma:0 [ 997.223774] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 997.229051] CPU: 0 PID: 31736 Comm: syz-executor.0 Not tainted 4.14.215-syzkaller #0 [ 997.236944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 997.246304] Call Trace: [ 997.248908] dump_stack+0x1b2/0x283 [ 997.252551] dump_header+0x178/0x82f [ 997.256275] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 997.261406] ? ___ratelimit+0x2cd/0x522 [ 997.265392] oom_kill_process.cold+0x10/0xb18 [ 997.269910] out_of_memory+0xe3e/0x1190 [ 997.273899] ? oom_killer_disable+0x1c0/0x1c0 [ 997.278405] ? mutex_trylock+0x152/0x1a0 [ 997.282481] __alloc_pages_nodemask+0x23e1/0x2720 [ 997.287352] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 997.292208] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 997.296979] ? __lock_acquire+0x5fc/0x3f20 [ 997.301238] alloc_pages_vma+0xd2/0x6d0 [ 997.305230] __handle_mm_fault+0x25fa/0x4620 [ 997.309673] ? vm_insert_page+0x7c0/0x7c0 [ 997.313921] ? HARDIRQ_verbose+0x10/0x10 [ 997.317995] ? do_raw_spin_unlock+0x164/0x220 [ 997.322516] handle_mm_fault+0x391/0x860 [ 997.326590] __get_user_pages+0x445/0x11d0 [ 997.330846] ? follow_page_mask+0x18a0/0x18a0 [ 997.335356] ? lock_acquire+0x170/0x3f0 [ 997.339346] populate_vma_page_range+0x17b/0x210 [ 997.344115] __mm_populate+0x195/0x2c0 [ 997.348015] ? populate_vma_page_range+0x210/0x210 [ 997.348895] Node 0 active_anon:603312kB inactive_anon:1217688kB active_file:112kB inactive_file:80kB unevictable:192780kB isolated(anon):0kB isolated(file):0kB mapped:34580kB dirty:4kB writeback:0kB shmem:80600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 997.352944] ? security_capable+0x88/0xb0 [ 997.352958] SyS_mlockall+0x3ff/0x520 [ 997.389494] ? SyS_munlock+0xf0/0xf0 [ 997.393222] do_syscall_64+0x1d5/0x640 [ 997.397132] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 997.402329] RIP: 0033:0x45e219 [ 997.405523] RSP: 002b:00007ff786cc8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 997.413243] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045e219 [ 997.420551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 997.427834] RBP: 000000000119bfb0 R08: 0000000000000000 R09: 0000000000000000 [ 997.435326] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 997.442686] R13: 00007fff6e253caf R14: 00007ff786cc99c0 R15: 000000000119bf8c [ 997.456673] Node 1 active_anon:11092kB inactive_anon:3277428kB active_file:4kB inactive_file:4kB unevictable:8928kB isolated(anon):0kB isolated(file):0kB mapped:148120kB dirty:0kB writeback:0kB shmem:13488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 997.501294] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 997.529267] Mem-Info: [ 997.531645] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 997.536823] Node 0 DMA32 free:36200kB min:36200kB low:45248kB high:54296kB active_anon:603280kB inactive_anon:1217100kB active_file:80kB inactive_file:176kB unevictable:192780kB writepending:4kB present:3129332kB managed:2788160kB mlocked:192780kB kernel_stack:9056kB pagetables:12760kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 997.539454] active_anon:153601 inactive_anon:1123779 isolated_anon:0 [ 997.539454] active_file:36 inactive_file:16 isolated_file:0 [ 997.539454] unevictable:50427 dirty:1 writeback:0 unstable:0 [ 997.539454] slab_reclaimable:13766 slab_unreclaimable:119077 [ 997.539454] mapped:45658 shmem:23522 pagetables:8038 bounce:0 [ 997.539454] free:25159 free_pcp:63 free_cma:0 [ 997.574850] lowmem_reserve[]: 0 0 0 0 0 [ 997.865824] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 997.888616] Node 0 active_anon:603312kB inactive_anon:1217688kB active_file:96kB inactive_file:0kB unevictable:192780kB isolated(anon):0kB isolated(file):0kB mapped:34512kB dirty:4kB writeback:0kB shmem:80600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 998.021344] lowmem_reserve[]: 0 0 0 0 0 [ 998.058012] Node 1 Normal free:53428kB min:53696kB low:67120kB high:80544kB active_anon:11092kB inactive_anon:3277428kB active_file:4kB inactive_file:4kB unevictable:8928kB writepending:0kB present:4194304kB managed:4128256kB mlocked:8928kB kernel_stack:4608kB pagetables:19388kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 998.104580] Node 1 active_anon:11092kB inactive_anon:3277428kB active_file:4kB inactive_file:4kB unevictable:8928kB isolated(anon):0kB isolated(file):0kB mapped:148120kB dirty:0kB writeback:0kB shmem:13488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 998.141400] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 998.164620] lowmem_reserve[]: 0 0 0 0 0 [ 998.172650] Node 0 DMA: 18*4kB (UME) 3*8kB (ME) 4*16kB (UME) 3*32kB (ME) 11*64kB (UME) 5*128kB (ME) 7*256kB (UME) 3*512kB (UME) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11072kB [ 998.257641] Node 0 DMA32: 125*4kB (UME) 115*8kB (UM) 335*16kB (U) 937*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36764kB [ 998.271332] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 998.282310] Node 1 Normal: 313*4kB (UME) 374*8kB (UME) 622*16kB (UME) 1134*32kB (UM) 46*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53428kB [ 998.284793] lowmem_reserve[]: [ 998.297010] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 998.309169] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 998.317876] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 998.326964] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 998.335746] 25369 total pagecache pages [ 998.339778] 0 pages in swap cache [ 998.343286] Swap cache stats: add 0, delete 0, find 0/0 [ 998.348733] Free swap = 0kB [ 998.351807] Total swap = 0kB [ 998.355034] 2097051 pages RAM [ 998.358278] 0 pages HighMem/MovableOnly [ 998.362104] 0 2717 2718 2718 2718 [ 998.366523] 363840 pages reserved [ 998.377948] Node 0 DMA32 free:36152kB min:36200kB low:45248kB high:54296kB active_anon:603280kB inactive_anon:1217100kB active_file:56kB inactive_file:0kB unevictable:192784kB writepending:4kB present:3129332kB managed:2788160kB mlocked:192784kB kernel_stack:9056kB pagetables:12760kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 998.435912] 0 pages cma reserved [ 998.467612] lowmem_reserve[]: 0 0 0 0 0 [ 998.471688] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 998.498078] lowmem_reserve[]: 0 0 0 0 0 [ 998.502258] Node 1 Normal free:53428kB min:53696kB low:67120kB high:80544kB active_anon:11092kB inactive_anon:3277428kB active_file:16kB inactive_file:0kB unevictable:8928kB writepending:0kB present:4194304kB managed:4128256kB mlocked:8928kB kernel_stack:4608kB pagetables:19388kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 998.532290] lowmem_reserve[]: 0 0 0 0 0 [ 998.536328] Node 0 DMA: 18*4kB (UME) 3*8kB (ME) 4*16kB (UME) 3*32kB (ME) 11*64kB (UME) 5*128kB (ME) 7*256kB (UME) 3*512kB (UME) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11072kB [ 998.552822] Node 0 DMA32: 125*4kB (UME) 115*8kB (UM) 335*16kB (U) 937*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36764kB [ 998.567043] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 998.578199] Node 1 Normal: 313*4kB (UME) 374*8kB (UME) 622*16kB (UME) 1134*32kB (UM) 46*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53428kB [ 998.593432] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 998.602338] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 998.611146] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 998.620125] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 998.628753] 25362 total pagecache pages [ 998.632771] 0 pages in swap cache [ 998.636602] Swap cache stats: add 0, delete 0, find 0/0 [ 998.642108] Free swap = 0kB [ 998.645348] Total swap = 0kB [ 998.648379] 2097051 pages RAM [ 998.651665] 0 pages HighMem/MovableOnly [ 998.655679] 363840 pages reserved [ 998.659289] 0 pages cma reserved [ 998.662762] Out of memory (oom_kill_allocating_task): Kill process 31736 (syz-executor.0) score 0 or sacrifice child [ 998.673734] Killed process 31735 (syz-executor.0) total-vm:93480kB, anon-rss:13884kB, file-rss:40232kB, shmem-rss:0kB [ 998.689768] oom_reaper: reaped process 31735 (syz-executor.0), now anon-rss:14012kB, file-rss:5416kB, shmem-rss:0kB [ 998.715169] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 998.800520] systemd-journal cpuset=/ mems_allowed=0-1 [ 998.805834] CPU: 1 PID: 31732 Comm: systemd-journal Not tainted 4.14.215-syzkaller #0 [ 998.814036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 998.823541] Call Trace: [ 998.826158] dump_stack+0x1b2/0x283 [ 998.829802] dump_header+0x178/0x82f [ 998.833670] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 998.838789] ? ___ratelimit+0x2cd/0x522 [ 998.842780] oom_kill_process.cold+0x10/0xb18 [ 998.847304] out_of_memory+0xe3e/0x1190 [ 998.851305] ? oom_killer_disable+0x1c0/0x1c0 [ 998.855933] ? mutex_trylock+0x152/0x1a0 [ 998.860014] __alloc_pages_nodemask+0x23e1/0x2720 [ 998.864889] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 998.869771] alloc_pages_current+0x155/0x260 [ 998.874491] filemap_fault+0xea3/0x1980 [ 998.878495] ext4_filemap_fault+0x84/0xb0 [ 998.882660] __do_fault+0xfa/0x380 [ 998.886205] __handle_mm_fault+0x2497/0x4620 [ 998.890850] ? vm_insert_page+0x7c0/0x7c0 [ 998.895348] ? HARDIRQ_verbose+0x10/0x10 [ 998.899499] ? HARDIRQ_verbose+0x10/0x10 [ 998.903565] handle_mm_fault+0x391/0x860 [ 998.907724] __do_page_fault+0x549/0xad0 [ 998.912015] ? spurious_fault+0x640/0x640 [ 998.916179] ? do_page_fault+0x60/0x4f2 [ 998.920178] ? page_fault+0x2f/0x50 [ 998.923829] page_fault+0x45/0x50 [ 998.927297] RIP: 0001:0x1 [ 998.930057] RSP: a5c7310:00007ffde6ef88d0 EFLAGS: 7ffde6ef86e0 [ 998.953710] Mem-Info: [ 998.980392] active_anon:153597 inactive_anon:1123779 isolated_anon:0 [ 998.980392] active_file:217 inactive_file:2644 isolated_file:27 [ 998.980392] unevictable:46022 dirty:9 writeback:0 unstable:0 18:33:56 executing program 0: mlockall(0x3) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a0d000/0x3000)=nil) mlockall(0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 998.980392] slab_reclaimable:13765 slab_unreclaimable:119101 [ 998.980392] mapped:46743 shmem:23522 pagetables:8005 bounce:0 [ 998.980392] free:25645 free_pcp:293 free_cma:0 [ 999.102120] Node 0 active_anon:603364kB inactive_anon:1217688kB active_file:4412kB inactive_file:6696kB unevictable:179040kB isolated(anon):0kB isolated(file):128kB mapped:43364kB dirty:124kB writeback:0kB shmem:80600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 999.170196] Node 1 active_anon:11092kB inactive_anon:3277428kB active_file:0kB inactive_file:0kB unevictable:5048kB isolated(anon):0kB isolated(file):0kB mapped:145888kB dirty:0kB writeback:0kB shmem:13488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 999.228749] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 999.322549] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 999.333326] Node 0 DMA32 free:35776kB min:36200kB low:45248kB high:54296kB active_anon:603332kB inactive_anon:1217100kB active_file:2792kB inactive_file:2776kB unevictable:183576kB writepending:124kB present:3129332kB managed:2788160kB mlocked:183576kB kernel_stack:8960kB pagetables:12652kB bounce:0kB free_pcp:240kB local_pcp:132kB free_cma:0kB [ 999.418824] lowmem_reserve[]: 0 0 0 0 0 [ 999.423257] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 999.489790] lowmem_reserve[]: 0 0 0 0 0 [ 999.501456] Node 1 Normal free:53520kB min:53696kB low:67120kB high:80544kB active_anon:11092kB inactive_anon:3282668kB active_file:0kB inactive_file:1604kB unevictable:808kB writepending:0kB present:4194304kB managed:4128256kB mlocked:816kB kernel_stack:4608kB pagetables:19388kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 999.567503] lowmem_reserve[]: 0 0 0 0 0 [ 999.573817] Node 0 DMA: 18*4kB (UME) 3*8kB (ME) 4*16kB (UME) 3*32kB (ME) 11*64kB (UME) 5*128kB (ME) 7*256kB (UME) 3*512kB (UME) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11072kB [ 999.640931] Node 0 DMA32: 0*4kB 0*8kB 411*16kB (U) 946*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36848kB [ 999.707116] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 999.728427] Node 1 Normal: 97*4kB (ME) 645*8kB (UME) 694*16kB (ME) 1128*32kB (UM) 22*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54156kB [ 999.748721] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 999.757868] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 999.767188] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 999.776801] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 999.786187] 24097 total pagecache pages [ 999.790721] 0 pages in swap cache [ 999.794761] Swap cache stats: add 0, delete 0, find 0/0 [ 999.800721] Free swap = 0kB [ 999.804305] Total swap = 0kB [ 999.818637] 2097051 pages RAM [ 999.827082] 0 pages HighMem/MovableOnly [ 999.832292] 363840 pages reserved [ 999.842612] 0 pages cma reserved [ 999.852545] Out of memory (oom_kill_allocating_task): Kill process 31732 (systemd-journal) score 0 or sacrifice child [ 999.918293] Killed process 31732 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1372kB [ 999.966243] oom_reaper: reaped process 31732 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1372kB [ 1000.070673] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1000.084357] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1000.096033] CPU: 1 PID: 7993 Comm: syz-fuzzer Not tainted 4.14.215-syzkaller #0 [ 1000.103647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1000.113104] Call Trace: [ 1000.115714] dump_stack+0x1b2/0x283 [ 1000.119363] dump_header+0x178/0x82f [ 1000.123215] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1000.128324] ? ___ratelimit+0x2cd/0x522 [ 1000.132404] oom_kill_process.cold+0x10/0xb18 [ 1000.137046] out_of_memory+0xe3e/0x1190 [ 1000.141038] ? oom_killer_disable+0x1c0/0x1c0 [ 1000.145547] ? mutex_trylock+0x152/0x1a0 [ 1000.149619] __alloc_pages_nodemask+0x23e1/0x2720 [ 1000.154488] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1000.159480] alloc_pages_current+0x155/0x260 [ 1000.163910] filemap_fault+0xea3/0x1980 [ 1000.168100] ext4_filemap_fault+0x84/0xb0 [ 1000.172262] __do_fault+0xfa/0x380 [ 1000.175816] __handle_mm_fault+0x2497/0x4620 [ 1000.180235] ? vm_insert_page+0x7c0/0x7c0 [ 1000.184393] ? HARDIRQ_verbose+0x10/0x10 [ 1000.188465] ? HARDIRQ_verbose+0x10/0x10 [ 1000.192550] handle_mm_fault+0x391/0x860 [ 1000.196631] __do_page_fault+0x549/0xad0 [ 1000.200707] ? spurious_fault+0x640/0x640 [ 1000.204862] ? do_page_fault+0x60/0x4f2 [ 1000.208848] ? page_fault+0x2f/0x50 [ 1000.212484] page_fault+0x45/0x50 [ 1000.215942] RIP: 0000: (null) [ 1000.219831] RSP: 2e2c00:000000c000f079e0 EFLAGS: c01ee4e780 [ 1000.367829] Mem-Info: [ 1000.376072] active_anon:153584 inactive_anon:1119754 isolated_anon:0 [ 1000.376072] active_file:37 inactive_file:18 isolated_file:0 [ 1000.376072] unevictable:48892 dirty:6 writeback:0 unstable:0 [ 1000.376072] slab_reclaimable:13767 slab_unreclaimable:118163 [ 1000.376072] mapped:52572 shmem:23522 pagetables:7968 bounce:0 [ 1000.376072] free:24994 free_pcp:0 free_cma:0 [ 1000.410578] Node 0 active_anon:603128kB inactive_anon:1204128kB active_file:104kB inactive_file:52kB unevictable:187864kB isolated(anon):0kB isolated(file):0kB mapped:56872kB dirty:24kB writeback:0kB shmem:80600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1000.440213] Node 1 active_anon:11208kB inactive_anon:3274888kB active_file:44kB inactive_file:20kB unevictable:7704kB isolated(anon):0kB isolated(file):0kB mapped:153416kB dirty:0kB writeback:4kB shmem:13488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1000.468562] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1000.522225] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1000.573402] Node 0 DMA32 free:35684kB min:36200kB low:45248kB high:54296kB active_anon:603496kB inactive_anon:1203540kB active_file:92kB inactive_file:16kB unevictable:187504kB writepending:88kB present:3129332kB managed:2788160kB mlocked:187504kB kernel_stack:8832kB pagetables:12436kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1000.762377] lowmem_reserve[]: 0 0 0 0 0 [ 1000.789682] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1000.954244] lowmem_reserve[]: 0 0 0 0 0 [ 1000.977966] Node 1 Normal free:53476kB min:53696kB low:67120kB high:80544kB active_anon:11252kB inactive_anon:3274888kB active_file:12kB inactive_file:0kB unevictable:7712kB writepending:8kB present:4194304kB managed:4128256kB mlocked:7712kB kernel_stack:4640kB pagetables:19436kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1001.017664] lowmem_reserve[]: 0 0 0 0 0 [ 1001.047400] Node 0 DMA: 18*4kB (UME) 3*8kB (ME) 4*16kB (UME) 3*32kB (ME) 11*64kB (UME) 5*128kB (ME) 7*256kB (UME) 3*512kB (UME) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11072kB [ 1001.107551] Node 0 DMA32: 109*4kB (UME) 14*8kB (M) 340*16kB (UM) 947*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36292kB [ 1001.214493] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1001.281922] Node 1 Normal: 47*4kB (UME) 610*8kB (ME) 741*16kB (UME) 1127*32kB (UM) 8*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53500kB [ 1001.367586] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1001.428014] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1001.483086] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1001.539233] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1001.596599] 24910 total pagecache pages [ 1001.600625] 0 pages in swap cache [ 1001.604084] Swap cache stats: add 0, delete 0, find 0/0 [ 1001.672772] Free swap = 0kB [ 1001.693416] Total swap = 0kB [ 1001.713426] 2097051 pages RAM [ 1001.737437] 0 pages HighMem/MovableOnly [ 1001.741449] 363840 pages reserved [ 1001.744912] 0 pages cma reserved [ 1001.802723] Out of memory (oom_kill_allocating_task): Kill process 7993 (syz-fuzzer) score 0 or sacrifice child [ 1001.866199] Killed process 31755 (syz-executor.2) total-vm:80928kB, anon-rss:68kB, file-rss:964kB, shmem-rss:0kB [ 1001.897256] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1001.918097] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1001.922922] CPU: 1 PID: 7993 Comm: syz-fuzzer Not tainted 4.14.215-syzkaller #0 [ 1001.930475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1001.939842] Call Trace: [ 1001.942449] dump_stack+0x1b2/0x283 [ 1001.946094] dump_header+0x178/0x82f [ 1001.949986] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1001.955103] ? ___ratelimit+0x2cd/0x522 [ 1001.959091] oom_kill_process.cold+0x10/0xb18 [ 1001.963605] out_of_memory+0xe3e/0x1190 [ 1001.967770] ? oom_killer_disable+0x1c0/0x1c0 [ 1001.972456] ? mutex_trylock+0x152/0x1a0 [ 1001.976682] __alloc_pages_nodemask+0x23e1/0x2720 [ 1001.981557] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1001.986434] alloc_pages_current+0x155/0x260 [ 1001.990860] filemap_fault+0xea3/0x1980 [ 1001.994967] ext4_filemap_fault+0x84/0xb0 [ 1001.999121] __do_fault+0xfa/0x380 [ 1002.002671] __handle_mm_fault+0x2497/0x4620 [ 1002.007093] ? vm_insert_page+0x7c0/0x7c0 [ 1002.011427] ? HARDIRQ_verbose+0x10/0x10 [ 1002.015501] ? HARDIRQ_verbose+0x10/0x10 [ 1002.019587] handle_mm_fault+0x391/0x860 [ 1002.023661] __do_page_fault+0x549/0xad0 [ 1002.027735] ? spurious_fault+0x640/0x640 [ 1002.031895] ? do_page_fault+0x60/0x4f2 [ 1002.035882] ? page_fault+0x2f/0x50 [ 1002.039515] page_fault+0x45/0x50 [ 1002.042972] RIP: 0000: (null) [ 1002.046867] RSP: 2e2c00:000000c000f079e0 EFLAGS: c01ee4e780 [ 1002.054437] Mem-Info: [ 1002.062844] active_anon:153581 inactive_anon:1119753 isolated_anon:0 [ 1002.062844] active_file:17 inactive_file:17 isolated_file:0 [ 1002.062844] unevictable:48993 dirty:0 writeback:0 unstable:0 [ 1002.062844] slab_reclaimable:13768 slab_unreclaimable:117806 [ 1002.062844] mapped:53067 shmem:23522 pagetables:7952 bounce:0 [ 1002.062844] free:24985 free_pcp:37 free_cma:0 [ 1002.104427] Node 0 active_anon:603068kB inactive_anon:1204124kB active_file:164kB inactive_file:0kB unevictable:188260kB isolated(anon):0kB isolated(file):116kB mapped:58856kB dirty:0kB writeback:0kB shmem:80600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1002.138805] Node 1 active_anon:11256kB inactive_anon:3274888kB active_file:4kB inactive_file:4kB unevictable:7712kB isolated(anon):0kB isolated(file):0kB mapped:153412kB dirty:0kB writeback:0kB shmem:13488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1002.171571] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:588kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1002.203786] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1002.209062] Node 0 DMA32 free:35368kB min:36200kB low:45248kB high:54296kB active_anon:603036kB inactive_anon:1203536kB active_file:164kB inactive_file:0kB unevictable:188260kB writepending:0kB present:3129332kB managed:2788160kB mlocked:188260kB kernel_stack:8832kB pagetables:12356kB bounce:0kB free_pcp:148kB local_pcp:68kB free_cma:0kB [ 1002.244159] lowmem_reserve[]: 0 0 0 0 0 [ 1002.248220] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1002.278594] lowmem_reserve[]: 0 0 0 0 0 [ 1002.282618] Node 1 Normal free:53500kB min:53696kB low:67120kB high:80544kB active_anon:11256kB inactive_anon:3274888kB active_file:4kB inactive_file:4kB unevictable:7712kB writepending:0kB present:4194304kB managed:4128256kB mlocked:7712kB kernel_stack:4576kB pagetables:19448kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1002.317153] lowmem_reserve[]: 0 0 0 0 0 [ 1002.321181] Node 0 DMA: 18*4kB (UME) 3*8kB (ME) 4*16kB (UME) 3*32kB (ME) 11*64kB (UME) 5*128kB (ME) 7*256kB (UME) 3*512kB (UME) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11072kB [ 1002.343009] Node 0 DMA32: 10*4kB (ME) 3*8kB (UM) 311*16kB (UM) 948*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35376kB [ 1002.361347] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1002.372135] Node 1 Normal: 47*4kB (UME) 610*8kB (ME) 741*16kB (UME) 1129*32kB (UM) 8*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53564kB [ 1002.391468] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1002.402965] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1002.414230] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1002.423950] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1002.445301] 24910 total pagecache pages [ 1002.449550] 0 pages in swap cache [ 1002.453088] Swap cache stats: add 0, delete 0, find 0/0 [ 1002.463490] Free swap = 0kB [ 1002.472518] Total swap = 0kB [ 1002.480566] 2097051 pages RAM [ 1002.483677] 0 pages HighMem/MovableOnly [ 1002.493074] 363840 pages reserved [ 1002.501454] 0 pages cma reserved [ 1002.504833] Out of memory (oom_kill_allocating_task): Kill process 7993 (syz-fuzzer) score 0 or sacrifice child [ 1002.522731] Killed process 30573 (syz-executor.3) total-vm:85024kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 1002.561599] oom_reaper: reaped process 31755 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 18:33:59 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c5995", 0x61}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) 18:33:59 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 1002.703660] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1002.751744] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1002.832132] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1002.855727] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1002.862551] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1002.873781] systemd[1]: Stopped Journal Service. [ 1002.893487] systemd[1]: Starting Journal Service... [ 1002.911883] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1003.010991] systemd-journald[31788]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1003.251263] systemd[1]: Started Journal Service. [ 1006.062695] IPVS: ftp: loaded support on port[0] = 21 [ 1006.188070] chnl_net:caif_netlink_parms(): no params data found [ 1006.198155] syz-executor.2: page allocation failure: order:5, mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 1006.209046] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1006.214550] CPU: 1 PID: 31792 Comm: syz-executor.2 Not tainted 4.14.215-syzkaller #0 [ 1006.222460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1006.231902] Call Trace: [ 1006.234488] dump_stack+0x1b2/0x283 [ 1006.238107] warn_alloc.cold+0x96/0x1cc [ 1006.242072] ? zone_watermark_ok_safe+0x220/0x220 [ 1006.247019] ? wake_all_kswapds+0x175/0x360 [ 1006.251331] __alloc_pages_nodemask+0x2127/0x2720 [ 1006.256165] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1006.261258] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 1006.266353] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1006.271219] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1006.276074] ? HARDIRQ_verbose+0x10/0x10 [ 1006.280125] ? cache_alloc_refill+0x2fa/0x350 [ 1006.284737] ? ____cache_alloc_node+0x156/0x1d0 [ 1006.289397] cache_grow_begin+0x91/0x630 [ 1006.293452] ? cache_grow_begin+0x91/0x630 [ 1006.297689] fallback_alloc+0x207/0x2c0 [ 1006.301698] __kmalloc+0x213/0x400 [ 1006.305487] ? batadv_hash_new+0xaa/0x270 [ 1006.309645] batadv_hash_new+0xaa/0x270 [ 1006.313608] ? batadv_bla_status_update+0x2b0/0x2b0 [ 1006.318614] batadv_dat_init+0x61/0x170 [ 1006.322663] batadv_mesh_init+0x4a8/0x630 [ 1006.326802] batadv_softif_init_late+0xa26/0xc90 [ 1006.331547] ? batadv_get_strings+0x40/0x40 [ 1006.335915] ? dev_valid_name+0x1a0/0x1a0 [ 1006.340052] ? ehci_hub_control+0x1b13/0x1fc0 [ 1006.344608] ? batadv_get_strings+0x40/0x40 [ 1006.349014] register_netdevice+0x291/0xe40 [ 1006.353476] ? netdev_change_features+0xa0/0xa0 [ 1006.358138] ? rtnl_create_link+0x129/0x890 [ 1006.362494] rtnl_newlink+0x14dc/0x1830 [ 1006.366463] ? rtnl_newlink+0x43d/0x1830 [ 1006.370570] ? __lock_acquire+0x5fc/0x3f20 [ 1006.374799] ? trace_hardirqs_on+0x10/0x10 [ 1006.379245] ? rtnl_dellink+0x6a0/0x6a0 [ 1006.383205] ? trace_hardirqs_on+0x10/0x10 [ 1006.387430] ? perf_trace_lock_acquire+0x104/0x510 [ 1006.392376] ? lock_acquire+0x170/0x3f0 [ 1006.396481] ? lock_downgrade+0x740/0x740 [ 1006.400619] ? rtnl_dellink+0x6a0/0x6a0 [ 1006.404582] rtnetlink_rcv_msg+0x3be/0xb10 [ 1006.408981] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1006.413511] ? HARDIRQ_verbose+0x10/0x10 [ 1006.417565] netlink_rcv_skb+0x125/0x390 [ 1006.421920] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1006.426646] ? netlink_ack+0x9a0/0x9a0 [ 1006.430544] netlink_unicast+0x437/0x610 [ 1006.434656] ? netlink_sendskb+0xd0/0xd0 [ 1006.438721] ? __check_object_size+0x179/0x22c [ 1006.443330] netlink_sendmsg+0x62e/0xb80 [ 1006.447382] ? nlmsg_notify+0x170/0x170 [ 1006.451349] ? security_socket_sendmsg+0x83/0xb0 [ 1006.456094] ? nlmsg_notify+0x170/0x170 [ 1006.460056] sock_sendmsg+0xb5/0x100 [ 1006.463758] SyS_sendto+0x1c7/0x2c0 [ 1006.467376] ? SyS_getpeername+0x220/0x220 [ 1006.471663] ? sock_poll+0x220/0x220 [ 1006.475370] ? SyS_socket+0x12f/0x1b0 [ 1006.479160] ? move_addr_to_kernel+0x60/0x60 [ 1006.483555] ? __do_page_fault+0x159/0xad0 [ 1006.487777] ? do_syscall_64+0x4c/0x640 [ 1006.491845] ? SyS_getpeername+0x220/0x220 [ 1006.496076] do_syscall_64+0x1d5/0x640 [ 1006.499959] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1006.505297] RIP: 0033:0x417c97 [ 1006.508595] RSP: 002b:00007ffd1da00560 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1006.516492] RAX: ffffffffffffffda RBX: 00000000016b4300 RCX: 0000000000417c97 [ 1006.524097] RDX: 000000000000003c RSI: 00000000016b4350 RDI: 0000000000000003 [ 1006.531475] RBP: 0000000000000000 R08: 00007ffd1da00570 R09: 000000000000000c [ 1006.538737] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1006.546000] R13: 0000000000000000 R14: 00000000016b4350 R15: 0000000000000003 [ 1006.553374] Mem-Info: [ 1006.555780] active_anon:153298 inactive_anon:1121781 isolated_anon:0 [ 1006.555780] active_file:3024 inactive_file:5967 isolated_file:0 [ 1006.555780] unevictable:42496 dirty:51 writeback:0 unstable:0 [ 1006.555780] slab_reclaimable:13795 slab_unreclaimable:119469 [ 1006.555780] mapped:48634 shmem:25562 pagetables:7898 bounce:0 [ 1006.555780] free:26759 free_pcp:521 free_cma:0 [ 1006.590416] Node 0 active_anon:601832kB inactive_anon:1211828kB active_file:8060kB inactive_file:18780kB unevictable:169984kB isolated(anon):0kB isolated(file):0kB mapped:46360kB dirty:120kB writeback:0kB shmem:88352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 591872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1006.619466] Node 1 active_anon:11360kB inactive_anon:3275296kB active_file:4036kB inactive_file:5088kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148176kB dirty:84kB writeback:0kB shmem:13896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1006.647387] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:36kB inactive_anon:588kB active_file:4kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1006.674263] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1006.679283] Node 0 DMA32 free:38816kB min:36200kB low:45248kB high:54296kB active_anon:601796kB inactive_anon:1211240kB active_file:8056kB inactive_file:18760kB unevictable:169984kB writepending:120kB present:3129332kB managed:2788160kB mlocked:169984kB kernel_stack:8768kB pagetables:12292kB bounce:0kB free_pcp:1068kB local_pcp:516kB free_cma:0kB [ 1006.710116] lowmem_reserve[]: 0 0 0 0 0 [ 1006.714090] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1006.739589] lowmem_reserve[]: 0 0 0 0 0 [ 1006.743563] Node 1 Normal free:57152kB min:53696kB low:67120kB high:80544kB active_anon:11360kB inactive_anon:3275296kB active_file:4036kB inactive_file:5088kB unevictable:0kB writepending:84kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:4576kB pagetables:19296kB bounce:0kB free_pcp:1016kB local_pcp:456kB free_cma:0kB [ 1006.773316] lowmem_reserve[]: 0 0 0 0 0 [ 1006.777336] Node 0 DMA: 11*4kB (UME) 4*8kB (UME) 3*16kB (ME) 4*32kB (UME) 11*64kB (UME) 5*128kB (ME) 7*256kB (UME) 3*512kB (UME) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11068kB [ 1006.793339] Node 0 DMA32: 150*4kB (UMEH) 293*8kB (UM) 331*16kB (UMEH) 952*32kB (UH) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38768kB [ 1006.807420] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1006.818223] Node 1 Normal: 586*4kB (UME) 459*8kB (UME) 743*16kB (UME) 1186*32kB (M) 22*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 57264kB [ 1006.832474] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1006.841301] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1006.849865] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1006.858748] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1006.867370] 33982 total pagecache pages [ 1006.871334] 0 pages in swap cache [ 1006.874772] Swap cache stats: add 0, delete 0, find 0/0 [ 1006.880121] Free swap = 0kB [ 1006.883124] Total swap = 0kB [ 1006.886300] 2097051 pages RAM [ 1006.889438] 0 pages HighMem/MovableOnly [ 1006.893404] 363840 pages reserved [ 1006.896842] 0 pages cma reserved [ 1006.917948] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 1006.928277] ------------[ cut here ]------------ [ 1006.933065] WARNING: CPU: 0 PID: 31792 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 1006.942168] Kernel panic - not syncing: panic_on_warn set ... [ 1006.942168] [ 1006.949712] CPU: 0 PID: 31792 Comm: syz-executor.2 Not tainted 4.14.215-syzkaller #0 [ 1006.957816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1006.967162] Call Trace: [ 1006.969745] dump_stack+0x1b2/0x283 [ 1006.973539] panic+0x1f9/0x42d [ 1006.976727] ? add_taint.cold+0x16/0x16 [ 1006.980873] ? debug_print_object.cold+0xa7/0xdb [ 1006.985623] ? debug_print_object.cold+0xa7/0xdb [ 1006.990372] __warn.cold+0x20/0x4b [ 1006.993914] ? ist_end_non_atomic+0x10/0x10 [ 1006.998282] ? debug_print_object.cold+0xa7/0xdb [ 1007.003168] report_bug+0x208/0x249 [ 1007.006994] do_error_trap+0x195/0x2d0 [ 1007.010874] ? math_error+0x2d0/0x2d0 [ 1007.014680] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1007.019621] invalid_op+0x1b/0x40 [ 1007.023068] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 1007.028419] RSP: 0018:ffff8881c3ab7248 EFLAGS: 00010086 [ 1007.033861] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 1007.041263] RDX: 0000000000000000 RSI: ffffffff878bbb40 RDI: ffffed1038756e3f [ 1007.048641] RBP: ffffffff878b6e00 R08: 0000000000000061 R09: 0000000000000001 [ 1007.055989] R10: 0000000000000000 R11: ffff8880539d4340 R12: 0000000000000000 [ 1007.063484] R13: 0000000000000000 R14: ffff88804e94ec70 R15: 1ffff11038756e52 [ 1007.070765] ? debug_print_object.cold+0xa7/0xdb [ 1007.075528] debug_object_assert_init+0x1d3/0x2d0 [ 1007.080417] ? debug_object_active_state+0x330/0x330 [ 1007.085523] ? rtnl_newlink+0x14dc/0x1830 [ 1007.089672] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 1007.094070] ? netlink_rcv_skb+0x125/0x390 [ 1007.098484] del_timer+0x5d/0xe0 [ 1007.101925] ? process_timeout+0x20/0x20 [ 1007.106031] ? HARDIRQ_verbose+0x10/0x10 [ 1007.110126] try_to_grab_pending+0x243/0x610 [ 1007.114579] __cancel_work_timer+0x90/0x460 [ 1007.118898] ? work_on_cpu_safe+0x70/0x70 [ 1007.123040] ? batadv_tvlv_handler_get+0x1db/0x2b0 [ 1007.127965] batadv_nc_mesh_free+0x41/0x116 [ 1007.132469] batadv_mesh_free+0x70/0x150 [ 1007.136521] batadv_mesh_init+0x561/0x630 [ 1007.140786] batadv_softif_init_late+0xa26/0xc90 [ 1007.145533] ? batadv_get_strings+0x40/0x40 [ 1007.149843] ? dev_valid_name+0x1a0/0x1a0 [ 1007.153978] ? ehci_hub_control+0x1b13/0x1fc0 [ 1007.158474] ? batadv_get_strings+0x40/0x40 [ 1007.162800] register_netdevice+0x291/0xe40 [ 1007.167134] ? netdev_change_features+0xa0/0xa0 [ 1007.171810] ? rtnl_create_link+0x129/0x890 [ 1007.176257] rtnl_newlink+0x14dc/0x1830 [ 1007.180434] ? rtnl_newlink+0x43d/0x1830 [ 1007.184494] ? __lock_acquire+0x5fc/0x3f20 [ 1007.188724] ? trace_hardirqs_on+0x10/0x10 [ 1007.192949] ? rtnl_dellink+0x6a0/0x6a0 [ 1007.197152] ? trace_hardirqs_on+0x10/0x10 [ 1007.201374] ? perf_trace_lock_acquire+0x104/0x510 [ 1007.206311] ? lock_acquire+0x170/0x3f0 [ 1007.210271] ? lock_downgrade+0x740/0x740 [ 1007.214409] ? rtnl_dellink+0x6a0/0x6a0 [ 1007.218494] rtnetlink_rcv_msg+0x3be/0xb10 [ 1007.222720] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1007.227328] ? HARDIRQ_verbose+0x10/0x10 [ 1007.231382] netlink_rcv_skb+0x125/0x390 [ 1007.235434] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1007.239916] ? netlink_ack+0x9a0/0x9a0 [ 1007.243797] netlink_unicast+0x437/0x610 [ 1007.247857] ? netlink_sendskb+0xd0/0xd0 [ 1007.251909] ? __check_object_size+0x179/0x22c [ 1007.256625] netlink_sendmsg+0x62e/0xb80 [ 1007.260677] ? nlmsg_notify+0x170/0x170 [ 1007.264652] ? security_socket_sendmsg+0x83/0xb0 [ 1007.269548] ? nlmsg_notify+0x170/0x170 [ 1007.273511] sock_sendmsg+0xb5/0x100 [ 1007.277332] SyS_sendto+0x1c7/0x2c0 [ 1007.280989] ? SyS_getpeername+0x220/0x220 [ 1007.285220] ? sock_poll+0x220/0x220 [ 1007.288941] ? SyS_socket+0x12f/0x1b0 [ 1007.292865] ? move_addr_to_kernel+0x60/0x60 [ 1007.297281] ? __do_page_fault+0x159/0xad0 [ 1007.301521] ? do_syscall_64+0x4c/0x640 [ 1007.305489] ? SyS_getpeername+0x220/0x220 [ 1007.310036] do_syscall_64+0x1d5/0x640 [ 1007.313919] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1007.319193] RIP: 0033:0x417c97 [ 1007.322370] RSP: 002b:00007ffd1da00560 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1007.330138] RAX: ffffffffffffffda RBX: 00000000016b4300 RCX: 0000000000417c97 [ 1007.337407] RDX: 000000000000003c RSI: 00000000016b4350 RDI: 0000000000000003 [ 1007.344675] RBP: 0000000000000000 R08: 00007ffd1da00570 R09: 000000000000000c [ 1007.352318] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1007.359607] R13: 0000000000000000 R14: 00000000016b4350 R15: 0000000000000003 [ 1007.368317] Kernel Offset: disabled [ 1007.371966] Rebooting in 86400 seconds..