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"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x20d8}, 0x1, 0x0, 0x0, 0x24044000}, 0x20000000) 05:06:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x2, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:06:04 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x17a00, 0x1, 0x2}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000000c0)=""/132, &(0x7f0000000180)=0x84) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @remote}], 0x10) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:06:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000280)={0x8001, {{0x2, 0x4e23, @local}}, 0x0, 0x2, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e24, @private=0xa010101}}]}, 0x190) read$rfkill(r2, &(0x7f0000000100), 0x8) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 05:06:04 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1}) [ 1810.571833] 0 pages HighMem/MovableOnly [ 1810.575867] 363841 pages reserved [ 1810.579328] 0 pages cma reserved 05:06:04 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x4000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000100)={r2, 0x10}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) 05:06:04 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1}) 05:06:04 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x2, @pix_mp={0x7ff, 0xc79, 0x32314d59, 0x2, 0x1, [{0xfffffffd, 0x1}, {0x3, 0x101}, {0x7, 0x9}, {0x400, 0x1}, {0x0, 0x5}, {0x7fffffff, 0x1000}, {0x80000000, 0x8001}, {0x2, 0x7}], 0x6, 0x1, 0x6, 0x1}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x101, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000000c0)) 05:06:04 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1}) 05:06:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = socket$inet6(0xa, 0x8000b, 0x400) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x6, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000000)={@local, @broadcast, r2}, 0xc) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)={0x101, 0x1, 0x4, 0xe000, 0x80000001, {0x0, 0xea60}, {0x4, 0x0, 0x4, 0xff, 0x1, 0x25, "ffde88fb"}, 0x2, 0x4, @fd}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000080)={@loopback}, &(0x7f00000001c0)=0x14) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000040)=r2) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000000)={0x0, 0xa}) [ 1814.687957] oom_reaper: reaped process 2189 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1814.716735] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1814.731699] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1814.736486] CPU: 1 PID: 28186 Comm: syz-fuzzer Not tainted 4.14.227-syzkaller #0 [ 1814.744016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1814.753364] Call Trace: [ 1814.755954] dump_stack+0x1b2/0x281 [ 1814.759579] dump_header+0x178/0x82f [ 1814.763288] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1814.768385] ? ___ratelimit+0x2cd/0x530 [ 1814.772355] oom_kill_process.cold+0x10/0xb18 [ 1814.776855] out_of_memory+0xe3e/0x1190 [ 1814.780829] ? oom_killer_disable+0x1c0/0x1c0 [ 1814.785319] ? mutex_trylock+0x152/0x1a0 [ 1814.789374] __alloc_pages_nodemask+0x23e1/0x2720 [ 1814.794239] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1814.799169] alloc_pages_current+0x155/0x260 [ 1814.803565] filemap_fault+0xea3/0x1980 [ 1814.807637] ext4_filemap_fault+0x84/0xb0 [ 1814.812087] __do_fault+0xfa/0x380 [ 1814.812552] syz-executor.1: vmalloc: allocation failure, allocated 1635430400 of 2147487744 bytes [ 1814.815628] __handle_mm_fault+0x2497/0x4620 [ 1814.815639] ? vm_insert_page+0x7c0/0x7c0 [ 1814.828761] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 1814.829056] handle_mm_fault+0x391/0x860 [ 1814.836044] (null) [ 1814.839129] __do_page_fault+0x549/0xad0 [ 1814.847423] syz-executor.1 cpuset=/ [ 1814.849347] ? spurious_fault+0x640/0x640 [ 1814.849356] ? do_page_fault+0x60/0x500 [ 1814.856873] mems_allowed=0-1 [ 1814.857132] ? page_fault+0x2f/0x50 [ 1814.867849] page_fault+0x45/0x50 [ 1814.871292] RIP: 8a8900:0x1b13f1012b2 [ 1814.875076] RSP: 03e7:000000c0007a9e40 EFLAGS: 00000003 [ 1814.875096] CPU: 0 PID: 2189 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 1814.877436] Mem-Info: [ 1814.880454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1814.880458] Call Trace: [ 1814.880478] dump_stack+0x1b2/0x281 [ 1814.880492] warn_alloc.cold+0x96/0x1cc [ 1814.888272] active_anon:15541 inactive_anon:22188 isolated_anon:0 [ 1814.888272] active_file:40 inactive_file:5 isolated_file:0 [ 1814.888272] unevictable:0 dirty:0 writeback:27 unstable:0 [ 1814.888272] slab_reclaimable:15104 slab_unreclaimable:116957 [ 1814.888272] mapped:52660 shmem:23315 pagetables:717 bounce:0 [ 1814.888272] free:13895 free_pcp:423 free_cma:0 [ 1814.890659] ? zone_watermark_ok_safe+0x220/0x220 [ 1814.890683] __vmalloc_area_node+0x48a/0x680 [ 1814.900042] Node 0 active_anon:61788kB inactive_anon:67328kB active_file:120kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210624kB dirty:0kB writeback:76kB shmem:71700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1814.902591] ? __vmalloc_node_range+0x150/0x150 [ 1814.906196] Node 1 active_anon:376kB inactive_anon:21424kB active_file:40kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:32kB shmem:21560kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1814.910139] ? __get_vm_area_node+0x27d/0x340 [ 1814.910152] __vmalloc_node_range+0xbe/0x150 [ 1814.910173] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1814.943400] Node 0 [ 1814.948206] vmalloc_user+0x47/0xa0 [ 1814.952614] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1814.980417] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1814.980425] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1814.980435] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1814.985077] lowmem_reserve[]: [ 1815.011999] __vb2_queue_alloc+0x47a/0xd90 [ 1815.012018] vb2_core_create_bufs+0x279/0x5a0 [ 1815.012027] ? __vb2_queue_free+0x7a0/0x7a0 [ 1815.012041] ? futex_wait+0x42f/0x5a0 [ 1815.016538] 0 [ 1815.020980] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1815.020991] ? trace_hardirqs_on+0x10/0x10 [ 1815.021002] vb2_create_bufs+0x2e1/0x5b0 [ 1815.021015] ? vb2_thread_start+0x310/0x310 [ 1815.021033] ? futex_wait+0x42f/0x5a0 [ 1815.026374] 2717 [ 1815.028601] v4l_create_bufs+0xa4/0x150 [ 1815.032226] 2718 [ 1815.058153] __video_do_ioctl+0x65b/0x6a0 [ 1815.058171] ? video_ioctl2+0x30/0x30 [ 1815.058186] ? __might_fault+0x177/0x1b0 [ 1815.062612] 2718 [ 1815.067958] ? video_ioctl2+0x30/0x30 [ 1815.072088] 2718 [ 1815.075160] video_usercopy+0xfd/0xe70 [ 1815.083863] ? v4l_g_ctrl+0x390/0x390 [ 1815.088151] Node 0 [ 1815.091931] ? lock_acquire+0x170/0x3f0 [ 1815.091940] ? lock_downgrade+0x740/0x740 [ 1815.091952] ? trace_hardirqs_on+0x10/0x10 [ 1815.093740] DMA32 free:18012kB min:36200kB low:45248kB high:54296kB active_anon:61788kB inactive_anon:67328kB active_file:40kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7232kB pagetables:2808kB bounce:0kB free_pcp:880kB local_pcp:768kB free_cma:0kB [ 1815.099078] ? futex_exit_release+0x220/0x220 [ 1815.103300] lowmem_reserve[]: [ 1815.107330] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1815.111660] 0 [ 1815.115431] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1815.117466] 0 [ 1815.121424] v4l2_ioctl+0x1bb/0x2f0 [ 1815.121434] ? v4l2_open+0x2f0/0x2f0 [ 1815.121444] do_vfs_ioctl+0x75a/0xff0 [ 1815.123480] 0 [ 1815.127611] ? ioctl_preallocate+0x1a0/0x1a0 [ 1815.131399] 0 [ 1815.135445] ? lock_downgrade+0x740/0x740 [ 1815.137480] 0 [ 1815.141265] ? __fget+0x225/0x360 [ 1815.141275] ? do_vfs_ioctl+0xff0/0xff0 [ 1815.141286] ? security_file_ioctl+0x83/0xb0 [ 1815.147205] SyS_ioctl+0x7f/0xb0 [ 1815.151014] Node 0 [ 1815.153217] ? do_vfs_ioctl+0xff0/0xff0 [ 1815.157187] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1815.161326] do_syscall_64+0x1d5/0x640 [ 1815.161343] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1815.161351] RIP: 0033:0x466459 [ 1815.161354] RSP: 002b:00007f3ccef46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1815.165592] lowmem_reserve[]: [ 1815.193887] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1815.193892] RDX: 0000000020001880 RSI: 00000000c100565c RDI: 0000000000000003 [ 1815.193897] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1815.193901] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1815.193905] R13: 00007ffc5138c9ef R14: 00007f3ccef46300 R15: 0000000000022000 [ 1815.205295] Mem-Info: [ 1815.209055] 0 [ 1815.215427] active_anon:15535 inactive_anon:22188 isolated_anon:0 [ 1815.215427] active_file:12 inactive_file:12 isolated_file:0 [ 1815.215427] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1815.215427] slab_reclaimable:15104 slab_unreclaimable:116955 [ 1815.215427] mapped:52656 shmem:23315 pagetables:716 bounce:0 [ 1815.215427] free:13909 free_pcp:423 free_cma:0 [ 1815.218160] 0 [ 1815.219062] Node 0 active_anon:61764kB inactive_anon:67328kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210624kB dirty:0kB writeback:0kB shmem:71700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1815.225118] 0 [ 1815.228456] Node 1 active_anon:376kB inactive_anon:21424kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:21560kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1815.235735] 0 [ 1815.241025] Node 0 [ 1815.246442] 0 [ 1815.248104] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1815.257664] lowmem_reserve[]: [ 1815.258285] Node 1 [ 1815.264611] 0 [ 1815.289166] Normal free:26608kB min:53696kB low:67120kB high:80544kB active_anon:376kB inactive_anon:21424kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:60kB bounce:0kB free_pcp:812kB local_pcp:72kB free_cma:0kB [ 1815.297882] 2717 [ 1815.301301] lowmem_reserve[]: [ 1815.307276] 2718 [ 1815.310412] 0 0 0 0 0 [ 1815.310430] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) [ 1815.323901] 2718 [ 1815.326763] 0*256kB [ 1815.333315] 2718 [ 1815.333323] Node 0 DMA32 free:18068kB min:36200kB low:45248kB high:54296kB active_anon:61764kB inactive_anon:67328kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7232kB pagetables:2804kB bounce:0kB free_pcp:880kB local_pcp:112kB free_cma:0kB [ 1815.333343] lowmem_reserve[]: 0 0 0 0 0 [ 1815.333361] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1815.333379] lowmem_reserve[]: 0 0 0 0 0 [ 1815.333394] Node 1 Normal free:26608kB min:53696kB low:67120kB high:80544kB active_anon:376kB inactive_anon:21424kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:60kB bounce:0kB free_pcp:812kB local_pcp:740kB free_cma:0kB [ 1815.333414] lowmem_reserve[]: 0 0 0 0 0 [ 1815.333433] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10960kB [ 1815.333497] Node 0 DMA32: 559*4kB (ME) 839*8kB (ME) 268*16kB (UME) 63*32kB (UME) 28*64kB (UME) 4*128kB (UME) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18068kB [ 1815.333560] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1815.333607] Node 1 Normal: 74*4kB (ME) 71*8kB (UME) 57*16kB (ME) 54*32kB (UME) 27*64kB (UM) 19*128kB (UM) 6*256kB (M) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (U) 3*4096kB (UM) = 26608kB [ 1815.333687] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1815.333693] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1815.333698] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1815.333703] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1815.333707] 23339 total pagecache pages [ 1815.333717] 0 pages in swap cache [ 1815.333722] Swap cache stats: add 0, delete 0, find 0/0 [ 1815.333726] Free swap = 0kB [ 1815.333729] Total swap = 0kB [ 1815.333735] 2097051 pages RAM [ 1815.333739] 0 pages HighMem/MovableOnly [ 1815.333742] 363841 pages reserved [ 1815.333745] 0 pages cma reserved [ 1815.761303] 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10960kB [ 1815.767840] Node 0 DMA32: 559*4kB (ME) 839*8kB (ME) 268*16kB (UME) 63*32kB (UME) 28*64kB (UME) 4*128kB (UME) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18068kB [ 1815.786733] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1815.797541] Node 1 Normal: 74*4kB (ME) 71*8kB (UME) 57*16kB (ME) 54*32kB (UME) 27*64kB (UM) 19*128kB (UM) 6*256kB (M) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (U) 3*4096kB (UM) = 26608kB [ 1815.818073] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1815.827001] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1815.839467] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1815.848325] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1815.859096] 23339 total pagecache pages [ 1815.863094] 0 pages in swap cache [ 1815.866642] Swap cache stats: add 0, delete 0, find 0/0 [ 1815.873978] Free swap = 0kB [ 1815.877002] Total swap = 0kB [ 1815.882706] 2097051 pages RAM [ 1815.885815] 0 pages HighMem/MovableOnly [ 1815.890048] 363841 pages reserved [ 1815.893500] 0 pages cma reserved [ 1815.896858] Out of memory (oom_kill_allocating_task): Kill process 28186 (syz-fuzzer) score 0 or sacrifice child [ 1815.907887] Killed process 425 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1815.924068] oom_reaper: reaped process 425 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1816.461607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1816.468347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1816.481789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1816.490595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1816.502709] device bridge_slave_1 left promiscuous mode [ 1816.508246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1816.520606] device bridge_slave_0 left promiscuous mode [ 1816.526138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1816.543520] device veth1_macvtap left promiscuous mode [ 1816.550827] device veth0_macvtap left promiscuous mode [ 1816.556785] device veth1_vlan left promiscuous mode [ 1816.568139] device veth0_vlan left promiscuous mode [ 1816.714347] device hsr_slave_1 left promiscuous mode [ 1816.727319] device hsr_slave_0 left promiscuous mode [ 1816.750877] team0 (unregistering): Port device team_slave_1 removed [ 1816.764650] team0 (unregistering): Port device team_slave_0 removed [ 1816.776341] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1816.793272] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1816.834498] bond0 (unregistering): Released all slaves [ 1817.567923] Bluetooth: hci4 command 0x0406 tx timeout 05:06:13 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0xffffffffffdfffff, 0x8400) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000040)) 05:06:13 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x5c, 0x15, 0x100, 0x70bd2b, 0x25dfdbfd, {0x8, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x45, 0x1, "f90fce46bf532f448d287f395193f62b4893ccecacba140781ff32d5bc11e0a409b42998f01021fd7cfd4654af730aca22a8a44b7fb5e3fbaf698cdb83093c4c9a"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24040040}, 0x800) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:06:13 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000280)={0x8001, {{0x2, 0x4e23, @local}}, 0x0, 0x2, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e24, @private=0xa010101}}]}, 0x190) read$rfkill(r2, &(0x7f0000000100), 0x8) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 05:06:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x3f, 0x0, 0x4}) 05:06:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x5f7, 0x7ff, 0x2, {0x1, @sdr={0x34325842, 0xffffff7f}}, 0x400}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140)='gtp\x00', r1) 05:06:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x2, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:06:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x9, 0x0, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x7, 0x4, 0x3, {0x1, @sliced={0x5c, [0x0, 0xfff, 0x401, 0x8000, 0x4, 0x20, 0x1000, 0x7d2, 0xe59, 0x7, 0x1, 0x225, 0xf02, 0x2, 0x7ff, 0x8, 0x7, 0x400, 0x81, 0x18, 0x8, 0xffc0, 0x83ef, 0x9, 0x3ff, 0xff, 0x8000, 0x1, 0x2, 0x6, 0x11, 0x1, 0x2, 0x1, 0x5, 0x1800, 0x6, 0x4, 0x7, 0x1, 0x7, 0x3f, 0x1f, 0x9, 0x3, 0x3f, 0x1, 0x9], 0x5}}, 0x140}) 05:06:13 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247, 0x0, 0x0, [{}, {0x0, 0xfffffe00}, {}, {0x80000000}]}}) 05:06:13 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000000)={0x4, 0x2, 0x4, 0xe000, 0x2, {}, {0x2, 0xc, 0xff, 0x7f, 0x0, 0xf8, "b7ec944d"}, 0xff, 0x1, @userptr=0x10000, 0x3, 0x0, r1}) 05:06:13 executing program 4: r0 = socket$inet6(0xa, 0x800, 0x634) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44041}, 0x40004) 05:06:13 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @vbi={0x1f, 0xfff, 0x10000, 0x47314356, [0x1000, 0x3], [0x80000001, 0x8], 0x13a}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)=0x1) 05:06:13 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x0, 0x1}) 05:06:13 executing program 4: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:06:13 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x5, 0x2, 0x1}) [ 1821.939433] IPVS: ftp: loaded support on port[0] = 21 [ 1822.192905] chnl_net:caif_netlink_parms(): no params data found [ 1822.424779] bridge0: port 1(bridge_slave_0) entered blocking state [ 1822.435791] bridge0: port 1(bridge_slave_0) entered disabled state [ 1822.443232] device bridge_slave_0 entered promiscuous mode [ 1822.458429] bridge0: port 2(bridge_slave_1) entered blocking state [ 1822.465042] bridge0: port 2(bridge_slave_1) entered disabled state [ 1822.475527] device bridge_slave_1 entered promiscuous mode [ 1822.510411] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1822.521413] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1822.556540] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1822.564627] team0: Port device team_slave_0 added [ 1822.574466] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1822.582212] team0: Port device team_slave_1 added [ 1822.617720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1822.624330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1822.654089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1822.666359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1822.672699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1822.705277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1822.719945] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1822.727994] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1822.762098] device hsr_slave_0 entered promiscuous mode [ 1822.772895] device hsr_slave_1 entered promiscuous mode [ 1822.779907] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1822.791218] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1822.926423] bridge0: port 2(bridge_slave_1) entered blocking state [ 1822.932813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1822.939527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1822.945941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1822.999971] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1823.008835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1823.020760] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1823.033080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1823.043025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1823.052219] bridge0: port 2(bridge_slave_1) entered disabled state [ 1823.067692] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1823.073795] 8021q: adding VLAN 0 to HW filter on device team0 [ 1823.089751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1823.099918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1823.106619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1823.128811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1823.140068] bridge0: port 2(bridge_slave_1) entered blocking state [ 1823.146971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1823.167880] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1823.180094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1823.189288] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1823.203330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1823.212311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1823.225012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1823.236186] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1823.251357] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1823.259185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1823.272242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1823.281522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1823.294217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1823.305102] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1823.311214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1823.335224] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1823.343212] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1823.358143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1823.366814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1823.377987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1823.473513] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1823.492144] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1823.500348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1823.514145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1823.560446] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1823.568035] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1823.576384] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1823.586943] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1823.593592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1823.603033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1823.613403] device veth0_vlan entered promiscuous mode [ 1823.624405] device veth1_vlan entered promiscuous mode [ 1823.632202] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1823.639907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1823.648689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1823.656757] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1823.666668] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1823.681342] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1823.691369] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1823.700210] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1823.709662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1823.718181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1823.729214] device veth0_macvtap entered promiscuous mode [ 1823.736809] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1823.747178] device veth1_macvtap entered promiscuous mode [ 1823.753492] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1823.764004] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1823.776011] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1823.786223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1823.796023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1823.806623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1823.817372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1823.827332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1823.838020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1823.848494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1823.859013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1823.868896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1823.879650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1823.891120] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1823.899282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1823.906894] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1823.914269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1823.924331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1823.932821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1823.947445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1823.958315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1823.968581] Bluetooth: hci1 command 0x0409 tx timeout [ 1823.974049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1823.986109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1823.996045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1824.006520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1824.016706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1824.027386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1824.037239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1824.048034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1824.059085] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1824.067185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1824.074054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1824.083358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1824.559602] oom_reaper: reaped process 2240 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1824.628710] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1824.642293] systemd-journal cpuset=/ mems_allowed=0-1 [ 1824.647608] CPU: 0 PID: 1987 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 1824.655507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1824.665177] Call Trace: [ 1824.667779] dump_stack+0x1b2/0x281 [ 1824.671409] dump_header+0x178/0x82f [ 1824.675123] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1824.680221] ? ___ratelimit+0x2cd/0x530 [ 1824.684192] oom_kill_process.cold+0x10/0xb18 [ 1824.688702] out_of_memory+0xe3e/0x1190 [ 1824.692673] ? oom_killer_disable+0x1c0/0x1c0 [ 1824.697161] ? mutex_trylock+0x152/0x1a0 [ 1824.701339] __alloc_pages_nodemask+0x23e1/0x2720 [ 1824.706175] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1824.711118] alloc_pages_current+0x155/0x260 [ 1824.715617] filemap_fault+0xea3/0x1980 [ 1824.719582] ext4_filemap_fault+0x84/0xb0 [ 1824.723735] __do_fault+0xfa/0x380 [ 1824.727286] __handle_mm_fault+0x2497/0x4620 [ 1824.731681] ? ep_poll+0x1ab/0xa50 [ 1824.735203] ? vm_insert_page+0x7c0/0x7c0 [ 1824.739357] handle_mm_fault+0x391/0x860 [ 1824.743402] __do_page_fault+0x549/0xad0 [ 1824.747443] ? spurious_fault+0x640/0x640 [ 1824.751573] ? do_page_fault+0x60/0x500 [ 1824.755527] ? page_fault+0x2f/0x50 [ 1824.759148] page_fault+0x45/0x50 [ 1824.762592] RIP: 0001:0xffffffffffffffff [ 1824.766626] RSP: 370ff1e0:00007ffc2583f4e0 EFLAGS: 7ffc2583f2f0 [ 1824.770979] Mem-Info: [ 1824.777148] syz-executor.1: vmalloc: allocation failure, allocated 1624670208 of 2147487744 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1824.777173] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1824.777192] CPU: 0 PID: 2240 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 1824.777198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1824.777201] Call Trace: [ 1824.777223] dump_stack+0x1b2/0x281 [ 1824.777237] warn_alloc.cold+0x96/0x1cc [ 1824.777248] ? zone_watermark_ok_safe+0x220/0x220 [ 1824.777257] ? retint_kernel+0x2d/0x2d [ 1824.777279] __vmalloc_area_node+0x48a/0x680 [ 1824.777293] ? __vmalloc_node_range+0x150/0x150 [ 1824.777302] ? __get_vm_area_node+0x27d/0x340 [ 1824.785448] active_anon:14302 inactive_anon:22188 isolated_anon:0 [ 1824.785448] active_file:16 inactive_file:11 isolated_file:0 [ 1824.785448] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1824.785448] slab_reclaimable:15108 slab_unreclaimable:115127 [ 1824.785448] mapped:52694 shmem:23316 pagetables:764 bounce:0 [ 1824.785448] free:14147 free_pcp:0 free_cma:0 [ 1824.793567] __vmalloc_node_range+0xbe/0x150 [ 1824.798818] Node 0 active_anon:56168kB inactive_anon:67316kB active_file:52kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210776kB dirty:0kB writeback:0kB shmem:71684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1824.806578] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1824.806588] vmalloc_user+0x47/0xa0 [ 1824.806596] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1824.806603] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1824.806613] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1824.806624] __vb2_queue_alloc+0x47a/0xd90 [ 1824.815999] Node 1 active_anon:1040kB inactive_anon:21436kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:21580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1824.818557] vb2_core_create_bufs+0x279/0x5a0 [ 1824.822149] Node 0 [ 1824.826110] ? __vb2_queue_free+0x7a0/0x7a0 [ 1824.826123] ? futex_wait+0x42f/0x5a0 [ 1824.826136] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1824.830987] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1824.834858] ? trace_hardirqs_on+0x10/0x10 [ 1824.834871] vb2_create_bufs+0x2e1/0x5b0 [ 1824.834883] ? vb2_thread_start+0x310/0x310 [ 1824.834893] ? futex_wait+0x42f/0x5a0 [ 1824.834909] v4l_create_bufs+0xa4/0x150 [ 1824.839436] lowmem_reserve[]: [ 1824.844202] __video_do_ioctl+0x65b/0x6a0 [ 1824.844216] ? video_ioctl2+0x30/0x30 [ 1824.844226] ? __might_fault+0x177/0x1b0 [ 1824.844239] ? video_ioctl2+0x30/0x30 [ 1824.848720] 0 [ 1824.881770] video_usercopy+0xfd/0xe70 [ 1824.881784] ? v4l_g_ctrl+0x390/0x390 [ 1824.881793] ? lock_acquire+0x170/0x3f0 [ 1824.881803] ? lock_downgrade+0x740/0x740 [ 1824.886463] 2717 [ 1824.914128] ? trace_hardirqs_on+0x10/0x10 [ 1824.914139] ? futex_exit_release+0x220/0x220 [ 1824.914156] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1824.919522] 2718 [ 1824.923168] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1824.927521] 2718 [ 1824.932838] v4l2_ioctl+0x1bb/0x2f0 [ 1824.936998] 2718 [ 1824.941206] ? v4l2_open+0x2f0/0x2f0 [ 1824.972916] do_vfs_ioctl+0x75a/0xff0 [ 1824.975143] Node 0 [ 1824.979440] ? ioctl_preallocate+0x1a0/0x1a0 [ 1824.983221] DMA32 free:18644kB min:36200kB low:45248kB high:54296kB active_anon:56168kB inactive_anon:67316kB active_file:52kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7200kB pagetables:2800kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1824.988572] ? lock_downgrade+0x740/0x740 [ 1824.988585] ? __fget+0x225/0x360 [ 1824.988594] ? do_vfs_ioctl+0xff0/0xff0 [ 1825.014260] lowmem_reserve[]: [ 1825.018463] ? security_file_ioctl+0x83/0xb0 [ 1825.022495] 0 [ 1825.026821] SyS_ioctl+0x7f/0xb0 [ 1825.026831] ? do_vfs_ioctl+0xff0/0xff0 [ 1825.026841] do_syscall_64+0x1d5/0x640 [ 1825.026856] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1825.026867] RIP: 0033:0x466459 [ 1825.030682] 0 [ 1825.034644] RSP: 002b:00007f3ccef46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1825.034653] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1825.034657] RDX: 0000000020001880 RSI: 00000000c100565c RDI: 0000000000000003 [ 1825.034661] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1825.034665] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1825.034670] R13: 00007ffc5138c9ef R14: 00007f3ccef46300 R15: 0000000000022000 [ 1825.047241] Mem-Info: [ 1825.064971] 0 [ 1825.070429] active_anon:14302 inactive_anon:22188 isolated_anon:0 [ 1825.070429] active_file:13 inactive_file:14 isolated_file:0 [ 1825.070429] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1825.070429] slab_reclaimable:15108 slab_unreclaimable:115127 [ 1825.070429] mapped:52694 shmem:23316 pagetables:764 bounce:0 [ 1825.070429] free:14147 free_pcp:0 free_cma:0 [ 1825.072752] 0 [ 1825.078285] Node 0 active_anon:56168kB inactive_anon:67316kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210776kB dirty:0kB writeback:0kB shmem:71684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1825.086281] 0 [ 1825.091561] Node 1 active_anon:1040kB inactive_anon:21436kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:21580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1825.101831] Node 0 [ 1825.102160] Node 0 [ 1825.106200] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1825.113159] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1825.117387] lowmem_reserve[]: [ 1825.120293] lowmem_reserve[]: [ 1825.152058] 0 [ 1825.162486] 0 [ 1825.177898] 2717 [ 1825.186319] 0 [ 1825.189468] 2718 [ 1825.189630] 0 [ 1825.201050] 2718 [ 1825.211994] 0 [ 1825.213651] 2718 [ 1825.219325] 0 [ 1825.219334] Node 1 Normal free:26984kB min:53696kB low:67120kB high:80544kB active_anon:1040kB inactive_anon:21436kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:256kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1825.219350] lowmem_reserve[]: 0 0 0 0 0 [ 1825.219366] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10960kB [ 1825.219427] Node 0 DMA32: 375*4kB (UME) 781*8kB (UME) 239*16kB (UME) 75*32kB (UME) 27*64kB (UME) 13*128kB (UME) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18644kB [ 1825.219492] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1825.219538] Node 1 Normal: 88*4kB (ME) 67*8kB (UME) 53*16kB (UME) 49*32kB (ME) 32*64kB (UM) 7*128kB (M) 9*256kB (M) 2*512kB [ 1825.241470] (ME) [ 1825.280589] Node 0 [ 1825.303392] 3*1024kB [ 1825.314150] DMA32 free:18644kB min:36200kB low:45248kB high:54296kB active_anon:56168kB inactive_anon:67316kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7200kB pagetables:2800kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1825.332551] (UME) [ 1825.344983] lowmem_reserve[]: [ 1825.365580] 1*2048kB [ 1825.395142] 0 [ 1825.399342] (U) [ 1825.399700] 0 [ 1825.401744] 3*4096kB [ 1825.403536] 0 0 [ 1825.405656] (UM) = 26984kB [ 1825.405668] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1825.405674] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1825.405680] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1825.405685] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1825.405689] 23343 total pagecache pages [ 1825.405698] 0 pages in swap cache [ 1825.405702] Swap cache stats: add 0, delete 0, find 0/0 [ 1825.405705] Free swap = 0kB [ 1825.405707] Total swap = 0kB [ 1825.405713] 2097051 pages RAM [ 1825.405717] 0 pages HighMem/MovableOnly [ 1825.405720] 363841 pages reserved [ 1825.405723] 0 pages cma reserved [ 1825.405729] Out of memory (oom_kill_allocating_task): Kill process 1987 (systemd-journal) score 0 or sacrifice child [ 1825.405757] Killed process 1987 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1852kB [ 1825.406470] oom_reaper: reaped process 1987 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1852kB [ 1825.412456] 0 [ 1825.452228] kworker/u4:8 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask= [ 1825.488246] (null) [ 1825.506335] Node 0 [ 1825.533488] , order=3, oom_score_adj=0 [ 1825.545738] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1825.545742] lowmem_reserve[]: 0 0 0 0 0 [ 1825.545763] Node 1 Normal free:27084kB min:53696kB low:67120kB high:80544kB active_anon:940kB inactive_anon:21436kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:256kB bounce:0kB free_pcp:76kB local_pcp:0kB free_cma:0kB [ 1825.545783] lowmem_reserve[]: 0 0 0 0 [ 1825.552035] kworker/u4:8 cpuset= [ 1825.577830] 0 [ 1825.583021] / [ 1825.604291] mems_allowed=0-1 [ 1825.612083] Node 0 [ 1825.615725] CPU: 1 PID: 20312 Comm: kworker/u4:8 Not tainted 4.14.227-syzkaller #0 [ 1825.622467] DMA: [ 1825.631403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1825.631421] Workqueue: events_unbound call_usermodehelper_exec_work [ 1825.631427] Call Trace: [ 1825.631442] dump_stack+0x1b2/0x281 [ 1825.631453] dump_header+0x178/0x82f [ 1825.631462] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1825.631469] ? ___ratelimit+0x2cd/0x530 [ 1825.631478] oom_kill_process.cold+0x10/0xb18 [ 1825.631489] ? lock_downgrade+0x740/0x740 [ 1825.631501] out_of_memory+0x2dc/0x1190 [ 1825.631513] ? oom_killer_disable+0x1c0/0x1c0 [ 1825.631519] ? mutex_trylock+0x152/0x1a0 [ 1825.631530] __alloc_pages_nodemask+0x23e1/0x2720 [ 1825.653894] 0*4kB [ 1825.654033] ? trace_hardirqs_on+0x10/0x10 [ 1825.674024] 0*8kB [ 1825.696896] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1825.696904] ? fs_reclaim_release+0xd0/0x110 [ 1825.696921] ? kmem_cache_alloc_node+0x38b/0x410 [ 1825.696931] copy_process.part.0+0x265/0x71c0 [ 1825.696943] ? __lock_acquire+0x5fc/0x3f20 [ 1825.696956] ? debug_object_activate+0x292/0x490 [ 1825.696963] ? trace_hardirqs_on+0x10/0x10 [ 1825.696970] ? static_obj+0x50/0x50 [ 1825.696982] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1825.696991] ? __cleanup_sighand+0x40/0x40 [ 1825.697002] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1825.697010] _do_fork+0x184/0xc80 [ 1825.697019] ? fork_idle+0x270/0x270 [ 1825.697031] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1825.697039] ? process_one_work+0x6c4/0x14a0 [ 1825.697045] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1825.697054] kernel_thread+0x2f/0x40 [ 1825.697062] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1825.697071] ? call_usermodehelper+0x80/0x80 [ 1825.697079] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1825.697089] process_one_work+0x793/0x14a0 [ 1825.697100] ? work_busy+0x320/0x320 [ 1825.697106] ? worker_thread+0x158/0xff0 [ 1825.697115] ? _raw_spin_unlock_irq+0x24/0x80 [ 1825.697125] worker_thread+0x5cc/0xff0 [ 1825.697138] ? rescuer_thread+0xc80/0xc80 [ 1825.697147] kthread+0x30d/0x420 [ 1825.697154] ? kthread_create_on_node+0xd0/0xd0 [ 1825.697161] ret_from_fork+0x24/0x30 [ 1825.701294] Mem-Info: [ 1825.711944] 1*16kB [ 1825.733327] active_anon:14202 inactive_anon:22188 isolated_anon:0 [ 1825.733327] active_file:13 inactive_file:14 isolated_file:0 [ 1825.733327] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1825.733327] slab_reclaimable:15108 slab_unreclaimable:115127 [ 1825.733327] mapped:52244 shmem:23316 pagetables:764 bounce:0 [ 1825.733327] free:14247 free_pcp:30 free_cma:0 [ 1825.744403] (U) [ 1825.749979] Node 0 active_anon:55868kB inactive_anon:67316kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208976kB dirty:0kB writeback:0kB shmem:71684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1825.762865] 0*32kB [ 1825.769013] Node 1 active_anon:940kB inactive_anon:21436kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:21580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1825.773195] 1*64kB [ 1825.774707] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1825.774725] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1825.774745] Node 0 DMA32 free:18944kB min:36200kB low:45248kB high:54296kB active_anon:55868kB inactive_anon:67316kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7200kB pagetables:2800kB bounce:0kB free_pcp:44kB local_pcp:44kB free_cma:0kB [ 1825.774762] lowmem_reserve[]: 0 0 [ 1825.787119] (U) [ 1825.790658] 0 [ 1825.791141] 1*128kB [ 1825.795673] 0 0 [ 1825.795683] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1825.795701] lowmem_reserve[]: [ 1825.811037] (U) [ 1825.815210] 0 [ 1825.820720] 0*256kB [ 1825.826559] 0 [ 1825.840188] 1*512kB [ 1825.847813] 0 [ 1825.851499] (U) [ 1825.853859] 0 0 [ 1825.853870] Node 1 Normal free:27084kB min:53696kB low:67120kB high:80544kB active_anon:940kB inactive_anon:21436kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:256kB bounce:0kB free_pcp:76kB local_pcp:76kB free_cma:0kB [ 1825.853888] lowmem_reserve[]: 0 0 0 0 0 [ 1825.853906] Node 0 DMA: 0*4kB 0*8kB [ 1825.868510] 0*1024kB [ 1825.875015] 1*16kB [ 1825.880898] 1*2048kB [ 1825.887999] (U) [ 1825.900336] (M) [ 1825.903301] 0*32kB [ 1825.912047] 2*4096kB [ 1825.916582] 1*64kB [ 1825.927929] (M) [ 1825.936823] (U) [ 1825.943223] = 10960kB [ 1825.945885] 1*128kB [ 1825.952586] Node 0 [ 1825.959731] (U) [ 1825.968605] DMA32: [ 1826.002342] 0*256kB [ 1826.028655] 374*4kB [ 1826.054704] 1*512kB [ 1826.061486] Bluetooth: hci1 command 0x041b tx timeout [ 1826.090952] (U) [ 1826.122866] (UME) [ 1826.130284] 0*1024kB [ 1826.158889] 786*8kB [ 1826.170665] 1*2048kB [ 1826.171134] (UME) [ 1826.173057] (M) [ 1826.207537] 252*16kB [ 1826.221145] 2*4096kB [ 1826.222556] (UME) [ 1826.225488] (M) [ 1826.226157] 76*32kB [ 1826.228355] = 10960kB [ 1826.231450] (UME) [ 1826.242369] Node 0 [ 1826.246178] 26*64kB [ 1826.249265] DMA32: [ 1826.249712] (UME) [ 1826.252113] 374*4kB [ 1826.257483] 12*128kB (UME) 4*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18984kB [ 1826.257523] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1826.257572] Node 1 Normal: 81*4kB (ME) 66*8kB (UME) 45*16kB (UME) 39*32kB (UME) 31*64kB (UM) 13*128kB (M) 9*256kB (M) 2*512kB (ME) [ 1826.268698] (UME) [ 1826.272336] 3*1024kB [ 1826.273129] 786*8kB (UME) [ 1826.275835] (UME) [ 1826.283327] 252*16kB [ 1826.288431] 1*2048kB [ 1826.289127] (UME) [ 1826.291355] (U) [ 1826.304556] 76*32kB [ 1826.313962] 3*4096kB [ 1826.331710] (UME) [ 1826.333364] (UM) [ 1826.338706] 26*64kB [ 1826.340654] = 27204kB [ 1826.342792] (UME) [ 1826.345215] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1826.345221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1826.345227] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1826.345233] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1826.345237] 23343 total pagecache pages [ 1826.345246] 0 pages in swap cache [ 1826.345252] Swap cache stats: add 0, delete 0, find 0/0 [ 1826.345255] Free swap = 0kB [ 1826.345258] Total swap = 0kB [ 1826.345265] 2097051 pages RAM [ 1826.345268] 0 pages HighMem/MovableOnly [ 1826.345271] 363841 pages reserved [ 1826.345275] 0 pages cma reserved [ 1826.456967] 12*128kB (UME) 4*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18984kB [ 1826.479901] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1826.496941] Node 1 Normal: 81*4kB (ME) 66*8kB (UME) 45*16kB (UME) 39*32kB (UME) 31*64kB (UM) 13*128kB (M) 9*256kB (M) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (U) 3*4096kB (UM) = 27204kB [ 1826.529617] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1826.557653] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1826.581643] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1826.595172] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1826.618141] 23343 total pagecache pages [ 1826.622145] 0 pages in swap cache [ 1826.638883] Swap cache stats: add 0, delete 0, find 0/0 [ 1826.649984] Free swap = 0kB [ 1826.653047] Total swap = 0kB [ 1826.669467] 2097051 pages RAM [ 1826.672607] 0 pages HighMem/MovableOnly [ 1826.682088] 363841 pages reserved [ 1826.693015] 0 pages cma reserved [ 1826.701990] Out of memory: Kill process 2514 (syz-executor.2) score 1004 or sacrifice child [ 1826.719774] Killed process 2514 (syz-executor.2) total-vm:93516kB, anon-rss:152kB, file-rss:34580kB, shmem-rss:0kB [ 1826.760902] oom_reaper: reaped process 2514 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 05:06:21 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) 05:06:21 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000280)={0x8001, {{0x2, 0x4e23, @local}}, 0x0, 0x2, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e24, @private=0xa010101}}]}, 0x190) read$rfkill(r2, &(0x7f0000000100), 0x8) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 1826.934660] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1826.956024] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1826.993712] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1827.000547] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1827.028960] systemd[1]: Stopped Journal Service. [ 1827.059583] systemd[1]: Starting Journal Service... [ 1827.300794] systemd-journald[2524]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1827.684750] systemd[1]: Started Journal Service. [ 1828.282664] Bluetooth: hci1 command 0x040f tx timeout 05:06:24 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x7f, @loopback, 0x4e21, 0x0, 'fo\x00', 0x2, 0xfff, 0x39}, 0x2c) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, [], 0x13}, 0x10000}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0x9, @mcast2, 0x10001}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0xbb, @mcast1, 0x80000001}], 0xa4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6}]}, 0x1c}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000380)='/dev/video#\x00', 0x8000, 0x2) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r3, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040005) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000040)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000003c0)={0x49, 0x5, 0x2, "9293509bb0d44c3e9a84963438c3bca7bd816f008f98d5aaf5a705ff98cde08a960df5395ceefa3c2ebb75d982644117677cad09d6a6735faed72ed818e574e2a30d688de1f4e76186"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, 0x0, 0x0) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 05:06:24 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @vbi={0x7, 0x7, 0x3, 0x3147504d, [0x5, 0x1000], [0x0, 0x101], 0x1}}}) 05:06:24 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x2, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:06:24 executing program 2: r0 = socket$inet6(0xa, 0x800, 0x634) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44041}, 0x40004) 05:06:24 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)={0x1, 0x1, 0x4, 0x70000, 0x1, {0x77359400}, {0x5, 0x8, 0x5, 0x3f, 0xae, 0xce, "d48eb09f"}, 0x7, 0x1, @planes=&(0x7f00000000c0)={0xffffffff, 0xfffffffa, @mem_offset=0x401, 0x485}, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) 05:06:24 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:06:24 executing program 4: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000040)) r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000000c0)={0x5, 0x3, 0x4, 0x20, 0x3, {}, {0x4, 0x1, 0x4, 0x9, 0x8, 0x1, "deb22054"}, 0x8, 0xad75e05679277501, @userptr=0x7ba, 0x1}) 05:06:24 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x17a00, 0x1, 0x2}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000000c0)=""/132, &(0x7f0000000180)=0x84) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @remote}], 0x10) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:06:24 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x20000, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix_mp={0x0, 0x0, 0x59455247, 0x0, 0x0, [{}, {}, {0xffff}], 0x0, 0x0, 0x8}}) r2 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x80000000, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000240)={0x7, 0x0, 0x4, 0x4000, 0x9, {0x0, 0x2710}, {0x1, 0xc, 0x1f, 0x80, 0x5, 0x6, "130936bf"}, 0x9, 0x2, @planes=&(0x7f00000000c0)={0x2, 0x7, @userptr=0xb1, 0x5}, 0x200}) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000100)) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@local, @broadcast, r4}, 0xc) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2a}}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000085}, 0x4004000) r6 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x4, 0x1) ioctl$SCSI_IOCTL_DOORUNLOCK(r6, 0x5381) 05:06:24 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x10000, 0x2) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000100)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x6, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xe) r2 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) write$rfkill(r1, &(0x7f0000000280)={0x2, 0x5, 0x3, 0x1, 0x1}, 0x8) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x200, 0x1, 0x1}) r3 = socket(0x10, 0x6, 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e24, 0x13e3, @mcast2, 0xfffffffe}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e20, 0x4, @empty, 0x40}], 0xa8) 05:06:24 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247, 0x0, 0x0, [{}, {0x0, 0x26dd}, {}, {0x2}], 0x0, 0x2}}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x3f, 0x2, 0x4, 0x2000, 0x4, {r1, r2/1000+60000}, {0x2, 0x1, 0x4d, 0x7f, 0x7, 0x1, "398eae31"}, 0x7, 0x4, @planes=&(0x7f0000000040)={0x3, 0xfff, @fd, 0x401}, 0x2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000380)={@multicast2, @multicast1, 0x1, 0x5, [@remote, @remote, @empty, @loopback, @loopback]}, 0x24) clock_getres(0x2, &(0x7f0000000340)) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x0, @sdr={0x50323234, 0x7f}}) 05:06:24 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x401, 0x1, 0x1}) 05:06:24 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34325241, 0x9, 0x0, [{0x0, 0x1ff}, {0x80000000, 0x7}, {}, {}, {}, {}, {0x0, 0x2}]}}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x800, 0x600801) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f00000000c0)=0x3) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x9, 0x0, 0x2, {0x2, @sliced={0x8001, [0x5fd, 0x100, 0x3, 0x80, 0x0, 0x3, 0x4646, 0x1, 0x8001, 0x7, 0xffff, 0x1000, 0x41, 0x0, 0x235, 0x8001, 0x5, 0x9, 0x2, 0x3, 0x3, 0xea, 0x3, 0xa0, 0x8, 0x5, 0x4, 0x7fff, 0x8, 0x5, 0x200, 0x0, 0xfff, 0x800, 0x5, 0x1000, 0x81, 0x1ff, 0x0, 0x9, 0x3, 0x8, 0xfffc, 0x1, 0x95b, 0xfa2, 0x7b75, 0x7fff]}}}) 05:06:24 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x3, @pix_mp={0x5, 0xff, 0x34325258, 0xc, 0x1, [{0x7f, 0x5}, {0x40, 0x6}, {0x3, 0xfffffa20}, {0x6, 0x80}, {0x59, 0xdd05}, {0x2, 0xfffffffe}, {0x3, 0x15}, {0x5, 0x6}], 0x3, 0x7, 0x4, 0x2}}) [ 1830.361575] Bluetooth: hci1 command 0x0419 tx timeout 05:06:25 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x2, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:06:25 executing program 3: syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000340)={0x0, @sdr={0x30323953, 0x5}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x200, 0x9, 0x3131354f, 0x3, 0x4, [{0x8, 0x7fffffff}, {0x3, 0xce01}, {0x2}, {0x6bb, 0x7}, {0x8, 0x409}, {0x7a5, 0x81}, {0x401, 0x9}, {0x1, 0x2}], 0x9f, 0x80, 0x6, 0x1, 0x7}}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247, 0x0, 0x0, [{}, {}, {0xfffffffc}, {}, {}, {}, {0xf5a}]}}) 05:06:25 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @sliced={0x7fff, [0x1, 0x6, 0x7, 0xf800, 0x901, 0x2, 0x3, 0x7, 0x1, 0x1ff, 0x9, 0x3, 0x81, 0x6, 0x5, 0x8, 0xffff, 0x8, 0x2, 0x3, 0x20, 0x9, 0x8, 0x2, 0x8, 0x9, 0x9, 0x8001, 0x0, 0x3, 0x3f, 0x1ff, 0x2, 0x0, 0xff, 0xa0d, 0xffff, 0x0, 0x8, 0x2, 0x3, 0x401, 0xbc, 0x4, 0x6], 0x6}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) [ 1834.125489] oom_reaper: reaped process 2536 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1834.146324] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1834.161655] systemd-journal cpuset=/ mems_allowed=0-1 [ 1834.166865] CPU: 0 PID: 2524 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 1834.174733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1834.184075] Call Trace: [ 1834.186649] dump_stack+0x1b2/0x281 [ 1834.190254] dump_header+0x178/0x82f [ 1834.197483] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1834.202569] ? ___ratelimit+0x2cd/0x530 [ 1834.206562] oom_kill_process.cold+0x10/0xb18 [ 1834.211043] out_of_memory+0xe3e/0x1190 [ 1834.215008] ? oom_killer_disable+0x1c0/0x1c0 [ 1834.220090] ? mutex_trylock+0x152/0x1a0 [ 1834.224129] __alloc_pages_nodemask+0x23e1/0x2720 [ 1834.228955] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1834.233783] alloc_pages_current+0x155/0x260 [ 1834.238169] filemap_fault+0xea3/0x1980 [ 1834.242136] ext4_filemap_fault+0x84/0xb0 [ 1834.246264] __do_fault+0xfa/0x380 [ 1834.249793] __handle_mm_fault+0x2497/0x4620 [ 1834.254183] ? ep_poll+0x1ab/0xa50 [ 1834.257698] ? vm_insert_page+0x7c0/0x7c0 [ 1834.261838] handle_mm_fault+0x391/0x860 [ 1834.265876] __do_page_fault+0x549/0xad0 [ 1834.269931] ? spurious_fault+0x640/0x640 [ 1834.274057] ? do_page_fault+0x60/0x500 [ 1834.278095] ? page_fault+0x2f/0x50 [ 1834.282213] page_fault+0x45/0x50 [ 1834.287718] RIP: 0001:0xffffffffffffffff [ 1834.293713] RSP: 877461e0:00007fff21a757c0 EFLAGS: 7fff21a755d0 [ 1834.293865] Mem-Info: [ 1834.293881] syz-executor.1: [ 1834.299962] active_anon:14324 inactive_anon:24219 isolated_anon:0 [ 1834.299962] active_file:13 inactive_file:14 isolated_file:0 [ 1834.299962] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1834.299962] slab_reclaimable:15080 slab_unreclaimable:115853 [ 1834.299962] mapped:52576 shmem:25363 pagetables:716 bounce:0 [ 1834.299962] free:13880 free_pcp:412 free_cma:0 [ 1834.299978] Node 0 active_anon:56372kB inactive_anon:67252kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:71684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1834.299991] Node 1 active_anon:924kB inactive_anon:29624kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1400kB dirty:0kB writeback:0kB shmem:29768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1834.299995] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1834.300013] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1834.300034] Node 0 DMA32 free:17820kB min:36200kB low:45248kB high:54296kB active_anon:56372kB inactive_anon:67252kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7200kB pagetables:2764kB bounce:0kB free_pcp:788kB local_pcp:120kB free_cma:0kB [ 1834.300054] lowmem_reserve[]: 0 0 0 0 0 [ 1834.300075] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1834.300093] lowmem_reserve[]: 0 0 0 0 0 [ 1834.300112] Node 1 Normal free:26740kB min:53696kB low:67120kB high:80544kB active_anon:924kB inactive_anon:29624kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:100kB bounce:0kB free_pcp:860kB local_pcp:812kB free_cma:0kB [ 1834.300132] lowmem_reserve[]: [ 1834.308917] vmalloc: allocation failure, allocated 1636798464 of 2147487744 bytes [ 1834.340008] 0 0 0 0 0 [ 1834.340028] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) [ 1834.372698] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 1834.394864] 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10960kB [ 1834.394896] Node 0 DMA32: 311*4kB (UME) 738*8kB (UME) 183*16kB (UME) 68*32kB (UME) 21*64kB (UME) 9*128kB (UME) 4*256kB (UM) 2*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB [ 1834.421194] (null) [ 1834.431344] = 17820kB [ 1834.455960] syz-executor.1 cpuset= [ 1834.465785] Node 0 [ 1834.484973] / mems_allowed=0-1 [ 1834.484992] CPU: 1 PID: 2536 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 1834.484997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1834.485001] Call Trace: [ 1834.485021] dump_stack+0x1b2/0x281 [ 1834.494164] Normal: [ 1834.517703] warn_alloc.cold+0x96/0x1cc [ 1834.517716] ? zone_watermark_ok_safe+0x220/0x220 [ 1834.517726] ? retint_kernel+0x2d/0x2d [ 1834.517746] __vmalloc_area_node+0x48a/0x680 [ 1834.517758] ? __vmalloc_node_range+0x150/0x150 [ 1834.517764] ? __get_vm_area_node+0x27d/0x340 [ 1834.517776] __vmalloc_node_range+0xbe/0x150 [ 1834.517790] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1834.517797] vmalloc_user+0x47/0xa0 [ 1834.517805] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1834.517813] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1834.517820] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1834.517831] __vb2_queue_alloc+0x47a/0xd90 [ 1834.526775] 0*4kB [ 1834.528658] vb2_core_create_bufs+0x279/0x5a0 [ 1834.531315] 0*8kB [ 1834.537397] ? __vb2_queue_free+0x7a0/0x7a0 [ 1834.548788] 0*16kB [ 1834.551693] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1834.551704] ? trace_hardirqs_on+0x10/0x10 [ 1834.551718] vb2_create_bufs+0x2e1/0x5b0 [ 1834.551731] ? vb2_thread_start+0x310/0x310 [ 1834.551747] v4l_create_bufs+0xa4/0x150 [ 1834.572139] 0*32kB [ 1834.574975] __video_do_ioctl+0x65b/0x6a0 [ 1834.577179] 0*64kB [ 1834.580379] ? video_ioctl2+0x30/0x30 [ 1834.580390] ? __might_fault+0x177/0x1b0 [ 1834.580399] ? video_ioctl2+0x30/0x30 [ 1834.580408] video_usercopy+0xfd/0xe70 [ 1834.580422] ? v4l_g_ctrl+0x390/0x390 [ 1834.580431] ? lock_acquire+0x170/0x3f0 [ 1834.580439] ? lock_downgrade+0x740/0x740 [ 1834.580449] ? trace_hardirqs_on+0x10/0x10 [ 1834.590679] 0*128kB [ 1834.597578] ? futex_exit_release+0x220/0x220 [ 1834.603560] 0*256kB [ 1834.603751] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1834.606044] 0*512kB [ 1834.610018] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1834.610032] v4l2_ioctl+0x1bb/0x2f0 [ 1834.610041] ? v4l2_open+0x2f0/0x2f0 [ 1834.610050] do_vfs_ioctl+0x75a/0xff0 [ 1834.610060] ? ioctl_preallocate+0x1a0/0x1a0 [ 1834.610069] ? lock_downgrade+0x740/0x740 [ 1834.610081] ? __fget+0x225/0x360 [ 1834.610090] ? do_vfs_ioctl+0xff0/0xff0 [ 1834.616759] 0*1024kB [ 1834.618783] ? security_file_ioctl+0x83/0xb0 [ 1834.626546] 0*2048kB [ 1834.627840] SyS_ioctl+0x7f/0xb0 [ 1834.634170] 0*4096kB [ 1834.636699] ? do_vfs_ioctl+0xff0/0xff0 [ 1834.645390] = 0kB [ 1834.645670] do_syscall_64+0x1d5/0x640 [ 1834.651816] Node 1 [ 1834.655321] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1834.659536] Normal: [ 1834.664271] RIP: 0033:0x466459 [ 1834.664276] RSP: 002b:00007f3ccef46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1834.664284] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1834.664288] RDX: 0000000020001880 RSI: 00000000c100565c RDI: 0000000000000003 [ 1834.664292] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1834.664296] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1834.664301] R13: 00007ffc5138c9ef R14: 00007f3ccef46300 R15: 0000000000022000 [ 1834.664973] Mem-Info: [ 1834.673433] 183*4kB [ 1834.677468] active_anon:14324 inactive_anon:24219 isolated_anon:0 [ 1834.677468] active_file:13 inactive_file:14 isolated_file:0 [ 1834.677468] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1834.677468] slab_reclaimable:15080 slab_unreclaimable:115853 [ 1834.677468] mapped:52576 shmem:25363 pagetables:716 bounce:0 [ 1834.677468] free:13880 free_pcp:412 free_cma:0 [ 1834.679691] (ME) 149*8kB [ 1834.685103] Node 0 active_anon:56372kB inactive_anon:67252kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:71684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1834.685118] Node 1 active_anon:924kB inactive_anon:29624kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1400kB dirty:0kB writeback:0kB shmem:29768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1834.685121] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1834.685138] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1834.685154] Node 0 DMA32 free:17820kB min:36200kB low:45248kB high:54296kB active_anon:56372kB inactive_anon:67252kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7200kB pagetables:2764kB bounce:0kB free_pcp:788kB local_pcp:668kB free_cma:0kB [ 1834.685174] lowmem_reserve[]: 0 0 0 0 0 [ 1834.693527] (ME) [ 1834.702918] 119*16kB [ 1834.711082] Node 0 [ 1834.717967] (ME) [ 1834.718353] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1834.723893] 98*32kB [ 1834.727975] lowmem_reserve[]: [ 1834.733725] (UME) [ 1834.736002] 0 [ 1834.738267] 57*64kB [ 1834.744347] 0 [ 1834.746684] (UM) [ 1834.749410] 0 [ 1834.755184] 16*128kB [ 1834.757959] 0 [ 1834.759155] (UM) [ 1834.766647] 0 [ 1834.773507] 9*256kB [ 1834.780004] (UM) [ 1834.788863] Node 1 [ 1834.793366] 3*512kB [ 1834.796682] Normal free:26740kB min:53696kB low:67120kB high:80544kB active_anon:924kB inactive_anon:29624kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:100kB bounce:0kB free_pcp:860kB local_pcp:48kB free_cma:0kB [ 1834.798403] (ME) [ 1834.805422] lowmem_reserve[]: [ 1834.806580] 2*1024kB [ 1834.813010] 0 [ 1834.817672] (UE) [ 1834.818726] 0 [ 1834.824644] 2*2048kB [ 1834.830824] 0 [ 1834.837212] (UM) [ 1834.851676] 0 [ 1834.853627] 1*4096kB [ 1834.859116] 0 [ 1834.866754] (U) = 26740kB [ 1834.866769] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1834.866775] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1834.866780] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1834.866785] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1834.866788] 25390 total pagecache pages [ 1834.866796] 0 pages in swap cache [ 1834.866801] Swap cache stats: add 0, delete 0, find 0/0 [ 1834.866804] Free swap = 0kB [ 1834.866807] Total swap = 0kB [ 1834.866813] 2097051 pages RAM [ 1834.866816] 0 pages HighMem/MovableOnly [ 1834.866819] 363841 pages reserved [ 1834.866822] 0 pages cma reserved [ 1834.866828] Out of memory (oom_kill_allocating_task): Kill process 2524 (systemd-journal) score 0 or sacrifice child [ 1834.866856] Killed process 2524 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1296kB [ 1834.915881] systemd-journal: [ 1834.950506] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1834.971840] page allocation failure: order:0 [ 1835.002132] Node 0 [ 1835.035724] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1835.038358] (null) [ 1835.039025] (null) [ 1835.041280] , order=0, oom_score_adj=0 [ 1835.041285] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1835.043347] systemd-journal cpuset= [ 1835.073451] DMA: [ 1835.075613] / [ 1835.075928] 0*4kB [ 1835.077708] mems_allowed=0-1 [ 1835.081814] 0*8kB [ 1835.081842] CPU: 0 PID: 2524 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 1835.083881] 1*16kB [ 1835.085667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1835.088050] (U) [ 1835.089846] Call Trace: [ 1835.089865] dump_stack+0x1b2/0x281 [ 1835.089876] warn_alloc.cold+0x96/0x1cc [ 1835.089891] ? zone_watermark_ok_safe+0x220/0x220 [ 1835.099600] 0*32kB [ 1835.100274] ? wait_for_completion_io+0x10/0x10 [ 1835.102568] 1*64kB [ 1835.130490] __alloc_pages_nodemask+0x2127/0x2720 [ 1835.130510] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1835.130532] alloc_pages_current+0x155/0x260 [ 1835.169574] (U) [ 1835.176030] filemap_fault+0xea3/0x1980 [ 1835.199564] 1*128kB [ 1835.201534] ext4_filemap_fault+0x84/0xb0 [ 1835.206854] (U) [ 1835.209860] __do_fault+0xfa/0x380 [ 1835.209870] __handle_mm_fault+0x2497/0x4620 [ 1835.209879] ? ep_poll+0x1ab/0xa50 [ 1835.229551] 0*256kB [ 1835.237321] ? vm_insert_page+0x7c0/0x7c0 [ 1835.259539] 1*512kB [ 1835.260736] handle_mm_fault+0x391/0x860 [ 1835.265107] (U) [ 1835.267337] __do_page_fault+0x549/0xad0 [ 1835.289525] 0*1024kB [ 1835.290688] ? spurious_fault+0x640/0x640 [ 1835.292740] 1*2048kB [ 1835.294456] ? do_page_fault+0x60/0x500 [ 1835.296592] (M) [ 1835.299706] ? page_fault+0x2f/0x50 [ 1835.299714] page_fault+0x45/0x50 [ 1835.299726] RIP: 0001:0xffffffffffffffff [ 1835.299730] RSP: 877461e0:00007fff21a757c0 EFLAGS: 7fff21a755d0 [ 1835.303785] CPU: 0 PID: 7967 Comm: syz-fuzzer Not tainted 4.14.227-syzkaller #0 [ 1835.319553] 2*4096kB [ 1835.321491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1835.323452] (M) [ 1835.326033] Call Trace: [ 1835.329691] = 10960kB [ 1835.333622] dump_stack+0x1b2/0x281 [ 1835.338430] Node 0 [ 1835.340655] dump_header+0x178/0x82f [ 1835.340665] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1835.340675] ? ___ratelimit+0x2cd/0x530 [ 1835.345330] DMA32: [ 1835.347549] oom_kill_process.cold+0x10/0xb18 [ 1835.352386] 311*4kB [ 1835.357198] out_of_memory+0xe3e/0x1190 [ 1835.361605] (UME) [ 1835.363557] ? oom_killer_disable+0x1c0/0x1c0 [ 1835.367520] 738*8kB (UME) [ 1835.369830] ? mutex_trylock+0x152/0x1a0 [ 1835.369841] __alloc_pages_nodemask+0x23e1/0x2720 [ 1835.369861] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1835.373980] 183*16kB [ 1835.376069] alloc_pages_current+0x155/0x260 [ 1835.379604] (UME) [ 1835.383971] filemap_fault+0xea3/0x1980 [ 1835.387479] 68*32kB (UME) [ 1835.389797] ext4_filemap_fault+0x84/0xb0 [ 1835.389808] __do_fault+0xfa/0x380 [ 1835.393928] 21*64kB [ 1835.396235] __handle_mm_fault+0x2497/0x4620 [ 1835.400302] (UME) [ 1835.402260] ? vm_insert_page+0x7c0/0x7c0 [ 1835.406308] 9*128kB [ 1835.408698] ? lock_downgrade+0x740/0x740 [ 1835.412855] (UME) [ 1835.415244] handle_mm_fault+0x391/0x860 [ 1835.419181] 4*256kB [ 1835.421141] __do_page_fault+0x549/0xad0 [ 1835.421154] ? spurious_fault+0x640/0x640 [ 1835.421163] ? do_page_fault+0x60/0x500 [ 1835.424760] (UM) [ 1835.428196] ? page_fault+0x2f/0x50 [ 1835.432262] 2*512kB [ 1835.438288] page_fault+0x45/0x50 [ 1835.445762] (UM) [ 1835.448131] RIP: 0000:0x940aec [ 1835.457482] 1*1024kB [ 1835.459419] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1835.462013] (U) [ 1835.472904] Mem-Info: [ 1835.476367] 0*2048kB [ 1835.479211] active_anon:14324 inactive_anon:24219 isolated_anon:0 [ 1835.479211] active_file:15 inactive_file:12 isolated_file:0 [ 1835.479211] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1835.479211] slab_reclaimable:15080 slab_unreclaimable:115853 [ 1835.479211] mapped:52576 shmem:25363 pagetables:716 bounce:0 [ 1835.479211] free:13880 free_pcp:412 free_cma:0 [ 1835.483284] 0*4096kB [ 1835.491328] Node 0 active_anon:56372kB inactive_anon:67252kB active_file:40kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:71684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1835.494087] = 17820kB [ 1835.496291] Node 1 active_anon:924kB inactive_anon:29624kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1400kB dirty:0kB writeback:0kB shmem:29768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1835.498415] Node 0 [ 1835.505894] Node 0 [ 1835.511739] Normal: [ 1835.516053] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1835.519595] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1835.519635] Node 1 Normal: 183*4kB (ME) 149*8kB (ME) [ 1835.525935] lowmem_reserve[]: [ 1835.526441] 119*16kB [ 1835.528570] 0 [ 1835.534313] (ME) [ 1835.535399] 2717 [ 1835.539584] 98*32kB (UME) 57*64kB (UM) 16*128kB (UM) 9*256kB (UM) 3*512kB (ME) 2*1024kB (UE) 2*2048kB (UM) 1*4096kB (U) = 26740kB [ 1835.539640] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1835.548273] 2718 [ 1835.551647] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1835.552028] 2718 [ 1835.556155] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1835.558453] 2718 [ 1835.562617] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1835.562621] 25390 total pagecache pages [ 1835.562631] 0 pages in swap cache [ 1835.562636] Swap cache stats: add 0, delete 0, find 0/0 [ 1835.562639] Free swap = 0kB [ 1835.562642] Total swap = 0kB [ 1835.562648] 2097051 pages RAM [ 1835.562652] 0 pages HighMem/MovableOnly [ 1835.562654] 363841 pages reserved [ 1835.562657] 0 pages cma reserved [ 1835.854168] Node 0 DMA32 free:17820kB min:36200kB low:45248kB high:54296kB active_anon:56372kB inactive_anon:67252kB active_file:40kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7200kB pagetables:2764kB bounce:0kB free_pcp:788kB local_pcp:120kB free_cma:0kB [ 1835.884044] lowmem_reserve[]: 0 0 0 0 0 [ 1835.888060] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1835.913824] lowmem_reserve[]: 0 0 0 0 0 [ 1835.917821] Node 1 Normal free:26740kB min:53696kB low:67120kB high:80544kB active_anon:924kB inactive_anon:29624kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:100kB bounce:0kB free_pcp:860kB local_pcp:812kB free_cma:0kB [ 1835.946622] lowmem_reserve[]: 0 0 0 0 0 [ 1835.950678] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10960kB [ 1835.965007] Node 0 DMA32: 311*4kB (UME) 754*8kB (UME) 185*16kB (UME) 69*32kB (UME) 22*64kB (UME) 9*128kB (UME) 4*256kB (UM) 2*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 18076kB [ 1835.981220] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1835.993031] Node 1 Normal: 183*4kB (ME) 149*8kB (ME) 119*16kB (ME) 98*32kB (UME) 57*64kB (UM) 16*128kB (UM) 9*256kB (UM) 3*512kB (ME) 2*1024kB (UE) 2*2048kB (UM) 1*4096kB (U) = 26740kB [ 1836.009763] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1836.018686] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1836.027405] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1836.036313] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1836.044978] 25390 total pagecache pages [ 1836.048955] 0 pages in swap cache [ 1836.052507] Swap cache stats: add 0, delete 0, find 0/0 [ 1836.058061] Free swap = 0kB [ 1836.061258] Total swap = 0kB [ 1836.064351] 2097051 pages RAM [ 1836.067522] 0 pages HighMem/MovableOnly [ 1836.071661] 363841 pages reserved [ 1836.075191] 0 pages cma reserved [ 1836.078630] Out of memory (oom_kill_allocating_task): Kill process 7967 (syz-fuzzer) score 0 or sacrifice child [ 1836.089104] Killed process 2274 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1836.100973] oom_reaper: reaped process 2524 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1408kB [ 1836.119662] oom_reaper: reaped process 2274 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1836.227740] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1836.239900] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1836.293117] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1836.304668] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1836.317135] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1836.324853] systemd[1]: Stopped Journal Service. [ 1836.355282] systemd[1]: Starting Journal Service... [ 1836.543753] systemd-journald[2589]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1836.570560] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1836.675106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1836.689327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1836.715965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1836.727441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1836.752983] device bridge_slave_1 left promiscuous mode [ 1836.758560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1836.773736] device bridge_slave_0 left promiscuous mode [ 1836.793811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1836.809630] device veth1_macvtap left promiscuous mode [ 1836.814971] device veth0_macvtap left promiscuous mode [ 1836.839067] device veth1_vlan left promiscuous mode [ 1836.844169] device veth0_vlan left promiscuous mode [ 1837.087357] device hsr_slave_1 left promiscuous mode [ 1837.111924] device hsr_slave_0 left promiscuous mode [ 1837.151865] team0 (unregistering): Port device team_slave_1 removed [ 1837.165029] systemd[1]: Started Journal Service. [ 1837.188476] team0 (unregistering): Port device team_slave_0 removed [ 1837.206037] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1837.217218] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1837.307824] bond0 (unregistering): Released all slaves 05:06:33 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x17a00, 0x1, 0x2}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000000c0)=""/132, &(0x7f0000000180)=0x84) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @remote}], 0x10) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:06:33 executing program 5: getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00', 0x96, "af757d0f77007b97b4a88ae4311453023a03946939a975c8e6f3af1eabce372e120d09ed012d078d188f0b0fdc48868b7fed5234edf9b3140cf7abbb13a91b911058dffbe18734371acc78d108305a8226d83ee9937969fc4338d8afa0b9ece6530f9857ba5d943c032f93c9746aec9ed82f892de454b9177f9f7f3ccfb33173fdd9bb882412dab820c540c98412622e2f7f47d3f8fb"}, &(0x7f0000000180)=0xba) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:06:33 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @empty}, &(0x7f0000000300)=0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x100000, 0x8, {}, {0x5, 0x13b30831199b05c9, 0x7, 0x8, 0x0, 0x5, "4c16f693"}, 0x3, 0x2, @fd=r1, 0x8c, 0x0, r2}) r3 = socket$inet(0x2, 0xa, 0x80000000) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e) r4 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x400, 0x141080) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f00000001c0)) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000380)={'ipvs\x00'}, &(0x7f00000003c0)=0x1e) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vim2m\x00', 0x2, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x4000, r6}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x1f20, 0x4, 0x4, 0x0, 0xfff, {}, {0x1, 0x0, 0x40, 0xf4, 0x1, 0x6, "98a7f018"}, 0x6, 0x2, @offset=0x8de, 0x8}) 05:06:34 executing program 3: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00', 0xffffffffffffffff) r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) 05:06:34 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 05:06:34 executing program 1: setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @empty, 0x0, 0x3, [@remote, @rand_addr=0x64010101, @local]}, 0x1c) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:06:34 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0xffffffe1, 0x3, 0x1}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) 05:06:34 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x11ff, 0x0, 0x2}) 05:06:34 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0x2, 0x1f, 0x2, 0x5, 0x1f, "6bf697b3"}, 0x7d1, 0x1, @userptr=0xffffffffffffff81, 0x9}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x4, 0x4, {r2, r3/1000+10000}, {0x1, 0x8, 0xfe, 0x81, 0x6, 0x20, "a27faf59"}, 0x1, 0x3, @fd, 0x10000, 0x0, r4}) 05:06:34 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:06:34 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x3, @pix_mp={0x0, 0x0, 0x59455247, 0x8, 0x0, [{}, {}, {0xfffffffc}, {0x5}, {}, {}, {0x0, 0xfffffffd}]}}) 05:06:34 executing program 4: syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r0 = socket$inet6(0xa, 0x80000, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e22, 0x5e15, @empty, 0x7ff}], 0x2c) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x200, 0x1, 0x1}) 05:06:34 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x0, @pix={0xfffff89b, 0x400, 0x34324948, 0x1, 0x9, 0x7, 0x8, 0x7, 0x1, 0x8, 0x2, 0x7}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) clock_gettime(0x0, &(0x7f00000003c0)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @sliced={0x0, [0x3, 0x7, 0x5, 0x800, 0xff, 0x7, 0x8, 0x4, 0x7fff, 0x3ff, 0x40, 0x1, 0x9, 0x3, 0x5, 0x36, 0x3, 0x7, 0x3, 0x99, 0xb3d, 0x37e9, 0x3, 0x800, 0x7, 0x5, 0x1, 0x7, 0x0, 0x2, 0xe8, 0xae, 0x5, 0x5, 0x75, 0x7, 0x262d, 0x7, 0x2, 0x2, 0x7, 0x81, 0xc04, 0x1, 0xdc40, 0x8, 0x0, 0x2f], 0x1}}) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000500)) clock_getres(0x1, &(0x7f0000000540)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) clock_gettime(0x3, &(0x7f0000000580)) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000440)={0x7fff, 0x2, 0x4, 0x0, 0xfff, {0x77359400}, {0x5, 0x1, 0x0, 0xf8, 0x81, 0x3f, "f0df57a6"}, 0x6, 0x4, @planes=&(0x7f0000000400)={0xffff4371, 0x8, @userptr=0x4, 0x1f}, 0x9}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x7, 0xa, 0x4, 0x4000, 0x10de, {0x0, 0x2710}, {0x1, 0x1, 0x0, 0x6, 0x1, 0x7, "3063537f"}, 0x7, 0x4, @planes=&(0x7f0000000040)={0x10001, 0x7ff, @userptr=0x1f, 0x7}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000340)={0x8, 0x3, 0x4, 0x100000, 0x8000, {}, {0x5, 0xc, 0x7, 0x2, 0xff, 0x8, "202ea4ff"}, 0x5, 0x3, @userptr=0x3, 0x8, 0x0, r4}) [ 1842.327152] IPVS: ftp: loaded support on port[0] = 21 [ 1842.532524] chnl_net:caif_netlink_parms(): no params data found [ 1842.625304] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.633173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1842.644717] device bridge_slave_0 entered promiscuous mode [ 1842.652636] bridge0: port 2(bridge_slave_1) entered blocking state [ 1842.663473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1842.671285] device bridge_slave_1 entered promiscuous mode [ 1842.707390] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1842.721110] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1842.751940] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1842.761977] team0: Port device team_slave_0 added [ 1842.771709] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1842.779765] team0: Port device team_slave_1 added [ 1842.808216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1842.814791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1842.844841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1842.857966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1842.864336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1842.894278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1842.905568] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1842.917220] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1842.957109] device hsr_slave_0 entered promiscuous mode [ 1842.963270] device hsr_slave_1 entered promiscuous mode [ 1842.973609] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1842.981840] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1843.103803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1843.110232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1843.116916] bridge0: port 1(bridge_slave_0) entered blocking state [ 1843.123323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1843.184224] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1843.194039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1843.204275] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1843.218372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1843.226111] bridge0: port 1(bridge_slave_0) entered disabled state [ 1843.241872] bridge0: port 2(bridge_slave_1) entered disabled state [ 1843.256328] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1843.265270] 8021q: adding VLAN 0 to HW filter on device team0 [ 1843.280413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1843.290970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1843.297384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1843.318452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1843.326493] bridge0: port 2(bridge_slave_1) entered blocking state [ 1843.332919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1843.359669] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1843.371838] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1843.381091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1843.397152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1843.411330] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1843.418597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1843.425906] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1843.438566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1843.452764] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1843.467591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1843.474333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1843.494579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1843.501887] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1843.596424] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1843.612019] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1843.621246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1843.633583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1843.684810] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1843.697950] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1843.704801] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1843.719510] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1843.726144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1843.738304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1843.747919] device veth0_vlan entered promiscuous mode [ 1843.760976] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1843.768735] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1843.777033] device veth1_vlan entered promiscuous mode [ 1843.783109] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1843.801628] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1843.821084] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1843.835147] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1843.842390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1843.854769] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1843.863148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1843.875267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1843.886363] device veth0_macvtap entered promiscuous mode [ 1843.898826] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1843.911900] device veth1_macvtap entered promiscuous mode [ 1843.919134] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1843.933476] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1843.944402] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1843.959994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1843.973213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1843.984282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1843.998496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1844.009064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1844.022390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1844.033725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1844.047720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1844.058662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1844.071151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1844.083866] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1844.093644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1844.104013] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1844.114532] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1844.125433] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1844.138852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1844.151172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1844.161736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1844.172455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1844.182979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1844.193076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1844.204179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1844.214237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1844.224727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1844.234680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1844.245295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1844.256812] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1844.263735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1844.271766] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1844.280989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1844.356411] Bluetooth: hci1 command 0x0409 tx timeout [ 1844.894090] oom_reaper: reaped process 2599 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1844.928230] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1844.948093] systemd-journal cpuset=/ mems_allowed=0-1 [ 1844.953320] CPU: 0 PID: 2589 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 1844.961194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1844.970626] Call Trace: [ 1844.973198] dump_stack+0x1b2/0x281 [ 1844.976805] dump_header+0x178/0x82f [ 1844.980504] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1844.985585] ? ___ratelimit+0x2cd/0x530 [ 1844.989554] oom_kill_process.cold+0x10/0xb18 [ 1844.994029] out_of_memory+0xe3e/0x1190 [ 1844.997984] ? oom_killer_disable+0x1c0/0x1c0 [ 1845.002457] ? mutex_trylock+0x152/0x1a0 [ 1845.006498] __alloc_pages_nodemask+0x23e1/0x2720 [ 1845.011348] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1845.016188] alloc_pages_current+0x155/0x260 [ 1845.020689] filemap_fault+0xea3/0x1980 [ 1845.024650] ext4_filemap_fault+0x84/0xb0 [ 1845.028798] __do_fault+0xfa/0x380 [ 1845.032334] __handle_mm_fault+0x2497/0x4620 [ 1845.036719] ? ep_poll+0x1ab/0xa50 [ 1845.040236] ? vm_insert_page+0x7c0/0x7c0 [ 1845.044366] handle_mm_fault+0x391/0x860 [ 1845.048407] __do_page_fault+0x549/0xad0 [ 1845.052448] ? spurious_fault+0x640/0x640 [ 1845.056594] ? do_page_fault+0x60/0x500 [ 1845.060566] ? page_fault+0x2f/0x50 [ 1845.064179] page_fault+0x45/0x50 [ 1845.067633] RIP: 0001:0x1 [ 1845.070373] RSP: 287c11e0:00007ffc235d6460 EFLAGS: 7ffc235d6270 [ 1845.072159] Mem-Info: [ 1845.081496] active_anon:14374 inactive_anon:26252 isolated_anon:0 [ 1845.081496] active_file:13 inactive_file:13 isolated_file:0 [ 1845.081496] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1845.081496] slab_reclaimable:14756 slab_unreclaimable:115214 [ 1845.081496] mapped:52598 shmem:27412 pagetables:763 bounce:0 [ 1845.081496] free:13868 free_pcp:92 free_cma:0 [ 1845.083538] syz-executor.1: [ 1845.114829] Node 0 active_anon:56200kB inactive_anon:69656kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210392kB dirty:0kB writeback:0kB shmem:74088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1845.114842] Node 1 active_anon:1296kB inactive_anon:35352kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:35560kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1845.114852] Node 0 [ 1845.126666] vmalloc: allocation failure, allocated 1631346688 of 2147487744 bytes [ 1845.146345] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1845.181887] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 1845.184152] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1845.216773] (null) [ 1845.221130] Node 0 DMA32 free:17752kB min:36200kB low:45248kB high:54296kB active_anon:56200kB inactive_anon:69656kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7232kB pagetables:2844kB bounce:0kB free_pcp:248kB local_pcp:120kB free_cma:0kB [ 1845.223443] syz-executor.1 cpuset=/ [ 1845.254408] lowmem_reserve[]: 0 0 0 0 0 [ 1845.261468] mems_allowed=0-1 [ 1845.262251] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1845.265584] CPU: 1 PID: 2599 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 1845.293484] lowmem_reserve[]: [ 1845.299254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1845.299259] Call Trace: [ 1845.299281] dump_stack+0x1b2/0x281 [ 1845.299293] warn_alloc.cold+0x96/0x1cc [ 1845.299305] ? zone_watermark_ok_safe+0x220/0x220 [ 1845.299325] __vmalloc_area_node+0x48a/0x680 [ 1845.299338] ? __vmalloc_node_range+0x150/0x150 [ 1845.299344] ? __get_vm_area_node+0x27d/0x340 [ 1845.299355] __vmalloc_node_range+0xbe/0x150 [ 1845.299368] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1845.299375] vmalloc_user+0x47/0xa0 [ 1845.299396] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1845.299404] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1845.299413] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1845.299423] __vb2_queue_alloc+0x47a/0xd90 [ 1845.299442] vb2_core_create_bufs+0x279/0x5a0 [ 1845.299452] ? __vb2_queue_free+0x7a0/0x7a0 [ 1845.302875] 0 [ 1845.312449] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1845.312461] ? trace_hardirqs_on+0x10/0x10 [ 1845.312472] vb2_create_bufs+0x2e1/0x5b0 [ 1845.312486] ? vb2_thread_start+0x310/0x310 [ 1845.312501] v4l_create_bufs+0xa4/0x150 [ 1845.312512] __video_do_ioctl+0x65b/0x6a0 [ 1845.312527] ? video_ioctl2+0x30/0x30 [ 1845.312537] ? __might_fault+0x177/0x1b0 [ 1845.312548] ? video_ioctl2+0x30/0x30 [ 1845.323266] 0 [ 1845.327665] video_usercopy+0xfd/0xe70 [ 1845.327680] ? v4l_g_ctrl+0x390/0x390 [ 1845.327689] ? lock_acquire+0x170/0x3f0 [ 1845.327697] ? lock_downgrade+0x740/0x740 [ 1845.327706] ? trace_hardirqs_on+0x10/0x10 [ 1845.327719] ? futex_exit_release+0x220/0x220 [ 1845.332114] 0 [ 1845.336784] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1845.336792] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1845.336804] v4l2_ioctl+0x1bb/0x2f0 [ 1845.336813] ? v4l2_open+0x2f0/0x2f0 [ 1845.336823] do_vfs_ioctl+0x75a/0xff0 [ 1845.336832] ? ioctl_preallocate+0x1a0/0x1a0 [ 1845.336841] ? lock_downgrade+0x740/0x740 [ 1845.336853] ? __fget+0x225/0x360 [ 1845.342964] 0 [ 1845.345767] ? do_vfs_ioctl+0xff0/0xff0 [ 1845.352018] 0 [ 1845.354738] ? security_file_ioctl+0x83/0xb0 [ 1845.364596] SyS_ioctl+0x7f/0xb0 [ 1845.370593] Node 1 [ 1845.372941] ? do_vfs_ioctl+0xff0/0xff0 [ 1845.377492] Normal free:26748kB min:53696kB low:67120kB high:80544kB active_anon:1296kB inactive_anon:35352kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:208kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1845.381736] do_syscall_64+0x1d5/0x640 [ 1845.383517] lowmem_reserve[]: [ 1845.388935] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1845.388944] RIP: 0033:0x466459 [ 1845.388948] RSP: 002b:00007f3ccef46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1845.388956] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1845.388960] RDX: 0000000020001880 RSI: 00000000c100565c RDI: 0000000000000003 [ 1845.388964] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1845.388969] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1845.388974] R13: 00007ffc5138c9ef R14: 00007f3ccef46300 R15: 0000000000022000 [ 1845.400522] warn_alloc_show_mem: 1 callbacks suppressed [ 1845.400525] Mem-Info: [ 1845.405136] 0 [ 1845.411296] active_anon:14374 inactive_anon:26252 isolated_anon:0 [ 1845.411296] active_file:13 inactive_file:13 isolated_file:0 [ 1845.411296] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1845.411296] slab_reclaimable:14756 slab_unreclaimable:115214 [ 1845.411296] mapped:52598 shmem:27412 pagetables:763 bounce:0 [ 1845.411296] free:13868 free_pcp:83 free_cma:0 [ 1845.414165] 0 [ 1845.420543] Node 0 active_anon:56200kB inactive_anon:69656kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210392kB dirty:0kB writeback:0kB shmem:74088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1845.424319] 0 [ 1845.424385] Node 1 active_anon:1296kB inactive_anon:35352kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:35560kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1845.428892] 0 [ 1845.437207] Node 0 [ 1845.442299] 0 [ 1845.444691] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1845.449842] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) [ 1845.457264] lowmem_reserve[]: [ 1845.463662] 0*1024kB [ 1845.465501] 0 [ 1845.469299] 1*2048kB (M) 2*4096kB [ 1845.478263] 2717 [ 1845.484234] (M) [ 1845.485306] 2718 [ 1845.487145] = 10972kB [ 1845.487149] Node 0 DMA32: 587*4kB (ME) 780*8kB (ME) 231*16kB (ME) 61*32kB (UME) 13*64kB (UME) 8*128kB (UME) 4*256kB (M) [ 1845.495657] 2718 [ 1845.499391] 1*512kB [ 1845.503110] 2718 [ 1845.507069] (U) [ 1845.549269] 0*1024kB [ 1845.553961] Node 0 [ 1845.559323] 0*2048kB [ 1845.568895] DMA32 free:17752kB min:36200kB low:45248kB high:54296kB active_anon:56200kB inactive_anon:69656kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7232kB pagetables:2844kB bounce:0kB free_pcp:212kB local_pcp:128kB free_cma:0kB [ 1845.574891] 0*4096kB [ 1845.587057] lowmem_reserve[]: [ 1845.590311] = 17628kB [ 1845.595650] 0 [ 1845.601134] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB [ 1845.610910] 0 [ 1845.642397] 0*512kB [ 1845.676395] 0 [ 1845.699271] 0*1024kB [ 1845.714223] 0 [ 1845.731035] 0*2048kB [ 1845.748839] 0 [ 1845.751676] 0*4096kB [ 1845.753670] = 0kB [ 1845.755717] Node 0 [ 1845.758303] Node 1 [ 1845.779425] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1845.781874] Normal: [ 1845.782313] lowmem_reserve[]: [ 1845.784705] 127*4kB [ 1845.826241] 0 [ 1845.834350] (UME) [ 1845.835060] 0 [ 1845.836904] 102*8kB (ME) 81*16kB (ME) 54*32kB (ME) 22*64kB (M) 8*128kB (M) 10*256kB (UM) 4*512kB (UME) 1*1024kB (E) 1*2048kB (M) 3*4096kB (U) = 26748kB [ 1845.836968] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1845.836973] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1845.836979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1845.836984] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1845.836988] 27438 total pagecache pages [ 1845.836997] 0 pages in swap cache [ 1845.837002] Swap cache stats: add 0, delete 0, find 0/0 [ 1845.837007] Free swap = 0kB [ 1845.849651] 0 [ 1845.851872] Total swap = 0kB [ 1845.852122] 0 [ 1845.854368] 2097051 pages RAM [ 1845.892893] 0 [ 1845.896110] 0 pages HighMem/MovableOnly [ 1845.926656] 363841 pages reserved [ 1845.942731] Node 1 [ 1845.948414] 0 pages cma reserved [ 1845.958801] Normal free:26748kB min:53696kB low:67120kB high:80544kB active_anon:1296kB inactive_anon:35352kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:208kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1845.960958] Out of memory (oom_kill_allocating_task): Kill process 2589 (systemd-journal) score 0 or sacrifice child [ 1845.963222] lowmem_reserve[]: [ 1845.965047] Killed process 2589 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1296kB [ 1845.978163] 0 [ 1845.982419] oom_reaper: reaped process 2589 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1296kB [ 1845.983247] 0 [ 1846.016887] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1846.030618] 0 [ 1846.036374] systemd-journal: [ 1846.037554] 0 [ 1846.049768] page allocation failure: order:0 [ 1846.068444] (null) [ 1846.069296] 0 [ 1846.072856] , order=0, oom_score_adj=0 [ 1846.076916] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 1846.086408] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10972kB [ 1846.090019] syz-fuzzer cpuset= [ 1846.101929] systemd-journal cpuset=/ mems_allowed=0-1 [ 1846.110356] Node 0 DMA32: 587*4kB (ME) 784*8kB (UME) 231*16kB (ME) 61*32kB (UME) 13*64kB (UME) 8*128kB (UME) 4*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17660kB [ 1846.112117] / [ 1846.128603] CPU: 0 PID: 2589 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 1846.134982] Node 0 [ 1846.138204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1846.138208] Call Trace: [ 1846.138225] dump_stack+0x1b2/0x281 [ 1846.138236] warn_alloc.cold+0x96/0x1cc [ 1846.138249] ? zone_watermark_ok_safe+0x220/0x220 [ 1846.140473] Normal: [ 1846.149830] ? usleep_range+0x130/0x130 [ 1846.149840] ? try_to_free_pages+0x23f/0x6e0 [ 1846.149849] ? _find_next_bit+0xdb/0x100 [ 1846.149861] ? run_timer_softirq+0x5a0/0x5a0 [ 1846.149877] __alloc_pages_nodemask+0x2127/0x2720 [ 1846.152445] 0*4kB [ 1846.156067] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1846.156090] alloc_pages_current+0x155/0x260 [ 1846.160057] 0*8kB [ 1846.164911] filemap_fault+0xea3/0x1980 [ 1846.167230] 0*16kB [ 1846.171346] ext4_filemap_fault+0x84/0xb0 [ 1846.175741] 0*32kB [ 1846.179769] __do_fault+0xfa/0x380 [ 1846.184150] 0*64kB [ 1846.188978] __handle_mm_fault+0x2497/0x4620 [ 1846.188988] ? ep_poll+0x1ab/0xa50 [ 1846.188996] ? vm_insert_page+0x7c0/0x7c0 [ 1846.191122] 0*128kB [ 1846.195957] handle_mm_fault+0x391/0x860 [ 1846.195970] __do_page_fault+0x549/0xad0 [ 1846.200349] 0*256kB [ 1846.202493] ? spurious_fault+0x640/0x640 [ 1846.206467] 0*512kB [ 1846.208670] ? do_page_fault+0x60/0x500 [ 1846.212790] 0*1024kB [ 1846.215009] ? page_fault+0x2f/0x50 [ 1846.218542] 0*2048kB [ 1846.220741] page_fault+0x45/0x50 [ 1846.225130] 0*4096kB [ 1846.228674] RIP: 0001:0x1 [ 1846.228678] RSP: 287c11e0:00007ffc235d6460 EFLAGS: 7ffc235d6270 [ 1846.231184] mems_allowed=0-1 [ 1846.234019] = 0kB [ 1846.235147] CPU: 0 PID: 7970 Comm: syz-fuzzer Not tainted 4.14.227-syzkaller #0 [ 1846.248801] Node 1 [ 1846.249687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1846.252000] Normal: [ 1846.255955] Call Trace: [ 1846.255975] dump_stack+0x1b2/0x281 [ 1846.255985] dump_header+0x178/0x82f [ 1846.255997] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1846.256007] ? ___ratelimit+0x2cd/0x530 [ 1846.258399] 127*4kB [ 1846.262022] oom_kill_process.cold+0x10/0xb18 [ 1846.264406] (UME) [ 1846.267868] out_of_memory+0xe3e/0x1190 [ 1846.267880] ? oom_killer_disable+0x1c0/0x1c0 [ 1846.267890] ? mutex_trylock+0x152/0x1a0 [ 1846.270277] 102*8kB [ 1846.273016] __alloc_pages_nodemask+0x23e1/0x2720 [ 1846.279073] (ME) [ 1846.282155] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1846.284187] 81*16kB [ 1846.291643] alloc_pages_current+0x155/0x260 [ 1846.291655] filemap_fault+0xea3/0x1980 [ 1846.293873] (ME) [ 1846.303242] ext4_filemap_fault+0x84/0xb0 [ 1846.303254] __do_fault+0xfa/0x380 [ 1846.303262] __handle_mm_fault+0x2497/0x4620 [ 1846.303275] ? vm_insert_page+0x7c0/0x7c0 [ 1846.305593] 54*32kB [ 1846.308170] handle_mm_fault+0x391/0x860 [ 1846.308183] __do_page_fault+0x549/0xad0 [ 1846.308194] ? spurious_fault+0x640/0x640 [ 1846.311812] (ME) [ 1846.315530] ? do_page_fault+0x60/0x500 [ 1846.320662] 22*64kB [ 1846.324570] ? page_fault+0x2f/0x50 [ 1846.326888] (M) [ 1846.331345] page_fault+0x45/0x50 [ 1846.333553] 8*128kB [ 1846.337539] RIP: 1500:0x1b817b78cc1 [ 1846.337544] RSP: 03c0:000000c00003be40 EFLAGS: 00000003 [ 1846.339624] Mem-Info: [ 1846.355390] (M) [ 1846.355496] active_anon:14274 inactive_anon:26252 isolated_anon:0 [ 1846.355496] active_file:13 inactive_file:13 isolated_file:0 [ 1846.355496] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1846.355496] slab_reclaimable:14756 slab_unreclaimable:115230 [ 1846.355496] mapped:52598 shmem:27412 pagetables:763 bounce:0 [ 1846.355496] free:13837 free_pcp:213 free_cma:0 [ 1846.360924] 10*256kB (UM) 4*512kB (UME) 1*1024kB (E) 1*2048kB (M) 3*4096kB (U) = 26748kB [ 1846.360965] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1846.360972] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1846.360978] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1846.360985] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1846.360989] 27438 total pagecache pages [ 1846.360999] 0 pages in swap cache [ 1846.361003] Swap cache stats: add 0, delete 0, find 0/0 [ 1846.361007] Free swap = 0kB [ 1846.361010] Total swap = 0kB [ 1846.361015] 2097051 pages RAM [ 1846.361018] 0 pages HighMem/MovableOnly [ 1846.361021] 363841 pages reserved [ 1846.361024] 0 pages cma reserved [ 1846.444655] Bluetooth: hci1 command 0x041b tx timeout [ 1846.473975] Node 0 active_anon:55800kB inactive_anon:69656kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210392kB dirty:0kB writeback:0kB shmem:74088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1846.582773] Node 1 active_anon:1296kB inactive_anon:35352kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:35560kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1846.609716] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1846.635984] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1846.641028] Node 0 DMA32 free:19188kB min:36200kB low:45248kB high:54296kB active_anon:55800kB inactive_anon:69656kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7232kB pagetables:2844kB bounce:0kB free_pcp:724kB local_pcp:544kB free_cma:0kB [ 1846.670054] lowmem_reserve[]: 0 0 0 0 0 [ 1846.674058] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1846.699994] lowmem_reserve[]: 0 0 0 0 0 [ 1846.704004] Node 1 Normal free:26748kB min:53696kB low:67120kB high:80544kB active_anon:1296kB inactive_anon:35352kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:208kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 1846.732681] lowmem_reserve[]: 0 0 0 0 0 [ 1846.736724] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10972kB [ 1846.750439] Node 0 DMA32: 587*4kB (ME) 976*8kB (UME) 231*16kB (ME) 61*32kB (UME) 13*64kB (UME) 8*128kB (UME) 4*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 19196kB [ 1846.766279] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1846.780999] Node 1 Normal: 127*4kB (UME) 102*8kB (ME) 81*16kB (ME) 54*32kB (ME) 22*64kB (M) 8*128kB (M) 10*256kB (UM) 4*512kB (UME) 1*1024kB (E) 1*2048kB (M) 3*4096kB (U) = 26748kB [ 1846.801440] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1846.810360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1846.822764] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1846.831706] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1846.844211] 27438 total pagecache pages [ 1846.848260] 0 pages in swap cache [ 1846.851718] Swap cache stats: add 0, delete 0, find 0/0 [ 1846.860927] Free swap = 0kB [ 1846.863953] Total swap = 0kB [ 1846.867262] 2097051 pages RAM [ 1846.870367] 0 pages HighMem/MovableOnly [ 1846.874330] 363841 pages reserved [ 1846.881576] 0 pages cma reserved [ 1846.884976] Out of memory (oom_kill_allocating_task): Kill process 7970 (syz-fuzzer) score 0 or sacrifice child [ 1846.895356] Killed process 423 (syz-executor.3) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1846.911553] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1846.933089] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1846.938318] CPU: 0 PID: 2634 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 1846.946212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1846.955568] Call Trace: [ 1846.958162] dump_stack+0x1b2/0x281 [ 1846.961791] dump_header+0x178/0x82f [ 1846.965519] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1846.970757] ? ___ratelimit+0x2cd/0x530 [ 1846.974742] oom_kill_process.cold+0x10/0xb18 [ 1846.979252] out_of_memory+0xe3e/0x1190 [ 1846.983236] ? oom_killer_disable+0x1c0/0x1c0 [ 1846.987739] ? mutex_trylock+0x152/0x1a0 [ 1846.991802] __alloc_pages_nodemask+0x23e1/0x2720 [ 1846.996660] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1847.001522] alloc_pages_current+0x155/0x260 [ 1847.006045] filemap_fault+0xea3/0x1980 [ 1847.010045] ext4_filemap_fault+0x84/0xb0 [ 1847.014201] __do_fault+0xfa/0x380 [ 1847.017744] __handle_mm_fault+0x2497/0x4620 [ 1847.022164] ? vm_insert_page+0x7c0/0x7c0 [ 1847.026320] ? nanosleep_copyout+0x100/0x100 [ 1847.030747] handle_mm_fault+0x391/0x860 [ 1847.034827] __do_page_fault+0x549/0xad0 [ 1847.038897] ? spurious_fault+0x640/0x640 [ 1847.043393] ? do_page_fault+0x60/0x500 [ 1847.047366] ? page_fault+0x2f/0x50 [ 1847.050991] page_fault+0x45/0x50 [ 1847.054609] RIP: 1c25de:0x9 [ 1847.057536] RSP: 0003:00007ffcd7539e0c EFLAGS: 00000032 [ 1847.062192] Mem-Info: [ 1847.071044] active_anon:14255 inactive_anon:26252 isolated_anon:0 [ 1847.071044] active_file:13 inactive_file:88 isolated_file:0 [ 1847.071044] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1847.071044] slab_reclaimable:14751 slab_unreclaimable:114829 [ 1847.071044] mapped:52598 shmem:27412 pagetables:763 bounce:0 [ 1847.071044] free:79746 free_pcp:340 free_cma:0 [ 1847.120112] Node 0 active_anon:55728kB inactive_anon:69656kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210392kB dirty:0kB writeback:0kB shmem:74088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1847.154869] Node 1 active_anon:1292kB inactive_anon:35352kB active_file:28kB inactive_file:2228kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:900kB dirty:0kB writeback:0kB shmem:35560kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1847.187291] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1847.217589] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1847.222645] Node 0 DMA32 free:19196kB min:36200kB low:45248kB high:54296kB active_anon:55728kB inactive_anon:69656kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7232kB pagetables:2844kB bounce:0kB free_pcp:732kB local_pcp:552kB free_cma:0kB [ 1847.255652] lowmem_reserve[]: 0 0 0 0 0 [ 1847.259759] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1847.290637] lowmem_reserve[]: 0 0 0 0 0 [ 1847.295702] Node 1 Normal free:702316kB min:53696kB low:67120kB high:80544kB active_anon:1292kB inactive_anon:35352kB active_file:28kB inactive_file:3528kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:60kB bounce:0kB free_pcp:1460kB local_pcp:716kB free_cma:0kB [ 1847.330388] lowmem_reserve[]: 0 0 0 0 0 [ 1847.335172] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10972kB [ 1847.354244] Node 0 DMA32: 587*4kB (ME) 976*8kB (UME) 231*16kB (ME) 61*32kB (UME) 13*64kB (UME) 8*128kB (UME) 4*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 19196kB [ 1847.374126] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1847.389019] Node 1 Normal: 33*4kB (UE) 426*8kB (UME) 425*16kB (UME) 454*32kB (UME) 393*64kB (UM) 161*128kB (UM) 112*256kB (UM) 98*512kB (UME) 59*1024kB (UE) 33*2048kB (UM) 148*4096kB (U) = 883684kB [ 1847.411236] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1847.420972] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1847.433410] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1847.442885] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1847.455517] 28363 total pagecache pages [ 1847.459507] 0 pages in swap cache [ 1847.462967] Swap cache stats: add 0, delete 0, find 0/0 [ 1847.472513] Free swap = 0kB [ 1847.476385] Total swap = 0kB [ 1847.479409] 2097051 pages RAM [ 1847.482503] 0 pages HighMem/MovableOnly [ 1847.492505] 363841 pages reserved [ 1847.497316] 0 pages cma reserved [ 1847.501189] Out of memory (oom_kill_allocating_task): Kill process 2634 (syz-executor.2) score 0 or sacrifice child [ 1847.516641] Killed process 2634 (syz-executor.2) total-vm:93120kB, anon-rss:104kB, file-rss:34632kB, shmem-rss:0kB [ 1847.540769] oom_reaper: reaped process 423 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 05:06:41 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x3) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x0, 0xfffffffffffffffc, 0xcb, 0x7, @buffer={0x0, 0x1e, &(0x7f00000000c0)=""/30}, &(0x7f0000000100)="f8fe5e4b1e95640be186189fac886a58f8c16c224f086de7baba529ede21bbc8a975ca3be62fe335b59431166f11aa2db5f0f50875ff9f3f10d44c4f09dc377aebe0bfef7f1bf24f4d99ea5caad2e060353c81d7d213de6a5b92dfe080fcf141d3de1ad2203fe840e3c0b71396f6ac34906e07567a6a857b5217eb4175ce88df72018c1475145e9b711fdb885d0e13455209c33db0434ca6a869df7fc559699f2c754f34ca3eb6b0eb2bc57847e8efdb914038f14f12e2c36b7a2f9aebc06a1b6038f78a4c4cf12b8f7c80", &(0x7f0000000340)=""/34, 0x9, 0x4, 0x2, &(0x7f0000000280)}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000000)={0x0, 0x10}) 05:06:41 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) [ 1847.640859] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1847.661636] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. 05:06:41 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34363248, 0x0, 0x0, [{}, {}, {}, {0xffffffff}]}}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)={0xf5e1762f, 0x4, 0x4, 0xe000, 0x3158d291, {r1, r2/1000+60000}, {0x2, 0xc, 0x6, 0x3, 0x6, 0x1, "fc661406"}, 0x6, 0x4, @userptr=0x10000}) 05:06:41 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @empty}, &(0x7f0000000300)=0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x100000, 0x8, {}, {0x5, 0x13b30831199b05c9, 0x7, 0x8, 0x0, 0x5, "4c16f693"}, 0x3, 0x2, @fd=r1, 0x8c, 0x0, r2}) r3 = socket$inet(0x2, 0xa, 0x80000000) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e) r4 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x400, 0x141080) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f00000001c0)) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000380)={'ipvs\x00'}, &(0x7f00000003c0)=0x1e) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vim2m\x00', 0x2, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x4000, r6}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x1f20, 0x4, 0x4, 0x0, 0xfff, {}, {0x1, 0x0, 0x40, 0xf4, 0x1, 0x6, "98a7f018"}, 0x6, 0x2, @offset=0x8de, 0x8}) [ 1847.729906] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1847.763081] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1847.779094] systemd[1]: Stopped Journal Service. [ 1847.794726] systemd[1]: Starting Journal Service... [ 1847.977534] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1848.104957] systemd-journald[2904]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1848.127020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1848.133764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1848.140799] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1848.169997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1848.176980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1848.189305] device bridge_slave_1 left promiscuous mode [ 1848.194892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1848.198932] systemd-journald[2904]: /dev/kmsg buffer overrun, some messages lost. [ 1848.209690] device bridge_slave_0 left promiscuous mode [ 1848.220514] bridge0: port 1(bridge_slave_0) entered disabled state [ 1848.240219] device veth1_macvtap left promiscuous mode [ 1848.255425] device veth0_macvtap left promiscuous mode [ 1848.271476] device veth1_vlan left promiscuous mode [ 1848.283680] device veth0_vlan left promiscuous mode [ 1848.492409] device hsr_slave_1 left promiscuous mode [ 1848.503171] device hsr_slave_0 left promiscuous mode [ 1848.518845] team0 (unregistering): Port device team_slave_1 removed [ 1848.530714] team0 (unregistering): Port device team_slave_0 removed [ 1848.549603] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1848.577914] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1848.587679] systemd[1]: Started Journal Service. [ 1848.651260] bond0 (unregistering): Released all slaves [ 1850.126717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1850.133463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1850.145901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1850.152636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1850.165002] device bridge_slave_1 left promiscuous mode [ 1850.170555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1850.182378] device bridge_slave_0 left promiscuous mode [ 1850.188652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1850.202764] device veth1_macvtap left promiscuous mode [ 1850.225799] device veth0_macvtap left promiscuous mode [ 1850.231156] device veth1_vlan left promiscuous mode [ 1850.244119] device veth0_vlan left promiscuous mode [ 1850.395099] device hsr_slave_1 left promiscuous mode [ 1850.403315] device hsr_slave_0 left promiscuous mode [ 1850.423695] team0 (unregistering): Port device team_slave_1 removed [ 1850.441156] team0 (unregistering): Port device team_slave_0 removed [ 1850.455629] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1850.473484] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1850.509586] bond0 (unregistering): Released all slaves [ 1851.453365] IPVS: ftp: loaded support on port[0] = 21 05:06:45 executing program 1: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:06:45 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0xe3, "17d39624f5deb55c235a589969c1550f553f2b3d744550893a2333a7ee59677179335527cdc0adab69e4366732414fcd20d17722a04d920c9607c883a81c129b1e55568bd65f81b557f95e3e06f511b10222b09a4db6243aeb46ae821a736c61d1dd8254848a0140559bb929b8e2e03908978e542f0256b72c33342a202b336efe977475a39f274e19e5185c245de555ca662ed014b21b22e0a3f8c86bb13add49c058193700084794b8a12a2fe2105e235ec1074f715554d0dcfbc0a0ef60ee345938c79f0ce0ed1e20266165bc399e69763bf746331787eeedbaa55d4f9e116dcb26"}, &(0x7f0000000000)=0x107) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:06:45 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 05:06:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x240, 0x1, 0x1}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x2}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x90, "87b04ea2c2703b52277504236883f1666d7d9f445795ed0a31d0d37c1c6c155f9ee616ac7006ed0f263d0496af88e851cb0317d368b2e26601c10e92a86c4c7e8d95586836db26c28062efc14d583f91ccac37fbcc3f9ce12184e62f1b35b51ea2c496d1c90026ea5873cf5e67e1d9407a600449db4af67cd7a09d3932f14e760e29ce651086239988be630c57beee7e"}, &(0x7f0000000000)=0xb4) [ 1851.511519] IPVS: ftp: loaded support on port[0] = 21 05:06:45 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x0, 0x2, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:06:45 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000180)={0x1ff, 0x8, 0x1}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000140)={0x1, 0x9, 0x40, 0x4800, r0}) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=""/176, &(0x7f00000000c0)=0xb0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000001880)={0x0, 0x801, 0x1, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:06:45 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x0, 0x2, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:06:45 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0xeae, 0x1, 0x1}) 05:06:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x2, 0x2, 0x4, 0x2, 0xfffff72c, {0x0, 0x2710}, {0x4, 0x8, 0xf8, 0x8, 0x5, 0x7, "5fd6e2ea"}, 0x7, 0x3, @planes=&(0x7f0000000000)={0x0, 0x80000000, @userptr, 0xcbe}, 0x9}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)={0x9, 0x0, 0x4, 0xb85c069c7a4aa3df, 0x4, {r1, r2/1000+10000}, {0x5, 0x1, 0x3f, 0x21, 0x1, 0x8}, 0x401, 0x3, @offset=0x5, 0x4}) [ 1851.714588] chnl_net:caif_netlink_parms(): no params data found [ 1851.834541] chnl_net:caif_netlink_parms(): no params data found [ 1851.888807] bridge0: port 1(bridge_slave_0) entered blocking state [ 1851.896235] bridge0: port 1(bridge_slave_0) entered disabled state [ 1851.903290] device bridge_slave_0 entered promiscuous mode [ 1851.910450] bridge0: port 2(bridge_slave_1) entered blocking state [ 1851.917238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1851.924845] device bridge_slave_1 entered promiscuous mode [ 1851.956141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1851.962542] bridge0: port 1(bridge_slave_0) entered disabled state [ 1851.971488] device bridge_slave_0 entered promiscuous mode [ 1851.979942] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1851.991347] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1851.999647] bridge0: port 2(bridge_slave_1) entered blocking state [ 1852.006595] bridge0: port 2(bridge_slave_1) entered disabled state [ 1852.013605] device bridge_slave_1 entered promiscuous mode [ 1852.044889] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1852.053205] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1852.060728] team0: Port device team_slave_0 added [ 1852.066593] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1852.075069] team0: Port device team_slave_1 added [ 1852.081076] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1852.108393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1852.114728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1852.140892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1852.160107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1852.166499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1852.193126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1852.205101] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1852.212391] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1852.219658] team0: Port device team_slave_0 added [ 1852.225590] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1852.232946] team0: Port device team_slave_1 added [ 1852.238869] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1852.273803] Bluetooth: hci0 command 0x0409 tx timeout [ 1852.282679] device hsr_slave_0 entered promiscuous mode [ 1852.289291] device hsr_slave_1 entered promiscuous mode [ 1852.295971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1852.302223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1852.328402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1852.339875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1852.346617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1852.371941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1852.373899] Bluetooth: hci1 command 0x0409 tx timeout [ 1852.387709] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1852.396761] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1852.404801] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1852.411936] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1852.449353] device hsr_slave_0 entered promiscuous mode [ 1852.455542] device hsr_slave_1 entered promiscuous mode [ 1852.467976] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1852.478309] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1852.595626] bridge0: port 2(bridge_slave_1) entered blocking state [ 1852.601999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1852.608640] bridge0: port 1(bridge_slave_0) entered blocking state [ 1852.614989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1852.630399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1852.636895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1852.643514] bridge0: port 1(bridge_slave_0) entered blocking state [ 1852.649901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1852.699829] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1852.706459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1852.716451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1852.726678] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1852.734531] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1852.747797] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1852.754446] 8021q: adding VLAN 0 to HW filter on device team0 [ 1852.762080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1852.770132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1852.777747] bridge0: port 1(bridge_slave_0) entered disabled state [ 1852.785903] bridge0: port 2(bridge_slave_1) entered disabled state [ 1852.792581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1852.800057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1852.807397] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1852.817604] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1852.827947] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1852.834310] 8021q: adding VLAN 0 to HW filter on device team0 [ 1852.840572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1852.848755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1852.849056] bridge0: port 1(bridge_slave_0) entered blocking state [ 1852.862447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1852.871939] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1852.880209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1852.888462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1852.896360] bridge0: port 2(bridge_slave_1) entered blocking state [ 1852.902728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1852.911760] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1852.922125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1852.930261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1852.940717] bridge0: port 1(bridge_slave_0) entered blocking state [ 1852.947123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1852.956815] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1852.964999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1852.975870] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1852.984867] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1852.992190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1853.000482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1853.008435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1853.014957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1853.021921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1853.031968] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1853.043095] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1853.050494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1853.058883] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1853.066969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1853.077817] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1853.086211] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1853.093152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1853.101564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1853.111775] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1853.122645] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1853.131036] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1853.138748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1853.146959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1853.155038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1853.162694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1853.170398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1853.178362] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1853.187720] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1853.196875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1853.205888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1853.216061] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1853.223062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1853.232185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1853.242540] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1853.249849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1853.257557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1853.266531] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1853.272665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1853.284076] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1853.295741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1853.303269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1853.313163] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1853.320673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1853.331310] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1853.339774] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1853.348271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1853.355203] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1853.370417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1853.377955] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1853.386268] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1853.392532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1853.400310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1853.411840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1853.456214] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1853.468534] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1853.477664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1853.486993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1853.520887] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1853.528494] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1853.535872] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1853.546048] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1853.557039] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1853.566510] device veth0_vlan entered promiscuous mode [ 1853.574875] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1853.582078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1853.591363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1853.599716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1853.608735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1853.617200] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1853.624982] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1853.642735] device veth1_vlan entered promiscuous mode [ 1853.649219] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1853.659556] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1853.669120] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1853.676434] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1853.686657] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1853.696998] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1853.706024] device veth0_vlan entered promiscuous mode [ 1853.712671] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1853.721366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1853.728971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1853.736873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1853.745158] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1853.752041] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1853.763227] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1853.774330] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1853.782521] device veth1_vlan entered promiscuous mode [ 1853.791056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1853.800033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1853.809790] device veth0_macvtap entered promiscuous mode [ 1853.816397] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1853.830953] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1853.839893] device veth1_macvtap entered promiscuous mode [ 1853.847712] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1853.858514] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1853.868137] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1853.877194] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1853.885686] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1853.892746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1853.901116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1853.912333] device veth0_macvtap entered promiscuous mode [ 1853.919069] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1853.927362] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1853.937530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1853.947466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1853.956898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1853.966936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1853.976164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1853.986083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1853.995395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1854.005347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1854.015590] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1854.022535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1854.031273] device veth1_macvtap entered promiscuous mode [ 1854.038575] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1854.046876] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1854.054969] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1854.062253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1854.070055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1854.079587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1854.090167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1854.099422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1854.109676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1854.119345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1854.129168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1854.138513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1854.148310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1854.158812] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1854.166111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1854.174847] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1854.182658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1854.191493] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1854.209577] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1854.220718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1854.230967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1854.240887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1854.250926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1854.260114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1854.270660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1854.280142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1854.289926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1854.299113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1854.309357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1854.319968] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1854.327332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1854.336187] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1854.345419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1854.354076] Bluetooth: hci0 command 0x041b tx timeout [ 1854.360365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1854.370232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1854.380164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1854.390252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1854.399540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1854.409327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1854.418502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1854.428272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1854.433590] Bluetooth: hci1 command 0x041b tx timeout [ 1854.438157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1854.452303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1854.465902] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1854.472799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1854.480830] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1854.493851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 05:06:48 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @empty}, &(0x7f0000000300)=0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x100000, 0x8, {}, {0x5, 0x13b30831199b05c9, 0x7, 0x8, 0x0, 0x5, "4c16f693"}, 0x3, 0x2, @fd=r1, 0x8c, 0x0, r2}) r3 = socket$inet(0x2, 0xa, 0x80000000) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e) r4 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x400, 0x141080) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f00000001c0)) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000380)={'ipvs\x00'}, &(0x7f00000003c0)=0x1e) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vim2m\x00', 0x2, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x4000, r6}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x1f20, 0x4, 0x4, 0x0, 0xfff, {}, {0x1, 0x0, 0x40, 0xf4, 0x1, 0x6, "98a7f018"}, 0x6, 0x2, @offset=0x8de, 0x8}) 05:06:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000140)='/dev/video#\x00', 0xfffffffffffeffff, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)={0x7, 0x1, 0x4, 0x40, 0x5, {}, {0x4, 0x1, 0x1b, 0x1, 0x1, 0x2, "79c15fdf"}, 0x400, 0x4, @offset=0xb5a7, 0x9, 0x0, r2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r3, 0x0, 0x9, &(0x7f0000000000)=""/111, &(0x7f00000000c0)=0x6f) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10) 05:06:48 executing program 4: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x2, 0x1, 0x3}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x7, 0x2, 0x2, {0x9277b3067866bddd, @vbi={0x20, 0xfffffff7, 0x654, 0x41564e57, [0x1, 0x7fff], [0x7, 0x1a], 0x108}}, 0xd6f9}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000040)) 05:06:48 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @win={{}, 0x6, 0x80000000, 0x0, 0x0, 0x0}}}) 05:06:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x0, 0x2, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:06:48 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)={0x4, 0x2, 0x4, 0x10, 0x800, {0x0, 0xea60}, {0x5, 0x0, 0x6, 0x9, 0x93, 0x0, "e6a35e4c"}, 0x401, 0x1, @planes=&(0x7f0000000040)={0x100, 0x9, @mem_offset=0x2, 0x8000}, 0x6e, 0x0, r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000240)={0x0, 0x2}) 05:06:48 executing program 4: clock_gettime(0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000140)={0x4, 0x1, 0x4, 0x4000, 0x400, {r1, r2/1000+60000}, {0x3, 0x0, 0x9, 0x81, 0x3, 0x1, "b20acfcb"}, 0x7fffffff, 0x0, @planes=&(0x7f0000000100)={0xfff, 0x8, @mem_offset=0x6, 0x10000}, 0x9}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x3, 0x2, 0x1}) 05:06:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xde19, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:06:48 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x0, 0x81, 0x400, 0x800}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x1}]}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 05:06:48 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x2, 0x1, 0x2, 0x80000}) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) 05:06:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000000)={0x6, 0x3, 0x4, 0x20, 0x2f6, {0x0, 0x2710}, {0x5, 0xc, 0x40, 0x18, 0x6, 0x20, "b6eb513c"}, 0xfffffffb, 0x4, @offset=0x401, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:06:48 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @sdr={0x50565559, 0x81}}) 05:06:49 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @empty}, &(0x7f0000000300)=0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x100000, 0x8, {}, {0x5, 0x13b30831199b05c9, 0x7, 0x8, 0x0, 0x5, "4c16f693"}, 0x3, 0x2, @fd=r1, 0x8c, 0x0, r2}) r3 = socket$inet(0x2, 0xa, 0x80000000) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e) r4 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x400, 0x141080) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f00000001c0)) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000380)={'ipvs\x00'}, &(0x7f00000003c0)=0x1e) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vim2m\x00', 0x2, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x4000, r6}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x1f20, 0x4, 0x4, 0x0, 0xfff, {}, {0x1, 0x0, 0x40, 0xf4, 0x1, 0x6, "98a7f018"}, 0x6, 0x2, @offset=0x8de, 0x8}) 05:06:49 executing program 5: syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x400005, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x1, 0x3ff, 0x7fffffff, 0x88000}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000200)=0xe) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, 0x0) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000000)=0x1) 05:06:49 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000240)) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000000c0)={0xffffffff, 0x0, 0x4, 0x10000, 0xffffffff, {0x0, 0x2710}, {0x3, 0x3, 0x8, 0x8, 0x6, 0x1, "174e0bd1"}, 0x1531, 0x3, @userptr=0x72b2, 0x4}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x59455247, 0x0, 0x0, [{}, {0x0, 0x3}, {0x0, 0xfffffff9}, {}, {}, {0x4}, {}, {0x10000000, 0x2}], 0x0, 0x0, 0x0, 0x0, 0x7}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)={0x101, 0x3, 0x4, 0x1, 0x5, {0x0, 0x2710}, {0x5, 0x2, 0x6, 0x4, 0xca, 0x75, "e414b3c3"}, 0x3, 0x3, @offset, 0x6}) [ 1856.433704] Bluetooth: hci0 command 0x040f tx timeout [ 1856.513486] Bluetooth: hci1 command 0x040f tx timeout [ 1858.513930] Bluetooth: hci0 command 0x0419 tx timeout [ 1858.593686] Bluetooth: hci1 command 0x0419 tx timeout [ 1858.997229] oom_reaper: reaped process 3436 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1859.017645] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1859.031327] systemd-journal cpuset=/ mems_allowed=0-1 [ 1859.036574] CPU: 1 PID: 2904 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 1859.044548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1859.053915] Call Trace: [ 1859.056503] dump_stack+0x1b2/0x281 [ 1859.060123] dump_header+0x178/0x82f [ 1859.063829] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1859.068939] ? ___ratelimit+0x2cd/0x530 [ 1859.072902] oom_kill_process.cold+0x10/0xb18 [ 1859.077391] out_of_memory+0xe3e/0x1190 [ 1859.081345] ? oom_killer_disable+0x1c0/0x1c0 [ 1859.085822] ? mutex_trylock+0x152/0x1a0 [ 1859.086811] syz-executor.1: vmalloc: allocation failure, allocated 1637384192 of 2147487744 bytes [ 1859.089871] __alloc_pages_nodemask+0x23e1/0x2720 [ 1859.089889] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1859.100767] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 1859.103709] alloc_pages_current+0x155/0x260 [ 1859.103720] filemap_fault+0xea3/0x1980 [ 1859.103738] ext4_filemap_fault+0x84/0xb0 [ 1859.103748] __do_fault+0xfa/0x380 [ 1859.103757] __handle_mm_fault+0x2497/0x4620 [ 1859.103767] ? ep_poll+0x1ab/0xa50 [ 1859.103774] ? vm_insert_page+0x7c0/0x7c0 [ 1859.103795] handle_mm_fault+0x391/0x860 [ 1859.103810] __do_page_fault+0x549/0xad0 [ 1859.112084] (null) [ 1859.114782] ? spurious_fault+0x640/0x640 [ 1859.114789] ? do_page_fault+0x60/0x500 [ 1859.114798] ? page_fault+0x2f/0x50 [ 1859.114805] page_fault+0x45/0x50 [ 1859.114813] RIP: 0001:0xffffffffffffffff [ 1859.114817] RSP: deec1e0:00007ffd4a900e50 EFLAGS: 7ffd4a900c60 [ 1859.115538] Mem-Info: [ 1859.120935] syz-executor.1 cpuset= [ 1859.123181] active_anon:14260 inactive_anon:28284 isolated_anon:0 [ 1859.123181] active_file:15 inactive_file:10 isolated_file:0 [ 1859.123181] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1859.123181] slab_reclaimable:14340 slab_unreclaimable:112728 [ 1859.123181] mapped:52618 shmem:29459 pagetables:716 bounce:0 [ 1859.123181] free:13922 free_pcp:107 free_cma:0 [ 1859.132278] / [ 1859.136582] Node 0 active_anon:56652kB inactive_anon:77796kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210472kB dirty:0kB writeback:0kB shmem:82296kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1859.140088] mems_allowed=0-1 [ 1859.144249] Node 1 active_anon:388kB inactive_anon:35340kB active_file:24kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:35540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1859.144254] Node 0 [ 1859.153468] CPU: 0 PID: 3436 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 1859.155624] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1859.159572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1859.163681] lowmem_reserve[]: [ 1859.167580] Call Trace: [ 1859.171009] 0 [ 1859.175057] dump_stack+0x1b2/0x281 [ 1859.175070] warn_alloc.cold+0x96/0x1cc [ 1859.175082] ? zone_watermark_ok_safe+0x220/0x220 [ 1859.181025] 2717 [ 1859.183443] __vmalloc_area_node+0x48a/0x680 [ 1859.183457] ? __vmalloc_node_range+0x150/0x150 [ 1859.186973] 2718 [ 1859.220182] ? __get_vm_area_node+0x27d/0x340 [ 1859.220194] __vmalloc_node_range+0xbe/0x150 [ 1859.220207] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1859.220215] vmalloc_user+0x47/0xa0 [ 1859.222001] 2718 [ 1859.250629] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1859.250638] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1859.250645] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1859.250654] __vb2_queue_alloc+0x47a/0xd90 [ 1859.250677] vb2_core_create_bufs+0x279/0x5a0 [ 1859.253779] 2718 [ 1859.280392] ? __vb2_queue_free+0x7a0/0x7a0 [ 1859.280417] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1859.280434] ? trace_hardirqs_on+0x10/0x10 [ 1859.290531] vb2_create_bufs+0x2e1/0x5b0 [ 1859.290543] ? vb2_thread_start+0x310/0x310 [ 1859.290560] v4l_create_bufs+0xa4/0x150 [ 1859.316225] Node 0 [ 1859.325554] __video_do_ioctl+0x65b/0x6a0 [ 1859.325570] ? video_ioctl2+0x30/0x30 [ 1859.328660] DMA32 free:18044kB min:36200kB low:45248kB high:54296kB active_anon:56652kB inactive_anon:77796kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7264kB pagetables:2860kB bounce:0kB free_pcp:212kB local_pcp:116kB free_cma:0kB [ 1859.331218] ? __might_fault+0x177/0x1b0 [ 1859.332992] lowmem_reserve[]: [ 1859.336599] ? video_ioctl2+0x30/0x30 [ 1859.336608] video_usercopy+0xfd/0xe70 [ 1859.336623] ? v4l_g_ctrl+0x390/0x390 [ 1859.340650] 0 0 [ 1859.345590] ? lock_acquire+0x170/0x3f0 [ 1859.345599] ? lock_downgrade+0x740/0x740 [ 1859.345611] ? trace_hardirqs_on+0x10/0x10 [ 1859.347661] 0 [ 1859.352050] ? futex_exit_release+0x220/0x220 [ 1859.356710] 0 [ 1859.358741] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1859.363216] 0 [ 1859.367606] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1859.367619] v4l2_ioctl+0x1bb/0x2f0 [ 1859.367628] ? v4l2_open+0x2f0/0x2f0 [ 1859.376579] do_vfs_ioctl+0x75a/0xff0 [ 1859.376591] ? ioctl_preallocate+0x1a0/0x1a0 [ 1859.376601] ? lock_downgrade+0x740/0x740 [ 1859.378635] Node 0 [ 1859.382944] ? __fget+0x225/0x360 [ 1859.388307] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1859.392411] ? do_vfs_ioctl+0xff0/0xff0 [ 1859.396632] lowmem_reserve[]: [ 1859.401095] ? security_file_ioctl+0x83/0xb0 [ 1859.403149] 0 [ 1859.407451] SyS_ioctl+0x7f/0xb0 [ 1859.407460] ? do_vfs_ioctl+0xff0/0xff0 [ 1859.407471] do_syscall_64+0x1d5/0x640 [ 1859.412903] 0 [ 1859.417141] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1859.417149] RIP: 0033:0x466459 [ 1859.417155] RSP: 002b:00007f3ccef46188 EFLAGS: 00000246 [ 1859.421189] 0 [ 1859.425486] ORIG_RAX: 0000000000000010 [ 1859.425492] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1859.425496] RDX: 0000000020001880 RSI: 00000000c100565c RDI: 0000000000000003 [ 1859.425501] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1859.425505] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1859.425512] R13: 00007ffc5138c9ef R14: 00007f3ccef46300 R15: 0000000000022000 [ 1859.429458] 0 [ 1859.434990] warn_alloc_show_mem: 1 callbacks suppressed [ 1859.434993] Mem-Info: [ 1859.442806] 0 [ 1859.470996] active_anon:14260 inactive_anon:28284 isolated_anon:0 [ 1859.470996] active_file:15 inactive_file:10 isolated_file:0 [ 1859.470996] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1859.470996] slab_reclaimable:14340 slab_unreclaimable:112728 [ 1859.470996] mapped:52618 shmem:29459 pagetables:716 bounce:0 [ 1859.470996] free:13922 free_pcp:106 free_cma:0 [ 1859.476598] Node 1 Normal free:26680kB min:53696kB low:67120kB high:80544kB active_anon:388kB inactive_anon:35340kB active_file:24kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:4kB bounce:0kB free_pcp:216kB local_pcp:92kB free_cma:0kB [ 1859.476615] lowmem_reserve[]: 0 0 0 0 0 [ 1859.476635] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10964kB [ 1859.476702] Node 0 DMA32: 795*4kB (MEH) 813*8kB (MEH) 252*16kB (MEH) 71*32kB (MEH) 18*64kB (MH) 7*128kB (MH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18036kB [ 1859.476763] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1859.476808] Node 1 Normal: 129*4kB (ME) 115*8kB (UME) 94*16kB (UME) 58*32kB (ME) 24*64kB (M) 14*128kB (UM) 8*256kB (M) 4*512kB (UME) 2*1024kB (UE) 2*2048kB (UM) 2*4096kB (U) = 26556kB [ 1859.476889] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1859.476894] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1859.476899] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1859.476904] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1859.476908] 29484 total pagecache pages [ 1859.476917] 0 pages in swap cache [ 1859.476922] Swap cache stats: add 0, delete 0, find 0/0 [ 1859.476926] Free swap = 0kB [ 1859.476928] Total swap = 0kB [ 1859.476934] 2097051 pages RAM [ 1859.476937] 0 pages HighMem/MovableOnly [ 1859.476939] 363841 pages reserved [ 1859.476942] 0 pages cma reserved [ 1859.476949] Out of memory (oom_kill_allocating_task): Kill process 2904 (systemd-journal) score 0 or sacrifice child [ 1859.476978] Killed process 2904 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1548kB [ 1859.484815] systemd-journal: [ 1859.505019] Node 0 active_anon:56652kB inactive_anon:77796kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210472kB dirty:0kB writeback:0kB shmem:82296kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1859.505035] Node 1 active_anon:388kB inactive_anon:35340kB active_file:24kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:35540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1859.512826] page allocation failure: order:0 [ 1859.536246] Node 0 [ 1859.542414] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1859.543111] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1859.545460] (null) [ 1859.715297] lowmem_reserve[]: [ 1859.737009] systemd-journal cpuset= [ 1859.796077] 0 [ 1859.803143] / [ 1859.993877] 2717 [ 1859.994836] mems_allowed=0-1 [ 1859.995601] 2718 [ 1859.997672] CPU: 1 PID: 2904 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 1860.000767] 2718 [ 1860.002774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1860.016792] 2718 [ 1860.022521] Call Trace: [ 1860.022530] Node 0 [ 1860.024583] dump_stack+0x1b2/0x281 [ 1860.024594] warn_alloc.cold+0x96/0x1cc [ 1860.024604] ? zone_watermark_ok_safe+0x220/0x220 [ 1860.024618] ? wait_for_completion_io+0x10/0x10 [ 1860.024628] __alloc_pages_nodemask+0x2127/0x2720 [ 1860.024650] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1860.029078] DMA32 free:18308kB min:36200kB low:45248kB high:54296kB active_anon:56224kB inactive_anon:77796kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7264kB pagetables:2860kB bounce:0kB free_pcp:804kB local_pcp:676kB free_cma:0kB [ 1860.029455] alloc_pages_current+0x155/0x260 [ 1860.033059] lowmem_reserve[]: 0 [ 1860.037149] filemap_fault+0xea3/0x1980 [ 1860.037165] ext4_filemap_fault+0x84/0xb0 [ 1860.037174] __do_fault+0xfa/0x380 [ 1860.037182] __handle_mm_fault+0x2497/0x4620 [ 1860.037191] ? ep_poll+0x1ab/0xa50 [ 1860.037197] ? vm_insert_page+0x7c0/0x7c0 [ 1860.037215] handle_mm_fault+0x391/0x860 [ 1860.037225] __do_page_fault+0x549/0xad0 [ 1860.037235] ? spurious_fault+0x640/0x640 [ 1860.037242] ? do_page_fault+0x60/0x500 [ 1860.037250] ? page_fault+0x2f/0x50 [ 1860.037258] page_fault+0x45/0x50 [ 1860.037265] RIP: 0001:0xffffffffffffffff [ 1860.037269] RSP: deec1e0:00007ffd4a900e50 EFLAGS: 7ffd4a900c60 [ 1860.041854] oom_reaper: reaped process 2904 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1576kB [ 1860.047896] 0 [ 1860.057713] kworker/u4:8 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask= [ 1860.089338] 0 [ 1860.097493] (null) [ 1860.097642] 0 [ 1860.101949] , order=3, oom_score_adj=0 [ 1860.107402] 0 [ 1860.113308] kworker/u4:8 cpuset= [ 1860.122144] / [ 1860.122234] Node 0 [ 1860.131735] mems_allowed=0-1 [ 1860.136543] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1860.142417] CPU: 1 PID: 20312 Comm: kworker/u4:8 Not tainted 4.14.227-syzkaller #0 [ 1860.147499] lowmem_reserve[]: [ 1860.153414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1860.153428] Workqueue: events_unbound call_usermodehelper_exec_work [ 1860.153434] Call Trace: [ 1860.153446] dump_stack+0x1b2/0x281 [ 1860.153456] dump_header+0x178/0x82f [ 1860.153465] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1860.153475] ? ___ratelimit+0x2cd/0x530 [ 1860.165542] 0 [ 1860.175161] oom_kill_process.cold+0x10/0xb18 [ 1860.175172] ? lock_downgrade+0x740/0x740 [ 1860.175185] out_of_memory+0x2dc/0x1190 [ 1860.175197] ? oom_killer_disable+0x1c0/0x1c0 [ 1860.176974] 0 [ 1860.179117] ? mutex_trylock+0x152/0x1a0 [ 1860.180890] 0 [ 1860.184845] __alloc_pages_nodemask+0x23e1/0x2720 [ 1860.184864] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1860.184870] ? fs_reclaim_release+0xd0/0x110 [ 1860.184887] ? kmem_cache_alloc_node+0x38b/0x410 [ 1860.184897] copy_process.part.0+0x265/0x71c0 [ 1860.184905] ? __lock_acquire+0x5fc/0x3f20 [ 1860.184921] ? trace_hardirqs_on+0x10/0x10 [ 1860.188532] 0 [ 1860.190142] ? trace_hardirqs_on+0x10/0x10 [ 1860.191829] 0 [ 1860.194068] ? static_obj+0x50/0x50 [ 1860.194080] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1860.194089] ? __cleanup_sighand+0x40/0x40 [ 1860.194099] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1860.194108] _do_fork+0x184/0xc80 [ 1860.222337] ? fork_idle+0x270/0x270 [ 1860.222350] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1860.222358] ? process_one_work+0x6c4/0x14a0 [ 1860.222365] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1860.222372] kernel_thread+0x2f/0x40 [ 1860.222380] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1860.222387] ? call_usermodehelper+0x80/0x80 [ 1860.222394] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1860.222402] process_one_work+0x793/0x14a0 [ 1860.222414] ? work_busy+0x320/0x320 [ 1860.222420] ? worker_thread+0x158/0xff0 [ 1860.222428] ? _raw_spin_unlock_irq+0x24/0x80 [ 1860.222439] worker_thread+0x5cc/0xff0 [ 1860.222452] ? rescuer_thread+0xc80/0xc80 [ 1860.231971] Node 1 [ 1860.233227] kthread+0x30d/0x420 [ 1860.242704] Normal free:26556kB min:53696kB low:67120kB high:80544kB active_anon:388kB inactive_anon:35340kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:4kB bounce:0kB free_pcp:216kB local_pcp:124kB free_cma:0kB [ 1860.249025] ? kthread_create_on_node+0xd0/0xd0 [ 1860.249036] ret_from_fork+0x24/0x30 [ 1860.258805] Mem-Info: [ 1860.261135] lowmem_reserve[]: [ 1860.270107] active_anon:14153 inactive_anon:28284 isolated_anon:0 [ 1860.270107] active_file:12 inactive_file:13 isolated_file:0 [ 1860.270107] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1860.270107] slab_reclaimable:14315 slab_unreclaimable:112662 [ 1860.270107] mapped:52243 shmem:29459 pagetables:716 bounce:0 [ 1860.270107] free:13957 free_pcp:295 free_cma:0 [ 1860.270230] 0 [ 1860.278232] Node 0 active_anon:56224kB inactive_anon:77796kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208972kB dirty:0kB writeback:0kB shmem:82296kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1860.280714] 0 [ 1860.282865] Node 1 active_anon:388kB inactive_anon:35340kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:35540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1860.287361] 0 0 0 [ 1860.287372] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB [ 1860.294254] Node 0 [ 1860.296819] 1*2048kB [ 1860.299873] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1860.304713] (M) 2*4096kB (M) = 10964kB [ 1860.304727] Node 0 DMA32: 795*4kB (MEH) 813*8kB (UMEH) 252*16kB (MEH) 72*32kB (UMEH) 18*64kB (MH) 9*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18324kB [ 1860.304789] Node 0 Normal: 0*4kB [ 1860.317042] lowmem_reserve[]: [ 1860.321016] 0*8kB [ 1860.322709] 0 [ 1860.326953] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1860.326984] Node 1 Normal: 129*4kB [ 1860.332304] 2717 [ 1860.332991] (ME) [ 1860.338123] 2718 [ 1860.341970] 115*8kB [ 1860.347351] 2718 [ 1860.348149] (UME) [ 1860.356942] 2718 [ 1860.360883] 94*16kB [ 1860.366053] (UME) 58*32kB (ME) 24*64kB (M) 14*128kB (UM) 8*256kB (M) 4*512kB (UME) 2*1024kB (UE) 2*2048kB (UM) [ 1860.374024] Node 0 [ 1860.379342] 2*4096kB [ 1860.379627] DMA32 free:18308kB min:36200kB low:45248kB high:54296kB active_anon:56224kB inactive_anon:77796kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7232kB pagetables:2860kB bounce:0kB free_pcp:964kB local_pcp:292kB free_cma:0kB [ 1860.384915] (U) = 26556kB [ 1860.384927] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1860.384933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1860.384939] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1860.384945] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1860.384949] 29484 total pagecache pages [ 1860.384959] 0 pages in swap cache [ 1860.384963] Swap cache stats: add 0, delete 0, find 0/0 [ 1860.384966] Free swap = 0kB [ 1860.384969] Total swap = 0kB [ 1860.384975] 2097051 pages RAM [ 1860.384980] 0 pages HighMem/MovableOnly [ 1860.396155] lowmem_reserve[]: [ 1860.402573] 363841 pages reserved [ 1860.402790] 0 [ 1860.406856] 0 pages cma reserved [ 1860.780529] 0 0 0 0 [ 1860.782884] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1860.808512] lowmem_reserve[]: 0 0 0 0 0 [ 1860.812511] Node 1 Normal free:26556kB min:53696kB low:67120kB high:80544kB active_anon:388kB inactive_anon:35340kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:4kB bounce:0kB free_pcp:216kB local_pcp:92kB free_cma:0kB [ 1860.841128] lowmem_reserve[]: 0 0 0 0 0 [ 1860.845164] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10964kB [ 1860.858824] Node 0 DMA32: 795*4kB (MEH) 812*8kB (UMEH) 252*16kB (MEH) 72*32kB (UMEH) 18*64kB (MH) 9*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18316kB [ 1860.873939] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1860.884694] Node 1 Normal: 129*4kB (ME) 115*8kB (UME) 94*16kB (UME) 58*32kB (ME) 24*64kB (M) 14*128kB (UM) 8*256kB (M) 4*512kB (UME) 2*1024kB (UE) 2*2048kB (UM) 2*4096kB (U) = 26556kB [ 1860.901328] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1860.910751] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1860.919403] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1860.928292] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1860.936905] 29484 total pagecache pages [ 1860.940877] 0 pages in swap cache [ 1860.944352] Swap cache stats: add 0, delete 0, find 0/0 [ 1860.949715] Free swap = 0kB [ 1860.952726] Total swap = 0kB [ 1860.955800] 2097051 pages RAM [ 1860.958894] 0 pages HighMem/MovableOnly [ 1860.962858] 363841 pages reserved [ 1860.966342] 0 pages cma reserved [ 1860.969708] Out of memory: Kill process 7966 (syz-fuzzer) score 5 or sacrifice child [ 1860.977692] Killed process 2916 (syz-executor.3) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1861.029424] oom_reaper: reaped process 2916 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1861.188134] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1861.211304] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1861.221706] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1861.229403] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1861.236326] systemd[1]: Stopped Journal Service. [ 1861.266279] systemd[1]: Starting Journal Service... [ 1861.300611] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1861.576367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1861.583187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1861.591214] systemd-journald[3489]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1861.612034] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1861.623260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1861.644066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1861.664495] device bridge_slave_1 left promiscuous mode [ 1861.670050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1861.680915] device bridge_slave_0 left promiscuous mode [ 1861.687953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1861.696067] systemd-journald[3489]: /dev/kmsg buffer overrun, some messages lost. [ 1861.706531] device veth1_macvtap left promiscuous mode [ 1861.711844] device veth0_macvtap left promiscuous mode [ 1861.737450] device veth1_vlan left promiscuous mode [ 1861.742533] device veth0_vlan left promiscuous mode [ 1861.991009] device hsr_slave_1 left promiscuous mode [ 1862.014858] device hsr_slave_0 left promiscuous mode [ 1862.056215] team0 (unregistering): Port device team_slave_1 removed [ 1862.074311] systemd[1]: Started Journal Service. [ 1862.080634] team0 (unregistering): Port device team_slave_0 removed [ 1862.096618] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1862.117363] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1862.207886] bond0 (unregistering): Released all slaves 05:06:58 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = socket(0x53, 0x80000, 0x5) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe0, 0x13, 0xf, 0x70bd28, 0x25dfdbff, {0x1d, 0x5, 0x6, 0x6, {0x4e21, 0x4e22, [0x88, 0x400, 0x80, 0x7fffffff], [0x4, 0x79c, 0xf9, 0x40], r2, [0x5e2243b8]}, 0x6, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x91, 0x1, "082a4746178e294176273f3c67ed1564e4314b520f8a400ad24a0e94c537a4aa7c6f02f9ccb367a36057009df82b0c8bf8334a84016533e1d99004ba6a458bcc3998ef80ea1906928534a23c748bce9c1c94b677da98d23bd672134f6a1989538056b269c3c3aa1414822a759979b4557e21e823334f2882cf416f527401f7d719a72605c18318953ec2036032"}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x4004010) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={[], 0x12}}, 0x8) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000100)=0xe) 05:06:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x0, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:06:58 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x3918314155957e51) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247, 0x0, 0x0, [], 0x0, 0x0, 0x0, 0x2}}) 05:06:59 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r1}, 0x4) 05:06:59 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x7, 0xee7, 0x80000001, 0x84800, r2}) 05:06:59 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @empty}, &(0x7f0000000300)=0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x100000, 0x8, {}, {0x5, 0x13b30831199b05c9, 0x7, 0x8, 0x0, 0x5, "4c16f693"}, 0x3, 0x2, @fd=r1, 0x8c, 0x0, r2}) r3 = socket$inet(0x2, 0xa, 0x80000000) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e) r4 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x400, 0x141080) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f00000001c0)) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000380)={'ipvs\x00'}, &(0x7f00000003c0)=0x1e) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vim2m\x00', 0x2, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x4000, r6}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) 05:06:59 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x0, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:06:59 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x6, 0x2) read$rfkill(0xffffffffffffffff, &(0x7f0000000000), 0x8) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:06:59 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x202c040}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x374, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PEERS={0x348, 0x8, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000001c0)={0x441, 0x3, 0x4, 0x10, 0x4c, {r3, r4/1000+10000}, {0x4, 0xc, 0x0, 0x1, 0x5, 0x4, "787688a8"}, 0x81, 0x2, @fd, 0x401, 0x0, r5}) 05:07:09 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x3, 0x40402) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000000)={0xff, 0x80000001}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffffffffffffff80, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x2}) 05:07:09 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0x2, 0x0, 0x4, 0xe000, 0xfd, {r1, r2/1000+10000}, {0x3, 0x2, 0x6, 0x2, 0x2, 0xe1, "a9c3e503"}, 0x1, 0x1, @offset=0x2, 0x8}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x2, 0x1}) 05:07:09 executing program 4: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000240)={0x6, 0x1, 0x2}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x800, 0x1, 0x4, 0x10000, 0x9, {0x77359400}, {0x3, 0x0, 0x5f, 0x3, 0x0, 0x0, "08e554cd"}, 0x9, 0x3, @planes=&(0x7f0000000000)={0x1, 0xffff, @userptr=0x5fa, 0x709}, 0x2, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x6, 0x0, 0x4, 0x70000, 0x9, {0x0, 0x2710}, {0x1, 0x0, 0x1, 0x9, 0x3f, 0x9, "9a109d2c"}, 0x7f, 0x2, @userptr=0x9, 0x8, 0x0, r1}) 05:07:10 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @empty}, &(0x7f0000000300)=0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x100000, 0x8, {}, {0x5, 0x13b30831199b05c9, 0x7, 0x8, 0x0, 0x5, "4c16f693"}, 0x3, 0x2, @fd=r1, 0x8c, 0x0, r2}) r3 = socket$inet(0x2, 0xa, 0x80000000) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e) r4 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x400, 0x141080) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f00000001c0)) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000380)={'ipvs\x00'}, &(0x7f00000003c0)=0x1e) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vim2m\x00', 0x2, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x4000, r6}) [ 1877.832849] IPVS: ftp: loaded support on port[0] = 21 [ 1878.058167] chnl_net:caif_netlink_parms(): no params data found [ 1878.241894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1878.249132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1878.260384] device bridge_slave_0 entered promiscuous mode [ 1878.269579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1878.280005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1878.288548] device bridge_slave_1 entered promiscuous mode [ 1878.323839] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1878.337705] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1878.369789] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1878.377450] team0: Port device team_slave_0 added [ 1878.387233] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1878.395154] team0: Port device team_slave_1 added [ 1878.424939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1878.431278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1878.460622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1878.472757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1878.479092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1878.508720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1878.520096] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1878.532320] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1878.571564] device hsr_slave_0 entered promiscuous mode [ 1878.577827] device hsr_slave_1 entered promiscuous mode [ 1878.588141] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1878.595935] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1878.733272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1878.739672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1878.746369] bridge0: port 1(bridge_slave_0) entered blocking state [ 1878.752789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1878.808407] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1878.815267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1878.828717] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1878.838615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1878.850213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1878.858966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1878.874378] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1878.880584] 8021q: adding VLAN 0 to HW filter on device team0 [ 1878.896141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1878.907857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1878.914410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1878.936076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1878.947691] bridge0: port 2(bridge_slave_1) entered blocking state [ 1878.954309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1878.977901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1878.989783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1879.011028] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1879.021184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1879.036881] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1879.043743] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1879.051786] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1879.064144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1879.071924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1879.090385] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1879.100172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1879.110639] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1879.122215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1879.128988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1879.145809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1879.250028] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1879.265374] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1879.276008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1879.286328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1879.339307] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1879.347279] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1879.358748] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1879.369752] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1879.381825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1879.390793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1879.405331] device veth0_vlan entered promiscuous mode [ 1879.416504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1879.425246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1879.440090] device veth1_vlan entered promiscuous mode [ 1879.448142] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1879.464189] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1879.481415] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1879.496758] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1879.505396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1879.517116] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1879.526568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1879.538043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1879.549171] device veth0_macvtap entered promiscuous mode [ 1879.560723] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1879.571994] device veth1_macvtap entered promiscuous mode [ 1879.583019] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1879.597771] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1879.609013] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1879.623582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1879.636954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1879.648137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1879.661638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1879.676106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1879.686223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1879.700312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1879.710848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1879.724588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1879.735003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1879.748644] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1879.757710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1879.768486] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1879.777508] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1879.787998] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1879.799329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1879.813015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1879.827380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1879.837335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1879.851231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1879.860680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1879.872133] Bluetooth: hci1 command 0x0409 tx timeout [ 1879.882391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1879.891545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1879.905744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1879.914941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1879.928690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1879.939364] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1879.950217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1879.957581] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1879.969712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1880.268107] oom_reaper: reaped process 3822 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1880.304190] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1880.321910] systemd-journal cpuset=/ mems_allowed=0-1 [ 1880.327239] CPU: 1 PID: 3805 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 1880.335117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1880.344465] Call Trace: [ 1880.347055] dump_stack+0x1b2/0x281 [ 1880.350679] dump_header+0x178/0x82f [ 1880.354388] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1880.359485] ? ___ratelimit+0x2cd/0x530 [ 1880.363456] oom_kill_process.cold+0x10/0xb18 [ 1880.367957] out_of_memory+0xe3e/0x1190 [ 1880.372135] ? oom_killer_disable+0x1c0/0x1c0 [ 1880.376610] ? mutex_trylock+0x152/0x1a0 [ 1880.380650] __alloc_pages_nodemask+0x23e1/0x2720 [ 1880.385308] syz-executor.1: vmalloc: allocation failure, allocated 1621491712 of 2147487744 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 1880.385487] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1880.385493] (null) [ 1880.398856] alloc_pages_current+0x155/0x260 [ 1880.398869] filemap_fault+0xea3/0x1980 [ 1880.398886] ext4_filemap_fault+0x84/0xb0 [ 1880.398895] __do_fault+0xfa/0x380 [ 1880.398904] __handle_mm_fault+0x2497/0x4620 [ 1880.398917] ? ep_poll+0x1ab/0xa50 [ 1880.407095] syz-executor.1 cpuset= [ 1880.410270] ? vm_insert_page+0x7c0/0x7c0 [ 1880.414258] / [ 1880.418357] handle_mm_fault+0x391/0x860 [ 1880.421870] mems_allowed=0-1 [ 1880.426259] __do_page_fault+0x549/0xad0 [ 1880.426271] ? spurious_fault+0x640/0x640 [ 1880.426279] ? do_page_fault+0x60/0x500 [ 1880.426287] ? page_fault+0x2f/0x50 [ 1880.426294] page_fault+0x45/0x50 [ 1880.426302] RIP: 0001:0xffffffffffffffff [ 1880.426306] RSP: 5f6af1e0:00007ffe18d5eca0 EFLAGS: 7ffe18d5eab0 [ 1880.432064] Mem-Info: [ 1880.436979] CPU: 0 PID: 3822 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 1880.437527] active_anon:14348 inactive_anon:32349 isolated_anon:0 [ 1880.437527] active_file:17 inactive_file:16 isolated_file:0 [ 1880.437527] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1880.437527] slab_reclaimable:14004 slab_unreclaimable:112752 [ 1880.437527] mapped:52593 shmem:33556 pagetables:745 bounce:0 [ 1880.437527] free:13915 free_pcp:88 free_cma:0 [ 1880.439218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1880.443745] Node 0 active_anon:56160kB inactive_anon:88796kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200132kB dirty:0kB writeback:0kB shmem:93416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1880.446340] Call Trace: [ 1880.450391] Node 1 active_anon:1232kB inactive_anon:40600kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:40808kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1880.454516] dump_stack+0x1b2/0x281 [ 1880.454533] warn_alloc.cold+0x96/0x1cc [ 1880.454545] ? zone_watermark_ok_safe+0x220/0x220 [ 1880.458491] Node 0 [ 1880.462139] __vmalloc_area_node+0x48a/0x680 [ 1880.462155] ? __vmalloc_node_range+0x150/0x150 [ 1880.465590] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1880.469629] ? __get_vm_area_node+0x27d/0x340 [ 1880.475675] lowmem_reserve[]: [ 1880.478057] __vmalloc_node_range+0xbe/0x150 [ 1880.485838] 0 [ 1880.518962] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1880.518970] vmalloc_user+0x47/0xa0 [ 1880.518979] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1880.528381] 2717 [ 1880.556027] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1880.556037] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1880.556048] __vb2_queue_alloc+0x47a/0xd90 [ 1880.556068] vb2_core_create_bufs+0x279/0x5a0 [ 1880.558626] 2718 [ 1880.586205] ? __vb2_queue_free+0x7a0/0x7a0 [ 1880.586218] ? futex_wait+0x42f/0x5a0 [ 1880.586232] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1880.589835] 2718 [ 1880.593791] ? trace_hardirqs_on+0x10/0x10 [ 1880.593802] vb2_create_bufs+0x2e1/0x5b0 [ 1880.593815] ? vb2_thread_start+0x310/0x310 [ 1880.598627] 2718 [ 1880.600846] ? futex_wait+0x42f/0x5a0 [ 1880.609885] v4l_create_bufs+0xa4/0x150 [ 1880.635520] Node 0 [ 1880.639981] __video_do_ioctl+0x65b/0x6a0 [ 1880.643085] DMA32 free:17864kB min:36200kB low:45248kB high:54296kB active_anon:56160kB inactive_anon:88796kB active_file:44kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7200kB pagetables:2772kB bounce:0kB free_pcp:228kB local_pcp:108kB free_cma:0kB [ 1880.647463] ? video_ioctl2+0x30/0x30 [ 1880.649232] lowmem_reserve[]: [ 1880.654601] ? __might_fault+0x177/0x1b0 [ 1880.654611] ? video_ioctl2+0x30/0x30 [ 1880.654620] video_usercopy+0xfd/0xe70 [ 1880.654639] ? v4l_g_ctrl+0x390/0x390 [ 1880.658239] 0 [ 1880.662563] ? lock_acquire+0x170/0x3f0 [ 1880.662572] ? lock_downgrade+0x740/0x740 [ 1880.662581] ? trace_hardirqs_on+0x10/0x10 [ 1880.662593] ? futex_exit_release+0x220/0x220 [ 1880.664626] 0 0 [ 1880.669978] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1880.674145] 0 [ 1880.678343] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1880.682828] 0 [ 1880.684870] v4l2_ioctl+0x1bb/0x2f0 [ 1880.692944] ? v4l2_open+0x2f0/0x2f0 [ 1880.692954] do_vfs_ioctl+0x75a/0xff0 [ 1880.692966] ? ioctl_preallocate+0x1a0/0x1a0 [ 1880.698340] Node 0 [ 1880.700386] ? lock_downgrade+0x740/0x740 [ 1880.704620] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1880.708651] ? __fget+0x225/0x360 [ 1880.712958] lowmem_reserve[]: [ 1880.714990] ? do_vfs_ioctl+0xff0/0xff0 [ 1880.718762] 0 [ 1880.722720] ? security_file_ioctl+0x83/0xb0 [ 1880.722730] SyS_ioctl+0x7f/0xb0 [ 1880.722739] ? do_vfs_ioctl+0xff0/0xff0 [ 1880.724947] 0 [ 1880.729078] do_syscall_64+0x1d5/0x640 [ 1880.757397] 0 [ 1880.761158] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1880.764248] 0 [ 1880.768272] RIP: 0033:0x466459 [ 1880.772063] 0 [ 1880.776273] RSP: 002b:00007f3ccef46188 EFLAGS: 00000246 [ 1880.781871] ORIG_RAX: 0000000000000010 [ 1880.786010] Node 1 [ 1880.790114] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1880.794371] Normal free:26820kB min:53696kB low:67120kB high:80544kB active_anon:1232kB inactive_anon:40600kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:204kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1880.798831] RDX: 0000000020001880 RSI: 00000000c100565c RDI: 0000000000000003 [ 1880.800802] lowmem_reserve[]: [ 1880.805882] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1880.805887] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1880.805892] R13: 00007ffc5138c9ef R14: 00007f3ccef46300 R15: 0000000000022000 [ 1880.818994] Mem-Info: [ 1880.834036] 0 [ 1880.838521] active_anon:14348 inactive_anon:32349 isolated_anon:0 [ 1880.838521] active_file:17 inactive_file:16 isolated_file:0 [ 1880.838521] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1880.838521] slab_reclaimable:14004 slab_unreclaimable:112752 [ 1880.838521] mapped:52593 shmem:33556 pagetables:745 bounce:0 [ 1880.838521] free:13915 free_pcp:80 free_cma:0 [ 1880.838684] 0 [ 1880.867620] Node 0 active_anon:56160kB inactive_anon:88796kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200132kB dirty:0kB writeback:0kB shmem:93416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1880.879343] 0 [ 1880.881381] Node 1 active_anon:1232kB inactive_anon:40600kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:40808kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1880.886630] 0 [ 1880.892405] Node 0 [ 1880.899740] 0 [ 1880.901520] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1880.908404] lowmem_reserve[]: [ 1880.919902] Node 0 [ 1880.923937] 0 [ 1880.929324] DMA: [ 1880.958485] 2717 [ 1880.970893] 0*4kB [ 1880.977705] 2718 [ 1880.981692] 0*8kB [ 1880.988970] 2718 2718 [ 1880.988979] Node 0 DMA32 free:17740kB min:36200kB low:45248kB high:54296kB active_anon:56160kB inactive_anon:88796kB active_file:36kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7200kB pagetables:2772kB bounce:0kB free_pcp:188kB local_pcp:120kB free_cma:0kB [ 1880.988999] lowmem_reserve[]: 0 0 0 0 0 [ 1880.989018] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1880.989035] lowmem_reserve[]: 0 0 0 [ 1880.998821] 0*16kB [ 1881.028731] 0 [ 1881.039971] 1*32kB [ 1881.058401] 0 [ 1881.093560] (U) [ 1881.130062] 1*64kB [ 1881.130762] Node 1 [ 1881.132971] (U) [ 1881.138862] Normal free:26820kB min:53696kB low:67120kB high:80544kB active_anon:1232kB inactive_anon:40600kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:204kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1881.169054] 1*128kB [ 1881.180112] lowmem_reserve[]: [ 1881.203559] (U) [ 1881.207433] 0 [ 1881.207894] 0*256kB [ 1881.209850] 0 [ 1881.217270] 1*512kB [ 1881.250216] 0 [ 1881.255975] (U) [ 1881.256535] 0 [ 1881.258332] 0*1024kB [ 1881.260783] 0 [ 1881.266362] 1*2048kB (M) 2*4096kB (M) = 10976kB [ 1881.275313] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10976kB [ 1881.277527] Node 0 DMA32: 539*4kB (UME) 810*8kB (UME) 213*16kB (UME) 32*32kB (UME) 13*64kB (M) 6*128kB (UM) 4*256kB (UM) 2*512kB (M) 1*1024kB (U) 0*2048kB 0*4096kB = 17740kB [ 1881.294610] Node 0 DMA32: 538*4kB (ME) 809*8kB (UME) 212*16kB (ME) 31*32kB (ME) 14*64kB (UM) 5*128kB (M) 4*256kB (UM) 2*512kB (M) 1*1024kB (U) 0*2048kB 0*4096kB = 17616kB [ 1881.320623] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1881.338948] Node 0 [ 1881.349644] Node 1 Normal: 169*4kB (UME) 130*8kB (UME) 99*16kB (UME) 35*32kB (UME) 14*64kB (UM) 4*128kB (M) 2*256kB (UM) 4*512kB (UME) 2*1024kB (UE) 0*2048kB 4*4096kB (U) = 26820kB [ 1881.358124] Normal: [ 1881.380209] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1881.380459] 0*4kB [ 1881.382590] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1881.391407] 0*8kB [ 1881.400164] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1881.407346] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1881.418270] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1881.427753] Node 1 Normal: [ 1881.431012] 33589 total pagecache pages [ 1881.431022] 0 pages in swap cache [ 1881.434272] 169*4kB (UME) 130*8kB (UME) 99*16kB (UME) 35*32kB (UME) 14*64kB (UM) 4*128kB (M) 2*256kB (UM) 4*512kB (UME) 2*1024kB (UE) 0*2048kB 4*4096kB (U) = 26820kB [ 1881.434340] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1881.434345] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1881.434351] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1881.434357] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1881.434361] 33589 total pagecache pages [ 1881.434371] 0 pages in swap cache [ 1881.434376] Swap cache stats: add 0, delete 0, find 0/0 [ 1881.434380] Free swap = 0kB [ 1881.434383] Total swap = 0kB [ 1881.434389] 2097051 pages RAM [ 1881.434392] 0 pages HighMem/MovableOnly [ 1881.434395] 363841 pages reserved [ 1881.434397] 0 pages cma reserved [ 1881.532994] Swap cache stats: add 0, delete 0, find 0/0 [ 1881.538370] Free swap = 0kB [ 1881.541382] Total swap = 0kB [ 1881.550206] 2097051 pages RAM [ 1881.553931] 0 pages HighMem/MovableOnly [ 1881.557901] 363841 pages reserved [ 1881.561342] 0 pages cma reserved [ 1881.570450] Out of memory (oom_kill_allocating_task): Kill process 3805 (systemd-journal) score 0 or sacrifice child [ 1881.581326] Killed process 3805 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1296kB [ 1881.598374] oom_reaper: reaped process 3805 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1296kB [ 1881.623969] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1881.651863] in:imklog cpuset=/ mems_allowed=0-1 [ 1881.656572] CPU: 0 PID: 2003 Comm: in:imklog Not tainted 4.14.227-syzkaller #0 [ 1881.663928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1881.673281] Call Trace: [ 1881.675870] dump_stack+0x1b2/0x281 [ 1881.679497] dump_header+0x178/0x82f [ 1881.683210] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1881.688307] ? ___ratelimit+0x2cd/0x530 [ 1881.692282] oom_kill_process.cold+0x10/0xb18 [ 1881.696782] out_of_memory+0xe3e/0x1190 [ 1881.700759] ? oom_killer_disable+0x1c0/0x1c0 [ 1881.705250] ? mutex_trylock+0x152/0x1a0 [ 1881.709311] __alloc_pages_nodemask+0x23e1/0x2720 [ 1881.714163] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1881.719025] alloc_pages_current+0x155/0x260 [ 1881.723431] filemap_fault+0xea3/0x1980 [ 1881.727410] ext4_filemap_fault+0x84/0xb0 [ 1881.731555] __do_fault+0xfa/0x380 [ 1881.735091] __handle_mm_fault+0x2497/0x4620 [ 1881.739495] ? vm_insert_page+0x7c0/0x7c0 [ 1881.743639] ? lock_downgrade+0x740/0x740 [ 1881.747793] handle_mm_fault+0x391/0x860 [ 1881.751851] __do_page_fault+0x549/0xad0 [ 1881.755911] ? spurious_fault+0x640/0x640 [ 1881.760051] ? do_page_fault+0x60/0x500 [ 1881.764022] ? page_fault+0x2f/0x50 [ 1881.767639] page_fault+0x45/0x50 [ 1881.771086] RIP: 1fa0:0x1f9f [ 1881.774093] RSP: 0000:000055c5ca8629d0 EFLAGS: 7f04c38e0da0 [ 1881.774220] Mem-Info: [ 1881.782384] active_anon:14248 inactive_anon:32349 isolated_anon:0 [ 1881.782384] active_file:15 inactive_file:18 isolated_file:0 [ 1881.782384] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1881.782384] slab_reclaimable:14004 slab_unreclaimable:112790 [ 1881.782384] mapped:52593 shmem:33556 pagetables:745 bounce:0 [ 1881.782384] free:13853 free_pcp:203 free_cma:0 [ 1881.788242] systemd-journal: [ 1881.815712] Node 0 active_anon:55760kB inactive_anon:88796kB active_file:36kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200132kB dirty:0kB writeback:0kB shmem:93416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1881.846577] Node 1 active_anon:1232kB inactive_anon:40600kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:40808kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1881.860695] page allocation failure: order:0 [ 1881.875245] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1881.901823] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 1881.905889] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1881.918273] Node 0 DMA32 free:17728kB min:36200kB low:45248kB high:54296kB active_anon:55688kB inactive_anon:88796kB active_file:44kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7200kB pagetables:2772kB bounce:0kB free_pcp:748kB local_pcp:180kB free_cma:0kB [ 1881.931817] systemd-journal cpuset= [ 1881.947397] lowmem_reserve[]: 0 0 0 0 0 [ 1881.947421] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1881.947438] lowmem_reserve[]: 0 0 0 0 0 [ 1881.947457] Node 1 Normal free:26820kB min:53696kB low:67120kB high:80544kB active_anon:1232kB inactive_anon:40600kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:204kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1881.947474] lowmem_reserve[]: 0 0 0 0 0 [ 1881.947491] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) [ 1882.017941] Bluetooth: hci1 command 0x041b tx timeout [ 1882.028471] / mems_allowed=0-1 [ 1882.031716] CPU: 0 PID: 3805 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 1882.039595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1882.049208] Call Trace: [ 1882.051973] dump_stack+0x1b2/0x281 [ 1882.055600] warn_alloc.cold+0x96/0x1cc [ 1882.059573] ? zone_watermark_ok_safe+0x220/0x220 [ 1882.064410] ? usleep_range+0x130/0x130 [ 1882.068379] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1882.073476] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1882.078485] ? run_timer_softirq+0x5a0/0x5a0 [ 1882.082919] __alloc_pages_nodemask+0x2127/0x2720 [ 1882.087769] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1882.092632] alloc_pages_current+0x155/0x260 [ 1882.097041] filemap_fault+0xea3/0x1980 [ 1882.101017] ext4_filemap_fault+0x84/0xb0 [ 1882.105159] __do_fault+0xfa/0x380 [ 1882.108696] __handle_mm_fault+0x2497/0x4620 [ 1882.113112] ? ep_poll+0x1ab/0xa50 [ 1882.116655] ? vm_insert_page+0x7c0/0x7c0 [ 1882.120811] handle_mm_fault+0x391/0x860 [ 1882.124875] __do_page_fault+0x549/0xad0 [ 1882.128937] ? spurious_fault+0x640/0x640 [ 1882.133079] ? do_page_fault+0x60/0x500 [ 1882.137049] ? page_fault+0x2f/0x50 [ 1882.140670] page_fault+0x45/0x50 [ 1882.144116] RIP: 0001:0xffffffffffffffff [ 1882.148162] RSP: 5f6af1e0:00007ffe18d5eca0 EFLAGS: 7ffe18d5eab0 [ 1882.149622] 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10976kB [ 1882.165399] Node 0 DMA32: 538*4kB (ME) 910*8kB (UMEH) 220*16kB (UME) 31*32kB (ME) 16*64kB (UM) 5*128kB (M) 4*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 18680kB [ 1882.181222] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1882.192888] Node 1 Normal: 2*4kB (UE) 85*8kB (UME) 99*16kB (UME) 37*32kB (UME) 15*64kB (UM) 5*128kB (UM) 3*256kB (UM) 5*512kB (UME) 2*1024kB (UE) 1*2048kB (U) 80*4096kB (U) = 340160kB [ 1882.210373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1882.226033] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1882.231788] Mem-Info: [ 1882.235228] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1882.237033] active_anon:14230 inactive_anon:32349 isolated_anon:0 [ 1882.237033] active_file:42 inactive_file:391 isolated_file:0 [ 1882.237033] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1882.237033] slab_reclaimable:14004 slab_unreclaimable:112528 [ 1882.237033] mapped:52793 shmem:33556 pagetables:745 bounce:0 [ 1882.237033] free:107257 free_pcp:408 free_cma:0 [ 1882.237047] Node 0 active_anon:55688kB inactive_anon:88796kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200132kB dirty:0kB writeback:0kB shmem:93416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1882.237059] Node 1 active_anon:1232kB inactive_anon:40600kB active_file:124kB inactive_file:1524kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:11040kB dirty:0kB writeback:0kB shmem:40808kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1882.237062] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1882.237080] lowmem_reserve[]: 0 2717 [ 1882.246405] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1882.283145] 2718 [ 1882.351799] 34218 total pagecache pages [ 1882.368843] 2718 2718 [ 1882.387914] Node 0 DMA32 free:19392kB min:36200kB low:45248kB high:54296kB active_anon:55688kB inactive_anon:88796kB active_file:44kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7168kB pagetables:2772kB bounce:0kB free_pcp:916kB local_pcp:556kB free_cma:0kB [ 1882.391818] 0 pages in swap cache [ 1882.425125] lowmem_reserve[]: 0 0 0 0 0 [ 1882.429866] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1882.451833] Swap cache stats: add 0, delete 0, find 0/0 [ 1882.461229] Free swap = 0kB [ 1882.462130] lowmem_reserve[]: 0 0 0 0 0 [ 1882.464598] Total swap = 0kB [ 1882.468487] Node 1 Normal free:559464kB min:53696kB low:67120kB high:80544kB active_anon:1232kB inactive_anon:40600kB active_file:424kB inactive_file:2624kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:204kB bounce:0kB free_pcp:944kB local_pcp:252kB free_cma:0kB [ 1882.471332] 2097051 pages RAM [ 1882.506252] lowmem_reserve[]: 0 0 0 0 0 [ 1882.518400] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10976kB [ 1882.533915] Node 0 DMA32: 538*4kB (ME) 1000*8kB (UMEH) 223*16kB (UME) 32*32kB (UME) 16*64kB (UM) 5*128kB (M) 4*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 19480kB [ 1882.541794] 0 pages HighMem/MovableOnly [ 1882.552104] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1882.568948] 363841 pages reserved [ 1882.569410] Node 1 Normal: 7*4kB (UME) 54*8kB (UE) 11*16kB (UE) 35*32kB (UME) [ 1882.572498] 0 pages cma reserved [ 1882.572504] 24*64kB [ 1882.579947] Out of memory (oom_kill_allocating_task): Kill process 2003 (in:imklog) score 0 or sacrifice child [ 1882.587230] (UM) 8*128kB (UM) 10*256kB (UM) 10*512kB (UME) 9*1024kB (UE) 7*2048kB (U) 152*4096kB (U) = 658140kB [ 1882.611367] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1882.620794] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1882.631789] Killed process 1988 (rsyslogd) total-vm:254332kB, anon-rss:988kB, file-rss:0kB, shmem-rss:0kB [ 1882.650636] oom_reaper: reaped process 1988 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1882.667073] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1882.677098] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1882.686548] 34736 total pagecache pages [ 1882.690541] 0 pages in swap cache [ 1882.702303] Swap cache stats: add 0, delete 0, find 0/0 [ 1882.707701] Free swap = 0kB [ 1882.710708] Total swap = 0kB [ 1882.713790] 2097051 pages RAM [ 1882.716885] 0 pages HighMem/MovableOnly [ 1882.721087] 363841 pages reserved [ 1882.729731] 0 pages cma reserved [ 1882.733277] systemd-journal invoked oom-killer: gfp_mask=0x0(), nodemask=(null), order=0, oom_score_adj=0 [ 1882.751576] systemd-journal cpuset=/ mems_allowed=0-1 [ 1882.756925] CPU: 1 PID: 3805 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 1882.764808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1882.774162] Call Trace: [ 1882.776753] dump_stack+0x1b2/0x281 [ 1882.780391] dump_header+0x178/0x82f [ 1882.784120] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1882.789232] ? ___ratelimit+0x2cd/0x530 [ 1882.793211] oom_kill_process.cold+0x10/0xb18 [ 1882.797716] out_of_memory+0xe3e/0x1190 [ 1882.801698] ? pagefault_out_of_memory+0xaa/0xd0 [ 1882.806456] ? ep_poll+0x1ab/0xa50 [ 1882.810000] ? oom_killer_disable+0x1c0/0x1c0 [ 1882.814496] ? mutex_trylock+0x152/0x1a0 [ 1882.818571] ? pagefault_out_of_memory+0xaa/0xd0 [ 1882.823334] pagefault_out_of_memory+0xbb/0xd0 [ 1882.827957] ? out_of_memory+0x1190/0x1190 [ 1882.832198] ? lock_downgrade+0x740/0x740 [ 1882.836350] mm_fault_error+0xad/0x2c0 [ 1882.840381] __do_page_fault+0x93c/0xad0 [ 1882.844451] ? spurious_fault+0x640/0x640 [ 1882.848601] ? do_page_fault+0x60/0x500 [ 1882.852587] ? page_fault+0x2f/0x50 [ 1882.856217] page_fault+0x45/0x50 [ 1882.859669] RIP: 0001:0xffffffffffffffff [ 1882.863722] RSP: 5f6af1e0:00007ffe18d5eca0 EFLAGS: 7ffe18d5eab0 [ 1882.873191] Mem-Info: [ 1882.889623] active_anon:13988 inactive_anon:32349 isolated_anon:0 [ 1882.889623] active_file:551 inactive_file:1206 isolated_file:0 [ 1882.889623] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1882.889623] slab_reclaimable:14004 slab_unreclaimable:112579 [ 1882.889623] mapped:53800 shmem:33556 pagetables:716 bounce:0 [ 1882.889623] free:272244 free_pcp:562 free_cma:0 [ 1882.929489] Node 0 active_anon:54552kB inactive_anon:88796kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200136kB dirty:0kB writeback:0kB shmem:93416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1882.965629] Node 1 active_anon:1312kB inactive_anon:40600kB active_file:2256kB inactive_file:5264kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:15208kB dirty:0kB writeback:0kB shmem:40808kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1883.004052] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1883.040138] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1883.045334] Node 0 DMA32 free:23780kB min:36200kB low:45248kB high:54296kB active_anon:54552kB inactive_anon:88796kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7040kB pagetables:2620kB bounce:0kB free_pcp:1260kB local_pcp:748kB free_cma:0kB [ 1883.103178] lowmem_reserve[]: 0 0 0 0 0 [ 1883.107314] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1883.137616] lowmem_reserve[]: 0 0 0 0 0 [ 1883.141679] Node 1 Normal free:1354520kB min:53696kB low:67120kB high:80544kB active_anon:812kB inactive_anon:40600kB active_file:4256kB inactive_file:4764kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:84kB bounce:0kB free_pcp:1364kB local_pcp:664kB free_cma:0kB [ 1883.174852] lowmem_reserve[]: 0 0 0 0 0 [ 1883.181968] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10976kB [ 1883.196728] Node 0 DMA32: 552*4kB (UME) 1248*8kB (UMEH) 365*16kB (UME) 59*32kB (UME) 18*64kB (UM) 7*128kB (UM) 5*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 25296kB [ 1883.213675] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1883.226917] Node 1 Normal: 44*4kB (UME) 36*8kB (UME) 20*16kB (UME) 63*32kB (UME) 81*64kB (U) 72*128kB (UM) 69*256kB (U) 58*512kB (UE) 48*1024kB (UE) 36*2048kB (UM) 314*4096kB (U) = 1473584kB [ 1883.246742] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1883.256226] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1883.265857] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1883.274786] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1883.283596] 35923 total pagecache pages [ 1883.287617] 0 pages in swap cache [ 1883.291091] Swap cache stats: add 0, delete 0, find 0/0 [ 1883.296518] Free swap = 0kB [ 1883.299550] Total swap = 0kB [ 1883.302816] 2097051 pages RAM [ 1883.305939] 0 pages HighMem/MovableOnly [ 1883.309926] 363841 pages reserved [ 1883.313415] 0 pages cma reserved [ 1883.316780] Out of memory (oom_kill_allocating_task): Kill process 3805 (systemd-journal) score 0 or sacrifice child [ 1883.327725] Killed process 3805 (systemd-journal) total-vm:46096kB, anon-rss:0kB, file-rss:0kB, shmem-rss:1296kB [ 1883.350639] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1883.371947] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1883.401143] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1883.409744] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1883.420523] systemd[1]: Stopped Journal Service. [ 1883.440160] systemd[1]: Starting Journal Service... [ 1883.521392] systemd[1]: Started System Logging Service. [ 1883.658373] systemd-journald[4154]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1884.076434] systemd[1]: Started Journal Service. [ 1884.191606] Bluetooth: hci1 command 0x040f tx timeout 05:07:20 executing program 1: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:07:20 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x8000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x8, 0x61716564, 0x2, 0x3, 0xfff, 0x3, 0x6, 0x1, 0x8, 0x1, 0x1}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) 05:07:20 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000180)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)=0x3) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000000c0)={0x800, 0x6, 0x4, 0x0, 0x3, {}, {0x2, 0xc, 0x1, 0x0, 0x6, 0x2, "b55df457"}, 0x7fff, 0x1, @planes=&(0x7f0000000000)={0x9, 0x8, @mem_offset=0xcb2d, 0x500}, 0x9, 0x0, r2}) r3 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:07:20 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @empty}, &(0x7f0000000300)=0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x100000, 0x8, {}, {0x5, 0x13b30831199b05c9, 0x7, 0x8, 0x0, 0x5, "4c16f693"}, 0x3, 0x2, @fd=r1, 0x8c, 0x0, r2}) r3 = socket$inet(0x2, 0xa, 0x80000000) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e) r4 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x400, 0x141080) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f00000001c0)) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000380)={'ipvs\x00'}, &(0x7f00000003c0)=0x1e) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vim2m\x00', 0x2, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x4000, r6}) 05:07:20 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000000c0)={0x80000000, 0x1, 0x4, 0x20, 0x20, {0x0, 0xea60}, {0x33e4545d96b25040, 0x0, 0xf1, 0xff, 0x7, 0x7b, "a039e26a"}, 0x9, 0x4, @planes=&(0x7f0000000040)={0x80000000, 0x3f, @mem_offset=0xffffffff, 0x20}, 0x1e}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0xfffffffd}]}}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000000)={0x0, 0x2}) 05:07:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x2, {0x0, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:07:20 executing program 3: socket$inet6_sctp(0xa, 0x6, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000380)={0x3, 0x7ff}) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247, 0x0, 0x0, [{}, {0x332}, {}, {0x0, 0xfffffffe}], 0x0, 0x0, 0x2}}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f00000004c0)={0x101, 0xfe77}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)={0x5, 0x1, 0x4, 0x0, 0x1d, {}, {0x4, 0x0, 0x4, 0x6, 0x28, 0x40, "89755e0e"}, 0x81, 0x3, @offset=0x9, 0x9}) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f00000000c0)=0x2) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000100)) 05:07:20 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000140)=""/164) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0xfffffffc, 0x2, 0x4, 0x10000, 0x3, {0x0, 0x2710}, {0x3, 0x0, 0x7, 0x87, 0x6, 0x1, "ed0b0f36"}, 0x1, 0x4, @planes=&(0x7f0000000040)={0xffff, 0x9, @mem_offset=0x7f, 0x9}, 0x3}) 05:07:20 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x3) write$bt_hci(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="010d111700000000000080e8c6b2afbccbabcafafaff2a680b47758c547a82b6c8fdc31a9287240ce4cde1ae57dad6438ae0b7e1afe2a612c6d567f32a29d0e80c14c1b3365f2d8a153092e481db86ecb75068a2620c02e2da59d4247cb2dff1d3a773e8ad2e451922a2e3f2f4903da12438e51d2dddffc60db7f2b5fbc31f9a3241fc6fe83ac947e727e82e658cd21d1e229b69dd0054d22b770c723b5db25eeab35e64a831b32220de6a29d8fc258ba758458af353556cb04657eb19c6b24411b6cd2ab57807000000000000001130f7550330c9f988549b6fab0d7065000000"], 0x1b) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2, 0x4, 0x6, 0x800, r1}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f00000000c0)={0x3, 0x80000000, 0xffff}) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0xe) 05:07:20 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$bt_hci(r0, &(0x7f00000001c0)={0x1, @change_conn_ptype={{0x40f, 0x4}, {0xc9, 0x4}}}, 0x8) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)={0x7fff, 0xb, 0x4, 0x800, 0xccf, {r2, r3/1000+60000}, {0x1, 0x8, 0x5, 0x6, 0x6, 0x5, "0e201881"}, 0x8000, 0x3, @fd, 0x3f, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)={0x7be, 0x3, 0x4, 0xc8229860ed214087, 0x2, {0x0, 0xea60}, {0x3, 0x8, 0x5, 0x5, 0x1, 0x40, "42ff6822"}, 0x6, 0x2, @offset=0x80000001, 0x4, 0x0, r4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:07:20 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x200, 0x0, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x4, 0x2) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x4, 0x1, 0x4, 0x10000, 0x0, {r5, r6/1000+60000}, {0x5, 0xc, 0x8, 0x3f, 0xd4, 0x4, "389b7a5d"}, 0xcbb, 0x1, @fd=r1, 0x7fff, 0x0, r1}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000300), &(0x7f0000000340)=0xe) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000280)={0x1, 0x1, 0x4, 0x2000, 0x7, {r3, r4/1000+60000}, {0x3, 0x0, 0xf4, 0x4b, 0x7, 0x81, "46955c3d"}, 0x0, 0x4, @planes=&(0x7f0000000180)={0x3ff, 0x8, @mem_offset=0x1, 0x8001}, 0x0, 0x0, r7}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x2, 0x0, 0xffff, 0x80000}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xdc8d, 0x3, 0x4}) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r9, 0x84, 0x21, 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r9, 0x5) ioctl$TUNSETSNDBUF(r8, 0x400454d4, &(0x7f0000000380)=0x653) 05:07:20 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x4, 0x3f, 0x2, {0x0, @sdr={0x55595659, 0xe0000000}}, 0x8b3d}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000340)={0x1, @sliced={0x0, [0x0, 0xfff7, 0x1f, 0x5, 0xe7, 0x81, 0xff80, 0x10, 0x9, 0x0, 0x3, 0x0, 0x7, 0x20, 0x7, 0x1000, 0x1d1, 0x3, 0x1, 0x400, 0x2, 0x9ac4, 0x0, 0x800, 0x8, 0x1000, 0x6, 0x4b05, 0x3, 0x8000, 0x6, 0x7fff, 0xff, 0x2, 0x9e, 0x1, 0xb, 0x4c2, 0x3, 0x2, 0x3f, 0x40, 0xfe9, 0x8, 0x2, 0x8000, 0x401, 0xa0], 0x9}}) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000000)='/dev/video#\x00') [ 1886.271319] Bluetooth: hci1 command 0x0419 tx timeout 05:07:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x2, {0x0, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) [ 1890.064605] oom_reaper: reaped process 4163 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1890.092330] syz-executor.1 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1890.107729] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1890.113050] CPU: 0 PID: 4163 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 1890.121142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1890.130650] Call Trace: [ 1890.133250] dump_stack+0x1b2/0x281 [ 1890.137122] dump_header+0x178/0x82f [ 1890.140819] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1890.145920] ? ___ratelimit+0x2cd/0x530 [ 1890.149873] oom_kill_process.cold+0x10/0xb18 [ 1890.154353] out_of_memory+0xe3e/0x1190 [ 1890.158313] ? oom_killer_disable+0x1c0/0x1c0 [ 1890.162794] ? mutex_trylock+0x152/0x1a0 [ 1890.166848] __alloc_pages_nodemask+0x23e1/0x2720 [ 1890.171672] ? __schedule+0x893/0x1de0 [ 1890.175542] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1890.180380] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1890.185129] ? retint_kernel+0x2d/0x2d [ 1890.189027] alloc_pages_current+0x155/0x260 [ 1890.193437] __vmalloc_area_node+0x40a/0x680 [ 1890.197829] ? __vmalloc_node_range+0x150/0x150 [ 1890.202503] ? __get_vm_area_node+0x27d/0x340 [ 1890.206998] __vmalloc_node_range+0xbe/0x150 [ 1890.211421] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1890.216771] vmalloc_user+0x47/0xa0 [ 1890.220385] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1890.224691] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1890.230204] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1890.234341] __vb2_queue_alloc+0x47a/0xd90 [ 1890.238565] vb2_core_create_bufs+0x279/0x5a0 [ 1890.243047] ? __vb2_queue_free+0x7a0/0x7a0 [ 1890.247349] ? futex_wait+0x42f/0x5a0 [ 1890.251133] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1890.256498] ? trace_hardirqs_on+0x10/0x10 [ 1890.260713] vb2_create_bufs+0x2e1/0x5b0 [ 1890.264755] ? vb2_thread_start+0x310/0x310 [ 1890.269054] ? futex_wait+0x42f/0x5a0 [ 1890.272836] v4l_create_bufs+0xa4/0x150 [ 1890.276789] __video_do_ioctl+0x65b/0x6a0 [ 1890.280917] ? video_ioctl2+0x30/0x30 [ 1890.284694] ? __might_fault+0x177/0x1b0 [ 1890.288731] ? video_ioctl2+0x30/0x30 [ 1890.292509] video_usercopy+0xfd/0xe70 [ 1890.296394] ? v4l_g_ctrl+0x390/0x390 [ 1890.300173] ? lock_acquire+0x170/0x3f0 [ 1890.304125] ? lock_downgrade+0x740/0x740 [ 1890.308250] ? trace_hardirqs_on+0x10/0x10 [ 1890.312595] ? futex_exit_release+0x220/0x220 [ 1890.317069] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1890.322153] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1890.327157] v4l2_ioctl+0x1bb/0x2f0 [ 1890.330783] ? v4l2_open+0x2f0/0x2f0 [ 1890.334488] do_vfs_ioctl+0x75a/0xff0 [ 1890.338280] ? ioctl_preallocate+0x1a0/0x1a0 [ 1890.342723] ? lock_downgrade+0x740/0x740 [ 1890.346872] ? __fget+0x225/0x360 [ 1890.350305] ? do_vfs_ioctl+0xff0/0xff0 [ 1890.354259] ? security_file_ioctl+0x83/0xb0 [ 1890.358667] SyS_ioctl+0x7f/0xb0 [ 1890.362018] ? do_vfs_ioctl+0xff0/0xff0 [ 1890.365977] do_syscall_64+0x1d5/0x640 [ 1890.369968] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1890.375143] RIP: 0033:0x466459 [ 1890.378311] RSP: 002b:00007f3ccef46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1890.386015] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1890.393263] RDX: 0000000020001880 RSI: 00000000c100565c RDI: 0000000000000003 [ 1890.400512] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1890.407763] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1890.415034] R13: 00007ffc5138c9ef R14: 00007f3ccef46300 R15: 0000000000022000 [ 1890.422658] Mem-Info: [ 1890.425130] active_anon:14273 inactive_anon:34380 isolated_anon:0 [ 1890.425130] active_file:11 inactive_file:15 isolated_file:0 [ 1890.425130] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1890.425130] slab_reclaimable:13942 slab_unreclaimable:114507 [ 1890.425130] mapped:52589 shmem:35603 pagetables:716 bounce:0 [ 1890.425130] free:13897 free_pcp:126 free_cma:0 [ 1890.458461] Node 0 active_anon:56500kB inactive_anon:96924kB active_file:0kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200116kB dirty:0kB writeback:0kB shmem:101608kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1890.486214] Node 1 active_anon:592kB inactive_anon:40596kB active_file:60kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:40804kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1890.513332] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1890.539506] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1890.544595] Node 0 DMA32 free:18048kB min:36200kB low:45248kB high:54296kB active_anon:56500kB inactive_anon:96924kB active_file:0kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7168kB pagetables:2700kB bounce:0kB free_pcp:380kB local_pcp:284kB free_cma:0kB [ 1890.573452] lowmem_reserve[]: 0 0 0 0 0 [ 1890.577438] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1890.602983] lowmem_reserve[]: 0 0 0 0 0 [ 1890.606956] Node 1 Normal free:26576kB min:53696kB low:67120kB high:80544kB active_anon:592kB inactive_anon:40596kB active_file:60kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:160kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 1890.635873] lowmem_reserve[]: 0 0 0 0 0 [ 1890.639847] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10964kB [ 1890.653145] Node 0 DMA32: 528*4kB (ME) 840*8kB (UMEH) 256*16kB (UME) 52*32kB (UMEH) 18*64kB (UMH) 6*128kB (MH) 4*256kB (UH) 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 18048kB [ 1890.668804] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1890.679547] Node 1 Normal: 182*4kB (ME) 137*8kB (ME) 103*16kB (UME) 46*32kB (UME) 16*64kB (UM) 9*128kB (UM) 6*256kB (UM) 5*512kB (UME) 1*1024kB (E) 1*2048kB (M) 3*4096kB (U) = 26576kB [ 1890.696433] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1890.705476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1890.714201] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1890.723673] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1890.732291] 35629 total pagecache pages [ 1890.736270] 0 pages in swap cache [ 1890.739701] Swap cache stats: add 0, delete 0, find 0/0 [ 1890.745098] Free swap = 0kB [ 1890.748094] Total swap = 0kB [ 1890.751152] 2097051 pages RAM [ 1890.754242] 0 pages HighMem/MovableOnly [ 1890.758299] 363841 pages reserved [ 1890.761797] 0 pages cma reserved [ 1890.765163] Out of memory (oom_kill_allocating_task): Kill process 4163 (syz-executor.1) score 0 or sacrifice child [ 1890.776001] Killed process 4163 (syz-executor.1) total-vm:93516kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1890.786244] syz-executor.1: vmalloc: allocation failure, allocated 1606709248 of 2147487744 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1890.792451] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1890.800212] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1890.817900] CPU: 0 PID: 4163 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 1890.821518] syz-fuzzer cpuset= [ 1890.825685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1890.825692] / [ 1890.828863] Call Trace: [ 1890.838237] mems_allowed=0-1 [ 1890.839923] dump_stack+0x1b2/0x281 [ 1890.849185] warn_alloc.cold+0x96/0x1cc [ 1890.853147] ? zone_watermark_ok_safe+0x220/0x220 [ 1890.857970] ? retint_kernel+0x2d/0x2d [ 1890.861849] __vmalloc_area_node+0x48a/0x680 [ 1890.866247] ? __vmalloc_node_range+0x150/0x150 [ 1890.870897] ? __get_vm_area_node+0x27d/0x340 [ 1890.875374] __vmalloc_node_range+0xbe/0x150 [ 1890.879768] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1890.885119] vmalloc_user+0x47/0xa0 [ 1890.888729] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1890.893030] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1890.898377] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1890.902507] __vb2_queue_alloc+0x47a/0xd90 [ 1890.906732] vb2_core_create_bufs+0x279/0x5a0 [ 1890.911221] ? __vb2_queue_free+0x7a0/0x7a0 [ 1890.915525] ? futex_wait+0x42f/0x5a0 [ 1890.919308] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1890.924653] ? trace_hardirqs_on+0x10/0x10 [ 1890.928874] vb2_create_bufs+0x2e1/0x5b0 [ 1890.932921] ? vb2_thread_start+0x310/0x310 [ 1890.937227] ? futex_wait+0x42f/0x5a0 [ 1890.941021] v4l_create_bufs+0xa4/0x150 [ 1890.944980] __video_do_ioctl+0x65b/0x6a0 [ 1890.949116] ? video_ioctl2+0x30/0x30 [ 1890.952901] ? __might_fault+0x177/0x1b0 [ 1890.956949] ? video_ioctl2+0x30/0x30 [ 1890.960749] video_usercopy+0xfd/0xe70 [ 1890.964623] ? v4l_g_ctrl+0x390/0x390 [ 1890.968404] ? lock_acquire+0x170/0x3f0 [ 1890.972358] ? lock_downgrade+0x740/0x740 [ 1890.976489] ? trace_hardirqs_on+0x10/0x10 [ 1890.980720] ? futex_exit_release+0x220/0x220 [ 1890.985197] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1890.990284] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1890.995307] v4l2_ioctl+0x1bb/0x2f0 [ 1890.998930] ? v4l2_open+0x2f0/0x2f0 [ 1891.002638] do_vfs_ioctl+0x75a/0xff0 [ 1891.006427] ? ioctl_preallocate+0x1a0/0x1a0 [ 1891.010820] ? lock_downgrade+0x740/0x740 [ 1891.014978] ? __fget+0x225/0x360 [ 1891.018413] ? do_vfs_ioctl+0xff0/0xff0 [ 1891.022369] ? security_file_ioctl+0x83/0xb0 [ 1891.026783] SyS_ioctl+0x7f/0xb0 [ 1891.030133] ? do_vfs_ioctl+0xff0/0xff0 [ 1891.034090] do_syscall_64+0x1d5/0x640 [ 1891.037967] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1891.043140] RIP: 0033:0x466459 [ 1891.046311] RSP: 002b:00007f3ccef46188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1891.054001] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1891.061250] RDX: 0000000020001880 RSI: 00000000c100565c RDI: 0000000000000003 [ 1891.068526] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1891.075778] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1891.083031] R13: 00007ffc5138c9ef R14: 00007f3ccef46300 R15: 0000000000022000 [ 1891.090317] CPU: 1 PID: 7967 Comm: syz-fuzzer Not tainted 4.14.227-syzkaller #0 [ 1891.090579] Mem-Info: [ 1891.097967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1891.100379] active_anon:14273 inactive_anon:34380 isolated_anon:0 [ 1891.100379] active_file:12 inactive_file:12 isolated_file:0 [ 1891.100379] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1891.100379] slab_reclaimable:13937 slab_unreclaimable:114496 [ 1891.100379] mapped:52589 shmem:35603 pagetables:716 bounce:0 [ 1891.100379] free:13897 free_pcp:126 free_cma:0 [ 1891.109725] Call Trace: [ 1891.109746] dump_stack+0x1b2/0x281 [ 1891.109756] dump_header+0x178/0x82f [ 1891.109765] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1891.109772] ? ___ratelimit+0x2cd/0x530 [ 1891.109781] oom_kill_process.cold+0x10/0xb18 [ 1891.109797] out_of_memory+0xe3e/0x1190 [ 1891.109820] ? oom_killer_disable+0x1c0/0x1c0 [ 1891.143251] Node 0 active_anon:56500kB inactive_anon:96924kB active_file:28kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200116kB dirty:0kB writeback:0kB shmem:101608kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1891.145600] ? mutex_trylock+0x152/0x1a0 [ 1891.149226] Node 1 active_anon:592kB inactive_anon:40596kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:40804kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1891.152922] __alloc_pages_nodemask+0x23e1/0x2720 [ 1891.152942] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1891.152962] alloc_pages_current+0x155/0x260 [ 1891.152972] filemap_fault+0xea3/0x1980 [ 1891.152990] ext4_filemap_fault+0x84/0xb0 [ 1891.153000] __do_fault+0xfa/0x380 [ 1891.153010] __handle_mm_fault+0x2497/0x4620 [ 1891.153019] ? vm_insert_page+0x7c0/0x7c0 [ 1891.153028] ? lock_downgrade+0x740/0x740 [ 1891.153045] handle_mm_fault+0x391/0x860 [ 1891.153057] __do_page_fault+0x549/0xad0 [ 1891.153069] ? spurious_fault+0x640/0x640 [ 1891.153077] ? do_page_fault+0x60/0x500 [ 1891.153085] ? page_fault+0x2f/0x50 [ 1891.153092] page_fault+0x45/0x50 [ 1891.153099] RIP: 0000:0x940aec [ 1891.153103] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1891.166026] Mem-Info: [ 1891.166713] Node 0 [ 1891.175774] active_anon:14273 inactive_anon:34380 isolated_anon:0 [ 1891.175774] active_file:11 inactive_file:13 isolated_file:0 [ 1891.175774] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1891.175774] slab_reclaimable:13937 slab_unreclaimable:114496 [ 1891.175774] mapped:52589 shmem:35603 pagetables:716 bounce:0 [ 1891.175774] free:13897 free_pcp:126 free_cma:0 [ 1891.203167] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1891.207199] Node 0 active_anon:56500kB inactive_anon:96924kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200116kB dirty:0kB writeback:0kB shmem:101608kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1891.234250] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1891.234273] Node 0 DMA32 free:18048kB min:36200kB low:45248kB high:54296kB active_anon:56500kB inactive_anon:96924kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7168kB pagetables:2700kB bounce:0kB free_pcp:380kB local_pcp:284kB free_cma:0kB [ 1891.234293] lowmem_reserve[]: 0 0 0 0 0 [ 1891.234310] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1891.234328] lowmem_reserve[]: 0 0 0 0 0 [ 1891.234344] Node 1 Normal free:26576kB min:53696kB low:67120kB high:80544kB active_anon:592kB inactive_anon:40596kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:160kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 1891.234360] lowmem_reserve[]: 0 0 0 0 0 [ 1891.234378] Node 0 DMA: [ 1891.247535] Node 1 active_anon:592kB inactive_anon:40596kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:40804kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1891.248526] 1*4kB [ 1891.256347] Node 0 [ 1891.256658] (U) [ 1891.260186] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1891.264772] 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) [ 1891.272416] lowmem_reserve[]: [ 1891.273103] 2*4096kB [ 1891.277112] 0 [ 1891.281171] (M) = 10964kB [ 1891.281179] Node 0 DMA32: 528*4kB (ME) 840*8kB (UMEH) 256*16kB (UME) 52*32kB (UMEH) 18*64kB (UMH) 6*128kB (MH) 4*256kB (UH) 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 18048kB [ 1891.281246] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB [ 1891.293926] 2717 [ 1891.296480] 0*128kB [ 1891.299666] 2718 [ 1891.305175] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1891.305197] Node 1 Normal: 182*4kB (ME) 137*8kB (ME) 103*16kB (UME) 46*32kB (UME) [ 1891.313319] 2718 [ 1891.343191] 16*64kB (UM) 9*128kB (UM) 6*256kB (UM) 5*512kB (UME) 1*1024kB (E) 1*2048kB (M) 3*4096kB (U) = 26576kB [ 1891.343248] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1891.343254] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1891.343260] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1891.343266] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1891.343270] 35627 total pagecache pages [ 1891.343279] 0 pages in swap cache [ 1891.370767] 2718 [ 1891.403746] Swap cache stats: add 0, delete 0, find 0/0 [ 1891.441724] Free swap = 0kB [ 1891.462091] Node 0 [ 1891.471946] Total swap = 0kB [ 1891.496459] DMA32 free:18048kB min:36200kB low:45248kB high:54296kB active_anon:56500kB inactive_anon:96924kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7168kB pagetables:2700kB bounce:0kB free_pcp:380kB local_pcp:96kB free_cma:0kB [ 1891.504288] 2097051 pages RAM [ 1891.530462] lowmem_reserve[]: [ 1891.540789] 0 pages HighMem/MovableOnly [ 1891.562839] 0 [ 1891.573841] 363841 pages reserved [ 1891.575856] 0 [ 1891.577629] 0 pages cma reserved [ 1891.582234] 0 0 0 [ 1891.746065] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1891.773766] lowmem_reserve[]: 0 0 0 0 0 [ 1891.777775] Node 1 Normal free:26576kB min:53696kB low:67120kB high:80544kB active_anon:592kB inactive_anon:40596kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:160kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 1891.808369] lowmem_reserve[]: 0 0 0 0 0 [ 1891.812407] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10964kB [ 1891.827686] Node 0 DMA32: 528*4kB (ME) 840*8kB (UMEH) 256*16kB (UME) 52*32kB (UMEH) 18*64kB (UMH) 6*128kB (MH) 4*256kB (UH) 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 18048kB [ 1891.845418] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1891.856213] Node 1 Normal: 182*4kB (ME) 137*8kB (ME) 103*16kB (UME) 46*32kB (UME) 16*64kB (UM) 9*128kB (UM) 6*256kB (UM) 5*512kB (UME) 1*1024kB (E) 1*2048kB (M) 3*4096kB (U) = 26576kB [ 1891.875426] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1891.884324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1891.895005] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1891.903888] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1891.914536] 35627 total pagecache pages [ 1891.918522] 0 pages in swap cache [ 1891.922004] Swap cache stats: add 0, delete 0, find 0/0 [ 1891.927363] Free swap = 0kB [ 1891.932766] Total swap = 0kB [ 1891.935822] 2097051 pages RAM [ 1891.938932] 0 pages HighMem/MovableOnly [ 1891.942952] 363841 pages reserved [ 1891.946397] 0 pages cma reserved [ 1891.949759] Out of memory (oom_kill_allocating_task): Kill process 7967 (syz-fuzzer) score 0 or sacrifice child [ 1891.962460] Killed process 2915 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1891.986245] oom_reaper: reaped process 2915 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1892.002492] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1892.042353] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1892.047583] CPU: 0 PID: 7967 Comm: syz-fuzzer Not tainted 4.14.227-syzkaller #0 [ 1892.055032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1892.064386] Call Trace: [ 1892.066985] dump_stack+0x1b2/0x281 [ 1892.070612] dump_header+0x178/0x82f [ 1892.074321] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1892.079420] ? ___ratelimit+0x2cd/0x530 [ 1892.083395] oom_kill_process.cold+0x10/0xb18 [ 1892.088173] out_of_memory+0xe3e/0x1190 [ 1892.092150] ? oom_killer_disable+0x1c0/0x1c0 [ 1892.096641] ? mutex_trylock+0x152/0x1a0 [ 1892.100705] __alloc_pages_nodemask+0x23e1/0x2720 [ 1892.105904] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1892.110770] alloc_pages_current+0x155/0x260 [ 1892.115190] filemap_fault+0xea3/0x1980 [ 1892.119182] ext4_filemap_fault+0x84/0xb0 [ 1892.123338] __do_fault+0xfa/0x380 [ 1892.126886] __handle_mm_fault+0x2497/0x4620 [ 1892.131300] ? vm_insert_page+0x7c0/0x7c0 [ 1892.135433] ? lock_downgrade+0x740/0x740 [ 1892.139577] handle_mm_fault+0x391/0x860 [ 1892.143715] __do_page_fault+0x549/0xad0 [ 1892.147759] ? spurious_fault+0x640/0x640 [ 1892.151886] ? do_page_fault+0x60/0x500 [ 1892.155844] ? page_fault+0x2f/0x50 [ 1892.159464] page_fault+0x45/0x50 [ 1892.162899] RIP: 0000:0x940aec [ 1892.166068] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1892.188160] Mem-Info: [ 1892.224805] active_anon:14237 inactive_anon:34380 isolated_anon:0 [ 1892.224805] active_file:11 inactive_file:13 isolated_file:0 [ 1892.224805] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1892.224805] slab_reclaimable:13937 slab_unreclaimable:114496 [ 1892.224805] mapped:43889 shmem:35603 pagetables:716 bounce:0 [ 1892.224805] free:28667 free_pcp:480 free_cma:0 [ 1892.295880] Node 0 active_anon:56356kB inactive_anon:96924kB active_file:20kB inactive_file:4332kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:168316kB dirty:0kB writeback:0kB shmem:101608kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1892.325840] Node 1 active_anon:592kB inactive_anon:40596kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:40804kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1892.359611] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1892.387478] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1892.401527] Node 0 DMA32 free:47296kB min:36200kB low:45248kB high:54296kB active_anon:56356kB inactive_anon:96924kB active_file:220kB inactive_file:5232kB unevictable:0kB writepending:148kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7136kB pagetables:2700kB bounce:0kB free_pcp:972kB local_pcp:288kB free_cma:0kB [ 1892.432256] lowmem_reserve[]: 0 0 0 0 0 [ 1892.436966] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1892.463215] lowmem_reserve[]: 0 0 0 0 0 [ 1892.468074] Node 1 Normal free:454612kB min:53696kB low:67120kB high:80544kB active_anon:592kB inactive_anon:40596kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:160kB bounce:0kB free_pcp:904kB local_pcp:236kB free_cma:0kB [ 1892.498211] lowmem_reserve[]: 0 0 0 0 0 [ 1892.503657] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10964kB [ 1892.522813] Node 0 DMA32: 8652*4kB (UME) 654*8kB (UMEH) 157*16kB (UME) 18*32kB (EH) 6*64kB (UMH) 6*128kB (UMH) 2*256kB (H) 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 45104kB [ 1892.560295] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1892.577248] Node 1 Normal: 2*4kB (UE) 87*8kB (UME) 106*16kB (UME) 45*32kB (UME) 18*64kB (UM) 14*128kB (UM) 12*256kB (UM) 10*512kB (UME) 3*1024kB (UE) 5*2048kB (UM) 123*4096kB (U) = 532096kB [ 1892.601026] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1892.609900] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1892.619157] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1892.629371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1892.639106] 37403 total pagecache pages [ 1892.643184] 0 pages in swap cache [ 1892.646658] Swap cache stats: add 0, delete 0, find 0/0 [ 1892.656925] Free swap = 0kB [ 1892.660578] Total swap = 0kB [ 1892.667764] 2097051 pages RAM [ 1892.671758] 0 pages HighMem/MovableOnly [ 1892.676311] 363841 pages reserved [ 1892.680507] 0 pages cma reserved [ 1892.687625] Out of memory (oom_kill_allocating_task): Kill process 7967 (syz-fuzzer) score 0 or sacrifice child [ 1892.699004] Killed process 7985 (syz-executor.1) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1892.716727] oom_reaper: reaped process 7985 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1892.932754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1892.946277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1892.959671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1892.976162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1892.986342] device bridge_slave_1 left promiscuous mode [ 1892.994936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1893.005066] device bridge_slave_0 left promiscuous mode [ 1893.013439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1893.025377] device veth1_macvtap left promiscuous mode [ 1893.032791] device veth0_macvtap left promiscuous mode [ 1893.038128] device veth1_vlan left promiscuous mode [ 1893.046639] device veth0_vlan left promiscuous mode [ 1893.178365] device hsr_slave_1 left promiscuous mode [ 1893.186707] device hsr_slave_0 left promiscuous mode [ 1893.209029] team0 (unregistering): Port device team_slave_1 removed [ 1893.225850] team0 (unregistering): Port device team_slave_0 removed [ 1893.241255] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1893.257971] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1893.295490] bond0 (unregistering): Released all slaves 05:07:30 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) 05:07:30 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @empty}, &(0x7f0000000300)=0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x100000, 0x8, {}, {0x5, 0x13b30831199b05c9, 0x7, 0x8, 0x0, 0x5, "4c16f693"}, 0x3, 0x2, @fd=r1, 0x8c, 0x0, r2}) r3 = socket$inet(0x2, 0xa, 0x80000000) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e) r4 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x400, 0x141080) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f00000001c0)) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000380)={'ipvs\x00'}, &(0x7f00000003c0)=0x1e) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x4000}) 05:07:30 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:07:30 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x2, {0x0, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:07:30 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) 05:07:30 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r1 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xec1e, 0x2) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)={0x1c, 0x0, 0x4, 0x1, 0x8, {r2, r3/1000+60000}, {0x4, 0x8, 0x6, 0x7, 0xfc, 0x0, "47ff8d9f"}, 0x80000000, 0x2, @planes=&(0x7f0000000140)={0x8, 0x6492, @fd, 0x70}, 0x93, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x18ac45f5, 0x1, 0x4, 0x800, 0xffffa341, {0x0, 0xea60}, {0x2, 0x0, 0x0, 0x3, 0x10, 0x9, "aff37288"}, 0x1000, 0x4, @offset, 0xec0f, 0x0, r4}) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:07:30 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x2, {0x1, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 05:07:30 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x497f, 0x0, 0x1}) 05:07:30 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x2, {0x1, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 05:07:30 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x3, @win={{0x7ff, 0x3ae, 0x3}, 0x6, 0x6, &(0x7f00000000c0)={{0xe02, 0x3f, 0x0, 0xc9}, &(0x7f0000000040)={{0x247, 0x7, 0x9, 0x4}, &(0x7f0000000000)={{0x6, 0xfffffffb, 0x5866, 0x3}}}}, 0x1000, &(0x7f0000000240)="e34c1379318c700343b0b9c537cd6e61672c183731e017b05a409a84a1c68b0adabde8ae2090deed02d831c7fbbc4c8924e40951c8f2900691899495706bbe65248aee5cea2d44e0ccf5fce1bcc5688b242a8f5bf6ccd07a685b5373a9b5c3929b4ab5807dde5f1bbd72a8e462c0ac2b0db09139861d60d934cfe3d7c16623f61a0dd8cf7a8756a884c0f64035fd6f36601365ac473d76f411b5d61de748ca3512d6", 0x6a}}) 05:07:30 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x20, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x2, {0x1, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 05:07:30 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)={0x10001, 0x1, 0x4, 0x2, 0x5, {0x77359400}, {0x2, 0x1, 0x5, 0x0, 0x2, 0x4, "f911a313"}, 0x8, 0x3, @planes=&(0x7f0000000040)={0x1, 0x1, @mem_offset=0x9, 0x1}, 0x2, 0x0, r2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000000)=0x1) 05:07:30 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) socket$inet(0x2, 0x2, 0x5) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x8, 0x1, 0x4}) [ 1896.351884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1896.358603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1896.366790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1896.374272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1896.382641] device bridge_slave_1 left promiscuous mode [ 1896.388229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1896.395976] device bridge_slave_0 left promiscuous mode [ 1896.403824] bridge0: port 1(bridge_slave_0) entered disabled state [ 1896.412423] device veth1_macvtap left promiscuous mode [ 1896.417843] device veth0_macvtap left promiscuous mode [ 1896.423364] device veth1_vlan left promiscuous mode [ 1896.428391] device veth0_vlan left promiscuous mode [ 1896.494355] device hsr_slave_1 left promiscuous mode [ 1896.503551] device hsr_slave_0 left promiscuous mode [ 1896.516421] team0 (unregistering): Port device team_slave_1 removed [ 1896.526404] team0 (unregistering): Port device team_slave_0 removed [ 1896.535611] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1896.546498] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1896.572319] bond0 (unregistering): Released all slaves [ 1898.375148] IPVS: ftp: loaded support on port[0] = 21 [ 1898.453726] IPVS: ftp: loaded support on port[0] = 21 [ 1898.536745] chnl_net:caif_netlink_parms(): no params data found [ 1898.654851] chnl_net:caif_netlink_parms(): no params data found [ 1898.685064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1898.694422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1898.702259] device bridge_slave_0 entered promiscuous mode [ 1898.713809] bridge0: port 2(bridge_slave_1) entered blocking state [ 1898.720709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1898.727762] device bridge_slave_1 entered promiscuous mode [ 1898.752441] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1898.761804] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1898.783214] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1898.790519] team0: Port device team_slave_0 added [ 1898.810811] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1898.818504] team0: Port device team_slave_1 added [ 1898.825369] bridge0: port 1(bridge_slave_0) entered blocking state [ 1898.832081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1898.839011] device bridge_slave_0 entered promiscuous mode [ 1898.852715] bridge0: port 2(bridge_slave_1) entered blocking state [ 1898.859072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1898.867556] device bridge_slave_1 entered promiscuous mode [ 1898.881223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1898.888439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1898.914077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1898.930575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1898.936824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1898.962943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1898.981544] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1898.990588] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1898.998691] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1899.014354] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1899.034570] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1899.042090] team0: Port device team_slave_0 added [ 1899.055364] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1899.062766] team0: Port device team_slave_1 added [ 1899.072527] device hsr_slave_0 entered promiscuous mode [ 1899.078179] device hsr_slave_1 entered promiscuous mode [ 1899.097076] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1899.104522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1899.110875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1899.136394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1899.147220] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1899.162566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1899.168828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1899.194649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1899.205803] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1899.213770] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1899.244368] device hsr_slave_0 entered promiscuous mode [ 1899.250250] device hsr_slave_1 entered promiscuous mode [ 1899.263035] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1899.270220] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1899.381659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1899.388031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1899.394886] bridge0: port 1(bridge_slave_0) entered blocking state [ 1899.401290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1899.424667] bridge0: port 2(bridge_slave_1) entered blocking state [ 1899.431234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1899.437845] bridge0: port 1(bridge_slave_0) entered blocking state [ 1899.444384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1899.477531] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1899.483913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1899.493462] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1899.507325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1899.514948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1899.522456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1899.530717] bridge0: port 1(bridge_slave_0) entered disabled state [ 1899.537378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1899.546032] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1899.554927] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1899.561216] 8021q: adding VLAN 0 to HW filter on device team0 [ 1899.571731] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1899.579640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1899.587406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1899.595946] bridge0: port 1(bridge_slave_0) entered blocking state [ 1899.602369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1899.613246] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1899.621815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1899.630420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1899.637976] bridge0: port 2(bridge_slave_1) entered blocking state [ 1899.644397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1899.653635] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1899.661425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1899.673248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1899.682613] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1899.690563] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1899.697952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1899.709117] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1899.716413] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1899.726092] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1899.733498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1899.740918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1899.747747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1899.755549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1899.763362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1899.771559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1899.781549] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1899.787617] 8021q: adding VLAN 0 to HW filter on device team0 [ 1899.795372] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1899.804525] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1899.814340] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1899.822702] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1899.832451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1899.841295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1899.848693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1899.856461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1899.864791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1899.873206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1899.880930] bridge0: port 1(bridge_slave_0) entered blocking state [ 1899.887285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1899.896229] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1899.903128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1899.915280] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1899.923912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1899.932178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1899.939956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1899.946303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1899.956017] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1899.967501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1899.977263] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1899.986131] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1899.993809] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1900.004072] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1900.012191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1900.018915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1900.026836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1900.035137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1900.043342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1900.052051] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1900.063578] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1900.071380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1900.080536] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1900.092083] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1900.101025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1900.107497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1900.115249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1900.125927] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1900.133755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1900.141856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1900.154197] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1900.160933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1900.181816] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1900.195115] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1900.201830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1900.208489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1900.221053] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1900.232617] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1900.240956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1900.248724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1900.263292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1900.294999] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1900.303344] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1900.310183] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1900.320783] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1900.327445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1900.335766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1900.344066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1900.351682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1900.360509] device veth0_vlan entered promiscuous mode [ 1900.372003] device veth1_vlan entered promiscuous mode [ 1900.377865] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1900.387744] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1900.402309] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1900.412793] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1900.420053] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1900.427232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1900.434790] Bluetooth: hci0 command 0x0409 tx timeout [ 1900.435240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1900.447991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1900.455950] Bluetooth: hci3 command 0x0409 tx timeout [ 1900.458910] device veth0_macvtap entered promiscuous mode [ 1900.471660] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1900.482451] device veth1_macvtap entered promiscuous mode [ 1900.488590] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1900.498038] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1900.508356] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1900.518468] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1900.527843] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1900.535804] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1900.543634] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1900.550847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1900.558589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1900.569369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1900.579311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.588608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1900.599574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.608698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1900.618493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.627986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1900.637812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.648212] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1900.655282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1900.662563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1900.675309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1900.685781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1900.696048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.706047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1900.716273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.725455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1900.735573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.744831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1900.754639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1900.764780] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1900.771867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1900.780419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1900.790604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1900.806422] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1900.816285] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1900.824407] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1900.836051] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1900.843253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1900.851789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1900.861003] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1900.867928] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1900.877644] device veth0_vlan entered promiscuous mode [ 1900.890592] device veth1_vlan entered promiscuous mode [ 1900.896635] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1900.907026] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1900.928109] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1900.943895] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1900.951742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1900.960308] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1900.967618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1900.976039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1900.985933] device veth0_macvtap entered promiscuous mode [ 1900.993815] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1901.006862] device veth1_macvtap entered promiscuous mode [ 1901.013898] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1901.023822] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1901.035445] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1901.044712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1901.055442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.065116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1901.075159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.084678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1901.094514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.103890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1901.113707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.123202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1901.133649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.144017] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1901.151371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1901.159952] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1901.167707] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1901.175467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1901.184040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1901.193604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 05:07:35 executing program 1: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x3, {0x1, @win={{0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:07:35 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)={0x6b, 0xb, 0x4, 0x2, 0x80000000, {0x77359400}, {0x1, 0x0, 0xff, 0x1, 0x20, 0x8, "2aca5c57"}, 0x7f, 0x4, @userptr=0x1f, 0x100, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000240)={0x80000000, 0x3, 0x4, 0x10, 0x7ff, {r1, r2/1000+10000}, {0x1, 0xc, 0xbe, 0x82, 0x80, 0x3, "1047d199"}, 0x5, 0x2, @planes=&(0x7f0000000040)={0x126ddec, 0x2, @mem_offset=0xfffffffe, 0x3}, 0x9, 0x0, r3}) [ 1901.203727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.214031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1901.224689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.235640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1901.253926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.268161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1901.279075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.288209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1901.299625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.310459] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1901.317486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1901.326114] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1901.334841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 05:07:35 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @empty}, &(0x7f0000000300)=0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x100000, 0x8, {}, {0x5, 0x13b30831199b05c9, 0x7, 0x8, 0x0, 0x5, "4c16f693"}, 0x3, 0x2, @fd=r1, 0x8c, 0x0, r2}) r3 = socket$inet(0x2, 0xa, 0x80000000) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e) r4 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x400, 0x141080) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f00000001c0)) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000380)={'ipvs\x00'}, &(0x7f00000003c0)=0x1e) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x4000}) 05:07:35 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)={0xffffffff, 0x2, 0x4, 0x400, 0x6ea, {}, {0x1, 0x0, 0x5, 0x8, 0x20, 0x3, "91039237"}, 0x3, 0x2, @userptr=0x20, 0xc89c957}) 05:07:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r1 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xec1e, 0x2) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)={0x1c, 0x0, 0x4, 0x1, 0x8, {r2, r3/1000+60000}, {0x4, 0x8, 0x6, 0x7, 0xfc, 0x0, "47ff8d9f"}, 0x80000000, 0x2, @planes=&(0x7f0000000140)={0x8, 0x6492, @fd, 0x70}, 0x93, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x18ac45f5, 0x1, 0x4, 0x800, 0xffffa341, {0x0, 0xea60}, {0x2, 0x0, 0x0, 0x3, 0x10, 0x9, "aff37288"}, 0x1000, 0x4, @offset, 0xec0f, 0x0, r4}) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:07:35 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000180)={'broute\x00', 0x0, 0x4, 0x9b, [], 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f00000000c0)=""/155}, &(0x7f0000000040)=0x78) 05:07:35 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000000)={0x3, 0x0, 0x4, 0x4, 0x5, {0x0, 0xea60}, {0x4, 0x1, 0x96, 0x3, 0x3f, 0x9, "98eb9b35"}, 0xac, 0x1, @fd, 0x8}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:07:35 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x41414270, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x3}], 0x0, 0x0, 0x0, 0x0, 0x6}}) 05:07:35 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 05:07:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r1 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xec1e, 0x2) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)={0x1c, 0x0, 0x4, 0x1, 0x8, {r2, r3/1000+60000}, {0x4, 0x8, 0x6, 0x7, 0xfc, 0x0, "47ff8d9f"}, 0x80000000, 0x2, @planes=&(0x7f0000000140)={0x8, 0x6492, @fd, 0x70}, 0x93, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x18ac45f5, 0x1, 0x4, 0x800, 0xffffa341, {0x0, 0xea60}, {0x2, 0x0, 0x0, 0x3, 0x10, 0x9, "aff37288"}, 0x1000, 0x4, @offset, 0xec0f, 0x0, r4}) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:07:35 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @empty}, &(0x7f0000000300)=0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x100000, 0x8, {}, {0x5, 0x13b30831199b05c9, 0x7, 0x8, 0x0, 0x5, "4c16f693"}, 0x3, 0x2, @fd=r1, 0x8c, 0x0, r2}) r3 = socket$inet(0x2, 0xa, 0x80000000) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e) r4 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x400, 0x141080) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f00000001c0)) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000380)={'ipvs\x00'}, &(0x7f00000003c0)=0x1e) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x4000}) 05:07:35 executing program 5: ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000000c0)={0x0, @sdr={0x33363248, 0x8010}}) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000000214100028bd7000fddbdf250900020073797a30000000000500540004000000080001000000000008000100010000000900020073797a310000000008004400", @ANYRES32, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40004) r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x7ff, 0x1, 0x2}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000001c0)={0x6, 0x0, 0x697, 0x80c00}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x240000, 0x0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f00000002c0)) 05:07:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @empty}, &(0x7f0000000300)=0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x100000, 0x8, {}, {0x5, 0x13b30831199b05c9, 0x7, 0x8, 0x0, 0x5, "4c16f693"}, 0x3, 0x2, @fd=r1, 0x8c, 0x0, r2}) r3 = socket$inet(0x2, 0xa, 0x80000000) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e) r4 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x400, 0x141080) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f00000001c0)) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000380)={'ipvs\x00'}, &(0x7f00000003c0)=0x1e) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vim2m\x00', 0x2, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x4000, r6}) 05:07:35 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000000)) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) 05:07:35 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x5, 0x2, 0x2}) 05:07:35 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2, 0x6, 0x800, 0x80800}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000000c0)) syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x9, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x6000, 0x0, 0x49323159, 0x0, 0xc, [{}, {0x0, 0x1}, {}, {}, {0x0, 0x3}, {0xb0}], 0x0, 0xfc, 0x3}}) 05:07:35 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x200, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xbdc7318b56701da4, 0x3f, 0xe0, 0x84800}) 05:07:35 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @empty}, &(0x7f0000000300)=0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x100000, 0x8, {}, {0x5, 0x13b30831199b05c9, 0x7, 0x8, 0x0, 0x5, "4c16f693"}, 0x3, 0x2, @fd=r1, 0x8c, 0x0, r2}) r3 = socket$inet(0x2, 0xa, 0x80000000) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e) r4 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x400, 0x141080) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f00000001c0)) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x4000}) [ 1902.508836] Bluetooth: hci3 command 0x041b tx timeout [ 1902.514196] Bluetooth: hci0 command 0x041b tx timeout [ 1904.588269] Bluetooth: hci0 command 0x040f tx timeout [ 1904.593608] Bluetooth: hci3 command 0x040f tx timeout [ 1906.155754] oom_reaper: reaped process 4767 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1906.190789] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1906.212239] systemd-journal cpuset=/ mems_allowed=0-1 [ 1906.217480] CPU: 1 PID: 4154 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 1906.225487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1906.234826] Call Trace: [ 1906.237399] dump_stack+0x1b2/0x281 [ 1906.241008] dump_header+0x178/0x82f [ 1906.244701] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1906.249783] ? ___ratelimit+0x2cd/0x530 [ 1906.253739] oom_kill_process.cold+0x10/0xb18 [ 1906.258217] out_of_memory+0xe3e/0x1190 [ 1906.262173] ? oom_killer_disable+0x1c0/0x1c0 [ 1906.266659] ? mutex_trylock+0x152/0x1a0 [ 1906.270699] __alloc_pages_nodemask+0x23e1/0x2720 [ 1906.275525] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1906.280354] alloc_pages_current+0x155/0x260 [ 1906.284748] filemap_fault+0xea3/0x1980 [ 1906.288704] ext4_filemap_fault+0x84/0xb0 [ 1906.292832] __do_fault+0xfa/0x380 [ 1906.296385] __handle_mm_fault+0x2497/0x4620 [ 1906.300791] ? ep_poll+0x1ab/0xa50 [ 1906.304306] ? vm_insert_page+0x7c0/0x7c0 [ 1906.308564] handle_mm_fault+0x391/0x860 [ 1906.312755] __do_page_fault+0x549/0xad0 [ 1906.321874] ? spurious_fault+0x640/0x640 [ 1906.326021] ? do_page_fault+0x60/0x500 [ 1906.329977] ? page_fault+0x2f/0x50 [ 1906.333729] page_fault+0x45/0x50 [ 1906.337166] RIP: 0001:0xffffffffffffffff [ 1906.341201] RSP: baeee1e0:00007ffdf5a16820 EFLAGS: 7ffdf5a16630 [ 1906.343491] Mem-Info: [ 1906.349801] syz-executor.1: vmalloc: allocation failure, allocated 1612754944 of 2147487744 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1906.349824] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1906.349846] CPU: 1 PID: 4767 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 1906.349853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1906.352260] active_anon:14242 inactive_anon:34379 isolated_anon:0 [ 1906.352260] active_file:13 inactive_file:13 isolated_file:0 [ 1906.352260] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1906.352260] slab_reclaimable:13971 slab_unreclaimable:112910 [ 1906.352260] mapped:52657 shmem:35603 pagetables:720 bounce:0 [ 1906.352260] free:13905 free_pcp:217 free_cma:0 [ 1906.366127] Call Trace: [ 1906.366146] dump_stack+0x1b2/0x281 [ 1906.366158] warn_alloc.cold+0x96/0x1cc [ 1906.366169] ? zone_watermark_ok_safe+0x220/0x220 [ 1906.366181] ? retint_kernel+0x2d/0x2d [ 1906.371315] Node 0 active_anon:56224kB inactive_anon:96920kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200388kB dirty:0kB writeback:0kB shmem:101608kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1906.379082] __vmalloc_area_node+0x48a/0x680 [ 1906.379097] ? __vmalloc_node_range+0x150/0x150 [ 1906.388446] Node 1 active_anon:744kB inactive_anon:40596kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:40804kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1906.421646] ? __get_vm_area_node+0x27d/0x340 [ 1906.421659] __vmalloc_node_range+0xbe/0x150 [ 1906.421672] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1906.421679] vmalloc_user+0x47/0xa0 [ 1906.424244] Node 0 [ 1906.428004] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1906.428013] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1906.428020] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1906.428030] __vb2_queue_alloc+0x47a/0xd90 [ 1906.428048] vb2_core_create_bufs+0x279/0x5a0 [ 1906.432012] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1906.436830] ? __vb2_queue_free+0x7a0/0x7a0 [ 1906.440716] lowmem_reserve[]: [ 1906.469230] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1906.469241] ? trace_hardirqs_on+0x10/0x10 [ 1906.469252] vb2_create_bufs+0x2e1/0x5b0 [ 1906.473637] 0 [ 1906.478293] ? vb2_thread_start+0x310/0x310 [ 1906.478312] v4l_create_bufs+0xa4/0x150 [ 1906.505380] 2717 [ 1906.509849] __video_do_ioctl+0x65b/0x6a0 [ 1906.509864] ? video_ioctl2+0x30/0x30 [ 1906.514247] 2718 [ 1906.519595] ? __might_fault+0x177/0x1b0 [ 1906.519605] ? video_ioctl2+0x30/0x30 [ 1906.519615] video_usercopy+0xfd/0xe70 [ 1906.523215] 2718 [ 1906.525444] ? v4l_g_ctrl+0x390/0x390 [ 1906.529753] 2718 [ 1906.535085] ? lock_acquire+0x170/0x3f0 [ 1906.543418] ? lock_downgrade+0x740/0x740 [ 1906.547903] Node 0 [ 1906.573377] ? trace_hardirqs_on+0x10/0x10 [ 1906.573389] ? futex_exit_release+0x220/0x220 [ 1906.573398] ? __fget+0x1fe/0x360 [ 1906.577707] DMA32 free:17848kB min:36200kB low:45248kB high:54296kB active_anon:56224kB inactive_anon:96920kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7200kB pagetables:2716kB bounce:0kB free_pcp:748kB local_pcp:116kB free_cma:0kB [ 1906.580792] v4l2_ioctl+0x1bb/0x2f0 [ 1906.580801] ? v4l2_open+0x2f0/0x2f0 [ 1906.580811] do_vfs_ioctl+0x75a/0xff0 [ 1906.586162] lowmem_reserve[]: [ 1906.590386] ? ioctl_preallocate+0x1a0/0x1a0 [ 1906.590394] ? lock_downgrade+0x740/0x740 [ 1906.590406] ? __fget+0x225/0x360 [ 1906.594442] 0 [ 1906.596228] ? do_vfs_ioctl+0xff0/0xff0 [ 1906.600540] 0 [ 1906.604498] ? security_file_ioctl+0x83/0xb0 [ 1906.606540] 0 [ 1906.610669] SyS_ioctl+0x7f/0xb0 [ 1906.610678] ? do_vfs_ioctl+0xff0/0xff0 [ 1906.610688] do_syscall_64+0x1d5/0x640 [ 1906.614462] 0 [ 1906.616516] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1906.620568] 0 [ 1906.624335] RIP: 0033:0x466459 [ 1906.630325] RSP: 002b:00007fdcfe46d188 EFLAGS: 00000246 [ 1906.634100] Node 0 [ 1906.636142] ORIG_RAX: 0000000000000010 [ 1906.640132] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1906.644237] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1906.646473] lowmem_reserve[]: [ 1906.650684] RDX: 0000000020001880 RSI: 00000000c100565c RDI: 0000000000000003 [ 1906.650689] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1906.650694] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1906.650700] R13: 00007ffe4d1f991f R14: 00007fdcfe46d300 R15: 0000000000022000 [ 1906.659307] Mem-Info: [ 1906.689930] 0 [ 1906.697798] Bluetooth: hci3 command 0x0419 tx timeout [ 1906.699277] 0 [ 1906.706790] Bluetooth: hci0 command 0x0419 tx timeout [ 1906.712637] 0 [ 1906.714434] active_anon:14242 inactive_anon:34379 isolated_anon:0 [ 1906.714434] active_file:13 inactive_file:13 isolated_file:0 [ 1906.714434] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1906.714434] slab_reclaimable:13971 slab_unreclaimable:112910 [ 1906.714434] mapped:52657 shmem:35603 pagetables:720 bounce:0 [ 1906.714434] free:13905 free_pcp:215 free_cma:0 [ 1906.716164] 0 0 [ 1906.727094] Node 0 active_anon:56224kB inactive_anon:96920kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200388kB dirty:0kB writeback:0kB shmem:101608kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1906.731612] Node 1 active_anon:744kB inactive_anon:40596kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:40804kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1906.735564] Node 1 [ 1906.746208] Node 0 [ 1906.746588] Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:744kB inactive_anon:40596kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:160kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1906.748960] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1906.753423] lowmem_reserve[]: [ 1906.756969] lowmem_reserve[]: [ 1906.759271] 0 0 0 0 0 [ 1906.759296] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB [ 1906.770171] 0 [ 1906.790039] 1*2048kB [ 1906.802002] 2717 [ 1906.806030] (M) [ 1906.816318] 2718 [ 1906.822562] 2*4096kB [ 1906.836184] 2718 [ 1906.837441] (M) [ 1906.839255] 2718 [ 1906.839263] Node 0 DMA32 free:17840kB min:36200kB low:45248kB high:54296kB active_anon:56224kB inactive_anon:96920kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7200kB pagetables:2716kB bounce:0kB free_pcp:736kB local_pcp:620kB free_cma:0kB [ 1906.845631] = 10964kB [ 1906.846227] lowmem_reserve[]: [ 1906.880265] Node 0 [ 1906.888702] 0 [ 1906.911615] DMA32: [ 1906.945206] 0 [ 1906.971523] 414*4kB [ 1907.002800] 0 [ 1907.005830] (MEH) [ 1907.016155] 0 [ 1907.020305] 581*8kB [ 1907.025704] 0 [ 1907.027040] (ME) [ 1907.031100] 211*16kB [ 1907.033163] Node 0 [ 1907.063861] (MEH) [ 1907.072246] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1907.073929] 77*32kB [ 1907.075689] lowmem_reserve[]: [ 1907.081473] (UMEH) [ 1907.081993] 0 [ 1907.083786] 31*64kB [ 1907.086119] 0 [ 1907.087952] (UMH) 13*128kB (UM) 6*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17840kB [ 1907.089770] Node 0 [ 1907.093518] 0 [ 1907.094685] Normal: [ 1907.096816] 0 [ 1907.123573] 0*4kB [ 1907.131068] 0 [ 1907.131357] 0*8kB [ 1907.135615] 0*16kB [ 1907.146701] Node 1 [ 1907.150099] 0*32kB [ 1907.159999] Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:744kB inactive_anon:40596kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:160kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1907.161097] 0*64kB [ 1907.163297] lowmem_reserve[]: [ 1907.165509] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1907.201275] 0 0 [ 1907.207376] Node 1 Normal: 144*4kB (UME) 109*8kB (UME) 105*16kB (ME) 46*32kB (UME) 15*64kB (UM) 8*128kB (M) 7*256kB (UM) 4*512kB (ME) 2*1024kB (UE) 1*2048kB (M) 3*4096kB (U) = 26808kB [ 1907.213486] 0 [ 1907.228806] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1907.234940] 0 [ 1907.239460] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1907.239467] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1907.239471] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1907.239475] 35629 total pagecache pages [ 1907.239484] 0 pages in swap cache [ 1907.241839] 0 [ 1907.251648] Swap cache stats: add 0, delete 0, find 0/0 [ 1907.267360] Free swap = 0kB [ 1907.271377] Node 0 [ 1907.276678] Total swap = 0kB [ 1907.288744] DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10964kB [ 1907.291972] 2097051 pages RAM [ 1907.305965] 0 pages HighMem/MovableOnly [ 1907.309789] Node 0 DMA32: 414*4kB (MEH) 581*8kB (ME) 211*16kB (MEH) 77*32kB (UMEH) 31*64kB (UMH) 13*128kB (UM) 6*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17840kB [ 1907.311685] 363841 pages reserved [ 1907.331156] 0 pages cma reserved [ 1907.333337] Node 0 [ 1907.334522] Out of memory (oom_kill_allocating_task): Kill process 4154 (systemd-journal) score 0 or sacrifice child [ 1907.334528] Normal: [ 1907.336768] Killed process 4154 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1592kB [ 1907.354467] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1907.370832] oom_reaper: reaped process 4154 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1592kB [ 1907.383241] Node 1 Normal: 144*4kB (UME) 109*8kB (UME) 105*16kB (ME) 46*32kB (UME) 15*64kB (UM) 8*128kB (M) 7*256kB (UM) 4*512kB (ME) 2*1024kB (UE) 1*2048kB (M) 3*4096kB (U) = 26808kB [ 1907.402082] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1907.414961] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1907.425958] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1907.426204] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1907.430775] CPU: 1 PID: 7967 Comm: syz-fuzzer Not tainted 4.14.227-syzkaller #0 [ 1907.430780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1907.430783] Call Trace: [ 1907.430798] dump_stack+0x1b2/0x281 [ 1907.430810] dump_header+0x178/0x82f [ 1907.430820] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1907.430828] ? ___ratelimit+0x2cd/0x530 [ 1907.430840] oom_kill_process.cold+0x10/0xb18 [ 1907.446171] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1907.446840] out_of_memory+0xe3e/0x1190 [ 1907.456758] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1907.458737] ? oom_killer_disable+0x1c0/0x1c0 [ 1907.458746] ? mutex_trylock+0x152/0x1a0 [ 1907.458756] __alloc_pages_nodemask+0x23e1/0x2720 [ 1907.462360] 35629 total pagecache pages [ 1907.466067] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1907.471160] 0 pages in swap cache [ 1907.475104] alloc_pages_current+0x155/0x260 [ 1907.479578] Swap cache stats: add 0, delete 0, find 0/0 [ 1907.488386] filemap_fault+0xea3/0x1980 [ 1907.488405] ext4_filemap_fault+0x84/0xb0 [ 1907.492389] Free swap = 0kB [ 1907.500949] __do_fault+0xfa/0x380 [ 1907.500959] __handle_mm_fault+0x2497/0x4620 [ 1907.500969] ? vm_insert_page+0x7c0/0x7c0 [ 1907.505454] Total swap = 0kB [ 1907.509495] ? lock_downgrade+0x740/0x740 [ 1907.509514] handle_mm_fault+0x391/0x860 [ 1907.514330] 2097051 pages RAM [ 1907.518292] __do_page_fault+0x549/0xad0 [ 1907.518304] ? spurious_fault+0x640/0x640 [ 1907.518313] ? do_page_fault+0x60/0x500 [ 1907.523134] 0 pages HighMem/MovableOnly [ 1907.526569] ? page_fault+0x2f/0x50 [ 1907.530969] 363841 pages reserved [ 1907.536299] page_fault+0x45/0x50 [ 1907.543495] 0 pages cma reserved [ 1907.547606] RIP: 0000:0x940aec [ 1907.547610] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1907.551158] Mem-Info: [ 1907.620568] active_anon:14142 inactive_anon:34379 isolated_anon:0 [ 1907.620568] active_file:13 inactive_file:13 isolated_file:0 [ 1907.620568] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1907.620568] slab_reclaimable:13971 slab_unreclaimable:112915 [ 1907.620568] mapped:52232 shmem:35603 pagetables:720 bounce:0 [ 1907.620568] free:14148 free_pcp:30 free_cma:0 [ 1907.655804] Node 0 active_anon:55824kB inactive_anon:96920kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198688kB dirty:0kB writeback:0kB shmem:101608kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1907.686184] Node 1 active_anon:744kB inactive_anon:40596kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:40804kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1907.715380] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1907.743583] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1907.748668] Node 0 DMA32 free:18720kB min:36200kB low:45248kB high:54296kB active_anon:55824kB inactive_anon:96920kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7200kB pagetables:2716kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1907.779734] lowmem_reserve[]: 0 0 0 0 0 [ 1907.783728] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1907.812449] lowmem_reserve[]: 0 0 0 0 0 [ 1907.816464] Node 1 Normal free:26908kB min:53696kB low:67120kB high:80544kB active_anon:744kB inactive_anon:40596kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:160kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1907.846950] lowmem_reserve[]: 0 0 0 0 0 [ 1907.851019] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10964kB [ 1907.866426] Node 0 DMA32: 441*4kB (ME) 591*8kB (MEH) 212*16kB (ME) 77*32kB (UMEH) 37*64kB (UMH) 15*128kB (UM) 7*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18940kB [ 1907.884625] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1907.895419] Node 1 Normal: 144*4kB (UME) 108*8kB (ME) 105*16kB (ME) 46*32kB (UME) 15*64kB (UM) 9*128kB (UM) 7*256kB (UM) 4*512kB (ME) 2*1024kB (UE) 1*2048kB (M) 3*4096kB (U) = 26928kB [ 1907.914032] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1907.922946] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1907.933527] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1907.942981] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1907.953542] 35629 total pagecache pages [ 1907.957558] 0 pages in swap cache [ 1907.961009] Swap cache stats: add 0, delete 0, find 0/0 [ 1907.966357] Free swap = 0kB [ 1907.971333] Total swap = 0kB [ 1907.974358] 2097051 pages RAM [ 1907.977451] 0 pages HighMem/MovableOnly [ 1907.981472] 363841 pages reserved [ 1907.984912] 0 pages cma reserved [ 1907.990493] Out of memory (oom_kill_allocating_task): Kill process 7967 (syz-fuzzer) score 0 or sacrifice child [ 1908.000840] Killed process 4264 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1908.022741] oom_reaper: reaped process 4264 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1908.039593] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1908.057173] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1908.062099] CPU: 1 PID: 7969 Comm: syz-fuzzer Not tainted 4.14.227-syzkaller #0 [ 1908.069546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1908.078902] Call Trace: [ 1908.081493] dump_stack+0x1b2/0x281 [ 1908.085127] dump_header+0x178/0x82f [ 1908.088838] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1908.093926] ? ___ratelimit+0x2cd/0x530 [ 1908.097882] oom_kill_process.cold+0x10/0xb18 [ 1908.102377] out_of_memory+0xe3e/0x1190 [ 1908.106335] ? oom_killer_disable+0x1c0/0x1c0 [ 1908.110810] ? mutex_trylock+0x152/0x1a0 [ 1908.114931] __alloc_pages_nodemask+0x23e1/0x2720 [ 1908.120128] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1908.124984] alloc_pages_current+0x155/0x260 [ 1908.129379] filemap_fault+0xea3/0x1980 [ 1908.133688] ext4_filemap_fault+0x84/0xb0 [ 1908.137820] __do_fault+0xfa/0x380 [ 1908.141343] __handle_mm_fault+0x2497/0x4620 [ 1908.145734] ? vm_insert_page+0x7c0/0x7c0 [ 1908.149869] handle_mm_fault+0x391/0x860 [ 1908.154086] __do_page_fault+0x549/0xad0 [ 1908.158155] ? spurious_fault+0x640/0x640 [ 1908.162284] ? do_page_fault+0x60/0x500 [ 1908.166241] ? page_fault+0x2f/0x50 [ 1908.169859] page_fault+0x45/0x50 [ 1908.173294] RIP: 0f00:0x9408e1 [ 1908.176464] RSP: 03d6:000000c000039e40 EFLAGS: 00000003 [ 1908.183679] Mem-Info: [ 1908.191577] active_anon:14100 inactive_anon:34378 isolated_anon:0 [ 1908.191577] active_file:13 inactive_file:13 isolated_file:0 [ 1908.191577] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1908.191577] slab_reclaimable:13971 slab_unreclaimable:112919 [ 1908.191577] mapped:43525 shmem:35603 pagetables:659 bounce:0 [ 1908.191577] free:17233 free_pcp:348 free_cma:0 [ 1908.225598] Node 0 active_anon:55656kB inactive_anon:96916kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163860kB dirty:0kB writeback:0kB shmem:101608kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1908.258437] Node 1 active_anon:744kB inactive_anon:40596kB active_file:20kB inactive_file:724kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10340kB dirty:0kB writeback:0kB shmem:40804kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1908.295913] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1908.327938] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1908.333492] Node 0 DMA32 free:19772kB min:36200kB low:45248kB high:54296kB active_anon:55656kB inactive_anon:96916kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7136kB pagetables:2472kB bounce:0kB free_pcp:668kB local_pcp:520kB free_cma:0kB [ 1908.359166] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1908.366301] lowmem_reserve[]: 0 0 0 0 0 [ 1908.375033] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1908.378980] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1908.404454] lowmem_reserve[]: 0 0 0 0 0 [ 1908.421924] Node 1 Normal free:335220kB min:53696kB low:67120kB high:80544kB active_anon:744kB inactive_anon:40596kB active_file:220kB inactive_file:5124kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:160kB bounce:0kB free_pcp:772kB local_pcp:104kB free_cma:0kB [ 1908.454446] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1908.458473] lowmem_reserve[]: 0 0 0 0 0 [ 1908.472384] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10964kB [ 1908.477773] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1908.486273] Node 0 DMA32: 410*4kB (ME) 669*8kB (UME) 230*16kB (UME) 78*32kB (UMEH) 37*64kB (UMH) 15*128kB (UM) 7*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 19760kB [ 1908.507505] systemd[1]: Stopped Journal Service. [ 1908.516803] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1908.532638] Node 1 Normal: 1*4kB (U) 1*8kB (M) 2*16kB (UE) 3*32kB (ME) 2*64kB (UM) 10*128kB (UM) 15*256kB (UM) 13*512kB (UME) 12*1024kB (UE) 11*2048kB (UM) 99*4096kB (U) = 452364kB [ 1908.536033] systemd[1]: Starting Journal Service... [ 1908.559987] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1908.573380] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1908.582862] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1908.596027] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1908.605827] 37331 total pagecache pages [ 1908.614238] 0 pages in swap cache [ 1908.617773] Swap cache stats: add 0, delete 0, find 0/0 [ 1908.623128] Free swap = 0kB [ 1908.626133] Total swap = 0kB [ 1908.651247] 2097051 pages RAM [ 1908.654382] 0 pages HighMem/MovableOnly [ 1908.658563] 363841 pages reserved [ 1908.662015] 0 pages cma reserved [ 1908.665384] Out of memory (oom_kill_allocating_task): Kill process 7969 (syz-fuzzer) score 0 or sacrifice child [ 1908.683372] Killed process 4262 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1908.705635] oom_reaper: reaped process 4262 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1908.789162] systemd-journald[4806]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1908.810411] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1908.902010] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1909.338778] systemd[1]: Started Journal Service. [ 1909.354022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1909.362634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1909.389711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1909.396459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1909.404954] device bridge_slave_1 left promiscuous mode [ 1909.410571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1909.418276] device bridge_slave_0 left promiscuous mode [ 1909.424428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1909.449919] device veth1_macvtap left promiscuous mode [ 1909.455249] device veth0_macvtap left promiscuous mode [ 1909.463833] device veth1_vlan left promiscuous mode [ 1909.476524] device veth0_vlan left promiscuous mode [ 1909.621662] device hsr_slave_1 left promiscuous mode [ 1909.635734] device hsr_slave_0 left promiscuous mode [ 1909.654865] team0 (unregistering): Port device team_slave_1 removed [ 1909.665955] team0 (unregistering): Port device team_slave_0 removed [ 1909.681720] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1909.696171] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1909.735406] bond0 (unregistering): Released all slaves 05:07:46 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:07:46 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @empty}, &(0x7f0000000300)=0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x100000, 0x8, {}, {0x5, 0x13b30831199b05c9, 0x7, 0x8, 0x0, 0x5, "4c16f693"}, 0x3, 0x2, @fd=r1, 0x8c, 0x0, r2}) r3 = socket$inet(0x2, 0xa, 0x80000000) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e) r4 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x400, 0x141080) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f00000001c0)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x4000}) 05:07:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f00000000c0), 0x4) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000002c0)={{0x2, 0x4e20, @rand_addr=0x64010100}, {0x1, @multicast}, 0x40, {0x2, 0x4e20, @multicast1}, 'syz_tun\x00'}) write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x8, 0x1, 0x1, 0x1}, 0x8) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000240)={{0x2, 0x4e23, @local}, {0x6}, 0x10, {0x2, 0x4e23, @multicast1}, 'bridge0\x00'}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00) 05:07:46 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:07:46 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@private1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)=r3) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x3, 0x40, 0xfffffff8, 0x80000}) 05:07:46 executing program 0: socket$inet6_sctp(0xa, 0x6, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000380)={0x3, 0x7ff}) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247, 0x0, 0x0, [{}, {0x332}, {}, {0x0, 0xfffffffe}], 0x0, 0x0, 0x2}}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f00000004c0)={0x101, 0xfe77}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)={0x5, 0x1, 0x4, 0x0, 0x1d, {}, {0x4, 0x0, 0x4, 0x6, 0x28, 0x40, "89755e0e"}, 0x81, 0x3, @offset=0x9, 0x9}) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f00000000c0)=0x2) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000100)) [ 1912.419032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1912.425769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1912.465841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1912.472861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1912.484817] device bridge_slave_1 left promiscuous mode [ 1912.490599] bridge0: port 2(bridge_slave_1) entered disabled state [ 1912.501371] device bridge_slave_0 left promiscuous mode [ 1912.507161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1912.517711] device veth1_macvtap left promiscuous mode [ 1912.523229] device veth0_macvtap left promiscuous mode [ 1912.531978] device veth1_vlan left promiscuous mode [ 1912.537345] device veth0_vlan left promiscuous mode [ 1912.674241] device hsr_slave_1 left promiscuous mode [ 1912.686150] device hsr_slave_0 left promiscuous mode [ 1912.710933] team0 (unregistering): Port device team_slave_1 removed 05:07:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000000)={0x3, 0x0, 0x4, 0x4, 0x5, {0x0, 0xea60}, {0x4, 0x1, 0x96, 0x3, 0x3f, 0x9, "98eb9b35"}, 0xac, 0x1, @fd, 0x8}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) [ 1912.722946] team0 (unregistering): Port device team_slave_0 removed [ 1912.738209] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1912.753262] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1912.800979] bond0 (unregistering): Released all slaves 05:07:47 executing program 3: getuid() r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0xaaa, 0x1, 0xd}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x2, 0x73e3, "85f3ce", 0x9, 0x20}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) 05:07:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000000)={0x1000, 0x2, 0x4, 0x10000, 0x5, {0x77359400}, {0x3, 0x1, 0x80, 0xfa, 0x8, 0x1, "546ed04c"}, 0x10001, 0x7, @offset=0x9, 0x200}) 05:07:47 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x0, 0x8, 0x4, 0x110400, 0x5, {}, {0x2, 0x0, 0x80, 0x6, 0x9, 0x8, "48cc353a"}, 0x2, 0x2, @fd, 0xdd, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000240)={0x2, 0x2, 0x4, 0x2, 0x8, {r1, r2/1000+60000}, {0x1, 0x0, 0x90, 0x1, 0x7, 0x1, "9abca32d"}, 0xe, 0x2, @userptr=0x4c, 0xfffffff7, 0x0, r3}) 05:07:48 executing program 5: setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x64, 0x80, 0x0, 0x0, 0x81, 0x5d, 0x50, 0x6, 0xe0, 0x2, 0x8, 0x1, 0x3, 0x1}, 0xe) r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:07:48 executing program 3: ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="22af7bae41622f6e2aa7c55558a674c4db4ca86316bcb8629111d941ea4f289c2623c520612929bd40621ece9b44cc799dfa6a2bc08eb90eae76ebf332b243ed9e85246fe339c0580c0708fdcc1f84dd1821c868d27f166fa31ca279adba1cd13227e320f2f57bdba925246b32d34b1cbcf8c7052f901d6d2bd17c7cdf0584b9baa89697de65dc8108812758fa5cd56c32258cd272f26dd4a9fdf41bd8078206abc22de27d9929ad3062be3dbb78e8be32dc02372ee5a105fa32167af62a648a4ae10666d86143233f18a92ded3d1256d16c0f946688844f63a9e4", @ANYRES16=0x0, @ANYBLOB="200025bd7000ffdbdf250100000014000200fe80000000000000000000000000001a0800358ecef3b1c7ad28070073797374656d5f9ae80000000000005f723a6170745f6c6f636b5f743a733000"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x47) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f00000000c0)) r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x3, @pix_mp={0x0, 0x0, 0x59455247, 0x0, 0xb, [{}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x7dc0}], 0x0, 0x0, 0x0, 0x0, 0x4}}) [ 1914.711135] IPVS: ftp: loaded support on port[0] = 21 [ 1914.905174] IPVS: ftp: loaded support on port[0] = 21 [ 1915.115360] chnl_net:caif_netlink_parms(): no params data found 05:07:49 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) [ 1915.327764] chnl_net:caif_netlink_parms(): no params data found [ 1915.433006] bridge0: port 1(bridge_slave_0) entered blocking state [ 1915.449457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1915.462197] device bridge_slave_0 entered promiscuous mode [ 1915.495231] bridge0: port 2(bridge_slave_1) entered blocking state [ 1915.502451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1915.515456] device bridge_slave_1 entered promiscuous mode [ 1915.523071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1915.534543] bridge0: port 1(bridge_slave_0) entered disabled state [ 1915.542912] device bridge_slave_0 entered promiscuous mode [ 1915.578433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1915.584832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1915.598620] device bridge_slave_1 entered promiscuous mode [ 1915.606901] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1915.621534] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1915.670471] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1915.692116] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1915.704979] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1915.716198] team0: Port device team_slave_0 added [ 1915.746399] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1915.753715] team0: Port device team_slave_1 added [ 1915.761163] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1915.769727] team0: Port device team_slave_0 added [ 1915.785181] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1915.793608] team0: Port device team_slave_1 added [ 1915.821289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1915.831388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1915.863724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1915.893095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1915.904184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1915.934683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1915.947069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1915.953326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1915.983958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1915.996123] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1916.010160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1916.016874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1916.047987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1916.061057] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1916.074937] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1916.095751] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1916.144250] device hsr_slave_0 entered promiscuous mode [ 1916.150652] device hsr_slave_1 entered promiscuous mode [ 1916.172543] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1916.205570] device hsr_slave_0 entered promiscuous mode [ 1916.217277] device hsr_slave_1 entered promiscuous mode [ 1916.223326] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1916.256367] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1916.264791] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1916.516671] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1916.565279] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1916.631702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1916.667198] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1916.711940] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1916.737261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1916.743760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1916.766378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1916.773573] Bluetooth: hci0 command 0x0409 tx timeout [ 1916.776108] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1916.785015] 8021q: adding VLAN 0 to HW filter on device team0 [ 1916.811486] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1916.826676] Bluetooth: hci3 command 0x0409 tx timeout [ 1916.833976] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1916.845027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1916.859548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1916.879302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1916.885749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1916.908031] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1916.914927] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1916.938044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1916.946746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1916.954762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1916.976782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1916.984732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1917.006391] bridge0: port 2(bridge_slave_1) entered blocking state [ 1917.012816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1917.037594] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1917.055099] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1917.075789] 8021q: adding VLAN 0 to HW filter on device team0 [ 1917.084307] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1917.094399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1917.102506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1917.128690] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1917.149321] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1917.166664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1917.185773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1917.196969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1917.203385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1917.215577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1917.224470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1917.237628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1917.244978] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1917.258729] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1917.270071] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1917.289760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1917.297972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1917.306717] bridge0: port 2(bridge_slave_1) entered blocking state [ 1917.313147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1917.325329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1917.333994] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1917.348711] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1917.360147] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1917.380381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1917.389771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1917.402456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1917.413510] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1917.427438] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1917.436556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1917.444886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1917.458925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1917.470685] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1917.480338] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1917.488087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1917.496938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1917.504881] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1917.516585] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1917.531140] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1917.544185] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1917.556710] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1917.565394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1917.578454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1917.588088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1917.599669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1917.611146] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1917.623253] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1917.632885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1917.644183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1917.653727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1917.663946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1917.674855] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1917.684245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1917.709037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1917.734828] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1917.747991] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1917.754708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1917.772970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1917.790112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1917.911512] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1917.932208] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1917.944541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1917.955116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1918.010187] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1918.031068] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1918.043489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1918.058145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1918.093728] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1918.111555] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1918.128633] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1918.144154] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1918.156447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1918.164346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1918.184515] device veth0_vlan entered promiscuous mode [ 1918.197322] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1918.204614] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1918.216686] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1918.222946] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1918.233454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1918.245314] device veth1_vlan entered promiscuous mode [ 1918.254723] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1918.264811] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1918.272454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1918.280300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1918.288452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1918.299260] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1918.308459] device veth0_vlan entered promiscuous mode [ 1918.316274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1918.323580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1918.333123] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1918.346624] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1918.358110] device veth1_vlan entered promiscuous mode [ 1918.364169] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1918.381536] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1918.391957] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1918.401759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1918.414727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1918.426997] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1918.438598] device veth0_macvtap entered promiscuous mode [ 1918.445080] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1918.458958] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1918.468342] device veth1_macvtap entered promiscuous mode [ 1918.475042] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1918.486962] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1918.496185] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1918.504430] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1918.512911] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1918.520457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1918.528390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1918.539052] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1918.547042] device veth0_macvtap entered promiscuous mode [ 1918.553718] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1918.565716] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1918.574550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1918.584780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1918.596094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1918.605900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1918.615011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1918.625865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1918.635019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1918.646983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1918.657980] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1918.664968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1918.676542] device veth1_macvtap entered promiscuous mode [ 1918.682686] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1918.691327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1918.702564] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1918.711650] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1918.722376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1918.733861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1918.744417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1918.755024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1918.765767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1918.774889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1918.785547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1918.794672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1918.806260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1918.816675] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1918.823590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1918.832028] Bluetooth: hci0 command 0x041b tx timeout [ 1918.844058] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1918.852924] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1918.862053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1918.884753] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1918.910047] Bluetooth: hci3 command 0x041b tx timeout [ 1918.917824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1918.937753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1918.947312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1918.958177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1918.968524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1918.979663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1918.990717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1919.001279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.011241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1919.021926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.033188] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1919.041613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1919.056201] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1919.064085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1919.081223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1919.091451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.101104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1919.115016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.125430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1919.135152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.149310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1919.159415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.172471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1919.182552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.196702] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1919.203645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1919.214823] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1919.223376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1919.785741] Bluetooth: hci2 command 0x0406 tx timeout [ 1920.200103] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1920.275853] systemd-journal cpuset=/ mems_allowed=0-1 [ 1920.281094] CPU: 1 PID: 4806 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 1920.288964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1920.298836] Call Trace: [ 1920.301428] dump_stack+0x1b2/0x281 [ 1920.305050] dump_header+0x178/0x82f [ 1920.308757] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1920.313851] ? ___ratelimit+0x2cd/0x530 [ 1920.317829] oom_kill_process.cold+0x10/0xb18 [ 1920.322329] out_of_memory+0xe3e/0x1190 [ 1920.326303] ? oom_killer_disable+0x1c0/0x1c0 [ 1920.330791] ? mutex_trylock+0x152/0x1a0 [ 1920.334846] __alloc_pages_nodemask+0x23e1/0x2720 [ 1920.339704] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1920.344557] alloc_pages_current+0x155/0x260 [ 1920.348961] filemap_fault+0xea3/0x1980 [ 1920.352941] ext4_filemap_fault+0x84/0xb0 [ 1920.357100] __do_fault+0xfa/0x380 [ 1920.360635] __handle_mm_fault+0x2497/0x4620 [ 1920.365035] ? ep_poll+0x1ab/0xa50 [ 1920.368565] ? vm_insert_page+0x7c0/0x7c0 [ 1920.372744] handle_mm_fault+0x391/0x860 [ 1920.376800] __do_page_fault+0x549/0xad0 [ 1920.380858] ? spurious_fault+0x640/0x640 [ 1920.384998] ? do_page_fault+0x60/0x500 [ 1920.388964] ? page_fault+0x2f/0x50 [ 1920.392600] page_fault+0x45/0x50 [ 1920.396142] RIP: 0001:0x1 [ 1920.398877] RSP: fb39b1e0:00007ffc0b1e55e0 EFLAGS: 7ffc0b1e53f0 [ 1920.399308] Mem-Info: [ 1920.455205] active_anon:15463 inactive_anon:36412 isolated_anon:0 [ 1920.455205] active_file:0 inactive_file:13 isolated_file:0 [ 1920.455205] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1920.455205] slab_reclaimable:13859 slab_unreclaimable:112760 [ 1920.455205] mapped:52619 shmem:37651 pagetables:782 bounce:0 [ 1920.455205] free:25188 free_pcp:28 free_cma:0 [ 1920.587316] Node 0 active_anon:60280kB inactive_anon:101012kB active_file:12kB inactive_file:96kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198692kB dirty:0kB writeback:0kB shmem:105760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1920.713135] Node 1 active_anon:1572kB inactive_anon:44636kB active_file:84kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:11784kB dirty:0kB writeback:0kB shmem:44844kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1920.829901] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1920.860605] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1920.865709] Node 0 DMA32 free:36388kB min:36200kB low:45248kB high:54296kB active_anon:60280kB inactive_anon:101012kB active_file:124kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7168kB pagetables:2612kB bounce:0kB free_pcp:64kB local_pcp:0kB free_cma:0kB [ 1920.895643] lowmem_reserve[]: 0 0 0 0 0 [ 1920.899637] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1920.925844] lowmem_reserve[]: 0 0 0 0 0 [ 1920.929841] Node 1 Normal free:53692kB min:53696kB low:67120kB high:80544kB active_anon:1572kB inactive_anon:44636kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:512kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1920.936146] Bluetooth: hci0 command 0x040f tx timeout [ 1920.964923] lowmem_reserve[]: 0 0 0 0 0 [ 1920.968929] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 11056kB [ 1920.987618] Node 0 DMA32: 337*4kB (ME) 478*8kB (UME) 208*16kB (UME) 90*32kB (UME) 59*64kB (M) 20*128kB (M) 11*256kB (UM) 5*512kB (M) 5*1024kB (UM) 2*2048kB (UM) 1*4096kB (M) = 36404kB [ 1921.004298] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1921.085626] Bluetooth: hci3 command 0x040f tx timeout [ 1921.087829] Node 1 Normal: 215*4kB (UME) 151*8kB (UME) 128*16kB (ME) 66*32kB (ME) 32*64kB (UM) 11*128kB (UM) 8*256kB (UM) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (M) 9*4096kB (U) = 53716kB [ 1921.210362] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1921.268967] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1921.321675] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1921.379203] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1921.451512] 37709 total pagecache pages [ 1921.474191] 0 pages in swap cache [ 1921.492438] Swap cache stats: add 0, delete 0, find 0/0 [ 1921.520040] Free swap = 0kB [ 1921.523101] Total swap = 0kB [ 1921.540542] 2097051 pages RAM [ 1921.543674] 0 pages HighMem/MovableOnly [ 1921.547719] 363841 pages reserved [ 1921.551164] 0 pages cma reserved [ 1921.554571] Out of memory (oom_kill_allocating_task): Kill process 4806 (systemd-journal) score 0 or sacrifice child [ 1921.615348] Killed process 4806 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1552kB [ 1921.658753] oom_reaper: reaped process 4806 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1552kB [ 1921.839565] oom_reaper: reaped process 4845 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1921.920661] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1921.951181] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1921.956459] CPU: 1 PID: 4859 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 1921.964254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1921.973609] Call Trace: [ 1921.976206] dump_stack+0x1b2/0x281 [ 1921.979832] dump_header+0x178/0x82f [ 1921.983541] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1921.988671] ? ___ratelimit+0x2cd/0x530 [ 1921.992642] oom_kill_process.cold+0x10/0xb18 [ 1921.997146] out_of_memory+0xe3e/0x1190 [ 1922.001158] ? oom_killer_disable+0x1c0/0x1c0 [ 1922.005774] ? mutex_trylock+0x152/0x1a0 [ 1922.009839] __alloc_pages_nodemask+0x23e1/0x2720 [ 1922.014669] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1922.019499] alloc_pages_current+0x155/0x260 [ 1922.023888] filemap_fault+0xea3/0x1980 [ 1922.027867] ext4_filemap_fault+0x84/0xb0 [ 1922.031994] __do_fault+0xfa/0x380 [ 1922.035513] __handle_mm_fault+0x2497/0x4620 [ 1922.039920] ? vm_insert_page+0x7c0/0x7c0 [ 1922.044116] ? nanosleep_copyout+0x100/0x100 [ 1922.048517] handle_mm_fault+0x391/0x860 [ 1922.052562] __do_page_fault+0x549/0xad0 [ 1922.056605] ? spurious_fault+0x640/0x640 [ 1922.060732] ? do_page_fault+0x60/0x500 [ 1922.064685] ? page_fault+0x2f/0x50 [ 1922.068289] page_fault+0x45/0x50 [ 1922.071740] RIP: 1d4d52:0xd [ 1922.074648] RSP: 0003:00007ffc6d67062c EFLAGS: 00000032 [ 1922.077535] Mem-Info: [ 1922.090181] syz-executor.0: vmalloc: allocation failure, allocated 1308635136 of 2147487744 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1922.112138] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1922.115280] active_anon:14812 inactive_anon:36411 isolated_anon:0 [ 1922.115280] active_file:1 inactive_file:33 isolated_file:0 [ 1922.115280] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1922.115280] slab_reclaimable:13829 slab_unreclaimable:112700 [ 1922.115280] mapped:52225 shmem:37651 pagetables:757 bounce:0 [ 1922.115280] free:14008 free_pcp:0 free_cma:0 [ 1922.119221] CPU: 1 PID: 4845 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 1922.150707] Node 0 active_anon:58120kB inactive_anon:101012kB active_file:0kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198660kB dirty:0kB writeback:0kB shmem:105760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1922.158030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1922.158034] Call Trace: [ 1922.158051] dump_stack+0x1b2/0x281 [ 1922.158064] warn_alloc.cold+0x96/0x1cc [ 1922.185924] Node 1 active_anon:1128kB inactive_anon:44632kB active_file:8kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:44844kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1922.195255] ? zone_watermark_ok_safe+0x220/0x220 [ 1922.195278] __vmalloc_area_node+0x48a/0x680 [ 1922.197830] Node 0 [ 1922.201457] ? __vmalloc_node_range+0x150/0x150 [ 1922.205447] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1922.232556] ? __get_vm_area_node+0x27d/0x340 [ 1922.232569] __vmalloc_node_range+0xbe/0x150 [ 1922.232584] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1922.237933] lowmem_reserve[]: [ 1922.242317] vmalloc_user+0x47/0xa0 [ 1922.244526] 0 [ 1922.249192] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1922.249200] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1922.249206] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1922.249216] __vb2_queue_alloc+0x47a/0xd90 [ 1922.274712] 2717 [ 1922.279188] vb2_core_create_bufs+0x279/0x5a0 [ 1922.283559] 2718 2718 [ 1922.288911] ? __vb2_queue_free+0x7a0/0x7a0 [ 1922.288923] ? futex_wait+0x42f/0x5a0 [ 1922.288935] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1922.292012] 2718 [ 1922.295628] ? trace_hardirqs_on+0x10/0x10 [ 1922.295638] vb2_create_bufs+0x2e1/0x5b0 [ 1922.295651] ? vb2_thread_start+0x310/0x310 [ 1922.301726] ? futex_wait+0x42f/0x5a0 [ 1922.307103] Node 0 [ 1922.311223] v4l_create_bufs+0xa4/0x150 [ 1922.315474] DMA32 free:18216kB min:36200kB low:45248kB high:54296kB active_anon:58120kB inactive_anon:101012kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7168kB pagetables:2600kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1922.317498] __video_do_ioctl+0x65b/0x6a0 [ 1922.321961] lowmem_reserve[]: [ 1922.324445] ? video_ioctl2+0x30/0x30 [ 1922.328751] 0 [ 1922.332520] ? __might_fault+0x177/0x1b0 [ 1922.337872] 0 [ 1922.339906] ? video_ioctl2+0x30/0x30 [ 1922.344109] 0 [ 1922.348151] video_usercopy+0xfd/0xe70 [ 1922.348168] ? v4l_g_ctrl+0x390/0x390 [ 1922.352481] 0 [ 1922.356261] ? lock_acquire+0x170/0x3f0 [ 1922.356270] ? lock_downgrade+0x740/0x740 [ 1922.356281] ? trace_hardirqs_on+0x10/0x10 [ 1922.358491] 0 [ 1922.362450] ? futex_exit_release+0x220/0x220 [ 1922.394596] ? __fget+0x1fe/0x360 [ 1922.394614] v4l2_ioctl+0x1bb/0x2f0 [ 1922.397691] Node 0 [ 1922.401495] ? v4l2_open+0x2f0/0x2f0 [ 1922.403292] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1922.407323] do_vfs_ioctl+0x75a/0xff0 [ 1922.407342] ? ioctl_preallocate+0x1a0/0x1a0 [ 1922.409118] lowmem_reserve[]: [ 1922.412896] ? lock_downgrade+0x740/0x740 [ 1922.412909] ? __fget+0x225/0x360 [ 1922.414698] 0 [ 1922.418554] ? do_vfs_ioctl+0xff0/0xff0 [ 1922.422327] 0 [ 1922.424130] ? security_file_ioctl+0x83/0xb0 [ 1922.428093] 0 [ 1922.433081] SyS_ioctl+0x7f/0xb0 [ 1922.437301] 0 [ 1922.439074] ? do_vfs_ioctl+0xff0/0xff0 [ 1922.443539] 0 [ 1922.446976] do_syscall_64+0x1d5/0x640 [ 1922.446992] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1922.447000] RIP: 0033:0x466459 [ 1922.452851] RSP: 002b:00007f09f29f8188 EFLAGS: 00000246 [ 1922.456556] Node 1 [ 1922.481409] ORIG_RAX: 0000000000000010 [ 1922.481414] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1922.481419] RDX: 0000000020001880 RSI: 00000000c100565c RDI: 0000000000000003 [ 1922.481423] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1922.481428] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1922.481435] R13: 00007ffd96b9697f R14: 00007f09f29f8300 R15: 0000000000022000 [ 1922.485237] Normal free:26840kB min:53696kB low:67120kB high:80544kB active_anon:1128kB inactive_anon:44632kB active_file:8kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:424kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1922.498620] Mem-Info: [ 1922.516187] lowmem_reserve[]: [ 1922.526070] active_anon:14812 inactive_anon:36411 isolated_anon:0 [ 1922.526070] active_file:1 inactive_file:33 isolated_file:0 [ 1922.526070] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1922.526070] slab_reclaimable:13829 slab_unreclaimable:112700 [ 1922.526070] mapped:52225 shmem:37651 pagetables:757 bounce:0 [ 1922.526070] free:13951 free_pcp:58 free_cma:0 [ 1922.538738] 0 [ 1922.552156] Node 0 active_anon:58120kB inactive_anon:101012kB active_file:0kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198660kB dirty:0kB writeback:0kB shmem:105760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1922.569665] 0 [ 1922.580040] Node 1 active_anon:1128kB inactive_anon:44632kB active_file:8kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:44844kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1922.587116] 0 [ 1922.587530] Node 0 [ 1922.627743] 0 [ 1922.661318] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1922.696215] 0 [ 1922.716542] lowmem_reserve[]: [ 1922.756542] 0 2717 2718 2718 2718 [ 1922.759680] Node 0 [ 1922.760115] Node 0 [ 1922.760122] DMA: [ 1922.762349] DMA32 free:17988kB min:36200kB low:45248kB high:54296kB active_anon:58120kB inactive_anon:101012kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7168kB pagetables:2600kB bounce:0kB free_pcp:232kB local_pcp:120kB free_cma:0kB [ 1922.768182] 0*4kB [ 1922.801713] lowmem_reserve[]: 0 0 0 0 0 [ 1922.807957] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1922.810169] 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10976kB [ 1922.848531] lowmem_reserve[]: 0 0 0 0 0 [ 1922.870275] Node 0 [ 1922.872381] Node 1 [ 1922.872384] DMA32: 329*4kB [ 1922.880215] Normal free:26844kB min:53696kB low:67120kB high:80544kB active_anon:1128kB inactive_anon:44632kB active_file:32kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:424kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1922.882736] (UME) [ 1922.883146] lowmem_reserve[]: 0 [ 1922.919300] 448*8kB (ME) 190*16kB (ME) 80*32kB (ME) 47*64kB (M) 17*128kB (UM) 5*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 17988kB [ 1922.927803] 0 0 0 0 [ 1922.944060] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1922.951511] Node 0 [ 1922.965544] Node 1 Normal: 205*4kB (ME) 136*8kB (ME) 118*16kB (UME) 54*32kB (ME) 19*64kB (M) 10*128kB (UM) 8*256kB (UM) 7*512kB (UME) 3*1024kB (UME) 1*2048kB (M) 2*4096kB (U) = 26964kB [ 1922.970442] DMA: [ 1922.993574] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1922.998380] 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10976kB [ 1923.012983] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1923.037414] Node 0 DMA32: 329*4kB (UME) 448*8kB (ME) 190*16kB (ME) 80*32kB (ME) 47*64kB (M) 17*128kB (UM) 5*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 17988kB [ 1923.040112] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1923.067261] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1923.068885] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1923.090536] Node 1 Normal: 205*4kB (ME) 136*8kB (ME) 118*16kB (UME) 54*32kB (ME) 19*64kB (M) 10*128kB (UM) 8*256kB (UM) 7*512kB (UME) 3*1024kB (UME) 1*2048kB (M) 2*4096kB (U) = 26964kB [ 1923.094995] 37685 total pagecache pages [ 1923.119611] 0 pages in swap cache [ 1923.120577] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1923.123085] Swap cache stats: add 0, delete 0, find 0/0 [ 1923.146474] Bluetooth: hci3 command 0x0419 tx timeout [ 1923.148792] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1923.151729] Bluetooth: hci0 command 0x0419 tx timeout [ 1923.173922] Free swap = 0kB [ 1923.173976] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1923.177019] Total swap = 0kB [ 1923.177026] 2097051 pages RAM [ 1923.177028] 0 pages HighMem/MovableOnly [ 1923.177031] 363841 pages reserved [ 1923.177035] 0 pages cma reserved [ 1923.177042] Out of memory (oom_kill_allocating_task): Kill process 4859 (syz-executor.2) score 0 or sacrifice child [ 1923.177073] Killed process 5346 (syz-executor.2) total-vm:93516kB, anon-rss:2200kB, file-rss:34820kB, shmem-rss:0kB [ 1923.178966] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1923.203873] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1923.260448] 37685 total pagecache pages [ 1923.262441] (null), order=0, oom_score_adj=0 [ 1923.269448] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1923.271815] 0 pages in swap cache [ 1923.274640] syz-executor.2: vmalloc: allocation failure, allocated 12197888 of 16592896 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1923.291814] Swap cache stats: add 0, delete 0, find 0/0 [ 1923.295613] CPU: 0 PID: 4859 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 1923.302366] Free swap = 0kB [ 1923.304956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1923.304960] Call Trace: [ 1923.304978] dump_stack+0x1b2/0x281 [ 1923.304989] dump_header+0x178/0x82f [ 1923.304999] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1923.305008] ? ___ratelimit+0x2cd/0x530 [ 1923.305018] oom_kill_process.cold+0x10/0xb18 [ 1923.305035] out_of_memory+0xe3e/0x1190 [ 1923.305046] ? oom_killer_disable+0x1c0/0x1c0 [ 1923.305054] ? mutex_trylock+0x152/0x1a0 [ 1923.321772] Total swap = 0kB [ 1923.323613] __alloc_pages_nodemask+0x23e1/0x2720 [ 1923.332962] 2097051 pages RAM [ 1923.336379] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1923.336403] alloc_pages_current+0x155/0x260 [ 1923.336414] filemap_fault+0xea3/0x1980 [ 1923.336432] ext4_filemap_fault+0x84/0xb0 [ 1923.336442] __do_fault+0xfa/0x380 [ 1923.336452] __handle_mm_fault+0x2497/0x4620 [ 1923.336462] ? vm_insert_page+0x7c0/0x7c0 [ 1923.336470] ? nanosleep_copyout+0x100/0x100 [ 1923.336488] handle_mm_fault+0x391/0x860 [ 1923.336499] __do_page_fault+0x549/0xad0 [ 1923.356990] 0 pages HighMem/MovableOnly [ 1923.361325] ? spurious_fault+0x640/0x640 [ 1923.378494] 363841 pages reserved [ 1923.381728] ? do_page_fault+0x60/0x500 [ 1923.400189] 0 pages cma reserved [ 1923.402224] ? page_fault+0x2f/0x50 [ 1923.428903] page_fault+0x45/0x50 [ 1923.432354] RIP: 1d4d52:0xd [ 1923.435275] RSP: 0003:00007ffc6d67062c EFLAGS: 00000032 [ 1923.442692] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1923.453235] CPU: 0 PID: 5346 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 1923.461026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1923.470379] Call Trace: [ 1923.472999] dump_stack+0x1b2/0x281 [ 1923.476632] warn_alloc.cold+0x96/0x1cc [ 1923.480609] ? zone_watermark_ok_safe+0x220/0x220 [ 1923.486336] __vmalloc_area_node+0x48a/0x680 [ 1923.490748] ? __vmalloc_node_range+0x150/0x150 [ 1923.495416] ? __get_vm_area_node+0x27d/0x340 [ 1923.499918] __vmalloc_node_range+0xbe/0x150 [ 1923.504370] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1923.509745] vmalloc_user+0x47/0xa0 [ 1923.513377] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1923.517710] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1923.523084] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1923.527244] __vb2_queue_alloc+0x47a/0xd90 [ 1923.531489] vb2_core_reqbufs+0x347/0x910 [ 1923.535641] ? vb2_core_streamoff+0xd0/0xd0 [ 1923.539960] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 1923.545070] vb2_ioctl_reqbufs+0x1b6/0x320 [ 1923.549341] v4l_reqbufs+0x98/0xc0 [ 1923.552885] __video_do_ioctl+0x65b/0x6a0 [ 1923.557040] ? video_ioctl2+0x30/0x30 [ 1923.560838] ? __might_fault+0x177/0x1b0 [ 1923.564903] ? video_ioctl2+0x30/0x30 [ 1923.568955] video_usercopy+0xfd/0xe70 [ 1923.572859] ? v4l_g_ctrl+0x390/0x390 [ 1923.576665] ? lock_acquire+0x170/0x3f0 [ 1923.580648] ? trace_hardirqs_on+0x10/0x10 [ 1923.584886] ? futex_exit_release+0x220/0x220 [ 1923.589660] ? __fget+0x1fe/0x360 [ 1923.593122] v4l2_ioctl+0x1bb/0x2f0 [ 1923.596749] ? v4l2_open+0x2f0/0x2f0 [ 1923.600462] do_vfs_ioctl+0x75a/0xff0 [ 1923.604260] ? ioctl_preallocate+0x1a0/0x1a0 [ 1923.608665] ? lock_downgrade+0x740/0x740 [ 1923.612818] ? __fget+0x225/0x360 [ 1923.616282] ? do_vfs_ioctl+0xff0/0xff0 [ 1923.620266] ? security_file_ioctl+0x83/0xb0 [ 1923.624689] SyS_ioctl+0x7f/0xb0 [ 1923.628054] ? do_vfs_ioctl+0xff0/0xff0 [ 1923.632032] do_syscall_64+0x1d5/0x640 [ 1923.635931] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1923.641121] RIP: 0033:0x466459 [ 1923.644302] RSP: 002b:00007f22480cc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1923.652022] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1923.659336] RDX: 0000000020000240 RSI: 00000000c0145608 RDI: 0000000000000003 [ 1923.666621] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1923.673889] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1923.681155] R13: 00007ffc6d67036f R14: 00007f22480cc300 R15: 0000000000022000 [ 1923.696791] Mem-Info: [ 1923.699265] active_anon:14812 inactive_anon:36411 isolated_anon:0 [ 1923.699265] active_file:19 inactive_file:12 isolated_file:0 [ 1923.699265] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1923.699265] slab_reclaimable:13829 slab_unreclaimable:112709 [ 1923.699265] mapped:52225 shmem:37651 pagetables:757 bounce:0 [ 1923.699265] free:13951 free_pcp:75 free_cma:0 [ 1923.739548] Node 0 active_anon:58120kB inactive_anon:101012kB active_file:36kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198660kB dirty:0kB writeback:0kB shmem:105760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1923.773574] Node 1 active_anon:1128kB inactive_anon:44632kB active_file:40kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:44844kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1923.807258] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1923.839992] Mem-Info: [ 1923.842460] active_anon:14812 inactive_anon:36411 isolated_anon:0 [ 1923.842460] active_file:19 inactive_file:12 isolated_file:0 [ 1923.842460] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1923.842460] slab_reclaimable:13829 slab_unreclaimable:112709 [ 1923.842460] mapped:52225 shmem:37651 pagetables:757 bounce:0 [ 1923.842460] free:13951 free_pcp:75 free_cma:0 [ 1923.882589] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1923.887710] Node 0 DMA32 free:17988kB min:36200kB low:45248kB high:54296kB active_anon:58120kB inactive_anon:101012kB active_file:24kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7168kB pagetables:2600kB bounce:0kB free_pcp:220kB local_pcp:112kB free_cma:0kB [ 1923.922645] lowmem_reserve[]: 0 0 0 0 0 [ 1923.926773] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1923.959158] Node 0 active_anon:58120kB inactive_anon:101012kB active_file:24kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198660kB dirty:0kB writeback:0kB shmem:105760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1923.993092] Node 1 active_anon:1128kB inactive_anon:44632kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:44844kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1924.026841] lowmem_reserve[]: 0 0 0 0 0 [ 1924.030871] Node 1 Normal free:26840kB min:53696kB low:67120kB high:80544kB active_anon:1128kB inactive_anon:44632kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:424kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1924.065809] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1924.098104] lowmem_reserve[]: 0 0 0 0 0 [ 1924.102128] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10976kB [ 1924.122235] Node 0 DMA32: 329*4kB (UME) 450*8kB (UME) 190*16kB (ME) 80*32kB (ME) 47*64kB (M) 17*128kB (UM) 5*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 18004kB [ 1924.143568] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1924.148664] Node 0 DMA32 free:17988kB min:36200kB low:45248kB high:54296kB active_anon:58120kB inactive_anon:101012kB active_file:24kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7168kB pagetables:2600kB bounce:0kB free_pcp:212kB local_pcp:104kB free_cma:0kB [ 1924.183488] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1924.201153] Node 1 Normal: 206*4kB (UME) 136*8kB (ME) 118*16kB (UME) 54*32kB (ME) 19*64kB (M) 9*128kB (M) 8*256kB (UM) 7*512kB (UME) 3*1024kB (UME) 1*2048kB (M) 2*4096kB (U) = 26840kB [ 1924.223581] lowmem_reserve[]: 0 0 0 0 0 [ 1924.227644] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1924.259521] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1924.269103] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1924.283531] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1924.292455] lowmem_reserve[]: 0 0 0 0 0 [ 1924.302513] Node 1 Normal free:26840kB min:53696kB low:67120kB high:80544kB active_anon:1128kB inactive_anon:44632kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:424kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1924.337260] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1924.348599] 37685 total pagecache pages [ 1924.352588] 0 pages in swap cache [ 1924.360273] Swap cache stats: add 0, delete 0, find 0/0 [ 1924.367748] Free swap = 0kB [ 1924.370767] Total swap = 0kB [ 1924.373777] 2097051 pages RAM [ 1924.380974] lowmem_reserve[]: 0 0 0 0 0 [ 1924.387209] 0 pages HighMem/MovableOnly [ 1924.391184] 363841 pages reserved [ 1924.398794] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10976kB [ 1924.413661] 0 pages cma reserved [ 1924.421130] Out of memory (oom_kill_allocating_task): Kill process 4859 (syz-executor.2) score 0 or sacrifice child [ 1924.438397] Node 0 DMA32: 329*4kB (UME) 450*8kB (UME) 190*16kB (ME) 80*32kB (ME) 47*64kB (M) 17*128kB (UM) 5*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 18004kB [ 1924.456000] Killed process 5346 (syz-executor.2) total-vm:93516kB, anon-rss:2200kB, file-rss:34820kB, shmem-rss:0kB [ 1924.470873] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1924.482031] Node 1 Normal: 143*4kB (UME) 137*8kB (UME) 119*16kB (UME) 55*32kB (UME) 19*64kB (M) 10*128kB (UM) 10*256kB (UM) 8*512kB (UME) 5*1024kB (UME) 2*2048kB (UM) 10*4096kB (U) = 64660kB [ 1924.500587] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1924.511755] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1924.521922] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1924.532312] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1924.543480] 38462 total pagecache pages [ 1924.547794] 0 pages in swap cache [ 1924.551980] Swap cache stats: add 0, delete 0, find 0/0 [ 1924.558459] Free swap = 0kB [ 1924.562560] Total swap = 0kB [ 1924.567106] 2097051 pages RAM [ 1924.571007] 0 pages HighMem/MovableOnly [ 1924.575595] 363841 pages reserved [ 1924.579861] 0 pages cma reserved [ 1924.591486] oom_reaper: reaped process 5346 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1924.704881] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1924.724844] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1924.753078] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1924.760931] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1924.767925] systemd[1]: Stopped Journal Service. [ 1924.788628] systemd[1]: Starting Journal Service... 05:07:59 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000200), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00042abd7000fcdbdf250000000008000400ac14142208000700", @ANYRES32, @ANYBLOB='\b\x00\a\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32, @ANYBLOB="08000400640101010800080002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) write$cgroup_int(r1, &(0x7f0000000080)=0xc000000000, 0x12) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000280)={0x2, @sdr={0x39565559, 0xff}}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000006c0)={0x2, @pix_mp={0x80000000, 0xbf, 0x42474752, 0x0, 0x0, [{0x0, 0x4}, {0x80000000, 0x2}, {0x4, 0x6}, {0x3, 0x2}, {0x4, 0x101}, {0x1, 0x1}, {0x802, 0x101}, {0x7, 0x7}], 0x1f, 0x81, 0x4, 0x1, 0x6}}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)={0xfffffff7, 0x2, 0x4, 0x10000, 0x101, {0x77359400}, {0x4, 0x8, 0x5, 0x0, 0x5, 0x2, "27b899a7"}, 0x7, 0x2, @fd=r2, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000007c0)={0x177, 0x3, 0x3, {0x0, @win={{0x7, 0x8, 0x3ff, 0x8}, 0x6, 0x1, &(0x7f0000000400)={{0x1, 0x546, 0x81, 0x1f}, &(0x7f00000003c0)={{0x6, 0x719b, 0x5, 0x21de}, &(0x7f0000000440)={{0x200004, 0x0, 0x7, 0x7}}}}, 0x2, &(0x7f0000000a80)="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", 0x40}}, 0x8}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000480)={0x1, @pix={0x800, 0xa099, 0x3436324d, 0x5, 0x7fffffff, 0x9, 0x4, 0x549, 0x1, 0x2, 0x0, 0x5}}) r5 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x6, 0x10001) ioctl$DRM_IOCTL_RM_CTX(r5, 0xc0086421, &(0x7f0000000180)={0x0, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:07:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0)='NLBL_UNLBL\x00', r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00', r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x3c}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10002cbd7000fddbdf250701000008000400ac14140e140003000000000000100000000000000000000114000300fc0000000000000000000000000000019ea183ba"], 0x44}, 0x1, 0x0, 0x0, 0x841}, 0x14040094) r4 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:07:59 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @empty}, &(0x7f0000000300)=0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x100000, 0x8, {}, {0x5, 0x13b30831199b05c9, 0x7, 0x8, 0x0, 0x5, "4c16f693"}, 0x3, 0x2, @fd=r1, 0x8c, 0x0, r2}) r3 = socket$inet(0x2, 0xa, 0x80000000) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e) r4 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x400, 0x141080) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f00000001c0)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x4000}) 05:07:59 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x418300, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x181002, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x9) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x4e52, 0x7ff, 0x1, {0x3, @win={{0x80000, 0x2, 0xffffffff, 0x3}, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x2}}}) r3 = socket$inet(0x2, 0x4, 0x3) accept$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10) 05:07:59 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) [ 1925.029417] systemd-journald[5355]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1925.795761] systemd[1]: Started Journal Service. 05:08:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000000)={0x3, 0x0, 0x4, 0x4, 0x5, {0x0, 0xea60}, {0x4, 0x1, 0x96, 0x3, 0x3f, 0x9, "98eb9b35"}, 0xac, 0x1, @fd, 0x8}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:08:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000000)) 05:08:03 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @empty}, &(0x7f0000000300)=0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x100000, 0x8, {}, {0x5, 0x13b30831199b05c9, 0x7, 0x8, 0x0, 0x5, "4c16f693"}, 0x3, 0x2, @fd=r1, 0x8c, 0x0, r2}) r3 = socket$inet(0x2, 0xa, 0x80000000) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e) r4 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x400, 0x141080) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f00000001c0)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x4000}) 05:08:03 executing program 3: syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x50424752}}) 05:08:03 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x3f, 0x79, 0x4, {0x0, @pix={0x7, 0x9, 0x47314356, 0x0, 0x4, 0x5, 0x0, 0x1, 0x1, 0x6, 0x0, 0xbb4c353da41cb6c4}}, 0x100}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:08:03 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000100)) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:08:03 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x3ff, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f00000000c0)={0x80, 0x4, 0x1}) 05:08:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @win={{0x0, 0x5, 0xfffffffc}, 0x0, 0x80000000, 0x0, 0x80, 0x0}}, 0x2}) 05:08:04 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x1, 0x0, 0x59455247, 0x0, 0x0, [{0x0, 0x1}, {0xf6e}, {0x0, 0xffffffff}, {}, {0x0, 0x3}, {0xdfc}, {0x0, 0x81}], 0x0, 0x40}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x8000, @mcast1, 0x3}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e21, 0x80000000, @loopback, 0xffff}, @in={0x2, 0x4e23, @private=0xa010101}], 0x68) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x4, 0x7, 0x80000000, 0x40800, r3}) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) 05:08:04 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @empty}, &(0x7f0000000300)=0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x100000, 0x8, {}, {0x5, 0x13b30831199b05c9, 0x7, 0x8, 0x0, 0x5, "4c16f693"}, 0x3, 0x2, @fd=r1, 0x8c, 0x0, r2}) r3 = socket$inet(0x2, 0xa, 0x80000000) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e) r4 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x400, 0x141080) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x4000}) 05:08:04 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x4, 0x1, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x4, @vbi={0x0, 0xe5, 0x3, 0x47314356, [0x3, 0x3f], [0x7, 0x8], 0x1}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:08:05 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x5, 0x6, 0x3}) [ 1933.884246] oom_reaper: reaped process 5387 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1933.906276] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1933.919347] systemd-journal cpuset=/ mems_allowed=0-1 [ 1933.924698] CPU: 0 PID: 5355 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 1933.932563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1933.935446] syz-executor.0: [ 1933.941905] Call Trace: [ 1933.941910] vmalloc: allocation failure, allocated 1592311808 of 2147487744 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 1933.944924] dump_stack+0x1b2/0x281 [ 1933.944935] dump_header+0x178/0x82f [ 1933.944944] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1933.944952] ? ___ratelimit+0x2cd/0x530 [ 1933.944961] oom_kill_process.cold+0x10/0xb18 [ 1933.944977] out_of_memory+0xe3e/0x1190 [ 1933.944993] ? oom_killer_disable+0x1c0/0x1c0 [ 1933.949536] (null) [ 1933.959524] ? mutex_trylock+0x152/0x1a0 [ 1933.959535] __alloc_pages_nodemask+0x23e1/0x2720 [ 1933.959553] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1933.959575] alloc_pages_current+0x155/0x260 [ 1933.959586] filemap_fault+0xea3/0x1980 [ 1933.959604] ext4_filemap_fault+0x84/0xb0 [ 1933.959613] __do_fault+0xfa/0x380 [ 1933.959623] __handle_mm_fault+0x2497/0x4620 [ 1933.968998] syz-executor.0 cpuset= [ 1933.972541] ? ep_poll+0x1ab/0xa50 [ 1933.972549] ? vm_insert_page+0x7c0/0x7c0 [ 1933.972569] handle_mm_fault+0x391/0x860 [ 1933.972583] __do_page_fault+0x549/0xad0 [ 1933.976537] / [ 1933.981023] ? spurious_fault+0x640/0x640 [ 1933.990448] mems_allowed=0-1 [ 1933.991604] ? do_page_fault+0x60/0x500 [ 1934.057817] ? page_fault+0x2f/0x50 [ 1934.061425] page_fault+0x45/0x50 [ 1934.064877] RIP: 0001:0xffffffffffffffff [ 1934.068934] RSP: 135a1e0:00007ffea3d8c100 EFLAGS: 7ffea3d8bf10 [ 1934.068957] CPU: 1 PID: 5387 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 1934.069071] Mem-Info: [ 1934.074951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1934.074955] Call Trace: [ 1934.074976] dump_stack+0x1b2/0x281 [ 1934.074989] warn_alloc.cold+0x96/0x1cc [ 1934.082838] active_anon:14490 inactive_anon:38444 isolated_anon:0 [ 1934.082838] active_file:20 inactive_file:13 isolated_file:0 [ 1934.082838] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1934.082838] slab_reclaimable:13788 slab_unreclaimable:113663 [ 1934.082838] mapped:52586 shmem:39699 pagetables:714 bounce:0 [ 1934.082838] free:13890 free_pcp:341 free_cma:0 [ 1934.085230] ? zone_watermark_ok_safe+0x220/0x220 [ 1934.095046] Node 0 active_anon:56048kB inactive_anon:101012kB active_file:20kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198664kB dirty:0kB writeback:0kB shmem:105760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1934.097584] ? retint_kernel+0x2d/0x2d [ 1934.101190] Node 1 active_anon:1912kB inactive_anon:52764kB active_file:60kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:11680kB dirty:0kB writeback:0kB shmem:53036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1934.105150] __vmalloc_area_node+0x48a/0x680 [ 1934.105170] ? __vmalloc_node_range+0x150/0x150 [ 1934.138569] Node 0 [ 1934.143219] ? __get_vm_area_node+0x27d/0x340 [ 1934.143233] __vmalloc_node_range+0xbe/0x150 [ 1934.143247] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1934.171019] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1934.174867] vmalloc_user+0x47/0xa0 [ 1934.174880] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1934.174890] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1934.202073] lowmem_reserve[]: [ 1934.206451] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1934.211085] 0 [ 1934.213306] __vb2_queue_alloc+0x47a/0xd90 [ 1934.213324] vb2_core_create_bufs+0x279/0x5a0 [ 1934.213335] ? __vb2_queue_free+0x7a0/0x7a0 [ 1934.217802] 2717 [ 1934.222199] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1934.222210] ? trace_hardirqs_on+0x10/0x10 [ 1934.222220] vb2_create_bufs+0x2e1/0x5b0 [ 1934.227558] 2718 [ 1934.253052] ? vb2_thread_start+0x310/0x310 [ 1934.253068] v4l_create_bufs+0xa4/0x150 [ 1934.253080] __video_do_ioctl+0x65b/0x6a0 [ 1934.256681] 2718 [ 1934.261006] ? video_ioctl2+0x30/0x30 [ 1934.266361] 2718 [ 1934.269427] ? __might_fault+0x177/0x1b0 [ 1934.275348] ? video_ioctl2+0x30/0x30 [ 1934.279567] Node 0 [ 1934.284089] video_usercopy+0xfd/0xe70 [ 1934.284103] ? v4l_g_ctrl+0x390/0x390 [ 1934.284113] ? lock_acquire+0x170/0x3f0 [ 1934.288418] DMA32 free:18052kB min:36200kB low:45248kB high:54296kB active_anon:56048kB inactive_anon:101012kB active_file:20kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7168kB pagetables:2592kB bounce:0kB free_pcp:424kB local_pcp:120kB free_cma:0kB [ 1934.290481] ? lock_downgrade+0x740/0x740 [ 1934.295963] lowmem_reserve[]: [ 1934.300160] ? trace_hardirqs_on+0x10/0x10 [ 1934.304211] 0 [ 1934.306249] ? futex_exit_release+0x220/0x220 [ 1934.310542] 0 [ 1934.314495] ? __fget+0x1fe/0x360 [ 1934.314511] v4l2_ioctl+0x1bb/0x2f0 [ 1934.314520] ? v4l2_open+0x2f0/0x2f0 [ 1934.318640] 0 [ 1934.320688] do_vfs_ioctl+0x75a/0xff0 [ 1934.324496] 0 [ 1934.326528] ? ioctl_preallocate+0x1a0/0x1a0 [ 1934.330557] 0 [ 1934.334336] ? lock_downgrade+0x740/0x740 [ 1934.334349] ? __fget+0x225/0x360 [ 1934.334358] ? do_vfs_ioctl+0xff0/0xff0 [ 1934.340448] ? security_file_ioctl+0x83/0xb0 [ 1934.344238] Node 0 [ 1934.348179] SyS_ioctl+0x7f/0xb0 [ 1934.377245] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1934.381349] ? do_vfs_ioctl+0xff0/0xff0 [ 1934.384452] lowmem_reserve[]: [ 1934.388658] do_syscall_64+0x1d5/0x640 [ 1934.390429] 0 0 [ 1934.394977] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1934.394986] RIP: 0033:0x466459 [ 1934.394992] RSP: 002b:00007f09f29f8188 EFLAGS: 00000246 [ 1934.396772] 0 [ 1934.400202] ORIG_RAX: 0000000000000010 [ 1934.403833] 0 [ 1934.408026] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1934.408034] RDX: 0000000020001880 RSI: 00000000c100565c RDI: 0000000000000003 [ 1934.409827] 0 [ 1934.413606] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1934.413611] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1934.413615] R13: 00007ffd96b9697f R14: 00007f09f29f8300 R15: 0000000000022000 [ 1934.421309] Mem-Info: [ 1934.430364] active_anon:14490 inactive_anon:38444 isolated_anon:0 [ 1934.430364] active_file:20 inactive_file:13 isolated_file:0 [ 1934.430364] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1934.430364] slab_reclaimable:13788 slab_unreclaimable:113663 [ 1934.430364] mapped:52586 shmem:39699 pagetables:714 bounce:0 [ 1934.430364] free:13890 free_pcp:341 free_cma:0 [ 1934.433819] Node 1 [ 1934.443344] Node 0 active_anon:56048kB inactive_anon:101012kB active_file:20kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198664kB dirty:0kB writeback:0kB shmem:105760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1934.443745] Normal free:26536kB min:53696kB low:67120kB high:80544kB active_anon:1912kB inactive_anon:52764kB active_file:60kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:260kB bounce:0kB free_pcp:940kB local_pcp:816kB free_cma:0kB [ 1934.472424] Node 1 active_anon:1912kB inactive_anon:52764kB active_file:60kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:11680kB dirty:0kB writeback:0kB shmem:53036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1934.472590] lowmem_reserve[]: [ 1934.475653] Node 0 [ 1934.479520] 0 [ 1934.481485] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1934.486690] 0 0 0 0 [ 1934.486704] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB [ 1934.495131] lowmem_reserve[]: [ 1934.495344] (U) [ 1934.497049] 0 [ 1934.501003] 0*32kB [ 1934.504504] 2717 [ 1934.510245] 1*64kB [ 1934.521308] 2718 [ 1934.526721] (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10972kB [ 1934.526757] Node 0 DMA32: 367*4kB (ME) [ 1934.539191] 2718 [ 1934.541332] 485*8kB [ 1934.544281] 2718 [ 1934.577046] (ME) 206*16kB (UME) 72*32kB (UME) 41*64kB (UM) 17*128kB (UM) 5*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 18052kB [ 1934.577097] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB [ 1934.607219] 0*128kB [ 1934.642022] Node 0 [ 1934.662530] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1934.662550] Node 1 Normal: 236*4kB (UME) 211*8kB (UME) 164*16kB [ 1934.670969] DMA32 free:18052kB min:36200kB low:45248kB high:54296kB active_anon:56048kB inactive_anon:101012kB active_file:20kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7168kB pagetables:2592kB bounce:0kB free_pcp:424kB local_pcp:304kB free_cma:0kB [ 1934.702240] (UME) [ 1934.708357] lowmem_reserve[]: [ 1934.709485] 89*32kB [ 1934.711729] 0 [ 1934.717705] (UME) [ 1934.718129] 0 [ 1934.726752] 52*64kB (UM) 18*128kB (M) 8*256kB (UM) 3*512kB (UME) 1*1024kB (E) 2*2048kB (UM) 1*4096kB (U) = 26536kB [ 1934.726800] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1934.726806] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1934.726814] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1934.735908] 0 [ 1934.740749] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1934.750127] 0 [ 1934.758876] 39732 total pagecache pages [ 1934.763612] 0 [ 1934.765823] 0 pages in swap cache [ 1934.804060] Swap cache stats: add 0, delete 0, find 0/0 [ 1934.810915] Node 0 [ 1934.813748] Free swap = 0kB [ 1934.813827] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1934.826115] Total swap = 0kB [ 1934.835520] lowmem_reserve[]: [ 1934.849521] 2097051 pages RAM [ 1934.851067] 0 [ 1934.852887] 0 pages HighMem/MovableOnly [ 1934.852891] 363841 pages reserved [ 1934.852894] 0 pages cma reserved [ 1934.852901] Out of memory (oom_kill_allocating_task): Kill process 5355 (systemd-journal) score 0 or sacrifice child [ 1934.852928] Killed process 5355 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:4kB, shmem-rss:1296kB [ 1934.861834] 0 [ 1934.872108] systemd-journal: [ 1934.909891] 0 [ 1934.918838] page allocation failure: order:0 [ 1934.920653] 0 [ 1934.923929] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 1934.924160] systemd-journal cpuset= [ 1934.927424] 0 [ 1934.930760] / mems_allowed=0-1 [ 1934.984928] Node 1 Normal free:26536kB min:53696kB low:67120kB high:80544kB active_anon:1868kB inactive_anon:52764kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:260kB bounce:0kB free_pcp:1008kB local_pcp:192kB free_cma:0kB [ 1934.984996] CPU: 0 PID: 5355 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 1935.022234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1935.031590] Call Trace: [ 1935.034190] dump_stack+0x1b2/0x281 [ 1935.037804] warn_alloc.cold+0x96/0x1cc [ 1935.041764] ? zone_watermark_ok_safe+0x220/0x220 [ 1935.046599] ? wait_for_completion_io+0x10/0x10 [ 1935.051253] __alloc_pages_nodemask+0x2127/0x2720 [ 1935.056084] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1935.060935] alloc_pages_current+0x155/0x260 [ 1935.065327] filemap_fault+0xea3/0x1980 [ 1935.069317] ext4_filemap_fault+0x84/0xb0 [ 1935.073466] __do_fault+0xfa/0x380 [ 1935.076998] __handle_mm_fault+0x2497/0x4620 [ 1935.081395] ? ep_poll+0x1ab/0xa50 [ 1935.084922] ? vm_insert_page+0x7c0/0x7c0 [ 1935.089062] handle_mm_fault+0x391/0x860 [ 1935.093108] __do_page_fault+0x549/0xad0 [ 1935.097675] ? spurious_fault+0x640/0x640 [ 1935.101808] ? do_page_fault+0x60/0x500 [ 1935.105764] ? page_fault+0x2f/0x50 [ 1935.109457] page_fault+0x45/0x50 [ 1935.112891] RIP: 0001:0xffffffffffffffff [ 1935.116933] RSP: 135a1e0:00007ffea3d8c100 EFLAGS: 7ffea3d8bf10 [ 1935.121268] lowmem_reserve[]: [ 1935.124175] oom_reaper: reaped process 5355 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1448kB [ 1935.127757] 0 [ 1935.143212] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1935.155560] 0 0 0 0 [ 1935.157670] syz-fuzzer cpuset= [ 1935.159931] Node 0 [ 1935.159937] / [ 1935.166979] DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10972kB [ 1935.168928] mems_allowed=0-1 [ 1935.185794] Node 0 DMA32: 367*4kB (ME) 485*8kB (ME) 206*16kB (UME) 72*32kB (UME) 41*64kB (UM) 17*128kB (UM) 5*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 18052kB [ 1935.191880] CPU: 0 PID: 7967 Comm: syz-fuzzer Not tainted 4.14.227-syzkaller #0 [ 1935.201318] Node 0 [ 1935.208671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1935.208674] Call Trace: [ 1935.208693] dump_stack+0x1b2/0x281 [ 1935.208705] dump_header+0x178/0x82f [ 1935.208715] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1935.208723] ? ___ratelimit+0x2cd/0x530 [ 1935.208734] oom_kill_process.cold+0x10/0xb18 [ 1935.214592] Normal: [ 1935.220316] out_of_memory+0xe3e/0x1190 [ 1935.222936] 0*4kB [ 1935.226486] ? oom_killer_disable+0x1c0/0x1c0 [ 1935.230171] 0*8kB [ 1935.235254] ? mutex_trylock+0x152/0x1a0 [ 1935.235264] __alloc_pages_nodemask+0x23e1/0x2720 [ 1935.235286] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1935.235309] alloc_pages_current+0x155/0x260 [ 1935.235320] filemap_fault+0xea3/0x1980 [ 1935.235338] ext4_filemap_fault+0x84/0xb0 [ 1935.243382] 0*16kB [ 1935.243759] __do_fault+0xfa/0x380 [ 1935.246058] 0*32kB [ 1935.250015] __handle_mm_fault+0x2497/0x4620 [ 1935.252167] 0*64kB [ 1935.256613] ? vm_insert_page+0x7c0/0x7c0 [ 1935.258737] 0*128kB [ 1935.262780] ? lock_downgrade+0x740/0x740 [ 1935.262798] handle_mm_fault+0x391/0x860 [ 1935.262809] __do_page_fault+0x549/0xad0 [ 1935.262821] ? spurious_fault+0x640/0x640 [ 1935.262830] ? do_page_fault+0x60/0x500 [ 1935.262839] ? page_fault+0x2f/0x50 [ 1935.262845] page_fault+0x45/0x50 [ 1935.262852] RIP: 0000:0x940aec [ 1935.262856] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1935.271909] Mem-Info: [ 1935.274368] 0*256kB [ 1935.276922] active_anon:14379 inactive_anon:38444 isolated_anon:0 [ 1935.276922] active_file:17 inactive_file:16 isolated_file:0 [ 1935.276922] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1935.276922] slab_reclaimable:13788 slab_unreclaimable:113663 [ 1935.276922] mapped:52236 shmem:39699 pagetables:714 bounce:0 [ 1935.276922] free:13890 free_pcp:488 free_cma:0 [ 1935.280868] 0*512kB [ 1935.293641] Node 0 active_anon:56048kB inactive_anon:101012kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198664kB dirty:0kB writeback:0kB shmem:105760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1935.299168] 0*1024kB [ 1935.299807] Node 1 active_anon:1468kB inactive_anon:52764kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10280kB dirty:0kB writeback:0kB shmem:53036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1935.303968] 0*2048kB 0*4096kB = 0kB [ 1935.303980] Node 1 Normal: 236*4kB (UME) 211*8kB (UME) 164*16kB (UME) 90*32kB (UME) 52*64kB (UM) 18*128kB (M) 8*256kB (UM) 3*512kB (UME) 1*1024kB (E) [ 1935.314281] Node 0 [ 1935.314783] 2*2048kB [ 1935.318579] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1935.322727] (UM) 1*4096kB (U) = 26568kB [ 1935.322747] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1935.322752] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1935.322758] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1935.322764] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1935.322768] 39732 total pagecache pages [ 1935.322777] 0 pages in swap cache [ 1935.322782] Swap cache stats: add 0, delete 0, find 0/0 [ 1935.322785] Free swap = 0kB [ 1935.322789] Total swap = 0kB [ 1935.322795] 2097051 pages RAM [ 1935.322798] 0 pages HighMem/MovableOnly [ 1935.322801] 363841 pages reserved [ 1935.322804] 0 pages cma reserved [ 1935.560039] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1935.565114] Node 0 DMA32 free:18052kB min:36200kB low:45248kB high:54296kB active_anon:56048kB inactive_anon:101012kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7168kB pagetables:2592kB bounce:0kB free_pcp:424kB local_pcp:120kB free_cma:0kB [ 1935.600069] lowmem_reserve[]: 0 0 0 0 0 [ 1935.604157] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1935.637336] lowmem_reserve[]: 0 0 0 0 0 [ 1935.641364] Node 1 Normal free:26536kB min:53696kB low:67120kB high:80544kB active_anon:1468kB inactive_anon:52764kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:260kB bounce:0kB free_pcp:1528kB local_pcp:816kB free_cma:0kB [ 1935.676236] lowmem_reserve[]: 0 0 0 0 0 [ 1935.680254] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10972kB [ 1935.699598] Node 0 DMA32: 367*4kB (ME) 485*8kB (ME) 206*16kB (UME) 72*32kB (UME) 41*64kB (UM) 17*128kB (UM) 5*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 18052kB [ 1935.722454] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1935.737359] Node 1 Normal: 236*4kB (UME) 211*8kB (UME) 164*16kB (UME) 90*32kB (UME) 52*64kB (UM) 18*128kB (M) 8*256kB (UM) 3*512kB (UME) 1*1024kB (E) 2*2048kB (UM) 1*4096kB (U) = 26568kB [ 1935.759901] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1935.768811] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1935.783282] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1935.796440] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1935.807017] 39732 total pagecache pages [ 1935.811008] 0 pages in swap cache [ 1935.818225] Swap cache stats: add 0, delete 0, find 0/0 [ 1935.825512] Free swap = 0kB [ 1935.828543] Total swap = 0kB [ 1935.831559] 2097051 pages RAM [ 1935.838401] 0 pages HighMem/MovableOnly [ 1935.844396] 363841 pages reserved [ 1935.847853] 0 pages cma reserved [ 1935.851212] Out of memory (oom_kill_allocating_task): Kill process 7967 (syz-fuzzer) score 0 or sacrifice child [ 1935.865239] Killed process 4847 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1935.879443] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1935.896591] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1935.901383] CPU: 1 PID: 7968 Comm: syz-fuzzer Not tainted 4.14.227-syzkaller #0 [ 1935.908821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1935.918169] Call Trace: [ 1935.920774] dump_stack+0x1b2/0x281 [ 1935.924412] dump_header+0x178/0x82f [ 1935.928128] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1935.933214] ? ___ratelimit+0x2cd/0x530 [ 1935.937447] oom_kill_process.cold+0x10/0xb18 [ 1935.941936] out_of_memory+0xe3e/0x1190 [ 1935.945896] ? oom_killer_disable+0x1c0/0x1c0 [ 1935.950394] ? mutex_trylock+0x152/0x1a0 [ 1935.954471] __alloc_pages_nodemask+0x23e1/0x2720 [ 1935.959307] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1935.964141] alloc_pages_current+0x155/0x260 [ 1935.968531] filemap_fault+0xea3/0x1980 [ 1935.972496] ext4_filemap_fault+0x84/0xb0 [ 1935.976626] __do_fault+0xfa/0x380 [ 1935.980148] __handle_mm_fault+0x2497/0x4620 [ 1935.984540] ? vm_insert_page+0x7c0/0x7c0 [ 1935.988678] handle_mm_fault+0x391/0x860 [ 1935.992738] __do_page_fault+0x549/0xad0 [ 1935.996803] ? spurious_fault+0x640/0x640 [ 1936.000944] ? do_page_fault+0x60/0x500 [ 1936.004903] ? page_fault+0x2f/0x50 [ 1936.008511] page_fault+0x45/0x50 [ 1936.011945] RIP: 0900:0x9408cf [ 1936.015115] RSP: 03c1:000000c00003fe40 EFLAGS: 00000003 [ 1936.019606] Mem-Info: [ 1936.028089] active_anon:14373 inactive_anon:38443 isolated_anon:0 [ 1936.028089] active_file:28 inactive_file:3 isolated_file:0 [ 1936.028089] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1936.028089] slab_reclaimable:13788 slab_unreclaimable:113663 [ 1936.028089] mapped:52225 shmem:39699 pagetables:691 bounce:0 [ 1936.028089] free:16423 free_pcp:443 free_cma:0 [ 1936.062966] Node 0 active_anon:56048kB inactive_anon:101012kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198660kB dirty:0kB writeback:0kB shmem:105760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1936.095866] Node 1 active_anon:1444kB inactive_anon:52760kB active_file:96kB inactive_file:300kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1936.130281] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1936.161135] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1936.166537] Node 0 DMA32 free:18052kB min:36200kB low:45248kB high:54296kB active_anon:56048kB inactive_anon:101012kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7168kB pagetables:2592kB bounce:0kB free_pcp:440kB local_pcp:308kB free_cma:0kB [ 1936.200050] lowmem_reserve[]: 0 0 0 0 0 [ 1936.204493] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1936.234587] lowmem_reserve[]: 0 0 0 0 0 [ 1936.238614] Node 1 Normal free:307704kB min:53696kB low:67120kB high:80544kB active_anon:1444kB inactive_anon:52760kB active_file:196kB inactive_file:3800kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:168kB bounce:0kB free_pcp:948kB local_pcp:204kB free_cma:0kB [ 1936.272880] lowmem_reserve[]: 0 0 0 0 0 [ 1936.276906] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10972kB [ 1936.294886] Node 0 DMA32: 336*4kB (ME) 486*8kB (UME) 206*16kB (UME) 72*32kB (UME) 41*64kB (UM) 17*128kB (UM) 5*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 17936kB [ 1936.315085] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1936.326343] Node 1 Normal: 20*4kB (UME) 6*8kB (UME) 53*16kB (UME) 108*32kB (UME) 64*64kB (UM) 34*128kB (UM) 27*256kB (UM) 17*512kB (UME) 15*1024kB (UE) 27*2048kB (UM) 84*4096kB (U) = 443216kB [ 1936.348823] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1936.358064] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1936.371345] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1936.380645] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1936.399671] 41360 total pagecache pages [ 1936.404263] 0 pages in swap cache [ 1936.407925] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1936.419016] Swap cache stats: add 0, delete 0, find 0/0 [ 1936.425635] Free swap = 0kB [ 1936.428662] Total swap = 0kB [ 1936.436117] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1936.445442] 2097051 pages RAM [ 1936.448548] 0 pages HighMem/MovableOnly [ 1936.457846] 363841 pages reserved [ 1936.462165] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1936.468899] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1936.479497] 0 pages cma reserved [ 1936.482960] Out of memory (oom_kill_allocating_task): Kill process 7968 (syz-fuzzer) score 0 or sacrifice child [ 1936.497544] systemd[1]: Stopped Journal Service. [ 1936.507502] Killed process 4846 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1936.530386] systemd[1]: Starting Journal Service... [ 1936.546483] oom_reaper: reaped process 4847 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1936.568930] oom_reaper: reaped process 4846 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1936.633730] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1936.820091] systemd-journald[5430]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1936.839062] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1937.177711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1937.191638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1937.211767] systemd[1]: Started Journal Service. [ 1937.215507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1937.224825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1937.240469] device bridge_slave_1 left promiscuous mode [ 1937.246240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1937.261187] device bridge_slave_0 left promiscuous mode [ 1937.267457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1937.287396] device veth1_macvtap left promiscuous mode [ 1937.292881] device veth0_macvtap left promiscuous mode [ 1937.298217] device veth1_vlan left promiscuous mode [ 1937.304540] device veth0_vlan left promiscuous mode [ 1937.468729] device hsr_slave_1 left promiscuous mode [ 1937.480873] device hsr_slave_0 left promiscuous mode [ 1937.502615] team0 (unregistering): Port device team_slave_1 removed [ 1937.517819] team0 (unregistering): Port device team_slave_0 removed [ 1937.529940] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1937.550437] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1937.591143] bond0 (unregistering): Released all slaves [ 1939.013336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1939.020254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1939.033167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1939.040017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1939.052727] device bridge_slave_1 left promiscuous mode [ 1939.058431] bridge0: port 2(bridge_slave_1) entered disabled state [ 1939.069823] device bridge_slave_0 left promiscuous mode [ 1939.077052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1939.090001] device veth1_macvtap left promiscuous mode [ 1939.097121] device veth0_macvtap left promiscuous mode [ 1939.105709] device veth1_vlan left promiscuous mode [ 1939.110821] device veth0_vlan left promiscuous mode [ 1939.245154] device hsr_slave_1 left promiscuous mode [ 1939.256374] device hsr_slave_0 left promiscuous mode [ 1939.276613] team0 (unregistering): Port device team_slave_1 removed [ 1939.290234] team0 (unregistering): Port device team_slave_0 removed [ 1939.306379] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1939.319125] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1939.363763] bond0 (unregistering): Released all slaves 05:08:14 executing program 3: ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x7, 0x1, 0x4, 0x10000, 0x0, {0x0, 0xea60}, {0x0, 0x9eac7ca92d0d5383, 0x9, 0x80, 0x2, 0x20, "f893ea1a"}, 0x2, 0x2, @planes=&(0x7f0000000000)={0x0, 0x4, @fd, 0x7}, 0xff}) r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) 05:08:14 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x2, 0x5, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x9, 0x7, 0x1, {0x1, @win={{0x0, 0x1}, 0x0, 0x80000003, 0x0, 0x0, 0x0}}}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 05:08:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000000)={0x6, 0x7, 0x4, 0x4000, 0x9ed, {}, {0x1, 0x0, 0x20, 0x3, 0x3, 0x5, "27044a7d"}, 0x80, 0x3, @offset=0x5, 0x5, 0x0, r1}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000280)={0x3, 0x7, 0x4, 0x800, 0x80, {0x0, 0xea60}, {0x1, 0x0, 0x6, 0x2d, 0xff, 0x4, "0e250a63"}, 0x40000000, 0x1, @planes=&(0x7f0000000200)={0x5, 0xe000, @fd=0xffffffffffffffff, 0x21}, 0xc14e}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000380)={0x3, 0x2, 0x4, 0x70000, 0x9, {r5, r6/1000+60000}, {0x2, 0xeaacec0789f9322e, 0x3, 0x5, 0x2, 0x3, "13fd16be"}, 0x1, 0x3, @fd=r1, 0x0, 0x0, r2}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000400)={0x0, 0x0, 0x4, 0x10, 0x81, {0x77359400}, {0x5, 0x0, 0x3, 0xb0, 0x1, 0x32, "96e14d0f"}, 0x80000000, 0x1, @planes=&(0x7f0000000300)={0x3, 0x2, @fd=r4, 0xb1a}, 0x3, 0x0, r7}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:08:14 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00') r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast1, @in=@remote}}, {{@in=@private}, 0x0, @in=@multicast1}}, &(0x7f0000000000)=0xe8) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:08:14 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @empty}, &(0x7f0000000300)=0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x100000, 0x8, {}, {0x5, 0x13b30831199b05c9, 0x7, 0x8, 0x0, 0x5, "4c16f693"}, 0x3, 0x2, @fd=r1, 0x8c, 0x0, r2}) r3 = socket$inet(0x2, 0xa, 0x80000000) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e) r4 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x400, 0x141080) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x4000}) 05:08:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000000)={0x3, 0x0, 0x4, 0x4, 0x5, {0x0, 0xea60}, {0x4, 0x1, 0x96, 0x3, 0x3f, 0x9, "98eb9b35"}, 0xac, 0x1, @fd, 0x8}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:08:16 executing program 5: ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000000)={0x0, 0x2}) r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x8c0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x2040) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f00000000c0)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:08:16 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) 05:08:16 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) clock_getres(0x2, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:08:16 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) socket$inet6(0xa, 0x800, 0x81) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x3ff, @mcast2, 0x75}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in={0x2, 0x4e21, @broadcast}], 0x3c) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x1fe, 0x1, 0x1}) 05:08:16 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x15, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000040)=0x1) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x2, 0xb75, 0x0, 0x84000}) 05:08:16 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x1, @pix_mp={0x9, 0x700b, 0x30314142, 0x6, 0x2, [{0x10000, 0x9d}, {0x10000, 0x6}, {0xff, 0x80000}, {0x3ff, 0x5}, {0x4, 0xfffffff8}, {0x401, 0x1}, {0x9}, {0x81, 0x2}], 0x0, 0x1, 0x8, 0x0, 0x7}}) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000000)) [ 1943.182221] IPVS: ftp: loaded support on port[0] = 21 [ 1943.324613] IPVS: ftp: loaded support on port[0] = 21 [ 1943.451319] chnl_net:caif_netlink_parms(): no params data found [ 1943.677912] chnl_net:caif_netlink_parms(): no params data found [ 1943.732363] bridge0: port 1(bridge_slave_0) entered blocking state [ 1943.739110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1943.755525] device bridge_slave_0 entered promiscuous mode [ 1943.777165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1943.787707] bridge0: port 2(bridge_slave_1) entered disabled state [ 1943.798217] device bridge_slave_1 entered promiscuous mode [ 1943.829204] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1943.841247] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1943.869693] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1943.878951] team0: Port device team_slave_0 added [ 1943.907928] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1943.916805] team0: Port device team_slave_1 added [ 1943.926125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1943.933173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1943.941481] device bridge_slave_0 entered promiscuous mode [ 1943.970209] bridge0: port 2(bridge_slave_1) entered blocking state [ 1943.976602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1943.988678] device bridge_slave_1 entered promiscuous mode [ 1943.996366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1944.007068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1944.036676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1944.066884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1944.074162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1944.100645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1944.112899] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1944.121789] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1944.129596] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1944.138972] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1944.202199] device hsr_slave_0 entered promiscuous mode [ 1944.208033] device hsr_slave_1 entered promiscuous mode [ 1944.218602] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1944.226840] team0: Port device team_slave_0 added [ 1944.236878] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1944.244819] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1944.255663] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1944.263532] team0: Port device team_slave_1 added [ 1944.328647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1944.336196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1944.365939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1944.390973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1944.397252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1944.427625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1944.454441] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1944.484144] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1944.538712] device hsr_slave_0 entered promiscuous mode [ 1944.544663] device hsr_slave_1 entered promiscuous mode [ 1944.560444] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1944.567534] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1944.575765] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1944.644104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1944.663839] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1944.682821] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1944.691307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1944.698640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1944.726447] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1944.737623] 8021q: adding VLAN 0 to HW filter on device team0 [ 1944.763584] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1944.775722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1944.784472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1944.797525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1944.804060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1944.825241] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1944.842167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1944.854803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1944.863690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1944.884712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1944.891169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1944.905293] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1944.924608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1944.938112] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1944.950319] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1944.957347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1944.980251] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1944.987535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1944.997652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1945.020128] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1945.028587] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1945.042649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1945.060289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1945.071697] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1945.081552] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1945.088406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1945.096982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1945.106068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1945.114016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1945.128028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1945.136588] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1945.147404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1945.158142] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1945.177872] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1945.191579] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1945.199212] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1945.210472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1945.217934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1945.228731] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1945.236970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1945.247973] Bluetooth: hci3 command 0x0409 tx timeout [ 1945.255976] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1945.266955] 8021q: adding VLAN 0 to HW filter on device team0 [ 1945.273759] Bluetooth: hci0 command 0x0409 tx timeout [ 1945.283542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1945.297417] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1945.306452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1945.325388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1945.347002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1945.353438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1945.368113] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1945.377283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1945.389152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1945.407365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1945.416507] bridge0: port 2(bridge_slave_1) entered blocking state [ 1945.422926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1945.442252] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1945.454925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1945.476864] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1945.490504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1945.502873] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1945.514868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1945.529293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1945.540664] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1945.554612] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1945.562243] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1945.569331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1945.578437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1945.586523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1945.600125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1945.614069] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1945.621369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1945.629332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1945.650312] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1945.656412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1945.688523] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1945.704552] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1945.721628] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1945.734760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1945.742554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1945.753076] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1945.767413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1945.776051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1945.795363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1945.852325] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1945.866842] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1945.875027] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1945.890975] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1945.897671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1945.910197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1945.921164] device veth0_vlan entered promiscuous mode [ 1945.932952] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1945.943676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1945.954465] device veth1_vlan entered promiscuous mode [ 1945.965466] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1945.976809] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1946.011423] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1946.033154] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1946.048729] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1946.057955] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1946.069928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1946.077682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1946.093669] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1946.107041] device veth0_macvtap entered promiscuous mode [ 1946.115729] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1946.129936] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1946.138092] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1946.155629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1946.167747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1946.178844] device veth1_macvtap entered promiscuous mode [ 1946.191936] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1946.208563] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1946.224580] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1946.240230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1946.255388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1946.273666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1946.286927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1946.296454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1946.310545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1946.320433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1946.330495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1946.341202] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1946.348183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1946.360774] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1946.367965] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1946.375617] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1946.385307] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1946.395839] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1946.405896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1946.418499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1946.430984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1946.442401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1946.454788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1946.484443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1946.498304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1946.524616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1946.543068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1946.554987] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1946.566847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1946.577337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1946.592155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1946.616886] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1946.625217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1946.635858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1946.647544] device veth0_vlan entered promiscuous mode [ 1946.661626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1946.677186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1946.715552] device veth1_vlan entered promiscuous mode [ 1946.725257] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1946.748093] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1946.787873] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1946.816915] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1946.824277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1946.837318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1946.845485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1946.858229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1947.092792] oom_reaper: reaped process 5456 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1947.111269] modprobe invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1947.123809] modprobe cpuset=/ mems_allowed=0-1 [ 1947.128409] CPU: 1 PID: 5919 Comm: modprobe Not tainted 4.14.227-syzkaller #0 [ 1947.135681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1947.145030] Call Trace: [ 1947.147696] dump_stack+0x1b2/0x281 [ 1947.151303] dump_header+0x178/0x82f [ 1947.154994] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1947.160076] ? ___ratelimit+0x2cd/0x530 [ 1947.164027] oom_kill_process.cold+0x10/0xb18 [ 1947.168510] out_of_memory+0xe3e/0x1190 [ 1947.172464] ? oom_killer_disable+0x1c0/0x1c0 [ 1947.176937] ? mutex_trylock+0x152/0x1a0 [ 1947.180978] __alloc_pages_nodemask+0x23e1/0x2720 [ 1947.185943] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1947.190773] alloc_pages_current+0x155/0x260 [ 1947.195160] filemap_fault+0xea3/0x1980 [ 1947.199118] ext4_filemap_fault+0x84/0xb0 [ 1947.203244] __do_fault+0xfa/0x380 [ 1947.206779] __handle_mm_fault+0x2497/0x4620 [ 1947.211305] ? vm_insert_page+0x7c0/0x7c0 [ 1947.215450] ? lock_acquire+0x170/0x3f0 [ 1947.219463] ? task_work_run+0xfd/0x190 [ 1947.223424] handle_mm_fault+0x391/0x860 [ 1947.227469] __do_page_fault+0x549/0xad0 [ 1947.231515] ? spurious_fault+0x640/0x640 [ 1947.235682] ? do_page_fault+0x60/0x500 [ 1947.239637] ? page_fault+0x2f/0x50 [ 1947.243241] page_fault+0x45/0x50 [ 1947.246715] RIP: 0000:0x3 [ 1947.249450] RSP: 0010:00007fffe44a0e30 EFLAGS: 00000000 [ 1947.250700] Mem-Info: [ 1947.258446] active_anon:14374 inactive_anon:40475 isolated_anon:0 [ 1947.258446] active_file:39 inactive_file:0 isolated_file:0 [ 1947.258446] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1947.258446] slab_reclaimable:13621 slab_unreclaimable:112905 [ 1947.258446] mapped:52610 shmem:41748 pagetables:743 bounce:0 [ 1947.258446] free:13914 free_pcp:93 free_cma:0 [ 1947.277401] syz-executor.0: [ 1947.292410] Node 0 active_anon:55512kB inactive_anon:109184kB active_file:96kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200200kB dirty:0kB writeback:0kB shmem:113928kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1947.302755] vmalloc: allocation failure, allocated 1589067776 of 2147487744 bytes [ 1947.323376] Node 1 active_anon:1984kB inactive_anon:52716kB active_file:60kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1947.323381] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1947.323398] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1947.323417] Node 0 DMA32 free:17920kB min:36200kB low:45248kB high:54296kB active_anon:55512kB inactive_anon:109184kB active_file:96kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7136kB pagetables:2632kB bounce:0kB free_pcp:244kB local_pcp:120kB free_cma:0kB [ 1947.323432] lowmem_reserve[]: 0 0 0 0 0 [ 1947.323447] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1947.323462] lowmem_reserve[]: 0 0 0 0 0 [ 1947.323483] Node 1 Normal free:26780kB min:53696kB low:67120kB high:80544kB active_anon:1984kB inactive_anon:52716kB active_file:60kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:336kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 1947.323500] lowmem_reserve[]: 0 0 0 0 0 [ 1947.323520] Node 0 DMA: 1*4kB (U) 1*8kB [ 1947.331684] Bluetooth: hci0 command 0x041b tx timeout [ 1947.358380] (U) [ 1947.388063] Bluetooth: hci3 command 0x041b tx timeout [ 1947.397371] 0*16kB [ 1947.431222] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 1947.448864] 0*32kB [ 1947.457912] (null) [ 1947.486551] 1*64kB [ 1947.495147] syz-executor.0 cpuset= [ 1947.496541] (U) [ 1947.501784] / mems_allowed=0-1 [ 1947.501803] CPU: 0 PID: 5456 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 1947.501808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1947.501812] Call Trace: [ 1947.501830] dump_stack+0x1b2/0x281 [ 1947.501843] warn_alloc.cold+0x96/0x1cc [ 1947.501855] ? zone_watermark_ok_safe+0x220/0x220 [ 1947.501877] __vmalloc_area_node+0x48a/0x680 [ 1947.509264] 1*128kB [ 1947.510054] ? __vmalloc_node_range+0x150/0x150 [ 1947.512263] (U) [ 1947.514402] ? __get_vm_area_node+0x27d/0x340 [ 1947.516612] 0*256kB [ 1947.520134] __vmalloc_node_range+0xbe/0x150 [ 1947.520147] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1947.520153] vmalloc_user+0x47/0xa0 [ 1947.520161] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1947.520168] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1947.520175] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1947.520185] __vb2_queue_alloc+0x47a/0xd90 [ 1947.520204] vb2_core_create_bufs+0x279/0x5a0 [ 1947.520214] ? __vb2_queue_free+0x7a0/0x7a0 [ 1947.520228] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1947.520238] ? trace_hardirqs_on+0x10/0x10 [ 1947.520248] vb2_create_bufs+0x2e1/0x5b0 [ 1947.520258] ? vb2_thread_start+0x310/0x310 [ 1947.520275] v4l_create_bufs+0xa4/0x150 [ 1947.526025] 1*512kB [ 1947.533272] __video_do_ioctl+0x65b/0x6a0 [ 1947.533285] ? video_ioctl2+0x30/0x30 [ 1947.533295] ? __might_fault+0x177/0x1b0 [ 1947.533305] ? video_ioctl2+0x30/0x30 [ 1947.533313] video_usercopy+0xfd/0xe70 [ 1947.533325] ? v4l_g_ctrl+0x390/0x390 [ 1947.533336] ? retint_kernel+0x2d/0x2d [ 1947.548095] (U) [ 1947.548916] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1947.548928] ? rcu_read_unlock_special+0x776/0xdd0 [ 1947.548943] v4l2_ioctl+0x1bb/0x2f0 [ 1947.548953] ? v4l2_open+0x2f0/0x2f0 [ 1947.548971] do_vfs_ioctl+0x75a/0xff0 [ 1947.552923] 0*1024kB [ 1947.557756] ? ioctl_preallocate+0x1a0/0x1a0 [ 1947.567380] 1*2048kB [ 1947.569095] ? lock_downgrade+0x740/0x740 [ 1947.569109] ? __fget+0x225/0x360 [ 1947.569118] ? do_vfs_ioctl+0xff0/0xff0 [ 1947.569127] ? security_file_ioctl+0x83/0xb0 [ 1947.569137] SyS_ioctl+0x7f/0xb0 [ 1947.569145] ? do_vfs_ioctl+0xff0/0xff0 [ 1947.569155] do_syscall_64+0x1d5/0x640 [ 1947.571171] (M) [ 1947.575602] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1947.577893] 2*4096kB [ 1947.582282] RIP: 0033:0x466459 [ 1947.582286] RSP: 002b:00007f09f29f8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1947.582294] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1947.582298] RDX: 0000000020001880 RSI: 00000000c100565c RDI: 0000000000000003 [ 1947.582302] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1947.582306] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1947.582311] R13: 00007ffd96b9697f R14: 00007f09f29f8300 R15: 0000000000022000 [ 1947.592207] warn_alloc_show_mem: 1 callbacks suppressed [ 1947.592211] Mem-Info: [ 1947.597939] (M) [ 1947.609401] active_anon:14374 inactive_anon:40475 isolated_anon:0 [ 1947.609401] active_file:39 inactive_file:0 isolated_file:0 [ 1947.609401] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1947.609401] slab_reclaimable:13621 slab_unreclaimable:112905 [ 1947.609401] mapped:52610 shmem:41748 pagetables:743 bounce:0 [ 1947.609401] free:13914 free_pcp:91 free_cma:0 [ 1947.611372] = 10956kB [ 1947.614101] Node 0 active_anon:55512kB inactive_anon:109184kB active_file:96kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200200kB dirty:0kB writeback:0kB shmem:113928kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1947.618357] Node 0 [ 1947.634829] Node 1 active_anon:1984kB inactive_anon:52716kB active_file:60kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1947.638345] DMA32: [ 1947.645560] Node 0 [ 1947.646952] 450*4kB [ 1947.654349] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1947.657103] (UME) [ 1947.658652] lowmem_reserve[]: [ 1947.662805] 696*8kB (ME) 221*16kB (MEH) 34*32kB (ME) 14*64kB (MH) 9*128kB (UM) 5*256kB (M) 1*512kB (H) 2*1024kB (UM) 0*2048kB 0*4096kB = 17880kB [ 1947.662856] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1947.662896] Node 1 Normal: 272*4kB (ME) 188*8kB (ME) 148*16kB (ME) [ 1947.672221] 0 [ 1947.674718] 66*32kB [ 1947.677701] 2717 [ 1947.682671] (ME) 32*64kB (UM) 19*128kB (M) 13*256kB (UM) 5*512kB (ME) 1*1024kB (E) 2*2048kB (UM) 1*4096kB [ 1947.697903] 2718 [ 1947.702656] (U) [ 1947.710225] 2718 [ 1947.711240] = 26656kB [ 1947.715123] 2718 [ 1947.721371] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1947.738181] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1947.745779] Node 0 [ 1947.753390] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1947.771045] DMA32 free:17920kB min:36200kB low:45248kB high:54296kB active_anon:55512kB inactive_anon:109184kB active_file:96kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7136kB pagetables:2632kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 1947.775601] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1947.797394] lowmem_reserve[]: [ 1947.800580] 41781 total pagecache pages [ 1947.844059] 0 [ 1947.864031] 0 pages in swap cache [ 1947.878046] 0 [ 1947.893220] Swap cache stats: add 0, delete 0, find 0/0 [ 1947.906018] 0 [ 1947.930012] Free swap = 0kB [ 1947.954764] 0 [ 1947.965544] Total swap = 0kB [ 1947.973872] 0 [ 1947.975818] 2097051 pages RAM [ 1947.977800] Node 0 [ 1947.985001] 0 pages HighMem/MovableOnly [ 1947.993908] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1947.995248] 363841 pages reserved [ 1948.013246] lowmem_reserve[]: [ 1948.020763] 0 pages cma reserved [ 1948.052948] 0 [ 1948.061073] Out of memory (oom_kill_allocating_task): Kill process 5919 (modprobe) score 0 or sacrifice child [ 1948.067074] 0 [ 1948.073848] Killed process 5919 (modprobe) total-vm:4172kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1948.076752] 0 [ 1948.080656] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1948.094566] 0 [ 1948.121738] (null) [ 1948.134977] 0 [ 1948.140005] modprobe: page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 1948.140024] modprobe cpuset=/ mems_allowed=0-1 [ 1948.140043] CPU: 1 PID: 5919 Comm: modprobe Not tainted 4.14.227-syzkaller #0 [ 1948.140047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1948.140051] Call Trace: [ 1948.140063] dump_stack+0x1b2/0x281 [ 1948.140075] warn_alloc.cold+0x96/0x1cc [ 1948.151311] ? zone_watermark_ok_safe+0x220/0x220 [ 1948.151321] ? usleep_range+0x130/0x130 [ 1948.151328] ? try_to_free_pages+0x23f/0x6e0 [ 1948.151336] ? _find_next_bit+0xdb/0x100 [ 1948.151344] ? run_timer_softirq+0x5a0/0x5a0 [ 1948.151357] __alloc_pages_nodemask+0x2127/0x2720 [ 1948.153155] Node 1 [ 1948.163286] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1948.163310] alloc_pages_current+0x155/0x260 [ 1948.165097] Normal free:26656kB min:53696kB low:67120kB high:80544kB active_anon:1984kB inactive_anon:52716kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:336kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 1948.167226] filemap_fault+0xea3/0x1980 [ 1948.169019] lowmem_reserve[]: [ 1948.180005] ext4_filemap_fault+0x84/0xb0 [ 1948.180018] __do_fault+0xfa/0x380 [ 1948.184571] 0 [ 1948.191830] __handle_mm_fault+0x2497/0x4620 [ 1948.191840] ? vm_insert_page+0x7c0/0x7c0 [ 1948.191852] ? lock_acquire+0x170/0x3f0 [ 1948.201199] 0 [ 1948.203753] ? task_work_run+0xfd/0x190 [ 1948.207349] 0 [ 1948.211314] handle_mm_fault+0x391/0x860 [ 1948.211329] __do_page_fault+0x549/0xad0 [ 1948.216160] 0 [ 1948.220118] ? spurious_fault+0x640/0x640 [ 1948.220126] ? do_page_fault+0x60/0x500 [ 1948.220138] ? page_fault+0x2f/0x50 [ 1948.224516] 0 [ 1948.228588] page_fault+0x45/0x50 [ 1948.237842] RIP: 0000:0x3 [ 1948.240105] Node 0 [ 1948.244875] RSP: 0010:00007fffe44a0e30 EFLAGS: 00000000 [ 1948.249308] , order=0, oom_score_adj=0 [ 1948.249314] systemd-journal cpuset=/ mems_allowed=0-1 [ 1948.249335] CPU: 1 PID: 5430 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 1948.249340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1948.249343] Call Trace: [ 1948.249357] dump_stack+0x1b2/0x281 [ 1948.249369] dump_header+0x178/0x82f [ 1948.249379] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1948.249387] ? ___ratelimit+0x2cd/0x530 [ 1948.249395] oom_kill_process.cold+0x10/0xb18 [ 1948.249412] out_of_memory+0xe3e/0x1190 [ 1948.249423] ? oom_killer_disable+0x1c0/0x1c0 [ 1948.249430] ? mutex_trylock+0x152/0x1a0 [ 1948.249441] __alloc_pages_nodemask+0x23e1/0x2720 [ 1948.249462] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1948.249486] alloc_pages_current+0x155/0x260 [ 1948.249497] filemap_fault+0xea3/0x1980 [ 1948.249516] ext4_filemap_fault+0x84/0xb0 [ 1948.249526] __do_fault+0xfa/0x380 [ 1948.249534] __handle_mm_fault+0x2497/0x4620 [ 1948.249543] ? vm_insert_page+0x7c0/0x7c0 [ 1948.249554] ? putname+0xcd/0x110 [ 1948.249571] handle_mm_fault+0x391/0x860 [ 1948.287139] DMA: [ 1948.288848] __do_page_fault+0x549/0xad0 [ 1948.288860] ? spurious_fault+0x640/0x640 [ 1948.288867] ? do_page_fault+0x60/0x500 [ 1948.288876] ? page_fault+0x2f/0x50 [ 1948.288882] page_fault+0x45/0x50 [ 1948.288889] RIP: 0000:0x558cede24d60 [ 1948.288896] RSP: dc111960:00007ffcdc10ea80 EFLAGS: 00000000 [ 1948.292423] 1*4kB [ 1948.298886] Mem-Info: [ 1948.313158] (U) [ 1948.316119] active_anon:14374 inactive_anon:40475 isolated_anon:0 [ 1948.316119] active_file:16 inactive_file:17 isolated_file:0 [ 1948.316119] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1948.316119] slab_reclaimable:13621 slab_unreclaimable:112934 [ 1948.316119] mapped:52610 shmem:41748 pagetables:743 bounce:0 [ 1948.316119] free:13863 free_pcp:90 free_cma:0 [ 1948.318399] 1*8kB [ 1948.324328] Node 0 active_anon:55512kB inactive_anon:109184kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200200kB dirty:0kB writeback:0kB shmem:113928kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1948.331233] (U) [ 1948.334328] Node 1 active_anon:1984kB inactive_anon:52716kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1948.336080] 0*16kB [ 1948.337863] Node 0 [ 1948.351046] 0*32kB [ 1948.356018] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1948.356097] 1*64kB [ 1948.361343] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1948.361364] Node 0 DMA32 free:17840kB min:36200kB low:45248kB high:54296kB active_anon:55512kB inactive_anon:109184kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7136kB pagetables:2632kB bounce:0kB free_pcp:236kB local_pcp:120kB free_cma:0kB [ 1948.361381] lowmem_reserve[]: 0 0 0 0 0 [ 1948.361399] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1948.361413] lowmem_reserve[]: 0 0 0 0 0 [ 1948.361427] Node 1 Normal free:26656kB min:53696kB low:67120kB high:80544kB active_anon:1984kB inactive_anon:52716kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:336kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 1948.361443] lowmem_reserve[]: 0 0 0 0 0 [ 1948.361460] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10956kB [ 1948.361521] Node 0 DMA32: 450*4kB (UME) 697*8kB (MEH) 222*16kB [ 1948.378018] (U) [ 1948.382819] (UME) [ 1948.386212] 1*128kB [ 1948.388959] 34*32kB [ 1948.404338] (U) [ 1948.409935] (ME) [ 1948.421244] 0*256kB [ 1948.427662] 13*64kB [ 1948.440668] 1*512kB [ 1948.445448] (M) [ 1948.446259] (U) [ 1948.450433] 9*128kB (UM) 5*256kB (M) 1*512kB (H) 2*1024kB (UM) 0*2048kB 0*4096kB = 17840kB [ 1948.450465] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1948.450509] Node 1 Normal: 272*4kB (ME) 188*8kB [ 1948.464284] 0*1024kB [ 1948.471070] (ME) [ 1948.477731] 1*2048kB [ 1948.481726] 148*16kB [ 1948.489539] (M) [ 1948.493375] (ME) [ 1948.493977] 2*4096kB [ 1948.495943] 66*32kB [ 1948.542169] (M) [ 1948.563435] (ME) [ 1948.600600] = 10956kB [ 1948.624677] 32*64kB [ 1948.635791] Node 0 [ 1948.664621] (UM) [ 1948.696118] DMA32: [ 1948.722171] 19*128kB [ 1948.735868] 450*4kB [ 1948.737134] (M) [ 1948.757762] (UME) [ 1948.760945] 13*256kB [ 1948.763226] 697*8kB [ 1948.763763] (UM) [ 1948.765718] (MEH) [ 1948.767675] 5*512kB [ 1948.786674] 223*16kB [ 1948.788923] (ME) [ 1948.804268] (UMEH) [ 1948.805069] 1*1024kB [ 1948.807468] 35*32kB [ 1948.811642] (E) [ 1948.819946] (MEH) [ 1948.821609] 2*2048kB [ 1948.823479] 14*64kB [ 1948.825691] (UM) [ 1948.828086] (MH) [ 1948.832333] 1*4096kB [ 1948.841169] 10*128kB [ 1948.841521] (U) [ 1948.844870] (UMH) [ 1948.847173] = 26656kB [ 1948.860072] 6*256kB [ 1948.862891] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1948.865186] (MH) [ 1948.867490] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1948.879873] 0*512kB [ 1948.882376] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1948.882964] 2*1024kB [ 1948.885268] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1948.906012] (UM) [ 1948.909252] 41781 total pagecache pages [ 1948.928285] 0*2048kB [ 1948.929840] 0 pages in swap cache [ 1948.938478] 0*4096kB [ 1948.939787] Swap cache stats: add 0, delete 0, find 0/0 [ 1948.939793] Free swap = 0kB [ 1948.950663] Total swap = 0kB [ 1948.951570] = 17824kB [ 1948.953694] 2097051 pages RAM [ 1948.956091] Node 0 [ 1948.959250] 0 pages HighMem/MovableOnly [ 1948.959254] 363841 pages reserved [ 1948.959257] 0 pages cma reserved [ 1948.959264] Out of memory (oom_kill_allocating_task): Kill process 5430 (systemd-journal) score 0 or sacrifice child [ 1948.959293] Killed process 5430 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1544kB [ 1948.961258] systemd-journal: [ 1948.967129] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1948.969001] page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 1948.980692] (null) [ 1948.983347] net_ratelimit: 10 callbacks suppressed [ 1948.983352] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1949.005560] Normal: [ 1949.008008] systemd-journal cpuset= [ 1949.027747] , order=0, oom_score_adj=0 [ 1949.031558] / [ 1949.035096] 0*4kB [ 1949.036916] mems_allowed=0-1 [ 1949.047838] CPU: 1 PID: 5430 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 1949.049385] syz-executor.1 cpuset= [ 1949.055711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1949.055715] Call Trace: [ 1949.059273] 0*8kB [ 1949.068589] dump_stack+0x1b2/0x281 [ 1949.068602] warn_alloc.cold+0x96/0x1cc [ 1949.071191] / [ 1949.073321] ? lock_downgrade+0x740/0x740 [ 1949.076920] mems_allowed=0-1 [ 1949.080872] ? zone_watermark_ok_safe+0x220/0x220 [ 1949.080881] ? wake_up_q+0x82/0xd0 [ 1949.080893] ? wait_for_completion_io+0x10/0x10 [ 1949.080905] __alloc_pages_nodemask+0x2127/0x2720 [ 1949.082613] 0*16kB [ 1949.086747] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1949.098565] 0*32kB [ 1949.102807] alloc_pages_current+0x155/0x260 [ 1949.107614] 0*64kB [ 1949.109835] filemap_fault+0xea3/0x1980 [ 1949.109854] ext4_filemap_fault+0x84/0xb0 [ 1949.131594] __do_fault+0xfa/0x380 [ 1949.135114] __handle_mm_fault+0x2497/0x4620 [ 1949.138563] 0*128kB 0*256kB [ 1949.139505] ? vm_insert_page+0x7c0/0x7c0 [ 1949.139516] ? putname+0xcd/0x110 [ 1949.142512] 0*512kB [ 1949.146648] handle_mm_fault+0x391/0x860 [ 1949.150114] 0*1024kB [ 1949.152399] __do_page_fault+0x549/0xad0 [ 1949.156429] 0*2048kB [ 1949.158844] ? spurious_fault+0x640/0x640 [ 1949.158853] ? do_page_fault+0x60/0x500 [ 1949.158862] ? page_fault+0x2f/0x50 [ 1949.158869] page_fault+0x45/0x50 [ 1949.158879] RIP: 0000:0x558cede24d60 [ 1949.178572] 0*4096kB [ 1949.180454] RSP: dc111960:00007ffcdc10ea80 EFLAGS: 00000000 [ 1949.184147] = 0kB [ 1949.186832] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1949.200879] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1949.203315] CPU: 0 PID: 5485 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 1949.209849] Node 1 [ 1949.215230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1949.215235] Call Trace: [ 1949.217454] Normal: [ 1949.226798] dump_stack+0x1b2/0x281 [ 1949.226809] dump_header+0x178/0x82f [ 1949.226818] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1949.226826] ? ___ratelimit+0x2cd/0x530 [ 1949.226835] oom_kill_process.cold+0x10/0xb18 [ 1949.226852] out_of_memory+0xe3e/0x1190 [ 1949.231324] warn_alloc_show_mem: 1 callbacks suppressed [ 1949.231326] Mem-Info: [ 1949.231727] ? oom_killer_disable+0x1c0/0x1c0 [ 1949.235333] active_anon:14374 inactive_anon:40475 isolated_anon:0 [ 1949.235333] active_file:16 inactive_file:17 isolated_file:0 [ 1949.235333] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1949.235333] slab_reclaimable:13619 slab_unreclaimable:112942 [ 1949.235333] mapped:52610 shmem:41748 pagetables:743 bounce:0 [ 1949.235333] free:13859 free_pcp:87 free_cma:0 [ 1949.239014] ? mutex_trylock+0x152/0x1a0 [ 1949.239024] __alloc_pages_nodemask+0x23e1/0x2720 [ 1949.239042] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1949.239064] alloc_pages_current+0x155/0x260 [ 1949.239074] filemap_fault+0xea3/0x1980 [ 1949.244161] 272*4kB [ 1949.248114] ext4_filemap_fault+0x84/0xb0 [ 1949.254455] Node 0 active_anon:55512kB inactive_anon:109184kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200200kB dirty:0kB writeback:0kB shmem:113928kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1949.256544] __do_fault+0xfa/0x380 [ 1949.262102] Node 1 active_anon:1984kB inactive_anon:52716kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1949.264445] __handle_mm_fault+0x2497/0x4620 [ 1949.270763] (ME) [ 1949.302053] ? vm_insert_page+0x7c0/0x7c0 [ 1949.302063] ? task_work_run+0xfd/0x190 [ 1949.302078] handle_mm_fault+0x391/0x860 [ 1949.302089] __do_page_fault+0x549/0xad0 [ 1949.302100] ? spurious_fault+0x640/0x640 [ 1949.302107] ? do_page_fault+0x60/0x500 [ 1949.302116] ? page_fault+0x2f/0x50 [ 1949.302123] page_fault+0x45/0x50 [ 1949.302131] RIP: 0003:0x7ffd0c5938e0 [ 1949.302135] RSP: 0010:00000000004bf59c EFLAGS: 7ffd0c593860 [ 1949.312507] Mem-Info: [ 1949.317177] Node 0 [ 1949.329088] active_anon:14374 inactive_anon:40475 isolated_anon:0 [ 1949.329088] active_file:16 inactive_file:17 isolated_file:0 [ 1949.329088] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1949.329088] slab_reclaimable:13619 slab_unreclaimable:112942 [ 1949.329088] mapped:52610 shmem:41748 pagetables:743 bounce:0 [ 1949.329088] free:13859 free_pcp:87 free_cma:0 [ 1949.330828] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1949.369597] Node 0 active_anon:55512kB inactive_anon:109184kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200200kB dirty:0kB writeback:0kB shmem:113928kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1949.389414] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1949.389456] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1949.389967] lowmem_reserve[]: [ 1949.400339] Node 1 active_anon:1984kB inactive_anon:52716kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1949.411053] 188*8kB [ 1949.415772] Node 0 [ 1949.416346] (ME) [ 1949.420336] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1949.420339] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1949.420357] Node 0 DMA32 free:17824kB min:36200kB low:45248kB high:54296kB active_anon:55512kB inactive_anon:109184kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7136kB pagetables:2632kB bounce:0kB free_pcp:224kB local_pcp:112kB free_cma:0kB [ 1949.420374] lowmem_reserve[]: [ 1949.425811] 0 [ 1949.427436] 0 0 [ 1949.436350] 2717 [ 1949.441313] 0 [ 1949.443375] 2718 [ 1949.474857] Bluetooth: hci3 command 0x040f tx timeout [ 1949.474878] Bluetooth: hci0 command 0x040f tx timeout [ 1949.475052] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1949.485043] 0 [ 1949.502569] 148*16kB [ 1949.538864] 0 [ 1949.543856] (ME) [ 1949.573742] 2718 [ 1949.584834] Node 0 [ 1949.606922] 66*32kB [ 1949.620501] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1949.641083] 2718 [ 1949.642337] lowmem_reserve[]: [ 1949.644120] Node 0 [ 1949.646073] 0 [ 1949.648122] DMA32 free:18864kB min:36200kB low:45248kB high:54296kB active_anon:55512kB inactive_anon:109184kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7136kB pagetables:2632kB bounce:0kB free_pcp:224kB local_pcp:112kB free_cma:0kB [ 1949.660670] 0 [ 1949.664193] (ME) [ 1949.679257] 0 [ 1949.683456] lowmem_reserve[]: [ 1949.683581] 0 [ 1949.710615] 32*64kB [ 1949.723881] 0 [ 1949.748163] 0 [ 1949.761088] 0 0 [ 1949.762848] Node 1 Normal free:26656kB min:53696kB low:67120kB high:80544kB active_anon:1984kB inactive_anon:52716kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:336kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 1949.764811] 0 [ 1949.795959] (UM) 19*128kB (M) 13*256kB (UM) 5*512kB (ME) 1*1024kB (E) 2*2048kB (UM) 1*4096kB (U) = 26656kB [ 1949.804975] lowmem_reserve[]: 0 0 0 0 0 [ 1949.807680] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1949.822597] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10956kB [ 1949.823481] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1949.844289] Node 0 DMA32: 450*4kB (UME) 836*8kB (UME) 223*16kB (UMEH) 35*32kB (MEH) 14*64kB (MH) 10*128kB (UMH) 6*256kB (MH) 0*512kB 2*1024kB (UM) 0*2048kB 0*4096kB = 18936kB [ 1949.846518] 0 [ 1949.865545] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1949.871860] Node 0 [ 1949.893253] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1949.902082] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1949.904394] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1949.925170] lowmem_reserve[]: 0 0 0 0 0 [ 1949.925544] Node 1 [ 1949.929811] Node 1 Normal free:26656kB min:53696kB low:67120kB high:80544kB active_anon:1984kB inactive_anon:52716kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:336kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 1949.929832] lowmem_reserve[]: 0 0 0 0 0 [ 1949.929850] Node 0 DMA: [ 1949.939701] Normal: [ 1949.963775] 41781 total pagecache pages [ 1949.974044] 0 pages in swap cache [ 1949.975415] 272*4kB [ 1949.977487] Swap cache stats: add 0, delete 0, find 0/0 [ 1949.977493] (ME) [ 1949.981655] Free swap = 0kB [ 1949.988111] 188*8kB [ 1949.990353] Total swap = 0kB [ 1949.990361] 2097051 pages RAM [ 1949.990364] 0 pages HighMem/MovableOnly [ 1949.990368] 363841 pages reserved [ 1949.990371] 0 pages cma reserved [ 1950.000289] 1*4kB [ 1950.013878] (ME) 148*16kB (ME) 66*32kB (ME) 32*64kB (UM) 19*128kB (M) 13*256kB (UM) 5*512kB (ME) 1*1024kB (E) 2*2048kB (UM) 1*4096kB (U) = 26656kB [ 1950.020394] (U) 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10956kB [ 1950.043204] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1950.068552] Node 0 DMA32: 450*4kB (UME) 843*8kB (UME) 226*16kB (UMEH) 37*32kB (UMEH) 15*64kB (UMH) 12*128kB (UMH) 6*256kB (MH) 0*512kB 2*1024kB (UM) 0*2048kB 0*4096kB = 19424kB [ 1950.072212] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1950.098428] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1950.104219] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1950.105035] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1950.117180] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1950.128378] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1950.139573] 41781 total pagecache pages [ 1950.143641] 0 pages in swap cache [ 1950.147089] Swap cache stats: add 0, delete 0, find 0/0 [ 1950.148397] Node 1 Normal: 272*4kB (ME) 188*8kB (ME) 148*16kB (ME) 66*32kB (ME) 32*64kB (UM) 19*128kB (M) 13*256kB (UM) 5*512kB (ME) 1*1024kB (E) 2*2048kB (UM) 1*4096kB (U) = 26656kB [ 1950.162759] Free swap = 0kB [ 1950.183147] Total swap = 0kB [ 1950.186199] 2097051 pages RAM [ 1950.193150] 0 pages HighMem/MovableOnly [ 1950.197137] 363841 pages reserved [ 1950.198378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1950.207527] 0 pages cma reserved [ 1950.216697] Out of memory (oom_kill_allocating_task): Kill process 5485 (syz-executor.1) score 0 or sacrifice child [ 1950.218917] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1950.234654] Killed process 5485 (syz-executor.1) total-vm:93120kB, anon-rss:84kB, file-rss:34656kB, shmem-rss:0kB [ 1950.258166] oom_reaper: reaped process 5919 (modprobe), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1950.258749] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1950.276660] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1950.304507] oom_reaper: reaped process 5430 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1544kB [ 1950.316800] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1950.327829] 41781 total pagecache pages [ 1950.333975] 0 pages in swap cache [ 1950.335465] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1950.337441] Swap cache stats: add 0, delete 0, find 0/0 [ 1950.337446] (null) [ 1950.366094] Free swap = 0kB [ 1950.386421] , order=0, oom_score_adj=-1000 [ 1950.387904] Total swap = 0kB [ 1950.406461] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1950.411960] 2097051 pages RAM [ 1950.414049] CPU: 0 PID: 4626 Comm: systemd-udevd Not tainted 4.14.227-syzkaller #0 [ 1950.416840] 0 pages HighMem/MovableOnly [ 1950.422778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1950.422782] Call Trace: [ 1950.422797] dump_stack+0x1b2/0x281 [ 1950.422809] dump_header+0x178/0x82f [ 1950.422818] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1950.422826] ? ___ratelimit+0x2cd/0x530 [ 1950.422834] oom_kill_process.cold+0x10/0xb18 [ 1950.422844] ? lock_downgrade+0x740/0x740 [ 1950.422858] out_of_memory+0x2dc/0x1190 [ 1950.422872] ? oom_killer_disable+0x1c0/0x1c0 [ 1950.422878] ? mutex_trylock+0x152/0x1a0 [ 1950.422887] __alloc_pages_nodemask+0x23e1/0x2720 [ 1950.422906] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1950.422929] alloc_pages_current+0x155/0x260 [ 1950.422938] filemap_fault+0xea3/0x1980 [ 1950.422954] ext4_filemap_fault+0x84/0xb0 [ 1950.422963] __do_fault+0xfa/0x380 [ 1950.422972] __handle_mm_fault+0x2497/0x4620 [ 1950.422982] ? ep_poll+0x1ab/0xa50 [ 1950.422989] ? vm_insert_page+0x7c0/0x7c0 [ 1950.423009] handle_mm_fault+0x391/0x860 [ 1950.423020] __do_page_fault+0x549/0xad0 [ 1950.423030] ? spurious_fault+0x640/0x640 [ 1950.423039] ? do_page_fault+0x60/0x500 [ 1950.440830] 363841 pages reserved [ 1950.442537] ? page_fault+0x2f/0x50 [ 1950.446229] 0 pages cma reserved [ 1950.451331] page_fault+0x45/0x50 [ 1950.451339] RIP: 0001:0xffffffffffffffff [ 1950.451343] RSP: bd94b600:00007ffc68135290 EFLAGS: 7ffc68135120 [ 1950.531788] Mem-Info: [ 1950.577765] active_anon:14249 inactive_anon:40475 isolated_anon:0 [ 1950.577765] active_file:41 inactive_file:0 isolated_file:0 [ 1950.577765] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1950.577765] slab_reclaimable:13619 slab_unreclaimable:112552 [ 1950.577765] mapped:52610 shmem:41748 pagetables:743 bounce:0 [ 1950.577765] free:14371 free_pcp:206 free_cma:0 [ 1950.625078] Node 0 active_anon:55412kB inactive_anon:109184kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200200kB dirty:0kB writeback:0kB shmem:113928kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1950.667157] Node 1 active_anon:1584kB inactive_anon:52716kB active_file:120kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1950.710872] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1950.746487] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1950.777063] Node 0 DMA32 free:19772kB min:36200kB low:45248kB high:54296kB active_anon:55412kB inactive_anon:109184kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7072kB pagetables:2632kB bounce:0kB free_pcp:388kB local_pcp:68kB free_cma:0kB [ 1950.818374] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1950.840009] lowmem_reserve[]: 0 0 0 0 0 [ 1950.844060] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1950.877257] lowmem_reserve[]: 0 0 0 0 0 [ 1950.886611] Node 1 Normal free:80676kB min:53696kB low:67120kB high:80544kB active_anon:1576kB inactive_anon:52716kB active_file:68kB inactive_file:2476kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:336kB bounce:0kB free_pcp:688kB local_pcp:156kB free_cma:0kB [ 1950.965083] lowmem_reserve[]: 0 0 0 0 0 [ 1950.971077] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10956kB [ 1950.987407] Node 0 DMA32: 482*4kB (UME) 1055*8kB (UE) 372*16kB (UMEH) 169*32kB (UMEH) 108*64kB (UMH) 83*128kB (UMH) 40*256kB (UMH) 2*512kB (M) 2*1024kB (UM) 0*2048kB 0*4096kB = 52576kB [ 1951.008683] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1951.023043] Node 1 Normal: 12*4kB (UME) 25*8kB (UE) 62*16kB (UME) 59*32kB (UME) 81*64kB (UM) 59*128kB (UM) 43*256kB (UM) 30*512kB (UME) 15*1024kB (UE) 15*2048kB (UM) 21*4096kB (U) = 174328kB [ 1951.043955] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1951.053166] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1951.072794] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1951.085849] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1951.094514] 46654 total pagecache pages [ 1951.102914] 0 pages in swap cache [ 1951.106386] Swap cache stats: add 0, delete 0, find 0/0 [ 1951.112087] Free swap = 0kB [ 1951.115204] Total swap = 0kB [ 1951.124168] 2097051 pages RAM [ 1951.127296] 0 pages HighMem/MovableOnly [ 1951.131363] 363841 pages reserved [ 1951.134997] 0 pages cma reserved [ 1951.142035] Out of memory: Kill process 7966 (syz-fuzzer) score 5 or sacrifice child [ 1951.150256] Killed process 5468 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1951.191474] oom_reaper: reaped process 5468 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1951.304003] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1951.371232] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1951.394832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1951.403373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1951.411604] device bridge_slave_1 left promiscuous mode [ 1951.417123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1951.424848] device bridge_slave_0 left promiscuous mode [ 1951.430724] bridge0: port 1(bridge_slave_0) entered disabled state [ 1951.444560] device veth1_vlan left promiscuous mode [ 1951.449779] device veth0_vlan left promiscuous mode [ 1951.481147] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1951.504007] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1951.527552] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1951.548625] systemd[1]: Stopped Journal Service. [ 1951.558013] device hsr_slave_1 left promiscuous mode [ 1951.567912] device hsr_slave_0 left promiscuous mode [ 1951.577966] systemd[1]: Starting Journal Service... [ 1951.582306] team0 (unregistering): Port device team_slave_1 removed [ 1951.597598] team0 (unregistering): Port device team_slave_0 removed [ 1951.607576] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1951.618411] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1951.644137] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1951.651027] bond0 (unregistering): Released all slaves [ 1951.852787] systemd-journald[5947]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1952.739305] systemd[1]: Started Journal Service. [ 1953.009948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1953.016685] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1953.028914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1953.035690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1953.048230] device bridge_slave_1 left promiscuous mode [ 1953.053809] bridge0: port 2(bridge_slave_1) entered disabled state [ 1953.065195] device bridge_slave_0 left promiscuous mode [ 1953.071482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1953.084788] device veth1_macvtap left promiscuous mode [ 1953.091100] device veth0_macvtap left promiscuous mode [ 1953.096444] device veth1_vlan left promiscuous mode [ 1953.105612] device veth0_vlan left promiscuous mode [ 1953.225723] device hsr_slave_1 left promiscuous mode [ 1953.239837] device hsr_slave_0 left promiscuous mode [ 1953.259935] team0 (unregistering): Port device team_slave_1 removed [ 1953.276738] team0 (unregistering): Port device team_slave_0 removed [ 1953.286584] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1953.302936] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1953.341838] bond0 (unregistering): Released all slaves [ 1954.308226] IPVS: ftp: loaded support on port[0] = 21 [ 1954.358265] IPVS: ftp: loaded support on port[0] = 21 [ 1954.471389] chnl_net:caif_netlink_parms(): no params data found [ 1954.636018] chnl_net:caif_netlink_parms(): no params data found [ 1954.685716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1954.697096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1954.706088] device bridge_slave_0 entered promiscuous mode [ 1954.731069] bridge0: port 2(bridge_slave_1) entered blocking state [ 1954.740425] bridge0: port 2(bridge_slave_1) entered disabled state [ 1954.751603] device bridge_slave_1 entered promiscuous mode [ 1954.795162] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1954.810686] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1954.871663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1954.880428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1954.892043] device bridge_slave_0 entered promiscuous mode [ 1954.901375] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1954.912049] team0: Port device team_slave_0 added [ 1954.917177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1954.923821] bridge0: port 2(bridge_slave_1) entered disabled state [ 1954.936869] device bridge_slave_1 entered promiscuous mode [ 1954.944240] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1954.956171] team0: Port device team_slave_1 added [ 1955.005774] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1955.020566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1955.026974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1955.057752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1955.074130] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1955.084740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1955.094944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1955.124674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1955.162415] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1955.170710] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1955.182904] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1955.191349] team0: Port device team_slave_0 added [ 1955.220750] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1955.232294] team0: Port device team_slave_1 added [ 1955.243046] device hsr_slave_0 entered promiscuous mode [ 1955.253901] device hsr_slave_1 entered promiscuous mode [ 1955.274537] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1955.295062] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1955.303458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1955.314676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1955.344791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1955.369866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1955.376142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1955.411581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1955.444198] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1955.452721] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1955.463624] Bluetooth: hci0 command 0x0409 tx timeout [ 1955.530797] device hsr_slave_0 entered promiscuous mode [ 1955.542530] device hsr_slave_1 entered promiscuous mode [ 1955.561815] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1955.584346] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1955.656913] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1955.697302] Bluetooth: hci3 command 0x0409 tx timeout [ 1955.752247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1955.773182] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1955.794180] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1955.812129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1955.820091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1955.840743] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1955.846875] 8021q: adding VLAN 0 to HW filter on device team0 [ 1955.858597] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1955.871195] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1955.879402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1955.889074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1955.896793] bridge0: port 1(bridge_slave_0) entered blocking state [ 1955.903431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1955.920658] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1955.941831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1955.949465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1955.961842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1955.970125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1955.976504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1955.990663] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1956.009427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1956.021507] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1956.032543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1956.040842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1956.052810] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1956.063857] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1956.070316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1956.079447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1956.091911] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1956.102057] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1956.111646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1956.120477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1956.130341] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1956.138153] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1956.144942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1956.152550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1956.160570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1956.168583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1956.181894] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1956.190292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1956.198973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1956.209328] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1956.215492] 8021q: adding VLAN 0 to HW filter on device team0 [ 1956.223326] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1956.229878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1956.241415] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1956.251677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1956.260816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1956.269055] bridge0: port 1(bridge_slave_0) entered blocking state [ 1956.275414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1956.284298] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1956.292605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1956.300031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1956.308319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1956.316033] bridge0: port 2(bridge_slave_1) entered blocking state [ 1956.322485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1956.332819] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1956.341029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1956.351214] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1956.363490] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1956.369894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1956.379587] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1956.387405] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1956.393659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1956.401850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1956.409830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1956.416567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1956.423491] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1956.432856] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1956.441120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1956.449188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1956.465386] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1956.475803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1956.486746] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1956.493789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1956.502143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1956.509832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1956.522465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1956.533772] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1956.542434] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1956.549688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1956.556441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1956.574565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1956.619488] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1956.634490] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1956.642306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1956.655308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1956.675850] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1956.685254] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1956.693193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1956.702141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1956.714428] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1956.723570] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1956.730604] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1956.740822] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1956.747787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1956.755267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1956.764194] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1956.771448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1956.780650] device veth0_vlan entered promiscuous mode [ 1956.792803] device veth1_vlan entered promiscuous mode [ 1956.799200] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1956.809599] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1956.820601] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1956.828132] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1956.834719] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1956.847869] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1956.854678] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1956.863295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1956.871424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1956.879557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1956.889857] device veth0_vlan entered promiscuous mode [ 1956.896225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1956.904454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1956.914289] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1956.925507] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1956.935472] device veth1_vlan entered promiscuous mode [ 1956.941975] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1956.948843] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1956.956091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1956.963899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1956.973745] device veth0_macvtap entered promiscuous mode [ 1956.981417] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1956.991066] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1957.004274] device veth1_macvtap entered promiscuous mode [ 1957.010961] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1957.021980] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1957.032375] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1957.041861] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1957.051880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1957.062157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1957.071486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1957.081269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1957.090447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1957.100666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1957.110204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1957.120487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1957.130966] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1957.138327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1957.145897] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1957.153612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1957.161255] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1957.168492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1957.176141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1957.185947] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1957.195448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1957.203646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1957.213011] device veth0_macvtap entered promiscuous mode [ 1957.219645] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1957.227548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1957.238135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1957.248300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1957.258469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1957.268053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1957.278186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1957.287753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1957.298362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1957.308692] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1957.315606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1957.325424] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1957.332973] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1957.340944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1957.350679] device veth1_macvtap entered promiscuous mode [ 1957.357189] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1957.374308] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1957.391838] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1957.401597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1957.414622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1957.423928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1957.433714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1957.443213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1957.453275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1957.462587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1957.472654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1957.481820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1957.491570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1957.501945] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1957.509723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1957.517629] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1957.524707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1957.533293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1957.544086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1957.554585] Bluetooth: hci0 command 0x041b tx timeout [ 1957.557558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1957.569990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1957.579923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1957.589109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1957.599133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1957.608349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1957.618217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1957.627943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1957.638152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1957.648431] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1957.655459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1957.668921] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1957.678379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1957.787244] Bluetooth: hci3 command 0x041b tx timeout 05:08:32 executing program 4: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x12, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0xe000000, 0x3, 0x4, 0x400, 0x7, {r2, r3/1000+10000}, {0x1, 0x0, 0x97, 0x80, 0x6, 0x8, "e0bf21dd"}, 0x8, 0x2, @userptr=0x1, 0xfffffffa}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) 05:08:32 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @empty}, &(0x7f0000000300)=0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x100000, 0x8, {}, {0x5, 0x13b30831199b05c9, 0x7, 0x8, 0x0, 0x5, "4c16f693"}, 0x3, 0x2, @fd=r1, 0x8c, 0x0, r2}) r3 = socket$inet(0x2, 0xa, 0x80000000) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e) syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x400, 0x141080) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x4000}) 05:08:32 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000000)={0x0, 0x7}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) [ 1959.616417] Bluetooth: hci0 command 0x040f tx timeout [ 1959.856504] Bluetooth: hci3 command 0x040f tx timeout [ 1961.700799] Bluetooth: hci0 command 0x0419 tx timeout [ 1961.719786] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1961.741947] systemd-journal cpuset=/ mems_allowed=0-1 [ 1961.749412] CPU: 0 PID: 5947 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 1961.757293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1961.766767] Call Trace: [ 1961.769350] dump_stack+0x1b2/0x281 [ 1961.772970] dump_header+0x178/0x82f [ 1961.777384] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1961.782487] ? ___ratelimit+0x2cd/0x530 [ 1961.786459] oom_kill_process.cold+0x10/0xb18 [ 1961.790953] out_of_memory+0xe3e/0x1190 [ 1961.794911] ? oom_killer_disable+0x1c0/0x1c0 [ 1961.799394] ? mutex_trylock+0x152/0x1a0 [ 1961.803556] __alloc_pages_nodemask+0x23e1/0x2720 [ 1961.808415] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1961.813256] alloc_pages_current+0x155/0x260 [ 1961.817751] filemap_fault+0xea3/0x1980 [ 1961.821718] ext4_filemap_fault+0x84/0xb0 [ 1961.825862] __do_fault+0xfa/0x380 [ 1961.829391] __handle_mm_fault+0x2497/0x4620 [ 1961.833792] ? ep_poll+0x1ab/0xa50 [ 1961.837329] ? vm_insert_page+0x7c0/0x7c0 [ 1961.841484] handle_mm_fault+0x391/0x860 [ 1961.845652] __do_page_fault+0x549/0xad0 [ 1961.849707] ? spurious_fault+0x640/0x640 [ 1961.853837] ? do_page_fault+0x60/0x500 [ 1961.857806] ? page_fault+0x2f/0x50 [ 1961.861457] page_fault+0x45/0x50 [ 1961.864901] RIP: 0001:0xffffffffffffffff [ 1961.868949] RSP: 7f991e0:00007ffdb3320c60 EFLAGS: 7ffdb3320a70 [ 1961.871616] Mem-Info: [ 1961.880347] active_anon:14729 inactive_anon:42508 isolated_anon:0 [ 1961.880347] active_file:14 inactive_file:14 isolated_file:0 [ 1961.880347] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1961.880347] slab_reclaimable:13358 slab_unreclaimable:114432 [ 1961.880347] mapped:52639 shmem:43795 pagetables:717 bounce:0 [ 1961.880347] free:25216 free_pcp:125 free_cma:0 [ 1961.916864] Node 0 active_anon:58184kB inactive_anon:117332kB active_file:108kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165828kB dirty:0kB writeback:0kB shmem:122144kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1961.945251] Node 1 active_anon:732kB inactive_anon:52700kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44732kB dirty:0kB writeback:0kB shmem:53036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1961.951023] Bluetooth: hci3 command 0x0419 tx timeout [ 1961.972257] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1961.972284] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1961.972305] Node 0 DMA32 free:36136kB min:36200kB low:45248kB high:54296kB active_anon:58184kB inactive_anon:117332kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7136kB pagetables:2532kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 1962.038130] lowmem_reserve[]: 0 0 0 0 0 [ 1962.042118] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1962.068150] lowmem_reserve[]: 0 0 0 0 0 [ 1962.072123] Node 1 Normal free:53548kB min:53696kB low:67120kB high:80544kB active_anon:732kB inactive_anon:52700kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1962.100771] lowmem_reserve[]: 0 0 0 0 0 [ 1962.104779] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 11060kB [ 1962.118335] Node 0 DMA32: 548*4kB (UME) 711*8kB (UME) 248*16kB (MEH) 45*32kB (MEH) 19*64kB (UMH) 12*128kB (UMH) 10*256kB (MH) 5*512kB (UMH) 3*1024kB (UM) 4*2048kB (UM) 1*4096kB (M) = 36520kB [ 1962.135879] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1962.146757] Node 1 Normal: 223*4kB (UME) 162*8kB (UME) 132*16kB (UME) 65*32kB (ME) 29*64kB (UM) 12*128kB (M) 13*256kB (UM) 7*512kB (ME) 4*1024kB (UME) 2*2048kB (UM) 7*4096kB (U) = 53548kB [ 1962.163781] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1962.173199] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1962.182132] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1962.191113] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1962.200347] 43823 total pagecache pages [ 1962.204317] 0 pages in swap cache [ 1962.207855] Swap cache stats: add 0, delete 0, find 0/0 [ 1962.213224] Free swap = 0kB [ 1962.216295] Total swap = 0kB [ 1962.219302] 2097051 pages RAM [ 1962.222380] 0 pages HighMem/MovableOnly [ 1962.226397] 363841 pages reserved [ 1962.229835] 0 pages cma reserved [ 1962.233191] Out of memory (oom_kill_allocating_task): Kill process 5947 (systemd-journal) score 0 or sacrifice child [ 1962.244338] Killed process 5947 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:4kB, shmem-rss:1548kB [ 1962.256310] oom_reaper: reaped process 5947 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1660kB [ 1962.308414] oom_reaper: reaped process 6420 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1962.329484] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1962.353240] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1962.360121] CPU: 0 PID: 7967 Comm: syz-fuzzer Not tainted 4.14.227-syzkaller #0 [ 1962.367572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1962.376924] Call Trace: [ 1962.379521] dump_stack+0x1b2/0x281 [ 1962.383145] dump_header+0x178/0x82f [ 1962.386854] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1962.392157] ? ___ratelimit+0x2cd/0x530 [ 1962.396121] oom_kill_process.cold+0x10/0xb18 [ 1962.400627] out_of_memory+0xe3e/0x1190 [ 1962.404647] ? oom_killer_disable+0x1c0/0x1c0 [ 1962.406655] syz-executor.1: [ 1962.409127] ? mutex_trylock+0x152/0x1a0 [ 1962.409131] vmalloc: allocation failure, allocated 1578250240 of 2147491840 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 1962.412137] __alloc_pages_nodemask+0x23e1/0x2720 [ 1962.422309] (null) [ 1962.428147] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1962.428169] alloc_pages_current+0x155/0x260 [ 1962.428180] filemap_fault+0xea3/0x1980 [ 1962.428198] ext4_filemap_fault+0x84/0xb0 [ 1962.428207] __do_fault+0xfa/0x380 [ 1962.428217] __handle_mm_fault+0x2497/0x4620 [ 1962.434169] syz-executor.1 cpuset= [ 1962.435184] ? vm_insert_page+0x7c0/0x7c0 [ 1962.446913] / [ 1962.448356] ? lock_downgrade+0x740/0x740 [ 1962.452481] mems_allowed=0-1 [ 1962.456010] handle_mm_fault+0x391/0x860 [ 1962.456022] __do_page_fault+0x549/0xad0 [ 1962.456033] ? spurious_fault+0x640/0x640 [ 1962.456041] ? do_page_fault+0x60/0x500 [ 1962.456050] ? page_fault+0x2f/0x50 [ 1962.456058] page_fault+0x45/0x50 [ 1962.456065] RIP: 0000:0x940aec [ 1962.456069] RSP: 2e000:000000c00003dfa0 EFLAGS: 0043b6a0 [ 1962.462341] Mem-Info: [ 1962.467665] CPU: 1 PID: 6420 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 1962.469361] active_anon:14093 inactive_anon:42507 isolated_anon:0 [ 1962.469361] active_file:27 inactive_file:7 isolated_file:0 [ 1962.469361] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1962.469361] slab_reclaimable:13358 slab_unreclaimable:114208 [ 1962.469361] mapped:52213 shmem:43795 pagetables:692 bounce:0 [ 1962.469361] free:13901 free_pcp:88 free_cma:0 [ 1962.469868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1962.474003] Node 0 active_anon:55640kB inactive_anon:117328kB active_file:104kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:164120kB dirty:0kB writeback:0kB shmem:122144kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1962.477078] Call Trace: [ 1962.477096] dump_stack+0x1b2/0x281 [ 1962.477108] warn_alloc.cold+0x96/0x1cc [ 1962.477120] ? zone_watermark_ok_safe+0x220/0x220 [ 1962.481181] Node 1 active_anon:732kB inactive_anon:52700kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44732kB dirty:0kB writeback:0kB shmem:53036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1962.485229] __vmalloc_area_node+0x48a/0x680 [ 1962.489376] Node 0 [ 1962.493324] ? __vmalloc_node_range+0x150/0x150 [ 1962.496948] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1962.500360] ? __get_vm_area_node+0x27d/0x340 [ 1962.503527] lowmem_reserve[]: [ 1962.508964] __vmalloc_node_range+0xbe/0x150 [ 1962.508980] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1962.511377] 0 [ 1962.519155] vmalloc_user+0x47/0xa0 [ 1962.519165] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1962.519172] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1962.519188] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1962.552236] 2717 [ 1962.561564] __vb2_queue_alloc+0x47a/0xd90 [ 1962.561584] vb2_core_create_bufs+0x279/0x5a0 [ 1962.589522] 2718 [ 1962.592078] ? __vb2_queue_free+0x7a0/0x7a0 [ 1962.595690] 2718 [ 1962.599641] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1962.604448] 2718 [ 1962.631340] ? trace_hardirqs_on+0x10/0x10 [ 1962.631351] vb2_create_bufs+0x2e1/0x5b0 [ 1962.631363] ? vb2_thread_start+0x310/0x310 [ 1962.637990] v4l_create_bufs+0xa4/0x150 [ 1962.642627] Node 0 [ 1962.668131] __video_do_ioctl+0x65b/0x6a0 [ 1962.668146] ? video_ioctl2+0x30/0x30 [ 1962.668156] ? __might_fault+0x177/0x1b0 [ 1962.672636] DMA32 free:17864kB min:36200kB low:45248kB high:54296kB active_anon:55640kB inactive_anon:117328kB active_file:4kB inactive_file:268kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7104kB pagetables:2432kB bounce:0kB free_pcp:232kB local_pcp:112kB free_cma:0kB [ 1962.675719] ? video_ioctl2+0x30/0x30 [ 1962.675729] video_usercopy+0xfd/0xe70 [ 1962.675743] ? v4l_g_ctrl+0x390/0x390 [ 1962.680227] lowmem_reserve[]: [ 1962.685592] ? do_raw_spin_unlock+0x164/0x220 [ 1962.685604] ? trace_hardirqs_on+0x10/0x10 [ 1962.685616] ? futex_exit_release+0x220/0x220 [ 1962.687651] 0 [ 1962.691261] ? wait_for_completion_io+0x10/0x10 [ 1962.695912] 0 [ 1962.701265] v4l2_ioctl+0x1bb/0x2f0 [ 1962.705395] 0 [ 1962.707431] ? v4l2_open+0x2f0/0x2f0 [ 1962.711638] 0 [ 1962.716115] do_vfs_ioctl+0x75a/0xff0 [ 1962.716127] ? ioctl_preallocate+0x1a0/0x1a0 [ 1962.716136] ? lock_downgrade+0x740/0x740 [ 1962.718172] 0 [ 1962.722480] ? __fget+0x225/0x360 [ 1962.729888] ? do_vfs_ioctl+0xff0/0xff0 [ 1962.729898] ? security_file_ioctl+0x83/0xb0 [ 1962.729908] SyS_ioctl+0x7f/0xb0 [ 1962.731953] Node 0 [ 1962.736190] ? do_vfs_ioctl+0xff0/0xff0 [ 1962.736201] do_syscall_64+0x1d5/0x640 [ 1962.736217] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1962.740256] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1962.744737] RIP: 0033:0x466459 [ 1962.748699] lowmem_reserve[]: [ 1962.750902] RSP: 002b:00007fa06d0f8188 EFLAGS: 00000246 [ 1962.755023] 0 [ 1962.758807] ORIG_RAX: 0000000000000010 [ 1962.758813] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1962.758818] RDX: 0000000020001880 RSI: 00000000c100565c RDI: 0000000000000003 [ 1962.758823] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1962.758830] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1962.762888] 0 [ 1962.791252] R13: 00007ffd4754c06f R14: 00007fa06d0f8300 R15: 0000000000022000 [ 1962.795898] Mem-Info: [ 1962.811739] 0 [ 1962.818697] active_anon:14093 inactive_anon:42507 isolated_anon:0 [ 1962.818697] active_file:30 inactive_file:4 isolated_file:0 [ 1962.818697] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1962.818697] slab_reclaimable:13358 slab_unreclaimable:114208 [ 1962.818697] mapped:52213 shmem:43795 pagetables:692 bounce:0 [ 1962.818697] free:13901 free_pcp:88 free_cma:0 [ 1962.822961] 0 [ 1962.825750] Node 0 active_anon:55640kB inactive_anon:117328kB active_file:116kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:164120kB dirty:0kB writeback:0kB shmem:122144kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1962.831066] 0 [ 1962.831113] Node 1 active_anon:732kB inactive_anon:52700kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44732kB dirty:0kB writeback:0kB shmem:53036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1962.833004] Node 1 [ 1962.840323] Node 0 [ 1962.845484] Normal free:26764kB min:53696kB low:67120kB high:80544kB active_anon:732kB inactive_anon:52700kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:332kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1962.847129] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1962.851169] lowmem_reserve[]: [ 1962.852963] lowmem_reserve[]: [ 1962.861218] 0 [ 1962.868781] 0 [ 1962.870440] 0 [ 1962.874409] 2717 2718 [ 1962.883395] 0 [ 1962.884914] 2718 [ 1962.915119] 0 [ 1962.921034] 2718 [ 1962.922541] 0 [ 1962.950235] Node 0 [ 1962.957106] Node 0 [ 1962.961672] DMA32 free:17368kB min:36200kB low:45248kB high:54296kB active_anon:55572kB inactive_anon:117328kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7104kB pagetables:2432kB bounce:0kB free_pcp:232kB local_pcp:120kB free_cma:0kB [ 1962.965491] DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10976kB [ 1962.965548] Node 0 DMA32: 568*4kB (UME) 693*8kB (UME) 235*16kB (MEH) 37*32kB (MEH) 8*64kB (MH) 6*128kB (UMH) 5*256kB (MH) 4*512kB (UMH) 0*1024kB 0*2048kB 0*4096kB = 17368kB [ 1962.965603] Node 0 Normal: 0*4kB [ 1962.973053] lowmem_reserve[]: [ 1963.006838] 0*8kB [ 1963.041568] 0 [ 1963.066105] 0*16kB [ 1963.074965] 0 [ 1963.098338] 0*32kB [ 1963.127442] 0 [ 1963.132582] 0*64kB [ 1963.134755] 0 [ 1963.137747] 0*128kB [ 1963.144512] 0 [ 1963.145017] 0*256kB [ 1963.181953] 0*512kB [ 1963.198548] Node 0 [ 1963.210588] 0*1024kB [ 1963.217699] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1963.217956] 0*2048kB [ 1963.220113] lowmem_reserve[]: [ 1963.221896] 0*4096kB [ 1963.224107] 0 0 [ 1963.233899] = 0kB [ 1963.234055] 0 [ 1963.236444] Node 1 Normal: 222*4kB [ 1963.242449] 0 [ 1963.243396] (UME) [ 1963.271806] 0 [ 1963.278678] 163*8kB [ 1963.282211] (UME) [ 1963.289278] Node 1 [ 1963.293186] 132*16kB [ 1963.293917] Normal free:26768kB min:53696kB low:67120kB high:80544kB active_anon:728kB inactive_anon:52700kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:332kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1963.296060] (UME) 66*32kB (UME) 28*64kB (M) 13*128kB (UM) 12*256kB (M) 7*512kB [ 1963.298305] lowmem_reserve[]: [ 1963.300717] (ME) [ 1963.332585] 0 0 0 0 0 [ 1963.343285] 4*1024kB [ 1963.344200] Node 0 [ 1963.344202] (UME) 1*2048kB (M) 1*4096kB (U) = 26768kB [ 1963.350082] DMA: [ 1963.354050] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1963.354053] 0*4kB 0*8kB [ 1963.362916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1963.364974] 0*16kB [ 1963.367674] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1963.367679] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1963.367683] 43823 total pagecache pages [ 1963.367693] 0 pages in swap cache [ 1963.367697] Swap cache stats: add 0, delete 0, find 0/0 [ 1963.367700] Free swap = 0kB [ 1963.367703] Total swap = 0kB [ 1963.367712] 2097051 pages RAM [ 1963.379749] 1*32kB [ 1963.394843] 0 pages HighMem/MovableOnly [ 1963.399466] (U) [ 1963.400042] 363841 pages reserved [ 1963.403494] 1*64kB [ 1963.415713] 0 pages cma reserved [ 1963.421463] (U) [ 1963.424218] Out of memory (oom_kill_allocating_task): Kill process 7967 (syz-fuzzer) score 0 or sacrifice child [ 1963.426230] 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10976kB [ 1963.426266] Node 0 DMA32: 568*4kB (UME) 693*8kB (UME) 235*16kB (MEH) 37*32kB (MEH) 8*64kB (MH) 6*128kB (UMH) 5*256kB (MH) 4*512kB [ 1963.436770] Killed process 5950 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1963.440979] (UMH) [ 1963.470039] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1963.484891] 0*1024kB 0*2048kB 0*4096kB = 17368kB [ 1963.499168] (null), order=0, oom_score_adj=0 [ 1963.499180] systemd cpuset=/ mems_allowed=0-1 [ 1963.499199] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.227-syzkaller #0 [ 1963.499203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1963.499206] Call Trace: [ 1963.499220] dump_stack+0x1b2/0x281 [ 1963.499232] dump_header+0x178/0x82f [ 1963.507109] Node 0 [ 1963.508191] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1963.515102] Normal: [ 1963.524440] ? ___ratelimit+0x2cd/0x530 [ 1963.524450] oom_kill_process.cold+0x10/0xb18 [ 1963.524461] ? lock_downgrade+0x740/0x740 [ 1963.524474] out_of_memory+0x2dc/0x1190 [ 1963.524487] ? oom_killer_disable+0x1c0/0x1c0 [ 1963.529107] 0*4kB [ 1963.530680] ? mutex_trylock+0x152/0x1a0 [ 1963.534368] 0*8kB [ 1963.536593] __alloc_pages_nodemask+0x23e1/0x2720 [ 1963.536612] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1963.536635] alloc_pages_current+0x155/0x260 [ 1963.541713] 0*16kB [ 1963.544040] filemap_fault+0xea3/0x1980 [ 1963.551524] 0*32kB [ 1963.552475] ext4_filemap_fault+0x84/0xb0 [ 1963.556634] 0*64kB [ 1963.560553] __do_fault+0xfa/0x380 [ 1963.565043] 0*128kB [ 1963.567186] __handle_mm_fault+0x2497/0x4620 [ 1963.567196] ? ep_poll+0x1ab/0xa50 [ 1963.567203] ? vm_insert_page+0x7c0/0x7c0 [ 1963.567221] handle_mm_fault+0x391/0x860 [ 1963.567233] __do_page_fault+0x549/0xad0 [ 1963.567244] ? spurious_fault+0x640/0x640 [ 1963.567253] ? do_page_fault+0x60/0x500 [ 1963.574795] 0*256kB [ 1963.578256] ? page_fault+0x2f/0x50 [ 1963.578264] page_fault+0x45/0x50 [ 1963.578272] RIP: 0001:0x1 [ 1963.578276] RSP: c95e9f50:00007ffcfe8e63c0 EFLAGS: 7ffcfe8e6100 [ 1963.654373] 0*512kB [ 1963.658123] Mem-Info: [ 1963.660493] 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1963.673665] Node 1 Normal: 235*4kB (UME) 168*8kB (UME) 132*16kB (UME) 68*32kB (UME) 28*64kB (M) 13*128kB (UM) 12*256kB (M) 7*512kB (ME) 4*1024kB (UME) 1*2048kB (M) 1*4096kB (U) = 26924kB [ 1963.680468] active_anon:14050 inactive_anon:42507 isolated_anon:0 [ 1963.680468] active_file:14 inactive_file:14 isolated_file:0 [ 1963.680468] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1963.680468] slab_reclaimable:13358 slab_unreclaimable:114208 [ 1963.680468] mapped:43550 shmem:43795 pagetables:655 bounce:0 [ 1963.680468] free:16603 free_pcp:405 free_cma:0 [ 1963.694073] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1963.733725] Node 0 active_anon:55472kB inactive_anon:117328kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153468kB dirty:0kB writeback:0kB shmem:122144kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1963.736497] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1963.770752] Node 1 active_anon:728kB inactive_anon:52700kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:20732kB dirty:0kB writeback:0kB shmem:53036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1963.779367] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1963.803350] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1963.817340] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1963.839033] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1963.849631] 43823 total pagecache pages [ 1963.853621] 0 pages in swap cache [ 1963.859503] Swap cache stats: add 0, delete 0, find 0/0 [ 1963.864955] Free swap = 0kB [ 1963.866252] Node 0 DMA32 free:20344kB min:36200kB low:45248kB high:54296kB active_anon:55420kB inactive_anon:117328kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7104kB pagetables:2312kB bounce:0kB free_pcp:780kB local_pcp:648kB free_cma:0kB [ 1963.877639] Total swap = 0kB [ 1963.912186] lowmem_reserve[]: 0 0 0 0 0 [ 1963.922163] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1963.933268] 2097051 pages RAM [ 1963.964215] lowmem_reserve[]: 0 0 0 0 0 [ 1963.991161] Node 1 Normal free:44032kB min:53696kB low:67120kB high:80544kB active_anon:728kB inactive_anon:52700kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:272kB bounce:0kB free_pcp:844kB local_pcp:724kB free_cma:0kB [ 1964.003994] 0 pages HighMem/MovableOnly [ 1964.039919] lowmem_reserve[]: 0 0 0 0 0 [ 1964.044109] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10976kB [ 1964.058856] 363841 pages reserved [ 1964.062356] 0 pages cma reserved [ 1964.073659] Node 0 DMA32: 721*4kB (UME) 1114*8kB (UME) 273*16kB (UMEH) 51*32kB (UMEH) 39*64kB (UMH) 18*128kB (UMH) 11*256kB (UMH) 5*512kB (UMH) 0*1024kB 0*2048kB 0*4096kB = 27972kB [ 1964.101941] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1964.124459] Node 1 Normal: 241*4kB (UME) 201*8kB (UME) 175*16kB (UME) 110*32kB (UME) 66*64kB (UM) 78*128kB (UM) 20*256kB (UM) 11*512kB (UME) 6*1024kB (UME) 3*2048kB (UM) 1*4096kB (U) = 50236kB [ 1964.153593] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1964.164447] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1964.189656] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1964.209781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1964.223936] 43823 total pagecache pages [ 1964.233949] 0 pages in swap cache [ 1964.242855] Swap cache stats: add 0, delete 0, find 0/0 [ 1964.254272] Free swap = 0kB [ 1964.262783] Total swap = 0kB [ 1964.281053] 2097051 pages RAM [ 1964.284174] 0 pages HighMem/MovableOnly [ 1964.309339] 363841 pages reserved [ 1964.312835] 0 pages cma reserved [ 1964.331506] Out of memory: Kill process 7966 (syz-fuzzer) score 5 or sacrifice child [ 1964.354655] Killed process 5948 (syz-executor.1) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1964.419555] oom_reaper: reaped process 5948 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1964.434184] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1964.472704] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1964.487388] CPU: 0 PID: 7969 Comm: syz-fuzzer Not tainted 4.14.227-syzkaller #0 [ 1964.494893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1964.504275] Call Trace: [ 1964.506871] dump_stack+0x1b2/0x281 [ 1964.510502] dump_header+0x178/0x82f [ 1964.514216] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1964.519316] ? ___ratelimit+0x2cd/0x530 [ 1964.523302] oom_kill_process.cold+0x10/0xb18 [ 1964.527814] out_of_memory+0xe3e/0x1190 [ 1964.531824] ? oom_killer_disable+0x1c0/0x1c0 [ 1964.536356] ? mutex_trylock+0x152/0x1a0 [ 1964.540422] __alloc_pages_nodemask+0x23e1/0x2720 [ 1964.545282] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1964.550144] alloc_pages_current+0x155/0x260 [ 1964.554555] filemap_fault+0xea3/0x1980 [ 1964.558543] ext4_filemap_fault+0x84/0xb0 [ 1964.562688] __do_fault+0xfa/0x380 [ 1964.566231] __handle_mm_fault+0x2497/0x4620 [ 1964.570644] ? vm_insert_page+0x7c0/0x7c0 [ 1964.574812] handle_mm_fault+0x391/0x860 [ 1964.578880] __do_page_fault+0x549/0xad0 [ 1964.582945] ? spurious_fault+0x640/0x640 [ 1964.587091] ? do_page_fault+0x60/0x500 [ 1964.591073] ? page_fault+0x2f/0x50 [ 1964.594697] page_fault+0x45/0x50 [ 1964.598148] RIP: 0f00:0xc00087a180 [ 1964.601675] RSP: 2e800:000000c000039de0 EFLAGS: 00000003 [ 1964.621502] Mem-Info: [ 1964.650788] active_anon:14037 inactive_anon:42507 isolated_anon:0 [ 1964.650788] active_file:27 inactive_file:0 isolated_file:0 [ 1964.650788] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1964.650788] slab_reclaimable:13358 slab_unreclaimable:114204 [ 1964.650788] mapped:34846 shmem:43795 pagetables:610 bounce:0 [ 1964.650788] free:22365 free_pcp:401 free_cma:0 [ 1964.701567] Node 0 active_anon:55420kB inactive_anon:117328kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129088kB dirty:0kB writeback:0kB shmem:122144kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1964.750389] Node 1 active_anon:728kB inactive_anon:52700kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10296kB dirty:0kB writeback:0kB shmem:53036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1964.793894] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1964.840997] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1964.863320] Node 0 DMA32 free:28172kB min:36200kB low:45248kB high:54296kB active_anon:55372kB inactive_anon:117328kB active_file:112kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7040kB pagetables:2312kB bounce:0kB free_pcp:800kB local_pcp:620kB free_cma:0kB [ 1964.911739] lowmem_reserve[]: 0 0 0 0 0 [ 1964.927711] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1964.954508] lowmem_reserve[]: 0 0 0 0 0 [ 1964.963357] Node 1 Normal free:82260kB min:53696kB low:67120kB high:80544kB active_anon:724kB inactive_anon:52700kB active_file:4kB inactive_file:904kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:160kB bounce:0kB free_pcp:1484kB local_pcp:720kB free_cma:0kB [ 1964.998726] lowmem_reserve[]: 0 0 0 0 0 [ 1965.003332] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10976kB [ 1965.021464] Node 0 DMA32: 711*4kB (UME) 1110*8kB (UME) 273*16kB (UMEH) 50*32kB (UMEH) 41*64kB (UMH) 20*128kB (UMH) 11*256kB (UMH) 5*512kB (UMH) 0*1024kB 0*2048kB 0*4096kB = 28252kB [ 1965.046944] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1965.065619] Node 1 Normal: 24*4kB (UME) 43*8kB (UME) 50*16kB (UME) 106*32kB (UME) 69*64kB (UM) 80*128kB (UM) 24*256kB (UM) 14*512kB (UME) 10*1024kB (UME) 63*2048kB (UM) 19*4096kB (U) = 249688kB [ 1965.088125] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1965.097279] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1965.111231] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1965.121035] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1965.140084] 45821 total pagecache pages [ 1965.152794] 0 pages in swap cache [ 1965.157024] Swap cache stats: add 0, delete 0, find 0/0 [ 1965.162514] Free swap = 0kB [ 1965.168752] Total swap = 0kB [ 1965.171941] 2097051 pages RAM [ 1965.175903] 0 pages HighMem/MovableOnly [ 1965.180010] 363841 pages reserved [ 1965.183753] 0 pages cma reserved [ 1965.203625] Out of memory (oom_kill_allocating_task): Kill process 7969 (syz-fuzzer) score 0 or sacrifice child [ 1965.220123] Killed process 7983 (syz-executor.4) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1965.239346] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1965.263721] oom_reaper: reaped process 7983 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1965.293827] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1965.324151] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1965.338259] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1965.356400] systemd[1]: Stopped Journal Service. [ 1965.376252] systemd[1]: Starting Journal Service... [ 1965.401520] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1965.515809] systemd-journald[6463]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1965.550752] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1965.619320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1965.634785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1965.655452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1965.662190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1965.686474] device bridge_slave_1 left promiscuous mode [ 1965.704878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1965.712333] device bridge_slave_0 left promiscuous mode [ 1965.717936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1965.738031] device veth1_macvtap left promiscuous mode [ 1965.743360] device veth0_macvtap left promiscuous mode [ 1965.768154] device veth1_vlan left promiscuous mode [ 1965.773240] device veth0_vlan left promiscuous mode [ 1965.988147] systemd[1]: Started Journal Service. [ 1966.000163] device hsr_slave_1 left promiscuous mode [ 1966.028961] device hsr_slave_0 left promiscuous mode [ 1966.053402] team0 (unregistering): Port device team_slave_1 removed [ 1966.081250] team0 (unregistering): Port device team_slave_0 removed [ 1966.096042] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1966.111688] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1966.188122] bond0 (unregistering): Released all slaves [ 1967.606572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1967.613332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1967.624994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1967.631713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1967.643207] device bridge_slave_1 left promiscuous mode [ 1967.649724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1967.660813] device bridge_slave_0 left promiscuous mode [ 1967.667134] bridge0: port 1(bridge_slave_0) entered disabled state [ 1967.681055] device veth1_macvtap left promiscuous mode [ 1967.686501] device veth0_macvtap left promiscuous mode [ 1967.691824] device veth1_vlan left promiscuous mode [ 1967.701317] device veth0_vlan left promiscuous mode [ 1967.812199] device hsr_slave_1 left promiscuous mode [ 1967.823619] device hsr_slave_0 left promiscuous mode [ 1967.846803] team0 (unregistering): Port device team_slave_1 removed [ 1967.861311] team0 (unregistering): Port device team_slave_0 removed [ 1967.872153] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1967.890117] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1967.930094] bond0 (unregistering): Released all slaves 05:08:43 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:08:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:08:43 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @empty}, &(0x7f0000000300)=0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x100000, 0x8, {}, {0x5, 0x13b30831199b05c9, 0x7, 0x8, 0x0, 0x5, "4c16f693"}, 0x3, 0x2, @fd=r1, 0x8c, 0x0, r2}) r3 = socket$inet(0x2, 0xa, 0x80000000) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x4000}) 05:08:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x2, 0x100, 0xffffffff, 0x4000}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:08:43 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x38415261}}) 05:08:43 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x2, @sdr={0x20343059}}}) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x10000, 0x3, 0x4, 0x100000, 0x3, {r2, r3/1000+60000}, {0x4, 0x1, 0x7, 0x3, 0x3, 0x1, "1e8b32e1"}, 0x800, 0x4, @userptr=0x9e, 0x8, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0xf6, 0x4, 0x4, 0xe000, 0x81, {}, {0x1, 0x0, 0x1, 0x0, 0x2, 0x3f, "55c8ca51"}, 0x8, 0x4, @offset=0xffff, 0x8, 0x0, r4}) 05:08:43 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00', r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000004c0)={0x53, 0xffffffffffffffff, 0x1000, 0x0, @buffer={0x0, 0xa2, &(0x7f00000002c0)=""/162}, &(0x7f0000000a80)="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", &(0x7f0000000380)=""/247, 0x1, 0x10, 0x0, &(0x7f0000000480)}) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x3c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004081}, 0x20000000) 05:08:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)={0x1, 0x3, 0x4, 0x2000, 0x800, {r1, r2/1000+60000}, {0x5, 0x0, 0x2, 0x2, 0x2, 0x81, "3ac8fa64"}, 0x4cd2, 0x3, @fd=0xffffffffffffffff, 0x6}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000000c0)={0x0, 0x8000, 0x3, {0x0, @pix={0x7, 0xc4, 0x32314d56, 0x6, 0xf, 0x400, 0xb, 0x7, 0x1, 0x7, 0x0, 0x4}}, 0x1ff}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)={0x80000001, 0x4, 0x4, 0x10000, 0x0, {}, {0x1, 0x2, 0x5, 0x3f, 0x7, 0x6, "fdf63ac4"}, 0x3ff, 0x2, @fd=r3, 0x1}) 05:08:43 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000340)={0x1000, 0x2, 0x4, 0x400, 0x15, {0x77359400}, {0x3, 0x1, 0x6a, 0x0, 0x4, 0x3, "75b2976d"}, 0x5, 0x7, @fd=r1, 0x3, 0x0, r1}) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xa48) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0x1, @vbi={0x1, 0x9, 0x4, 0x47504a50, [0x7, 0x7], [0x6, 0x9], 0x1}}) r3 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0xa33b9780cbcdf695, [{}, {}, {0x2000000, 0x3}, {}, {0x200000}]}}) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]}) [ 1969.617131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1969.635932] batman_adv: batadv0: Removing interface: batadv_slave_0 05:08:43 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247, 0x0, 0x0, [{}, {}, {0x0, 0x1}, {}, {0xfffffff4}]}}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x1000, 0x0, 0x4, 0x10000, 0x3, {r1, r2/1000+60000}, {0x3, 0x2, 0x1, 0x98, 0x6, 0x40, "e55333ad"}, 0x7fffffff, 0x4, @fd, 0x4}) [ 1969.679569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1969.722761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1969.769606] device bridge_slave_1 left promiscuous mode [ 1969.788986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1969.808072] device bridge_slave_0 left promiscuous mode [ 1969.821811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1969.844732] device veth1_macvtap left promiscuous mode [ 1969.860568] device veth0_macvtap left promiscuous mode [ 1969.871904] device veth1_vlan left promiscuous mode [ 1969.886621] device veth0_vlan left promiscuous mode [ 1970.030973] device hsr_slave_1 left promiscuous mode [ 1970.045660] device hsr_slave_0 left promiscuous mode [ 1970.091576] team0 (unregistering): Port device team_slave_1 removed [ 1970.117825] team0 (unregistering): Port device team_slave_0 removed [ 1970.131576] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1970.144086] bond0 (unregistering): Releasing backup interface bond_slave_0 05:08:44 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000000)={@local, @broadcast, r2}, 0xc) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000000)=r2) 05:08:44 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xfffffffffffffff9, 0x400) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) [ 1970.190156] bond0 (unregistering): Released all slaves 05:08:44 executing program 3: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x181240, 0x0) [ 1971.969168] IPVS: ftp: loaded support on port[0] = 21 [ 1972.076401] IPVS: ftp: loaded support on port[0] = 21 [ 1972.288376] chnl_net:caif_netlink_parms(): no params data found [ 1972.309885] IPVS: ftp: loaded support on port[0] = 21 [ 1972.520068] chnl_net:caif_netlink_parms(): no params data found [ 1972.676382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1972.682803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1972.692506] device bridge_slave_0 entered promiscuous mode [ 1972.709320] chnl_net:caif_netlink_parms(): no params data found [ 1972.720135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1972.728389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1972.736954] device bridge_slave_1 entered promiscuous mode [ 1972.807570] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1972.816955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1972.825027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1972.834072] device bridge_slave_0 entered promiscuous mode [ 1972.842006] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1972.861274] bridge0: port 2(bridge_slave_1) entered blocking state [ 1972.869954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1972.880319] device bridge_slave_1 entered promiscuous mode [ 1972.941264] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1972.954747] team0: Port device team_slave_0 added [ 1972.961269] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1972.980719] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1972.989665] team0: Port device team_slave_1 added [ 1972.997485] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1973.037910] bridge0: port 1(bridge_slave_0) entered blocking state [ 1973.047636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1973.057166] device bridge_slave_0 entered promiscuous mode [ 1973.091546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1973.099732] bridge0: port 2(bridge_slave_1) entered disabled state [ 1973.111916] device bridge_slave_1 entered promiscuous mode [ 1973.120493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1973.132131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1973.164999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1973.178282] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1973.189873] team0: Port device team_slave_0 added [ 1973.211221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1973.222500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1973.253792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1973.267510] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1973.277691] team0: Port device team_slave_1 added [ 1973.301506] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1973.326785] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1973.336797] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1973.366089] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1973.376380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1973.382751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1973.409942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1973.450593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1973.457323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1973.485437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1973.501028] device hsr_slave_0 entered promiscuous mode [ 1973.509409] device hsr_slave_1 entered promiscuous mode [ 1973.516817] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1973.525348] team0: Port device team_slave_0 added [ 1973.530878] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1973.539915] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1973.548426] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1973.556654] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1973.565118] team0: Port device team_slave_1 added [ 1973.570598] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1973.626765] device hsr_slave_0 entered promiscuous mode [ 1973.636275] device hsr_slave_1 entered promiscuous mode [ 1973.643840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1973.650306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1973.677807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1973.698012] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1973.706623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1973.715133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1973.741627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1973.762343] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1973.782947] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1973.819263] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1973.908265] device hsr_slave_0 entered promiscuous mode [ 1973.915055] device hsr_slave_1 entered promiscuous mode [ 1973.951394] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1973.978729] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1974.015347] Bluetooth: hci0 command 0x0409 tx timeout [ 1974.031350] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1974.092867] Bluetooth: hci3 command 0x0409 tx timeout [ 1974.098396] Bluetooth: hci5 command 0x0409 tx timeout [ 1974.178679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1974.193429] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1974.210518] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1974.251048] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1974.269035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1974.276982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1974.297775] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1974.310955] 8021q: adding VLAN 0 to HW filter on device team0 [ 1974.349259] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1974.360062] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1974.373524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1974.382075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1974.394217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1974.400612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1974.411977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1974.425412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1974.434902] bridge0: port 2(bridge_slave_1) entered blocking state [ 1974.441435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1974.459255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1974.467965] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1974.480407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1974.489118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1974.508340] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1974.521197] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1974.536693] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1974.543748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1974.554355] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1974.568399] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1974.575489] 8021q: adding VLAN 0 to HW filter on device team0 [ 1974.589924] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1974.606904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1974.614511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1974.621916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1974.636065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1974.648195] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1974.666395] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1974.678267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1974.688359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1974.700581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1974.711600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1974.718075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1974.730440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1974.739837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1974.768503] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1974.778817] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1974.791270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1974.800293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1974.814142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1974.821956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1974.828545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1974.841652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1974.850862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1974.865517] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1974.887150] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1974.899220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1974.909420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1974.921987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1974.933993] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1974.949267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1974.967553] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1974.975312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1974.987045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1974.997459] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1975.010726] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1975.018658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1975.031035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1975.042291] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1975.053646] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1975.068533] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1975.077503] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1975.088866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1975.099804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1975.111331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1975.120407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1975.134393] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1975.146607] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1975.153676] 8021q: adding VLAN 0 to HW filter on device team0 [ 1975.161020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1975.175354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1975.187829] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1975.196833] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1975.207244] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1975.216386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1975.225382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1975.233916] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1975.240755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1975.249376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1975.258471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1975.266961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1975.273520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1975.283849] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1975.289936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1975.306454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1975.321699] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1975.333038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1975.348423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1975.367780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1975.384688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1975.391496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1975.410540] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1975.424156] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1975.438966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1975.459324] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1975.478785] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1975.496840] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1975.504983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1975.511973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1975.535952] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1975.548847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1975.568196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1975.579879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1975.590752] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1975.609374] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1975.617397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1975.627011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1975.644846] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1975.668440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1975.697239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1975.717477] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1975.724582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1975.744185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1975.866624] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1975.883260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1975.952715] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1975.977661] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1975.992793] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1975.999568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1976.092567] Bluetooth: hci0 command 0x041b tx timeout [ 1976.117298] oom_reaper: reaped process 6481 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1976.139387] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1976.172370] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1976.177541] CPU: 1 PID: 6510 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 1976.182197] Bluetooth: hci5 command 0x041b tx timeout [ 1976.185608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1976.185615] Call Trace: [ 1976.202953] dump_stack+0x1b2/0x281 [ 1976.206596] dump_header+0x178/0x82f [ 1976.210423] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1976.212240] Bluetooth: hci3 command 0x041b tx timeout [ 1976.215527] ? ___ratelimit+0x2cd/0x530 [ 1976.224839] oom_kill_process.cold+0x10/0xb18 [ 1976.229363] out_of_memory+0xe3e/0x1190 [ 1976.233472] ? oom_killer_disable+0x1c0/0x1c0 [ 1976.237977] ? mutex_trylock+0x152/0x1a0 [ 1976.242047] __alloc_pages_nodemask+0x23e1/0x2720 [ 1976.247105] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1976.252070] alloc_pages_current+0x155/0x260 [ 1976.256493] filemap_fault+0xea3/0x1980 [ 1976.260482] ext4_filemap_fault+0x84/0xb0 [ 1976.264635] __do_fault+0xfa/0x380 [ 1976.270877] __handle_mm_fault+0x2497/0x4620 [ 1976.275311] ? vm_insert_page+0x7c0/0x7c0 [ 1976.279460] ? task_work_run+0xfd/0x190 [ 1976.283445] handle_mm_fault+0x391/0x860 [ 1976.287538] __do_page_fault+0x549/0xad0 [ 1976.291888] ? spurious_fault+0x640/0x640 [ 1976.296167] ? do_page_fault+0x60/0x500 [ 1976.300269] ? page_fault+0x2f/0x50 [ 1976.303885] page_fault+0x45/0x50 [ 1976.307328] RIP: 0003:0x7ffd81691800 [ 1976.311538] RSP: 81691ac0:00007ffd81691ac0 EFLAGS: 7ffd816918f0 [ 1976.318289] syz-executor.0: [ 1976.319041] Mem-Info: [ 1976.326531] vmalloc: allocation failure, allocated 1576038400 of 2147487744 bytes [ 1976.328074] active_anon:14358 inactive_anon:44542 isolated_anon:0 [ 1976.328074] active_file:25 inactive_file:24 isolated_file:0 [ 1976.328074] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1976.328074] slab_reclaimable:13147 slab_unreclaimable:112448 [ 1976.328074] mapped:52616 shmem:45844 pagetables:732 bounce:0 [ 1976.328074] free:13844 free_pcp:68 free_cma:0 [ 1976.330558] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 1976.344221] Node 0 active_anon:56300kB inactive_anon:125432kB active_file:4kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200224kB dirty:0kB writeback:0kB shmem:130292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1976.380946] (null) [ 1976.411924] Node 1 active_anon:1132kB inactive_anon:52736kB active_file:96kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1976.416851] syz-executor.0 cpuset= [ 1976.443095] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1976.450761] / [ 1976.475849] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1976.482407] mems_allowed=0-1 [ 1976.482660] Node 0 DMA32 free:17684kB min:36200kB low:45248kB high:54296kB active_anon:56300kB inactive_anon:125432kB active_file:4kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7072kB pagetables:2764kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 1976.485785] CPU: 0 PID: 6481 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 1976.518012] lowmem_reserve[]: [ 1976.522599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1976.522603] Call Trace: [ 1976.522621] dump_stack+0x1b2/0x281 [ 1976.522633] warn_alloc.cold+0x96/0x1cc [ 1976.522645] ? zone_watermark_ok_safe+0x220/0x220 [ 1976.522667] __vmalloc_area_node+0x48a/0x680 [ 1976.522679] ? __vmalloc_node_range+0x150/0x150 [ 1976.522686] ? __get_vm_area_node+0x27d/0x340 [ 1976.522697] __vmalloc_node_range+0xbe/0x150 [ 1976.522710] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1976.522718] vmalloc_user+0x47/0xa0 [ 1976.522727] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1976.522735] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1976.522743] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1976.522753] __vb2_queue_alloc+0x47a/0xd90 [ 1976.522770] vb2_core_create_bufs+0x279/0x5a0 [ 1976.525883] 0 [ 1976.535343] ? __vb2_queue_free+0x7a0/0x7a0 [ 1976.535355] ? futex_wait+0x42f/0x5a0 [ 1976.535367] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1976.535376] ? trace_hardirqs_on+0x10/0x10 [ 1976.535385] vb2_create_bufs+0x2e1/0x5b0 [ 1976.535403] ? vb2_thread_start+0x310/0x310 [ 1976.535411] ? futex_wait+0x42f/0x5a0 [ 1976.535425] v4l_create_bufs+0xa4/0x150 [ 1976.535435] __video_do_ioctl+0x65b/0x6a0 [ 1976.535449] ? video_ioctl2+0x30/0x30 [ 1976.539924] 0 [ 1976.541737] ? __might_fault+0x177/0x1b0 [ 1976.545920] 0 [ 1976.550707] ? video_ioctl2+0x30/0x30 [ 1976.557124] 0 [ 1976.559992] video_usercopy+0xfd/0xe70 [ 1976.564759] 0 [ 1976.569288] ? v4l_g_ctrl+0x390/0x390 [ 1976.578406] ? lock_acquire+0x170/0x3f0 [ 1976.582761] Node 0 [ 1976.588085] ? lock_downgrade+0x740/0x740 [ 1976.594275] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1976.596602] ? trace_hardirqs_on+0x10/0x10 [ 1976.601261] lowmem_reserve[]: [ 1976.603061] ? futex_exit_release+0x220/0x220 [ 1976.603068] ? __fget+0x1fe/0x360 [ 1976.603082] v4l2_ioctl+0x1bb/0x2f0 [ 1976.603091] ? v4l2_open+0x2f0/0x2f0 [ 1976.603100] do_vfs_ioctl+0x75a/0xff0 [ 1976.603111] ? ioctl_preallocate+0x1a0/0x1a0 [ 1976.603121] ? lock_downgrade+0x740/0x740 [ 1976.607586] 0 [ 1976.611534] ? __fget+0x225/0x360 [ 1976.619257] 0 [ 1976.621846] ? do_vfs_ioctl+0xff0/0xff0 [ 1976.625945] 0 [ 1976.630391] ? security_file_ioctl+0x83/0xb0 [ 1976.636303] 0 [ 1976.638355] SyS_ioctl+0x7f/0xb0 [ 1976.642690] 0 [ 1976.646588] ? do_vfs_ioctl+0xff0/0xff0 [ 1976.653465] do_syscall_64+0x1d5/0x640 [ 1976.653480] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1976.653488] RIP: 0033:0x466459 [ 1976.653493] RSP: 002b:00007f09f29f8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1976.653500] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1976.653504] RDX: 0000000020001880 RSI: 00000000c100565c RDI: 0000000000000003 [ 1976.653508] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1976.653512] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1976.653517] R13: 00007ffd96b9697f R14: 00007f09f29f8300 R15: 0000000000022000 [ 1976.665005] Mem-Info: [ 1976.670052] Node 1 [ 1976.671396] active_anon:14358 inactive_anon:44542 isolated_anon:0 [ 1976.671396] active_file:25 inactive_file:24 isolated_file:0 [ 1976.671396] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1976.671396] slab_reclaimable:13147 slab_unreclaimable:112448 [ 1976.671396] mapped:52616 shmem:45844 pagetables:732 bounce:0 [ 1976.671396] free:13844 free_pcp:92 free_cma:0 [ 1976.671412] Node 0 active_anon:56300kB inactive_anon:125432kB active_file:4kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200224kB dirty:0kB writeback:0kB shmem:130292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1976.671424] Node 1 active_anon:1132kB inactive_anon:52736kB active_file:96kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1976.671429] Node 0 [ 1976.684346] Normal free:26740kB min:53696kB low:67120kB high:80544kB active_anon:1132kB inactive_anon:52736kB active_file:96kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:160kB bounce:0kB free_pcp:152kB local_pcp:0kB free_cma:0kB [ 1976.716032] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1976.725884] lowmem_reserve[]: [ 1976.734524] lowmem_reserve[]: [ 1976.737331] 0 [ 1976.739121] 0 [ 1976.746902] 0 [ 1976.758546] 2717 [ 1976.765548] 0 [ 1976.771888] 2718 [ 1976.773593] 0 [ 1976.779680] 2718 [ 1976.781741] 0 [ 1976.790443] 2718 [ 1976.798266] Node 0 [ 1976.808214] DMA: [ 1976.824709] Node 0 [ 1976.842927] 0*4kB [ 1976.878714] DMA32 free:17660kB min:36200kB low:45248kB high:54296kB active_anon:56300kB inactive_anon:125432kB active_file:40kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7072kB pagetables:2764kB bounce:0kB free_pcp:208kB local_pcp:120kB free_cma:0kB [ 1976.907540] 1*8kB [ 1976.931560] lowmem_reserve[]: [ 1976.981395] (U) [ 1976.999131] 0 [ 1977.013224] 0*16kB [ 1977.017476] 0 [ 1977.018025] 0*32kB [ 1977.020190] 0 0 [ 1977.039052] 1*64kB [ 1977.073342] 0 [ 1977.087066] (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10952kB [ 1977.100046] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1977.108362] Node 0 [ 1977.133795] lowmem_reserve[]: 0 0 0 0 0 [ 1977.140289] Node 1 Normal free:26876kB min:53696kB low:67120kB high:80544kB active_anon:1132kB inactive_anon:52736kB active_file:152kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:160kB bounce:0kB free_pcp:152kB local_pcp:152kB free_cma:0kB [ 1977.141441] DMA32: [ 1977.178244] lowmem_reserve[]: 0 0 0 0 0 [ 1977.184428] 649*4kB (UME) 695*8kB (UME) 212*16kB (UME) 35*32kB (UME) 12*64kB (UM) 11*128kB (UM) 5*256kB (UM) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 17660kB [ 1977.184769] Node 0 [ 1977.206344] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1977.211671] DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB [ 1977.221160] Node 1 [ 1977.222403] 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10952kB [ 1977.231472] Normal: 283*4kB (ME) 215*8kB (ME) 152*16kB (UME) 90*32kB (ME) 40*64kB (M) 6*128kB (M) 4*256kB (UM) 8*512kB (UME) 4*1024kB (UME) 1*2048kB (M) 1*4096kB (U) = 26852kB [ 1977.248418] Node 0 [ 1977.264955] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1977.266453] DMA32: [ 1977.267221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1977.280446] 649*4kB [ 1977.297620] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1977.298949] (UME) [ 1977.299994] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1977.311233] 695*8kB [ 1977.328827] 45874 total pagecache pages [ 1977.329846] (UME) [ 1977.331182] 0 pages in swap cache [ 1977.336563] 212*16kB [ 1977.337650] Swap cache stats: add 0, delete 0, find 0/0 [ 1977.341259] (UME) [ 1977.351306] Free swap = 0kB [ 1977.357453] 35*32kB [ 1977.358699] Total swap = 0kB [ 1977.358708] 2097051 pages RAM [ 1977.361552] (UME) [ 1977.378807] 0 pages HighMem/MovableOnly [ 1977.381293] 12*64kB (UM) 11*128kB (UM) 5*256kB (UM) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 17660kB [ 1977.390939] 363841 pages reserved [ 1977.400675] 0 pages cma reserved [ 1977.404090] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1977.404136] Node 1 Normal: 283*4kB (ME) 216*8kB (UME) 151*16kB (ME) 91*32kB (UME) 41*64kB (UM) 7*128kB (UM) 3*256kB (M) 8*512kB (UME) [ 1977.423683] Out of memory (oom_kill_allocating_task): Kill process 6510 (syz-executor.4) score 0 or sacrifice child [ 1977.424962] 4*1024kB [ 1977.441377] Killed process 6510 (syz-executor.4) total-vm:93120kB, anon-rss:72kB, file-rss:33860kB, shmem-rss:0kB [ 1977.455665] (UME) 1*2048kB (M) 1*4096kB (U) = 26812kB [ 1977.476311] oom_reaper: reaped process 6510 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1977.496570] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1977.509685] systemd-rfkill invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1977.509985] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1977.530403] systemd-rfkill cpuset=/ mems_allowed=0-1 [ 1977.537817] CPU: 0 PID: 6464 Comm: systemd-rfkill Not tainted 4.14.227-syzkaller #0 [ 1977.541507] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1977.545667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1977.545671] Call Trace: [ 1977.545686] dump_stack+0x1b2/0x281 [ 1977.545697] dump_header+0x178/0x82f [ 1977.545707] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1977.545715] ? ___ratelimit+0x2cd/0x530 [ 1977.545724] oom_kill_process.cold+0x10/0xb18 [ 1977.545740] out_of_memory+0xe3e/0x1190 [ 1977.545751] ? oom_killer_disable+0x1c0/0x1c0 [ 1977.545758] ? mutex_trylock+0x152/0x1a0 [ 1977.545768] __alloc_pages_nodemask+0x23e1/0x2720 [ 1977.545793] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1977.545817] alloc_pages_current+0x155/0x260 [ 1977.545826] filemap_fault+0xea3/0x1980 [ 1977.545845] ext4_filemap_fault+0x84/0xb0 [ 1977.545854] __do_fault+0xfa/0x380 [ 1977.545863] __handle_mm_fault+0x2497/0x4620 [ 1977.545872] ? vm_insert_page+0x7c0/0x7c0 [ 1977.545880] ? compat_poll_select_copy_remaining+0x2c0/0x2c0 [ 1977.545888] ? ktime_get_ts64+0x261/0x3a0 [ 1977.545904] handle_mm_fault+0x391/0x860 [ 1977.545916] __do_page_fault+0x549/0xad0 [ 1977.545928] ? spurious_fault+0x640/0x640 [ 1977.545937] ? do_page_fault+0x60/0x500 [ 1977.545945] ? page_fault+0x2f/0x50 [ 1977.545953] page_fault+0x45/0x50 [ 1977.545958] RIP: b0c540b0: (null) [ 1977.545962] RSP: b2eb9040:00007ffdb0c540b8 EFLAGS: 0000000b [ 1977.553059] Mem-Info: [ 1977.563044] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1977.572026] active_anon:14358 inactive_anon:44542 isolated_anon:0 [ 1977.572026] active_file:15 inactive_file:10 isolated_file:0 [ 1977.572026] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1977.572026] slab_reclaimable:13147 slab_unreclaimable:112534 [ 1977.572026] mapped:52616 shmem:45844 pagetables:732 bounce:0 [ 1977.572026] free:13865 free_pcp:84 free_cma:0 [ 1977.580453] 45874 total pagecache pages [ 1977.591550] Node 0 active_anon:56300kB inactive_anon:125432kB active_file:8kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200224kB dirty:0kB writeback:0kB shmem:130292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1977.603149] 0 pages in swap cache [ 1977.620852] Node 1 active_anon:1132kB inactive_anon:52736kB active_file:52kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1977.629551] Swap cache stats: add 0, delete 0, find 0/0 [ 1977.633532] Node 0 [ 1977.638529] Free swap = 0kB [ 1977.651458] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1977.661003] Total swap = 0kB [ 1977.664883] lowmem_reserve[]: [ 1977.677826] 2097051 pages RAM [ 1977.681819] 0 [ 1977.698628] 0 pages HighMem/MovableOnly [ 1977.735300] 2717 [ 1977.811519] 363841 pages reserved [ 1977.836694] 2718 2718 2718 [ 1977.867463] Node 0 DMA32 free:19416kB min:36200kB low:45248kB high:54296kB active_anon:56272kB inactive_anon:125432kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7072kB pagetables:2676kB bounce:0kB free_pcp:392kB local_pcp:20kB free_cma:0kB [ 1977.869475] 0 pages cma reserved [ 1977.906878] lowmem_reserve[]: 0 0 0 0 0 [ 1977.910909] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1977.932079] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1977.946685] lowmem_reserve[]: 0 0 0 0 0 [ 1977.951151] Node 1 Normal free:26812kB min:53696kB low:67120kB high:80544kB active_anon:1104kB inactive_anon:52736kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:160kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 1977.992439] lowmem_reserve[]: 0 0 0 0 0 [ 1977.996943] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10952kB [ 1978.011646] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1978.035354] Node 0 DMA32: 648*4kB (UME) 857*8kB (UME) 217*16kB (UME) 36*32kB (UME) 16*64kB (UM) 13*128kB (UM) 5*256kB (UM) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 19576kB [ 1978.059819] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1978.065068] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1978.091080] Node 1 Normal: 277*4kB (UME) 207*8kB (UME) 149*16kB (ME) 89*32kB (UME) 40*64kB (M) 9*128kB (UM) 3*256kB (M) 8*512kB (UME) 4*1024kB (UME) 1*2048kB (M) 1*4096kB (U) = 26812kB [ 1978.107242] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1978.121316] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1978.134456] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1978.157806] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1978.173653] Bluetooth: hci0 command 0x040f tx timeout [ 1978.189641] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1978.201964] 45874 total pagecache pages [ 1978.206141] 0 pages in swap cache [ 1978.209911] Swap cache stats: add 0, delete 0, find 0/0 [ 1978.228832] Free swap = 0kB [ 1978.249951] Total swap = 0kB [ 1978.253469] Bluetooth: hci5 command 0x040f tx timeout [ 1978.265607] 2097051 pages RAM [ 1978.268742] 0 pages HighMem/MovableOnly [ 1978.290118] 363841 pages reserved [ 1978.300258] 0 pages cma reserved [ 1978.321190] Out of memory (oom_kill_allocating_task): Kill process 6464 (systemd-rfkill) score 0 or sacrifice child [ 1978.349888] Killed process 6464 (systemd-rfkill) total-vm:37800kB, anon-rss:372kB, file-rss:0kB, shmem-rss:0kB [ 1978.370430] kworker/u4:0 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1978.418747] kworker/u4:0 cpuset=/ mems_allowed=0-1 [ 1978.429452] CPU: 0 PID: 5 Comm: kworker/u4:0 Not tainted 4.14.227-syzkaller #0 [ 1978.437178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1978.446637] Workqueue: events_unbound call_usermodehelper_exec_work [ 1978.453217] Call Trace: [ 1978.455929] dump_stack+0x1b2/0x281 [ 1978.459659] dump_header+0x178/0x82f [ 1978.463470] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1978.468581] ? ___ratelimit+0x2cd/0x530 [ 1978.472938] oom_kill_process.cold+0x10/0xb18 [ 1978.477599] ? lock_downgrade+0x740/0x740 [ 1978.481969] out_of_memory+0x2dc/0x1190 [ 1978.485954] ? oom_killer_disable+0x1c0/0x1c0 [ 1978.490538] ? mutex_trylock+0x152/0x1a0 [ 1978.494794] __alloc_pages_nodemask+0x23e1/0x2720 [ 1978.499662] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1978.504513] ? fs_reclaim_release+0xd0/0x110 [ 1978.511058] ? kmem_cache_alloc_node+0x38b/0x410 [ 1978.515826] copy_process.part.0+0x265/0x71c0 [ 1978.520336] ? __lock_acquire+0x5fc/0x3f20 [ 1978.525173] ? debug_object_activate+0x292/0x490 [ 1978.530075] ? static_obj+0x50/0x50 [ 1978.533707] ? lock_acquire+0x170/0x3f0 [ 1978.537843] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1978.543302] ? __cleanup_sighand+0x40/0x40 [ 1978.547545] ? mod_timer+0x4e7/0xf70 [ 1978.551388] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1978.556843] _do_fork+0x184/0xc80 [ 1978.560308] ? fork_idle+0x270/0x270 [ 1978.564039] ? lock_downgrade+0x740/0x740 [ 1978.569531] ? process_one_work+0x6c4/0x14a0 [ 1978.574046] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1978.579638] kernel_thread+0x2f/0x40 [ 1978.583363] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1978.588738] ? call_usermodehelper+0x80/0x80 [ 1978.593534] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1978.598998] process_one_work+0x793/0x14a0 [ 1978.603274] ? work_busy+0x320/0x320 [ 1978.606992] ? worker_thread+0x158/0xff0 [ 1978.611281] ? _raw_spin_unlock_irq+0x24/0x80 [ 1978.615784] worker_thread+0x5cc/0xff0 [ 1978.620035] ? rescuer_thread+0xc80/0xc80 [ 1978.624669] kthread+0x30d/0x420 [ 1978.628955] ? kthread_create_on_node+0xd0/0xd0 [ 1978.633634] ret_from_fork+0x24/0x30 [ 1978.659547] Mem-Info: [ 1978.672316] active_anon:14244 inactive_anon:44542 isolated_anon:0 [ 1978.672316] active_file:3 inactive_file:2 isolated_file:0 [ 1978.672316] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1978.672316] slab_reclaimable:13122 slab_unreclaimable:112105 [ 1978.672316] mapped:52616 shmem:45844 pagetables:710 bounce:0 [ 1978.672316] free:14423 free_pcp:87 free_cma:0 [ 1978.723645] Node 0 active_anon:55872kB inactive_anon:125432kB active_file:16kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200224kB dirty:0kB writeback:0kB shmem:130292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1978.765622] Node 1 active_anon:1104kB inactive_anon:52736kB active_file:64kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1978.809589] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1978.849439] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1978.854797] Node 0 DMA32 free:20152kB min:36200kB low:45248kB high:54296kB active_anon:55872kB inactive_anon:125432kB active_file:96kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7040kB pagetables:2676kB bounce:0kB free_pcp:224kB local_pcp:112kB free_cma:0kB [ 1978.885753] lowmem_reserve[]: 0 0 0 0 0 [ 1978.889857] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1978.918799] lowmem_reserve[]: 0 0 0 0 0 [ 1978.924163] Node 1 Normal free:26868kB min:53696kB low:67120kB high:80544kB active_anon:1064kB inactive_anon:52736kB active_file:44kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:160kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1978.953429] lowmem_reserve[]: 0 0 0 0 0 [ 1978.957448] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10952kB [ 1978.972365] Node 0 DMA32: 684*4kB (UME) 869*8kB (UME) 232*16kB (UME) 41*32kB (UME) 16*64kB (UM) 13*128kB (UM) 5*256kB (UM) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 20216kB [ 1978.988307] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1978.999197] Node 1 Normal: 275*4kB (UME) 207*8kB (UME) 151*16kB (UME) 90*32kB (UME) 40*64kB (M) 9*128kB (UM) 3*256kB (M) 8*512kB (UME) 4*1024kB (UME) 1*2048kB (M) 1*4096kB (U) = 26868kB [ 1979.016151] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1979.025293] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1979.034179] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1979.043603] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1979.052233] 45874 total pagecache pages [ 1979.056300] 0 pages in swap cache [ 1979.059756] Swap cache stats: add 0, delete 0, find 0/0 [ 1979.065475] Free swap = 0kB [ 1979.068585] Total swap = 0kB [ 1979.071662] 2097051 pages RAM [ 1979.074942] 0 pages HighMem/MovableOnly [ 1979.079064] 363841 pages reserved [ 1979.082837] 0 pages cma reserved [ 1979.086218] Out of memory: Kill process 7966 (syz-fuzzer) score 5 or sacrifice child [ 1979.095527] Killed process 6505 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1979.126254] oom_reaper: reaped process 6505 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1979.386212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1979.708111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1979.737458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1979.768169] device bridge_slave_1 left promiscuous mode [ 1979.774718] bridge0: port 2(bridge_slave_1) entered disabled state [ 1979.786661] device bridge_slave_0 left promiscuous mode [ 1979.792450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1979.896006] device hsr_slave_1 left promiscuous mode [ 1979.910141] device hsr_slave_0 left promiscuous mode [ 1979.928816] team0 (unregistering): Port device team_slave_1 removed [ 1979.939840] team0 (unregistering): Port device team_slave_0 removed [ 1979.955796] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1979.973992] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1980.016075] bond0 (unregistering): Released all slaves [ 1980.063963] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1980.074589] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1980.096020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1980.105897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1980.145154] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1980.156013] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1980.165341] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1980.179160] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1980.201741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1980.209655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1980.235446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1980.242603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1980.273310] device veth0_vlan entered promiscuous mode [ 1980.285024] device veth1_vlan entered promiscuous mode [ 1980.295534] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1980.318604] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1980.331213] Bluetooth: hci5 command 0x0419 tx timeout [ 1980.335932] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1980.354944] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1980.380942] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1980.417709] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1980.425017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1980.436136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1980.456588] device veth0_macvtap entered promiscuous mode [ 1980.475132] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1980.496825] device veth1_macvtap entered promiscuous mode [ 1980.503276] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1980.537093] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1980.556052] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1980.577259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1980.614515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1980.623724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1980.647233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1980.659769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1980.671171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1980.686994] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1980.694157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1980.701000] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1980.718438] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1980.728278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1980.762500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1980.792076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1980.821119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1980.830317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1980.851100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1980.860244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1980.901053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1980.913762] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1980.920667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1980.928904] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1980.937844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1981.743272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1981.754863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1981.763190] device bridge_slave_1 left promiscuous mode [ 1981.768828] bridge0: port 2(bridge_slave_1) entered disabled state [ 1981.779562] device bridge_slave_0 left promiscuous mode [ 1981.787620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1981.882808] device hsr_slave_1 left promiscuous mode [ 1981.895522] device hsr_slave_0 left promiscuous mode [ 1981.915326] team0 (unregistering): Port device team_slave_1 removed [ 1981.926941] team0 (unregistering): Port device team_slave_0 removed [ 1981.942287] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1981.956826] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1981.999769] bond0 (unregistering): Released all slaves [ 1982.963798] IPVS: ftp: loaded support on port[0] = 21 [ 1983.026116] IPVS: ftp: loaded support on port[0] = 21 [ 1983.203697] chnl_net:caif_netlink_parms(): no params data found [ 1983.358925] chnl_net:caif_netlink_parms(): no params data found [ 1983.422704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1983.429171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1983.436823] device bridge_slave_0 entered promiscuous mode [ 1983.448843] bridge0: port 2(bridge_slave_1) entered blocking state [ 1983.456172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1983.464702] device bridge_slave_1 entered promiscuous mode [ 1983.508359] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1983.544294] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1983.556484] bridge0: port 1(bridge_slave_0) entered blocking state [ 1983.564297] bridge0: port 1(bridge_slave_0) entered disabled state [ 1983.576720] device bridge_slave_0 entered promiscuous mode [ 1983.605845] bridge0: port 2(bridge_slave_1) entered blocking state [ 1983.616561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1983.625048] device bridge_slave_1 entered promiscuous mode [ 1983.636705] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1983.644339] team0: Port device team_slave_0 added [ 1983.670001] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1983.678426] team0: Port device team_slave_1 added [ 1983.689359] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1983.712450] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1983.745717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1983.752285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1983.781486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1983.805262] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1983.816033] team0: Port device team_slave_0 added [ 1983.822524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1983.828778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1983.862491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1983.873927] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1983.882709] team0: Port device team_slave_1 added [ 1983.887931] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1983.895711] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1983.927880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1983.934377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1983.960528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1983.972532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1983.978785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1984.004617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1984.019022] device hsr_slave_0 entered promiscuous mode [ 1984.024812] device hsr_slave_1 entered promiscuous mode [ 1984.030669] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1984.038013] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1984.045774] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1984.059578] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1984.076388] device hsr_slave_0 entered promiscuous mode [ 1984.082475] device hsr_slave_1 entered promiscuous mode [ 1984.095990] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1984.102646] Bluetooth: hci0 command 0x0409 tx timeout [ 1984.107856] Bluetooth: hci3 command 0x0409 tx timeout [ 1984.112832] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1984.248073] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1984.263245] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1984.309002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1984.318175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1984.328127] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1984.336715] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1984.346251] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1984.353360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1984.360241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1984.369908] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1984.380007] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1984.386521] 8021q: adding VLAN 0 to HW filter on device team0 [ 1984.394987] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1984.401357] 8021q: adding VLAN 0 to HW filter on device team0 [ 1984.407546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1984.414858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1984.424865] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1984.433699] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1984.440881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1984.450777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1984.459551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1984.466185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1984.473635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1984.481539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1984.489131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1984.495520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1984.503569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1984.510636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1984.519776] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1984.528398] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1984.538587] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1984.545980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1984.555659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1984.563380] bridge0: port 2(bridge_slave_1) entered blocking state [ 1984.569719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1984.576691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1984.585234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1984.592903] bridge0: port 2(bridge_slave_1) entered blocking state [ 1984.599244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1984.606244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1984.616356] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1984.625339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1984.635959] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1984.647933] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1984.656052] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1984.663084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1984.670949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1984.678776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1984.686808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1984.694987] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1984.705078] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1984.715025] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1984.723386] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1984.730337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1984.738814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1984.747220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1984.754881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1984.762653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1984.770376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1984.778552] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1984.788371] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1984.798615] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1984.806280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1984.814410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1984.822761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1984.830429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1984.840916] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1984.850107] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1984.858691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1984.866847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1984.876285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1984.886151] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1984.894886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1984.906039] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1984.912719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1984.920229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1984.928050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1984.942550] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1984.949881] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1984.958649] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1984.965765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1984.975872] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1984.987977] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1984.994447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1985.001727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1985.010825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1985.022479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1985.091031] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1985.102521] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1985.109562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1985.118766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1985.130937] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1985.145562] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1985.153066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1985.161003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1985.184065] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1985.191775] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1985.198513] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1985.208550] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1985.215853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1985.224387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1985.233178] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1985.240178] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1985.249697] device veth0_vlan entered promiscuous mode [ 1985.260890] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1985.268781] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1985.276246] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1985.288632] device veth1_vlan entered promiscuous mode [ 1985.296354] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1985.309941] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1985.319018] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1985.329847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1985.338063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1985.346206] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1985.353382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1985.362294] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1985.368775] device veth0_vlan entered promiscuous mode [ 1985.384004] device veth1_vlan entered promiscuous mode [ 1985.389897] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1985.399584] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1985.408134] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1985.418513] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1985.426697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1985.434078] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1985.441524] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1985.448668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1985.456788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1985.467194] device veth0_macvtap entered promiscuous mode [ 1985.474567] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1985.486742] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1985.497365] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1985.506762] device veth1_macvtap entered promiscuous mode [ 1985.514073] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1985.520673] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1985.528237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1985.536008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1985.544017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1985.553264] device veth0_macvtap entered promiscuous mode [ 1985.560306] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1985.570740] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1985.584047] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1985.592471] device veth1_macvtap entered promiscuous mode [ 1985.598605] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1985.608383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1985.618809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1985.628621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1985.638373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1985.647519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1985.657397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1985.666596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1985.676607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1985.687215] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1985.695513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1985.704965] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1985.712732] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1985.719908] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1985.730400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1985.739964] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1985.750427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1985.761786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1985.771807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1985.785076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1985.796091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1985.806529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1985.816224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1985.826508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1985.837261] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1985.845417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1985.862338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1985.870098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1985.883086] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1985.894820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1985.904882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1985.915334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1985.925824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1985.935340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1985.945135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1985.954345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1985.964470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1985.973925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1985.983719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1985.994262] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1986.001722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1986.011930] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1986.019839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1986.036675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1986.047078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.056600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1986.067140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.076867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1986.086821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.097647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1986.107481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.116704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1986.126658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1986.136793] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1986.144011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1986.152937] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1986.160978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1986.172662] Bluetooth: hci3 command 0x041b tx timeout [ 1986.176663] Bluetooth: hci0 command 0x041b tx timeout 05:09:00 executing program 4: syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x200, 0x1, 0x2}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x5, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0x2, 0x4, 0x1f, 0x2000, r2}) 05:09:00 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000001880)={0x2, 0x20000000, 0x1, {0x3, @raw_data="58ff329f1b54d010fd0d73747711892328175efd4dd382deb82949dfa6783bc7cb863a8a1e3bf1415a30cab2802250c43b29642f966feaddd16546f0ace1d431fce09aab989ee5cfdbfda904a9bfbc300d8bb8a5f9f3bddbd9d1b8fed9448dc003b6746521dbaf2638d6c868a4957f39635252a99cea4d0f04048dcd2cf1b6b046abdaeed5de551a182a2b276c74dd87b3dd21116f79d6efdcb1d9e21b23bd79aa15a1ea02fbf500307bde720eaf16f7bc9e549534811185fa60eb85b3836be396becf8a2bc41a1d"}, 0x38e6}) 05:09:00 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:09:00 executing program 3: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x100000) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000100)=0x1e) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247, 0x0, 0x0, [{0x0, 0x5}]}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000240)={0x2, @vbi={0x1f, 0x7fffffff, 0x5, 0x30323953, [0x8000, 0x8001], [0xffffffff, 0x9], 0x1}}) 05:09:00 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)={0x8, 0x3, 0x4, 0x2, 0x9, {0x0, 0x2710}, {0x3, 0x1, 0xb7, 0x8, 0x40, 0x9, "9019260d"}, 0x3, 0x3, @offset=0xfffffe70, 0xffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:09:00 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:09:00 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000140)={0x6, 0x1, 0x3}, 0x8) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x0, @sliced={0x5, [0x9, 0x56e8, 0xeff, 0x80, 0x200, 0x0, 0x0, 0xffff, 0x8, 0x50, 0x2, 0x7ff, 0x5, 0x7, 0x2, 0xfff8, 0x3, 0x5, 0x3e08, 0x9c, 0x5, 0x3ff, 0xd17, 0xd8, 0x7, 0x0, 0x0, 0x2, 0x8a0, 0x401, 0x81, 0xbc, 0x7, 0x0, 0x2b8, 0x8001, 0x1000, 0x7, 0x8a95, 0x273, 0x800, 0x401, 0x4, 0x8, 0xfff7, 0xe27, 0x358d, 0x1000], 0x470}}) r1 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000240)=0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)={0x2, 0x3, 0x4, 0x101, 0x101, {}, {0x3, 0x1, 0xc1, 0x7, 0x94, 0x81, "249afc4a"}, 0xfffffff8, 0x1, @offset=0x9, 0xff}) 05:09:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @empty}, &(0x7f0000000300)=0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x100000, 0x8, {}, {0x5, 0x13b30831199b05c9, 0x7, 0x8, 0x0, 0x5, "4c16f693"}, 0x3, 0x2, @fd=r1, 0x8c, 0x0, r2}) socket$inet(0x2, 0xa, 0x80000000) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x4000}) 05:09:00 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x3, 0x2, 0x2}) 05:09:00 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000480)={0xfffffffe, 0x1, 0x4, 0x4, 0xffff, {0x0, 0x2710}, {0x5, 0xc, 0x7f, 0x5, 0x3, 0x10, "53dd296f"}, 0x7, 0x4, @fd=0xffffffffffffffff, 0x81, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000280)={0x20, 0x3, 0xffffffffffffff5d, 0x1, 0x8, {}, {0x2, 0x2, 0x8, 0x7, 0x9, 0x7, "938435eb"}, 0x5, 0x3, @planes=&(0x7f00000001c0)={0x0, 0x9, @fd=r2, 0xdb}, 0xe8, 0x0, r3}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)={0xb7, 0x3, 0x4, 0x0, 0x3, {0x77359400}, {0x5, 0x8, 0x9, 0x2, 0x9, 0x5, "e9989594"}, 0x6, 0x2, @offset=0x6, 0x100}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x9, 0x4, 0x1, {0x3, @sliced={0x7f, [0x80, 0x3fe0, 0x2, 0x8, 0x3ff, 0x9, 0x5, 0x401, 0x9, 0x9, 0x100, 0x0, 0x4, 0xfb, 0x7c, 0xaca, 0x5, 0x8000, 0x973, 0x7ff, 0x1, 0x4a58, 0x4c3, 0x36b8, 0x2, 0x81, 0x8, 0x2, 0x200, 0x0, 0x2, 0x0, 0x21a9, 0x3, 0x3, 0x8, 0x8, 0x1, 0x2, 0x7ff, 0x4, 0x7, 0x6, 0x48c, 0xfff, 0x4, 0x9, 0x2], 0x9}}, 0x5}) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x1, 0x2) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000140)={@loopback, @remote}, 0xc) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, 0x0, 0x0) 05:09:00 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) 05:09:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @empty}, &(0x7f0000000300)=0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x100000, 0x8, {}, {0x5, 0x13b30831199b05c9, 0x7, 0x8, 0x0, 0x5, "4c16f693"}, 0x3, 0x2, @fd=r1, 0x8c, 0x0, r2}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x4000}) 05:09:00 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x2, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000040)) 05:09:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @empty}, &(0x7f0000000300)=0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x100000, 0x8, {}, {0x5, 0x13b30831199b05c9, 0x7, 0x8, 0x0, 0x5, "4c16f693"}, 0x3, 0x2, @fd=r1, 0x8c, 0x0, r2}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x4000}) 05:09:00 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) [ 1988.252077] Bluetooth: hci0 command 0x040f tx timeout [ 1988.262415] Bluetooth: hci3 command 0x040f tx timeout [ 1990.332100] Bluetooth: hci0 command 0x0419 tx timeout [ 1990.341615] Bluetooth: hci3 command 0x0419 tx timeout [ 1990.827298] oom_reaper: reaped process 7669 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1990.844029] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1990.857835] systemd-journal cpuset=/ mems_allowed=0-1 [ 1990.863118] CPU: 1 PID: 6463 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 1990.871162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1990.881318] Call Trace: [ 1990.883932] dump_stack+0x1b2/0x281 [ 1990.887738] dump_header+0x178/0x82f [ 1990.891867] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1990.897776] ? ___ratelimit+0x2cd/0x530 [ 1990.902984] oom_kill_process.cold+0x10/0xb18 [ 1990.907659] out_of_memory+0xe3e/0x1190 [ 1990.912038] ? oom_killer_disable+0x1c0/0x1c0 [ 1990.917353] ? mutex_trylock+0x152/0x1a0 [ 1990.922192] __alloc_pages_nodemask+0x23e1/0x2720 [ 1990.927824] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1990.933098] alloc_pages_current+0x155/0x260 [ 1990.937701] filemap_fault+0xea3/0x1980 [ 1990.941812] ext4_filemap_fault+0x84/0xb0 [ 1990.946262] __do_fault+0xfa/0x380 [ 1990.950103] __handle_mm_fault+0x2497/0x4620 [ 1990.955261] ? ep_poll+0x1ab/0xa50 [ 1990.959410] ? vm_insert_page+0x7c0/0x7c0 [ 1990.963716] handle_mm_fault+0x391/0x860 [ 1990.967809] __do_page_fault+0x549/0xad0 [ 1990.972339] ? spurious_fault+0x640/0x640 [ 1990.976796] ? do_page_fault+0x60/0x500 [ 1990.980897] ? page_fault+0x2f/0x50 [ 1990.985235] page_fault+0x45/0x50 [ 1990.989400] RIP: 0001:0xffffffffffffffff [ 1990.993732] RSP: ac9711e0:00007ffe14aec660 EFLAGS: 7ffe14aec470 [ 1990.995118] Mem-Info: [ 1991.003953] active_anon:14817 inactive_anon:44540 isolated_anon:0 [ 1991.003953] active_file:11 inactive_file:13 isolated_file:0 [ 1991.003953] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1991.003953] slab_reclaimable:13062 slab_unreclaimable:112208 [ 1991.003953] mapped:52692 shmem:45843 pagetables:739 bounce:0 [ 1991.003953] free:13854 free_pcp:123 free_cma:0 [ 1991.008719] syz-executor.0: [ 1991.038819] Node 0 active_anon:58536kB inactive_anon:125448kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200528kB dirty:0kB writeback:0kB shmem:130320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1991.038834] Node 1 active_anon:732kB inactive_anon:52712kB active_file:4kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1991.038838] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1991.047657] vmalloc: allocation failure, allocated 1575763968 of 2147487744 bytes [ 1991.071910] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1991.071933] Node 0 DMA32 free:17708kB min:36200kB low:45248kB high:54296kB active_anon:58536kB inactive_anon:125448kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7168kB pagetables:2792kB bounce:0kB free_pcp:248kB local_pcp:12kB free_cma:0kB [ 1991.071952] lowmem_reserve[]: 0 0 0 0 [ 1991.106209] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 1991.127448] 0 [ 1991.142373] (null) [ 1991.170959] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1991.170978] lowmem_reserve[]: 0 0 0 0 0 [ 1991.170998] Node 1 Normal free:26744kB min:53696kB low:67120kB high:80544kB active_anon:732kB inactive_anon:52712kB active_file:4kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:160kB bounce:0kB free_pcp:244kB local_pcp:120kB free_cma:0kB [ 1991.171019] lowmem_reserve[]: [ 1991.180556] syz-executor.0 cpuset= [ 1991.181473] 0 [ 1991.183609] / [ 1991.185683] 0 [ 1991.218960] mems_allowed=0-1 [ 1991.246003] 0 0 0 [ 1991.246019] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB [ 1991.253611] CPU: 0 PID: 7669 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 1991.257494] 1*64kB [ 1991.259080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1991.263455] (U) [ 1991.265531] Call Trace: [ 1991.271147] 1*128kB [ 1991.279188] dump_stack+0x1b2/0x281 [ 1991.279200] warn_alloc.cold+0x96/0x1cc [ 1991.279211] ? zone_watermark_ok_safe+0x220/0x220 [ 1991.279219] ? retint_kernel+0x2d/0x2d [ 1991.279239] __vmalloc_area_node+0x48a/0x680 [ 1991.279252] ? __vmalloc_node_range+0x150/0x150 [ 1991.279260] ? __get_vm_area_node+0x27d/0x340 [ 1991.279274] __vmalloc_node_range+0xbe/0x150 [ 1991.283822] (U) [ 1991.291356] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1991.295169] 0*256kB [ 1991.296272] vmalloc_user+0x47/0xa0 [ 1991.298784] 1*512kB [ 1991.302414] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1991.302423] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1991.302430] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1991.302440] __vb2_queue_alloc+0x47a/0xd90 [ 1991.302457] vb2_core_create_bufs+0x279/0x5a0 [ 1991.302466] ? __vb2_queue_free+0x7a0/0x7a0 [ 1991.302478] ? futex_wait+0x42f/0x5a0 [ 1991.302490] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1991.302500] ? trace_hardirqs_on+0x10/0x10 [ 1991.302510] vb2_create_bufs+0x2e1/0x5b0 [ 1991.302523] ? vb2_thread_start+0x310/0x310 [ 1991.302531] ? futex_wait+0x42f/0x5a0 [ 1991.302545] v4l_create_bufs+0xa4/0x150 [ 1991.302559] __video_do_ioctl+0x65b/0x6a0 [ 1991.309021] (U) [ 1991.312907] ? video_ioctl2+0x30/0x30 [ 1991.312919] ? __might_fault+0x177/0x1b0 [ 1991.312928] ? video_ioctl2+0x30/0x30 [ 1991.312937] video_usercopy+0xfd/0xe70 [ 1991.312950] ? v4l_g_ctrl+0x390/0x390 [ 1991.312959] ? lock_acquire+0x170/0x3f0 [ 1991.312967] ? lock_downgrade+0x740/0x740 [ 1991.312978] ? trace_hardirqs_on+0x10/0x10 [ 1991.317366] 0*1024kB [ 1991.322059] ? futex_exit_release+0x220/0x220 [ 1991.322074] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1991.322083] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1991.322101] v4l2_ioctl+0x1bb/0x2f0 [ 1991.322111] ? v4l2_open+0x2f0/0x2f0 [ 1991.322122] do_vfs_ioctl+0x75a/0xff0 [ 1991.322133] ? ioctl_preallocate+0x1a0/0x1a0 [ 1991.322142] ? lock_downgrade+0x740/0x740 [ 1991.322153] ? __fget+0x225/0x360 [ 1991.322160] ? do_vfs_ioctl+0xff0/0xff0 [ 1991.322171] ? security_file_ioctl+0x83/0xb0 [ 1991.322178] SyS_ioctl+0x7f/0xb0 [ 1991.322185] ? do_vfs_ioctl+0xff0/0xff0 [ 1991.322197] do_syscall_64+0x1d5/0x640 [ 1991.322210] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1991.322219] RIP: 0033:0x466459 [ 1991.322223] RSP: 002b:00007f09f29f8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1991.322232] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1991.322236] RDX: 0000000020001880 RSI: 00000000c100565c RDI: 0000000000000003 [ 1991.322240] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1991.322249] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1991.329116] 1*2048kB [ 1991.332126] R13: 00007ffd96b9697f R14: 00007f09f29f8300 R15: 0000000000022000 [ 1991.334463] Mem-Info: [ 1991.338440] (M) [ 1991.338737] active_anon:14817 inactive_anon:44540 isolated_anon:0 [ 1991.338737] active_file:10 inactive_file:14 isolated_file:0 [ 1991.338737] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1991.338737] slab_reclaimable:13062 slab_unreclaimable:112208 [ 1991.338737] mapped:52692 shmem:45843 pagetables:739 bounce:0 [ 1991.338737] free:13854 free_pcp:122 free_cma:0 [ 1991.345924] 2*4096kB [ 1991.346497] Node 0 active_anon:58536kB inactive_anon:125448kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200528kB dirty:0kB writeback:0kB shmem:130320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1991.350510] (M) [ 1991.354746] Node 1 active_anon:732kB inactive_anon:52712kB active_file:4kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1991.359477] = 10964kB [ 1991.363258] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1991.363278] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1991.369635] Node 0 [ 1991.375087] Node 0 [ 1991.381000] DMA32: [ 1991.383070] DMA32 free:17708kB min:36200kB low:45248kB high:54296kB active_anon:58536kB inactive_anon:125448kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7168kB pagetables:2792kB bounce:0kB free_pcp:244kB local_pcp:232kB free_cma:0kB [ 1991.383073] lowmem_reserve[]: 0 0 0 0 0 [ 1991.383096] Node 0 [ 1991.389477] 711*4kB [ 1991.396083] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1991.400419] (UMEH) [ 1991.403574] lowmem_reserve[]: 0 0 0 0 0 [ 1991.410597] 713*8kB [ 1991.417703] (UMEH) [ 1991.422105] Node 1 Normal free:26744kB min:53696kB low:67120kB high:80544kB active_anon:732kB inactive_anon:52712kB active_file:4kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:160kB bounce:0kB free_pcp:244kB local_pcp:124kB free_cma:0kB [ 1991.422126] lowmem_reserve[]: [ 1991.428075] 229*16kB [ 1991.429276] 0 [ 1991.433637] (MEH) 44*32kB (MEH) 12*64kB (UMH) 14*128kB (MH) 3*256kB (M) 1*512kB [ 1991.440445] 0 [ 1991.448392] (H) [ 1991.453123] 0 [ 1991.460616] 0*1024kB [ 1991.482991] 0 [ 1991.488927] 0*2048kB [ 1991.494154] 0 [ 1991.497882] 0*4096kB [ 1991.503085] Node 0 DMA: 1*4kB [ 1991.510307] = 17460kB [ 1991.510795] (U) [ 1991.515199] Node 0 [ 1991.520906] 0*8kB [ 1991.527167] Normal: [ 1991.531123] 1*16kB [ 1991.537507] 0*4kB [ 1991.539822] (U) [ 1991.547066] 0*8kB [ 1991.547415] 0*32kB [ 1991.552787] 0*16kB 0*32kB 0*64kB [ 1991.558075] 1*64kB [ 1991.568492] 0*128kB [ 1991.574120] (U) [ 1991.579977] 0*256kB [ 1991.588268] 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB [ 1991.599142] 0*512kB [ 1991.607644] (M) [ 1991.608154] 0*1024kB [ 1991.610260] 2*4096kB [ 1991.648539] 0*2048kB [ 1991.677864] (M) [ 1991.684975] 0*4096kB [ 1991.712174] = 10964kB [ 1991.722930] = 0kB [ 1991.744570] Node 0 [ 1991.756064] Node 1 [ 1991.757049] DMA32: [ 1991.798051] Normal: [ 1991.800037] 711*4kB [ 1991.802935] 230*4kB [ 1991.838514] (UMEH) [ 1991.846366] (ME) [ 1991.848656] 713*8kB [ 1991.890921] 182*8kB [ 1991.892078] (UMEH) [ 1991.910058] (ME) [ 1991.911866] 229*16kB [ 1991.912497] 143*16kB [ 1991.914825] (MEH) [ 1991.916637] (ME) [ 1991.919990] 44*32kB (MEH) [ 1991.932690] 78*32kB [ 1991.936947] 12*64kB [ 1991.937431] (ME) [ 1991.940983] (UMH) [ 1991.950243] 40*64kB [ 1991.954384] 14*128kB [ 1991.957009] (UM) [ 1991.959094] (MH) [ 1991.967849] 15*128kB [ 1991.970116] 3*256kB [ 1991.979122] (UM) [ 1991.982399] (M) [ 1991.988386] 5*256kB [ 1991.988726] 1*512kB [ 1991.994435] (M) [ 1991.998515] (H) [ 1991.999038] 7*512kB [ 1992.001615] 0*1024kB [ 1992.009879] (ME) [ 1992.013912] 0*2048kB [ 1992.016216] 4*1024kB [ 1992.017007] 0*4096kB [ 1992.019597] (UME) [ 1992.021962] = 17460kB [ 1992.021967] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1992.022016] Node 1 Normal: 230*4kB (ME) 182*8kB (ME) 143*16kB (ME) 78*32kB (ME) [ 1992.030501] 1*2048kB [ 1992.033913] 40*64kB [ 1992.036004] (M) [ 1992.037088] (UM) [ 1992.039494] 1*4096kB [ 1992.041766] 15*128kB (UM) 5*256kB (M) 7*512kB (ME) 4*1024kB (UME) 1*2048kB (M) 1*4096kB (U) = 26744kB [ 1992.041810] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1992.041815] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1992.041821] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1992.041828] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1992.049845] (U) [ 1992.051319] 45867 total pagecache pages [ 1992.056450] = 26744kB [ 1992.058886] 0 pages in swap cache [ 1992.059456] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1992.061942] Swap cache stats: add 0, delete 0, find 0/0 [ 1992.061947] Free swap = 0kB [ 1992.061949] Total swap = 0kB [ 1992.061956] 2097051 pages RAM [ 1992.061960] 0 pages HighMem/MovableOnly [ 1992.061963] 363841 pages reserved [ 1992.061966] 0 pages cma reserved [ 1992.245205] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1992.253881] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1992.265258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1992.274304] 45867 total pagecache pages [ 1992.278429] 0 pages in swap cache [ 1992.284006] Swap cache stats: add 0, delete 0, find 0/0 [ 1992.289538] Free swap = 0kB [ 1992.292660] Total swap = 0kB [ 1992.295688] 2097051 pages RAM [ 1992.299009] 0 pages HighMem/MovableOnly [ 1992.305278] 363841 pages reserved [ 1992.308895] 0 pages cma reserved [ 1992.312403] Out of memory (oom_kill_allocating_task): Kill process 6463 (systemd-journal) score 0 or sacrifice child [ 1992.325512] Killed process 6463 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1712kB [ 1992.338351] oom_reaper: reaped process 6463 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1712kB [ 1992.351747] systemd-journal: page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 1992.365849] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1992.380055] systemd-journal cpuset=/ mems_allowed=0-1 [ 1992.385342] CPU: 1 PID: 6463 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 1992.393247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1992.402615] Call Trace: [ 1992.405220] dump_stack+0x1b2/0x281 [ 1992.408993] warn_alloc.cold+0x96/0x1cc [ 1992.412988] ? zone_watermark_ok_safe+0x220/0x220 [ 1992.418259] ? usleep_range+0x130/0x130 [ 1992.422833] ? try_to_free_pages+0x23f/0x6e0 [ 1992.427258] ? _find_next_bit+0xdb/0x100 [ 1992.431341] ? run_timer_softirq+0x5a0/0x5a0 [ 1992.435774] __alloc_pages_nodemask+0x2127/0x2720 [ 1992.440868] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1992.445832] alloc_pages_current+0x155/0x260 [ 1992.450390] filemap_fault+0xea3/0x1980 [ 1992.454383] ext4_filemap_fault+0x84/0xb0 [ 1992.458565] __do_fault+0xfa/0x380 [ 1992.462110] __handle_mm_fault+0x2497/0x4620 [ 1992.466529] ? ep_poll+0x1ab/0xa50 [ 1992.470205] ? vm_insert_page+0x7c0/0x7c0 [ 1992.474807] handle_mm_fault+0x391/0x860 [ 1992.479013] __do_page_fault+0x549/0xad0 [ 1992.483219] ? spurious_fault+0x640/0x640 [ 1992.487373] ? do_page_fault+0x60/0x500 [ 1992.491358] ? page_fault+0x2f/0x50 [ 1992.494989] page_fault+0x45/0x50 [ 1992.498444] RIP: 0001:0xffffffffffffffff [ 1992.502667] RSP: ac9711e0:00007ffe14aec660 EFLAGS: 7ffe14aec470 [ 1992.503462] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1992.514623] CPU: 1 PID: 7969 Comm: syz-fuzzer Not tainted 4.14.227-syzkaller #0 [ 1992.522072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1992.531418] Call Trace: [ 1992.534036] dump_stack+0x1b2/0x281 [ 1992.537677] dump_header+0x178/0x82f [ 1992.541386] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1992.546484] ? ___ratelimit+0x2cd/0x530 [ 1992.550457] oom_kill_process.cold+0x10/0xb18 [ 1992.555052] out_of_memory+0xe3e/0x1190 [ 1992.559020] ? oom_killer_disable+0x1c0/0x1c0 [ 1992.563594] ? mutex_trylock+0x152/0x1a0 [ 1992.567661] __alloc_pages_nodemask+0x23e1/0x2720 [ 1992.572632] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1992.577988] alloc_pages_current+0x155/0x260 [ 1992.582396] filemap_fault+0xea3/0x1980 [ 1992.586779] ext4_filemap_fault+0x84/0xb0 [ 1992.591213] __do_fault+0xfa/0x380 [ 1992.595667] __handle_mm_fault+0x2497/0x4620 [ 1992.600070] ? vm_insert_page+0x7c0/0x7c0 [ 1992.604327] handle_mm_fault+0x391/0x860 [ 1992.608382] __do_page_fault+0x549/0xad0 [ 1992.612517] ? spurious_fault+0x640/0x640 [ 1992.616660] ? do_page_fault+0x60/0x500 [ 1992.620627] ? page_fault+0x2f/0x50 [ 1992.624248] page_fault+0x45/0x50 [ 1992.627691] RIP: 0f00:0xc00004b7a0 [ 1992.631295] RSP: 03a9:000000c000039e40 EFLAGS: 00000003 [ 1992.631338] Mem-Info: [ 1992.631495] Mem-Info: [ 1992.642193] active_anon:14717 inactive_anon:44540 isolated_anon:0 [ 1992.642193] active_file:12 inactive_file:12 isolated_file:0 [ 1992.642193] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1992.642193] slab_reclaimable:13062 slab_unreclaimable:112211 [ 1992.642193] mapped:52692 shmem:45843 pagetables:739 bounce:0 [ 1992.642193] free:13792 free_pcp:247 free_cma:0 [ 1992.645165] active_anon:14717 inactive_anon:44540 isolated_anon:0 [ 1992.645165] active_file:12 inactive_file:12 isolated_file:0 [ 1992.645165] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1992.645165] slab_reclaimable:13062 slab_unreclaimable:112211 [ 1992.645165] mapped:52692 shmem:45843 pagetables:739 bounce:0 [ 1992.645165] free:13792 free_pcp:247 free_cma:0 [ 1992.711761] Node 0 active_anon:58136kB inactive_anon:125448kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200528kB dirty:0kB writeback:0kB shmem:130320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1992.713898] Node 0 active_anon:58136kB inactive_anon:125448kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200528kB dirty:0kB writeback:0kB shmem:130320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1992.761761] Node 1 active_anon:732kB inactive_anon:52712kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1992.773704] Node 1 active_anon:732kB inactive_anon:52712kB active_file:8kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1992.828926] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1992.831828] Node 0 [ 1992.860168] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1992.868433] Node 0 DMA32 free:18236kB min:36200kB low:45248kB high:54296kB active_anon:58136kB inactive_anon:125448kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7168kB pagetables:2792kB bounce:0kB free_pcp:744kB local_pcp:728kB free_cma:0kB [ 1992.881759] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1992.903374] lowmem_reserve[]: 0 0 0 0 0 [ 1992.933949] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1992.961761] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1992.964808] lowmem_reserve[]: [ 1992.966909] Node 0 DMA32 free:18300kB min:36200kB low:45248kB high:54296kB active_anon:58068kB inactive_anon:125448kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7168kB pagetables:2792kB bounce:0kB free_pcp:744kB local_pcp:16kB free_cma:0kB [ 1992.966926] lowmem_reserve[]: 0 [ 1992.970058] 0 0 0 0 0 [ 1993.011072] Node 1 Normal free:334924kB min:53696kB low:67120kB high:80544kB active_anon:732kB inactive_anon:52712kB active_file:28kB inactive_file:2400kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:160kB bounce:0kB free_pcp:876kB local_pcp:132kB free_cma:0kB [ 1993.041900] 0 0 0 0 [ 1993.044265] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1993.044872] lowmem_reserve[]: [ 1993.070607] lowmem_reserve[]: 0 0 0 0 0 [ 1993.077498] 0 0 0 0 0 [ 1993.078119] Node 1 Normal free:395112kB min:53696kB low:67120kB high:80544kB active_anon:832kB inactive_anon:52712kB active_file:28kB inactive_file:3000kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:160kB bounce:0kB free_pcp:1428kB local_pcp:740kB free_cma:0kB [ 1993.080321] Node 0 [ 1993.115227] lowmem_reserve[]: 0 0 0 0 0 [ 1993.124284] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10964kB [ 1993.140937] Node 0 DMA32: 711*4kB (UMEH) 810*8kB (UMEH) 233*16kB (UMEH) 44*32kB (MEH) 12*64kB (UMH) 14*128kB (MH) 3*256kB (M) 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 18300kB [ 1993.141764] DMA: [ 1993.161001] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1993.171753] 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10964kB [ 1993.181784] Node 1 Normal: 8*4kB (UME) 7*8kB (UME) 86*16kB (UME) 82*32kB (UME) [ 1993.186341] Node 0 DMA32: 731*4kB (UMEH) 813*8kB (UMEH) 234*16kB (UMEH) 44*32kB (UMEH) 12*64kB (MH) 15*128kB (UMH) 3*256kB (M) 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 18548kB [ 1993.209724] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1993.216661] 42*64kB (UM) 15*128kB (UM) 8*256kB (UM) 8*512kB (UME) 5*1024kB (UME) 82*2048kB (UM) 74*4096kB (U) = 491000kB [ 1993.222934] Node 1 Normal: 6*4kB (UME) 8*8kB (UME) 85*16kB (UME) 81*32kB (UME) 43*64kB (UM) 14*128kB (M) 7*256kB (UM) 8*512kB (UME) 6*1024kB (UME) 81*2048kB (UM) 81*4096kB (U) = 518280kB [ 1993.242060] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1993.255970] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1993.270395] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1993.282879] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1993.291484] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1993.304774] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1993.314925] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1993.325953] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1993.335839] 46678 total pagecache pages [ 1993.339828] 0 pages in swap cache [ 1993.345756] 46678 total pagecache pages [ 1993.349741] 0 pages in swap cache [ 1993.354478] Swap cache stats: add 0, delete 0, find 0/0 [ 1993.359845] Free swap = 0kB [ 1993.365359] Swap cache stats: add 0, delete 0, find 0/0 [ 1993.370734] Free swap = 0kB [ 1993.374036] Total swap = 0kB [ 1993.376024] Total swap = 0kB [ 1993.377055] 2097051 pages RAM [ 1993.380053] 2097051 pages RAM [ 1993.388787] 0 pages HighMem/MovableOnly [ 1993.392000] 0 pages HighMem/MovableOnly [ 1993.393921] 363841 pages reserved [ 1993.400171] 0 pages cma reserved [ 1993.401982] 363841 pages reserved [ 1993.405786] Out of memory (oom_kill_allocating_task): Kill process 7969 (syz-fuzzer) score 0 or sacrifice child [ 1993.407188] 0 pages cma reserved [ 1993.418548] Killed process 7157 (syz-executor.2) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1993.671281] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1993.701177] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1993.746740] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1993.776194] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1993.796697] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1993.806791] systemd[1]: Stopped Journal Service. [ 1993.838776] systemd[1]: Starting Journal Service... [ 1993.899441] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1993.992177] systemd-journald[7724]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1994.014466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1994.034613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1994.053427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1994.060264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1994.083532] device bridge_slave_1 left promiscuous mode [ 1994.089177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1994.112636] device bridge_slave_0 left promiscuous mode [ 1994.118189] bridge0: port 1(bridge_slave_0) entered disabled state [ 1994.158279] device veth1_macvtap left promiscuous mode [ 1994.163658] device veth0_macvtap left promiscuous mode [ 1994.168981] device veth1_vlan left promiscuous mode [ 1994.195535] device veth0_vlan left promiscuous mode [ 1994.423148] device hsr_slave_1 left promiscuous mode [ 1994.443660] device hsr_slave_0 left promiscuous mode [ 1994.482367] team0 (unregistering): Port device team_slave_1 removed [ 1994.498439] systemd[1]: Started Journal Service. [ 1994.512631] team0 (unregistering): Port device team_slave_0 removed [ 1994.533183] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1994.544647] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1994.603896] bond0 (unregistering): Released all slaves 05:09:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x200003, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000080)) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000200)={0xb, 0x82, 0xc184, 0x0, r1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x1ff, 0x0, 0x1}) 05:09:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0xd6, 0x7ff, 0x4, {0x1, @pix_mp={0x6, 0x101, 0x34325258, 0x8, 0xc, [{0xffff, 0x7fff}, {0x30c41eaa, 0x1}, {0xff, 0x1}, {0xfffffffd, 0x49}, {0x6, 0x1dba}, {0x800, 0x3ff}, {0xf483, 0x1fe0000}, {0x8, 0x7ff}], 0x60, 0x9, 0x1, 0x1}}}) 05:09:11 executing program 3: getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x7, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000280)={0x5, 0x0, 0x4, 0xe000, 0x20000000, {0x77359400}, {0x2, 0x0, 0x7f, 0x8, 0x1, 0x1f, "c532c906"}, 0x2, 0x3, @planes=&(0x7f0000000240)={0xde42, 0xfffffff9, @userptr=0xf92, 0x1f}, 0x5}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0x7, 0x2, 0x4, 0x4, 0x80, {r2, r3/1000+10000}, {0x3, 0x1, 0x1f, 0xff, 0x8, 0x1, "949dceb0"}, 0xffff, 0x1, @userptr=0x4, 0x9}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x51424752, 0x0, 0x8, [{0x7ff}, {}, {}, {}, {}, {}, {}, {0x8, 0xfffffffc}]}}) 05:09:11 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x3, 0x8, 0x3ff, 0x80000, 0xffffffffffffffff}) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x4, 0xfff, 0x233a0, 0x80800, r2}) 05:09:11 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @empty}, &(0x7f0000000300)=0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x100000, 0x8, {}, {0x5, 0x13b30831199b05c9, 0x7, 0x8, 0x0, 0x5, "4c16f693"}, 0x3, 0x2, @fd=r1, 0x8c, 0x0, r2}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x4000}) 05:09:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:09:11 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x3, 0x1}) 05:09:11 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001540)={0x0, 0xffffffffffffffff, 0x1000, 0x3, @scatter={0x6, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f00000000c0)=""/150, 0x96}, {&(0x7f0000000280)=""/223, 0xdf}, {&(0x7f0000000380)=""/250, 0xfa}, {&(0x7f00000015c0)=""/73, 0x49}, {&(0x7f00000001c0)=""/28, 0x1c}]}, &(0x7f0000000500)="7bd83698d7bc9ac91790a69a33d3a413bddfaea1f750ad5ec7082bcf949f4f1eac32a6d912e655ddac3b6b03ce2a0d8883c52172b2170993bb8ff960216dd7eff8006785dedb95000c49845a437812e5c43b6b351f9ee6397082cb922883cb15764157e758512030d471efd0d2d78193b395d06d72e14f887d369ff0196fa6bf2deddfc2d7e560729784a28dba612bf8daa3b85d332be5a91492f14b2ff1821bcc8af393027f3e73f69c1df3ebc6e236aa4a8f92fc1acfd342bddd99726df962c8d01874899ed7d14a24eae5faa04cb94bc5618002899704834cebeaa11bfb2bc7324f896658a8071f581610fde4ab22cc701a16edaa5677e21ce740ad5c38217079922f0ee995371e8673fcc356e17166db381eba596ce3529b6dcf6d35491c70471b6ee0c6a25245b3ad90e0fcfa7e8df1e6a3f364c528f731ffa59cf16b8a97d6d6013970e14b95664b34f5f6870a651bcb14e94791edbd8858ae3d72a8b753f3037046ce20dda37f0e945c5f593787e42f22e22679a8a919bb37cf662ff2ad7847deba97c84a0c5b66693103cbcb0cc437210d76709eec1dbbeb508e5e2498472ed9fff0a131764b68b290105020c77c3bed493cbd16151deaf7bfa3623fcf27f38c571b6dff984bfceea2732e95c5a631ec5a3ddee7c2e693c46cfe7c172820ceed13916d78ba13db093900d48bf28fb26e13557fbae0667a00b84366d4584801d4262d2659b3677effaf06e91b53f8b391f1032e861aac6833fc40974f09a834e01af166715b96c096e42ffe2d9c24b7d4003e6ade7bbeb1139b8da328d42cc2131e34057155cef56af90d3502de0fb6455b348a1486a383672a09f502e39cb3a2d18311a87d63238b81e18666970295fbc0f42ce8e6ce4fa234ab7e06692dbd4108380426e3141d8961dcefb2b7ceebfaf5c42a83da05bc87d608f3c4cc734915fda3767ce87077ff636373235f037c4e78e62912b442dd90355c25c6611f64943e6a6d928704edbccf413616d5a094656da7a3ea36383b155e49335b82a56809d2bab0756b64734e2598f657bbe17d0118f93a820aab5e0afbbb1ba116e622b5ed51c97656fe5a65c79a7a101ee8dafeeef60069179100f06ca968b1eb6c6c3c2fc8d578ab049162d449f9e3156b29376ab1f5eabd468061b2df5bc560ecae1e2ca945893691cfaff747af6f99ee42b0be75abe78d3d0fa3c7312ea57b713ec52ff16ca99afaa046bd0b7a5bde1bba6efb3d676344eb3390c1cbfef6adb27075c16346719b935e2f9f2f2a0bf84fd0b1a6cd60fb58e2baba7acd6786898ed0256ad60fc0ea253ab17e5d1258df9788325d8f903305401fb5710c1ac7176374c31c98c3cc91c2d63af08f93acab904146bbb81217ac433cbd23fe33e48f1c7e4ffd35f2af469ca16c192a143f1fbac7757f43599c922750c4dc84bc8e9ee9bb7df2ba2ab1cd735def1a4bdbe31d51d36cf1aa67df9340f61a0929da4938117432195bf698b51380a2649a3e2d581d59c67a0db0975e3ec8fd6150612104e3583cc8d82aaffd9850b961876a4d54125ac174ac6326f0b09188f25e1b08b79ac269dde5ce5f4f0c3cbea9b04c829e2e0230c85d778655032e9d87555b840413fcd56062afc2fa048117c0bff99a1b658671b32c42c12f4ca7f9bd4257fe38bb63efe6ab3fb6ca4e4db4c7b0d045953fd42b59f5eb96636e8c64bb7360f5f4933959b56e380e9729cca096f773b2c9ac5f35b74880aa9ae1650be56e96fdd969d24a7ebfdef62bc9cc9e9912b1ebb27a16741327b9ccb5032478750ceee0b369cfc418f6c0410d0a26b42750a71c921b3833631bccdff3aa03934b3f123c0281e611d65f3defe381fdc55b3f40afeacc77e1d9bd462cd1f028deec97f6c1d3c0262b812a831cfcd28dee9657a81c0281e57135035a355b5ca34b747d28813477c747133d23ba254a1658226c6f39f09298b05fde4ee6f04ffca968116238ef0a6b32f89dd5228ae76602e6803970ef2e4a6686564c6c097a6634f61b845987c983b31af9b67853fffb9e416db1f1ec7a6b21649192cdf3d9f114e6f6564bb6d404031cc59e869104b54a7036cf3e11af0235971cd27cf9caba8d6c95ee21643a212199feba1b3ef911043a107a8e4daa1b7817dfbb37d9e683476b00993a7a839f814b23e7a3f1f0b5a2d68864ce773c9b2d53a929c5822cbf98c14217be8006de54cc27e85ea1cae4f423dfecbecd44c8a2cae976e932203e20c38f23cfcc691c7417cb6d8dc8725d420800d7167b9a36a56fdbc615444d96697253e54606bdffd72c60b527a8b84cbd97506045d308e4b9f27b1cb7fb1b651f82fdb6a74b64c4b20b567604f970f26043a73fba5548d1e63fa935346153e5c75347a23d54486b133fb10649055934c7bb6169d96ce18bf7607e20a628e487eefc5c75698baee4490633f1e1d930989ac53379f47ab904cd60944cf489bfa13c9fcbbad4520d84629746dfcc817be27a4c66300986ebabd54ddbc0ea68e5f3ce46920eb249b099012357958585269a4bf73b462e7a4eaff97636b94b117e547016367e5962b196519c8cb8c1ef4ecd569034f4e16be03c969d4cd2834007d5ca62b9dcc5289f8e4761a8dfa2b3ffbed832757ad64ae2dd2f9cd1982390edebd24ef7e18b7f4b5f4f9c2f1dd4206a01bdba1a7078623ef163f3f93fa8d2ac4c97fda98d63c7b91abb18306b0039f8e0c15fc2aca174c3469e70528247f4224edef83a69127b7b745210c3c63206ee427b1efb63a4be39baa11799e661a6a8a5a945e3e29e5133289e35843845f13f3daa5b6b9666fb245e44275519e131d6d900ac286b68ffe6ebfd6b36b7d7dbefc187bcd83caa039d740bb9e3b3e847e7afd896d1bfb7d20a9fc5ce035313e96483343bf883fa2db5d2fe93b624895f773b81424e87fd037f51ccbf15bc4a4fc6c8c5a7e6758f0864e62d6e6f08b28ca9dc39eb7f55591b8c01d5945768107d510b0fdbdd4829704417a6261ce0b88837462ad8cbb0f45aea64295283748913458fc15bb3c659c71b79b3f9c5f59f00e003c200d2d9f17e4193bd8bdc58e172b7a06f77e9685aa7905be4a48f1a9d207719a4508392780a90375e6adddf4aba516457dfcf50e5adb221e32ed7d90a7f9d58b5cf04416a62be11e601ccc18e1af2663cf9a529b5a636ed1b1a523b3460575ebfa71113e2cac0d76a9a9e59135224371ca8ebe2c1b1d0cc2ba6a16a192ac1b615cf5e1591f26eb0b3bcbf2db9427baf6b3a00ab2b985d02ff44eeaa7cf771528090b0610fa911fed9328498feb9f71201b4bc4201b7074cb2600b09450af003689161bac89c8cc77d744e3b892d6e23289f1b88dc44c7614fb05542d1f5701f52a1e98f91da0a453bfdbca266df23833e651ffa2a4209e3da5f0ccf860768b6a6f8d90d280a5d6d153fb187e4eecd3694f7f4b344d1bbd7310a5d5f99e84882032953af90f935d7bd8d8331cd9cde4f4c19ca5adc5be7bfd32f02016f38a624b34fc05ad0300c01bd124babf975805b12cf3f7ca4a8532204e04175943a668a64e58608f06fc1f1054b8552742d4018bd8254b287a5115e47bc1ce64e35a1032f5611fe5d3d2523dcef6cd371076d3dd5103303d4caac0fc84da220d362e724f44e1d9efd5fc1fc37837d349bbb351badec27165d330856262f4b66cad492f8be29202441e8a305b7e818e3e535cc78bf41ce0cbd651197806128378371dd47bafa5fd25be6e48d305204682b3579a45b4a25e4bc47ad08d9f2224501dd1aa5c58ced1dfea994d6a3f01c571f4dd02d5d8c6e68158df08bdc844764138dca0722134d4ecfd1d2906c89726ddceaf3585de0717d20d411dbfeda6d3cb905e3092818c9bfb4c7bf101257a38c14b4c8687f67151a22ebaabffb8307ebacd978435be4a930fbe53c11ade03922e84bdbd6014e4de0af80cba59594652273ec46e5684014ccbc17dc6fc9259b67a1a09af8e2ffa7f6ac105e0851b4c877520e5f220cd9529d6693db9311940e313bc5c8231e9977d345334cdc1789bfb194f219f4c3bfff09e11e0a73f0c4895eb8ef0baea0aa0ce1d612b4ceac5853310da6ece1481e575ffe2b16c454408ee179ff204981baa68b6bb9e9e3d11ffd80609d87f9350cac348dce46863b5e8a20fef8ef1c5981cfefd406f64637aff96161105038bfbf463705a2556e002ac0d19181b1f3a73d9b299297332241c1cb43634c0a45fa466f03572a1a4cd9ba7cd31cdd88216e4813f402beab9a701e262a937d6b6e6158743e248059c0fead0bebd97a100c3b4f97ee01b6bc6d1b0b40d20a30cede0055fededae558883219c633bf523c93ff339af128a4d7b09ecb260b9f47c44d48a35a7727b8111c1b9c60c2ecd36971f24b56f646b9b5e0735209a26ca1502d09a4a26842062452279cdc34dfd50bd777177286aef27d522f0dabd7945af23b05b1a96a1ffb3591bd192cc5387ae3c1f17b222c29ab3bde11f7606243612414979f59a3eb2cb621674e53993c95b835e55c220a6795246cb686c555f490f0ae457aa611d7770bae2f4f92de972d8810798dcb049c163ad6cf286144426fc86bee0710f71077246375452af679dcf165901f2b2c4a0433f43efb007db136824eae5c65119d96944e8a8c75467763abc8fad0c18acc150c354546111e78a4813220889e67bfd44629f68d781dbdfe882bbe72d21eb3ebc15662a0568038a35b64abc8f24fb8e8b5e90842573bc067af44b55dbd7c63d1780da022870c9b6417c5569b7b51db83ca63c1ad75f1ee4778517b578452e90eabb9e78cbf4f2026bb73178be42e9e8b614677cb754c782e53d53aada7557a7e04864586907ed4989def9b441988bf053e4c7220289b280c8442ae0f729ed73708cdaa2700e88c56897cf4e5660428720815313fe57d44003f9159515c7c238b46b7068381a084830ed12ed1ecca30b2db8f165e09da4362b84a2694927bb0f95af68372c68a9300d626713c53b8fa908b6e52c91bfe76a152dcd07e4b391794ddcbfd84eed756c89c6a874107c62d21840c5f0517a3a02997296fbbb131fef3f687ebc1d1db6ac74482722e752a48ce389a11df74725dc0c4caadbebdf50d638326082f6cebb82bd6119d299be2fdbc9177baab0e6186ac715215ed897d0798f0e66e017f7f22bd2579a779355f374296ded3adbf7ea25cb9baa7b27d0cd3753c00119dd615933c7c9b799424ce0e8c9a1f23a5487c523d0a8f3af13a604275e6b29f7cc3943d78398ee65078b5a5fb8a3069875bdfbe972d0093666b14f7a5c43822dc177ad8363b454202bb7b78591c04d03348ba1a6845004c50fd16756b91ed8677c14d3b677750e97f387da7661ac244d60b021f4c36bb829446bb4e1efd41f5171e108e674f9856778f22b122420c1b90628504ded816f85345a3dd68f75435c04a5a136895853080b2c1a823576bcd15b84ab85b2dd4a29d5ac02e7cc27795115d25a8e00f732612cf5b8ba2b20eb27e75e44f63f3d0e15eb467f809f2d6bdccc9870508de91dab35549524ec1e773e71e3c7eaae8e3eb7998e94bf898f97f292df821fdc164839a0135f5895f444269d8977d438131f8361188a087993b42abb2e4e16902602ab64216e30cd9a75f146eb2dbb6cab4e56ba262c351b571bc28d77b06790b458c789509a059eb3c0497288fa82b0b76f2ea5836f97ddf628a60b21c52b758e04566d9bd1cb4b8040dae12e959c0aa25605c1e0fb5b033c5e945bf9858a9c92aa1e8996f2e", &(0x7f0000000200)=""/46, 0x532d, 0x2, 0x0, &(0x7f0000001500)}) 05:09:11 executing program 4: clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x1000, 0x1, 0x4, 0x401f56f562a4fded, 0x5, {r0, r1/1000+10000}, {0x4, 0x0, 0x3, 0x3, 0x9, 0x46, "b6e1b2f9"}, 0x0, 0x3, @userptr=0x4, 0x1000}) r2 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) getuid() r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r9, 0x84, 0x21, 0x0, 0x0) accept4$inet(r9, &(0x7f00000003c0)={0x2, 0x0, @empty}, &(0x7f0000000400)=0x10, 0x800) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r8, 0x0, 0x2, &(0x7f0000000380)={0xffff, [0x3ff, 0x2], 0x4}, 0x10) setsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000000)={@local, @broadcast, r6}, 0xc) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x74, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x41}}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x87}, 0x2008040) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000000c0)={0x7, 0x2, 0x4, 0x800, 0x800, {0x77359400}, {0x1, 0x0, 0x20, 0x7f, 0x1f, 0xff, "c0bce42e"}, 0x12e, 0x4, @planes=&(0x7f0000000040)={0x7, 0x0, @userptr=0x1, 0x7}, 0x8, 0x0, r2}) 05:09:11 executing program 5: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x5, 0x2, 0x2}) r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:09:11 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:09:11 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x3}) 05:09:11 executing program 5: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) [ 1999.401107] IPVS: ftp: loaded support on port[0] = 21 [ 1999.624117] chnl_net:caif_netlink_parms(): no params data found [ 1999.780641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1999.787423] bridge0: port 1(bridge_slave_0) entered disabled state [ 1999.799285] device bridge_slave_0 entered promiscuous mode [ 1999.806879] bridge0: port 2(bridge_slave_1) entered blocking state [ 1999.817692] bridge0: port 2(bridge_slave_1) entered disabled state [ 1999.825489] device bridge_slave_1 entered promiscuous mode [ 1999.860976] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1999.870763] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1999.905268] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1999.915024] team0: Port device team_slave_0 added [ 1999.921678] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1999.930700] team0: Port device team_slave_1 added [ 1999.961470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1999.969033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1999.998102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2000.009989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2000.020162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2000.050169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2000.061405] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2000.073031] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2000.109332] device hsr_slave_0 entered promiscuous mode [ 2000.116093] device hsr_slave_1 entered promiscuous mode [ 2000.125821] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2000.133730] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2000.251692] bridge0: port 2(bridge_slave_1) entered blocking state [ 2000.258134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2000.264831] bridge0: port 1(bridge_slave_0) entered blocking state [ 2000.271203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2000.314800] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2000.320938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2000.330701] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2000.341248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2000.349028] bridge0: port 1(bridge_slave_0) entered disabled state [ 2000.356859] bridge0: port 2(bridge_slave_1) entered disabled state [ 2000.368249] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2000.375634] 8021q: adding VLAN 0 to HW filter on device team0 [ 2000.385991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2000.394286] bridge0: port 1(bridge_slave_0) entered blocking state [ 2000.400649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2000.422623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2000.430343] bridge0: port 2(bridge_slave_1) entered blocking state [ 2000.436773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2000.447084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2000.464245] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2000.474253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2000.486125] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2000.494183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2000.506177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2000.514884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2000.526924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2000.541558] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2000.549537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2000.563811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2000.570389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2000.579281] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2000.588137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2000.666471] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2000.677114] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2000.690411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2000.700489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2000.751364] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2000.758904] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2000.767038] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2000.777925] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2000.785639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2000.794235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2000.804042] device veth0_vlan entered promiscuous mode [ 2000.814153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2000.821295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2000.834214] device veth1_vlan entered promiscuous mode [ 2000.840713] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2000.857125] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2000.875241] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2000.889411] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2000.899165] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2000.913974] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2000.921646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2000.935184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2000.946677] device veth0_macvtap entered promiscuous mode [ 2000.955765] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2000.966924] device veth1_macvtap entered promiscuous mode [ 2000.976531] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2000.987915] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2001.004147] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2001.016228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2001.027903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2001.039702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2001.051270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2001.066120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2001.076189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2001.089178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2001.099105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2001.111928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2001.125531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2001.136989] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2001.148209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2001.155265] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2001.166720] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2001.174306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2001.187144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2001.196965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2001.208708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2001.218738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2001.229600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2001.239517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2001.250081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2001.260432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2001.271018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2001.280932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2001.291401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2001.303456] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2001.310376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2001.319262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2001.328748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2001.452677] Bluetooth: hci3 command 0x0409 tx timeout [ 2001.693367] Bluetooth: hci1 command 0x0406 tx timeout [ 2002.977222] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2002.990502] systemd-journal cpuset=/ mems_allowed=0-1 [ 2003.022193] CPU: 0 PID: 7724 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 2003.030112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2003.039467] Call Trace: [ 2003.042056] dump_stack+0x1b2/0x281 [ 2003.045681] dump_header+0x178/0x82f [ 2003.049392] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2003.055026] ? ___ratelimit+0x2cd/0x530 [ 2003.058999] oom_kill_process.cold+0x10/0xb18 [ 2003.063496] out_of_memory+0xe3e/0x1190 [ 2003.067486] ? oom_killer_disable+0x1c0/0x1c0 [ 2003.071988] ? mutex_trylock+0x152/0x1a0 [ 2003.076043] __alloc_pages_nodemask+0x23e1/0x2720 [ 2003.080894] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2003.085747] alloc_pages_current+0x155/0x260 [ 2003.090150] filemap_fault+0xea3/0x1980 [ 2003.094126] ext4_filemap_fault+0x84/0xb0 [ 2003.098267] __do_fault+0xfa/0x380 [ 2003.101805] __handle_mm_fault+0x2497/0x4620 [ 2003.106203] ? ep_poll+0x1ab/0xa50 [ 2003.109721] ? vm_insert_page+0x7c0/0x7c0 [ 2003.113999] handle_mm_fault+0x391/0x860 [ 2003.118040] __do_page_fault+0x549/0xad0 [ 2003.122084] ? spurious_fault+0x640/0x640 [ 2003.126210] ? do_page_fault+0x60/0x500 [ 2003.130161] ? page_fault+0x2f/0x50 [ 2003.134043] page_fault+0x45/0x50 [ 2003.137474] RIP: 0001:0xffffffffffffffff [ 2003.141510] RSP: 7e5d11e0:00007fff421f1040 EFLAGS: 7fff421f0e50 [ 2003.143397] Mem-Info: [ 2003.151876] active_anon:14976 inactive_anon:46573 isolated_anon:0 [ 2003.151876] active_file:1 inactive_file:20 isolated_file:0 [ 2003.151876] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2003.151876] slab_reclaimable:13103 slab_unreclaimable:112358 [ 2003.151876] mapped:52601 shmem:47892 pagetables:737 bounce:0 [ 2003.151876] free:25116 free_pcp:30 free_cma:0 [ 2003.185038] Node 0 active_anon:58448kB inactive_anon:133568kB active_file:36kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200176kB dirty:0kB writeback:0kB shmem:138496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2003.213908] Node 1 active_anon:1456kB inactive_anon:52724kB active_file:0kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10228kB dirty:0kB writeback:0kB shmem:53072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2003.241059] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:72kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2003.267542] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2003.272690] Node 0 DMA32 free:35724kB min:36200kB low:45248kB high:54296kB active_anon:58448kB inactive_anon:133568kB active_file:36kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7104kB pagetables:2672kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2003.321263] lowmem_reserve[]: 0 0 0 0 0 [ 2003.325437] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2003.362377] lowmem_reserve[]: 0 0 0 0 0 [ 2003.366394] Node 1 Normal free:53672kB min:53696kB low:67120kB high:80544kB active_anon:1456kB inactive_anon:52724kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:204kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2003.421730] lowmem_reserve[]: 0 0 0 0 0 [ 2003.425945] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 11068kB [ 2003.452139] Node 0 DMA32: 690*4kB (UME) 821*8kB (UME) 324*16kB (ME) 119*32kB (UME) 74*64kB (UM) 38*128kB (UM) 16*256kB (M) 7*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 35600kB [ 2003.483204] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2003.512125] Node 1 Normal: 252*4kB (ME) 194*8kB (ME) 139*16kB (UME) 44*32kB (ME) 38*64kB (UM) 13*128kB (M) 8*256kB (UM) 7*512kB (ME) 3*1024kB (ME) 1*2048kB (M) 8*4096kB (U) = 53808kB [ 2003.532149] Bluetooth: hci3 command 0x041b tx timeout [ 2003.561913] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2003.624609] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2003.644360] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2003.653256] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2003.661826] 47930 total pagecache pages [ 2003.682656] 0 pages in swap cache [ 2003.686127] Swap cache stats: add 0, delete 0, find 0/0 [ 2003.691479] Free swap = 0kB [ 2003.716641] Total swap = 0kB [ 2003.719720] 2097051 pages RAM [ 2003.752125] 0 pages HighMem/MovableOnly [ 2003.756132] 363841 pages reserved [ 2003.759575] 0 pages cma reserved [ 2003.768267] Out of memory (oom_kill_allocating_task): Kill process 7724 (systemd-journal) score 0 or sacrifice child [ 2003.784894] Killed process 7724 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1300kB [ 2003.813391] oom_reaper: reaped process 7724 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1520kB [ 2003.869063] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2003.892620] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2003.898276] CPU: 0 PID: 7967 Comm: syz-fuzzer Not tainted 4.14.227-syzkaller #0 [ 2003.905732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2003.915086] Call Trace: [ 2003.917673] dump_stack+0x1b2/0x281 [ 2003.921297] dump_header+0x178/0x82f [ 2003.925016] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2003.930110] ? ___ratelimit+0x2cd/0x530 [ 2003.934080] oom_kill_process.cold+0x10/0xb18 [ 2003.938593] out_of_memory+0xe3e/0x1190 [ 2003.942593] ? oom_killer_disable+0x1c0/0x1c0 [ 2003.947090] ? mutex_trylock+0x152/0x1a0 [ 2003.951151] __alloc_pages_nodemask+0x23e1/0x2720 [ 2003.956005] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2003.960865] alloc_pages_current+0x155/0x260 [ 2003.965274] filemap_fault+0xea3/0x1980 [ 2003.969403] ext4_filemap_fault+0x84/0xb0 [ 2003.973560] __do_fault+0xfa/0x380 [ 2003.977103] __handle_mm_fault+0x2497/0x4620 [ 2003.981551] ? vm_insert_page+0x7c0/0x7c0 [ 2003.985812] ? free_object+0xe4/0x240 [ 2003.989609] handle_mm_fault+0x391/0x860 [ 2003.993706] __do_page_fault+0x549/0xad0 [ 2003.997776] ? spurious_fault+0x640/0x640 [ 2004.001911] ? do_page_fault+0x60/0x500 [ 2004.005876] ? page_fault+0x2f/0x50 [ 2004.009737] page_fault+0x45/0x50 [ 2004.013228] RIP: 0000:0x940aec [ 2004.016402] RSP: 4e20:000000c00003df28 EFLAGS: 0043b6a0 [ 2004.017891] Mem-Info: [ 2004.027043] active_anon:14858 inactive_anon:46572 isolated_anon:0 [ 2004.027043] active_file:78 inactive_file:84 isolated_file:0 [ 2004.027043] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2004.027043] slab_reclaimable:13100 slab_unreclaimable:112355 [ 2004.027043] mapped:52242 shmem:47892 pagetables:715 bounce:0 [ 2004.027043] free:25112 free_pcp:6 free_cma:0 [ 2004.063816] Node 0 active_anon:57976kB inactive_anon:133564kB active_file:52kB inactive_file:248kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:198860kB dirty:0kB writeback:0kB shmem:138496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2004.091941] Node 1 active_anon:1456kB inactive_anon:52724kB active_file:36kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10308kB dirty:0kB writeback:0kB shmem:53072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2004.119582] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:72kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2004.146007] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2004.151049] Node 0 DMA32 free:35672kB min:36200kB low:45248kB high:54296kB active_anon:57976kB inactive_anon:133564kB active_file:60kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7072kB pagetables:2584kB bounce:0kB free_pcp:196kB local_pcp:120kB free_cma:0kB [ 2004.180612] lowmem_reserve[]: 0 0 0 0 0 [ 2004.185082] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2004.210782] lowmem_reserve[]: 0 0 0 0 0 [ 2004.222121] Node 1 Normal free:53088kB min:53696kB low:67120kB high:80544kB active_anon:1456kB inactive_anon:52724kB active_file:152kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:204kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2004.250678] lowmem_reserve[]: 0 0 0 0 0 [ 2004.255177] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 11068kB [ 2004.269320] Node 0 DMA32: 706*4kB (UME) 816*8kB (UME) 314*16kB (ME) 109*32kB (UME) 69*64kB (UM) 32*128kB (M) 19*256kB (UM) 8*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 36360kB [ 2004.285921] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2004.333923] Node 1 Normal: 252*4kB (ME) 195*8kB (UME) 139*16kB (UME) 45*32kB (UME) 37*64kB (M) 14*128kB (UM) 8*256kB (UM) 8*512kB (UME) 4*1024kB (UME) 2*2048kB (UM) 7*4096kB (U) = 53400kB [ 2004.403166] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2004.412029] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2004.435486] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2004.452113] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2004.460715] 47946 total pagecache pages [ 2004.495561] 0 pages in swap cache [ 2004.499026] Swap cache stats: add 0, delete 0, find 0/0 [ 2004.533922] Free swap = 0kB [ 2004.537020] Total swap = 0kB [ 2004.540120] 2097051 pages RAM [ 2004.561126] 0 pages HighMem/MovableOnly [ 2004.572006] 363841 pages reserved [ 2004.595756] 0 pages cma reserved [ 2004.599155] Out of memory (oom_kill_allocating_task): Kill process 7967 (syz-fuzzer) score 0 or sacrifice child [ 2004.641579] Killed process 7765 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2004.691250] oom_reaper: reaped process 7765 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2004.753630] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2004.770252] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2004.778103] CPU: 0 PID: 7969 Comm: syz-fuzzer Not tainted 4.14.227-syzkaller #0 [ 2004.785589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2004.795054] Call Trace: [ 2004.797760] dump_stack+0x1b2/0x281 [ 2004.801494] dump_header+0x178/0x82f [ 2004.805202] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2004.810565] ? ___ratelimit+0x2cd/0x530 [ 2004.814532] oom_kill_process.cold+0x10/0xb18 [ 2004.819015] out_of_memory+0xe3e/0x1190 [ 2004.823013] ? oom_killer_disable+0x1c0/0x1c0 [ 2004.827491] ? mutex_trylock+0x152/0x1a0 [ 2004.831530] __alloc_pages_nodemask+0x23e1/0x2720 [ 2004.836358] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2004.841186] alloc_pages_current+0x155/0x260 [ 2004.845592] filemap_fault+0xea3/0x1980 [ 2004.849551] ext4_filemap_fault+0x84/0xb0 [ 2004.853680] __do_fault+0xfa/0x380 [ 2004.857200] __handle_mm_fault+0x2497/0x4620 [ 2004.861665] ? vm_insert_page+0x7c0/0x7c0 [ 2004.865851] handle_mm_fault+0x391/0x860 [ 2004.869937] __do_page_fault+0x549/0xad0 [ 2004.873981] ? spurious_fault+0x640/0x640 [ 2004.878107] ? do_page_fault+0x60/0x500 [ 2004.882063] ? page_fault+0x2f/0x50 [ 2004.885674] page_fault+0x45/0x50 [ 2004.889107] RIP: 4b7a0:0xc000056360 [ 2004.892713] RSP: 2e800:000000c000039de0 EFLAGS: c000307b20 [ 2004.907112] Mem-Info: [ 2004.916615] active_anon:14819 inactive_anon:46572 isolated_anon:0 [ 2004.916615] active_file:165 inactive_file:234 isolated_file:32 [ 2004.916615] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2004.916615] slab_reclaimable:13100 slab_unreclaimable:112363 [ 2004.916615] mapped:43762 shmem:47892 pagetables:670 bounce:0 [ 2004.916615] free:25152 free_pcp:160 free_cma:0 [ 2004.953368] Node 0 active_anon:57872kB inactive_anon:133564kB active_file:528kB inactive_file:712kB unevictable:0kB isolated(anon):0kB isolated(file):240kB mapped:165008kB dirty:0kB writeback:0kB shmem:138496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2004.982697] Node 1 active_anon:1404kB inactive_anon:52724kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2005.010171] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:32kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2005.038817] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2005.044739] Node 0 DMA32 free:36592kB min:36200kB low:45248kB high:54296kB active_anon:57872kB inactive_anon:133564kB active_file:544kB inactive_file:520kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7040kB pagetables:2476kB bounce:0kB free_pcp:236kB local_pcp:108kB free_cma:0kB [ 2005.109775] lowmem_reserve[]: 0 0 0 0 0 [ 2005.115615] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2005.146422] lowmem_reserve[]: 0 0 0 0 0 [ 2005.150519] Node 1 Normal free:53460kB min:53696kB low:67120kB high:80544kB active_anon:1404kB inactive_anon:52724kB active_file:16kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:200kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2005.200832] lowmem_reserve[]: 0 0 0 0 0 [ 2005.207557] Node 0 DMA: 7*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 11124kB [ 2005.238457] Node 0 DMA32: 443*4kB (UME) 663*8kB (ME) 311*16kB (ME) 110*32kB (UME) 135*64kB (UM) 33*128kB (UM) 19*256kB (UM) 6*512kB (M) 3*1024kB (M) 0*2048kB 0*4096kB = 39444kB [ 2005.261541] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2005.282524] Node 1 Normal: 242*4kB (UME) 188*8kB (UME) 135*16kB (UME) 52*32kB (UME) 37*64kB (M) 14*128kB (UM) 8*256kB (UM) 8*512kB (UME) 4*1024kB (UME) 2*2048kB (UM) 7*4096kB (U) = 53464kB [ 2005.305431] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2005.316575] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2005.328871] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2005.339090] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2005.348627] 48161 total pagecache pages [ 2005.353301] 0 pages in swap cache [ 2005.357589] Swap cache stats: add 0, delete 0, find 0/0 [ 2005.366408] Free swap = 0kB [ 2005.369763] Total swap = 0kB [ 2005.378219] 2097051 pages RAM [ 2005.382684] 0 pages HighMem/MovableOnly [ 2005.403512] 363841 pages reserved [ 2005.408254] 0 pages cma reserved [ 2005.413045] Out of memory (oom_kill_allocating_task): Kill process 7969 (syz-fuzzer) score 0 or sacrifice child [ 2005.425094] Killed process 6506 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2005.465749] oom_reaper: reaped process 6506 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2006.036166] oom_reaper: reaped process 7735 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2006.054390] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 2006.077625] systemd-udevd cpuset=/ mems_allowed=0-1 [ 2006.086519] CPU: 0 PID: 4626 Comm: systemd-udevd Not tainted 4.14.227-syzkaller #0 [ 2006.094231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2006.103578] Call Trace: [ 2006.106169] dump_stack+0x1b2/0x281 [ 2006.109792] dump_header+0x178/0x82f [ 2006.113499] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2006.118600] ? ___ratelimit+0x2cd/0x530 [ 2006.122564] oom_kill_process.cold+0x10/0xb18 [ 2006.127039] ? lock_downgrade+0x740/0x740 [ 2006.131169] out_of_memory+0x2dc/0x1190 [ 2006.135172] ? oom_killer_disable+0x1c0/0x1c0 [ 2006.139647] ? mutex_trylock+0x152/0x1a0 [ 2006.143699] __alloc_pages_nodemask+0x23e1/0x2720 [ 2006.148757] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2006.153704] alloc_pages_current+0x155/0x260 [ 2006.158098] filemap_fault+0xea3/0x1980 [ 2006.162063] ext4_filemap_fault+0x84/0xb0 [ 2006.166199] __do_fault+0xfa/0x380 [ 2006.169719] __handle_mm_fault+0x2497/0x4620 [ 2006.174113] ? vm_insert_page+0x7c0/0x7c0 [ 2006.178367] ? cp_compat_stat+0x890/0x890 [ 2006.182501] ? task_work_run+0xfd/0x190 [ 2006.186464] handle_mm_fault+0x391/0x860 [ 2006.190507] __do_page_fault+0x549/0xad0 [ 2006.194548] ? spurious_fault+0x640/0x640 [ 2006.198702] ? do_page_fault+0x60/0x500 [ 2006.202654] ? page_fault+0x2f/0x50 [ 2006.206261] page_fault+0x45/0x50 [ 2006.209736] RIP: bd948010: (null) [ 2006.213948] RSP: bcf81e8e:00007ffc68135080 EFLAGS: 5570bd948100 [ 2006.219201] Mem-Info: [ 2006.227377] syz-executor.0: vmalloc: allocation failure, allocated 1645035520 of 2147487744 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2006.233921] active_anon:14178 inactive_anon:46572 isolated_anon:0 [ 2006.233921] active_file:16 inactive_file:18 isolated_file:0 [ 2006.233921] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2006.233921] slab_reclaimable:13101 slab_unreclaimable:111294 [ 2006.233921] mapped:34817 shmem:47892 pagetables:621 bounce:0 [ 2006.233921] free:13955 free_pcp:115 free_cma:0 [ 2006.248829] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2006.287754] Node 0 active_anon:55648kB inactive_anon:133564kB active_file:56kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129028kB dirty:0kB writeback:0kB shmem:138496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2006.288968] CPU: 0 PID: 7735 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 2006.316886] Node 1 active_anon:1064kB inactive_anon:52724kB active_file:8kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2006.324860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2006.324866] Call Trace: [ 2006.324885] dump_stack+0x1b2/0x281 [ 2006.324898] warn_alloc.cold+0x96/0x1cc [ 2006.324908] ? zone_watermark_ok_safe+0x220/0x220 [ 2006.324929] __vmalloc_area_node+0x48a/0x680 [ 2006.352007] Node 0 [ 2006.361334] ? __vmalloc_node_range+0x150/0x150 [ 2006.361341] ? __get_vm_area_node+0x27d/0x340 [ 2006.361352] __vmalloc_node_range+0xbe/0x150 [ 2006.363937] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2006.367529] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2006.371474] lowmem_reserve[]: [ 2006.376298] vmalloc_user+0x47/0xa0 [ 2006.376308] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2006.376315] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2006.376323] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2006.380707] 0 [ 2006.382928] __vb2_queue_alloc+0x47a/0xd90 [ 2006.382948] vb2_core_create_bufs+0x279/0x5a0 [ 2006.387585] 2717 [ 2006.392062] ? __vb2_queue_free+0x7a0/0x7a0 [ 2006.396546] 2718 [ 2006.422028] ? futex_wait+0x42f/0x5a0 [ 2006.422038] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2006.422049] ? trace_hardirqs_on+0x10/0x10 [ 2006.427406] 2718 [ 2006.430780] vb2_create_bufs+0x2e1/0x5b0 [ 2006.434396] 2718 [ 2006.438693] ? vb2_thread_start+0x310/0x310 [ 2006.448173] ? futex_wait+0x42f/0x5a0 [ 2006.449948] Node 0 [ 2006.454261] v4l_create_bufs+0xa4/0x150 [ 2006.454275] __video_do_ioctl+0x65b/0x6a0 [ 2006.458758] DMA32 free:18012kB min:36200kB low:45248kB high:54296kB active_anon:55648kB inactive_anon:133564kB active_file:56kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7008kB pagetables:2320kB bounce:0kB free_pcp:336kB local_pcp:120kB free_cma:0kB [ 2006.460821] ? video_ioctl2+0x30/0x30 [ 2006.465187] lowmem_reserve[]: [ 2006.467237] ? __might_fault+0x177/0x1b0 [ 2006.471019] 0 [ 2006.476366] ? video_ioctl2+0x30/0x30 [ 2006.476374] video_usercopy+0xfd/0xe70 [ 2006.476388] ? v4l_g_ctrl+0x390/0x390 [ 2006.476397] ? lock_downgrade+0x740/0x740 [ 2006.476406] ? trace_hardirqs_on+0x10/0x10 [ 2006.476416] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2006.480627] 0 [ 2006.482672] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2006.482681] ? finish_task_switch+0x178/0x610 [ 2006.482690] ? finish_task_switch+0x14d/0x610 [ 2006.486725] 0 [ 2006.488773] ? switch_mm_irqs_off+0x601/0xeb0 [ 2006.493081] 0 [ 2006.496854] v4l2_ioctl+0x1bb/0x2f0 [ 2006.499061] 0 [ 2006.503018] ? v4l2_open+0x2f0/0x2f0 [ 2006.503029] do_vfs_ioctl+0x75a/0xff0 [ 2006.503041] ? ioctl_preallocate+0x1a0/0x1a0 [ 2006.535524] ? lock_downgrade+0x740/0x740 [ 2006.535538] ? __fget+0x225/0x360 [ 2006.535546] ? do_vfs_ioctl+0xff0/0xff0 [ 2006.535560] ? security_file_ioctl+0x83/0xb0 [ 2006.539342] Node 0 [ 2006.542429] SyS_ioctl+0x7f/0xb0 [ 2006.542437] ? do_vfs_ioctl+0xff0/0xff0 [ 2006.542454] do_syscall_64+0x1d5/0x640 [ 2006.542469] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2006.546516] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2006.548309] RIP: 0033:0x466459 [ 2006.552102] lowmem_reserve[]: [ 2006.555953] RSP: 002b:00007f09f29f8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2006.559738] 0 [ 2006.563893] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2006.563898] RDX: 0000000020001880 RSI: 00000000c100565c RDI: 0000000000000003 [ 2006.563902] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2006.563907] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2006.563912] R13: 00007ffd96b9697f R14: 00007f09f29f8300 R15: 0000000000022000 [ 2006.572702] Mem-Info: [ 2006.584085] 0 [ 2006.591181] active_anon:14178 inactive_anon:46572 isolated_anon:0 [ 2006.591181] active_file:16 inactive_file:18 isolated_file:0 [ 2006.591181] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2006.591181] slab_reclaimable:13101 slab_unreclaimable:111294 [ 2006.591181] mapped:34817 shmem:47892 pagetables:621 bounce:0 [ 2006.591181] free:13955 free_pcp:115 free_cma:0 [ 2006.603765] 0 [ 2006.613293] Node 0 active_anon:55648kB inactive_anon:133564kB active_file:56kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129028kB dirty:0kB writeback:0kB shmem:138496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2006.622378] 0 [ 2006.628924] Node 1 active_anon:1064kB inactive_anon:52724kB active_file:8kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2006.631887] 0 [ 2006.635928] Node 0 [ 2006.658043] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2006.689056] Node 1 [ 2006.696605] lowmem_reserve[]: [ 2006.704838] Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:1064kB inactive_anon:52724kB active_file:8kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:160kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 2006.707023] 0 [ 2006.725119] lowmem_reserve[]: [ 2006.736352] 2717 [ 2006.780244] 0 [ 2006.807653] 2718 [ 2006.839778] 0 [ 2006.872393] 2718 [ 2006.910214] 0 [ 2006.917862] 2718 [ 2006.921001] 0 [ 2006.922686] Node 0 DMA32 free:18012kB min:36200kB low:45248kB high:54296kB active_anon:55648kB inactive_anon:133564kB active_file:44kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7008kB pagetables:2320kB bounce:0kB free_pcp:336kB local_pcp:216kB free_cma:0kB [ 2006.922707] lowmem_reserve[]: 0 0 0 [ 2006.928178] 0 [ 2006.960491] 0 0 [ 2006.964534] Node 0 [ 2006.964537] Node 0 DMA: [ 2006.966788] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2006.966790] 0*4kB 0*8kB [ 2006.969548] lowmem_reserve[]: 0 0 0 0 0 [ 2007.001209] 1*16kB [ 2007.003078] Node 1 Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:1064kB inactive_anon:52724kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:160kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 2007.005365] (U) [ 2007.034386] lowmem_reserve[]: 0 0 0 0 0 [ 2007.038334] 0*32kB [ 2007.040349] Node 0 [ 2007.040352] 1*64kB (U) [ 2007.042671] DMA: 0*4kB 0*8kB [ 2007.046653] 1*128kB [ 2007.048709] 1*16kB [ 2007.051811] (U) [ 2007.055589] (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10960kB [ 2007.060410] 0*256kB [ 2007.068719] Node 0 DMA32: 599*4kB (UME) 738*8kB (UME) 251*16kB (UME) 54*32kB (UME) 28*64kB (UM) [ 2007.071085] 1*512kB (U) [ 2007.080713] 11*128kB (UM) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18012kB [ 2007.083570] 0*1024kB [ 2007.091251] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2007.096764] 1*2048kB [ 2007.104510] Node 1 Normal: 240*4kB (UME) 188*8kB (UME) 136*16kB (UME) 52*32kB (UME) 37*64kB (UM) 10*128kB (M) 8*256kB (M) 9*512kB (UME) 4*1024kB (UME) 1*2048kB (M) 1*4096kB (U) = 26848kB [ 2007.107520] (M) [ 2007.123943] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2007.127207] 2*4096kB (M) = 10960kB [ 2007.135520] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2007.138381] Node 0 [ 2007.147007] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2007.147014] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2007.147018] 47926 total pagecache pages [ 2007.147027] 0 pages in swap cache [ 2007.147032] Swap cache stats: add 0, delete 0, find 0/0 [ 2007.147034] Free swap = 0kB [ 2007.147038] Total swap = 0kB [ 2007.147046] 2097051 pages RAM [ 2007.152652] DMA32: [ 2007.158136] 0 pages HighMem/MovableOnly [ 2007.171503] 599*4kB [ 2007.174461] 363841 pages reserved [ 2007.179569] (UME) [ 2007.182627] 0 pages cma reserved [ 2007.210209] 738*8kB (UME) 251*16kB (UME) 54*32kB (UME) 28*64kB (UM) 11*128kB (UM) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18012kB [ 2007.227666] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2007.238543] Node 1 Normal: 240*4kB (UME) 188*8kB (UME) 136*16kB (UME) 52*32kB (UME) 37*64kB (UM) 10*128kB (M) 8*256kB (M) 9*512kB (UME) 4*1024kB (UME) 1*2048kB (M) 1*4096kB (U) = 26848kB [ 2007.259430] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2007.268361] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2007.281225] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2007.290941] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2007.307220] 47926 total pagecache pages [ 2007.311294] 0 pages in swap cache [ 2007.314818] Swap cache stats: add 0, delete 0, find 0/0 [ 2007.320186] Free swap = 0kB [ 2007.327360] Total swap = 0kB [ 2007.330416] 2097051 pages RAM [ 2007.333647] 0 pages HighMem/MovableOnly [ 2007.337615] 363841 pages reserved [ 2007.341059] 0 pages cma reserved [ 2007.348180] Out of memory: Kill process 7966 (syz-fuzzer) score 5 or sacrifice child [ 2007.356223] Killed process 7156 (syz-executor.4) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 2007.396447] oom_reaper: reaped process 7156 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2007.432840] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2007.446214] systemd cpuset=/ mems_allowed=0-1 [ 2007.450823] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.227-syzkaller #0 [ 2007.457747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2007.467116] Call Trace: [ 2007.469708] dump_stack+0x1b2/0x281 [ 2007.473336] dump_header+0x178/0x82f [ 2007.477052] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2007.482156] ? ___ratelimit+0x2cd/0x530 [ 2007.486134] oom_kill_process.cold+0x10/0xb18 [ 2007.490631] ? lock_downgrade+0x740/0x740 [ 2007.494788] out_of_memory+0x2dc/0x1190 [ 2007.498768] ? oom_killer_disable+0x1c0/0x1c0 [ 2007.503263] ? mutex_trylock+0x152/0x1a0 [ 2007.507330] __alloc_pages_nodemask+0x23e1/0x2720 [ 2007.512259] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2007.517125] alloc_pages_current+0x155/0x260 [ 2007.521546] filemap_fault+0xea3/0x1980 [ 2007.525635] ext4_filemap_fault+0x84/0xb0 [ 2007.529790] __do_fault+0xfa/0x380 [ 2007.533334] __handle_mm_fault+0x2497/0x4620 [ 2007.537747] ? vm_insert_page+0x7c0/0x7c0 [ 2007.541933] ? retint_kernel+0x2d/0x2d [ 2007.549750] handle_mm_fault+0x391/0x860 [ 2007.553822] __do_page_fault+0x549/0xad0 [ 2007.557895] ? spurious_fault+0x640/0x640 [ 2007.562047] ? do_page_fault+0x60/0x500 [ 2007.566023] ? page_fault+0x2f/0x50 [ 2007.569660] page_fault+0x45/0x50 [ 2007.573110] RIP: c8625ca4: (null) [ 2007.577322] RSP: fe8e6220:00007ffcfe8e6210 EFLAGS: 7ffcfe8e61c0 [ 2007.584917] Mem-Info: [ 2007.599190] active_anon:14140 inactive_anon:46572 isolated_anon:0 [ 2007.599190] active_file:14 inactive_file:20 isolated_file:0 [ 2007.599190] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2007.599190] slab_reclaimable:13101 slab_unreclaimable:111294 [ 2007.599190] mapped:26113 shmem:47892 pagetables:576 bounce:0 [ 2007.599190] free:22351 free_pcp:351 free_cma:0 [ 2007.633119] Node 0 active_anon:55496kB inactive_anon:133564kB active_file:40kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:94212kB dirty:0kB writeback:0kB shmem:138496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2007.644180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2007.662679] Node 1 active_anon:1064kB inactive_anon:52724kB active_file:16kB inactive_file:412kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2007.692196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2007.701217] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2007.738827] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2007.739670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2007.745745] Node 0 DMA32 free:31756kB min:36200kB low:45248kB high:54296kB active_anon:55496kB inactive_anon:133564kB active_file:40kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:6976kB pagetables:2140kB bounce:0kB free_pcp:840kB local_pcp:716kB free_cma:0kB [ 2007.761164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2007.789633] lowmem_reserve[]: 0 0 0 0 0 [ 2007.808610] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2007.850312] device bridge_slave_1 left promiscuous mode [ 2007.851065] lowmem_reserve[]: 0 0 0 0 0 [ 2007.864626] Node 1 Normal free:297248kB min:53696kB low:67120kB high:80544kB active_anon:1240kB inactive_anon:52724kB active_file:500kB inactive_file:7580kB unevictable:0kB writepending:160kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:232kB bounce:0kB free_pcp:848kB local_pcp:104kB free_cma:0kB [ 2007.872835] bridge0: port 2(bridge_slave_1) entered disabled state [ 2007.896314] lowmem_reserve[]: 0 0 0 0 0 [ 2007.923739] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10960kB [ 2007.938787] device bridge_slave_0 left promiscuous mode [ 2007.953322] bridge0: port 1(bridge_slave_0) entered disabled state [ 2007.963726] Node 0 DMA32: 3006*4kB (UME) 1003*8kB (UME) 427*16kB (UME) 74*32kB (UME) 29*64kB (UM) 11*128kB (UM) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33280kB [ 2007.990575] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2008.001611] device veth1_macvtap left promiscuous mode [ 2008.001645] device veth0_macvtap left promiscuous mode [ 2008.001685] device veth1_vlan left promiscuous mode [ 2008.001725] device veth0_vlan left promiscuous mode [ 2008.023853] Node 1 Normal: 34*4kB (UME) 13*8kB (UME) 17*16kB (UME) 22*32kB (UME) 22*64kB (U) 31*128kB (UM) 31*256kB (UM) 35*512kB (UME) 27*1024kB (UME) 87*2048kB (UM) 45*4096kB (U) = 422592kB [ 2008.043013] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2008.053933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2008.063254] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2008.079222] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2008.088151] 50495 total pagecache pages [ 2008.092755] 0 pages in swap cache [ 2008.096239] Swap cache stats: add 0, delete 0, find 0/0 [ 2008.101747] Free swap = 0kB [ 2008.109509] Total swap = 0kB [ 2008.113099] 2097051 pages RAM [ 2008.116207] 0 pages HighMem/MovableOnly [ 2008.120571] 363841 pages reserved [ 2008.128429] 0 pages cma reserved [ 2008.131933] Out of memory: Kill process 7966 (syz-fuzzer) score 5 or sacrifice child [ 2008.140420] Killed process 31594 (syz-executor.5) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 2008.208313] device hsr_slave_1 left promiscuous mode [ 2008.225819] device hsr_slave_0 left promiscuous mode [ 2008.245244] team0 (unregistering): Port device team_slave_1 removed [ 2008.261736] team0 (unregistering): Port device team_slave_0 removed [ 2008.272502] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2008.284642] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2008.300178] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2008.324385] bond0 (unregistering): Released all slaves [ 2008.341787] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2008.371789] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2008.387623] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2008.395233] systemd[1]: Stopped Journal Service. [ 2008.410195] systemd[1]: Starting Journal Service... [ 2008.455462] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 2008.605432] systemd-journald[8051]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2008.610819] systemd[1]: Started Load/Save RF Kill Switch Status. [ 2009.326249] systemd[1]: Started Journal Service. [ 2010.864781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2010.871536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2010.884003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2010.890732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2010.905675] device bridge_slave_1 left promiscuous mode [ 2010.911265] bridge0: port 2(bridge_slave_1) entered disabled state [ 2010.921088] device bridge_slave_0 left promiscuous mode [ 2010.928695] bridge0: port 1(bridge_slave_0) entered disabled state [ 2010.940690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2010.951090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2010.961180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2010.970843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2010.981015] device bridge_slave_1 left promiscuous mode [ 2010.989708] bridge0: port 2(bridge_slave_1) entered disabled state [ 2010.999317] device bridge_slave_0 left promiscuous mode [ 2011.007962] bridge0: port 1(bridge_slave_0) entered disabled state [ 2011.019419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2011.028942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2011.039212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2011.048913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2011.059102] device bridge_slave_1 left promiscuous mode [ 2011.067935] bridge0: port 2(bridge_slave_1) entered disabled state [ 2011.077395] device bridge_slave_0 left promiscuous mode [ 2011.085861] bridge0: port 1(bridge_slave_0) entered disabled state [ 2011.099599] device veth1_macvtap left promiscuous mode [ 2011.107806] device veth0_macvtap left promiscuous mode [ 2011.115268] device veth1_vlan left promiscuous mode [ 2011.120514] device veth0_vlan left promiscuous mode [ 2011.129142] device veth1_macvtap left promiscuous mode [ 2011.138244] device veth0_macvtap left promiscuous mode [ 2011.146608] device veth1_vlan left promiscuous mode [ 2011.151693] device veth0_vlan left promiscuous mode [ 2011.160268] device veth1_macvtap left promiscuous mode [ 2011.168589] device veth0_macvtap left promiscuous mode [ 2011.176824] device veth1_vlan left promiscuous mode [ 2011.181892] device veth0_vlan left promiscuous mode [ 2011.427297] device hsr_slave_1 left promiscuous mode [ 2011.436737] device hsr_slave_0 left promiscuous mode [ 2011.461515] team0 (unregistering): Port device team_slave_1 removed [ 2011.477379] team0 (unregistering): Port device team_slave_0 removed [ 2011.489979] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2011.505777] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2011.545271] bond0 (unregistering): Released all slaves [ 2011.598339] device hsr_slave_1 left promiscuous mode [ 2011.610141] device hsr_slave_0 left promiscuous mode [ 2011.630386] team0 (unregistering): Port device team_slave_1 removed [ 2011.641716] team0 (unregistering): Port device team_slave_0 removed [ 2011.656785] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2011.674210] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2011.713785] bond0 (unregistering): Released all slaves [ 2011.769562] device hsr_slave_1 left promiscuous mode [ 2011.779053] device hsr_slave_0 left promiscuous mode [ 2011.797485] team0 (unregistering): Port device team_slave_1 removed [ 2011.809502] team0 (unregistering): Port device team_slave_0 removed [ 2011.820210] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2011.834119] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2011.871297] bond0 (unregistering): Released all slaves 05:09:26 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)={0x1ff, 0x3, 0x4, 0x4, 0x8b3, {0x0, 0x2710}, {0x3, 0x2, 0xff, 0x0, 0x0, 0x9, "04281676"}, 0x9, 0x1, @fd=0xffffffffffffffff, 0x5}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x7fffffff, 0x0, 0x4, 0x8, 0x4, {0x0, 0x2710}, {0x5, 0x0, 0x8d, 0xde, 0x1f, 0x7, "985b9514"}, 0x85, 0x1, @fd=r1, 0x6}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, [], 0x1}, 0x1}, @in6={0xa, 0x4e23, 0x3, @private1, 0x7}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e20, 0xfffffffb, @private0, 0x6}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e23, 0x1, @local, 0x2}, @in={0x2, 0x4e22, @private=0xa010100}, @in={0x2, 0x4e20, @private=0xa010101}], 0xc0) 05:09:26 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @empty}, &(0x7f0000000300)=0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x4000}) 05:09:26 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000280)={0x3, @win={{0x40, 0xe50c, 0xffffffff, 0x3}, 0x6, 0xa8, &(0x7f00000000c0)={{0xfff, 0x9, 0x3, 0x3}, &(0x7f0000000080)={{0xffff8000, 0x0, 0x5, 0x6d}, &(0x7f0000000040)={{0x20, 0x0, 0x0, 0x8}}}}, 0x7fff, &(0x7f0000000100)="fde2386cb55c6d2b3a7ad35993c765291823f18ffd10cd524c42b5a1a9407207a11a0e5ce7df328694da12b875f39e6d102334b8d977f5765a05b77c0a1832a12f8da7a7636d1675b4dea8b78b5729662f376493c7a1e4f961084376365c5f8ec4d298dca53ba2557b8ee4e92e2e7f5d8660e7deecbf4f7fa90d87f29e33e3dc4062ecf51c80", 0x1}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x3, @sdr={0x31435750, 0xff}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000001c0)={0x100, 0x1, 0x4, 0x4000, 0x3, {0x77359400}, {0x1, 0x8, 0x5, 0x5, 0x5, 0x9, "c8d8a083"}, 0x0, 0x3, @offset=0x9, 0x401}) 05:09:26 executing program 1: ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x87, 0x9, 0x8, "2220ec40f0e4c2a106df1125a25f7c88fc7aaf0491ac97c6e92ca3182fc25ae201552ed9b672953b23582934917e54613571590851d58b61f8c590ec6b43ead145cb442b382cc573229b90e8d428743504f78e0f4af1fdbb9abdc609f029274017cbbfb525240efa34ba3514021388fd8601c3fe5ece3d50dd2762cf3938d38e784607d4f5fc05"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @win={{0x0, 0x9}, 0x0, 0x80000000, 0x0, 0x200, 0x0}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x1, 0x8, 0x20, 0x80000, r1}) 05:09:26 executing program 0: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:09:26 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247, 0x0, 0x0, [{}, {}, {0x5}, {}, {}, {}, {0x0, 0x400}], 0x0, 0x0, 0x2}}) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) 05:09:26 executing program 0: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:09:26 executing program 0: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:09:26 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:09:26 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000240)={0x1, @set_csb_data={{0xc76, 0xff}, {0x8, 0x0, 0x1, "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"}}}, 0x103) r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) 05:09:26 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x32315659, 0x0, 0x0, [], 0x0, 0x0, 0x2}}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0x2, 0x3, 0x4, 0x100000, 0x6, {r1, r2/1000+10000}, {0x2, 0x0, 0x6, 0x71, 0x4, 0x7f, "e7bd2ed9"}, 0x40000000, 0x3, @planes=&(0x7f0000000040)={0x61, 0x2, @fd=r3, 0x468}, 0x4}) 05:09:26 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) [ 2014.757220] IPVS: ftp: loaded support on port[0] = 21 [ 2014.885816] IPVS: ftp: loaded support on port[0] = 21 [ 2014.996950] chnl_net:caif_netlink_parms(): no params data found [ 2015.023635] IPVS: ftp: loaded support on port[0] = 21 [ 2015.116657] chnl_net:caif_netlink_parms(): no params data found [ 2015.171054] IPVS: ftp: loaded support on port[0] = 21 [ 2015.205107] bridge0: port 1(bridge_slave_0) entered blocking state [ 2015.211537] bridge0: port 1(bridge_slave_0) entered disabled state [ 2015.219320] device bridge_slave_0 entered promiscuous mode [ 2015.228867] bridge0: port 2(bridge_slave_1) entered blocking state [ 2015.235845] bridge0: port 2(bridge_slave_1) entered disabled state [ 2015.244327] device bridge_slave_1 entered promiscuous mode [ 2015.291008] bridge0: port 1(bridge_slave_0) entered blocking state [ 2015.297662] bridge0: port 1(bridge_slave_0) entered disabled state [ 2015.305458] device bridge_slave_0 entered promiscuous mode [ 2015.315226] bridge0: port 2(bridge_slave_1) entered blocking state [ 2015.321578] bridge0: port 2(bridge_slave_1) entered disabled state [ 2015.329269] device bridge_slave_1 entered promiscuous mode [ 2015.336901] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2015.345858] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2015.381237] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2015.389672] team0: Port device team_slave_0 added [ 2015.411125] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2015.419324] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2015.427255] team0: Port device team_slave_1 added [ 2015.462294] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2015.511824] chnl_net:caif_netlink_parms(): no params data found [ 2015.521451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2015.528999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2015.556257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2015.573462] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2015.580828] team0: Port device team_slave_0 added [ 2015.606884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2015.613567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2015.638853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2015.650362] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2015.659362] team0: Port device team_slave_1 added [ 2015.679420] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2015.718179] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2015.746737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2015.753101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2015.780093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2015.792590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2015.798847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2015.824150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2015.840902] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2015.857173] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2015.876049] chnl_net:caif_netlink_parms(): no params data found [ 2015.898075] device hsr_slave_0 entered promiscuous mode [ 2015.904007] device hsr_slave_1 entered promiscuous mode [ 2015.913654] device hsr_slave_0 entered promiscuous mode [ 2015.920095] device hsr_slave_1 entered promiscuous mode [ 2015.927127] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2015.944042] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2015.951174] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2015.971337] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2016.010991] bridge0: port 1(bridge_slave_0) entered blocking state [ 2016.019531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2016.028204] device bridge_slave_0 entered promiscuous mode [ 2016.039251] bridge0: port 2(bridge_slave_1) entered blocking state [ 2016.047047] bridge0: port 2(bridge_slave_1) entered disabled state [ 2016.054754] device bridge_slave_1 entered promiscuous mode [ 2016.131645] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2016.161719] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2016.194789] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2016.201900] team0: Port device team_slave_0 added [ 2016.218712] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2016.226213] team0: Port device team_slave_1 added [ 2016.237561] bridge0: port 1(bridge_slave_0) entered blocking state [ 2016.244174] bridge0: port 1(bridge_slave_0) entered disabled state [ 2016.251430] device bridge_slave_0 entered promiscuous mode [ 2016.272446] bridge0: port 2(bridge_slave_1) entered blocking state [ 2016.278967] bridge0: port 2(bridge_slave_1) entered disabled state [ 2016.287039] device bridge_slave_1 entered promiscuous mode [ 2016.313643] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2016.328816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2016.335392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2016.362181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2016.378887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2016.386470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2016.412491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2016.434672] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2016.443123] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2016.451202] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2016.460965] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2016.474537] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2016.499332] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2016.507029] team0: Port device team_slave_0 added [ 2016.512927] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2016.520150] team0: Port device team_slave_1 added [ 2016.547901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2016.554279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2016.580335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2016.597588] device hsr_slave_0 entered promiscuous mode [ 2016.603447] device hsr_slave_1 entered promiscuous mode [ 2016.609602] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2016.618611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2016.625256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2016.650677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2016.672365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2016.678673] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2016.692044] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2016.708474] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2016.723228] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2016.758183] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2016.767617] device hsr_slave_0 entered promiscuous mode [ 2016.773904] device hsr_slave_1 entered promiscuous mode [ 2016.780040] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2016.787615] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2016.797312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2016.805215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2016.825018] Bluetooth: hci0 command 0x0409 tx timeout [ 2016.837548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2016.844870] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2016.850939] 8021q: adding VLAN 0 to HW filter on device team0 [ 2016.880228] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2016.892233] Bluetooth: hci3 command 0x0409 tx timeout [ 2016.897487] Bluetooth: hci5 command 0x0409 tx timeout [ 2016.899555] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2016.909573] Bluetooth: hci4 command 0x0409 tx timeout [ 2016.918199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2016.926479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2016.937313] bridge0: port 1(bridge_slave_0) entered blocking state [ 2016.944190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2016.951719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2016.961444] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2016.984756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2016.991719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2017.001623] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2017.008057] 8021q: adding VLAN 0 to HW filter on device team0 [ 2017.030007] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2017.040110] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2017.047825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2017.055891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2017.063931] bridge0: port 2(bridge_slave_1) entered blocking state [ 2017.070388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2017.077616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2017.091015] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2017.103193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2017.110916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2017.119639] bridge0: port 1(bridge_slave_0) entered blocking state [ 2017.126206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2017.133680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2017.149747] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2017.158833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2017.167638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2017.175364] bridge0: port 2(bridge_slave_1) entered blocking state [ 2017.181727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2017.195215] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2017.203788] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2017.214942] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2017.226227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2017.236474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2017.246903] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2017.256767] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2017.264988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2017.273102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2017.280803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2017.289282] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2017.298788] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2017.308359] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2017.319512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2017.327521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2017.335403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2017.343602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2017.351158] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2017.361129] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2017.374507] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2017.385013] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2017.393673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2017.401188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2017.408862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2017.417740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2017.429735] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2017.441058] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2017.449604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2017.457522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2017.465357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2017.473347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2017.483333] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2017.489353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2017.501262] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2017.520929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2017.533421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2017.540910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2017.550970] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2017.558035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2017.571474] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2017.582788] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2017.591731] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2017.600058] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2017.607619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2017.618328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2017.642485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2017.652792] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2017.661382] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2017.668679] 8021q: adding VLAN 0 to HW filter on device team0 [ 2017.677126] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2017.684258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2017.691772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2017.700039] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2017.708744] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2017.717853] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2017.724846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2017.733479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2017.741076] bridge0: port 1(bridge_slave_0) entered blocking state [ 2017.747571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2017.755156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2017.762164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2017.769344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2017.781225] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2017.790508] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2017.801159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2017.809734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2017.818405] bridge0: port 2(bridge_slave_1) entered blocking state [ 2017.824825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2017.831870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2017.839104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2017.849309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2017.858381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2017.868732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2017.879887] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2017.887786] 8021q: adding VLAN 0 to HW filter on device team0 [ 2017.896654] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2017.906117] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2017.914437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2017.926564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2017.934586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2017.945554] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2017.954187] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2017.961413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2017.969602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2017.980534] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2017.990681] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2018.001230] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2018.009703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2018.023147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2018.030718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2018.039687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2018.048212] bridge0: port 1(bridge_slave_0) entered blocking state [ 2018.054745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2018.062908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2018.071431] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2018.082726] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2018.091011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2018.100092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2018.108633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2018.116843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2018.125124] bridge0: port 2(bridge_slave_1) entered blocking state [ 2018.131474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2018.141248] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2018.153324] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2018.176462] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2018.185771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2018.194644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2018.206065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2018.216766] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2018.226031] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2018.237068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2018.248021] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2018.257250] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2018.269800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2018.277154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2018.288332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2018.296583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2018.303400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2018.310177] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2018.319480] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2018.328212] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2018.338834] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2018.347465] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2018.354637] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2018.361815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2018.370884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2018.379521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2018.388288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2018.399498] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2018.414834] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2018.426210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2018.435158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2018.444265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2018.451802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2018.459940] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2018.467055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2018.476516] device veth0_vlan entered promiscuous mode [ 2018.491260] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2018.504766] device veth1_vlan entered promiscuous mode [ 2018.510734] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2018.518848] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2018.528107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2018.536106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2018.548201] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2018.555759] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2018.563146] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2018.572647] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2018.583120] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2018.590115] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2018.597643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2018.605682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2018.613320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2018.620140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2018.628155] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2018.634873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2018.642377] device veth0_vlan entered promiscuous mode [ 2018.665980] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2018.674310] device veth1_vlan entered promiscuous mode [ 2018.680190] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2018.688086] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2018.698692] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2018.708743] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2018.718520] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2018.726052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2018.733545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2018.744387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2018.756595] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2018.766226] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2018.777581] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2018.789163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2018.797473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2018.807949] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2018.816675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2018.829495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2018.839839] device veth0_macvtap entered promiscuous mode [ 2018.846379] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2018.857242] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2018.868448] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2018.882212] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2018.882655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2018.897589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2018.905708] Bluetooth: hci0 command 0x041b tx timeout [ 2018.908044] device veth1_macvtap entered promiscuous mode [ 2018.918477] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2018.928806] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2018.937617] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2018.945304] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2018.955800] device veth0_macvtap entered promiscuous mode [ 2018.966605] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2018.973444] Bluetooth: hci3 command 0x041b tx timeout [ 2018.973723] Bluetooth: hci4 command 0x041b tx timeout [ 2018.984294] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2018.985959] device veth0_vlan entered promiscuous mode [ 2018.994369] Bluetooth: hci5 command 0x041b tx timeout [ 2019.003533] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2019.013928] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2019.020965] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2019.028718] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2019.036649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2019.044120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2019.052343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2019.059210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2019.068826] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2019.081537] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2019.090480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2019.098998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2019.108890] device veth1_macvtap entered promiscuous mode [ 2019.116199] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2019.124801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2019.135330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2019.145054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2019.155511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2019.165853] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2019.173122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2019.183210] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2019.190301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2019.200681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2019.210709] device veth1_vlan entered promiscuous mode [ 2019.224286] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2019.242708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2019.252674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2019.261764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2019.273196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2019.283677] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2019.290578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2019.300768] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2019.308667] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2019.315671] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2019.326311] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2019.334406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2019.344807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2019.357937] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2019.367458] device veth0_vlan entered promiscuous mode [ 2019.376864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2019.388253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2019.397419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2019.407175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2019.416353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2019.426115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2019.436331] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2019.443351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2019.449978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2019.458177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2019.466645] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2019.474763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2019.483835] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2019.490715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2019.502557] device veth1_vlan entered promiscuous mode [ 2019.508446] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2019.517293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2019.529926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2019.540038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2019.551986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2019.561269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2019.571965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2019.582448] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2019.589417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2019.610591] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2019.617787] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2019.625779] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2019.634593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2019.642558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2019.684888] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2019.695996] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2019.714934] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2019.722756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2019.730437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2019.748854] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2019.758524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2019.767036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2019.776608] device veth0_macvtap entered promiscuous mode [ 2019.789782] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2019.806623] device veth0_macvtap entered promiscuous mode [ 2019.813705] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2019.822306] device veth1_macvtap entered promiscuous mode [ 2019.828575] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2019.837073] device veth1_macvtap entered promiscuous mode [ 2019.843886] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2019.854594] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2019.865036] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2019.879601] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2019.889296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2019.899870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2019.911979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2019.921696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2019.934141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2019.943965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2019.953474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2019.963761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2019.974067] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2019.981518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2019.994778] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2020.004350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2020.011554] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2020.026481] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2020.034123] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2020.041314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2020.049991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2020.060103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2020.071230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.080905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2020.091616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.102644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2020.112834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.122231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2020.132484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.143130] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2020.150125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2020.163491] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2020.171210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2020.185564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2020.198721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.209760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2020.220682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.230632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2020.241174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.250775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2020.261067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.270626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2020.280767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.291018] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2020.298634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2020.307842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2020.315854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2020.333649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2020.348516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.358437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2020.368360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.377703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2020.387703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.397373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2020.407239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.417080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2020.427048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.437214] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2020.444663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2020.454727] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2020.463892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 05:09:34 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x800, 0x2) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0xe8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000200), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0x100}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffff00, 0xffffff00, 0xb, 0xf, {@mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@random="e117ebbcfa5a", {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x6, 0x5, 0x253a, 0x6, 0x1f, 0x6, 'team_slave_0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x0, 0x48}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @loopback, @loopback, 0x1c, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x100, 0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000480)={0x17f, 0x2, 0x4, 0x800, 0x1, {r6, r7/1000+10000}, {0x2, 0x8, 0x3, 0x1, 0xff, 0x1f, "4af1a4c2"}, 0x6, 0x3, @planes=&(0x7f0000000440)={0x8bf6, 0x0, @fd=0xffffffffffffffff, 0x3}, 0x81}) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r9, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000500)={0x1ff, 0x1, 0x4, 0x4000, 0x8, {r4, r5/1000+60000}, {0x1, 0x1, 0xca, 0x5, 0xdd, 0x6, "8ebd2c09"}, 0x5, 0x4, @fd=r8, 0x6, 0x0, r9}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @sdr={0x52424752, 0x6}}) 05:09:34 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:09:34 executing program 3: getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247, 0x0, 0x0, [{}, {0x0, 0x4}], 0xf8, 0x80}}) [ 2020.972247] Bluetooth: hci0 command 0x040f tx timeout [ 2021.052390] Bluetooth: hci5 command 0x040f tx timeout [ 2021.057702] Bluetooth: hci4 command 0x040f tx timeout [ 2021.064061] Bluetooth: hci3 command 0x040f tx timeout [ 2023.052123] Bluetooth: hci0 command 0x0419 tx timeout [ 2023.132103] Bluetooth: hci3 command 0x0419 tx timeout [ 2023.137763] Bluetooth: hci4 command 0x0419 tx timeout [ 2023.147215] Bluetooth: hci5 command 0x0419 tx timeout [ 2024.734971] oom_reaper: reaped process 9033 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2024.755859] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2024.785130] in:imklog cpuset=/ mems_allowed=0-1 [ 2024.789872] CPU: 0 PID: 4157 Comm: in:imklog Not tainted 4.14.227-syzkaller #0 [ 2024.797227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2024.806584] Call Trace: [ 2024.809182] dump_stack+0x1b2/0x281 [ 2024.812813] dump_header+0x178/0x82f [ 2024.816526] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2024.821640] ? ___ratelimit+0x2cd/0x530 [ 2024.825612] oom_kill_process.cold+0x10/0xb18 [ 2024.830110] out_of_memory+0xe3e/0x1190 [ 2024.834083] ? oom_killer_disable+0x1c0/0x1c0 [ 2024.838682] ? mutex_trylock+0x152/0x1a0 [ 2024.842724] __alloc_pages_nodemask+0x23e1/0x2720 [ 2024.847560] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2024.852391] alloc_pages_current+0x155/0x260 [ 2024.856791] filemap_fault+0xea3/0x1980 [ 2024.860753] ext4_filemap_fault+0x84/0xb0 [ 2024.864882] __do_fault+0xfa/0x380 [ 2024.868682] __handle_mm_fault+0x2497/0x4620 [ 2024.873211] ? vm_insert_page+0x7c0/0x7c0 [ 2024.877347] ? lock_downgrade+0x740/0x740 [ 2024.881731] handle_mm_fault+0x391/0x860 [ 2024.885887] __do_page_fault+0x549/0xad0 [ 2024.889964] ? spurious_fault+0x640/0x640 [ 2024.894123] ? do_page_fault+0x60/0x500 [ 2024.898100] ? page_fault+0x2f/0x50 [ 2024.901711] page_fault+0x45/0x50 [ 2024.905162] RIP: 1fa0:0x1f9f [ 2024.908157] RSP: 0000:000056244f3389d0 EFLAGS: 7fd5de04dda0 [ 2024.908803] Mem-Info: [ 2024.916969] active_anon:14313 inactive_anon:48603 isolated_anon:0 [ 2024.916969] active_file:13 inactive_file:13 isolated_file:0 [ 2024.916969] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2024.916969] slab_reclaimable:13022 slab_unreclaimable:112528 [ 2024.916969] mapped:52648 shmem:49939 pagetables:717 bounce:0 [ 2024.916969] free:13920 free_pcp:113 free_cma:0 [ 2024.922031] syz-executor.1: [ 2024.950442] Node 0 active_anon:56632kB inactive_anon:141720kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200352kB dirty:0kB writeback:0kB shmem:146736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2024.950454] Node 1 active_anon:620kB inactive_anon:52692kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2024.950458] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2024.950475] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2024.950494] Node 0 DMA32 free:17896kB min:36200kB low:45248kB high:54296kB active_anon:56632kB inactive_anon:141720kB active_file:48kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7296kB pagetables:2708kB bounce:0kB free_pcp:284kB local_pcp:124kB free_cma:0kB [ 2024.950511] lowmem_reserve[]: 0 0 0 0 0 [ 2024.962182] vmalloc: allocation failure, allocated 1559797760 of 2147487744 bytes [ 2025.019288] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 2025.035229] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2025.035249] lowmem_reserve[]: 0 0 0 0 0 [ 2025.035269] Node 1 Normal free:26708kB min:53696kB low:67120kB high:80544kB active_anon:620kB inactive_anon:52692kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:156kB bounce:0kB free_pcp:168kB local_pcp:48kB free_cma:0kB [ 2025.035291] lowmem_reserve[]: 0 0 0 0 0 [ 2025.046853] (null) [ 2025.069346] Node 0 [ 2025.083979] syz-executor.1 cpuset= [ 2025.087001] DMA: [ 2025.121890] / [ 2025.146141] 0*4kB [ 2025.159282] mems_allowed=0-1 [ 2025.159293] 1*8kB [ 2025.161041] CPU: 1 PID: 9033 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 2025.163174] (U) [ 2025.166212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2025.168338] 0*16kB [ 2025.176133] Call Trace: [ 2025.176151] dump_stack+0x1b2/0x281 [ 2025.176164] warn_alloc.cold+0x96/0x1cc [ 2025.176175] ? zone_watermark_ok_safe+0x220/0x220 [ 2025.176197] __vmalloc_area_node+0x48a/0x680 [ 2025.178142] 0*32kB [ 2025.187484] ? __vmalloc_node_range+0x150/0x150 [ 2025.187490] ? __get_vm_area_node+0x27d/0x340 [ 2025.187502] __vmalloc_node_range+0xbe/0x150 [ 2025.187515] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2025.187523] vmalloc_user+0x47/0xa0 [ 2025.189736] 1*64kB [ 2025.192440] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2025.192449] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2025.192456] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2025.192472] __vb2_queue_alloc+0x47a/0xd90 [ 2025.192490] vb2_core_create_bufs+0x279/0x5a0 [ 2025.192502] ? __vb2_queue_free+0x7a0/0x7a0 [ 2025.196117] (U) [ 2025.200095] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2025.204998] 1*128kB [ 2025.209371] ? trace_hardirqs_on+0x10/0x10 [ 2025.211608] (U) [ 2025.216274] vb2_create_bufs+0x2e1/0x5b0 [ 2025.216292] ? vb2_thread_start+0x310/0x310 [ 2025.216307] v4l_create_bufs+0xa4/0x150 [ 2025.216318] __video_do_ioctl+0x65b/0x6a0 [ 2025.216330] ? video_ioctl2+0x30/0x30 [ 2025.216340] ? __might_fault+0x177/0x1b0 [ 2025.216348] ? video_ioctl2+0x30/0x30 [ 2025.216355] video_usercopy+0xfd/0xe70 [ 2025.216365] ? v4l_g_ctrl+0x390/0x390 [ 2025.216372] ? lock_acquire+0x170/0x3f0 [ 2025.216379] ? lock_downgrade+0x740/0x740 [ 2025.216388] ? trace_hardirqs_on+0x10/0x10 [ 2025.216398] ? futex_exit_release+0x220/0x220 [ 2025.216409] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2025.216419] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2025.216431] v4l2_ioctl+0x1bb/0x2f0 [ 2025.216438] ? v4l2_open+0x2f0/0x2f0 [ 2025.216448] do_vfs_ioctl+0x75a/0xff0 [ 2025.216459] ? ioctl_preallocate+0x1a0/0x1a0 [ 2025.216465] ? lock_downgrade+0x740/0x740 [ 2025.216479] ? __fget+0x225/0x360 [ 2025.216486] ? do_vfs_ioctl+0xff0/0xff0 [ 2025.216495] ? security_file_ioctl+0x83/0xb0 [ 2025.216503] SyS_ioctl+0x7f/0xb0 [ 2025.216510] ? do_vfs_ioctl+0xff0/0xff0 [ 2025.216521] do_syscall_64+0x1d5/0x640 [ 2025.216534] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2025.216541] RIP: 0033:0x466459 [ 2025.216545] RSP: 002b:00007ff4b4c29188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2025.216553] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2025.216558] RDX: 0000000020001880 RSI: 00000000c100565c RDI: 0000000000000003 [ 2025.216562] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2025.216566] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2025.216572] R13: 00007ffdc779acaf R14: 00007ff4b4c29300 R15: 0000000000022000 [ 2025.229817] Mem-Info: [ 2025.231171] 0*256kB [ 2025.241942] active_anon:14313 inactive_anon:48603 isolated_anon:0 [ 2025.241942] active_file:12 inactive_file:14 isolated_file:0 [ 2025.241942] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2025.241942] slab_reclaimable:13022 slab_unreclaimable:112529 [ 2025.241942] mapped:52648 shmem:49939 pagetables:717 bounce:0 [ 2025.241942] free:13889 free_pcp:112 free_cma:0 [ 2025.246792] 1*512kB [ 2025.250879] Node 0 active_anon:56632kB inactive_anon:141720kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200352kB dirty:0kB writeback:0kB shmem:146736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2025.255137] (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10952kB [ 2025.255160] Node 0 DMA32: 658*4kB (ME) 793*8kB (ME) 263*16kB (ME) 51*32kB (MEH) 18*64kB (UMH) 1*128kB (H) 3*256kB (UH) 2*512kB (H) 0*1024kB [ 2025.268424] Node 1 active_anon:620kB inactive_anon:52692kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2025.271379] 0*2048kB [ 2025.276539] Node 0 [ 2025.278063] 0*4096kB [ 2025.280034] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2025.284131] = 17888kB [ 2025.284135] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB [ 2025.294380] lowmem_reserve[]: [ 2025.297228] 0*256kB [ 2025.301044] 0 [ 2025.305247] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2025.305263] Node 1 Normal: 207*4kB (ME) 159*8kB (UME) 124*16kB (ME) 69*32kB (ME) 29*64kB (M) 7*128kB (M) 11*256kB (M) 9*512kB (ME) 4*1024kB (UME) 1*2048kB (M) 1*4096kB (U) = 26708kB [ 2025.305332] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2025.305338] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2025.305343] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2025.305348] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2025.305352] 49965 total pagecache pages [ 2025.305362] 0 pages in swap cache [ 2025.305366] Swap cache stats: add 0, delete 0, find 0/0 [ 2025.305374] Free swap = 0kB [ 2025.305376] Total swap = 0kB [ 2025.305382] 2097051 pages RAM [ 2025.305385] 0 pages HighMem/MovableOnly [ 2025.305388] 363841 pages reserved [ 2025.305391] 0 pages cma reserved [ 2025.305398] Out of memory (oom_kill_allocating_task): Kill process 4157 (in:imklog) score 0 or sacrifice child [ 2025.305444] Killed process 4145 (rsyslogd) total-vm:254332kB, anon-rss:768kB, file-rss:0kB, shmem-rss:0kB [ 2025.306859] oom_reaper: reaped process 4145 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2025.339777] 2717 [ 2025.396707] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2025.421906] 2718 [ 2025.428772] in:imklog: [ 2025.432706] rsyslogd: [ 2025.453380] page allocation failure: order:0 [ 2025.486351] 2718 [ 2025.515704] (null) [ 2025.534100] page allocation failure: order:0 [ 2025.554645] rs:main Q:Reg: [ 2025.565230] 2718 [ 2025.587322] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2025.596770] , mode:0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask= [ 2025.599349] , order=0, oom_score_adj=0 [ 2025.609089] syz-fuzzer cpuset= [ 2025.632926] (null) [ 2025.634535] (null) [ 2025.650044] rsyslogd cpuset= [ 2025.651937] page allocation failure: order:0, mode:0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null) [ 2025.651950] rs:main Q:Reg cpuset=/ [ 2025.797679] / [ 2025.798077] in:imklog cpuset=/ mems_allowed=0-1 [ 2025.807633] CPU: 0 PID: 4157 Comm: in:imklog Not tainted 4.14.227-syzkaller #0 [ 2025.811413] Node 0 [ 2025.814980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2025.814984] Call Trace: [ 2025.815000] dump_stack+0x1b2/0x281 [ 2025.815012] warn_alloc.cold+0x96/0x1cc [ 2025.815023] ? zone_watermark_ok_safe+0x220/0x220 [ 2025.817269] DMA32 free:18096kB min:36200kB low:45248kB high:54296kB active_anon:55832kB inactive_anon:141720kB active_file:48kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7264kB pagetables:2708kB bounce:0kB free_pcp:852kB local_pcp:152kB free_cma:0kB [ 2025.826637] ? usleep_range+0x130/0x130 [ 2025.826645] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2025.826655] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2025.826662] ? run_timer_softirq+0x5a0/0x5a0 [ 2025.826678] __alloc_pages_nodemask+0x2127/0x2720 [ 2025.829340] lowmem_reserve[]: [ 2025.832951] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2025.832974] alloc_pages_current+0x155/0x260 [ 2025.837048] 0 0 [ 2025.841905] filemap_fault+0xea3/0x1980 [ 2025.841923] ext4_filemap_fault+0x84/0xb0 [ 2025.841932] __do_fault+0xfa/0x380 [ 2025.841941] __handle_mm_fault+0x2497/0x4620 [ 2025.841951] ? vm_insert_page+0x7c0/0x7c0 [ 2025.870362] 0 [ 2025.874281] ? lock_downgrade+0x740/0x740 [ 2025.874302] handle_mm_fault+0x391/0x860 [ 2025.879395] 0 [ 2025.884395] __do_page_fault+0x549/0xad0 [ 2025.884407] ? spurious_fault+0x640/0x640 [ 2025.884416] ? do_page_fault+0x60/0x500 [ 2025.888802] 0 [ 2025.893630] ? page_fault+0x2f/0x50 [ 2025.893637] page_fault+0x45/0x50 [ 2025.893645] RIP: 1fa0:0x1f9f [ 2025.893651] RSP: 0000:000056244f3389d0 EFLAGS: 7fd5de04dda0 [ 2025.902635] / [ 2025.914262] Node 0 [ 2025.916092] mems_allowed=0-1 [ 2025.919576] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2025.926017] CPU: 0 PID: 7967 Comm: syz-fuzzer Not tainted 4.14.227-syzkaller #0 [ 2025.933546] lowmem_reserve[]: [ 2025.934190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2025.938270] 0 [ 2025.940053] Call Trace: [ 2025.944128] 0 [ 2025.948232] dump_stack+0x1b2/0x281 [ 2025.952316] 0 [ 2025.954082] dump_header+0x178/0x82f [ 2025.957681] 0 [ 2025.961120] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2025.964149] 0 [ 2025.969840] ? ___ratelimit+0x2cd/0x530 [ 2025.973757] oom_kill_process.cold+0x10/0xb18 [ 2025.973774] out_of_memory+0xe3e/0x1190 [ 2025.973786] ? oom_killer_disable+0x1c0/0x1c0 [ 2025.976880] mems_allowed=0-1 [ 2026.001755] ? mutex_trylock+0x152/0x1a0 [ 2026.001767] __alloc_pages_nodemask+0x23e1/0x2720 [ 2026.001786] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2026.001808] alloc_pages_current+0x155/0x260 [ 2026.009258] Node 1 [ 2026.012336] filemap_fault+0xea3/0x1980 [ 2026.012355] ext4_filemap_fault+0x84/0xb0 [ 2026.012364] __do_fault+0xfa/0x380 [ 2026.012374] __handle_mm_fault+0x2497/0x4620 [ 2026.021778] Normal free:26708kB min:53696kB low:67120kB high:80544kB active_anon:396kB inactive_anon:52692kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:156kB bounce:0kB free_pcp:392kB local_pcp:120kB free_cma:0kB [ 2026.023527] ? vm_insert_page+0x7c0/0x7c0 [ 2026.026078] lowmem_reserve[]: [ 2026.027869] ? lock_downgrade+0x740/0x740 [ 2026.031467] 0 [ 2026.033257] handle_mm_fault+0x391/0x860 [ 2026.033268] __do_page_fault+0x549/0xad0 [ 2026.033278] ? spurious_fault+0x640/0x640 [ 2026.033285] ? do_page_fault+0x60/0x500 [ 2026.033296] ? page_fault+0x2f/0x50 [ 2026.051661] 0 [ 2026.054072] page_fault+0x45/0x50 [ 2026.058029] 0 [ 2026.062510] RIP: 0000:0x940aec [ 2026.062514] RSP: 2e000:000000c00003df00 EFLAGS: 0043b6a0 [ 2026.066942] mems_allowed=0-1 [ 2026.074059] 0 [ 2026.081209] CPU: 0 PID: 4158 Comm: rs:main Q:Reg Not tainted 4.14.227-syzkaller #0 [ 2026.091609] 0 [ 2026.091791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2026.099452] Call Trace: [ 2026.099472] dump_stack+0x1b2/0x281 [ 2026.111633] Node 0 [ 2026.131851] warn_alloc.cold+0x96/0x1cc [ 2026.131862] ? zone_watermark_ok_safe+0x220/0x220 [ 2026.131870] ? usleep_range+0x130/0x130 [ 2026.131876] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2026.131890] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2026.161608] DMA: [ 2026.165041] ? run_timer_softirq+0x5a0/0x5a0 [ 2026.166820] 0*4kB [ 2026.170282] __alloc_pages_nodemask+0x2127/0x2720 [ 2026.181602] 1*8kB [ 2026.183948] ? trace_hardirqs_on+0x10/0x10 [ 2026.185728] (U) [ 2026.193431] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2026.193437] ? __lock_acquire+0x5fc/0x3f20 [ 2026.193445] ? __handle_mm_fault+0x2095/0x4620 [ 2026.193455] ? __lock_acquire+0x5fc/0x3f20 [ 2026.193471] alloc_pages_vma+0xd2/0x6d0 [ 2026.211599] 0*16kB [ 2026.212993] __handle_mm_fault+0x25fa/0x4620 [ 2026.216952] 0*32kB 1*64kB [ 2026.221815] ? no_context+0x9c/0x7c0 [ 2026.221823] ? vm_insert_page+0x7c0/0x7c0 [ 2026.221842] handle_mm_fault+0x391/0x860 [ 2026.241603] (U) [ 2026.242317] __do_page_fault+0x549/0xad0 [ 2026.244464] 1*128kB (U) [ 2026.249325] ? spurious_fault+0x640/0x640 [ 2026.251477] 0*256kB [ 2026.255697] ? do_page_fault+0x60/0x500 [ 2026.255707] page_fault+0x25/0x50 [ 2026.255717] RIP: 0010:__put_user_4+0x1c/0x30 [ 2026.255721] RSP: 0000:ffff88805cab7ad0 EFLAGS: 00010293 [ 2026.255727] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 00007fd5ddc6d9d0 [ 2026.255731] RDX: 1ffff1101243f0e7 RSI: 0000000000000001 RDI: 00007fd5ddc6d9d0 [ 2026.255735] RBP: ffff8880921f8180 R08: ffffffff8b98eac0 R09: 0000000000000000 [ 2026.255739] R10: 0000000000000000 R11: ffff8880921f8180 R12: ffff8880921f8738 [ 2026.255746] R13: ffff88808c61e2c0 R14: 0000000000000000 R15: ffff8880a7be8640 [ 2026.271602] 1*512kB [ 2026.275515] mm_release+0x239/0x2d0 [ 2026.279452] (U) [ 2026.281714] do_exit+0x56f/0x2850 [ 2026.281726] ? __mnt_drop_write_file+0x5f/0x90 [ 2026.281736] ? mm_update_next_owner+0x5b0/0x5b0 [ 2026.301729] 0*1024kB [ 2026.303081] ? get_signal+0x323/0x1ca0 [ 2026.307128] 1*2048kB [ 2026.309875] ? lock_acquire+0x170/0x3f0 [ 2026.321677] (M) [ 2026.323837] ? lock_downgrade+0x740/0x740 [ 2026.328842] 2*4096kB [ 2026.334351] do_group_exit+0x100/0x2e0 [ 2026.334366] get_signal+0x38d/0x1ca0 [ 2026.334375] ? do_futex+0x12b/0x1570 [ 2026.334388] ? trace_hardirqs_on+0x10/0x10 [ 2026.334401] do_signal+0x7c/0x1550 [ 2026.361646] (M) [ 2026.363924] ? fsnotify+0x974/0x11b0 [ 2026.371169] = 10952kB [ 2026.373489] ? setup_sigcontext+0x820/0x820 [ 2026.373499] ? lock_downgrade+0x740/0x740 [ 2026.373505] ? vfs_write+0x35d/0x4d0 [ 2026.373519] ? __mutex_unlock_slowpath+0x75/0x770 [ 2026.391591] Node 0 [ 2026.391758] ? SyS_futex+0x1da/0x290 [ 2026.394169] DMA32: [ 2026.398038] ? SyS_futex+0x1e3/0x290 [ 2026.400439] 699*4kB [ 2026.404393] ? fput+0xb/0x140 [ 2026.404401] ? exit_to_usermode_loop+0x41/0x200 [ 2026.404410] exit_to_usermode_loop+0x160/0x200 [ 2026.404421] do_syscall_64+0x4a3/0x640 [ 2026.421586] (UME) [ 2026.424153] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2026.428376] 813*8kB [ 2026.431893] RIP: 0033:0x7fd5e06ae17f [ 2026.431897] RSP: 002b:00007fd5ddc6cc70 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2026.431905] RAX: fffffffffffffe00 RBX: 0000000000000000 RCX: 00007fd5e06ae17f [ 2026.431912] RDX: 0000000000000f09 RSI: 0000000000000080 RDI: 000056244f3352cc [ 2026.451590] (UME) [ 2026.452063] RBP: 000056244f3352c8 R08: 000056244f335000 R09: 0000000000000784 [ 2026.456896] 270*16kB (UME) [ 2026.459121] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd5ddc6ccd0 [ 2026.471584] 54*32kB [ 2026.474100] R13: 0000000000000000 R14: 000056244de27290 R15: 0000000000000000 [ 2026.478743] (UME) [ 2026.490152] Mem-Info: [ 2026.498051] CPU: 1 PID: 4145 Comm: rsyslogd Not tainted 4.14.227-syzkaller #0 [ 2026.509012] active_anon:14051 inactive_anon:48603 isolated_anon:0 [ 2026.509012] active_file:12 inactive_file:14 isolated_file:0 [ 2026.509012] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2026.509012] slab_reclaimable:13022 slab_unreclaimable:112386 [ 2026.509012] mapped:52648 shmem:49939 pagetables:717 bounce:0 [ 2026.509012] free:14122 free_pcp:306 free_cma:0 [ 2026.515545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2026.515549] Call Trace: [ 2026.515563] dump_stack+0x1b2/0x281 [ 2026.515574] warn_alloc.cold+0x96/0x1cc [ 2026.515584] ? zone_watermark_ok_safe+0x220/0x220 [ 2026.515591] ? usleep_range+0x130/0x130 [ 2026.515597] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2026.515608] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2026.528045] Node 0 active_anon:55808kB inactive_anon:141720kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200352kB dirty:0kB writeback:0kB shmem:146736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2026.532274] ? run_timer_softirq+0x5a0/0x5a0 [ 2026.532288] __alloc_pages_nodemask+0x2127/0x2720 [ 2026.532308] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2026.532321] ? __lock_acquire+0x5fc/0x3f20 [ 2026.535241] Node 1 active_anon:396kB inactive_anon:52692kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2026.542513] alloc_pages_vma+0xd2/0x6d0 [ 2026.542526] __handle_mm_fault+0x25fa/0x4620 [ 2026.542535] ? vm_insert_page+0x7c0/0x7c0 [ 2026.542553] handle_mm_fault+0x391/0x860 [ 2026.542565] __do_page_fault+0x549/0xad0 [ 2026.542576] ? spurious_fault+0x640/0x640 [ 2026.542585] ? do_page_fault+0x60/0x500 [ 2026.542595] page_fault+0x25/0x50 [ 2026.542604] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 2026.542610] RSP: 0000:ffff888231fa7d68 EFLAGS: 00010202 [ 2026.550078] Node 0 [ 2026.552203] RAX: ffffed10463f4fc3 RBX: 0000000000000010 RCX: 0000000000000002 [ 2026.552207] RDX: 0000000000000000 RSI: ffff888231fa7e08 RDI: 00007fff1eba4870 [ 2026.552211] RBP: ffff888231fa7e08 R08: 00000000000001ca R09: ffffed10463f4fc2 [ 2026.552215] R10: ffff888231fa7e17 R11: ffff8880667b84c0 R12: 00007fff1eba4870 [ 2026.552219] R13: 00007ffffffff000 R14: 00007fff1eba4880 R15: 00000000000001ca [ 2026.552241] _copy_to_user+0xaa/0xd0 [ 2026.552252] poll_select_copy_remaining+0x1ea/0x2e0 [ 2026.554390] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2026.556779] ? compat_poll_select_copy_remaining+0x2c0/0x2c0 [ 2026.569145] lowmem_reserve[]: [ 2026.597251] ? ktime_get_ts64+0x261/0x3a0 [ 2026.597264] SyS_select+0x116/0x170 [ 2026.597272] ? core_sys_select+0x6a0/0x6a0 [ 2026.597281] ? do_syscall_64+0x4c/0x640 [ 2026.597287] ? core_sys_select+0x6a0/0x6a0 [ 2026.597294] do_syscall_64+0x1d5/0x640 [ 2026.597306] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2026.597313] RIP: 0033:0x7fd5df7bf603 [ 2026.597317] RSP: 002b:00007fff1eba4850 EFLAGS: 00000293 ORIG_RAX: 0000000000000017 [ 2026.597324] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd5df7bf603 [ 2026.597328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2026.597333] RBP: 000056244de38040 R08: 00007fff1eba4870 R09: 0000000000000000 [ 2026.597337] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fff1eba4870 [ 2026.597341] R13: 000056244de38008 R14: 00007fff1eba4868 R15: 0000000000000000 [ 2026.603577] 21*64kB [ 2026.608808] 0 [ 2026.609564] (UM) [ 2026.613229] 2717 2718 2718 [ 2026.619153] 3*128kB [ 2026.623856] 2718 [ 2026.626588] (UM) [ 2026.641307] 3*256kB [ 2026.666132] Node 0 [ 2026.673811] (UM) [ 2026.678412] DMA32 free:18828kB min:36200kB low:45248kB high:54296kB active_anon:55808kB inactive_anon:141720kB active_file:48kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7232kB pagetables:2708kB bounce:0kB free_pcp:832kB local_pcp:668kB free_cma:0kB [ 2026.687525] 2*512kB [ 2026.711437] lowmem_reserve[]: [ 2026.719070] warn_alloc_show_mem: 1 callbacks suppressed [ 2026.719073] Mem-Info: [ 2026.724024] 0 [ 2026.726346] active_anon:14051 inactive_anon:48603 isolated_anon:0 [ 2026.726346] active_file:12 inactive_file:14 isolated_file:0 [ 2026.726346] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2026.726346] slab_reclaimable:13022 slab_unreclaimable:112386 [ 2026.726346] mapped:52648 shmem:49939 pagetables:717 bounce:0 [ 2026.726346] free:14122 free_pcp:306 free_cma:0 [ 2026.730377] 0 [ 2026.739641] (M) [ 2026.743971] 0 [ 2026.747786] 0*1024kB [ 2026.753308] 0 0 [ 2026.753319] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2026.753336] lowmem_reserve[]: 0 0 0 0 0 [ 2026.753355] Node 1 Normal free:26708kB min:53696kB low:67120kB high:80544kB active_anon:396kB inactive_anon:52692kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:156kB bounce:0kB free_pcp:392kB local_pcp:272kB free_cma:0kB [ 2026.753371] lowmem_reserve[]: 0 0 0 0 0 [ 2026.761774] 0*2048kB [ 2026.765151] Node 0 [ 2026.770165] 0*4096kB [ 2026.777524] DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10952kB [ 2026.777580] Node 0 DMA32: 699*4kB (UME) 813*8kB (UME) 270*16kB (UME) 54*32kB [ 2026.791316] Node 0 active_anon:55808kB inactive_anon:141720kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200352kB dirty:0kB writeback:0kB shmem:146736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2026.794413] (UME) [ 2026.796173] Node 1 active_anon:396kB inactive_anon:52692kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2026.801183] 21*64kB [ 2026.832306] = 18868kB [ 2026.834422] (UM) [ 2026.835681] Node 0 [ 2026.839979] 3*128kB (UM) [ 2026.848930] Normal: [ 2026.853715] 3*256kB [ 2026.856149] 0*4kB [ 2026.860029] (UM) [ 2026.870506] Node 0 [ 2026.878534] 2*512kB [ 2026.889697] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2026.891322] (M) [ 2026.898745] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2026.898782] Node 1 Normal: 207*4kB [ 2026.908348] 0*1024kB [ 2026.918982] lowmem_reserve[]: [ 2026.920070] 0*2048kB [ 2026.923046] 0 2717 2718 [ 2026.927337] 0*4096kB [ 2026.927416] 2718 [ 2026.929461] = 18868kB [ 2026.937981] (ME) [ 2026.966669] Node 0 [ 2026.972385] 2718 [ 2026.976058] Normal: [ 2026.980167] 0*4kB [ 2027.014152] 159*8kB [ 2027.022614] 0*8kB [ 2027.023605] (UME) [ 2027.056134] 0*16kB [ 2027.081739] Node 0 DMA32 free:18868kB min:36200kB low:45248kB high:54296kB active_anon:55808kB inactive_anon:141720kB active_file:64kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7200kB pagetables:2708kB bounce:0kB free_pcp:832kB local_pcp:164kB free_cma:0kB [ 2027.081759] lowmem_reserve[]: 0 0 0 0 0 [ 2027.081775] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2027.081790] lowmem_reserve[]: [ 2027.093666] 0*32kB [ 2027.093773] 0 [ 2027.109439] 0*64kB [ 2027.113318] 0 0 0 0 [ 2027.113332] Node 1 Normal free:26708kB min:53696kB low:67120kB high:80544kB active_anon:396kB inactive_anon:52692kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:156kB bounce:0kB free_pcp:392kB local_pcp:120kB free_cma:0kB [ 2027.149938] 0*128kB [ 2027.171178] 124*16kB [ 2027.180061] 0*256kB [ 2027.182560] (ME) [ 2027.184865] 0*512kB [ 2027.187165] 69*32kB (ME) [ 2027.189297] 0*1024kB [ 2027.191337] 29*64kB (M) [ 2027.200620] 0*2048kB [ 2027.221614] 7*128kB (M) 11*256kB (M) 9*512kB (ME) 4*1024kB (UME) 1*2048kB (M) 1*4096kB (U) = 26708kB [ 2027.221668] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2027.230790] 0*4096kB [ 2027.232653] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2027.232661] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2027.232667] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2027.232674] 49965 total pagecache pages [ 2027.236425] = 0kB [ 2027.238832] 0 pages in swap cache [ 2027.248933] lowmem_reserve[]: [ 2027.249468] Swap cache stats: add 0, delete 0, find 0/0 [ 2027.251574] 0 0 [ 2027.253970] Free swap = 0kB [ 2027.256013] 0 0 [ 2027.258248] Total swap = 0kB [ 2027.260286] 0 [ 2027.262635] 2097051 pages RAM [ 2027.262639] 0 pages HighMem/MovableOnly [ 2027.262642] 363841 pages reserved [ 2027.262646] 0 pages cma reserved [ 2027.351626] Node 1 [ 2027.379792] Node 0 [ 2027.423513] Normal: [ 2027.429084] DMA: [ 2027.435238] 207*4kB [ 2027.441351] 0*4kB [ 2027.463440] (ME) [ 2027.469526] 1*8kB [ 2027.471193] 159*8kB [ 2027.474320] (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) [ 2027.491602] (UME) [ 2027.497097] 0*1024kB [ 2027.498626] 124*16kB [ 2027.500674] 1*2048kB [ 2027.511568] (ME) [ 2027.517288] (M) [ 2027.519023] 69*32kB [ 2027.521413] 2*4096kB (M) = 10952kB [ 2027.531475] Node 0 DMA32: 699*4kB (UME) 812*8kB (UME) 270*16kB (UME) 55*32kB (UME) 21*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18892kB [ 2027.541567] (ME) [ 2027.562064] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2027.571567] 29*64kB (M) 7*128kB (M) 11*256kB (M) 9*512kB (ME) 4*1024kB (UME) 1*2048kB (M) 1*4096kB (U) = 26708kB [ 2027.579485] Node 1 [ 2027.587173] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2027.596608] Normal: 207*4kB (ME) 159*8kB (UME) 124*16kB (ME) 69*32kB (ME) 29*64kB (M) 7*128kB (M) 11*256kB (M) 9*512kB (ME) 4*1024kB [ 2027.598291] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2027.598298] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2027.634723] (UME) 1*2048kB (M) 1*4096kB (U) = 26708kB [ 2027.639962] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2027.650831] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2027.653290] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2027.662831] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2027.681547] 49965 total pagecache pages [ 2027.682388] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2027.685536] 0 pages in swap cache [ 2027.698859] 49965 total pagecache pages [ 2027.704160] 0 pages in swap cache [ 2027.707621] Swap cache stats: add 0, delete 0, find 0/0 [ 2027.713687] Swap cache stats: add 0, delete 0, find 0/0 [ 2027.717253] Free swap = 0kB [ 2027.719057] Free swap = 0kB [ 2027.723219] Total swap = 0kB [ 2027.728165] 2097051 pages RAM [ 2027.731259] 0 pages HighMem/MovableOnly [ 2027.739635] 363841 pages reserved [ 2027.741554] Total swap = 0kB [ 2027.744263] 0 pages cma reserved [ 2027.746134] 2097051 pages RAM [ 2027.752642] 0 pages HighMem/MovableOnly [ 2027.756610] 363841 pages reserved [ 2027.760050] 0 pages cma reserved [ 2027.769191] Out of memory (oom_kill_allocating_task): Kill process 7967 (syz-fuzzer) score 0 or sacrifice child [ 2027.780909] Killed process 8077 (syz-executor.5) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 2027.805394] oom_reaper: reaped process 8077 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2027.827528] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2027.852138] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2027.856950] CPU: 1 PID: 28186 Comm: syz-fuzzer Not tainted 4.14.227-syzkaller #0 [ 2027.864586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2027.874168] Call Trace: [ 2027.876868] dump_stack+0x1b2/0x281 [ 2027.880505] dump_header+0x178/0x82f [ 2027.884271] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2027.889392] ? ___ratelimit+0x2cd/0x530 [ 2027.893392] oom_kill_process.cold+0x10/0xb18 [ 2027.897898] out_of_memory+0xe3e/0x1190 [ 2027.901877] ? oom_killer_disable+0x1c0/0x1c0 [ 2027.906372] ? mutex_trylock+0x152/0x1a0 [ 2027.910433] __alloc_pages_nodemask+0x23e1/0x2720 [ 2027.915288] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2027.920154] alloc_pages_current+0x155/0x260 [ 2027.924763] filemap_fault+0xea3/0x1980 [ 2027.928760] ext4_filemap_fault+0x84/0xb0 [ 2027.932914] __do_fault+0xfa/0x380 [ 2027.936457] __handle_mm_fault+0x2497/0x4620 [ 2027.940864] ? vm_insert_page+0x7c0/0x7c0 [ 2027.945020] handle_mm_fault+0x391/0x860 [ 2027.949091] __do_page_fault+0x549/0xad0 [ 2027.953168] ? spurious_fault+0x640/0x640 [ 2027.957329] ? do_page_fault+0x60/0x500 [ 2027.961315] ? page_fault+0x2f/0x50 [ 2027.965067] page_fault+0x45/0x50 [ 2027.968529] RIP: 8a8900:0xc000065380 [ 2027.972243] RSP: 4e8400:000000c0007a9f28 EFLAGS: 00000003 [ 2027.989654] Mem-Info: [ 2028.011335] active_anon:14012 inactive_anon:48603 isolated_anon:0 [ 2028.011335] active_file:14 inactive_file:12 isolated_file:0 [ 2028.011335] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2028.011335] slab_reclaimable:13010 slab_unreclaimable:112049 [ 2028.011335] mapped:43944 shmem:49939 pagetables:641 bounce:0 [ 2028.011335] free:19048 free_pcp:361 free_cma:0 [ 2028.057110] Node 0 active_anon:55652kB inactive_anon:141720kB active_file:52kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165536kB dirty:0kB writeback:0kB shmem:146736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2028.086418] Node 1 active_anon:396kB inactive_anon:52692kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2028.119254] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2028.150705] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2028.156236] Node 0 DMA32 free:53920kB min:36200kB low:45248kB high:54296kB active_anon:55652kB inactive_anon:141720kB active_file:52kB inactive_file:1348kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7136kB pagetables:2452kB bounce:0kB free_pcp:924kB local_pcp:112kB free_cma:0kB [ 2028.198658] lowmem_reserve[]: 0 0 0 0 0 [ 2028.206410] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2028.237426] lowmem_reserve[]: 0 0 0 0 0 [ 2028.241995] Node 1 Normal free:272136kB min:53696kB low:67120kB high:80544kB active_anon:396kB inactive_anon:52692kB active_file:4kB inactive_file:100kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:108kB bounce:0kB free_pcp:800kB local_pcp:180kB free_cma:0kB [ 2028.282579] lowmem_reserve[]: 0 0 0 0 0 [ 2028.286920] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10952kB [ 2028.304476] Node 0 DMA32: 1592*4kB (UE) 4306*8kB (UE) 205*16kB (UE) 27*32kB (UE) 8*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 47648kB [ 2028.328668] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2028.351575] Node 1 Normal: 102*4kB (UME) 127*8kB (UME) 101*16kB (UME) 57*32kB (UME) 24*64kB (UM) 9*128kB (UM) 8*256kB (UM) 11*512kB (UME) 6*1024kB (UME) 5*2048kB (UM) 80*4096kB (U) = 359296kB [ 2028.395879] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2028.426022] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2028.434780] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2028.447633] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2028.456831] 51963 total pagecache pages [ 2028.460818] 0 pages in swap cache [ 2028.472993] Swap cache stats: add 0, delete 0, find 0/0 [ 2028.478382] Free swap = 0kB [ 2028.481394] Total swap = 0kB [ 2028.488878] 2097051 pages RAM [ 2028.492065] 0 pages HighMem/MovableOnly [ 2028.496030] 363841 pages reserved [ 2028.499479] 0 pages cma reserved [ 2028.511758] Out of memory (oom_kill_allocating_task): Kill process 28186 (syz-fuzzer) score 0 or sacrifice child [ 2028.527500] Killed process 8075 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2028.548842] oom_reaper: reaped process 8075 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2028.869027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2028.885556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2028.897267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2028.911929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2028.938161] device bridge_slave_1 left promiscuous mode [ 2028.961645] bridge0: port 2(bridge_slave_1) entered disabled state [ 2028.969058] device bridge_slave_0 left promiscuous mode [ 2028.974812] bridge0: port 1(bridge_slave_0) entered disabled state [ 2028.992041] device veth1_macvtap left promiscuous mode [ 2028.997373] device veth0_macvtap left promiscuous mode [ 2029.006529] device veth1_vlan left promiscuous mode [ 2029.011838] device veth0_vlan left promiscuous mode [ 2029.156434] device hsr_slave_1 left promiscuous mode [ 2029.169666] device hsr_slave_0 left promiscuous mode [ 2029.190517] team0 (unregistering): Port device team_slave_1 removed [ 2029.201045] team0 (unregistering): Port device team_slave_0 removed [ 2029.218410] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2029.236263] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2029.277145] bond0 (unregistering): Released all slaves [ 2030.673701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2030.680482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2030.693988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2030.700717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2030.713276] device bridge_slave_1 left promiscuous mode [ 2030.718818] bridge0: port 2(bridge_slave_1) entered disabled state [ 2030.729290] device bridge_slave_0 left promiscuous mode [ 2030.737526] bridge0: port 1(bridge_slave_0) entered disabled state [ 2030.749491] device veth1_macvtap left promiscuous mode [ 2030.756941] device veth0_macvtap left promiscuous mode [ 2030.765049] device veth1_vlan left promiscuous mode [ 2030.770158] device veth0_vlan left promiscuous mode [ 2030.889543] device hsr_slave_1 left promiscuous mode [ 2030.904767] device hsr_slave_0 left promiscuous mode [ 2030.925471] team0 (unregistering): Port device team_slave_1 removed [ 2030.938192] team0 (unregistering): Port device team_slave_0 removed [ 2030.951029] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2030.967048] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2031.011071] bond0 (unregistering): Released all slaves 05:09:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)={0x1f, 0x1, 0x4, 0x5a09834058949f50, 0x8, {0x77359400}, {0x3, 0x1, 0x1, 0x3, 0x2, 0x0, "7ed6df49"}, 0x10001, 0x3, @planes=&(0x7f0000000000)={0x3, 0x3, @fd, 0x6000000}, 0xff, 0x0, r1}) 05:09:46 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000080)=r2) 05:09:46 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @empty}, &(0x7f0000000300)=0xc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x4000}) 05:09:46 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000280)=0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x10) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x200, 0x0, 0x3, {0x1, @vbi={0x7, 0x8e, 0x9, 0x20323159, [0x2, 0x9], [0x9], 0x108}}}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$cgroup_int(r1, &(0x7f0000000340)=0x51d, 0x12) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @private=0xa010102}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e23, @private=0xa010102}, @in={0x2, 0x4e22, @rand_addr=0x64010100}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @private=0xa010102}], 0x60) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000540)=0x1) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000380)) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, 0x0, 0x0) r5 = socket(0x1d, 0x2, 0x6000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f0000000480)={'nat\x00', 0x0, 0x4, 0xb, [], 0x3, &(0x7f0000000400)=[{}, {}, {}], &(0x7f0000000440)=""/11}, &(0x7f0000000500)=0x78) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f0000000040)={0x26}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000300)={0x1f, 0x2}) 05:09:46 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000001880)={0x0, 0x7ff, 0x1, {0x1, @win={{}, 0x0, 0x80000000, 0x0, 0x0, 0x0}}}) 05:09:46 executing program 3: r0 = socket(0x2c, 0x80005, 0x3) r1 = accept4$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10, 0x80000) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000240)={0x1, {{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x1, 0x4, [{{0x2, 0x4e23, @local}}, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000500)=0x9, 0x12) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f0000000000)="4286d7e61615f5bebbe4c409f37fca08c79bf424b0efaa6710658784c8039f7e63ed554cdbc08ef92cee0de8b4fa66d6a4bd861947628b1f0e9f0aeb13fba14a255c0712f3bd8b58c3170f5e128ea9b82c0fce6e0a18553b7c11b1658d96b88196ee408aded9") r2 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) socket(0x17, 0x6, 0x3) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x3}], 0x0, 0x3}}) 05:09:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffa, 0x2) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) 05:09:46 executing program 4: syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) socket(0x28, 0xa, 0x1000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x7, 0x3, 0x1}) 05:09:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000400)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0)={0xffffffff}, 0x4) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000000)={0x3, 0x2, 0x4, 0x4000, 0x7, {}, {0x5, 0x8, 0x4, 0x6, 0x5, 0xd0, "efdc80e3"}, 0x2, 0x0, @offset=0x7, 0x80, 0x0, r1}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000100)={0x4, 0x1f, "61ee3d", 0x9, 0x5}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000280)={'nat\x00', 0x0, 0x3, 0x6c, [], 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f0000000180)=""/108}, &(0x7f0000000200)=0x78) 05:09:46 executing program 4: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000240)={0x200, 0x1, 0x1}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)={0x1, 0x2, 0x4, 0x800, 0x1, {r1, r2/1000+10000}, {0x2, 0xc, 0xff, 0x7, 0xca, 0x5, "e57ed403"}, 0x1, 0x3, @fd}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={@mcast2}, &(0x7f0000000080)=0x14) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, 0x0) read$rfkill(r3, &(0x7f00000000c0), 0x8) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000180)=0xe) write$cgroup_int(r4, &(0x7f0000000140)=0x98, 0x12) 05:09:46 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000240)={0x2, @vbi={0x7, 0xda3, 0x4, 0x32314247, [0x7f, 0x3], [0x29f7, 0x9], 0x3}}) 05:09:46 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x81, 0x2) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000001584f7cca71db5719eb1c2fbae05292be7f9b2263ff10861e4c1c57abb86c3cb97da58ad5c106ed0daed2923b15a63a1b0b0cb970ca38acfaf46af92633f8c372cffac710e99fcd5dddd77547f0117694004c145adecb50831aa74f444f864cd7df996b48795fd6bbcd5868a1065bfc80ca7901eab492bae3ed29ee48e441943885033a58bf7850100000000000000e04d01793899843733995e109a4e12e5f7c73e22361b3a010aca1b0146142f82e900"/218], &(0x7f00000000c0)=0x6e) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev}, &(0x7f0000000280)=0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000640)={{0x88, @private=0xa010102, 0x4e21, 0x4, 'ovf\x00', 0x5, 0x100, 0x2f}, {@multicast2, 0x4e21, 0x4, 0x204, 0xfff, 0x7f}}, 0x44) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000580)={'nat\x00', 0x0, 0x6, 0x41, [], 0x4, &(0x7f00000002c0)=[{}, {}, {}, {}], &(0x7f0000000500)=""/65}, &(0x7f0000000300)=0x78) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59455247}}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000006c0)={0x7fff, 0x1, 0x4, 0x4, 0xff, {0x77359400}, {0x2, 0x0, 0xca, 0x3f, 0x0, 0x9e, "ae864275"}, 0x1ff, 0x3, @userptr=0x1f, 0x0, 0x0, r2}) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000740)={0x1, 0x2, 0x4, 0x1000, 0xfffffff3, {}, {0x5, 0x2, 0x3f, 0x20, 0x6, 0x7, "3de2e492"}, 0x3f, 0x0, @userptr=0x9, 0x6, 0x0, r3}) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00', 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000600)={0x20}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000000)={@local, @broadcast, r6}, 0xc) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000007c0)={0x6c, r4, 0x1434, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x6c}}, 0x20008800) 05:09:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f00000000c0)=""/139) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x3, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) r2 = accept$inet(r1, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000200)=0x10) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000240)={@local, @multicast2}, &(0x7f0000000280)=0xc) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x2, 0x0, 0x4}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0xffffffffffffffff) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000180)) [ 2034.770004] IPVS: ftp: loaded support on port[0] = 21 [ 2034.912619] IPVS: ftp: loaded support on port[0] = 21 [ 2035.064836] chnl_net:caif_netlink_parms(): no params data found [ 2035.209051] chnl_net:caif_netlink_parms(): no params data found [ 2035.279594] bridge0: port 1(bridge_slave_0) entered blocking state [ 2035.287355] bridge0: port 1(bridge_slave_0) entered disabled state [ 2035.294889] device bridge_slave_0 entered promiscuous mode [ 2035.327964] bridge0: port 2(bridge_slave_1) entered blocking state [ 2035.334920] bridge0: port 2(bridge_slave_1) entered disabled state [ 2035.346802] device bridge_slave_1 entered promiscuous mode [ 2035.353882] bridge0: port 1(bridge_slave_0) entered blocking state [ 2035.360246] bridge0: port 1(bridge_slave_0) entered disabled state [ 2035.372058] device bridge_slave_0 entered promiscuous mode [ 2035.400677] bridge0: port 2(bridge_slave_1) entered blocking state [ 2035.411211] bridge0: port 2(bridge_slave_1) entered disabled state [ 2035.418718] device bridge_slave_1 entered promiscuous mode [ 2035.430503] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2035.448789] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2035.472506] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2035.502685] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2035.518579] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2035.529635] team0: Port device team_slave_0 added [ 2035.544051] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2035.553380] team0: Port device team_slave_1 added [ 2035.558666] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2035.566461] team0: Port device team_slave_0 added [ 2035.593338] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2035.606818] team0: Port device team_slave_1 added [ 2035.612799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2035.619047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2035.644909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2035.672950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2035.679219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2035.705575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2035.717184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2035.723946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2035.749905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2035.760848] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2035.769015] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2035.777238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2035.783920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2035.809413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2035.836668] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2035.845058] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2035.857328] device hsr_slave_0 entered promiscuous mode [ 2035.863763] device hsr_slave_1 entered promiscuous mode [ 2035.888310] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2035.896186] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2035.907418] device hsr_slave_0 entered promiscuous mode [ 2035.914018] device hsr_slave_1 entered promiscuous mode [ 2035.928461] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2035.937367] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2036.147405] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2036.182749] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2036.255881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2036.279510] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2036.288681] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2036.300357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2036.308341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2036.323798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2036.333696] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2036.339778] 8021q: adding VLAN 0 to HW filter on device team0 [ 2036.347633] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2036.358553] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2036.366700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2036.376634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2036.387013] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2036.396215] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2036.403119] 8021q: adding VLAN 0 to HW filter on device team0 [ 2036.409398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2036.421449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2036.429154] bridge0: port 1(bridge_slave_0) entered blocking state [ 2036.435662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2036.445922] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2036.455525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2036.463824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2036.472537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2036.480232] bridge0: port 2(bridge_slave_1) entered blocking state [ 2036.486630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2036.498310] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2036.508192] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2036.517599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2036.528062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2036.537001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2036.547640] bridge0: port 1(bridge_slave_0) entered blocking state [ 2036.554062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2036.568171] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2036.577716] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2036.590467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2036.598786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2036.611497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2036.619416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2036.632612] bridge0: port 2(bridge_slave_1) entered blocking state [ 2036.638996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2036.652233] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2036.665785] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2036.673815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2036.686936] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2036.695517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2036.708530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2036.718661] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2036.727710] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2036.735080] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2036.744225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2036.752237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2036.760058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2036.772269] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2036.781677] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2036.789869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2036.802401] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2036.808479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2036.811111] Bluetooth: hci0 command 0x0409 tx timeout [ 2036.823593] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2036.830074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2036.839074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2036.851320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2036.866389] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2036.874913] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2036.886351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2036.893704] Bluetooth: hci3 command 0x0409 tx timeout [ 2036.897531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2036.911510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2036.918299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2036.933099] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2036.949115] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2036.957513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2036.970711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2036.983094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2036.993842] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2037.005236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2037.014167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2037.033595] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2037.047109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2037.060112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2037.074835] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2037.085005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2037.112277] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2037.130218] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2037.147994] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2037.156873] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2037.174573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2037.260469] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2037.279644] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2037.289613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2037.309864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2037.336508] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2037.350369] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2037.359969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2037.373700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2037.413721] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2037.424462] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2037.432571] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2037.445689] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2037.452745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2037.460589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2037.474235] device veth0_vlan entered promiscuous mode [ 2037.482315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2037.489698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2037.508757] device veth1_vlan entered promiscuous mode [ 2037.516642] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2037.528960] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2037.539367] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2037.549006] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2037.564058] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2037.576970] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2037.588350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2037.597786] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2037.608105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2037.617342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2037.634266] device veth0_vlan entered promiscuous mode [ 2037.649655] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2037.657419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2037.667963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2037.678670] device veth1_vlan entered promiscuous mode [ 2037.689851] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2037.699241] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2037.712588] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2037.720187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2037.732655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2037.780108] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2037.811208] device veth0_macvtap entered promiscuous mode [ 2037.817555] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2037.857156] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2037.876453] device veth1_macvtap entered promiscuous mode [ 2037.890241] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2037.943918] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2037.953317] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2037.960581] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2037.969758] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2037.978517] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2037.987196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2037.995908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2038.194135] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2038.213064] systemd-journal cpuset=/ mems_allowed=0-1 [ 2038.218297] CPU: 1 PID: 8051 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 2038.230074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2038.240034] Call Trace: [ 2038.242626] dump_stack+0x1b2/0x281 [ 2038.246248] dump_header+0x178/0x82f [ 2038.250040] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2038.255133] ? ___ratelimit+0x2cd/0x530 [ 2038.259101] oom_kill_process.cold+0x10/0xb18 [ 2038.263600] out_of_memory+0xe3e/0x1190 [ 2038.267568] ? oom_killer_disable+0x1c0/0x1c0 [ 2038.272052] ? mutex_trylock+0x152/0x1a0 [ 2038.276107] __alloc_pages_nodemask+0x23e1/0x2720 [ 2038.280941] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2038.285770] alloc_pages_current+0x155/0x260 [ 2038.290152] filemap_fault+0xea3/0x1980 [ 2038.294124] ext4_filemap_fault+0x84/0xb0 [ 2038.298249] __do_fault+0xfa/0x380 [ 2038.301852] __handle_mm_fault+0x2497/0x4620 [ 2038.306247] ? vm_insert_page+0x7c0/0x7c0 [ 2038.310386] ? lock_downgrade+0x740/0x740 [ 2038.314528] handle_mm_fault+0x391/0x860 [ 2038.318568] __do_page_fault+0x549/0xad0 [ 2038.322607] ? spurious_fault+0x640/0x640 [ 2038.326729] ? do_page_fault+0x60/0x500 [ 2038.330680] ? page_fault+0x2f/0x50 [ 2038.334300] page_fault+0x45/0x50 [ 2038.339377] RIP: 0001:0x7ffdb5b163ec [ 2038.343237] RSP: 95a341e0:00007ffdb5b165d0 EFLAGS: 556495a34780 [ 2038.345882] Mem-Info: [ 2038.354550] active_anon:14949 inactive_anon:48604 isolated_anon:0 [ 2038.354550] active_file:17 inactive_file:25 isolated_file:0 [ 2038.354550] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2038.354550] slab_reclaimable:12863 slab_unreclaimable:113562 [ 2038.354550] mapped:52769 shmem:49940 pagetables:739 bounce:0 [ 2038.354550] free:24963 free_pcp:81 free_cma:0 [ 2038.388044] Node 0 active_anon:58456kB inactive_anon:141704kB active_file:28kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200836kB dirty:0kB writeback:0kB shmem:146704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2038.416813] Node 1 active_anon:1340kB inactive_anon:52712kB active_file:48kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2038.444434] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2038.471239] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2038.476251] Node 0 DMA32 free:35696kB min:36200kB low:45248kB high:54296kB active_anon:56408kB inactive_anon:141704kB active_file:56kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7232kB pagetables:2752kB bounce:0kB free_pcp:200kB local_pcp:112kB free_cma:0kB [ 2038.505243] lowmem_reserve[]: 0 0 0 0 0 [ 2038.509301] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2038.534987] lowmem_reserve[]: 0 0 0 0 0 [ 2038.539083] Node 1 Normal free:53092kB min:53696kB low:67120kB high:80544kB active_anon:1340kB inactive_anon:52712kB active_file:48kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:200kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2038.568264] lowmem_reserve[]: 0 0 0 0 0 [ 2038.572870] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 0*128kB 7*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 2*4096kB (M) = 11064kB [ 2038.585840] Node 0 DMA32: 854*4kB (ME) 875*8kB (ME) 339*16kB (ME) 125*32kB (UME) 58*64kB (M) 27*128kB (UM) 10*256kB (UM) 8*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 35712kB [ 2038.602147] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2038.613363] Node 1 Normal: 173*4kB (UME) 103*8kB (ME) 47*16kB (ME) 53*32kB (UME) 22*64kB (M) 7*128kB (M) 5*256kB (M) 9*512kB (UME) 4*1024kB (UME) 4*2048kB (UM) 7*4096kB (U) = 53116kB [ 2038.629921] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2038.638842] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2038.647587] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2038.657092] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2038.665762] 49986 total pagecache pages [ 2038.669816] 0 pages in swap cache [ 2038.677407] Swap cache stats: add 0, delete 0, find 0/0 [ 2038.682855] Free swap = 0kB [ 2038.685858] Total swap = 0kB [ 2038.688861] 2097051 pages RAM [ 2038.694159] 0 pages HighMem/MovableOnly [ 2038.698121] 363841 pages reserved [ 2038.701634] 0 pages cma reserved [ 2038.704995] Out of memory (oom_kill_allocating_task): Kill process 8051 (systemd-journal) score 0 or sacrifice child [ 2038.715740] Killed process 8051 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:2088kB [ 2038.726951] oom_reaper: reaped process 8051 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2088kB [ 2038.773788] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2038.793774] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2038.800662] CPU: 1 PID: 9115 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 2038.808465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2038.817813] Call Trace: [ 2038.820399] dump_stack+0x1b2/0x281 [ 2038.824021] dump_header+0x178/0x82f [ 2038.827729] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2038.832824] ? ___ratelimit+0x2cd/0x530 [ 2038.836792] oom_kill_process.cold+0x10/0xb18 [ 2038.841286] out_of_memory+0xe3e/0x1190 [ 2038.845260] ? oom_killer_disable+0x1c0/0x1c0 [ 2038.849745] ? mutex_trylock+0x152/0x1a0 [ 2038.853792] __alloc_pages_nodemask+0x23e1/0x2720 [ 2038.858618] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2038.863488] alloc_pages_current+0x155/0x260 [ 2038.867876] filemap_fault+0xea3/0x1980 [ 2038.871835] ext4_filemap_fault+0x84/0xb0 [ 2038.875963] __do_fault+0xfa/0x380 [ 2038.879507] __handle_mm_fault+0x2497/0x4620 [ 2038.883896] ? vm_insert_page+0x7c0/0x7c0 [ 2038.888031] ? task_work_run+0xfd/0x190 [ 2038.891986] handle_mm_fault+0x391/0x860 [ 2038.896218] __do_page_fault+0x549/0xad0 [ 2038.900257] ? spurious_fault+0x640/0x640 [ 2038.904383] ? do_page_fault+0x60/0x500 [ 2038.908390] ? page_fault+0x2f/0x50 [ 2038.911992] page_fault+0x45/0x50 [ 2038.915447] RIP: 4bf5bd:0x3caaaaaaaaaa [ 2038.919346] RSP: 32739ce0:0000000000000003 EFLAGS: 7ffc3273a130 [ 2038.920574] Bluetooth: hci0 command 0x041b tx timeout [ 2038.934865] Mem-Info: [ 2038.937314] active_anon:14832 inactive_anon:48603 isolated_anon:0 [ 2038.937314] active_file:17 inactive_file:17 isolated_file:0 [ 2038.937314] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2038.937314] slab_reclaimable:12863 slab_unreclaimable:113194 [ 2038.937314] mapped:52225 shmem:49940 pagetables:715 bounce:0 [ 2038.937314] free:25097 free_pcp:100 free_cma:0 [ 2038.973884] Bluetooth: hci3 command 0x041b tx timeout [ 2038.980272] Node 0 active_anon:57988kB inactive_anon:141700kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198660kB dirty:0kB writeback:0kB shmem:146704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2039.008457] Node 1 active_anon:1340kB inactive_anon:52712kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2039.036253] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2039.064024] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2039.069154] Node 0 DMA32 free:35820kB min:36200kB low:45248kB high:54296kB active_anon:55940kB inactive_anon:141700kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7232kB pagetables:2656kB bounce:0kB free_pcp:132kB local_pcp:120kB free_cma:0kB [ 2039.098479] lowmem_reserve[]: 0 0 0 0 0 [ 2039.102611] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2039.129076] lowmem_reserve[]: 0 0 0 0 0 [ 2039.134115] Node 1 Normal free:53284kB min:53696kB low:67120kB high:80544kB active_anon:1340kB inactive_anon:52712kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:200kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2039.163764] lowmem_reserve[]: 0 0 0 0 0 [ 2039.167740] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 0*128kB 7*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 2*4096kB (M) = 11064kB [ 2039.180670] Node 0 DMA32: 836*4kB (UME) 883*8kB (UME) 344*16kB (ME) 132*32kB (ME) 61*64kB (UM) 26*128kB (M) 10*256kB (UM) 7*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 35560kB [ 2039.196867] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2039.207648] Node 1 Normal: 177*4kB (UME) 106*8kB (UME) 49*16kB (UME) 52*32kB (ME) 22*64kB (M) 8*128kB (UM) 5*256kB (M) 9*512kB (UME) 4*1024kB (UME) 4*2048kB (UM) 7*4096kB (U) = 53284kB [ 2039.225998] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2039.234909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2039.243726] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2039.253435] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2039.262498] 49974 total pagecache pages [ 2039.266469] 0 pages in swap cache [ 2039.269909] Swap cache stats: add 0, delete 0, find 0/0 [ 2039.275296] Free swap = 0kB [ 2039.278291] Total swap = 0kB [ 2039.281355] 2097051 pages RAM [ 2039.284494] 0 pages HighMem/MovableOnly [ 2039.288439] 363841 pages reserved [ 2039.292536] 0 pages cma reserved [ 2039.295900] Out of memory (oom_kill_allocating_task): Kill process 9115 (syz-executor.2) score 0 or sacrifice child [ 2039.306796] Killed process 9115 (syz-executor.2) total-vm:93120kB, anon-rss:84kB, file-rss:33292kB, shmem-rss:0kB [ 2039.337085] oom_reaper: reaped process 9115 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2039.368961] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2039.416663] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2039.442255] CPU: 1 PID: 28186 Comm: syz-fuzzer Not tainted 4.14.227-syzkaller #0 [ 2039.449813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2039.459355] Call Trace: [ 2039.462201] dump_stack+0x1b2/0x281 [ 2039.465825] dump_header+0x178/0x82f [ 2039.469535] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2039.474891] ? ___ratelimit+0x2cd/0x530 [ 2039.478893] oom_kill_process.cold+0x10/0xb18 [ 2039.483505] out_of_memory+0xe3e/0x1190 [ 2039.487516] ? oom_killer_disable+0x1c0/0x1c0 [ 2039.492099] ? mutex_trylock+0x152/0x1a0 [ 2039.496227] __alloc_pages_nodemask+0x23e1/0x2720 [ 2039.501067] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2039.505897] alloc_pages_current+0x155/0x260 [ 2039.510298] filemap_fault+0xea3/0x1980 [ 2039.514258] ext4_filemap_fault+0x84/0xb0 [ 2039.518406] __do_fault+0xfa/0x380 [ 2039.521923] __handle_mm_fault+0x2497/0x4620 [ 2039.526917] ? vm_insert_page+0x7c0/0x7c0 [ 2039.531049] handle_mm_fault+0x391/0x860 [ 2039.535088] __do_page_fault+0x549/0xad0 [ 2039.539128] ? spurious_fault+0x640/0x640 [ 2039.543252] ? do_page_fault+0x60/0x500 [ 2039.547219] ? page_fault+0x2f/0x50 [ 2039.550836] page_fault+0x45/0x50 [ 2039.554275] RIP: 8a8900:0x4 [ 2039.557182] RSP: 03c3:000000c0007a9f28 EFLAGS: 00000003 [ 2039.558642] Mem-Info: [ 2039.566690] active_anon:14818 inactive_anon:48603 isolated_anon:0 [ 2039.566690] active_file:24 inactive_file:85 isolated_file:0 [ 2039.566690] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2039.566690] slab_reclaimable:12863 slab_unreclaimable:112835 [ 2039.566690] mapped:52245 shmem:49940 pagetables:694 bounce:0 [ 2039.566690] free:25131 free_pcp:117 free_cma:0 [ 2039.600196] Node 0 active_anon:57960kB inactive_anon:141700kB active_file:72kB inactive_file:136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198740kB dirty:0kB writeback:0kB shmem:146704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2039.628920] Node 1 active_anon:1312kB inactive_anon:52712kB active_file:0kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2039.656404] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2039.692761] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2039.697830] Node 0 DMA32 free:35668kB min:36200kB low:45248kB high:54296kB active_anon:55912kB inactive_anon:141700kB active_file:0kB inactive_file:556kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7200kB pagetables:2572kB bounce:0kB free_pcp:272kB local_pcp:0kB free_cma:0kB [ 2039.750641] lowmem_reserve[]: 0 0 0 0 0 [ 2039.762158] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2039.788583] lowmem_reserve[]: 0 0 0 0 0 [ 2039.792663] Node 1 Normal free:53328kB min:53696kB low:67120kB high:80544kB active_anon:1312kB inactive_anon:52712kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:200kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2039.822084] lowmem_reserve[]: 0 0 0 0 0 [ 2039.826088] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 0*128kB 7*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 2*4096kB (M) = 11064kB [ 2039.846376] Node 0 DMA32: 807*4kB (ME) 946*8kB (UME) 345*16kB (UME) 139*32kB (UME) 61*64kB (UM) 27*128kB (UM) 9*256kB (M) 7*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 36060kB [ 2039.872918] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2039.895064] Node 1 Normal: 180*4kB (UME) 108*8kB (UME) 50*16kB (UME) 52*32kB (ME) 22*64kB (M) 8*128kB (UM) 5*256kB (M) 9*512kB (UME) 4*1024kB (UME) 4*2048kB (UM) 7*4096kB (U) = 53328kB [ 2039.912510] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2039.922532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2039.931721] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2039.951261] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2039.970696] 49973 total pagecache pages [ 2039.974870] 0 pages in swap cache [ 2039.978325] Swap cache stats: add 0, delete 0, find 0/0 [ 2039.994492] Free swap = 0kB [ 2039.997744] Total swap = 0kB [ 2040.015256] 2097051 pages RAM [ 2040.018967] 0 pages HighMem/MovableOnly [ 2040.026055] 363841 pages reserved [ 2040.029633] 0 pages cma reserved [ 2040.034405] Out of memory (oom_kill_allocating_task): Kill process 28186 (syz-fuzzer) score 0 or sacrifice child [ 2040.044840] Killed process 9113 (syz-executor.5) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 2040.068212] oom_reaper: reaped process 9078 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2040.089985] oom_reaper: reaped process 9113 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2040.103235] systemd-cgroups invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 2040.117153] systemd-cgroups cpuset=/ mems_allowed=0-1 [ 2040.125658] CPU: 0 PID: 9551 Comm: systemd-cgroups Not tainted 4.14.227-syzkaller #0 [ 2040.134939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2040.144494] Call Trace: [ 2040.147091] dump_stack+0x1b2/0x281 [ 2040.150716] dump_header+0x178/0x82f [ 2040.154433] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2040.159531] ? ___ratelimit+0x2cd/0x530 [ 2040.163511] oom_kill_process.cold+0x10/0xb18 [ 2040.168155] out_of_memory+0xe3e/0x1190 [ 2040.172243] ? oom_killer_disable+0x1c0/0x1c0 [ 2040.174845] syz-executor.1: vmalloc: allocation failure, allocated 1560182784 of 2147487744 bytes [ 2040.176742] ? mutex_trylock+0x152/0x1a0 [ 2040.191067] __alloc_pages_nodemask+0x23e1/0x2720 [ 2040.196059] ? _find_next_bit+0xdb/0x100 [ 2040.197229] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2040.200150] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2040.200165] ? lock_acquire+0x170/0x3f0 [ 2040.216992] ? do_raw_spin_unlock+0x164/0x220 [ 2040.219530] syz-executor.1 cpuset= [ 2040.221488] alloc_pages_current+0x155/0x260 [ 2040.221498] __pmd_alloc+0x37/0x3f0 [ 2040.221508] move_page_tables+0xf00/0x17d0 [ 2040.221521] ? vmacache_update+0xbb/0x130 [ 2040.221531] shift_arg_pages+0x17c/0x3e0 [ 2040.221539] ? put_arg_page+0x1c0/0x1c0 [ 2040.221548] ? change_protection+0xa0/0xa0 [ 2040.221556] ? lock_downgrade+0x740/0x740 [ 2040.221565] ? lock_acquire+0x170/0x3f0 [ 2040.221570] ? setup_arg_pages+0x242/0x6f0 [ 2040.221582] setup_arg_pages+0x584/0x6f0 [ 2040.221600] ? shift_arg_pages+0x3e0/0x3e0 [ 2040.227760] / [ 2040.229766] ? get_random_u64+0xd4/0x1c0 [ 2040.244413] mems_allowed=0-1 [ 2040.247096] load_elf_binary+0xa01/0x4750 [ 2040.293214] ? elf_core_dump+0x4410/0x4410 [ 2040.297477] search_binary_handler.part.0+0xd5/0x640 [ 2040.302600] do_execveat_common+0x1099/0x1f30 [ 2040.307556] ? copy_strings_kernel+0x110/0x110 [ 2040.312272] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2040.319015] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2040.325912] do_execve+0x33/0x50 [ 2040.329454] call_usermodehelper_exec_async+0x2ed/0x510 [ 2040.334899] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2040.340341] ret_from_fork+0x24/0x30 [ 2040.347991] CPU: 1 PID: 9078 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 2040.349394] Mem-Info: [ 2040.356068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2040.356073] Call Trace: [ 2040.356092] dump_stack+0x1b2/0x281 [ 2040.356105] warn_alloc.cold+0x96/0x1cc [ 2040.356116] ? zone_watermark_ok_safe+0x220/0x220 [ 2040.356136] __vmalloc_area_node+0x48a/0x680 [ 2040.359235] active_anon:14270 inactive_anon:48603 isolated_anon:0 [ 2040.359235] active_file:46 inactive_file:0 isolated_file:0 [ 2040.359235] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2040.359235] slab_reclaimable:12824 slab_unreclaimable:112709 [ 2040.359235] mapped:52232 shmem:49940 pagetables:693 bounce:0 [ 2040.359235] free:13864 free_pcp:120 free_cma:0 [ 2040.368771] ? __vmalloc_node_range+0x150/0x150 [ 2040.368779] ? __get_vm_area_node+0x27d/0x340 [ 2040.368790] __vmalloc_node_range+0xbe/0x150 [ 2040.368802] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2040.368812] vmalloc_user+0x47/0xa0 [ 2040.371418] Node 0 active_anon:55776kB inactive_anon:141700kB active_file:120kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198688kB dirty:0kB writeback:0kB shmem:146704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2040.375004] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2040.381321] Node 1 active_anon:1304kB inactive_anon:52712kB active_file:64kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2040.386130] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2040.390517] Node 0 [ 2040.425205] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2040.425219] __vb2_queue_alloc+0x47a/0xd90 [ 2040.425239] vb2_core_create_bufs+0x279/0x5a0 [ 2040.425251] ? __vb2_queue_free+0x7a0/0x7a0 [ 2040.430007] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2040.434493] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2040.434504] ? trace_hardirqs_on+0x10/0x10 [ 2040.434514] vb2_create_bufs+0x2e1/0x5b0 [ 2040.438987] lowmem_reserve[]: [ 2040.444608] ? vb2_thread_start+0x310/0x310 [ 2040.444629] v4l_create_bufs+0xa4/0x150 [ 2040.448224] 0 [ 2040.476942] __video_do_ioctl+0x65b/0x6a0 [ 2040.476956] ? video_ioctl2+0x30/0x30 [ 2040.476966] ? __might_fault+0x177/0x1b0 [ 2040.476978] ? video_ioctl2+0x30/0x30 [ 2040.481436] 2717 [ 2040.508555] video_usercopy+0xfd/0xe70 [ 2040.508579] ? v4l_g_ctrl+0x390/0x390 [ 2040.513947] 2718 [ 2040.516236] ? lock_acquire+0x170/0x3f0 [ 2040.520370] 2718 [ 2040.525561] ? lock_downgrade+0x740/0x740 [ 2040.525572] ? trace_hardirqs_on+0x10/0x10 [ 2040.525583] ? futex_exit_release+0x220/0x220 [ 2040.525594] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2040.525605] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2040.530108] 2718 [ 2040.534420] v4l2_ioctl+0x1bb/0x2f0 [ 2040.534430] ? v4l2_open+0x2f0/0x2f0 [ 2040.534442] do_vfs_ioctl+0x75a/0xff0 [ 2040.566250] ? ioctl_preallocate+0x1a0/0x1a0 [ 2040.570455] Node 0 [ 2040.574605] ? lock_downgrade+0x740/0x740 [ 2040.574618] ? __fget+0x225/0x360 [ 2040.574626] ? do_vfs_ioctl+0xff0/0xff0 [ 2040.574637] ? security_file_ioctl+0x83/0xb0 [ 2040.577725] DMA32 free:17704kB min:36200kB low:45248kB high:54296kB active_anon:55776kB inactive_anon:141700kB active_file:120kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7200kB pagetables:2568kB bounce:0kB free_pcp:296kB local_pcp:152kB free_cma:0kB [ 2040.582019] SyS_ioctl+0x7f/0xb0 [ 2040.582027] ? do_vfs_ioctl+0xff0/0xff0 [ 2040.582038] do_syscall_64+0x1d5/0x640 [ 2040.582054] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2040.586861] lowmem_reserve[]: [ 2040.588646] RIP: 0033:0x466459 [ 2040.592815] 0 [ 2040.596593] RSP: 002b:00007ff4b4c29188 EFLAGS: 00000246 [ 2040.600675] 0 [ 2040.604598] ORIG_RAX: 0000000000000010 [ 2040.606653] 0 [ 2040.610704] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2040.610710] RDX: 0000000020001880 RSI: 00000000c100565c RDI: 0000000000000003 [ 2040.610714] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2040.610718] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2040.610723] R13: 00007ffdc779acaf R14: 00007ff4b4c29300 R15: 0000000000022000 [ 2040.623442] warn_alloc_show_mem: 1 callbacks suppressed [ 2040.623447] Mem-Info: [ 2040.639541] 0 [ 2040.649047] active_anon:14270 inactive_anon:48603 isolated_anon:0 [ 2040.649047] active_file:46 inactive_file:0 isolated_file:0 [ 2040.649047] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2040.649047] slab_reclaimable:12824 slab_unreclaimable:112709 [ 2040.649047] mapped:52232 shmem:49940 pagetables:693 bounce:0 [ 2040.649047] free:13864 free_pcp:118 free_cma:0 [ 2040.650264] 0 [ 2040.653656] Node 0 active_anon:55776kB inactive_anon:141700kB active_file:120kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198688kB dirty:0kB writeback:0kB shmem:146704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2040.674761] Node 1 active_anon:1304kB inactive_anon:52712kB active_file:64kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2040.679512] Node 0 [ 2040.679982] Node 0 [ 2040.691539] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2040.719705] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2040.731961] lowmem_reserve[]: [ 2040.741330] lowmem_reserve[]: [ 2040.758320] 0 [ 2040.770260] 0 [ 2040.788030] 0 [ 2040.801072] 2717 [ 2040.808840] 0 [ 2040.844282] 2718 [ 2040.874852] 0 [ 2040.902649] 2718 [ 2040.934567] 0 [ 2040.957727] 2718 [ 2040.972873] Node 1 Normal free:26796kB min:53696kB low:67120kB high:80544kB active_anon:1304kB inactive_anon:52712kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:200kB bounce:0kB free_pcp:184kB local_pcp:60kB free_cma:0kB [ 2040.981521] Node 0 DMA32 free:17704kB min:36200kB low:45248kB high:54296kB active_anon:55776kB inactive_anon:141700kB active_file:64kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7200kB pagetables:2568kB bounce:0kB free_pcp:288kB local_pcp:140kB free_cma:0kB [ 2041.016063] lowmem_reserve[]: [ 2041.051640] Bluetooth: hci3 command 0x040f tx timeout [ 2041.055794] 0 0 0 0 0 [ 2041.068545] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10956kB [ 2041.068944] lowmem_reserve[]: [ 2041.088023] Node 0 DMA32: 738*4kB (UME) 806*8kB (UME) 291*16kB (UME) 72*32kB (UME) 19*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17704kB [ 2041.094898] 0 [ 2041.111833] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2041.118491] 0 [ 2041.128586] Node 1 [ 2041.128979] 0 [ 2041.130386] Normal: 177*4kB (UME) 105*8kB (ME) 48*16kB (ME) 53*32kB (UME) 22*64kB (M) 7*128kB (M) 6*256kB (UM) 9*512kB (UME) 4*1024kB (UME) 3*2048kB (M) 1*4096kB (U) = 26796kB [ 2041.145301] 0 [ 2041.158443] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2041.159696] 0 [ 2041.160249] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2041.182483] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2041.184252] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2041.216771] lowmem_reserve[]: 0 0 0 0 0 [ 2041.222960] Node 1 Normal free:26796kB min:53696kB low:67120kB high:80544kB active_anon:1304kB inactive_anon:52712kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:200kB bounce:0kB free_pcp:184kB local_pcp:124kB free_cma:0kB [ 2041.224859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2041.262574] 49974 total pagecache pages [ 2041.263794] lowmem_reserve[]: 0 [ 2041.266569] 0 pages in swap cache [ 2041.266575] 0 [ 2041.275198] Swap cache stats: add 0, delete 0, find 0/0 [ 2041.285885] Free swap = 0kB [ 2041.288342] 0 [ 2041.288904] Total swap = 0kB [ 2041.288909] 0 [ 2041.295202] 2097051 pages RAM [ 2041.297443] 0 [ 2041.300081] 0 pages HighMem/MovableOnly [ 2041.303704] 363841 pages reserved [ 2041.309355] 0 pages cma reserved [ 2041.316698] Out of memory (oom_kill_allocating_task): Kill process 9551 (systemd-cgroups) score 0 or sacrifice child [ 2041.318934] Node 0 [ 2041.329739] Killed process 9551 (systemd-cgroups) total-vm:4kB, anon-rss:4kB, file-rss:0kB, shmem-rss:0kB [ 2041.334591] DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10956kB [ 2041.358856] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2041.364453] Node 0 [ 2041.372101] systemd-cgroups: [ 2041.373601] syz-executor.2 cpuset= [ 2041.374339] page allocation failure: order:0 [ 2041.377425] / mems_allowed=0-1 [ 2041.388585] CPU: 1 PID: 9112 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 2041.396366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2041.397566] DMA32: [ 2041.405707] Call Trace: [ 2041.405724] dump_stack+0x1b2/0x281 [ 2041.405736] dump_header+0x178/0x82f [ 2041.405748] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2041.407978] , mode:0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask= [ 2041.410540] ? ___ratelimit+0x2cd/0x530 [ 2041.410550] oom_kill_process.cold+0x10/0xb18 [ 2041.410567] out_of_memory+0xe3e/0x1190 [ 2041.414160] (null) [ 2041.417857] ? oom_killer_disable+0x1c0/0x1c0 [ 2041.422966] 738*4kB [ 2041.429586] ? mutex_trylock+0x152/0x1a0 [ 2041.433555] systemd-cgroups cpuset= [ 2041.438018] __alloc_pages_nodemask+0x23e1/0x2720 [ 2041.441985] (UME) [ 2041.444106] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2041.448561] 806*8kB [ 2041.450878] alloc_pages_current+0x155/0x260 [ 2041.450889] filemap_fault+0xea3/0x1980 [ 2041.454929] / [ 2041.458536] ext4_filemap_fault+0x84/0xb0 [ 2041.463711] (UME) [ 2041.465820] __do_fault+0xfa/0x380 [ 2041.470656] mems_allowed=0-1 [ 2041.472939] __handle_mm_fault+0x2497/0x4620 [ 2041.480545] 291*16kB [ 2041.481287] ? kill_orphaned_pgrp+0x310/0x310 [ 2041.482986] (UME) [ 2041.487115] ? vm_insert_page+0x7c0/0x7c0 [ 2041.489236] 73*32kB [ 2041.492753] ? lock_downgrade+0x740/0x740 [ 2041.492770] handle_mm_fault+0x391/0x860 [ 2041.492782] __do_page_fault+0x549/0xad0 [ 2041.510538] (UME) [ 2041.513347] ? spurious_fault+0x640/0x640 [ 2041.515639] 19*64kB [ 2041.519767] ? do_page_fault+0x60/0x500 [ 2041.540318] ? page_fault+0x2f/0x50 [ 2041.540543] (UM) [ 2041.543924] page_fault+0x45/0x50 [ 2041.543926] 1*128kB (U) [ 2041.545982] RIP: 56ca68: (null) [ 2041.549412] 0*256kB [ 2041.552057] RSP: 0000:00007ffc3273a2a0 EFLAGS: ffffffff [ 2041.554576] CPU: 1 PID: 9551 Comm: systemd-cgroups Not tainted 4.14.227-syzkaller #0 [ 2041.556128] 0*512kB [ 2041.558429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2041.558434] Call Trace: [ 2041.581091] Mem-Info: [ 2041.584205] dump_stack+0x1b2/0x281 [ 2041.586770] active_anon:14270 inactive_anon:48603 isolated_anon:0 [ 2041.586770] active_file:34 inactive_file:11 isolated_file:0 [ 2041.586770] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2041.586770] slab_reclaimable:12824 slab_unreclaimable:112712 [ 2041.586770] mapped:52225 shmem:49940 pagetables:693 bounce:0 [ 2041.586770] free:13864 free_pcp:145 free_cma:0 [ 2041.589155] warn_alloc.cold+0x96/0x1cc [ 2041.596022] 0*1024kB [ 2041.630147] ? zone_watermark_ok_safe+0x220/0x220 [ 2041.630156] ? usleep_range+0x130/0x130 [ 2041.630163] ? try_to_free_pages+0x23f/0x6e0 [ 2041.630174] ? _find_next_bit+0xdb/0x100 [ 2041.634165] Node 0 active_anon:55776kB inactive_anon:141700kB active_file:132kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198660kB dirty:0kB writeback:0kB shmem:146704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2041.636516] ? run_timer_softirq+0x5a0/0x5a0 [ 2041.641373] Node 1 active_anon:1304kB inactive_anon:52712kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2041.645299] __alloc_pages_nodemask+0x2127/0x2720 [ 2041.649784] Node 0 [ 2041.653836] ? _find_next_bit+0xdb/0x100 [ 2041.653844] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2041.653859] ? lock_acquire+0x170/0x3f0 [ 2041.681791] 0*2048kB [ 2041.686161] ? do_raw_spin_unlock+0x164/0x220 [ 2041.714592] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2041.719385] alloc_pages_current+0x155/0x260 [ 2041.721610] lowmem_reserve[]: [ 2041.725630] __pmd_alloc+0x37/0x3f0 [ 2041.730559] 0*4096kB [ 2041.737353] move_page_tables+0xf00/0x17d0 [ 2041.739745] = 17736kB [ 2041.739749] Node 0 [ 2041.744335] ? vmacache_update+0xbb/0x130 [ 2041.744347] shift_arg_pages+0x17c/0x3e0 [ 2041.744358] ? put_arg_page+0x1c0/0x1c0 [ 2041.769869] 0 [ 2041.774227] ? change_protection+0xa0/0xa0 [ 2041.774236] ? lock_downgrade+0x740/0x740 [ 2041.774245] ? lock_acquire+0x170/0x3f0 [ 2041.777323] 2717 [ 2041.780928] ? setup_arg_pages+0x242/0x6f0 [ 2041.780941] setup_arg_pages+0x584/0x6f0 [ 2041.780952] ? shift_arg_pages+0x3e0/0x3e0 [ 2041.783336] 2718 [ 2041.787550] ? get_random_u64+0xd4/0x1c0 [ 2041.789928] 2718 [ 2041.792148] load_elf_binary+0xa01/0x4750 [ 2041.792168] ? elf_core_dump+0x4410/0x4410 [ 2041.792182] search_binary_handler.part.0+0xd5/0x640 [ 2041.796297] 2718 [ 2041.800354] do_execveat_common+0x1099/0x1f30 [ 2041.804330] Normal: [ 2041.806086] ? copy_strings_kernel+0x110/0x110 [ 2041.810292] 0*4kB [ 2041.814437] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2041.814447] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2041.814458] do_execve+0x33/0x50 [ 2041.814470] call_usermodehelper_exec_async+0x2ed/0x510 [ 2041.814480] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2041.820498] ret_from_fork+0x24/0x30 [ 2041.824800] Node 0 [ 2041.831810] Mem-Info: [ 2041.850259] 0*8kB [ 2041.857546] active_anon:14270 inactive_anon:48603 isolated_anon:0 [ 2041.857546] active_file:32 inactive_file:1 isolated_file:0 [ 2041.857546] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2041.857546] slab_reclaimable:12824 slab_unreclaimable:112713 [ 2041.857546] mapped:52225 shmem:49940 pagetables:693 bounce:0 [ 2041.857546] free:13864 free_pcp:146 free_cma:0 [ 2041.878471] DMA32 free:17736kB min:36200kB low:45248kB high:54296kB active_anon:55776kB inactive_anon:141700kB active_file:64kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7168kB pagetables:2480kB bounce:0kB free_pcp:396kB local_pcp:276kB free_cma:0kB [ 2041.883089] Node 0 active_anon:55776kB inactive_anon:141700kB active_file:64kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198660kB dirty:0kB writeback:0kB shmem:146704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2041.891535] lowmem_reserve[]: [ 2041.895758] Node 1 active_anon:1304kB inactive_anon:52712kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2041.899323] 0 [ 2041.903338] Node 0 [ 2041.919300] 0*16kB [ 2041.943233] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2041.978540] 0*32kB [ 2042.007626] 0 [ 2042.037202] 0*64kB [ 2042.066662] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2042.073968] Node 0 DMA32 free:17736kB min:36200kB low:45248kB high:54296kB active_anon:55776kB inactive_anon:141700kB active_file:64kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7168kB pagetables:2480kB bounce:0kB free_pcp:424kB local_pcp:148kB free_cma:0kB [ 2042.077351] 0*128kB [ 2042.109365] 0 0 0 [ 2042.113982] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2042.119282] 0*256kB [ 2042.146219] lowmem_reserve[]: 0 0 0 0 0 [ 2042.152098] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2042.152612] Node 0 [ 2042.157641] Node 1 Normal: [ 2042.159867] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2042.159872] lowmem_reserve[]: [ 2042.174574] 177*4kB [ 2042.193218] lowmem_reserve[]: 0 0 0 0 0 [ 2042.199532] Node 1 Normal free:26796kB min:53696kB low:67120kB high:80544kB active_anon:1304kB inactive_anon:52712kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:200kB bounce:0kB free_pcp:184kB local_pcp:124kB free_cma:0kB [ 2042.204547] (UME) [ 2042.234169] 0 0 0 0 0 [ 2042.238823] Node 1 Normal free:26796kB min:53696kB low:67120kB high:80544kB active_anon:1304kB inactive_anon:52712kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:200kB bounce:0kB free_pcp:184kB local_pcp:124kB free_cma:0kB [ 2042.240878] 105*8kB [ 2042.269560] lowmem_reserve[]: 0 0 0 0 0 [ 2042.276614] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10956kB [ 2042.283973] (ME) 48*16kB (ME) 53*32kB (UME) 22*64kB (M) 7*128kB (M) 6*256kB (UM) 9*512kB (UME) 4*1024kB (UME) 3*2048kB (M) 1*4096kB (U) = 26796kB [ 2042.291903] Node 0 [ 2042.303232] lowmem_reserve[]: 0 0 0 0 0 [ 2042.309456] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10956kB [ 2042.318620] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2042.324509] DMA32: 738*4kB (UME) 809*8kB (UME) 295*16kB (UME) 73*32kB (UME) 19*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17824kB [ 2042.347679] Node 0 DMA32: 738*4kB (UME) 809*8kB (UME) 295*16kB (UME) 73*32kB (UME) 19*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17824kB [ 2042.347789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2042.364075] Node 0 [ 2042.371061] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2042.386056] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2042.386521] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2042.396231] Node 1 Normal: 177*4kB (UME) 105*8kB (ME) 48*16kB (ME) 53*32kB (UME) 22*64kB (M) 7*128kB (M) 6*256kB (UM) 9*512kB (UME) 4*1024kB (UME) 3*2048kB (M) 1*4096kB (U) = 26796kB [ 2042.396301] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2042.396306] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2042.396310] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2042.396314] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2042.396318] 49974 total pagecache pages [ 2042.396325] 0 pages in swap cache [ 2042.396328] Swap cache stats: add 0, delete 0, find 0/0 [ 2042.396331] Free swap = 0kB [ 2042.396333] Total swap = 0kB [ 2042.396339] 2097051 pages RAM [ 2042.396342] 0 pages HighMem/MovableOnly [ 2042.396345] 363841 pages reserved [ 2042.396348] 0 pages cma reserved [ 2042.396543] Node 1 [ 2042.420315] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2042.424291] Normal: [ 2042.446944] 49974 total pagecache pages [ 2042.450286] 177*4kB [ 2042.472122] 0 pages in swap cache [ 2042.475941] (UME) [ 2042.479041] Swap cache stats: add 0, delete 0, find 0/0 [ 2042.483071] 105*8kB (ME) 48*16kB (ME) 53*32kB (UME) 22*64kB (M) 7*128kB (M) 6*256kB (UM) 9*512kB (UME) 4*1024kB (UME) 3*2048kB (M) 1*4096kB (U) = 26796kB [ 2042.483137] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2042.483142] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2042.483147] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2042.483151] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2042.483155] 49974 total pagecache pages [ 2042.483162] 0 pages in swap cache [ 2042.483166] Swap cache stats: add 0, delete 0, find 0/0 [ 2042.483170] Free swap = 0kB [ 2042.483173] Total swap = 0kB [ 2042.483178] 2097051 pages RAM [ 2042.483181] 0 pages HighMem/MovableOnly [ 2042.483184] 363841 pages reserved [ 2042.507169] Free swap = 0kB [ 2042.511726] 0 pages cma reserved [ 2042.521060] Total swap = 0kB [ 2042.539108] Out of memory (oom_kill_allocating_task): Kill process 9112 (syz-executor.2) score 0 or sacrifice child [ 2042.558574] 2097051 pages RAM [ 2042.567423] Killed process 9112 (syz-executor.2) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 2042.575471] 0 pages HighMem/MovableOnly [ 2042.577776] oom_reaper: reaped process 9551 (systemd-cgroups), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2042.593852] 363841 pages reserved [ 2042.615172] oom_reaper: reaped process 9112 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2042.632886] 0 pages cma reserved [ 2042.636742] syz-executor.2: page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 2042.685372] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2042.705101] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2042.710244] CPU: 1 PID: 9112 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 2042.718032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2042.727394] Call Trace: [ 2042.729987] dump_stack+0x1b2/0x281 [ 2042.733616] warn_alloc.cold+0x96/0x1cc [ 2042.737590] ? zone_watermark_ok_safe+0x220/0x220 [ 2042.742433] ? usleep_range+0x130/0x130 [ 2042.746422] ? try_to_free_pages+0x23f/0x6e0 [ 2042.750828] ? _find_next_bit+0xdb/0x100 [ 2042.754916] ? run_timer_softirq+0x5a0/0x5a0 [ 2042.759327] __alloc_pages_nodemask+0x2127/0x2720 [ 2042.768707] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2042.773572] alloc_pages_current+0x155/0x260 [ 2042.777990] filemap_fault+0xea3/0x1980 [ 2042.781976] ext4_filemap_fault+0x84/0xb0 [ 2042.786123] __do_fault+0xfa/0x380 [ 2042.789662] __handle_mm_fault+0x2497/0x4620 [ 2042.794072] ? kill_orphaned_pgrp+0x310/0x310 [ 2042.798562] ? vm_insert_page+0x7c0/0x7c0 [ 2042.802707] ? lock_downgrade+0x740/0x740 [ 2042.806865] handle_mm_fault+0x391/0x860 [ 2042.810927] __do_page_fault+0x549/0xad0 [ 2042.814989] ? spurious_fault+0x640/0x640 [ 2042.819143] ? do_page_fault+0x60/0x500 [ 2042.823117] ? page_fault+0x2f/0x50 [ 2042.826738] page_fault+0x45/0x50 [ 2042.830180] RIP: 56ca68: (null) [ 2042.834234] RSP: 0000:00007ffc3273a2a0 EFLAGS: ffffffff [ 2042.837408] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2042.847653] CPU: 1 PID: 28186 Comm: syz-fuzzer Not tainted 4.14.227-syzkaller #0 [ 2042.855179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2042.864535] Call Trace: [ 2042.867132] dump_stack+0x1b2/0x281 [ 2042.870755] dump_header+0x178/0x82f [ 2042.874474] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2042.879581] ? ___ratelimit+0x2cd/0x530 [ 2042.883558] oom_kill_process.cold+0x10/0xb18 [ 2042.888066] out_of_memory+0xe3e/0x1190 [ 2042.892042] ? oom_killer_disable+0x1c0/0x1c0 [ 2042.896534] ? mutex_trylock+0x152/0x1a0 [ 2042.900591] __alloc_pages_nodemask+0x23e1/0x2720 [ 2042.905446] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2042.910301] alloc_pages_current+0x155/0x260 [ 2042.914710] filemap_fault+0xea3/0x1980 [ 2042.918692] ext4_filemap_fault+0x84/0xb0 [ 2042.922840] __do_fault+0xfa/0x380 [ 2042.926382] __handle_mm_fault+0x2497/0x4620 [ 2042.930792] ? vm_insert_page+0x7c0/0x7c0 [ 2042.934948] handle_mm_fault+0x391/0x860 [ 2042.939006] __do_page_fault+0x549/0xad0 [ 2042.943067] ? spurious_fault+0x640/0x640 [ 2042.947214] ? do_page_fault+0x60/0x500 [ 2042.951189] ? page_fault+0x2f/0x50 [ 2042.954809] page_fault+0x45/0x50 [ 2042.958254] RIP: 8a8900:0x4 [ 2042.961170] RSP: 03c3:000000c0007a9f28 EFLAGS: 00000003 [ 2042.964370] Mem-Info: [ 2042.977794] active_anon:14252 inactive_anon:48603 isolated_anon:0 [ 2042.977794] active_file:21 inactive_file:2 isolated_file:0 [ 2042.977794] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2042.977794] slab_reclaimable:12822 slab_unreclaimable:112268 [ 2042.977794] mapped:43521 shmem:49940 pagetables:670 bounce:0 [ 2042.977794] free:14301 free_pcp:194 free_cma:0 [ 2043.000451] Mem-Info: [ 2043.013205] Node 0 active_anon:55704kB inactive_anon:141700kB active_file:64kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163844kB dirty:0kB writeback:0kB shmem:146704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2043.030868] active_anon:14252 inactive_anon:48603 isolated_anon:0 [ 2043.030868] active_file:17 inactive_file:17 isolated_file:0 [ 2043.030868] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2043.030868] slab_reclaimable:12817 slab_unreclaimable:112259 [ 2043.030868] mapped:43521 shmem:49940 pagetables:670 bounce:0 [ 2043.030868] free:14313 free_pcp:194 free_cma:0 [ 2043.046579] Node 1 active_anon:1304kB inactive_anon:52712kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2043.109845] Node 0 active_anon:55704kB inactive_anon:141700kB active_file:64kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163844kB dirty:0kB writeback:0kB shmem:146704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2043.112844] Node 0 [ 2043.151557] Bluetooth: hci3 command 0x0419 tx timeout [ 2043.159267] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2043.180445] Node 1 active_anon:1304kB inactive_anon:52712kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10240kB dirty:0kB writeback:0kB shmem:53056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2043.190137] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2043.229303] Node 0 DMA32 free:19500kB min:36200kB low:45248kB high:54296kB active_anon:55704kB inactive_anon:141700kB active_file:64kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7136kB pagetables:2476kB bounce:0kB free_pcp:580kB local_pcp:320kB free_cma:0kB [ 2043.258320] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2043.258339] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2043.258355] Node 0 DMA32 free:19500kB min:36200kB low:45248kB high:54296kB active_anon:55704kB inactive_anon:141700kB active_file:64kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7136kB pagetables:2476kB bounce:0kB free_pcp:580kB local_pcp:260kB free_cma:0kB [ 2043.258371] lowmem_reserve[]: 0 0 0 0 0 [ 2043.258389] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2043.258403] lowmem_reserve[]: 0 0 0 0 0 [ 2043.258418] Node 1 Normal free:26796kB min:53696kB low:67120kB high:80544kB active_anon:1304kB inactive_anon:52712kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:200kB bounce:0kB free_pcp:184kB local_pcp:60kB free_cma:0kB [ 2043.258434] lowmem_reserve[]: 0 0 0 0 0 [ 2043.258451] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB [ 2043.290151] lowmem_reserve[]: [ 2043.319329] (U) [ 2043.387203] 0 [ 2043.392921] 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10956kB [ 2043.407205] Node 0 DMA32: 737*4kB (ME) 1018*8kB (UME) 295*16kB (UME) 75*32kB (UME) 19*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19556kB [ 2043.428019] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2043.437262] 0 0 0 0 [ 2043.439375] Node 1 Normal: 178*4kB (UME) 109*8kB (UME) 50*16kB (UME) 58*32kB (UME) 25*64kB (UM) 12*128kB (UM) 10*256kB (UM) 13*512kB (UME) 8*1024kB (UME) 6*2048kB (UM) 4*4096kB (U) = 53456kB [ 2043.454120] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2043.469124] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2043.495348] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2043.520424] lowmem_reserve[]: 0 0 0 0 0 [ 2043.522445] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2043.524551] Node 1 Normal free:116884kB min:53696kB low:67120kB high:80544kB active_anon:1304kB inactive_anon:52712kB active_file:4kB inactive_file:2200kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:200kB bounce:0kB free_pcp:824kB local_pcp:620kB free_cma:0kB [ 2043.542845] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2043.564176] lowmem_reserve[]: 0 0 0 0 0 [ 2043.576483] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10956kB [ 2043.589872] 51047 total pagecache pages [ 2043.589882] 0 pages in swap cache [ 2043.589886] Swap cache stats: add 0, delete 0, find 0/0 [ 2043.589888] Free swap = 0kB [ 2043.589891] Total swap = 0kB [ 2043.589897] 2097051 pages RAM [ 2043.589900] 0 pages HighMem/MovableOnly [ 2043.589903] 363841 pages reserved [ 2043.589906] 0 pages cma reserved [ 2043.629814] Node 0 DMA32: 866*4kB (UME) 1293*8kB (UME) 425*16kB (UME) 172*32kB (UME) 112*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33408kB [ 2043.645163] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2043.661563] Node 1 Normal: 9*4kB (UME) 33*8kB (UE) 92*16kB (UE) 91*32kB (UME) 86*64kB (UM) 74*128kB (UM) 49*256kB (UM) 27*512kB (UME) 16*1024kB (UME) 9*2048kB (UM) 22*4096kB (U) = 170956kB [ 2043.679332] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2043.687704] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2043.688476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2043.705916] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2043.706336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2043.715230] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2043.730234] 52046 total pagecache pages [ 2043.730997] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2043.734301] 0 pages in swap cache [ 2043.752041] Swap cache stats: add 0, delete 0, find 0/0 [ 2043.752326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2043.757440] Free swap = 0kB [ 2043.757443] Total swap = 0kB [ 2043.757449] 2097051 pages RAM [ 2043.757452] 0 pages HighMem/MovableOnly [ 2043.757455] 363841 pages reserved [ 2043.757458] 0 pages cma reserved [ 2043.757465] Out of memory (oom_kill_allocating_task): Kill process 28186 (syz-fuzzer) score 0 or sacrifice child [ 2043.788023] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2043.799547] Killed process 8079 (syz-executor.4) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 2043.813723] device bridge_slave_1 left promiscuous mode [ 2043.830634] bridge0: port 2(bridge_slave_1) entered disabled state [ 2043.836989] oom_reaper: reaped process 8079 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2043.848524] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2043.851941] memory commitment underflow [ 2043.855375] ------------[ cut here ]------------ [ 2043.864323] WARNING: CPU: 1 PID: 4626 at mm/util.c:622 __vm_enough_memory.cold+0x18/0x59 [ 2043.870465] systemd[1]: Stopped Journal Service. [ 2043.872543] Kernel panic - not syncing: panic_on_warn set ... [ 2043.872543] [ 2043.872552] CPU: 1 PID: 4626 Comm: systemd-udevd Not tainted 4.14.227-syzkaller #0 [ 2043.872556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2043.872559] Call Trace: [ 2043.872573] dump_stack+0x1b2/0x281 [ 2043.872584] panic+0x1f9/0x42d [ 2043.872593] ? add_taint.cold+0x16/0x16 [ 2043.885547] systemd[1]: Starting Journal Service... [ 2043.892399] ? __vm_enough_memory.cold+0x18/0x59 [ 2043.892409] ? __vm_enough_memory.cold+0x18/0x59 [ 2043.892417] __warn.cold+0x20/0x44 [ 2043.892429] ? ist_end_non_atomic+0x10/0x10 [ 2043.937392] ? __vm_enough_memory.cold+0x18/0x59 [ 2043.942148] report_bug+0x208/0x250 [ 2043.945779] do_error_trap+0x195/0x2d0 [ 2043.949664] ? math_error+0x2d0/0x2d0 [ 2043.953461] ? vprintk_emit+0x3f2/0x620 [ 2043.957436] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2043.962278] invalid_op+0x1b/0x40 [ 2043.965729] RIP: 0010:__vm_enough_memory.cold+0x18/0x59 [ 2043.971085] RSP: 0018:ffff88809b5e7bf8 EFLAGS: 00010286 [ 2043.976442] RAX: 000000000000001b RBX: 000000000000000a RCX: 0000000000000000 [ 2043.983708] RDX: 0000000000000000 RSI: ffff88809b5dea98 RDI: ffffed10136bcf75 [ 2043.990976] RBP: 0000000000000001 R08: 000000000000001b R09: 0000000000000000 [ 2043.998251] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88809c7eacc0 [ 2044.005524] R13: ffffffff88feaf20 R14: ffffffffffc9049e R15: 0000000000000d36 [ 2044.012820] ? __vm_enough_memory.cold+0x18/0x59 [ 2044.017580] copy_process.part.0+0x4ab3/0x71c0 [ 2044.022175] ? __cleanup_sighand+0x40/0x40 [ 2044.026406] ? __local_bh_enable_ip+0xc1/0x170 [ 2044.031014] _do_fork+0x184/0xc80 [ 2044.034453] ? syscall_trace_enter+0x486/0xc20 [ 2044.039033] ? fork_idle+0x270/0x270 [ 2044.042746] ? syscall_slow_exit_work+0x560/0x560 [ 2044.047864] ? do_syscall_64+0x4c/0x640 [ 2044.051813] ? sys_vfork+0x20/0x20 [ 2044.055329] do_syscall_64+0x1d5/0x640 [ 2044.059210] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2044.064387] RIP: 0033:0x7f7e4fb6c38b [ 2044.068073] RSP: 002b:00007ffc68134b20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2044.075797] RAX: ffffffffffffffda RBX: 00007ffc68134b20 RCX: 00007f7e4fb6c38b [ 2044.083045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2044.090296] RBP: 00007ffc68134b70 R08: 00007f7e50d1d8c0 R09: 0000000000000210 [ 2044.097544] R10: 00007f7e50d1db90 R11: 0000000000000246 R12: 0000000000000000 [ 2044.104802] R13: 0000000000000020 R14: 0000000000000000 R15: 0000000000000000 [ 2044.113058] Kernel Offset: disabled [ 2044.117038] Rebooting in 86400 seconds..