82] dump_stack+0x1fc/0x2fe [ 888.768803] dump_header+0x15d/0xc3f [ 888.772611] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 888.777723] ? ___ratelimit+0x319/0x584 [ 888.781791] oom_kill_process.cold+0x10/0x692 [ 888.786283] ? check_preemption_disabled+0x41/0x280 [ 888.791305] ? has_intersects_mems_allowed+0x1d6/0x290 [ 888.796573] out_of_memory+0x1072/0x1390 [ 888.800624] ? oom_killer_disable+0x270/0x270 [ 888.805659] ? mutex_trylock+0x15f/0x1a0 [ 888.809710] __alloc_pages_nodemask+0x23a2/0x2890 [ 888.814585] ? find_get_entry+0x4cd/0x8a0 [ 888.818721] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 888.823560] alloc_pages_current+0x193/0x2a0 [ 888.827954] filemap_fault+0x146e/0x2180 [ 888.832021] ext4_filemap_fault+0x84/0xb0 [ 888.836254] __do_fault+0x10b/0x4b0 [ 888.840299] __handle_mm_fault+0x273b/0x41c0 [ 888.844864] ? vm_insert_page+0x9c0/0x9c0 [ 888.849013] ? check_preemption_disabled+0x41/0x280 [ 888.854027] handle_mm_fault+0x436/0xb10 [ 888.858072] __do_page_fault+0x68e/0xd60 [ 888.862204] ? trace_hardirqs_off_caller+0x6e/0x210 [ 888.867288] ? spurious_fault+0x840/0x840 [ 888.871431] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 888.876268] ? page_fault+0x8/0x30 [ 888.880047] page_fault+0x1e/0x30 [ 888.883479] RIP: 0033:0x7fc1af6292e3 [ 888.887197] Code: Bad RIP value. [ 888.890562] RSP: 002b:00007ffcbca3b848 EFLAGS: 00010246 [ 888.895901] RAX: 0000000000000001 RBX: 000055717cc4f1e0 RCX: 00007fc1af6292e3 [ 888.903150] RDX: 0000000000000013 RSI: 00007ffcbca3b850 RDI: 000000000000000c [ 888.912916] RBP: 00007ffcbca3ba40 R08: 00007ffcbcaab000 R09: 000000eece27361f [ 888.920165] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcbca3b850 [ 888.927411] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005b6373ba77c5d [ 888.944742] syz-executor.4: vmalloc: allocation failure, allocated 1865191424 of 3621613568 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 888.949358] Mem-Info: [ 888.959093] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 888.967188] active_anon:122402 inactive_anon:18986 isolated_anon:0 [ 888.967188] active_file:39 inactive_file:45 isolated_file:0 [ 888.967188] unevictable:0 dirty:34 writeback:0 unstable:0 [ 888.967188] slab_reclaimable:13351 slab_unreclaimable:117271 [ 888.967188] mapped:52874 shmem:19311 pagetables:1017 bounce:0 [ 888.967188] free:13837 free_pcp:1011 free_cma:0 [ 888.969914] CPU: 0 PID: 6598 Comm: syz-executor.4 Not tainted 4.19.163-syzkaller #0 [ 889.005449] Node 0 active_anon:487936kB inactive_anon:43352kB active_file:88kB inactive_file:96kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:197536kB dirty:88kB writeback:0kB shmem:44456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 153600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 889.008924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 889.008929] Call Trace: [ 889.008950] dump_stack+0x1fc/0x2fe [ 889.008967] warn_alloc.cold+0x7b/0x18f [ 889.008983] ? zone_watermark_ok_safe+0x260/0x260 [ 889.008997] ? retint_kernel+0x2d/0x2d [ 889.009016] ? alloc_pages_current+0x95/0x2a0 [ 889.009040] __vmalloc_area_node+0x4fd/0x780 [ 889.009058] ? __vmalloc_node_range+0x180/0x180 [ 889.009074] ? _raw_spin_unlock+0x29/0x40 [ 889.009086] ? __get_vm_area_node+0x2e2/0x3a0 [ 889.009105] __vmalloc_node_range+0xed/0x180 [ 889.009121] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 889.009137] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 889.009148] vmalloc_user+0x70/0xe0 [ 889.009163] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 889.009177] vb2_vmalloc_alloc+0xb3/0x2f0 [ 889.009195] __vb2_queue_alloc+0x472/0xe60 [ 889.009225] vb2_core_create_bufs+0x273/0x7e0 [ 889.009243] ? __vb2_queue_free+0x870/0x870 [ 889.009261] ? __mutex_add_waiter+0x160/0x160 [ 889.009280] vb2_create_bufs+0x332/0x620 [ 889.009296] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 889.009311] ? __video_do_ioctl+0x632/0xcd0 [ 889.009326] ? __mutex_add_waiter+0x160/0x160 [ 889.009339] ? mark_held_locks+0xf0/0xf0 [ 889.009356] ? futex_wait_queue_me+0x404/0x5e0 [ 889.009373] vb2_ioctl_create_bufs+0x20d/0x360 [ 889.009386] ? memset+0x20/0x40 [ 889.009403] v4l_create_bufs+0xb2/0x160 [ 889.009421] __video_do_ioctl+0x49a/0xcd0 [ 889.009443] ? v4l_querycap+0x340/0x340 [ 889.009459] ? __might_fault+0x192/0x1d0 [ 889.009480] video_usercopy+0x13c/0x1000 [ 889.009497] ? v4l_querycap+0x340/0x340 [ 889.009513] ? v4l_enumstd+0x60/0x60 [ 889.009525] ? mark_held_locks+0xf0/0xf0 [ 889.009538] ? do_futex+0x163/0x1c70 [ 889.009552] ? mark_held_locks+0xf0/0xf0 [ 889.009569] ? mark_held_locks+0xf0/0xf0 [ 889.009582] ? debug_check_no_obj_freed+0x201/0x482 [ 889.009606] ? video_usercopy+0x1000/0x1000 [ 889.009618] v4l2_ioctl+0x147/0x1a0 [ 889.009630] ? video_devdata+0xa0/0xa0 [ 889.009646] do_vfs_ioctl+0xcdb/0x12e0 [ 889.009661] ? lock_downgrade+0x720/0x720 [ 889.009672] ? check_preemption_disabled+0x41/0x280 [ 889.009686] ? ioctl_preallocate+0x200/0x200 [ 889.009704] ? __fget+0x356/0x510 [ 889.009721] ? do_dup2+0x450/0x450 [ 889.009745] ksys_ioctl+0x9b/0xc0 [ 889.009761] __x64_sys_ioctl+0x6f/0xb0 [ 889.009773] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 889.009794] do_syscall_64+0xf9/0x620 [ 889.009810] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 889.009822] RIP: 0033:0x45e159 [ 889.009845] Code: Bad RIP value. [ 889.009853] RSP: 002b:00007fa4e3678c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 889.009866] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e159 [ 889.009874] RDX: 0000000020000340 RSI: 00000000c100565c RDI: 0000000000000003 [ 889.009882] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 889.009890] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 889.009898] R13: 00007ffc9be6119f R14: 00007fa4e36799c0 R15: 000000000119bf8c [ 889.013026] Mem-Info: [ 889.049950] Node 1 active_anon:1672kB inactive_anon:32592kB active_file:68kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13960kB dirty:48kB writeback:0kB shmem:32788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 889.056595] active_anon:122402 inactive_anon:18986 isolated_anon:0 [ 889.056595] active_file:39 inactive_file:45 isolated_file:0 [ 889.056595] unevictable:0 dirty:34 writeback:0 unstable:0 [ 889.056595] slab_reclaimable:13351 slab_unreclaimable:117271 [ 889.056595] mapped:52874 shmem:19311 pagetables:1017 bounce:0 [ 889.056595] free:13837 free_pcp:1010 free_cma:0 [ 889.060004] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 889.067192] Node 0 active_anon:487936kB inactive_anon:43352kB active_file:88kB inactive_file:96kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:197536kB dirty:88kB writeback:0kB shmem:44456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 153600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 889.068506] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 889.076772] Node 1 active_anon:1672kB inactive_anon:32592kB active_file:68kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13960kB dirty:48kB writeback:0kB shmem:32788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 889.077013] Node 0 DMA32 free:17764kB min:35996kB low:44992kB high:53988kB active_anon:488236kB inactive_anon:43352kB active_file:0kB inactive_file:340kB unevictable:0kB writepending:288kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7616kB pagetables:3800kB bounce:0kB free_pcp:2276kB local_pcp:620kB free_cma:0kB [ 889.085063] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 889.086226] lowmem_reserve[]: 0 0 1 1 1 [ 889.094164] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 889.094947] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 889.103998] Node 0 DMA32 free:17764kB min:35996kB low:44992kB high:53988kB active_anon:488216kB inactive_anon:43352kB active_file:0kB inactive_file:360kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7616kB pagetables:3708kB bounce:0kB free_pcp:2276kB local_pcp:1656kB free_cma:0kB [ 889.110171] lowmem_reserve[]: 0 0 0 0 0 [ 889.117256] lowmem_reserve[]: 0 0 1 1 1 [ 889.125363] Node 1 Normal free:26712kB min:53876kB low:67344kB high:80812kB active_anon:1676kB inactive_anon:32592kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:352kB pagetables:268kB bounce:0kB free_pcp:1764kB local_pcp:1516kB free_cma:0kB [ 889.125650] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 889.130220] lowmem_reserve[]: 0 0 0 0 0 [ 889.137181] lowmem_reserve[]: 0 0 0 0 0 [ 889.139008] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10860kB [ 889.147800] Node 1 Normal free:26712kB min:53876kB low:67344kB high:80812kB active_anon:1676kB inactive_anon:32592kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:352kB pagetables:268kB bounce:0kB free_pcp:1764kB local_pcp:248kB free_cma:0kB [ 889.160160] Node 0 DMA32: 813*4kB (UME) 976*8kB (ME) 229*16kB (UME) 97*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17828kB [ 889.168943] lowmem_reserve[]: 0 0 0 0 0 [ 889.173628] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 889.173733] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10860kB [ 889.177712] Node 1 Normal: 160*4kB (ME) 139*8kB (M) 116*16kB (UM) 84*32kB (UME) 63*64kB (UME) 24*128kB (ME) 2*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 3*4096kB (UM) = 26712kB [ 889.190598] Node 0 DMA32: 813*4kB (UME) 976*8kB (ME) 229*16kB (UME) 97*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17828kB [ 889.200225] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 889.208836] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 889.213709] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 889.219025] Node 1 Normal: 160*4kB (ME) 139*8kB (M) 116*16kB (UM) 85*32kB (UME) 63*64kB (UME) 24*128kB (ME) 2*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 3*4096kB (UM) = 26744kB [ 889.232913] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 889.237847] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 889.238689] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 889.242882] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 889.242893] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 889.242903] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 889.254618] 19329 total pagecache pages [ 889.259084] 19329 total pagecache pages [ 889.260340] 0 pages in swap cache [ 889.266793] 0 pages in swap cache [ 889.267156] Swap cache stats: add 0, delete 0, find 0/0 [ 889.275503] Swap cache stats: add 0, delete 0, find 0/0 [ 889.281025] Free swap = 0kB [ 889.287638] Free swap = 0kB [ 889.296247] Total swap = 0kB [ 889.309875] Total swap = 0kB [ 889.317109] 2097051 pages RAM [ 889.317911] 2097051 pages RAM [ 889.329221] 0 pages HighMem/MovableOnly [ 889.336070] 0 pages HighMem/MovableOnly [ 889.368512] 369639 pages reserved [ 889.407219] 369639 pages reserved [ 889.434044] 0 pages cma reserved [ 889.459280] 0 pages cma reserved [ 889.493747] Out of memory (oom_kill_allocating_task): Kill process 4624 (systemd-journal) score 0 or sacrifice child [ 889.976935] Killed process 4624 (systemd-journal) total-vm:46096kB, anon-rss:492kB, file-rss:0kB, shmem-rss:2220kB [ 889.999861] oom_reaper: reaped process 4624 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2396kB [ 890.020571] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 890.038662] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 890.046923] CPU: 0 PID: 8151 Comm: syz-fuzzer Not tainted 4.19.163-syzkaller #0 [ 890.054385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 890.063738] Call Trace: [ 890.066338] dump_stack+0x1fc/0x2fe [ 890.069969] dump_header+0x15d/0xc3f [ 890.073772] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 890.078875] ? ___ratelimit+0x319/0x584 [ 890.082858] oom_kill_process.cold+0x10/0x692 [ 890.088402] ? check_preemption_disabled+0x41/0x280 [ 890.093436] ? has_intersects_mems_allowed+0x1d6/0x290 [ 890.098811] out_of_memory+0x1072/0x1390 [ 890.102882] ? oom_killer_disable+0x270/0x270 [ 890.107598] ? mutex_trylock+0x15f/0x1a0 [ 890.111665] __alloc_pages_nodemask+0x23a2/0x2890 [ 890.116511] ? find_get_entry+0x4cd/0x8a0 [ 890.120669] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 890.125537] alloc_pages_current+0x193/0x2a0 [ 890.130135] filemap_fault+0x146e/0x2180 [ 890.134208] ext4_filemap_fault+0x84/0xb0 [ 890.138627] __do_fault+0x10b/0x4b0 [ 890.142259] __handle_mm_fault+0x273b/0x41c0 [ 890.146670] ? vm_insert_page+0x9c0/0x9c0 [ 890.150819] ? __fget+0x356/0x510 [ 890.154293] ? check_preemption_disabled+0x41/0x280 [ 890.159314] handle_mm_fault+0x436/0xb10 [ 890.163380] __do_page_fault+0x68e/0xd60 [ 890.167450] ? trace_hardirqs_off_caller+0x6e/0x210 [ 890.172464] ? spurious_fault+0x840/0x840 [ 890.176610] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 890.181662] ? page_fault+0x8/0x30 [ 890.185199] page_fault+0x1e/0x30 [ 890.188906] RIP: 0033:0x469240 [ 890.192106] Code: Bad RIP value. [ 890.195463] RSP: 002b:000000c0004b57f0 EFLAGS: 00010246 [ 890.200821] RAX: 0000000000000000 RBX: 00000000000003e7 RCX: 0000000000469240 [ 890.208174] RDX: 0000000000000080 RSI: 000000c0004b5840 RDI: 0000000000000003 [ 890.215439] RBP: 000000c0004b5e40 R08: 0000000000000000 R09: 0000000000000000 [ 890.222713] R10: 00000000000003e7 R11: 0000000000000246 R12: 0000000000000003 [ 890.230499] R13: 000000c000314a80 R14: 000000cf1b4b4edb R15: ffffffffffffffff [ 890.317411] Mem-Info: [ 890.327667] active_anon:122255 inactive_anon:18984 isolated_anon:0 [ 890.327667] active_file:11 inactive_file:8 isolated_file:0 [ 890.327667] unevictable:0 dirty:0 writeback:0 unstable:0 [ 890.327667] slab_reclaimable:13350 slab_unreclaimable:117231 [ 890.327667] mapped:52224 shmem:19310 pagetables:970 bounce:0 [ 890.327667] free:15008 free_pcp:0 free_cma:0 [ 890.376299] Node 0 active_anon:487820kB inactive_anon:43348kB active_file:16kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:197388kB dirty:0kB writeback:0kB shmem:44452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 890.424394] Node 1 active_anon:1200kB inactive_anon:32588kB active_file:28kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:11508kB dirty:0kB writeback:0kB shmem:32788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 890.458276] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 890.492817] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 890.498650] Node 0 DMA32 free:20080kB min:35996kB low:44992kB high:53988kB active_anon:487820kB inactive_anon:43348kB active_file:16kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7616kB pagetables:3708kB bounce:0kB free_pcp:524kB local_pcp:0kB free_cma:0kB [ 890.535734] lowmem_reserve[]: 0 0 1 1 1 [ 890.542404] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 890.578951] lowmem_reserve[]: 0 0 0 0 0 [ 890.583885] Node 1 Normal free:244060kB min:53876kB low:67344kB high:80812kB active_anon:1200kB inactive_anon:32588kB active_file:228kB inactive_file:2008kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:352kB pagetables:172kB bounce:0kB free_pcp:1604kB local_pcp:124kB free_cma:0kB [ 890.620860] lowmem_reserve[]: 0 0 0 0 0 [ 890.624940] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10860kB [ 890.639588] Node 0 DMA32: 991*4kB (UME) 1075*8kB (UME) 252*16kB (UME) 98*32kB (UM) 0*64kB 1*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20116kB [ 890.657470] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 890.676564] Node 1 Normal: 18*4kB (UE) 14*8kB (U) 13*16kB (U) 49*32kB (UME) 53*64kB (UME) 42*128kB (UME) 15*256kB (UM) 9*512kB (UM) 9*1024kB (U) 8*2048kB (U) 78*4096kB (UM) = 364264kB [ 890.698600] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 890.708332] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 890.721874] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 890.733434] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 890.746462] 20624 total pagecache pages [ 890.753258] 0 pages in swap cache [ 890.762718] Swap cache stats: add 0, delete 0, find 0/0 [ 890.768229] Free swap = 0kB [ 890.773385] Total swap = 0kB [ 890.776610] 2097051 pages RAM [ 890.777165] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 890.784073] 0 pages HighMem/MovableOnly [ 890.793714] 369639 pages reserved [ 890.797775] 0 pages cma reserved [ 890.797888] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 890.804801] Out of memory (oom_kill_allocating_task): Kill process 8151 (syz-fuzzer) score 0 or sacrifice child [ 890.827015] Killed process 6314 (syz-executor.4) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 890.838769] oom_reaper: reaped process 6314 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 890.852409] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 890.861604] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 890.868892] systemd[1]: Stopped Journal Service. [ 890.899337] systemd[1]: Starting Journal Service... [ 891.153855] systemd-journald[6670]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 891.496302] systemd[1]: Started Journal Service. [ 893.899176] Bluetooth: hci2: command 0x0406 tx timeout 21:47:09 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x176, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:47:09 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}, 0x6}) 21:47:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x1000000}, 0x0) 21:47:09 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000340)={0x0, 0x0}) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="04c11d09fc392dd1d69d0049000000007f70c50e93243cdaa1f4ad5606a659ab7c1c2e077f8b643d6a71ecd235754785c3f01257d3afc5bccc217bba81ef754a337b28c504983cd750816fc489cfec503f3b9dda56a3831cf449ab14e547e07affa7e2b0d5c1437d8f715b15c719682f7588f814e5524f40829b1725f6408a1da6a2d993f194c0fd2235f24257d3df2a5a3b46613c588e9b76b2dd964520851e39fc411eeb79650d18a439b1dd58be9218e6273793f76470471faa489ac1efea51e8b27d74ba1ca4fda4bd223a042bfe9feaa2402aadc7af6e6fefad109f2e615d5d30064380543f0000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000240)={0x3f, 0x2, 'client1\x00', 0x4, "b018792eb6da1373", "6370150035e456f005e453d86679bd9ad7856785e0a02106c55336ed76f1d714", 0x7fff, 0x8}) splice(r0, 0x0, r3, 0x0, 0x4ffe2, 0x0) 21:47:09 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c000000000012000000000003000600004c000002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:47:09 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200010, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:47:10 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000068000002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 894.474849] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 894.503861] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 21:47:10 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x177, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 894.548108] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 894.572102] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated 21:47:10 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c000000000012000000000003000600006c000002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 894.618256] EXT4-fs (loop1): get root inode failed [ 894.633772] EXT4-fs (loop1): mount failed 21:47:10 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000074000002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 894.711504] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 894.750089] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 21:47:10 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x178, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:47:10 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c000000000012000000000003000600007a000002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 894.824050] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 894.883752] EXT4-fs: failed to create workqueue [ 894.889854] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 894.923315] EXT4-fs (loop1): mount failed 21:47:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x2000000}, 0x0) [ 896.713660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 896.724737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.734603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 896.742820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.752115] device bridge_slave_1 left promiscuous mode [ 896.757622] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.766411] device bridge_slave_0 left promiscuous mode [ 896.773416] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.783242] device veth1_macvtap left promiscuous mode [ 896.788727] device veth0_macvtap left promiscuous mode [ 896.795069] device veth1_vlan left promiscuous mode [ 896.800706] device veth0_vlan left promiscuous mode [ 899.898842] Bluetooth: hci4: command 0x0409 tx timeout [ 901.137834] device hsr_slave_1 left promiscuous mode [ 901.145363] device hsr_slave_0 left promiscuous mode [ 901.160187] team0 (unregistering): Port device team_slave_1 removed [ 901.173850] team0 (unregistering): Port device team_slave_0 removed [ 901.184788] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 901.197611] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 901.228237] bond0 (unregistering): Released all slaves [ 901.244205] IPVS: ftp: loaded support on port[0] = 21 [ 901.342509] chnl_net:caif_netlink_parms(): no params data found [ 901.581331] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.588127] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.596801] device bridge_slave_0 entered promiscuous mode [ 901.606677] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.613844] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.622040] device bridge_slave_1 entered promiscuous mode [ 901.647057] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 901.656919] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 901.685216] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 901.694449] team0: Port device team_slave_0 added [ 901.701915] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 901.711351] team0: Port device team_slave_1 added [ 901.732314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.738577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.766910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.779995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.786252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.816117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.832928] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 901.842340] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 901.878448] device hsr_slave_0 entered promiscuous mode [ 901.886528] device hsr_slave_1 entered promiscuous mode [ 901.898116] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 901.913512] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 901.978900] Bluetooth: hci4: command 0x041b tx timeout [ 902.056450] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.062877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 902.069581] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.075934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 902.144008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 902.155200] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 902.172549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 902.184423] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.194433] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.210781] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 902.218242] 8021q: adding VLAN 0 to HW filter on device team0 [ 902.240341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 902.248101] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.256075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 902.265578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 902.274079] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.280487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 902.291250] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 902.299936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 902.311366] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 902.319838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 902.330466] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 902.337414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 902.347725] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 902.356316] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 902.367680] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 902.379193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 902.387069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 902.398496] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 902.405823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 902.414084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 902.433674] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 902.441502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 902.457048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 902.469081] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 902.475169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 902.488492] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 902.496797] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 902.503122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 902.510228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 902.522681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 902.535757] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 902.545700] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 902.553797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 902.562373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 902.595509] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 902.603607] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 902.611356] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 902.622204] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 902.629014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 902.636565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 902.645996] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 902.653215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 902.665039] device veth0_vlan entered promiscuous mode [ 902.675298] device veth1_vlan entered promiscuous mode [ 902.681558] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 902.690541] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 902.704410] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 902.713799] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 902.721020] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 902.729763] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 902.737955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 902.746446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 902.756615] device veth0_macvtap entered promiscuous mode [ 902.763799] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 902.772224] device veth1_macvtap entered promiscuous mode [ 902.778352] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 902.788466] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 902.798007] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 902.807741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 902.817795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.827422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 902.837372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.846779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 902.856939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.866287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 902.876484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.885994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 902.896083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.907479] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 902.915758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 902.925012] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 902.934187] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 902.949608] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 902.957867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 902.966847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 902.976938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.986669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 902.997149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.006644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 903.016456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.025900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 903.035822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.045685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 903.055560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.065815] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 903.072879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.080322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 903.088193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 903.218510] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 903.229948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.237072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.247451] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 903.259596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.267050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.274526] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 903.283819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 21:47:18 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}, 0x6}) 21:47:18 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000020002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:47:18 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x179, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:47:18 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200023, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:47:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x3000000}, 0x0) 21:47:18 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4(r3, &(0x7f0000000040)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f0000000140)=0x80, 0x80000) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 903.402971] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 903.442015] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 21:47:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x4000000}, 0x0) 21:47:19 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}, 0x6}) 21:47:19 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000040030002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:47:19 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x17a, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 903.504994] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 903.519658] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 21:47:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}, 0x6}) 21:47:19 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000003400002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 903.562406] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 903.600393] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 903.651845] EXT4-fs (loop1): get root inode failed [ 903.668322] EXT4-fs (loop1): mount failed 21:47:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x7000000}, 0x0) 21:47:19 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000000102000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 903.725484] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 903.761993] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 21:47:19 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x17b, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 903.790115] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 903.858741] EXT4-fs: failed to create workqueue [ 903.869245] EXT4-fs (loop1): mount failed 21:47:19 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20002d, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) [ 904.036845] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 904.049826] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 904.064584] Bluetooth: hci4: command 0x040f tx timeout [ 904.074438] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 904.091345] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 904.107316] EXT4-fs (loop1): get root inode failed [ 904.116255] EXT4-fs (loop1): mount failed [ 904.169936] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 904.181727] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 904.192589] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 904.203548] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated 21:47:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x8000000}, 0x0) 21:47:19 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000000202000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:47:19 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x17c, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 904.218466] EXT4-fs (loop1): get root inode failed [ 904.232429] EXT4-fs (loop1): mount failed 21:47:19 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200048, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:47:19 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000340)={0x0, 0x0}) r3 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000340)={0x0, 0x0}) r4 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x200003ff, 0x266180) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRES16=r4], 0x44}}, 0x48000) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe2, 0x0) ioctl$SG_GET_ACCESS_COUNT(r6, 0x2289, &(0x7f0000000040)) close(r5) socket$nl_route(0x10, 0x3, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x0, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000060000000000000000e4ffffffffffffff", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r5, 0x0, 0x4ffe2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000280)={0x3, 0x0, [{0x80000019, 0x9, 0x2, 0x38c5552e, 0x5, 0x101, 0x80000001}, {0x80000000, 0x8, 0x2, 0x800, 0x7ff, 0x9, 0x40000}, {0x6, 0x10000, 0x1, 0x7e, 0x80, 0x7, 0x20000000}]}) 21:47:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xe000000}, 0x0) [ 904.394991] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 904.448144] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 904.472120] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 904.496113] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 904.548940] EXT4-fs (loop1): get root inode failed [ 904.564717] EXT4-fs (loop1): mount failed [ 904.628995] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 904.642671] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 904.663628] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 904.675146] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 904.693131] EXT4-fs (loop1): get root inode failed [ 904.698242] EXT4-fs (loop1): mount failed [ 906.148873] Bluetooth: hci4: command 0x0419 tx timeout [ 908.742862] oom_reaper: reaped process 7073 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 908.772786] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 908.785962] systemd-journal cpuset=/ mems_allowed=0-1 [ 908.791277] CPU: 1 PID: 6670 Comm: systemd-journal Not tainted 4.19.163-syzkaller #0 [ 908.799442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 908.808815] Call Trace: [ 908.811418] dump_stack+0x1fc/0x2fe [ 908.815052] dump_header+0x15d/0xc3f [ 908.818975] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 908.824075] ? ___ratelimit+0x319/0x584 [ 908.828039] oom_kill_process.cold+0x10/0x692 [ 908.832527] ? check_preemption_disabled+0x41/0x280 [ 908.837533] ? has_intersects_mems_allowed+0x1d6/0x290 [ 908.842814] out_of_memory+0x1072/0x1390 [ 908.846870] ? oom_killer_disable+0x270/0x270 [ 908.853198] ? mutex_trylock+0x15f/0x1a0 [ 908.857259] __alloc_pages_nodemask+0x23a2/0x2890 [ 908.862089] ? find_get_entry+0x4cd/0x8a0 [ 908.866311] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 908.871233] alloc_pages_current+0x193/0x2a0 [ 908.875629] filemap_fault+0x146e/0x2180 [ 908.879695] ext4_filemap_fault+0x84/0xb0 [ 908.883825] __do_fault+0x10b/0x4b0 [ 908.887431] __handle_mm_fault+0x273b/0x41c0 [ 908.891824] ? vm_insert_page+0x9c0/0x9c0 [ 908.895959] ? check_preemption_disabled+0x41/0x280 [ 908.900980] handle_mm_fault+0x436/0xb10 [ 908.905022] __do_page_fault+0x68e/0xd60 [ 908.909068] ? trace_hardirqs_off_caller+0x6e/0x210 [ 908.915115] ? spurious_fault+0x840/0x840 [ 908.919687] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 908.924607] ? page_fault+0x8/0x30 [ 908.928136] page_fault+0x1e/0x30 [ 908.931568] RIP: 0033:0x7f1608fd32e3 [ 908.935271] Code: Bad RIP value. [ 908.938613] RSP: 002b:00007ffcf6701278 EFLAGS: 00010246 [ 908.943958] RAX: 0000000000000001 RBX: 00005645287af1e0 RCX: 00007f1608fd32e3 [ 908.951207] RDX: 0000000000000013 RSI: 00007ffcf6701280 RDI: 000000000000000c [ 908.958459] RBP: 00007ffcf6701470 R08: 00007ffcf6765000 R09: 000000f42b7502de [ 908.965818] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcf6701280 [ 908.973081] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005b6373cd935d1 [ 908.982560] Mem-Info: [ 908.985009] active_anon:122648 inactive_anon:21017 isolated_anon:0 [ 908.985009] active_file:39 inactive_file:38 isolated_file:0 [ 908.985009] unevictable:0 dirty:5 writeback:0 unstable:0 [ 908.985009] slab_reclaimable:13342 slab_unreclaimable:121922 [ 908.985009] mapped:52643 shmem:21358 pagetables:1017 bounce:0 [ 908.985009] free:13773 free_pcp:1005 free_cma:0 [ 908.995747] syz-executor.4: vmalloc: allocation failure, allocated 1837105152 of 3621613568 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 909.018846] Node 0 active_anon:488860kB inactive_anon:43348kB active_file:112kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:197480kB dirty:4kB writeback:0kB shmem:44452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 153600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 909.018870] Node 1 active_anon:1732kB inactive_anon:40720kB active_file:44kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13092kB dirty:16kB writeback:0kB shmem:40980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 909.018875] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 909.041611] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 909.061536] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 909.061558] Node 0 DMA32 free:17592kB min:35996kB low:44992kB high:53988kB active_anon:488964kB inactive_anon:43348kB active_file:0kB inactive_file:520kB unevictable:0kB writepending:304kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7584kB pagetables:3804kB bounce:0kB free_pcp:2176kB local_pcp:608kB free_cma:0kB [ 909.098165] CPU: 0 PID: 7073 Comm: syz-executor.4 Not tainted 4.19.163-syzkaller #0 [ 909.118205] lowmem_reserve[]: 0 0 1 1 1 [ 909.122343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 909.122348] Call Trace: [ 909.122370] dump_stack+0x1fc/0x2fe [ 909.122387] warn_alloc.cold+0x7b/0x18f [ 909.122401] ? zone_watermark_ok_safe+0x260/0x260 [ 909.122412] ? retint_kernel+0x2d/0x2d [ 909.122431] ? policy_node+0x116/0x140 [ 909.122459] __vmalloc_area_node+0x4fd/0x780 [ 909.127831] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 909.157484] ? __vmalloc_node_range+0x180/0x180 [ 909.157500] ? _raw_spin_unlock+0x29/0x40 [ 909.157511] ? __get_vm_area_node+0x2e2/0x3a0 [ 909.157526] __vmalloc_node_range+0xed/0x180 [ 909.157541] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 909.157557] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 909.165716] lowmem_reserve[]: 0 0 0 0 0 [ 909.169656] vmalloc_user+0x70/0xe0 [ 909.169670] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 909.169684] vb2_vmalloc_alloc+0xb3/0x2f0 [ 909.169701] __vb2_queue_alloc+0x472/0xe60 [ 909.169729] vb2_core_create_bufs+0x273/0x7e0 [ 909.180200] Node 1 Normal free:26628kB min:53876kB low:67344kB high:80812kB active_anon:1748kB inactive_anon:40720kB active_file:48kB inactive_file:4kB unevictable:0kB writepending:16kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:352kB pagetables:264kB bounce:0kB free_pcp:1840kB local_pcp:1344kB free_cma:0kB [ 909.181717] ? __vb2_queue_free+0x870/0x870 [ 909.185412] lowmem_reserve[]: 0 0 0 0 0 [ 909.189440] ? __mutex_add_waiter+0x160/0x160 [ 909.189458] vb2_create_bufs+0x332/0x620 [ 909.189475] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 909.189487] ? __video_do_ioctl+0x632/0xcd0 [ 909.189500] ? __mutex_add_waiter+0x160/0x160 [ 909.189512] ? mark_held_locks+0xf0/0xf0 [ 909.189531] vb2_ioctl_create_bufs+0x20d/0x360 [ 909.194381] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10860kB [ 909.198331] ? memset+0x20/0x40 [ 909.198348] v4l_create_bufs+0xb2/0x160 [ 909.198370] __video_do_ioctl+0x49a/0xcd0 [ 909.202852] Node 0 DMA32: 804*4kB (ME) 967*8kB (UME) 222*16kB (UME) 97*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17608kB [ 909.207273] ? v4l_querycap+0x340/0x340 [ 909.234056] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 909.238626] ? __might_fault+0x192/0x1d0 [ 909.238648] video_usercopy+0x13c/0x1000 [ 909.238670] ? v4l_querycap+0x340/0x340 [ 909.242808] Node 1 Normal: 193*4kB (UME) 156*8kB (UME) 138*16kB (ME) 102*32kB (ME) 45*64kB (ME) 25*128kB (UME) 1*256kB (M) 1*512kB (M) 2*1024kB (UM) 1*2048kB (M) 2*4096kB (U) = 26628kB [ 909.247401] ? v4l_enumstd+0x60/0x60 [ 909.251887] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 909.256972] ? mark_held_locks+0xf0/0xf0 [ 909.262486] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 909.266626] ? do_futex+0x163/0x1c70 [ 909.270306] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 909.274707] ? mark_held_locks+0xf0/0xf0 [ 909.278894] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 909.283303] ? mark_held_locks+0xf0/0xf0 [ 909.283319] ? lock_acquire+0x170/0x3c0 [ 909.283332] ? finish_task_switch+0x118/0x780 [ 909.283351] ? video_usercopy+0x1000/0x1000 [ 909.283362] v4l2_ioctl+0x147/0x1a0 [ 909.283373] ? video_devdata+0xa0/0xa0 [ 909.283388] do_vfs_ioctl+0xcdb/0x12e0 [ 909.283401] ? lock_downgrade+0x720/0x720 [ 909.283414] ? check_preemption_disabled+0x41/0x280 [ 909.283427] ? ioctl_preallocate+0x200/0x200 [ 909.283443] ? __fget+0x356/0x510 [ 909.283459] ? do_dup2+0x450/0x450 [ 909.283483] ksys_ioctl+0x9b/0xc0 [ 909.283499] __x64_sys_ioctl+0x6f/0xb0 [ 909.283512] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 909.283526] do_syscall_64+0xf9/0x620 [ 909.283544] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 909.283555] RIP: 0033:0x45e159 [ 909.283579] Code: Bad RIP value. [ 909.283587] RSP: 002b:00007fb03b4b2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 909.283600] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e159 [ 909.283609] RDX: 0000000020000340 RSI: 00000000c100565c RDI: 0000000000000003 [ 909.283616] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 909.283624] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 909.283633] R13: 00007ffd0940f34f R14: 00007fb03b4b39c0 R15: 000000000119bf8c [ 909.307298] Mem-Info: [ 909.324298] 21377 total pagecache pages [ 909.332306] active_anon:122644 inactive_anon:21017 isolated_anon:0 [ 909.332306] active_file:9 inactive_file:10 isolated_file:0 [ 909.332306] unevictable:0 dirty:0 writeback:0 unstable:0 [ 909.332306] slab_reclaimable:13344 slab_unreclaimable:121916 [ 909.332306] mapped:52594 shmem:21358 pagetables:993 bounce:0 [ 909.332306] free:13773 free_pcp:1005 free_cma:0 [ 909.332998] 0 pages in swap cache [ 909.337068] Node 0 active_anon:488828kB inactive_anon:43348kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:197396kB dirty:0kB writeback:0kB shmem:44452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 909.346452] Swap cache stats: add 0, delete 0, find 0/0 [ 909.347944] Node 1 active_anon:1748kB inactive_anon:40720kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12980kB dirty:0kB writeback:0kB shmem:40980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 909.351252] Free swap = 0kB [ 909.360782] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 909.377811] Total swap = 0kB [ 909.388400] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 909.405030] 2097051 pages RAM [ 909.429865] Node 0 DMA32 free:17592kB min:35996kB low:44992kB high:53988kB active_anon:488828kB inactive_anon:43348kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7584kB pagetables:3708kB bounce:0kB free_pcp:2180kB local_pcp:1564kB free_cma:0kB [ 909.449619] 0 pages HighMem/MovableOnly [ 909.466848] lowmem_reserve[]: 0 0 1 1 1 [ 909.475029] 369639 pages reserved [ 909.490646] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 909.498224] 0 pages cma reserved [ 909.504407] lowmem_reserve[]: 0 0 0 0 0 [ 909.505524] Out of memory (oom_kill_allocating_task): Kill process 6670 (systemd-journal) score 0 or sacrifice child [ 909.516181] Node 1 Normal free:26628kB min:53876kB low:67344kB high:80812kB active_anon:1748kB inactive_anon:40720kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:352kB pagetables:264kB bounce:0kB free_pcp:1840kB local_pcp:496kB free_cma:0kB [ 909.523513] Killed process 6670 (systemd-journal) total-vm:46096kB, anon-rss:460kB, file-rss:0kB, shmem-rss:1296kB [ 909.528305] lowmem_reserve[]: 0 0 0 0 0 [ 909.532385] oom_reaper: reaped process 6670 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1296kB [ 909.536768] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10860kB [ 909.573879] systemd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 909.582942] Node 0 DMA32: 975*4kB (UME) 1078*8kB (UME) 225*16kB (UME) 97*32kB (UM) 1*64kB (U) 2*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19804kB [ 909.608175] systemd cpuset=/ mems_allowed=0-1 [ 909.620920] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 909.633543] CPU: 1 PID: 1 Comm: systemd Not tainted 4.19.163-syzkaller #0 [ 909.669632] Node 1 Normal: 113*4kB (UME) 97*8kB (UME) 99*16kB (UME) 79*32kB (UME) 45*64kB (ME) 33*128kB (UME) 11*256kB (UM) 1*512kB (M) 1*1024kB (U) 0*2048kB 3*4096kB (UM) = 29084kB [ 909.694778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 909.694784] Call Trace: [ 909.694806] dump_stack+0x1fc/0x2fe [ 909.694821] dump_header+0x15d/0xc3f [ 909.694837] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 909.700213] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 909.727153] ? ___ratelimit+0x319/0x584 [ 909.727174] oom_kill_process.cold+0x10/0x692 [ 909.727190] ? lock_downgrade+0x720/0x720 [ 909.730229] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 909.756566] ? check_preemption_disabled+0x41/0x280 [ 909.756582] out_of_memory+0x34d/0x1390 [ 909.756601] ? oom_killer_disable+0x270/0x270 [ 909.759626] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 909.764613] ? mutex_trylock+0x15f/0x1a0 [ 909.767707] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 909.797106] __alloc_pages_nodemask+0x23a2/0x2890 [ 909.797128] ? find_get_entry+0x4cd/0x8a0 [ 909.801094] 21377 total pagecache pages [ 909.805045] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 909.808485] 0 pages in swap cache [ 909.834496] alloc_pages_current+0x193/0x2a0 [ 909.837851] Swap cache stats: add 0, delete 0, find 0/0 [ 909.841829] filemap_fault+0x146e/0x2180 [ 909.841853] ext4_filemap_fault+0x84/0xb0 [ 909.852494] Free swap = 0kB [ 909.881632] __do_fault+0x10b/0x4b0 [ 909.881652] __handle_mm_fault+0x273b/0x41c0 [ 909.892590] Total swap = 0kB [ 909.896547] ? vm_insert_page+0x9c0/0x9c0 [ 909.907174] 2097051 pages RAM [ 909.920879] ? check_preemption_disabled+0x41/0x280 [ 909.920896] handle_mm_fault+0x436/0xb10 [ 909.932063] 0 pages HighMem/MovableOnly [ 909.946863] __do_page_fault+0x68e/0xd60 [ 909.946884] ? trace_hardirqs_off_caller+0x6e/0x210 [ 909.951362] 369639 pages reserved [ 909.962977] ? spurious_fault+0x840/0x840 [ 909.962991] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 909.963009] ? page_fault+0x8/0x30 [ 909.969929] 0 pages cma reserved [ 909.986724] page_fault+0x1e/0x30 [ 909.986735] RIP: 0033:0x7fdc2e467303 [ 909.986755] Code: Bad RIP value. [ 910.191482] RSP: 002b:00007ffe7b79fc60 EFLAGS: 00010293 [ 910.197907] RAX: 0000000000000001 RBX: 00005606fbb5ef50 RCX: 00007fdc2e467303 [ 910.205176] RDX: 0000000000000025 RSI: 00007ffe7b79fc70 RDI: 0000000000000004 [ 910.212443] RBP: 00007ffe7b79ff30 R08: 11644b8de415d7de R09: 0000000000001730 [ 910.219712] R10: 00000000ffffffff R11: 0000000000000293 R12: 00007ffe7b79fc70 [ 910.227007] R13: 0000000000000001 R14: ffffffffffffffff R15: 0000000000000002 [ 910.280145] Mem-Info: [ 910.282995] active_anon:122526 inactive_anon:21016 isolated_anon:0 [ 910.282995] active_file:10 inactive_file:9 isolated_file:0 [ 910.282995] unevictable:0 dirty:0 writeback:0 unstable:0 [ 910.282995] slab_reclaimable:13343 slab_unreclaimable:121909 [ 910.282995] mapped:52225 shmem:21358 pagetables:970 bounce:0 [ 910.282995] free:14932 free_pcp:1 free_cma:0 [ 910.332099] Node 0 active_anon:488820kB inactive_anon:43348kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:197392kB dirty:0kB writeback:0kB shmem:44452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 910.375422] Node 1 active_anon:1284kB inactive_anon:40716kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:11508kB dirty:0kB writeback:0kB shmem:40980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 910.409719] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 910.447615] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 910.453757] Node 0 DMA32 free:19772kB min:35996kB low:44992kB high:53988kB active_anon:488820kB inactive_anon:43348kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7584kB pagetables:3708kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 910.489300] lowmem_reserve[]: 0 0 1 1 1 [ 910.493315] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 910.526658] lowmem_reserve[]: 0 0 0 0 0 [ 910.530707] Node 1 Normal free:29084kB min:53876kB low:67344kB high:80812kB active_anon:1284kB inactive_anon:40716kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:320kB pagetables:172kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 910.565764] lowmem_reserve[]: 0 0 0 0 0 [ 910.569822] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10860kB [ 910.589711] Node 0 DMA32: 975*4kB (UME) 1078*8kB (UME) 225*16kB (UME) 96*32kB (M) 1*64kB (U) 2*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19772kB [ 910.611903] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 910.623797] Node 1 Normal: 113*4kB (UME) 97*8kB (UME) 99*16kB (UME) 80*32kB (UME) 45*64kB (ME) 33*128kB (UME) 11*256kB (UM) 1*512kB (M) 1*1024kB (U) 0*2048kB 3*4096kB (UM) = 29116kB [ 910.652574] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 910.665010] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 910.683930] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 910.696359] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 910.715222] 21377 total pagecache pages [ 910.719541] 0 pages in swap cache [ 910.723959] Swap cache stats: add 0, delete 0, find 0/0 [ 910.739095] Free swap = 0kB [ 910.742323] Total swap = 0kB [ 910.745340] 2097051 pages RAM [ 910.755838] 0 pages HighMem/MovableOnly [ 910.763598] 369639 pages reserved [ 910.767082] 0 pages cma reserved [ 910.777640] Out of memory: Kill process 8130 (syz-fuzzer) score 68 or sacrifice child [ 910.796457] Killed process 6775 (syz-executor.4) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 910.807374] oom_reaper: reaped process 6775 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 910.827819] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 910.879984] in:imklog cpuset=/ mems_allowed=0-1 [ 910.884966] CPU: 1 PID: 6223 Comm: in:imklog Not tainted 4.19.163-syzkaller #0 [ 910.892330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 910.901878] Call Trace: [ 910.904477] dump_stack+0x1fc/0x2fe [ 910.908127] dump_header+0x15d/0xc3f [ 910.911871] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 910.917002] ? ___ratelimit+0x319/0x584 [ 910.920983] oom_kill_process.cold+0x10/0x692 [ 910.925497] ? check_preemption_disabled+0x41/0x280 [ 910.930528] ? has_intersects_mems_allowed+0x1d6/0x290 [ 910.935810] out_of_memory+0x1072/0x1390 [ 910.939881] ? oom_killer_disable+0x270/0x270 [ 910.944398] ? mutex_trylock+0x15f/0x1a0 [ 910.948554] __alloc_pages_nodemask+0x23a2/0x2890 [ 910.953408] ? find_get_entry+0x4cd/0x8a0 [ 910.957676] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 910.962551] alloc_pages_current+0x193/0x2a0 [ 910.967229] filemap_fault+0x146e/0x2180 [ 910.971303] ext4_filemap_fault+0x84/0xb0 [ 910.975457] __do_fault+0x10b/0x4b0 [ 910.979088] __handle_mm_fault+0x273b/0x41c0 [ 910.983502] ? vm_insert_page+0x9c0/0x9c0 [ 910.987647] ? lock_downgrade+0x720/0x720 [ 910.991920] ? check_preemption_disabled+0x41/0x280 [ 910.996968] handle_mm_fault+0x436/0xb10 [ 911.001365] __do_page_fault+0x68e/0xd60 [ 911.007191] ? trace_hardirqs_off_caller+0x6e/0x210 [ 911.012217] ? spurious_fault+0x840/0x840 [ 911.016712] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 911.021556] ? page_fault+0x8/0x30 [ 911.025087] page_fault+0x1e/0x30 [ 911.028548] RIP: 0033:0x7fb08cc4822d [ 911.032561] Code: Bad RIP value. [ 911.035944] RSP: 002b:00007fb08a5e4580 EFLAGS: 00010293 [ 911.041910] RAX: 0000000000000076 RBX: 0000000000000000 RCX: 00007fb08cc4822d [ 911.049269] RDX: 0000000000001fa0 RSI: 00007fb08a5e4da0 RDI: 0000000000000004 [ 911.056744] RBP: 0000558c164819d0 R08: 0000000000000000 R09: 0000000004000001 [ 911.064173] R10: 0000000000000001 R11: 0000000000000293 R12: 00007fb08a5e4da0 [ 911.071539] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007fb08a5e4ddd [ 911.091770] Mem-Info: [ 911.094245] active_anon:122101 inactive_anon:21016 isolated_anon:0 [ 911.094245] active_file:10 inactive_file:9 isolated_file:0 [ 911.094245] unevictable:0 dirty:0 writeback:0 unstable:0 [ 911.094245] slab_reclaimable:13343 slab_unreclaimable:121909 [ 911.094245] mapped:52225 shmem:21358 pagetables:970 bounce:0 [ 911.094245] free:17244 free_pcp:668 free_cma:0 [ 911.136242] Node 0 active_anon:487028kB inactive_anon:43348kB active_file:36kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:197392kB dirty:0kB writeback:0kB shmem:44452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 911.165275] Node 1 active_anon:1280kB inactive_anon:40716kB active_file:8kB inactive_file:604kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:11608kB dirty:0kB writeback:0kB shmem:40980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 911.196691] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 911.223077] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 911.229701] Node 0 DMA32 free:23412kB min:35996kB low:44992kB high:53988kB active_anon:487012kB inactive_anon:43348kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7552kB pagetables:3512kB bounce:0kB free_pcp:1640kB local_pcp:1484kB free_cma:0kB [ 911.259857] lowmem_reserve[]: 0 0 1 1 1 [ 911.263858] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 911.290499] lowmem_reserve[]: 0 0 0 0 0 [ 911.294781] Node 1 Normal free:254360kB min:53876kB low:67344kB high:80812kB active_anon:1280kB inactive_anon:40716kB active_file:208kB inactive_file:2904kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:352kB pagetables:172kB bounce:0kB free_pcp:2096kB local_pcp:616kB free_cma:0kB [ 911.324923] lowmem_reserve[]: 0 0 0 0 0 [ 911.328958] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10860kB [ 911.344330] Node 0 DMA32: 1013*4kB (UME) 1298*8kB (UME) 294*16kB (UME) 100*32kB (UM) 2*64kB (U) 4*128kB (UM) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 23492kB [ 911.360443] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 911.372563] Node 1 Normal: 9*4kB (UME) 9*8kB (UE) 8*16kB (UME) 9*32kB (U) 45*64kB (UM) 41*128kB (UME) 18*256kB (UM) 10*512kB (UM) 9*1024kB (U) 6*2048kB (U) 67*4096kB (UME) = 314316kB [ 911.389618] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 911.398600] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 911.407189] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 911.416469] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 911.425136] 23229 total pagecache pages [ 911.435219] 0 pages in swap cache [ 911.439823] Swap cache stats: add 0, delete 0, find 0/0 [ 911.445182] Free swap = 0kB [ 911.452928] Total swap = 0kB [ 911.455963] 2097051 pages RAM [ 911.459281] 0 pages HighMem/MovableOnly [ 911.463255] 369639 pages reserved [ 911.466790] 0 pages cma reserved [ 911.474960] Out of memory (oom_kill_allocating_task): Kill process 6223 (in:imklog) score 0 or sacrifice child [ 911.485696] Killed process 6221 (rsyslogd) total-vm:254332kB, anon-rss:752kB, file-rss:0kB, shmem-rss:0kB [ 911.502543] oom_reaper: reaped process 6221 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 911.539878] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 911.548237] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 911.566421] systemd[1]: rsyslog.service: Unit entered failed state. [ 911.575186] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 911.585071] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 911.602678] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 911.609602] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 911.616582] systemd[1]: Stopped Journal Service. [ 911.632740] systemd[1]: Starting Journal Service... [ 911.829638] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 911.996369] systemd-journald[7156]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. 21:47:30 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x17d, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:47:30 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}, 0x6}) 21:47:30 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4800, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) linkat(r3, &(0x7f0000000080)='./file0\x00', r5, &(0x7f0000000140)='./file0\x00', 0x1400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:47:30 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20004c, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:47:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xf000000}, 0x0) 21:47:30 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000000302000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:47:30 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x17e, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 915.296502] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 915.306426] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 915.321133] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 915.341392] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 915.358693] EXT4-fs (loop1): get root inode failed [ 915.379900] EXT4-fs (loop1): mount failed 21:47:31 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x17f, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 915.499184] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 915.521775] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 21:47:31 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000000402000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 915.555583] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 915.566305] EXT4-fs: failed to create workqueue [ 915.572253] EXT4-fs (loop1): mount failed [ 915.588747] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 21:47:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200060, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) [ 915.605223] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 21:47:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x3c030000}, 0x0) 21:47:31 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000000502000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 915.790545] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 915.844283] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 915.896930] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 915.928824] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 915.953864] EXT4-fs (loop1): get root inode failed [ 915.966559] EXT4-fs (loop1): mount failed [ 916.018339] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 916.027442] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 916.074839] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 916.123405] EXT4-fs: failed to create workqueue [ 916.160677] EXT4-fs (loop1): mount failed [ 917.493185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 917.502475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 917.512050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 917.519228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 917.526833] device bridge_slave_1 left promiscuous mode [ 917.533331] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.541889] device bridge_slave_0 left promiscuous mode [ 917.547472] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.556812] device veth1_macvtap left promiscuous mode [ 917.562262] device veth0_macvtap left promiscuous mode [ 917.568606] device veth1_vlan left promiscuous mode [ 917.573706] device veth0_vlan left promiscuous mode [ 920.777869] Bluetooth: hci4: command 0x0409 tx timeout [ 921.977610] device hsr_slave_1 left promiscuous mode [ 921.986028] device hsr_slave_0 left promiscuous mode [ 922.003052] team0 (unregistering): Port device team_slave_1 removed [ 922.013456] team0 (unregistering): Port device team_slave_0 removed [ 922.025343] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 922.035703] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 922.066281] bond0 (unregistering): Released all slaves [ 922.084764] IPVS: ftp: loaded support on port[0] = 21 [ 922.196496] chnl_net:caif_netlink_parms(): no params data found [ 922.293228] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.301210] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.309106] device bridge_slave_0 entered promiscuous mode [ 922.316952] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.323776] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.331605] device bridge_slave_1 entered promiscuous mode [ 922.355637] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 922.365255] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 922.387180] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 922.396671] team0: Port device team_slave_0 added [ 922.403112] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 922.411773] team0: Port device team_slave_1 added [ 922.440490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 922.446774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 922.479425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.502722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 922.511279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 922.543381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 922.555016] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 922.568333] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 922.601084] device hsr_slave_0 entered promiscuous mode [ 922.607599] device hsr_slave_1 entered promiscuous mode [ 922.620623] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 922.633589] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 922.773959] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.780387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 922.787046] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.794249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 922.858115] Bluetooth: hci4: command 0x041b tx timeout [ 922.881947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 922.895481] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 922.912208] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 922.918673] 8021q: adding VLAN 0 to HW filter on device team0 [ 922.925311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 922.933831] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.941811] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.961558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 922.969803] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.976181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 922.992386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 923.000180] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.006586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 923.022568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 923.030583] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 923.054457] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 923.064917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 923.076200] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 923.084274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 923.093118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 923.101178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 923.117173] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 923.124439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 923.133279] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 923.139962] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 923.146692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 923.159484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 923.177378] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 923.188047] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 923.195288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 923.206476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 923.273790] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 923.281771] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 923.290072] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 923.300669] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 923.308030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 923.315485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 923.325089] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 923.335412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 923.344028] device veth0_vlan entered promiscuous mode [ 923.355532] device veth1_vlan entered promiscuous mode [ 923.361710] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 923.370989] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 923.384551] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 923.393805] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 923.400947] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 923.408719] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 923.416781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 923.426915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 923.437205] device veth0_macvtap entered promiscuous mode [ 923.444388] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 923.453271] device veth1_macvtap entered promiscuous mode [ 923.460124] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 923.469109] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 923.482325] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 923.491660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 923.501836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.511248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 923.521119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.530949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 923.541607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.550938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 923.560965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.570262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 923.580132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.590402] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 923.599809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 923.608990] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 923.616315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 923.624799] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 923.632915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 923.644493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 923.654903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.664261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 923.674527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.683968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 923.693994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.703149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 923.713427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.722605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 923.732394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.743304] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 923.750496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 923.762140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 923.770248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 923.911483] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 923.918430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.932041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.954003] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 923.965605] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 923.972558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.981207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.990000] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 924.937611] Bluetooth: hci4: command 0x040f tx timeout [ 927.027863] Bluetooth: hci4: command 0x0419 tx timeout [ 928.489992] oom_reaper: reaped process 7502 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 928.520814] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 928.546405] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 928.551952] CPU: 0 PID: 8131 Comm: syz-fuzzer Not tainted 4.19.163-syzkaller #0 [ 928.559575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 928.569532] Call Trace: [ 928.572129] dump_stack+0x1fc/0x2fe [ 928.575793] dump_header+0x15d/0xc3f [ 928.579511] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 928.584609] ? ___ratelimit+0x319/0x584 [ 928.588580] oom_kill_process.cold+0x10/0x692 [ 928.592684] syz-executor.4: vmalloc: allocation failure, allocated 1832034304 of 3621613568 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 928.593076] ? check_preemption_disabled+0x41/0x280 [ 928.612246] ? has_intersects_mems_allowed+0x1d6/0x290 [ 928.614275] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 928.617866] out_of_memory+0x1072/0x1390 [ 928.617885] ? oom_killer_disable+0x270/0x270 [ 928.617902] ? mutex_trylock+0x15f/0x1a0 [ 928.617918] __alloc_pages_nodemask+0x23a2/0x2890 [ 928.617934] ? find_get_entry+0x4cd/0x8a0 [ 928.617958] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 928.617994] alloc_pages_current+0x193/0x2a0 [ 928.618009] filemap_fault+0x146e/0x2180 [ 928.618030] ext4_filemap_fault+0x84/0xb0 [ 928.618044] __do_fault+0x10b/0x4b0 [ 928.618056] __handle_mm_fault+0x273b/0x41c0 [ 928.618069] ? vm_insert_page+0x9c0/0x9c0 [ 928.618091] ? check_preemption_disabled+0x41/0x280 [ 928.618106] handle_mm_fault+0x436/0xb10 [ 928.618122] __do_page_fault+0x68e/0xd60 [ 928.618138] ? trace_hardirqs_off_caller+0x6e/0x210 [ 928.618149] ? spurious_fault+0x840/0x840 [ 928.618161] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 928.618174] ? page_fault+0x8/0x30 [ 928.618184] page_fault+0x1e/0x30 [ 928.618193] RIP: 0033:0x469093 [ 928.618222] Code: Bad RIP value. [ 928.716571] RSP: 002b:000000c00004de80 EFLAGS: 00010206 [ 928.722529] RAX: ffffffffffffff92 RBX: 000000001230e7b2 RCX: 0000000000469093 [ 928.729787] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001b36f58 [ 928.737140] RBP: 000000c00004dec8 R08: 0000000000000000 R09: 0000000000000000 [ 928.744412] R10: 000000c00004deb8 R11: 0000000000000206 R12: 0000000000439470 [ 928.751679] R13: 0000000000000000 R14: 0000000000b81a70 R15: 0000000000000000 [ 928.759580] CPU: 1 PID: 7502 Comm: syz-executor.4 Not tainted 4.19.163-syzkaller #0 [ 928.766663] Mem-Info: [ 928.767819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 928.767825] Call Trace: [ 928.767846] dump_stack+0x1fc/0x2fe [ 928.767863] warn_alloc.cold+0x7b/0x18f [ 928.770278] active_anon:122824 inactive_anon:23065 isolated_anon:0 [ 928.770278] active_file:19 inactive_file:0 isolated_file:0 [ 928.770278] unevictable:0 dirty:0 writeback:0 unstable:0 [ 928.770278] slab_reclaimable:13336 slab_unreclaimable:121644 [ 928.770278] mapped:52607 shmem:23407 pagetables:1015 bounce:0 [ 928.770278] free:13855 free_pcp:267 free_cma:0 [ 928.781255] ? zone_watermark_ok_safe+0x260/0x260 [ 928.781270] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 928.781290] ? retint_kernel+0x2d/0x2d [ 928.784129] Node 0 active_anon:489840kB inactive_anon:43356kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:197396kB dirty:0kB writeback:0kB shmem:44456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 155648kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 928.787736] __vmalloc_area_node+0x4fd/0x780 [ 928.787755] ? __vmalloc_node_range+0x180/0x180 [ 928.792862] Node 1 active_anon:1456kB inactive_anon:48904kB active_file:8kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13032kB dirty:0kB writeback:0kB shmem:49172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 928.826235] ? _raw_spin_unlock+0x29/0x40 [ 928.826248] ? __get_vm_area_node+0x2e2/0x3a0 [ 928.826266] __vmalloc_node_range+0xed/0x180 [ 928.831101] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 928.835831] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 928.839723] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 928.867715] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 928.867726] vmalloc_user+0x70/0xe0 [ 928.867742] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 928.872142] Node 0 DMA32 free:17800kB min:35996kB low:44992kB high:53988kB active_anon:490140kB inactive_anon:43356kB active_file:80kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7616kB pagetables:3796kB bounce:0kB free_pcp:736kB local_pcp:632kB free_cma:0kB [ 928.876801] vb2_vmalloc_alloc+0xb3/0x2f0 [ 928.903884] lowmem_reserve[]: 0 0 1 1 1 [ 928.908019] __vb2_queue_alloc+0x472/0xe60 [ 928.908048] vb2_core_create_bufs+0x273/0x7e0 [ 928.912506] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 928.916908] ? __vb2_queue_free+0x870/0x870 [ 928.943104] lowmem_reserve[]: 0 0 0 0 0 [ 928.947421] ? __mutex_add_waiter+0x160/0x160 [ 928.947442] vb2_create_bufs+0x332/0x620 [ 928.952432] Node 1 Normal free:26736kB min:53876kB low:67344kB high:80812kB active_anon:1456kB inactive_anon:48904kB active_file:108kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:352kB pagetables:264kB bounce:0kB free_pcp:332kB local_pcp:84kB free_cma:0kB [ 928.957805] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 928.957819] ? __video_do_ioctl+0x632/0xcd0 [ 928.957836] ? __mutex_add_waiter+0x160/0x160 [ 928.961449] lowmem_reserve[]: 0 0 0 0 0 [ 928.965772] ? mark_held_locks+0xf0/0xf0 [ 928.965788] ? futex_wait_queue_me+0x404/0x5e0 [ 928.965806] vb2_ioctl_create_bufs+0x20d/0x360 [ 929.005143] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10872kB [ 929.007613] ? memset+0x20/0x40 [ 929.007632] v4l_create_bufs+0xb2/0x160 [ 929.007649] __video_do_ioctl+0x49a/0xcd0 [ 929.011861] Node 0 DMA32: 874*4kB (ME) 1028*8kB (UME) 206*16kB (ME) 87*32kB (M) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17800kB [ 929.016351] ? v4l_querycap+0x340/0x340 [ 929.042304] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 929.046609] ? __might_fault+0x192/0x1d0 [ 929.050575] Node 1 Normal: 207*4kB (UME) 167*8kB (UME) 160*16kB (UM) 120*32kB (UM) 66*64kB (ME) 21*128kB (ME) 1*256kB (U) 1*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 1*4096kB (U) = 26484kB [ 929.055070] video_usercopy+0x13c/0x1000 [ 929.059290] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 929.087902] ? v4l_querycap+0x340/0x340 [ 929.087918] ? v4l_enumstd+0x60/0x60 [ 929.087930] ? mark_held_locks+0xf0/0xf0 [ 929.087943] ? do_futex+0x163/0x1c70 [ 929.087955] ? mark_held_locks+0xf0/0xf0 [ 929.087971] ? mark_held_locks+0xf0/0xf0 [ 929.093094] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 929.097385] ? debug_check_no_obj_freed+0x201/0x482 [ 929.097407] ? video_usercopy+0x1000/0x1000 [ 929.097421] v4l2_ioctl+0x147/0x1a0 [ 929.101895] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 929.105852] ? video_devdata+0xa0/0xa0 [ 929.109914] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 929.114462] do_vfs_ioctl+0xcdb/0x12e0 [ 929.119050] 23466 total pagecache pages [ 929.132285] ? lock_downgrade+0x720/0x720 [ 929.132297] ? check_preemption_disabled+0x41/0x280 [ 929.132312] ? ioctl_preallocate+0x200/0x200 [ 929.135572] 0 pages in swap cache [ 929.139559] ? __fget+0x356/0x510 [ 929.139579] ? do_dup2+0x450/0x450 [ 929.143718] Swap cache stats: add 0, delete 0, find 0/0 [ 929.157516] ksys_ioctl+0x9b/0xc0 [ 929.157535] __x64_sys_ioctl+0x6f/0xb0 [ 929.161499] Free swap = 0kB [ 929.173394] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 929.173409] do_syscall_64+0xf9/0x620 [ 929.173426] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 929.177474] Total swap = 0kB [ 929.194028] RIP: 0033:0x45e159 [ 929.194052] Code: Bad RIP value. [ 929.198107] 2097051 pages RAM [ 929.207076] RSP: 002b:00007f97b8bccc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 929.211072] 0 pages HighMem/MovableOnly [ 929.214764] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e159 [ 929.214775] RDX: 0000000020000340 RSI: 00000000c100565c RDI: 0000000000000003 [ 929.218849] 369639 pages reserved [ 929.222551] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 929.222561] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 929.226599] 0 pages cma reserved [ 929.230638] R13: 00007fffd1f6639f R14: 00007f97b8bcd9c0 R15: 000000000119bf8c [ 929.273464] Mem-Info: [ 929.276489] Out of memory (oom_kill_allocating_task): Kill process 8131 (syz-fuzzer) score 0 or sacrifice child [ 929.286331] active_anon:122800 inactive_anon:23065 isolated_anon:0 [ 929.286331] active_file:14 inactive_file:15 isolated_file:0 [ 929.286331] unevictable:0 dirty:0 writeback:0 unstable:0 [ 929.286331] slab_reclaimable:13336 slab_unreclaimable:121528 [ 929.286331] mapped:52601 shmem:23407 pagetables:1014 bounce:0 [ 929.286331] free:13835 free_pcp:347 free_cma:0 [ 929.287233] Killed process 7249 (syz-executor.4) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 929.468528] Node 0 active_anon:489736kB inactive_anon:43356kB active_file:44kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:197396kB dirty:0kB writeback:0kB shmem:44456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 153600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 929.485630] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 929.501889] oom_reaper: reaped process 7249 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 929.517779] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 929.523123] Node 1 active_anon:1464kB inactive_anon:48904kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13008kB dirty:0kB writeback:0kB shmem:49172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 929.523310] CPU: 0 PID: 8131 Comm: syz-fuzzer Not tainted 4.19.163-syzkaller #0 [ 929.554564] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 929.558657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 929.558663] Call Trace: [ 929.558683] dump_stack+0x1fc/0x2fe [ 929.558701] dump_header+0x15d/0xc3f [ 929.558714] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 929.558725] ? ___ratelimit+0x319/0x584 [ 929.558748] oom_kill_process.cold+0x10/0x692 [ 929.558760] ? check_preemption_disabled+0x41/0x280 [ 929.558777] ? has_intersects_mems_allowed+0x1d6/0x290 [ 929.558792] out_of_memory+0x1072/0x1390 [ 929.558813] ? oom_killer_disable+0x270/0x270 [ 929.558829] ? mutex_trylock+0x15f/0x1a0 [ 929.558846] __alloc_pages_nodemask+0x23a2/0x2890 [ 929.558864] ? find_get_entry+0x4cd/0x8a0 [ 929.558888] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 929.558926] alloc_pages_current+0x193/0x2a0 [ 929.558941] filemap_fault+0x146e/0x2180 [ 929.558966] ext4_filemap_fault+0x84/0xb0 [ 929.558982] __do_fault+0x10b/0x4b0 [ 929.558998] __handle_mm_fault+0x273b/0x41c0 [ 929.559014] ? vm_insert_page+0x9c0/0x9c0 [ 929.559037] ? check_preemption_disabled+0x41/0x280 [ 929.559054] handle_mm_fault+0x436/0xb10 [ 929.559073] __do_page_fault+0x68e/0xd60 [ 929.559094] ? trace_hardirqs_off_caller+0x6e/0x210 [ 929.559106] ? spurious_fault+0x840/0x840 [ 929.559121] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 929.559136] ? page_fault+0x8/0x30 [ 929.559148] page_fault+0x1e/0x30 [ 929.559159] RIP: 0033:0x469093 [ 929.559181] Code: Bad RIP value. [ 929.559188] RSP: 002b:000000c00004de80 EFLAGS: 00010206 [ 929.559199] RAX: ffffffffffffff92 RBX: 000000001230e7b2 RCX: 0000000000469093 [ 929.559206] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001b36f58 [ 929.559214] RBP: 000000c00004dec8 R08: 0000000000000000 R09: 0000000000000000 [ 929.559221] R10: 000000c00004deb8 R11: 0000000000000206 R12: 0000000000439470 [ 929.559228] R13: 0000000000000000 R14: 0000000000b81a70 R15: 0000000000000000 [ 929.573733] Mem-Info: [ 929.594131] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 929.606374] active_anon:122800 inactive_anon:23065 isolated_anon:0 [ 929.606374] active_file:14 inactive_file:15 isolated_file:0 [ 929.606374] unevictable:0 dirty:0 writeback:0 unstable:0 [ 929.606374] slab_reclaimable:13336 slab_unreclaimable:121502 [ 929.606374] mapped:52601 shmem:23407 pagetables:1014 bounce:0 [ 929.606374] free:13861 free_pcp:359 free_cma:0 [ 929.611539] Node 0 DMA32 free:18076kB min:35996kB low:44992kB high:53988kB active_anon:489736kB inactive_anon:43356kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7616kB pagetables:3792kB bounce:0kB free_pcp:1104kB local_pcp:472kB free_cma:0kB [ 929.619816] Node 0 active_anon:489736kB inactive_anon:43356kB active_file:44kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:197396kB dirty:0kB writeback:0kB shmem:44456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 153600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 929.622151] lowmem_reserve[]: 0 0 1 1 1 [ 929.627187] Node 1 active_anon:1464kB inactive_anon:48904kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13008kB dirty:0kB writeback:0kB shmem:49172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 929.635634] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 929.645316] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 929.653409] lowmem_reserve[]: 0 0 0 0 0 [ 929.660548] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 929.660573] Node 0 DMA32 free:18076kB min:35996kB low:44992kB high:53988kB active_anon:489736kB inactive_anon:43356kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7616kB pagetables:3792kB bounce:0kB free_pcp:1104kB local_pcp:632kB free_cma:0kB [ 929.660604] lowmem_reserve[]: 0 0 1 1 1 [ 929.660623] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 929.660652] lowmem_reserve[]: 0 0 0 0 0 [ 929.660670] Node 1 Normal free:26484kB min:53876kB low:67344kB high:80812kB active_anon:1464kB inactive_anon:48904kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:352kB pagetables:264kB bounce:0kB free_pcp:332kB local_pcp:84kB free_cma:0kB [ 929.660702] lowmem_reserve[]: 0 0 0 0 0 [ 929.660720] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10872kB [ 929.660786] Node 0 DMA32: 873*4kB (UME) 1027*8kB (UME) 202*16kB (UME) 85*32kB (UM) 2*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18044kB [ 929.660851] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 929.660906] Node 1 Normal: 207*4kB (UME) 167*8kB (UME) 160*16kB (UM) 121*32kB (UM) 66*64kB (ME) 21*128kB (ME) 1*256kB (U) 1*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 1*4096kB (U) = 26516kB [ 929.660980] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 929.660993] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 929.666248] Node 1 Normal free:26484kB min:53876kB low:67344kB high:80812kB active_anon:1464kB inactive_anon:48904kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:352kB pagetables:264kB bounce:0kB free_pcp:332kB local_pcp:248kB free_cma:0kB [ 929.679556] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 929.684747] lowmem_reserve[]: 0 0 0 0 0 [ 929.685807] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 929.690838] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10872kB [ 929.708790] 23436 total pagecache pages [ 929.713710] Node 0 DMA32: 873*4kB (UME) 1027*8kB (UME) 202*16kB (UME) 85*32kB (UM) 2*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18044kB [ 929.730747] 0 pages in swap cache [ 929.734223] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 929.736553] Swap cache stats: add 0, delete 0, find 0/0 [ 929.757633] Node 1 Normal: 207*4kB (UME) 167*8kB (UME) 160*16kB (UM) 121*32kB (UM) 66*64kB (ME) 21*128kB (ME) 1*256kB (U) 1*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 1*4096kB (U) = 26516kB [ 929.773453] Free swap = 0kB [ 929.780668] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 929.811665] Total swap = 0kB [ 929.824964] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 929.863601] 2097051 pages RAM [ 929.884678] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 929.924933] 0 pages HighMem/MovableOnly [ 929.938326] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 929.973269] 369639 pages reserved [ 930.008434] 23436 total pagecache pages [ 930.040843] 0 pages cma reserved [ 930.077617] 0 pages in swap cache [ 930.098506] Out of memory (oom_kill_allocating_task): Kill process 8131 (syz-fuzzer) score 0 or sacrifice child [ 930.107562] Swap cache stats: add 0, delete 0, find 0/0 [ 930.123777] Killed process 844 (syz-executor.3) total-vm:85024kB, anon-rss:1724kB, file-rss:4kB, shmem-rss:0kB [ 930.365373] Free swap = 0kB [ 930.368499] Total swap = 0kB [ 930.371518] 2097051 pages RAM [ 930.374624] 0 pages HighMem/MovableOnly [ 930.385526] 369639 pages reserved [ 930.389035] 0 pages cma reserved [ 930.403057] oom_reaper: reaped process 844 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 930.435272] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 930.462583] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 930.472033] CPU: 1 PID: 8131 Comm: syz-fuzzer Not tainted 4.19.163-syzkaller #0 [ 930.479762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 930.489310] Call Trace: [ 930.491907] dump_stack+0x1fc/0x2fe [ 930.495544] dump_header+0x15d/0xc3f [ 930.499263] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 930.504365] ? ___ratelimit+0x319/0x584 [ 930.508346] oom_kill_process.cold+0x10/0x692 [ 930.512841] ? check_preemption_disabled+0x41/0x280 [ 930.517885] ? has_intersects_mems_allowed+0x1d6/0x290 [ 930.523166] out_of_memory+0x1072/0x1390 [ 930.527232] ? oom_killer_disable+0x270/0x270 [ 930.531742] ? mutex_trylock+0x15f/0x1a0 [ 930.535833] __alloc_pages_nodemask+0x23a2/0x2890 [ 930.540683] ? find_get_entry+0x4cd/0x8a0 [ 930.544843] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 930.549721] alloc_pages_current+0x193/0x2a0 [ 930.554134] filemap_fault+0x146e/0x2180 [ 930.558326] ext4_filemap_fault+0x84/0xb0 [ 930.562480] __do_fault+0x10b/0x4b0 [ 930.566116] __handle_mm_fault+0x273b/0x41c0 [ 930.570577] ? vm_insert_page+0x9c0/0x9c0 [ 930.574738] ? check_preemption_disabled+0x41/0x280 [ 930.579762] handle_mm_fault+0x436/0xb10 [ 930.583831] __do_page_fault+0x68e/0xd60 [ 930.587900] ? trace_hardirqs_off_caller+0x6e/0x210 [ 930.593101] ? spurious_fault+0x840/0x840 [ 930.597274] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 930.602119] ? page_fault+0x8/0x30 [ 930.605658] page_fault+0x1e/0x30 [ 930.609106] RIP: 0033:0x469093 [ 930.612326] Code: Bad RIP value. [ 930.615686] RSP: 002b:000000c00004de80 EFLAGS: 00010206 [ 930.621053] RAX: ffffffffffffff92 RBX: 000000001230e7b2 RCX: 0000000000469093 [ 930.628324] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001b36f58 [ 930.635695] RBP: 000000c00004dec8 R08: 0000000000000000 R09: 0000000000000000 [ 930.642971] R10: 000000c00004deb8 R11: 0000000000000206 R12: 0000000000439470 [ 930.650518] R13: 0000000000000000 R14: 0000000000b81a70 R15: 0000000000000000 [ 930.720729] Mem-Info: [ 930.723741] active_anon:121923 inactive_anon:23065 isolated_anon:0 [ 930.723741] active_file:13 inactive_file:11 isolated_file:0 [ 930.723741] unevictable:0 dirty:0 writeback:0 unstable:0 [ 930.723741] slab_reclaimable:13325 slab_unreclaimable:121502 [ 930.723741] mapped:44751 shmem:23407 pagetables:967 bounce:0 [ 930.723741] free:14396 free_pcp:774 free_cma:0 [ 930.764660] Node 0 active_anon:486236kB inactive_anon:43356kB active_file:40kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162596kB dirty:0kB writeback:0kB shmem:44456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 153600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 930.793814] Node 1 active_anon:1456kB inactive_anon:48904kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13008kB dirty:0kB writeback:0kB shmem:49172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 930.832879] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 930.871102] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 930.894831] Node 0 DMA32 free:34872kB min:35996kB low:44992kB high:53988kB active_anon:486236kB inactive_anon:43356kB active_file:40kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7552kB pagetables:3604kB bounce:0kB free_pcp:2820kB local_pcp:1364kB free_cma:0kB [ 930.942130] lowmem_reserve[]: 0 0 1 1 1 [ 930.983559] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 931.025644] lowmem_reserve[]: 0 0 0 0 0 [ 931.030091] Node 1 Normal free:26516kB min:53876kB low:67344kB high:80812kB active_anon:1456kB inactive_anon:48904kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:352kB pagetables:264kB bounce:0kB free_pcp:356kB local_pcp:92kB free_cma:0kB [ 931.060654] lowmem_reserve[]: 0 0 0 0 0 [ 931.064923] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10872kB [ 931.079710] Node 0 DMA32: 979*4kB (UME) 1446*8kB (UME) 276*16kB (UME) 147*32kB (UM) 56*64kB (U) 59*128kB (UM) 12*256kB (UM) 11*512kB (UM) 13*1024kB (UM) 0*2048kB 0*4096kB = 57756kB [ 931.115321] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 931.131162] Node 1 Normal: 207*4kB (UME) 167*8kB (UME) 160*16kB (UM) 121*32kB (UM) 66*64kB (ME) 21*128kB (ME) 1*256kB (U) 1*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 1*4096kB (U) = 26516kB [ 931.153354] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 931.175586] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 931.184569] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 931.196419] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 931.207041] 24536 total pagecache pages [ 931.211846] 0 pages in swap cache [ 931.216107] Swap cache stats: add 0, delete 0, find 0/0 [ 931.227161] Free swap = 0kB [ 931.231016] Total swap = 0kB [ 931.234160] 2097051 pages RAM [ 931.237533] 0 pages HighMem/MovableOnly [ 931.242048] 369639 pages reserved [ 931.246255] 0 pages cma reserved [ 931.249715] Out of memory (oom_kill_allocating_task): Kill process 8131 (syz-fuzzer) score 0 or sacrifice child [ 931.293996] Killed process 3686 (syz-executor.0) total-vm:85024kB, anon-rss:1724kB, file-rss:4kB, shmem-rss:0kB [ 932.102697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 932.123990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 932.134116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 932.151135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 932.161915] device bridge_slave_1 left promiscuous mode [ 932.171919] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.181632] device bridge_slave_0 left promiscuous mode [ 932.187136] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.203773] device veth1_macvtap left promiscuous mode [ 932.210897] device veth0_macvtap left promiscuous mode [ 932.216228] device veth1_vlan left promiscuous mode [ 932.229813] device veth0_vlan left promiscuous mode [ 932.394872] device hsr_slave_1 left promiscuous mode [ 932.411830] device hsr_slave_0 left promiscuous mode [ 932.442782] team0 (unregistering): Port device team_slave_1 removed [ 932.456756] team0 (unregistering): Port device team_slave_0 removed [ 932.491698] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 932.505254] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 932.562874] bond0 (unregistering): Released all slaves [ 936.463733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 936.471583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 936.480156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 936.489492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 936.498483] device bridge_slave_1 left promiscuous mode [ 936.504245] bridge0: port 2(bridge_slave_1) entered disabled state 21:47:52 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000000602000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:47:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200068, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:47:52 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}, 0x6}) 21:47:52 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f0900ffff080000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:47:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x60000000}, 0x0) 21:47:52 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x180, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 936.513716] device bridge_slave_0 left promiscuous mode [ 936.519708] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.529784] device veth1_macvtap left promiscuous mode [ 936.536870] device veth0_macvtap left promiscuous mode [ 936.543215] device veth1_vlan left promiscuous mode [ 936.552087] device veth0_vlan left promiscuous mode [ 936.739796] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 936.752055] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 936.762555] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 936.774142] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated 21:47:52 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x181, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 936.813381] EXT4-fs (loop1): get root inode failed [ 936.842794] EXT4-fs (loop1): mount failed [ 936.921376] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 936.958352] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 21:47:52 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x182, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 936.976143] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 937.040679] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated 21:47:52 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x183, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 937.092162] EXT4-fs (loop1): get root inode failed [ 937.114525] EXT4-fs (loop1): mount failed 21:47:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20006c, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:47:52 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x184, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 937.296710] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 937.316017] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 937.336281] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 21:47:52 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x185, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 937.383480] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 937.433682] EXT4-fs (loop1): get root inode failed [ 937.455065] EXT4-fs (loop1): mount failed [ 937.511598] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 937.534233] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 937.584066] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 937.622954] EXT4-fs: failed to create workqueue [ 937.638918] EXT4-fs (loop1): mount failed [ 942.226882] Bluetooth: hci2: command 0x0409 tx timeout [ 942.371792] device hsr_slave_1 left promiscuous mode [ 942.379578] device hsr_slave_0 left promiscuous mode [ 942.395299] team0 (unregistering): Port device team_slave_1 removed [ 942.404628] team0 (unregistering): Port device team_slave_0 removed [ 942.417733] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 942.429350] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 942.461463] bond0 (unregistering): Released all slaves [ 942.473077] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 942.482019] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 942.497982] IPVS: ftp: loaded support on port[0] = 21 [ 942.502232] IPVS: ftp: loaded support on port[0] = 21 [ 942.509208] IPVS: ftp: loaded support on port[0] = 21 [ 942.835090] chnl_net:caif_netlink_parms(): no params data found [ 942.918164] chnl_net:caif_netlink_parms(): no params data found [ 942.936725] Bluetooth: hci4: command 0x0409 tx timeout [ 942.937345] Bluetooth: hci5: command 0x0409 tx timeout [ 942.950073] chnl_net:caif_netlink_parms(): no params data found [ 943.165363] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.173246] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.181128] device bridge_slave_0 entered promiscuous mode [ 943.208894] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.215390] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.224722] device bridge_slave_1 entered promiscuous mode [ 943.232276] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.239113] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.246516] device bridge_slave_0 entered promiscuous mode [ 943.253978] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.261165] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.270475] device bridge_slave_0 entered promiscuous mode [ 943.284035] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.291148] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.299393] device bridge_slave_1 entered promiscuous mode [ 943.306168] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.313064] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.321020] device bridge_slave_1 entered promiscuous mode [ 943.358233] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 943.369702] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 943.379685] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 943.411471] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 943.422094] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 943.430509] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 943.439107] team0: Port device team_slave_0 added [ 943.452554] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 943.462884] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 943.472024] team0: Port device team_slave_1 added [ 943.508130] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 943.516370] team0: Port device team_slave_0 added [ 943.523371] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 943.531276] team0: Port device team_slave_0 added [ 943.538116] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 943.545333] team0: Port device team_slave_1 added [ 943.556924] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 943.564164] team0: Port device team_slave_1 added [ 943.582542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.591247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.618095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 943.634998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 943.641359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.667294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 943.685087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.700919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.730651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 943.741942] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 943.749971] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 943.759188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.765565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.792122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 943.803544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 943.810659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.836892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 943.852618] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 943.861679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 943.868519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.895516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 943.930268] device hsr_slave_0 entered promiscuous mode [ 943.936349] device hsr_slave_1 entered promiscuous mode [ 943.944671] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 943.959776] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 943.972395] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 944.002663] device hsr_slave_0 entered promiscuous mode [ 944.013586] device hsr_slave_1 entered promiscuous mode [ 944.023065] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 944.035880] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 944.043218] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 944.074419] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 944.119104] device hsr_slave_0 entered promiscuous mode [ 944.126349] device hsr_slave_1 entered promiscuous mode [ 944.146427] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 944.179184] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 944.297428] Bluetooth: hci2: command 0x041b tx timeout [ 944.298130] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 944.522624] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 944.655048] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 944.691788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 944.704518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 944.809603] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 944.823892] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 944.831765] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 944.841796] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 944.849493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 944.856506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 944.864434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 944.872842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 944.990633] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 944.997214] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.005244] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 945.012201] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.016830] Bluetooth: hci5: command 0x041b tx timeout [ 945.018608] Bluetooth: hci4: command 0x041b tx timeout [ 945.021580] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 945.043059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 945.053739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 945.061623] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.068296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.075606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 945.085747] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 945.096320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 945.104157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 945.112327] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.118872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 945.129351] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 945.141354] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 945.149925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 945.160601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 945.168659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 945.176223] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.182749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.193097] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 945.298337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 945.305538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 945.317244] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 945.327857] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 945.337439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.440223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 945.448848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 945.456610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 945.464561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 945.473082] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.479514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 945.584161] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 945.592045] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 945.599957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 945.609610] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 945.621026] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 945.720766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 945.731580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 945.741941] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 945.755647] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 945.763560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 945.772043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 945.781989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 945.792461] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 945.802251] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 945.906004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 945.924046] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 945.933535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 945.941546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 945.949826] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 945.959920] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 946.081876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 946.090555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 946.100932] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 946.110592] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 946.117458] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.125325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 946.133278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 946.153583] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 946.172748] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 946.186034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 946.208546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 946.217104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 946.325344] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 946.335480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 946.347522] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 946.355735] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.362303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.370385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 946.380943] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 946.389010] Bluetooth: hci2: command 0x040f tx timeout [ 946.395652] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 946.403725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 946.412792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 946.425106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 946.434333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 946.445029] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.453052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.464592] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 946.471446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 946.484148] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 946.495707] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 946.508099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 946.515007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 946.524151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 946.532998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 946.542104] device bridge_slave_1 left promiscuous mode [ 946.548790] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.555954] device bridge_slave_0 left promiscuous mode [ 946.562936] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.573100] device veth1_macvtap left promiscuous mode [ 946.580488] device veth0_macvtap left promiscuous mode [ 946.585837] device veth1_vlan left promiscuous mode [ 946.592018] device veth0_vlan left promiscuous mode [ 947.096625] Bluetooth: hci5: command 0x040f tx timeout [ 947.106865] Bluetooth: hci4: command 0x040f tx timeout [ 948.456687] Bluetooth: hci2: command 0x0419 tx timeout [ 949.176470] Bluetooth: hci4: command 0x0419 tx timeout [ 949.181819] Bluetooth: hci5: command 0x0419 tx timeout [ 950.995817] device hsr_slave_1 left promiscuous mode [ 951.003445] device hsr_slave_0 left promiscuous mode [ 951.018322] team0 (unregistering): Port device team_slave_1 removed [ 951.030816] team0 (unregistering): Port device team_slave_0 removed [ 951.040703] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 951.053441] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 951.086196] bond0 (unregistering): Released all slaves [ 951.098164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 951.113981] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 951.123518] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 951.131284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 951.145537] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 951.153171] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 951.162007] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 951.169310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 951.175991] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 951.183086] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 951.195035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 951.214759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 951.229708] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 951.240006] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 951.250844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 951.259446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 951.267501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 951.275518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 951.285612] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 951.294707] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 951.306494] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 951.313757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 951.321784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 951.335022] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 951.346611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 951.354558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 951.392462] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 951.404510] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 951.463825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 951.472975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 951.490694] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 951.501564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 951.513193] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 951.522030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 951.533436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 951.557713] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 951.565460] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 951.588959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 951.596010] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 951.615190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 951.628494] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 951.635805] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 951.650557] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 951.679626] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 951.691528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 951.702670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 951.715480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 951.725076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 951.740026] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 951.748237] device veth0_vlan entered promiscuous mode [ 951.758766] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 951.766125] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 951.774363] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 951.785351] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 951.799064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 951.810809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 951.822532] device veth1_vlan entered promiscuous mode [ 951.835052] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 951.844975] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 951.856139] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 951.875602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 951.890018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 951.902329] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 951.915403] device veth0_vlan entered promiscuous mode [ 951.924559] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 951.938528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 951.945769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 951.965185] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 951.994984] device veth1_vlan entered promiscuous mode [ 952.004845] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 952.021204] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 952.034763] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 952.043444] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 952.061009] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 952.078648] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 952.092040] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 952.101091] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 952.114768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 952.123111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 952.143448] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 952.159951] device veth0_macvtap entered promiscuous mode [ 952.171722] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 952.192264] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 952.201975] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 952.213870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 952.237033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 952.247171] device veth0_vlan entered promiscuous mode [ 952.263218] device veth1_macvtap entered promiscuous mode [ 952.274908] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 952.288501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 952.295975] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 952.310970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 952.319699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 952.331266] device veth1_vlan entered promiscuous mode [ 952.340801] device veth0_macvtap entered promiscuous mode [ 952.347927] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 952.355628] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 952.367443] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 952.388799] device veth1_macvtap entered promiscuous mode [ 952.395958] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 952.411689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 952.422274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.432832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 952.443287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.453279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 952.463759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.474897] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 952.481990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 952.492590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 952.502930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.513653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 952.523817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.533396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 952.544185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.555772] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 952.562943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 952.570743] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 952.578811] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 952.586015] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 952.594704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 952.603266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 952.611486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 952.630570] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 952.642360] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 952.663154] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 952.685591] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 952.694050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 952.711904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 952.721441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 952.731865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.741778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 952.752320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.762036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 952.772160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.782118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 952.791915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.802166] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 952.810151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 952.818346] device veth0_macvtap entered promiscuous mode [ 952.824546] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 952.833927] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 952.841666] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 952.851090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 952.861151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 952.871279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.881241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 952.891354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.900588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 952.910361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.919583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 952.929848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.940330] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 952.947548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 952.956638] device veth1_macvtap entered promiscuous mode [ 952.962930] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 952.971856] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 952.980384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 952.991248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 953.014680] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 953.044668] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 953.054819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 953.066118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.075592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 953.085588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.095043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 953.105324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.115695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 953.125630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.134798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 953.145144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.155660] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 953.162930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 953.171462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 953.180489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 953.194862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 953.205460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.215925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 953.226321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.235444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 953.245233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.254849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 953.267030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.276629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 953.286453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.297129] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 953.304018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 953.313800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 953.325522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 953.410637] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 953.437426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.444823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.486566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 953.511083] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 953.519157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.537046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.543873] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 953.611627] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 953.621378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.637695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.673201] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 953.688509] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 953.695209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.704192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.712114] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 953.762907] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 953.781261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.794502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.812448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 953.833686] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 953.841297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.854332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.863207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 958.438976] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 958.450613] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 958.455391] CPU: 1 PID: 8133 Comm: syz-fuzzer Not tainted 4.19.163-syzkaller #0 [ 958.462833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 958.472188] Call Trace: [ 958.474785] dump_stack+0x1fc/0x2fe [ 958.478429] dump_header+0x15d/0xc3f [ 958.482155] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 958.487268] ? ___ratelimit+0x319/0x584 [ 958.491251] oom_kill_process.cold+0x10/0x692 [ 958.495751] ? check_preemption_disabled+0x41/0x280 [ 958.500796] ? has_intersects_mems_allowed+0x1d6/0x290 [ 958.506084] out_of_memory+0x1072/0x1390 [ 958.510132] ? oom_killer_disable+0x270/0x270 [ 958.514621] ? mutex_trylock+0x15f/0x1a0 [ 958.518667] __alloc_pages_nodemask+0x23a2/0x2890 [ 958.523519] ? find_get_entry+0x4cd/0x8a0 [ 958.527654] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 958.532593] alloc_pages_current+0x193/0x2a0 [ 958.536989] filemap_fault+0x146e/0x2180 [ 958.541405] ext4_filemap_fault+0x84/0xb0 [ 958.545568] __do_fault+0x10b/0x4b0 [ 958.549199] __handle_mm_fault+0x273b/0x41c0 [ 958.553602] ? vm_insert_page+0x9c0/0x9c0 [ 958.557762] ? __fget+0x356/0x510 [ 958.561225] ? check_preemption_disabled+0x41/0x280 [ 958.566228] handle_mm_fault+0x436/0xb10 [ 958.570299] __do_page_fault+0x68e/0xd60 [ 958.574474] ? trace_hardirqs_off_caller+0x6e/0x210 [ 958.579493] ? spurious_fault+0x840/0x840 [ 958.583704] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 958.588715] ? page_fault+0x8/0x30 [ 958.592252] page_fault+0x1e/0x30 [ 958.595694] RIP: 0033:0x43cf95 [ 958.598884] Code: Bad RIP value. [ 958.602233] RSP: 002b:000000c000049e00 EFLAGS: 00010202 [ 958.607578] RAX: 000000df25fba195 RBX: 000000c00003e700 RCX: 0000000000000017 [ 958.614839] RDX: 0000000018bbb595 RSI: 000000c000049dd0 RDI: 000000c000049dac [ 958.622107] RBP: 000000c000049e40 R08: 00007ffcc70e1000 R09: 0000010191591d74 [ 958.629441] R10: 000c5ddacaf38163 R11: 0000000000000001 R12: 0000000000000003 [ 958.636773] R13: 000000c000000f00 R14: 000000df2c03c0db R15: 000000000000f80d [ 958.647504] Mem-Info: [ 958.649954] active_anon:123399 inactive_anon:23065 isolated_anon:0 [ 958.649954] active_file:14 inactive_file:9 isolated_file:0 [ 958.649954] unevictable:0 dirty:7 writeback:0 unstable:0 [ 958.649954] slab_reclaimable:13278 slab_unreclaimable:114616 [ 958.649954] mapped:52711 shmem:23407 pagetables:1019 bounce:0 [ 958.649954] free:25127 free_pcp:0 free_cma:0 [ 958.683448] Node 0 active_anon:492184kB inactive_anon:43368kB active_file:36kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:197492kB dirty:28kB writeback:0kB shmem:44472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 155648kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 958.712513] Node 1 active_anon:1412kB inactive_anon:48892kB active_file:20kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13352kB dirty:0kB writeback:0kB shmem:49156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 958.741726] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 958.769017] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 958.774049] Node 0 DMA32 free:35924kB min:35996kB low:44992kB high:53988kB active_anon:492480kB inactive_anon:43368kB active_file:40kB inactive_file:316kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7616kB pagetables:3812kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 958.804045] lowmem_reserve[]: 0 0 1 1 1 [ 958.811692] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 958.864048] lowmem_reserve[]: 0 0 0 0 0 [ 958.873386] Node 1 Normal free:53876kB min:53876kB low:67344kB high:80812kB active_anon:1412kB inactive_anon:48892kB active_file:20kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:264kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 958.993746] lowmem_reserve[]: 0 0 0 0 0 [ 959.013405] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10972kB [ 959.073798] Node 0 DMA32: 1137*4kB (UME) 1849*8kB (UME) 500*16kB (UME) 191*32kB (UME) 42*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36140kB [ 959.101927] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 959.130696] Node 1 Normal: 196*4kB (ME) 164*8kB (ME) 152*16kB (ME) 113*32kB (M) 66*64kB (UME) 19*128kB (ME) 4*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (M) 8*4096kB (U) = 53712kB [ 959.193220] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 959.230841] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 959.252561] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 959.272335] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 959.281081] 23444 total pagecache pages [ 959.285063] 0 pages in swap cache [ 959.293879] Swap cache stats: add 0, delete 0, find 0/0 [ 959.299339] Free swap = 0kB [ 959.302350] Total swap = 0kB [ 959.305365] 2097051 pages RAM [ 959.330891] 0 pages HighMem/MovableOnly [ 959.334883] 369639 pages reserved [ 959.340181] 0 pages cma reserved [ 959.343559] Out of memory (oom_kill_allocating_task): Kill process 8133 (syz-fuzzer) score 0 or sacrifice child [ 959.382038] Killed process 7614 (syz-executor.3) total-vm:85024kB, anon-rss:1732kB, file-rss:4kB, shmem-rss:0kB [ 959.981974] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 960.046030] in:imklog cpuset=/ mems_allowed=0-1 [ 960.062858] CPU: 0 PID: 7160 Comm: in:imklog Not tainted 4.19.163-syzkaller #0 [ 960.070295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 960.080573] Call Trace: [ 960.083176] dump_stack+0x1fc/0x2fe [ 960.086928] dump_header+0x15d/0xc3f [ 960.090732] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 960.095830] ? ___ratelimit+0x319/0x584 [ 960.099807] oom_kill_process.cold+0x10/0x692 [ 960.104301] ? check_preemption_disabled+0x41/0x280 [ 960.109498] ? has_intersects_mems_allowed+0x1d6/0x290 [ 960.114864] out_of_memory+0x1072/0x1390 [ 960.118935] ? oom_killer_disable+0x270/0x270 [ 960.123460] ? mutex_trylock+0x15f/0x1a0 [ 960.127528] __alloc_pages_nodemask+0x23a2/0x2890 [ 960.132375] ? find_get_entry+0x4cd/0x8a0 [ 960.136551] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 960.141505] alloc_pages_current+0x193/0x2a0 [ 960.146272] filemap_fault+0x146e/0x2180 [ 960.150353] ext4_filemap_fault+0x84/0xb0 [ 960.154506] __do_fault+0x10b/0x4b0 [ 960.158139] __handle_mm_fault+0x273b/0x41c0 [ 960.162898] ? vm_insert_page+0x9c0/0x9c0 [ 960.167047] ? lock_downgrade+0x720/0x720 [ 960.171208] ? check_preemption_disabled+0x41/0x280 [ 960.176235] handle_mm_fault+0x436/0xb10 [ 960.180302] __do_page_fault+0x68e/0xd60 [ 960.184458] ? trace_hardirqs_off_caller+0x6e/0x210 [ 960.189569] ? spurious_fault+0x840/0x840 [ 960.193734] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 960.198604] ? page_fault+0x8/0x30 [ 960.202156] page_fault+0x1e/0x30 [ 960.205610] RIP: 0033:0x7fefe5c20009 [ 960.209364] Code: Bad RIP value. [ 960.212811] RSP: 002b:00007fefe4514440 EFLAGS: 00010246 [ 960.218179] RAX: 0000000000000000 RBX: 00007fefe0000020 RCX: 0000000000000004 [ 960.225881] RDX: 000000000000003e RSI: 0000000000000001 RDI: 0000000000000260 [ 960.233153] RBP: 0000000000000260 R08: 00007fefe5cf1940 R09: 0000000004000001 [ 960.240952] R10: 0000000000000001 R11: 0000000000000000 R12: 00007fefe4514da0 [ 960.248225] R13: 00007fefe4514da3 R14: 0000000000001f9f R15: 00007fefe4514e24 [ 960.272766] Mem-Info: [ 960.282168] active_anon:122945 inactive_anon:23065 isolated_anon:0 [ 960.282168] active_file:58 inactive_file:110 isolated_file:0 [ 960.282168] unevictable:0 dirty:0 writeback:0 unstable:0 [ 960.282168] slab_reclaimable:13245 slab_unreclaimable:114363 [ 960.282168] mapped:44033 shmem:23407 pagetables:970 bounce:0 [ 960.282168] free:27238 free_pcp:434 free_cma:0 [ 960.327968] Node 0 active_anon:490368kB inactive_anon:43368kB active_file:188kB inactive_file:1020kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163180kB dirty:0kB writeback:0kB shmem:44472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 155648kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 960.382438] Node 1 active_anon:1412kB inactive_anon:48892kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13352kB dirty:0kB writeback:0kB shmem:49156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 960.418859] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 960.450598] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 960.455653] Node 0 DMA32 free:35704kB min:35996kB low:44992kB high:53988kB active_anon:490368kB inactive_anon:43368kB active_file:492kB inactive_file:404kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7584kB pagetables:3616kB bounce:0kB free_pcp:384kB local_pcp:0kB free_cma:0kB [ 960.623383] lowmem_reserve[]: 0 0 1 1 1 [ 960.639699] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 960.795864] lowmem_reserve[]: 0 0 0 0 0 [ 960.799886] Node 1 Normal free:53740kB min:53876kB low:67344kB high:80812kB active_anon:1412kB inactive_anon:48892kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:264kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 960.984559] lowmem_reserve[]: 0 0 0 0 0 [ 961.028528] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10972kB [ 961.145265] Node 0 DMA32: 1173*4kB (UME) 1851*8kB (UME) 499*16kB (UME) 191*32kB (UME) 38*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36028kB [ 961.233203] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 961.301193] Node 1 Normal: 196*4kB (ME) 165*8kB (UME) 153*16kB (UME) 116*32kB (UM) 65*64kB (ME) 19*128kB (ME) 3*256kB (M) 1*512kB (M) 1*1024kB (M) 2*2048kB (UM) 8*4096kB (U) = 54024kB [ 961.388143] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 961.436072] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 961.444702] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 961.468861] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 961.510853] 23455 total pagecache pages [ 961.514876] 0 pages in swap cache [ 961.549992] Swap cache stats: add 0, delete 0, find 0/0 [ 961.555384] Free swap = 0kB [ 961.594475] Total swap = 0kB [ 961.611505] 2097051 pages RAM [ 961.614626] 0 pages HighMem/MovableOnly [ 961.659973] 369639 pages reserved [ 961.663460] 0 pages cma reserved [ 961.695348] Out of memory (oom_kill_allocating_task): Kill process 7160 (in:imklog) score 0 or sacrifice child [ 961.757080] Killed process 7157 (rsyslogd) total-vm:254332kB, anon-rss:2704kB, file-rss:0kB, shmem-rss:0kB [ 961.795823] oom_reaper: reaped process 7157 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 962.451487] oom_reaper: reaped process 8385 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 962.526822] systemd-rfkill invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 962.575378] systemd-rfkill cpuset=/ mems_allowed=0-1 [ 962.585808] CPU: 0 PID: 8326 Comm: systemd-rfkill Not tainted 4.19.163-syzkaller #0 [ 962.593767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 962.603230] Call Trace: [ 962.605828] dump_stack+0x1fc/0x2fe [ 962.609551] dump_header+0x15d/0xc3f [ 962.613291] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 962.618516] ? ___ratelimit+0x319/0x584 [ 962.622507] oom_kill_process.cold+0x10/0x692 [ 962.627008] ? check_preemption_disabled+0x41/0x280 [ 962.632036] ? has_intersects_mems_allowed+0x1d6/0x290 [ 962.637318] out_of_memory+0x1072/0x1390 [ 962.641406] ? oom_killer_disable+0x270/0x270 [ 962.645910] ? mutex_trylock+0x15f/0x1a0 [ 962.649979] __alloc_pages_nodemask+0x23a2/0x2890 [ 962.655063] ? find_get_entry+0x4cd/0x8a0 [ 962.659229] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 962.664624] alloc_pages_current+0x193/0x2a0 [ 962.669044] filemap_fault+0x146e/0x2180 [ 962.673119] ext4_filemap_fault+0x84/0xb0 [ 962.677282] __do_fault+0x10b/0x4b0 [ 962.680919] __handle_mm_fault+0x273b/0x41c0 [ 962.686376] ? vm_insert_page+0x9c0/0x9c0 [ 962.690540] ? check_preemption_disabled+0x41/0x280 [ 962.695564] handle_mm_fault+0x436/0xb10 [ 962.699630] __do_page_fault+0x68e/0xd60 [ 962.703734] ? trace_hardirqs_off_caller+0x6e/0x210 [ 962.708751] ? spurious_fault+0x840/0x840 [ 962.713421] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 962.718268] ? page_fault+0x8/0x30 [ 962.721894] page_fault+0x1e/0x30 [ 962.725357] RIP: 0033:0x7fd3baecc7f0 [ 962.729079] Code: Bad RIP value. [ 962.732440] RSP: 002b:00007ffe1505dbe8 EFLAGS: 00010206 [ 962.737809] RAX: 00007fd3bb172030 RBX: 00007fd3bb7d3ed0 RCX: 0000000000000000 [ 962.745086] RDX: 00007fd3bb172050 RSI: 0000000000000000 RDI: 00007fd3badd45e0 [ 962.752638] RBP: 00007ffe1505dbf0 R08: 0000000000000000 R09: 00007fd3bb173808 [ 962.759912] R10: 00007fd3bb5b0000 R11: 0000000000000012 R12: 00007fd3badd3ce8 [ 962.767185] R13: 00007ffe1505dc18 R14: 00007fd3bb7d6040 R15: 0000000000000000 [ 962.791387] Mem-Info: [ 962.793848] active_anon:121655 inactive_anon:23065 isolated_anon:0 [ 962.793848] active_file:67 inactive_file:2 isolated_file:0 [ 962.793848] unevictable:0 dirty:0 writeback:0 unstable:0 [ 962.793848] slab_reclaimable:13242 slab_unreclaimable:114364 [ 962.793848] mapped:43976 shmem:23407 pagetables:939 bounce:0 [ 962.793848] free:20174 free_pcp:0 free_cma:0 [ 962.837434] Node 0 active_anon:485736kB inactive_anon:43368kB active_file:140kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162580kB dirty:0kB writeback:0kB shmem:44472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 153600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 962.876507] Node 1 active_anon:884kB inactive_anon:48892kB active_file:128kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13324kB dirty:0kB writeback:0kB shmem:49156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 962.920733] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 962.970649] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 962.979413] Node 0 DMA32 free:17868kB min:35996kB low:44992kB high:53988kB active_anon:485736kB inactive_anon:43368kB active_file:40kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7552kB pagetables:3612kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 963.025762] lowmem_reserve[]: 0 0 1 1 1 [ 963.029817] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 963.073141] lowmem_reserve[]: 0 0 0 0 0 [ 963.077236] Node 1 Normal free:26500kB min:53876kB low:67344kB high:80812kB active_anon:884kB inactive_anon:48892kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:192kB pagetables:144kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 963.125163] lowmem_reserve[]: 0 0 0 0 0 [ 963.134148] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10860kB [ 963.160647] Node 0 DMA32: 929*4kB (ME) 1188*8kB (ME) 162*16kB (ME) 68*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17988kB [ 963.188068] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 963.211495] Node 1 Normal: 158*4kB (UME) 133*8kB (ME) 141*16kB (UME) 110*32kB (M) 64*64kB (ME) 24*128kB (UME) 6*256kB (M) 1*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 1*4096kB (U) = 26928kB [ 963.245738] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 963.274189] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 963.298623] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 963.323668] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 963.349232] 23441 total pagecache pages [ 963.353346] 0 pages in swap cache [ 963.368088] Swap cache stats: add 0, delete 0, find 0/0 [ 963.373488] Free swap = 0kB [ 963.394727] Total swap = 0kB [ 963.406127] 2097051 pages RAM [ 963.409242] 0 pages HighMem/MovableOnly [ 963.413206] 369639 pages reserved [ 963.431845] 0 pages cma reserved [ 963.435240] Out of memory (oom_kill_allocating_task): Kill process 8326 (systemd-rfkill) score 0 or sacrifice child [ 963.453012] syz-executor.4: vmalloc: allocation failure, allocated 1903747072 of 3621613568 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 963.479902] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 963.485063] CPU: 0 PID: 8385 Comm: syz-executor.4 Not tainted 4.19.163-syzkaller #0 [ 963.492872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 963.502227] Call Trace: [ 963.504830] dump_stack+0x1fc/0x2fe [ 963.508468] warn_alloc.cold+0x7b/0x18f [ 963.512463] ? zone_watermark_ok_safe+0x260/0x260 [ 963.517336] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 963.522186] ? retint_kernel+0x2d/0x2d [ 963.527488] __vmalloc_area_node+0x4fd/0x780 [ 963.531913] ? __vmalloc_node_range+0x180/0x180 [ 963.536596] ? _raw_spin_unlock+0x29/0x40 [ 963.540749] ? __get_vm_area_node+0x2e2/0x3a0 [ 963.545252] __vmalloc_node_range+0xed/0x180 [ 963.549666] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 963.554006] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 963.559372] vmalloc_user+0x70/0xe0 [ 963.563632] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 963.567984] vb2_vmalloc_alloc+0xb3/0x2f0 [ 963.572165] __vb2_queue_alloc+0x472/0xe60 [ 963.576428] vb2_core_create_bufs+0x273/0x7e0 [ 963.580930] ? __vb2_queue_free+0x870/0x870 [ 963.585369] ? __mutex_add_waiter+0x160/0x160 [ 963.589877] vb2_create_bufs+0x332/0x620 [ 963.593954] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 963.599062] ? __video_do_ioctl+0x632/0xcd0 [ 963.603391] ? __mutex_add_waiter+0x160/0x160 [ 963.607891] ? mark_held_locks+0xf0/0xf0 [ 963.611960] vb2_ioctl_create_bufs+0x20d/0x360 [ 963.616545] ? memset+0x20/0x40 [ 963.619833] v4l_create_bufs+0xb2/0x160 [ 963.623813] __video_do_ioctl+0x49a/0xcd0 [ 963.624510] Killed process 8326 (systemd-rfkill) total-vm:37800kB, anon-rss:412kB, file-rss:0kB, shmem-rss:0kB [ 963.627975] ? v4l_querycap+0x340/0x340 [ 963.628034] ? __might_fault+0x192/0x1d0 [ 963.628066] video_usercopy+0x13c/0x1000 [ 963.628083] ? v4l_querycap+0x340/0x340 [ 963.628099] ? v4l_enumstd+0x60/0x60 [ 963.628110] ? mark_held_locks+0xf0/0xf0 [ 963.628123] ? do_futex+0x163/0x1c70 [ 963.628139] ? mark_held_locks+0xf0/0xf0 [ 963.670556] ? mark_held_locks+0xf0/0xf0 [ 963.674623] ? debug_check_no_obj_freed+0x201/0x482 [ 963.679665] ? video_usercopy+0x1000/0x1000 [ 963.683987] v4l2_ioctl+0x147/0x1a0 [ 963.687624] ? video_devdata+0xa0/0xa0 [ 963.691520] do_vfs_ioctl+0xcdb/0x12e0 [ 963.696084] ? lock_downgrade+0x720/0x720 [ 963.700243] ? check_preemption_disabled+0x41/0x280 [ 963.705293] ? ioctl_preallocate+0x200/0x200 [ 963.708672] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 963.709703] ? __fget+0x356/0x510 [ 963.724579] ? do_dup2+0x450/0x450 [ 963.728134] ksys_ioctl+0x9b/0xc0 [ 963.731683] __x64_sys_ioctl+0x6f/0xb0 [ 963.735573] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 963.741291] do_syscall_64+0xf9/0x620 [ 963.745101] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 963.750293] RIP: 0033:0x45e159 [ 963.753498] Code: Bad RIP value. [ 963.756864] RSP: 002b:00007f25818abc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 963.760082] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 963.764575] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e159 [ 963.776612] RDX: 0000000020000340 RSI: 00000000c100565c RDI: 0000000000000003 [ 963.783880] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 963.791404] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 963.798686] R13: 00007ffee66cc39f R14: 00007f25818ac9c0 R15: 000000000119bf8c [ 963.809177] oom_reaper: reaped process 8326 (systemd-rfkill), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 963.826475] Mem-Info: [ 963.828972] active_anon:121551 inactive_anon:23065 isolated_anon:0 [ 963.828972] active_file:42 inactive_file:0 isolated_file:0 [ 963.828972] unevictable:0 dirty:0 writeback:0 unstable:0 [ 963.828972] slab_reclaimable:13218 slab_unreclaimable:114340 [ 963.828972] mapped:43983 shmem:23407 pagetables:939 bounce:0 [ 963.828972] free:13911 free_pcp:165 free_cma:0 [ 963.870065] Node 0 active_anon:485320kB inactive_anon:43368kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162580kB dirty:0kB writeback:0kB shmem:44472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 963.888664] CPU: 1 PID: 8151 Comm: syz-fuzzer Not tainted 4.19.163-syzkaller #0 [ 963.904738] Node 1 active_anon:884kB inactive_anon:48892kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13352kB dirty:0kB writeback:0kB shmem:49156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 963.906013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 963.906018] Call Trace: [ 963.906038] dump_stack+0x1fc/0x2fe [ 963.906057] dump_header+0x15d/0xc3f [ 963.933664] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 963.942993] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 963.943006] ? ___ratelimit+0x319/0x584 [ 963.943023] oom_kill_process.cold+0x10/0x692 [ 963.945579] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 963.949204] ? check_preemption_disabled+0x41/0x280 [ 963.949221] ? has_intersects_mems_allowed+0x1d6/0x290 [ 963.949237] out_of_memory+0x1072/0x1390 [ 963.953031] Node 0 DMA32 free:17892kB min:35996kB low:44992kB high:53988kB active_anon:485320kB inactive_anon:43368kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7552kB pagetables:3612kB bounce:0kB free_pcp:656kB local_pcp:412kB free_cma:0kB [ 963.979131] ? oom_killer_disable+0x270/0x270 [ 963.979149] ? mutex_trylock+0x15f/0x1a0 [ 963.979166] __alloc_pages_nodemask+0x23a2/0x2890 [ 963.984262] lowmem_reserve[]: 0 0 1 1 1 [ 963.988243] ? find_get_entry+0x4cd/0x8a0 [ 963.988265] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 963.988300] alloc_pages_current+0x193/0x2a0 [ 963.993125] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 963.998140] filemap_fault+0x146e/0x2180 [ 963.998162] ext4_filemap_fault+0x84/0xb0 [ 963.998180] __do_fault+0x10b/0x4b0 [ 964.003168] lowmem_reserve[]: 0 0 0 0 0 [ 964.008435] __handle_mm_fault+0x273b/0x41c0 [ 964.008450] ? vm_insert_page+0x9c0/0x9c0 [ 964.008474] ? check_preemption_disabled+0x41/0x280 [ 964.012502] Node 1 Normal free:26880kB min:53876kB low:67344kB high:80812kB active_anon:884kB inactive_anon:48892kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:192kB pagetables:144kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 964.041564] handle_mm_fault+0x436/0xb10 [ 964.041582] __do_page_fault+0x68e/0xd60 [ 964.041601] ? trace_hardirqs_off_caller+0x6e/0x210 [ 964.046092] lowmem_reserve[]: 0 0 0 0 0 [ 964.050135] ? spurious_fault+0x840/0x840 [ 964.054950] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10860kB [ 964.058912] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 964.058927] ? page_fault+0x8/0x30 [ 964.058941] page_fault+0x1e/0x30 [ 964.063075] Node 0 DMA32: 954*4kB (ME) 1189*8kB (UME) 164*16kB (UME) 63*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17968kB [ 964.067912] RIP: 0033:0x449feb [ 964.067935] Code: Bad RIP value. [ 964.072338] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 964.098265] RSP: 002b:000000c000407938 EFLAGS: 00010202 [ 964.098275] RAX: 0000000000ae0148 RBX: 0000000000000008 RCX: 0000000000000001 [ 964.098283] RDX: 2e7463656c666572 RSI: 0000000000eb5c40 RDI: 000000000098c2e4 [ 964.098289] RBP: 000000c000407960 R08: 000000c000407848 R09: 0000000000eb5d25 [ 964.098300] R10: 0000000000bf1fa0 R11: 0000000000eb5fe0 R12: 000000c0004bbb88 [ 964.102349] Node 1 Normal: 158*4kB (UME) 133*8kB (ME) 141*16kB (UME) 110*32kB (M) 64*64kB (ME) 24*128kB (UME) 6*256kB (M) 1*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 1*4096kB (U) = 26928kB [ 964.106497] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffffffffffff [ 964.153989] Mem-Info: [ 964.178799] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 964.178810] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 964.178819] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 964.178828] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 964.178833] 23441 total pagecache pages [ 964.178844] 0 pages in swap cache [ 964.178852] Swap cache stats: add 0, delete 0, find 0/0 [ 964.196344] active_anon:121547 inactive_anon:23065 isolated_anon:0 [ 964.196344] active_file:17 inactive_file:17 isolated_file:0 [ 964.196344] unevictable:0 dirty:0 writeback:0 unstable:0 [ 964.196344] slab_reclaimable:13208 slab_unreclaimable:114321 [ 964.196344] mapped:43983 shmem:23407 pagetables:939 bounce:0 [ 964.196344] free:13942 free_pcp:165 free_cma:0 [ 964.214403] systemd-rfkill: page allocation failure: order:0, mode:0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null) [ 964.221906] Node 0 active_anon:485308kB inactive_anon:43368kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162580kB dirty:0kB writeback:0kB shmem:44472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 964.235637] systemd-rfkill cpuset=/ mems_allowed=0-1 [ 964.240192] Node 1 active_anon:880kB inactive_anon:48892kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13352kB dirty:0kB writeback:0kB shmem:49156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 964.245155] CPU: 0 PID: 8326 Comm: systemd-rfkill Not tainted 4.19.163-syzkaller #0 [ 964.250267] Free swap = 0kB [ 964.257187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 964.257192] Call Trace: [ 964.257213] dump_stack+0x1fc/0x2fe [ 964.257229] warn_alloc.cold+0x7b/0x18f [ 964.257246] ? zone_watermark_ok_safe+0x260/0x260 [ 964.257259] ? usleep_range+0x170/0x170 [ 964.257275] ? mark_held_locks+0xa6/0xf0 [ 964.266361] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 964.271788] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 964.271807] ? collect_expired_timers+0x2a0/0x2a0 [ 964.271831] __alloc_pages_nodemask+0x232f/0x2890 [ 964.271847] ? find_get_entry+0x4cd/0x8a0 [ 964.271867] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 964.271903] alloc_pages_current+0x193/0x2a0 [ 964.271923] filemap_fault+0x146e/0x2180 [ 964.271946] ext4_filemap_fault+0x84/0xb0 [ 964.271962] __do_fault+0x10b/0x4b0 [ 964.271976] __handle_mm_fault+0x273b/0x41c0 [ 964.271992] ? vm_insert_page+0x9c0/0x9c0 [ 964.272018] ? check_preemption_disabled+0x41/0x280 [ 964.272035] handle_mm_fault+0x436/0xb10 [ 964.272053] __do_page_fault+0x68e/0xd60 [ 964.272073] ? trace_hardirqs_off_caller+0x6e/0x210 [ 964.272086] ? spurious_fault+0x840/0x840 [ 964.272100] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 964.272115] ? page_fault+0x8/0x30 [ 964.272128] page_fault+0x1e/0x30 [ 964.272139] RIP: 0033:0x7fd3baecc7f0 [ 964.272160] Code: Bad RIP value. [ 964.272167] RSP: 002b:00007ffe1505dbe8 EFLAGS: 00010206 [ 964.272178] RAX: 00007fd3bb172030 RBX: 00007fd3bb7d3ed0 RCX: 0000000000000000 [ 964.272186] RDX: 00007fd3bb172050 RSI: 0000000000000000 RDI: 00007fd3badd45e0 [ 964.272193] RBP: 00007ffe1505dbf0 R08: 0000000000000000 R09: 00007fd3bb173808 [ 964.272201] R10: 00007fd3bb5b0000 R11: 0000000000000012 R12: 00007fd3badd3ce8 [ 964.272208] R13: 00007ffe1505dc18 R14: 00007fd3bb7d6040 R15: 0000000000000000 [ 964.441174] Total swap = 0kB [ 964.457781] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 964.520667] 2097051 pages RAM [ 964.531922] Node 0 DMA32 free:17968kB min:35996kB low:44992kB high:53988kB active_anon:485308kB inactive_anon:43368kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7520kB pagetables:3612kB bounce:0kB free_pcp:764kB local_pcp:244kB free_cma:0kB [ 964.566217] 0 pages HighMem/MovableOnly [ 964.578277] lowmem_reserve[]: 0 0 1 1 1 [ 964.611043] 369639 pages reserved [ 964.619688] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 964.643115] 0 pages cma reserved [ 964.657392] lowmem_reserve[]: 0 0 0 0 0 [ 964.754852] Node 1 Normal free:26928kB min:53876kB low:67344kB high:80812kB active_anon:880kB inactive_anon:48892kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:192kB pagetables:144kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 964.810488] lowmem_reserve[]: 0 0 0 0 0 [ 964.814628] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10860kB [ 964.836398] Node 0 DMA32: 954*4kB (ME) 1189*8kB (UME) 164*16kB (UME) 64*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18000kB [ 964.862278] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 964.889242] Node 1 Normal: 158*4kB (UME) 133*8kB (ME) 141*16kB (UME) 111*32kB (UM) 64*64kB (ME) 24*128kB (UME) 6*256kB (M) 1*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 1*4096kB (U) = 26960kB [ 964.918157] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 964.945688] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 964.954475] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 964.976183] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 964.997875] 23441 total pagecache pages [ 965.001902] 0 pages in swap cache [ 965.005350] Swap cache stats: add 0, delete 0, find 0/0 [ 965.072719] Free swap = 0kB [ 965.093822] Total swap = 0kB [ 965.106741] 2097051 pages RAM [ 965.109870] 0 pages HighMem/MovableOnly [ 965.113837] 369639 pages reserved [ 965.137514] 0 pages cma reserved [ 965.140947] Out of memory (oom_kill_allocating_task): Kill process 8151 (syz-fuzzer) score 0 or sacrifice child [ 965.170942] Killed process 7612 (syz-executor.0) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 965.222353] systemd-udevd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=-1000 [ 965.265640] systemd-udevd cpuset=/ mems_allowed=0-1 [ 965.270707] CPU: 0 PID: 4697 Comm: systemd-udevd Not tainted 4.19.163-syzkaller #0 [ 965.278411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 965.287766] Call Trace: [ 965.290362] dump_stack+0x1fc/0x2fe [ 965.293997] dump_header+0x15d/0xc3f [ 965.297743] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 965.302849] ? ___ratelimit+0x319/0x584 [ 965.306837] oom_kill_process.cold+0x10/0x692 [ 965.311334] ? lock_downgrade+0x720/0x720 [ 965.315486] ? check_preemption_disabled+0x41/0x280 [ 965.320508] out_of_memory+0x34d/0x1390 [ 965.324497] ? oom_killer_disable+0x270/0x270 [ 965.328998] ? mutex_trylock+0x15f/0x1a0 [ 965.333066] __alloc_pages_nodemask+0x23a2/0x2890 [ 965.337928] ? find_get_entry+0x4cd/0x8a0 [ 965.342089] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 965.346961] alloc_pages_current+0x193/0x2a0 [ 965.351422] filemap_fault+0x146e/0x2180 [ 965.355690] ext4_filemap_fault+0x84/0xb0 [ 965.359853] __do_fault+0x10b/0x4b0 [ 965.363486] __handle_mm_fault+0x273b/0x41c0 [ 965.367901] ? vm_insert_page+0x9c0/0x9c0 [ 965.372056] ? lock_downgrade+0x720/0x720 [ 965.376206] ? lock_acquire+0x170/0x3c0 [ 965.380195] ? check_preemption_disabled+0x41/0x280 [ 965.385213] handle_mm_fault+0x436/0xb10 [ 965.389278] __do_page_fault+0x68e/0xd60 [ 965.393345] ? trace_hardirqs_off_caller+0x6e/0x210 [ 965.398368] ? spurious_fault+0x840/0x840 [ 965.402528] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 965.407376] ? page_fault+0x8/0x30 [ 965.411012] page_fault+0x1e/0x30 [ 965.414468] RIP: 0033:0x55aa5fb3d2d0 [ 965.418192] Code: Bad RIP value. [ 965.421557] RSP: 002b:00007fffb7237f78 EFLAGS: 00010202 [ 965.426925] RAX: 00000000ffffffef RBX: 0000000000000001 RCX: 0000000000000001 [ 965.437494] RDX: 0000000000000001 RSI: 00007fffb7238157 RDI: 000055aa5fb7f416 [ 965.444765] RBP: 00007fffb7238157 R08: 00007fffb7238157 R09: 00000000000001a0 [ 965.452045] R10: 0000000000000004 R11: 00007fbf1c003060 R12: 0000000000000006 [ 965.459316] R13: 000055aa5fba3d40 R14: 00007fffb7238120 R15: 000055aa618a93c0 [ 965.704627] Mem-Info: [ 965.710593] active_anon:121097 inactive_anon:23065 isolated_anon:0 [ 965.710593] active_file:14 inactive_file:15 isolated_file:0 [ 965.710593] unevictable:0 dirty:0 writeback:0 unstable:0 [ 965.710593] slab_reclaimable:13208 slab_unreclaimable:114324 [ 965.710593] mapped:35283 shmem:23407 pagetables:880 bounce:0 [ 965.710593] free:17171 free_pcp:547 free_cma:0 [ 965.800502] Node 0 active_anon:483508kB inactive_anon:43368kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127780kB dirty:0kB writeback:0kB shmem:44472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 965.864402] Node 1 active_anon:880kB inactive_anon:48892kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13352kB dirty:0kB writeback:0kB shmem:49156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 966.110233] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 966.181212] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 966.202677] Node 0 DMA32 free:31120kB min:35996kB low:44992kB high:53988kB active_anon:483496kB inactive_anon:43368kB active_file:44kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7488kB pagetables:3328kB bounce:0kB free_pcp:1940kB local_pcp:508kB free_cma:0kB [ 966.232509] lowmem_reserve[]: 0 0 1 1 1 [ 966.236608] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 966.262763] lowmem_reserve[]: 0 0 0 0 0 [ 966.266856] Node 1 Normal free:27572kB min:53876kB low:67344kB high:80812kB active_anon:880kB inactive_anon:48892kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:192kB pagetables:144kB bounce:0kB free_pcp:252kB local_pcp:4kB free_cma:0kB [ 966.303918] lowmem_reserve[]: 0 0 0 0 0 [ 966.309304] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10860kB [ 966.328275] Node 0 DMA32: 1008*4kB (UME) 2572*8kB (UME) 166*16kB (UME) 71*32kB (UM) 0*64kB 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 31200kB [ 966.345270] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 966.361465] Node 1 Normal: 157*4kB (ME) 158*8kB (UME) 157*16kB (UME) 118*32kB (UM) 67*64kB (UME) 24*128kB (UME) 7*256kB (UM) 2*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 1*4096kB (U) = 27572kB [ 966.384482] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 966.393904] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 966.408325] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 966.420495] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 966.432900] 23441 total pagecache pages [ 966.440685] 0 pages in swap cache [ 966.444168] Swap cache stats: add 0, delete 0, find 0/0 [ 966.453152] Free swap = 0kB [ 966.458215] Total swap = 0kB [ 966.461246] 2097051 pages RAM [ 966.464365] 0 pages HighMem/MovableOnly [ 966.471891] 369639 pages reserved [ 966.475364] 0 pages cma reserved [ 966.480362] Out of memory: Kill process 8130 (syz-fuzzer) score 68 or sacrifice child [ 966.491770] Killed process 7615 (syz-executor.4) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 966.536001] systemd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 966.555881] systemd cpuset=/ mems_allowed=0-1 [ 966.560424] CPU: 0 PID: 1 Comm: systemd Not tainted 4.19.163-syzkaller #0 [ 966.567434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 966.576785] Call Trace: [ 966.579380] dump_stack+0x1fc/0x2fe [ 966.583012] dump_header+0x15d/0xc3f [ 966.586731] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 966.591839] ? ___ratelimit+0x319/0x584 [ 966.595819] oom_kill_process.cold+0x10/0x692 [ 966.600346] ? lock_downgrade+0x720/0x720 [ 966.604492] ? check_preemption_disabled+0x41/0x280 [ 966.609515] out_of_memory+0x34d/0x1390 [ 966.613514] ? oom_killer_disable+0x270/0x270 [ 966.618015] ? mutex_trylock+0x15f/0x1a0 [ 966.622077] __alloc_pages_nodemask+0x23a2/0x2890 [ 966.626913] ? find_get_entry+0x4cd/0x8a0 [ 966.631057] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 966.636167] alloc_pages_current+0x193/0x2a0 [ 966.641111] filemap_fault+0x146e/0x2180 [ 966.645193] ext4_filemap_fault+0x84/0xb0 [ 966.649367] __do_fault+0x10b/0x4b0 [ 966.652990] __handle_mm_fault+0x273b/0x41c0 [ 966.657921] ? vm_insert_page+0x9c0/0x9c0 [ 966.662075] ? lock_downgrade+0x720/0x720 [ 966.666232] ? lock_acquire+0x170/0x3c0 [ 966.670216] ? check_preemption_disabled+0x41/0x280 [ 966.675224] handle_mm_fault+0x436/0xb10 [ 966.679628] __do_page_fault+0x68e/0xd60 [ 966.683679] ? trace_hardirqs_off_caller+0x6e/0x210 [ 966.688680] ? spurious_fault+0x840/0x840 [ 966.692815] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 966.697649] ? page_fault+0x8/0x30 [ 966.701178] page_fault+0x1e/0x30 [ 966.704614] RIP: 0033:0x7fdc2fa96c10 [ 966.708439] Code: Bad RIP value. [ 966.711788] RSP: 002b:00007ffe7b79fc28 EFLAGS: 00010202 [ 966.717136] RAX: 00005606fbb5ef50 RBX: 00005606fbb60540 RCX: 00000000000e2be2 [ 966.724390] RDX: 00005606fbb60578 RSI: 00005606fbb60540 RDI: 00005606fbb5f1f0 [ 966.731744] RBP: 0000000000000001 R08: 00007ffe7b7ea000 R09: 00000102821b96de [ 966.739101] R10: 001ba48e3f87ecfc R11: 0000000000000202 R12: 00005606fbb60540 [ 966.746478] R13: 0000000000000001 R14: 00007ffe7b79fc5c R15: 00007ffe7b79fc50 [ 966.766070] Mem-Info: [ 966.768547] active_anon:120669 inactive_anon:23065 isolated_anon:0 [ 966.768547] active_file:14 inactive_file:14 isolated_file:6 [ 966.768547] unevictable:0 dirty:0 writeback:0 unstable:0 [ 966.768547] slab_reclaimable:13196 slab_unreclaimable:114100 [ 966.768547] mapped:35279 shmem:23407 pagetables:831 bounce:0 [ 966.768547] free:17711 free_pcp:1035 free_cma:0 [ 966.803427] Node 0 active_anon:481796kB inactive_anon:43368kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127764kB dirty:0kB writeback:0kB shmem:44472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 966.839323] Node 1 active_anon:880kB inactive_anon:48892kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):24kB mapped:13352kB dirty:0kB writeback:0kB shmem:49156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 966.919218] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 966.953461] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 966.958952] Node 0 DMA32 free:32400kB min:35996kB low:44992kB high:53988kB active_anon:481796kB inactive_anon:43368kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7456kB pagetables:3180kB bounce:0kB free_pcp:2660kB local_pcp:1380kB free_cma:0kB [ 967.018218] lowmem_reserve[]: 0 0 1 1 1 [ 967.022554] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 967.058133] lowmem_reserve[]: 0 0 0 0 0 [ 967.062158] Node 1 Normal free:312948kB min:53876kB low:67344kB high:80812kB active_anon:880kB inactive_anon:48892kB active_file:304kB inactive_file:4108kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:256kB pagetables:144kB bounce:0kB free_pcp:1576kB local_pcp:316kB free_cma:0kB [ 967.102135] lowmem_reserve[]: 0 0 0 0 0 [ 967.110102] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10860kB [ 967.131596] Node 0 DMA32: 1111*4kB (UME) 2615*8kB (UME) 179*16kB (UME) 75*32kB (UM) 1*64kB (U) 2*128kB (M) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 32740kB [ 967.164196] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 967.200729] Node 1 Normal: 23*4kB (UE) 5*8kB (UE) 4*16kB (UME) 105*32kB (UM) 93*64kB (UME) 58*128kB (UME) 35*256kB (UM) 22*512kB (UM) 16*1024kB (UM) 13*2048kB (UM) 73*4096kB (U) = 379172kB [ 967.262458] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 967.315539] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 967.324592] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 967.400770] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 967.421941] 26316 total pagecache pages [ 967.439886] 0 pages in swap cache [ 967.445446] Swap cache stats: add 0, delete 0, find 0/0 [ 967.451795] Free swap = 0kB [ 967.454813] Total swap = 0kB [ 967.475503] 2097051 pages RAM [ 967.478639] 0 pages HighMem/MovableOnly [ 967.482606] 369639 pages reserved [ 967.505520] 0 pages cma reserved [ 967.508930] Out of memory: Kill process 8130 (syz-fuzzer) score 68 or sacrifice child [ 967.545570] Killed process 5688 (syz-executor.1) total-vm:85024kB, anon-rss:1724kB, file-rss:4kB, shmem-rss:0kB [ 969.258858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 969.277861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 969.293992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 969.300871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 969.315506] device bridge_slave_1 left promiscuous mode [ 969.321023] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.334657] device bridge_slave_0 left promiscuous mode [ 969.343471] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.359236] device veth1_macvtap left promiscuous mode [ 969.364577] device veth0_macvtap left promiscuous mode [ 969.376371] device veth1_vlan left promiscuous mode [ 969.381459] device veth0_vlan left promiscuous mode [ 975.148373] device hsr_slave_1 left promiscuous mode [ 975.160633] device hsr_slave_0 left promiscuous mode [ 975.172673] team0 (unregistering): Port device team_slave_1 removed [ 975.182853] team0 (unregistering): Port device team_slave_0 removed [ 975.194291] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 975.204502] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 975.237157] bond0 (unregistering): Released all slaves 21:48:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200074, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:48:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x9effffff}, 0x0) 21:48:31 executing program 4: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}, 0x6}) 21:48:31 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x186, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:48:31 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) shmctl$SHM_UNLOCK(0x0, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:48:31 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000000702000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:48:31 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x187, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 976.180437] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 976.211630] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 21:48:31 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x188, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:48:31 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x189, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:48:32 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x18a, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:48:32 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x18b, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:48:32 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x18c, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:48:32 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x18d, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 979.748311] IPVS: ftp: loaded support on port[0] = 21 [ 980.011936] chnl_net:caif_netlink_parms(): no params data found [ 980.256809] IPVS: ftp: loaded support on port[0] = 21 [ 980.261287] IPVS: ftp: loaded support on port[0] = 21 [ 980.278110] IPVS: ftp: loaded support on port[0] = 21 [ 980.556214] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.562636] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.570632] device bridge_slave_0 entered promiscuous mode [ 980.591519] chnl_net:caif_netlink_parms(): no params data found [ 980.599865] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.606342] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.613301] device bridge_slave_1 entered promiscuous mode [ 980.671035] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 980.686032] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 980.804454] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 980.820036] team0: Port device team_slave_0 added [ 980.828494] chnl_net:caif_netlink_parms(): no params data found [ 980.840230] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 980.848294] team0: Port device team_slave_1 added [ 980.853523] chnl_net:caif_netlink_parms(): no params data found [ 980.931203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 980.942747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 980.969683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 980.991666] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.010939] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.020902] device bridge_slave_0 entered promiscuous mode [ 981.028728] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.035545] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.042724] device bridge_slave_1 entered promiscuous mode [ 981.050363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 981.056788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.082171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 981.208412] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 981.217150] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 981.243462] device hsr_slave_0 entered promiscuous mode [ 981.249960] device hsr_slave_1 entered promiscuous mode [ 981.268010] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 981.281523] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 981.309874] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 981.332748] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 981.460906] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.467593] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.474672] device bridge_slave_0 entered promiscuous mode [ 981.482845] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.490008] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.497733] device bridge_slave_0 entered promiscuous mode [ 981.510806] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.520878] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.529424] device bridge_slave_1 entered promiscuous mode [ 981.550068] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.560614] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.569180] device bridge_slave_1 entered promiscuous mode [ 981.575362] Bluetooth: hci2: command 0x0409 tx timeout [ 981.579754] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 981.588880] team0: Port device team_slave_0 added [ 981.601902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.608884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.618854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.626285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.634035] device bridge_slave_1 left promiscuous mode [ 981.639832] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.647601] device bridge_slave_0 left promiscuous mode [ 981.653211] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.662976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.673037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.682010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.688945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.697716] device bridge_slave_1 left promiscuous mode [ 981.703179] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.710855] device bridge_slave_0 left promiscuous mode [ 981.716636] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.725935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.732662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.740837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.747664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.755671] device bridge_slave_1 left promiscuous mode [ 981.761129] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.769604] device bridge_slave_0 left promiscuous mode [ 981.775323] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.788164] device veth1_macvtap left promiscuous mode [ 981.793468] device veth0_macvtap left promiscuous mode [ 981.799036] device veth1_vlan left promiscuous mode [ 981.804098] device veth0_vlan left promiscuous mode [ 981.809626] device veth1_macvtap left promiscuous mode [ 981.815336] device veth0_macvtap left promiscuous mode [ 981.820644] device veth1_vlan left promiscuous mode [ 981.825986] device veth0_vlan left promiscuous mode [ 981.831560] device veth1_macvtap left promiscuous mode [ 981.837017] device veth0_macvtap left promiscuous mode [ 981.842326] device veth1_vlan left promiscuous mode [ 981.847442] device veth0_vlan left promiscuous mode [ 982.135034] Bluetooth: hci3: command 0x0409 tx timeout [ 982.224837] Bluetooth: hci4: command 0x0409 tx timeout [ 982.230270] Bluetooth: hci5: command 0x0409 tx timeout [ 983.664873] Bluetooth: hci2: command 0x041b tx timeout [ 984.214745] Bluetooth: hci3: command 0x041b tx timeout [ 984.294691] Bluetooth: hci5: command 0x041b tx timeout [ 984.300109] Bluetooth: hci4: command 0x041b tx timeout [ 985.734502] Bluetooth: hci2: command 0x040f tx timeout [ 986.294467] Bluetooth: hci3: command 0x040f tx timeout [ 986.374426] Bluetooth: hci4: command 0x040f tx timeout [ 986.380438] Bluetooth: hci5: command 0x040f tx timeout [ 987.814266] Bluetooth: hci2: command 0x0419 tx timeout [ 988.374239] Bluetooth: hci3: command 0x0419 tx timeout [ 988.454237] Bluetooth: hci5: command 0x0419 tx timeout [ 988.460357] Bluetooth: hci4: command 0x0419 tx timeout [ 991.031654] device hsr_slave_1 left promiscuous mode [ 991.039290] device hsr_slave_0 left promiscuous mode [ 991.051931] team0 (unregistering): Port device team_slave_1 removed [ 991.067592] team0 (unregistering): Port device team_slave_0 removed [ 991.078456] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 991.090103] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 991.120387] bond0 (unregistering): Released all slaves [ 991.161449] device hsr_slave_1 left promiscuous mode [ 991.172405] device hsr_slave_0 left promiscuous mode [ 991.189784] team0 (unregistering): Port device team_slave_1 removed [ 991.200131] team0 (unregistering): Port device team_slave_0 removed [ 991.210508] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 991.220927] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 991.250677] bond0 (unregistering): Released all slaves [ 991.293059] device hsr_slave_1 left promiscuous mode [ 991.301693] device hsr_slave_0 left promiscuous mode [ 991.319244] team0 (unregistering): Port device team_slave_1 removed [ 991.330297] team0 (unregistering): Port device team_slave_0 removed [ 991.341235] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 991.352016] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 991.382483] bond0 (unregistering): Released all slaves [ 991.394083] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 991.409730] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 991.424987] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 991.432330] team0: Port device team_slave_1 added [ 991.476415] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 991.486237] team0: Port device team_slave_0 added [ 991.492565] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 991.513896] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 991.521346] team0: Port device team_slave_1 added [ 991.531128] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 991.547786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.554641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.580531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.615333] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 991.624484] team0: Port device team_slave_0 added [ 991.630571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.638002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.664286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 991.680457] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 991.692035] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 991.703537] team0: Port device team_slave_1 added [ 991.710070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.716666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.742526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.753456] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 991.771354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.778855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.805628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 991.817084] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 991.829602] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 991.849412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.856647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.885411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.902925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.909996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.935779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 991.952144] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 991.966106] device hsr_slave_0 entered promiscuous mode [ 991.972065] device hsr_slave_1 entered promiscuous mode [ 991.978810] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 991.992215] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 992.013107] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 992.026277] device hsr_slave_0 entered promiscuous mode [ 992.032985] device hsr_slave_1 entered promiscuous mode [ 992.046834] device hsr_slave_0 entered promiscuous mode [ 992.052662] device hsr_slave_1 entered promiscuous mode [ 992.071276] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 992.078388] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 992.086573] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 992.102552] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 992.128410] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 992.330713] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 992.353293] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 992.367543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 992.376092] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 992.386676] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 992.420792] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 992.436345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 992.443546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 992.452859] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 992.460137] 8021q: adding VLAN 0 to HW filter on device team0 [ 992.470527] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 992.489935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 992.499737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 992.508491] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.514885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 992.522605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 992.532240] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 992.553983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 992.563039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 992.571277] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.577726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 992.600581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 992.615841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 992.632556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 992.643258] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 992.660571] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 992.671901] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 992.682018] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 992.694379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 992.702391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 992.710640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 992.721739] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 992.731521] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 992.741713] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 992.750285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 992.759719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 992.767983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 992.782872] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 992.790083] 8021q: adding VLAN 0 to HW filter on device team0 [ 992.804882] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 992.815470] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 992.821669] 8021q: adding VLAN 0 to HW filter on device team0 [ 992.831353] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 992.840473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 992.848881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 992.862986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 992.872000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 992.889674] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 992.900699] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 992.908115] 8021q: adding VLAN 0 to HW filter on device team0 [ 992.918154] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 992.929459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 992.938920] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 992.949980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 992.962657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 992.972951] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.979991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 992.993210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 993.002169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 993.016739] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.023110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.036306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 993.047381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 993.061284] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 993.074332] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 993.084252] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 993.102581] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 993.110145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 993.118753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 993.127936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 993.139448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 993.152618] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.159061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.172730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 993.181511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 993.195254] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.201614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.212781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 993.223376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 993.236751] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.243952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.258463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 993.267141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 993.280181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 993.291607] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 993.308038] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 993.320647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 993.328909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 993.346295] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.352669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.360919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 993.369428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 993.378761] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 993.387044] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 993.398731] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 993.406484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 993.424965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 993.432768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 993.457453] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 993.468516] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 993.478779] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 993.492654] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 993.499754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 993.508474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 993.516503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 993.529512] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 993.543065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 993.552401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 993.563245] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 993.579667] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 993.589118] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 993.600724] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 993.608839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 993.622005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 993.630167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 993.644471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 993.652374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 993.667432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 993.678898] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 993.688184] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 993.699661] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 993.712025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 993.724138] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 993.732079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 993.740065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 993.760771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 993.769144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 993.777670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 993.788463] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 993.798688] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 993.806719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 993.815215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 993.822727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 993.831287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 993.842597] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 993.849455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 993.860444] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 993.869334] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 993.877275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 993.887613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 993.899141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 993.910240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 993.920883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 993.938969] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 993.949163] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 993.960202] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 993.970047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 993.979541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 993.987949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 993.996742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 994.006613] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 994.018146] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 994.025030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 994.032330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 994.039990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 994.051934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 994.068941] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 994.085302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 994.092973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 994.110726] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 994.131868] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 994.147680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 994.159076] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 994.170277] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 994.181417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 994.191476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 994.200253] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 994.211152] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 994.221846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 994.237877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 994.250026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 994.258613] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 994.270732] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 994.280285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 994.287979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 994.300233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 994.310659] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 994.339501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 994.351148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 994.368318] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 994.383003] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 994.391450] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 994.399111] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 994.409343] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 994.419542] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 994.428292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 994.436581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 994.449606] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 994.458586] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 994.466591] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 994.477461] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 994.486436] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 994.498857] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 994.510514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 994.518859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 994.527714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 994.537527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 994.545098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 994.552503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 994.560621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 994.567799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 994.575394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 994.582788] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 994.591911] device veth0_vlan entered promiscuous mode [ 994.606954] device veth0_vlan entered promiscuous mode [ 994.631287] device veth1_vlan entered promiscuous mode [ 994.645081] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 994.652471] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 994.660228] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 994.668365] device veth1_vlan entered promiscuous mode [ 994.679592] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 994.687540] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 994.695303] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 994.708648] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 994.721801] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 994.732515] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 994.750730] device veth0_vlan entered promiscuous mode [ 994.757369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 994.765520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 994.773055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 994.780936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 994.788605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 994.796221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 994.803221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 994.810718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 994.818975] device veth0_vlan entered promiscuous mode [ 994.833332] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 994.844197] device veth0_macvtap entered promiscuous mode [ 994.850791] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 994.864304] device veth1_vlan entered promiscuous mode [ 994.870744] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 994.878493] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 994.886859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 994.895144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 994.903631] device veth1_vlan entered promiscuous mode [ 994.909597] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 994.921944] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 994.931171] device veth1_macvtap entered promiscuous mode [ 994.938704] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 994.947434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 994.956000] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 994.963511] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 994.973111] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 994.985755] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 994.996868] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 995.005969] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 995.012903] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 995.021243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 995.029625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 995.038451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 995.048498] device veth0_macvtap entered promiscuous mode [ 995.055944] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 995.066647] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 995.079642] device veth1_macvtap entered promiscuous mode [ 995.086463] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 995.107320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 995.119959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.129627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 995.142089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.152839] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 995.160262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.169154] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 995.179852] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 995.188885] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 995.196991] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 995.207478] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 995.214846] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 995.222527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 995.232325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 995.242785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.252684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 995.263316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.274180] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 995.281073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.291186] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 995.301313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 995.309427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 995.319884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 995.327889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 995.338343] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 995.349598] device veth0_macvtap entered promiscuous mode [ 995.356824] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 995.363744] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 995.371098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 995.379282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 995.389702] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 995.403234] device veth0_macvtap entered promiscuous mode [ 995.410094] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 995.454893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 995.465621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.479208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 995.490135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.499725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 995.510253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.520341] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 995.527555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.536869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 995.547029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.556206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 995.565978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.576106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 995.586177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.596479] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 995.604427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.611855] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 995.619687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 995.627794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 995.636732] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 995.645230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 995.654991] device veth1_macvtap entered promiscuous mode [ 995.664989] device veth1_macvtap entered promiscuous mode [ 995.686026] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 995.702643] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 995.717041] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 995.735422] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 995.744787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 995.755505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.769519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 995.779337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.789007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 995.798962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.809078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 995.819793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.830512] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 995.837936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.849367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 995.858312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 995.869436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 995.883732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.892850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 995.904289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.914419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 995.925440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.935054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 995.944811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.956294] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 995.963201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.971209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 995.982242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.992322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 996.004386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.013675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 996.024180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.033743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 996.044989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.054572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 996.064469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.075060] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 996.082012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 996.093927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 996.107227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 996.122482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 996.131452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 996.155485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 996.165546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.176016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 996.186534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.196610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 996.206736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.216528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 996.227115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.236401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 996.246188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.257022] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 996.264134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 996.273157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 996.281332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 996.467352] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 996.488427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.510119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.539397] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 996.547714] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 996.592166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.609701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.612410] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 996.630095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.631323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 996.649252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.659064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 996.736101] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 996.748284] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 996.779832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.783804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.797814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.820540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.834348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 996.842200] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 996.852413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 996.863008] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 996.875710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.882858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.896888] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 996.910382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 996.911329] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 996.929056] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 996.942850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.946546] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 996.955384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.964310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.971429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.983036] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 996.987120] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 996.992568] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 997.008003] EXT4-fs (loop1): get root inode failed [ 997.017443] EXT4-fs (loop1): mount failed [ 997.076478] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 997.108564] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 21:48:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) 21:48:52 executing program 4: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}, 0x6}) [ 997.121862] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 997.171533] EXT4-fs: failed to create workqueue [ 997.196136] EXT4-fs (loop1): mount failed 21:48:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20007a, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:48:52 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000340)={0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYRES32=r2], 0x44}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe2, 0x0) 21:48:52 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x18e, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:48:52 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000000802000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:48:52 executing program 4: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}, 0x6}) 21:48:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xfffff000}, 0x0) 21:48:52 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 21:48:52 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000000902000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:48:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xffffff7f}, 0x0) [ 997.325041] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 21:48:52 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) [ 997.397102] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 21:48:53 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000002002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:48:53 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x18f, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 997.437430] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 997.456891] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 997.511584] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 997.548371] EXT4-fs (loop1): get root inode failed [ 997.564920] EXT4-fs (loop1): mount failed [ 997.641186] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 997.650733] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 997.669051] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 997.685870] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 997.698603] EXT4-fs (loop1): get root inode failed [ 997.703934] EXT4-fs (loop1): mount failed 21:48:53 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200300, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) [ 997.789181] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 997.798425] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 997.808475] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 997.820272] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 997.832387] EXT4-fs (loop1): get root inode failed [ 997.837800] EXT4-fs (loop1): mount failed [ 997.880464] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 997.890289] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 997.901773] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 997.912108] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 997.925564] EXT4-fs (loop1): get root inode failed [ 997.930572] EXT4-fs (loop1): mount failed 21:48:53 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 21:48:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xffffff9e}, 0x0) 21:48:53 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000004802000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:48:53 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x190, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:48:53 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000340)={0x0, 0x0}) r4 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GET(r4, 0x40189206, &(0x7f0000000340)={0x0, 0x0}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x400, 0x0) ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f00000003c0)={&(0x7f0000000180), &(0x7f0000000240)=""/164, 0xa4}) r6 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GET(r6, 0x40189206, &(0x7f0000000340)={0x0, 0x0}) r7 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GET(r7, 0x40189206, &(0x7f0000000340)={0x0, 0x0}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r1, @ANYRES64=r3, @ANYRES16=r4, @ANYRES64=r6, @ANYRES16=r7, @ANYRESOCT, @ANYRES64=r0], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:48:53 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2003c0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:48:53 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x0, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}, 0x6}) 21:48:53 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000004c02000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 998.201978] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 21:48:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xfffffff0}, 0x0) 21:48:53 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x191, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 998.247131] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 998.267468] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 21:48:53 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x0, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}, 0x6}) [ 998.313871] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 998.329624] EXT4-fs (loop1): get root inode failed 21:48:53 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000006802000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 998.357564] EXT4-fs (loop1): mount failed 21:48:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x3000000000000}, 0x0) 21:48:54 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000006c02000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:48:54 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x192, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 998.438009] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 998.470523] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 21:48:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x40030000000000}, 0x0) [ 998.543104] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 998.578891] EXT4-fs: failed to create workqueue [ 998.594996] EXT4-fs (loop1): mount failed 21:48:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2003de, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) [ 998.742240] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 998.756572] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 998.777157] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 998.788838] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 998.801380] EXT4-fs (loop1): get root inode failed [ 998.807309] EXT4-fs (loop1): mount failed [ 998.862158] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 998.881681] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 998.893114] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 998.903758] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 998.919045] EXT4-fs (loop1): get root inode failed [ 998.926618] EXT4-fs (loop1): mount failed 21:48:54 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000007402000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:48:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x0, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}, 0x6}) 21:48:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xf0ffffffffffff}, 0x0) 21:48:54 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x193, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:48:54 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000340)={0x0, 0x0}) r4 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x441, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r5, 0x4004510d, &(0x7f0000000200)=0x7) ioctl$MON_IOCX_GET(r4, 0x40189206, &(0x7f0000000340)={0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRES64, @ANYRES16, @ANYRESHEX=r3, @ANYRES64=r2, @ANYRES64=r4, @ANYRES16=r0, @ANYRESDEC=r4, @ANYRES16=r1], 0x3}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GET(r6, 0x40189206, &(0x7f0000000340)={0x0, 0x0}) vmsplice(r6, &(0x7f0000000280)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="c2269ea6621de37be86798cc9ea020b1de979404d1d24727a30568a8309048aea44da2bf0d25b861e63523927b839b628fc67508c9adf1209fc07fc2d8702e2a852448d291e756acadd28436c12356ba5dd4814ce3849995e5768ff7e8ef1e00b873108f6e7731a693e4365ae11ce16cf788968813faa14f171697341a44fee05c0707b5ebbb121568dd30a23ac8cce2e216db57fddd50176082b441e05dc3529216eaf5a40221eea35dd80f476bed59710113948ad0ca47b4832ee8b7ccef5af6e335728ac4070de1b14c76bda6c23b41538d4403", 0xd5}, {&(0x7f0000000240)="335389b169e0255429b6508f3fece2649cdbc2a46e0ead509bd0d9c51cc99b2068aab32b", 0x24}], 0x3, 0x0) 21:48:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200410, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:48:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x100000000000000}, 0x0) 21:48:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x81, 0x0, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}, 0x6}) 21:48:54 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000007a02000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:48:54 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x194, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:48:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x200000000000000}, 0x0) [ 999.128057] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 999.158981] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 21:48:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x81, 0x0, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}, 0x6}) 21:48:54 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c000000000012000000000003000600fffffffb02000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 999.208288] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 999.247772] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 21:48:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x300000000000000}, 0x0) [ 999.280345] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated 21:48:54 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x195, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:48:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x81, 0x0, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}, 0x6}) [ 999.396446] EXT4-fs (loop1): get root inode failed [ 999.425561] EXT4-fs (loop1): mount failed [ 999.502579] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 999.525005] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 999.535263] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 999.548604] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 999.566718] EXT4-fs (loop1): get root inode failed [ 999.571816] EXT4-fs (loop1): mount failed 21:48:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x0, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}, 0x6}) 21:48:55 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c000000000012000000000003000600fffffffd02000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:48:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x400000000000000}, 0x0) 21:48:55 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x196, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:48:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200500, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:48:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x0, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}, 0x6}) 21:48:55 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x40, 0x7800, 0x80, 0xd15f, {{0x21, 0x4, 0x3, 0x2c, 0x84, 0x65, 0x0, 0x20, 0x4, 0x0, @remote, @multicast1, {[@timestamp_addr={0x44, 0x34, 0x5d, 0x1, 0x3, [{@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}, {@rand_addr=0x64010100, 0x6}, {@empty, 0x1}, {@private=0xa010100, 0x5}, {@empty, 0x7fffffff}]}, @lsrr={0x83, 0x13, 0xf2, [@broadcast, @loopback, @multicast2, @loopback]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0x58, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x25}, @empty, @multicast1, @multicast1, @remote]}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) sysfs$2(0x2, 0x84, &(0x7f0000000340)=""/154) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:48:55 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006007fffffff02000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:48:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x700000000000000}, 0x0) [ 999.937330] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 21:48:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x0, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}, 0x6}) 21:48:55 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x197, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 1000.011682] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1000.038434] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:48:55 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c000000000012000000000003000600fbffffff02000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1000.069922] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1000.108656] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated 21:48:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x800000000000000}, 0x0) 21:48:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) 21:48:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xe00000000000000}, 0x0) [ 1000.178946] EXT4-fs (loop1): get root inode failed [ 1000.196349] EXT4-fs (loop1): mount failed 21:48:55 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c000000000012000000000003000600fdffffff02000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1000.254945] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1000.264169] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1000.277732] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1000.316909] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1000.329627] EXT4-fs (loop1): get root inode failed [ 1000.335391] EXT4-fs (loop1): mount failed 21:48:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200600, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:48:55 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x198, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 1000.481793] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1000.505514] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1000.531150] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1000.571965] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1000.603902] EXT4-fs (loop1): get root inode failed [ 1000.609632] EXT4-fs (loop1): mount failed [ 1000.676345] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1000.698020] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 21:48:56 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000340)={0x0, 0x0}) write$binfmt_elf64(r3, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x9, 0x1, 0x2, 0x7, 0x1, 0x3e, 0x3ff, 0x2f3, 0x40, 0x2b1, 0x7, 0xffff, 0x38, 0x2, 0x1, 0x7, 0x2}, [{0x60000000, 0x80, 0x80000000, 0x5, 0x0, 0x3ff, 0x9, 0x20}], "52e49750227a756965c99694a5488c15ff2c31c98e912147e29c03ec723335a1e2bd34d51078a44e0e9a11b6a0ee90fabac2f5f7abd8b73d7758e553e5daa7d579a7dff3685fd2c119d34ce867f8cc82d73334afc2c04dcf55e5c6b86685fb0859a83019e250f5a9e291c78ee87aaf1a55cff7b85850f8f74552355216a0825b71a807343e5b99b7e8041332addf8574f680ee8054d24b9a04aa8715ea207fe9a9922ed2f5cc660a586b2a87a03bd50d606d7c5fc6c2230cc30ba9a30cce2bb93ce92a062e", [[], [], [], [], [], [], [], [], [], []]}, 0xb3d) 21:48:56 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000000001000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:48:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xf00000000000000}, 0x0) 21:48:56 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 1000.743941] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1000.773916] EXT4-fs: failed to create workqueue [ 1000.778639] EXT4-fs (loop1): mount failed 21:48:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200700, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:48:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x3c03000000000000}, 0x0) 21:48:56 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000002000002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1000.952304] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1000.964801] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1000.982309] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1000.991189] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1001.049595] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1001.095034] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1001.116712] EXT4-fs (loop1): get root inode failed [ 1001.122429] EXT4-fs (loop1): mount failed [ 1001.196262] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1001.219514] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1001.237744] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1001.250591] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1001.271764] EXT4-fs (loop1): get root inode failed [ 1001.277658] EXT4-fs (loop1): mount failed [ 1005.349896] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1005.382216] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1005.387036] CPU: 0 PID: 8131 Comm: syz-fuzzer Not tainted 4.19.163-syzkaller #0 [ 1005.394476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1005.403834] Call Trace: [ 1005.406434] dump_stack+0x1fc/0x2fe [ 1005.410071] dump_header+0x15d/0xc3f [ 1005.413888] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1005.418998] ? ___ratelimit+0x319/0x584 [ 1005.422981] oom_kill_process.cold+0x10/0x692 [ 1005.427486] ? check_preemption_disabled+0x41/0x280 [ 1005.432512] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1005.437818] out_of_memory+0x1072/0x1390 [ 1005.441888] ? oom_killer_disable+0x270/0x270 [ 1005.446478] ? mutex_trylock+0x15f/0x1a0 [ 1005.450561] __alloc_pages_nodemask+0x23a2/0x2890 [ 1005.455410] ? find_get_entry+0x4cd/0x8a0 [ 1005.459703] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1005.464589] alloc_pages_current+0x193/0x2a0 [ 1005.469007] filemap_fault+0x146e/0x2180 [ 1005.473083] ext4_filemap_fault+0x84/0xb0 [ 1005.477237] __do_fault+0x10b/0x4b0 [ 1005.480876] __handle_mm_fault+0x273b/0x41c0 [ 1005.485320] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1005.490426] ? vm_insert_page+0x9c0/0x9c0 [ 1005.494617] ? check_preemption_disabled+0x41/0x280 [ 1005.499640] handle_mm_fault+0x436/0xb10 [ 1005.503715] __do_page_fault+0x68e/0xd60 [ 1005.507784] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1005.512819] ? spurious_fault+0x840/0x840 [ 1005.517065] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1005.521923] ? page_fault+0x8/0x30 [ 1005.525467] page_fault+0x1e/0x30 [ 1005.528931] RIP: 0033:0x468a8d [ 1005.532131] Code: Bad RIP value. [ 1005.535510] RSP: 002b:000000c00004df18 EFLAGS: 00010202 [ 1005.540876] RAX: 0000000000000000 RBX: 0000000000004e20 RCX: 0000000000468a8d [ 1005.548423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c00004df18 [ 1005.555872] RBP: 000000c00004df28 R08: 00000000000c253a R09: 0000010e25ea9fdf [ 1005.563138] R10: 000c0442c08ee583 R11: 0000000000000202 R12: 0000000000439470 [ 1005.570403] R13: 0000000000000000 R14: 0000000000b81a70 R15: 0000000000000000 [ 1005.651118] Mem-Info: [ 1005.653695] active_anon:123637 inactive_anon:23062 isolated_anon:0 [ 1005.653695] active_file:26 inactive_file:12 isolated_file:0 [ 1005.653695] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1005.653695] slab_reclaimable:13199 slab_unreclaimable:123049 [ 1005.653695] mapped:52879 shmem:23405 pagetables:997 bounce:0 [ 1005.653695] free:25008 free_pcp:62 free_cma:0 [ 1005.745755] Node 0 active_anon:493820kB inactive_anon:43360kB active_file:52kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:197480kB dirty:12kB writeback:0kB shmem:44468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 153600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1005.800763] Node 1 active_anon:728kB inactive_anon:48888kB active_file:52kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14036kB dirty:4kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1005.848254] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1005.938338] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1005.958994] Node 0 DMA32 free:35544kB min:35996kB low:44992kB high:53988kB active_anon:493720kB inactive_anon:43360kB active_file:28kB inactive_file:60kB unevictable:0kB writepending:12kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7744kB pagetables:3840kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1006.007639] lowmem_reserve[]: 0 0 1 1 1 [ 1006.011669] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1006.045950] lowmem_reserve[]: 0 0 0 0 0 [ 1006.050050] Node 1 Normal free:53504kB min:53876kB low:67344kB high:80812kB active_anon:728kB inactive_anon:48888kB active_file:0kB inactive_file:36kB unevictable:0kB writepending:4kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:192kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1006.135724] lowmem_reserve[]: 0 0 0 0 0 [ 1006.139739] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10972kB [ 1006.153565] Node 0 DMA32: 1086*4kB (UME) 1781*8kB (ME) 365*16kB (ME) 219*32kB (UME) 68*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35792kB [ 1006.167919] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1006.179669] Node 1 Normal: 84*4kB (UME) 124*8kB (UME) 128*16kB (ME) 101*32kB (M) 69*64kB (UME) 28*128kB (UME) 7*256kB (UM) 1*512kB (M) 2*1024kB (UM) 1*2048kB (M) 8*4096kB (U) = 53776kB [ 1006.196454] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1006.205371] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1006.214049] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1006.222939] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1006.231512] 23423 total pagecache pages [ 1006.235584] 0 pages in swap cache [ 1006.239061] Swap cache stats: add 0, delete 0, find 0/0 [ 1006.244466] Free swap = 0kB [ 1006.247489] Total swap = 0kB [ 1006.251882] 2097051 pages RAM [ 1006.255112] 0 pages HighMem/MovableOnly [ 1006.259087] 369639 pages reserved [ 1006.262588] 0 pages cma reserved [ 1006.265965] Out of memory (oom_kill_allocating_task): Kill process 8131 (syz-fuzzer) score 0 or sacrifice child [ 1006.276424] Killed process 8502 (syz-executor.3) total-vm:85024kB, anon-rss:1732kB, file-rss:4kB, shmem-rss:0kB [ 1006.518206] oom_reaper: reaped process 9859 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1006.542907] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1006.584743] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1006.589564] CPU: 0 PID: 8131 Comm: syz-fuzzer Not tainted 4.19.163-syzkaller #0 [ 1006.597015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1006.606450] Call Trace: [ 1006.609045] dump_stack+0x1fc/0x2fe [ 1006.612676] dump_header+0x15d/0xc3f [ 1006.616390] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1006.621492] ? ___ratelimit+0x319/0x584 [ 1006.625588] oom_kill_process.cold+0x10/0x692 [ 1006.630083] ? check_preemption_disabled+0x41/0x280 [ 1006.635107] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1006.640387] out_of_memory+0x1072/0x1390 [ 1006.644464] ? oom_killer_disable+0x270/0x270 [ 1006.648973] ? mutex_trylock+0x15f/0x1a0 [ 1006.653046] __alloc_pages_nodemask+0x23a2/0x2890 [ 1006.657988] ? find_get_entry+0x4cd/0x8a0 [ 1006.662240] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1006.667108] alloc_pages_current+0x193/0x2a0 [ 1006.671520] filemap_fault+0x146e/0x2180 [ 1006.675614] ext4_filemap_fault+0x84/0xb0 [ 1006.680292] __do_fault+0x10b/0x4b0 [ 1006.683925] __handle_mm_fault+0x273b/0x41c0 [ 1006.688337] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1006.693563] ? vm_insert_page+0x9c0/0x9c0 [ 1006.697725] ? check_preemption_disabled+0x41/0x280 [ 1006.702949] handle_mm_fault+0x436/0xb10 [ 1006.707108] __do_page_fault+0x68e/0xd60 [ 1006.711193] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1006.716382] ? spurious_fault+0x840/0x840 [ 1006.720540] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1006.725394] ? page_fault+0x8/0x30 [ 1006.728946] page_fault+0x1e/0x30 [ 1006.732515] RIP: 0033:0x468a8d [ 1006.735721] Code: Bad RIP value. [ 1006.739262] RSP: 002b:000000c00004df18 EFLAGS: 00010202 [ 1006.745139] RAX: 0000000000000000 RBX: 0000000000004e20 RCX: 0000000000468a8d [ 1006.752604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c00004df18 [ 1006.759882] RBP: 000000c00004df28 R08: 00000000000c253a R09: 0000010e25ea9fdf [ 1006.767155] R10: 000c0442c08ee583 R11: 0000000000000202 R12: 0000000000439470 [ 1006.774726] R13: 0000000000000000 R14: 0000000000b81a70 R15: 0000000000000000 [ 1006.809772] Mem-Info: [ 1006.819468] active_anon:122646 inactive_anon:23062 isolated_anon:0 [ 1006.819468] active_file:22 inactive_file:0 isolated_file:0 [ 1006.819468] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1006.819468] slab_reclaimable:13194 slab_unreclaimable:122831 [ 1006.819468] mapped:44123 shmem:23405 pagetables:997 bounce:0 [ 1006.819468] free:19707 free_pcp:69 free_cma:0 [ 1006.877945] Node 0 active_anon:489856kB inactive_anon:43360kB active_file:80kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162596kB dirty:0kB writeback:0kB shmem:44468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 153600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1006.925738] Node 1 active_anon:728kB inactive_anon:48888kB active_file:8kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13896kB dirty:0kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1006.969940] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1007.011519] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1007.037168] Node 0 DMA32 free:17980kB min:35996kB low:44992kB high:53988kB active_anon:489956kB inactive_anon:43360kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7744kB pagetables:3840kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1007.085884] lowmem_reserve[]: 0 0 1 1 1 [ 1007.089907] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1007.141386] lowmem_reserve[]: 0 0 0 0 0 [ 1007.149836] Node 1 Normal free:26828kB min:53876kB low:67344kB high:80812kB active_anon:728kB inactive_anon:48888kB active_file:16kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:192kB pagetables:148kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1007.187466] syz-executor.4: vmalloc: allocation failure, allocated 1843036160 of 3621613568 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1007.201431] lowmem_reserve[]: 0 0 0 0 0 [ 1007.229415] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10872kB [ 1007.246516] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1007.247394] Node 0 DMA32: 463*4kB (UME) 1202*8kB (UME) 1478*16kB (UME) 90*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38060kB [ 1007.254324] CPU: 0 PID: 9859 Comm: syz-executor.4 Not tainted 4.19.163-syzkaller #0 [ 1007.267684] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1007.274089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1007.274095] Call Trace: [ 1007.274119] dump_stack+0x1fc/0x2fe [ 1007.274134] warn_alloc.cold+0x7b/0x18f [ 1007.274151] ? zone_watermark_ok_safe+0x260/0x260 [ 1007.274182] __vmalloc_area_node+0x4fd/0x780 [ 1007.274200] ? __vmalloc_node_range+0x180/0x180 [ 1007.274214] ? _raw_spin_unlock+0x29/0x40 [ 1007.274225] ? __get_vm_area_node+0x2e2/0x3a0 [ 1007.274243] __vmalloc_node_range+0xed/0x180 [ 1007.274260] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1007.274273] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1007.274284] vmalloc_user+0x70/0xe0 [ 1007.274298] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1007.274313] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1007.274332] __vb2_queue_alloc+0x472/0xe60 [ 1007.274362] vb2_core_create_bufs+0x273/0x7e0 [ 1007.274380] ? __vb2_queue_free+0x870/0x870 [ 1007.274398] ? __mutex_add_waiter+0x160/0x160 [ 1007.274420] vb2_create_bufs+0x332/0x620 [ 1007.274438] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1007.274452] ? __video_do_ioctl+0x632/0xcd0 [ 1007.274467] ? __mutex_add_waiter+0x160/0x160 [ 1007.274480] ? mark_held_locks+0xf0/0xf0 [ 1007.274501] vb2_ioctl_create_bufs+0x20d/0x360 [ 1007.274515] ? memset+0x20/0x40 [ 1007.274532] v4l_create_bufs+0xb2/0x160 [ 1007.274550] __video_do_ioctl+0x49a/0xcd0 [ 1007.274572] ? v4l_querycap+0x340/0x340 [ 1007.274589] ? __might_fault+0x192/0x1d0 [ 1007.274609] video_usercopy+0x13c/0x1000 [ 1007.274626] ? v4l_querycap+0x340/0x340 [ 1007.274642] ? v4l_enumstd+0x60/0x60 [ 1007.274654] ? mark_held_locks+0xf0/0xf0 [ 1007.274669] ? do_futex+0x163/0x1c70 [ 1007.274684] ? mark_held_locks+0xf0/0xf0 [ 1007.274701] ? mark_held_locks+0xf0/0xf0 [ 1007.274715] ? debug_check_no_obj_freed+0x201/0x482 [ 1007.274738] ? video_usercopy+0x1000/0x1000 [ 1007.274751] v4l2_ioctl+0x147/0x1a0 [ 1007.274763] ? video_devdata+0xa0/0xa0 [ 1007.274779] do_vfs_ioctl+0xcdb/0x12e0 [ 1007.274793] ? lock_downgrade+0x720/0x720 [ 1007.274805] ? check_preemption_disabled+0x41/0x280 [ 1007.274819] ? ioctl_preallocate+0x200/0x200 [ 1007.274838] ? __fget+0x356/0x510 [ 1007.274855] ? do_dup2+0x450/0x450 [ 1007.274889] ksys_ioctl+0x9b/0xc0 [ 1007.274905] __x64_sys_ioctl+0x6f/0xb0 [ 1007.274918] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1007.274932] do_syscall_64+0xf9/0x620 [ 1007.274950] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1007.274961] RIP: 0033:0x45e159 [ 1007.274982] Code: Bad RIP value. [ 1007.274990] RSP: 002b:00007fa61e560c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1007.275003] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e159 [ 1007.275011] RDX: 0000000020000340 RSI: 00000000c100565c RDI: 0000000000000003 [ 1007.275019] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1007.275027] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1007.275035] R13: 00007ffc986ac15f R14: 00007fa61e5619c0 R15: 000000000119bf8c [ 1007.282539] warn_alloc_show_mem: 1 callbacks suppressed [ 1007.283575] Mem-Info: [ 1007.316797] Node 1 Normal: 147*4kB (UME) 123*8kB (ME) 128*16kB (ME) 101*32kB (M) 68*64kB (ME) 28*128kB (UME) 6*256kB (M) 1*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 1*4096kB (U) = 27076kB [ 1007.329471] active_anon:122638 inactive_anon:23062 isolated_anon:0 [ 1007.329471] active_file:109 inactive_file:692 isolated_file:0 [ 1007.329471] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1007.329471] slab_reclaimable:13194 slab_unreclaimable:122548 [ 1007.329471] mapped:44719 shmem:23405 pagetables:947 bounce:0 [ 1007.329471] free:18773 free_pcp:25 free_cma:0 [ 1007.371976] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1007.382871] Node 0 active_anon:489824kB inactive_anon:43360kB active_file:1664kB inactive_file:1608kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:165580kB dirty:0kB writeback:0kB shmem:44468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1007.406989] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1007.455977] Node 1 active_anon:728kB inactive_anon:48888kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13896kB dirty:0kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1007.740612] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1007.767717] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1007.777961] 24199 total pagecache pages [ 1007.795442] 0 pages in swap cache [ 1007.800365] Swap cache stats: add 0, delete 0, find 0/0 [ 1007.821515] Free swap = 0kB [ 1007.826425] Total swap = 0kB [ 1007.829757] 2097051 pages RAM [ 1007.834351] 0 pages HighMem/MovableOnly [ 1007.838597] 369639 pages reserved [ 1007.850558] 0 pages cma reserved [ 1007.866821] Out of memory (oom_kill_allocating_task): Kill process 8131 (syz-fuzzer) score 0 or sacrifice child [ 1007.899129] Killed process 8500 (syz-executor.0) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 1008.070979] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1008.105838] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1008.110948] Node 0 DMA32 free:48656kB min:35996kB low:44992kB high:53988kB active_anon:488060kB inactive_anon:43360kB active_file:1548kB inactive_file:1952kB unevictable:0kB writepending:12kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7712kB pagetables:3540kB bounce:0kB free_pcp:1904kB local_pcp:1488kB free_cma:0kB [ 1008.192152] lowmem_reserve[]: 0 0 1 1 1 [ 1008.207435] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1008.279303] lowmem_reserve[]: 0 0 0 0 0 [ 1008.289280] Node 1 Normal free:27104kB min:53876kB low:67344kB high:80812kB active_anon:728kB inactive_anon:48888kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:192kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1008.376903] lowmem_reserve[]: 0 0 0 0 0 [ 1008.381056] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10872kB [ 1008.432130] Node 0 DMA32: 306*4kB (UME) 1437*8kB (UME) 1931*16kB (UME) 95*32kB (UM) 2*64kB (U) 0*128kB 0*256kB 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 48320kB [ 1008.471840] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1008.494722] Node 1 Normal: 148*4kB (UME) 126*8kB (UME) 128*16kB (ME) 101*32kB (M) 68*64kB (ME) 28*128kB (UME) 6*256kB (M) 1*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 1*4096kB (U) = 27104kB [ 1008.545290] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1008.582007] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1008.590672] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1008.611871] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1008.621840] 24706 total pagecache pages [ 1008.636092] 0 pages in swap cache [ 1008.639546] Swap cache stats: add 0, delete 0, find 0/0 [ 1008.666599] Free swap = 0kB [ 1008.669852] Total swap = 0kB [ 1008.689538] 2097051 pages RAM [ 1008.698403] 0 pages HighMem/MovableOnly [ 1008.706323] 369639 pages reserved [ 1008.709796] 0 pages cma reserved [ 1011.250564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1011.273913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1011.290294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1011.300615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1011.317260] device bridge_slave_1 left promiscuous mode [ 1011.326282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.336899] device bridge_slave_0 left promiscuous mode [ 1011.345820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.359229] device veth1_macvtap left promiscuous mode [ 1011.367912] device veth0_macvtap left promiscuous mode [ 1011.377106] device veth1_vlan left promiscuous mode [ 1011.387418] device veth0_vlan left promiscuous mode 21:49:09 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200900, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:49:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x6000000000000000}, 0x0) 21:49:09 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x19a, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:49:09 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000008c0)='io\x00') sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000cc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40800}, 0x4001) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000d40)='/dev/vbi#\x00', 0x0, 0x2) close(r3) socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x3, 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) setsockopt$inet6_dccp_buf(r2, 0x21, 0xc, &(0x7f0000000900)="7c5fde4370fbc8a9a30fd9dbead635f718fed5fe968eeefbb262ba047abd9e93000f01e46254f3801c7def3d50911400b18c1af9c6d0e09cc6778b2c900a4113914b4a95fe4d26ab5c5986019ea3106a7018d548be8ead186cd82bb10552770103a842125240d1a2c415a1522454c2719af6af6e96e656389a93135d0abc3be82e21f9af4a4ad7b2c828a1e884ad89f6e2b81e05f9e788a3caa302e58a655fb3dafb5892d5e15301fd83c7a07e826e276492049248dc11d82db5dd8a1e24bebbc3154102a7e8d37e2713805741fde44d8322da3297e66a8a684011dd6089a4893c", 0xe1) r4 = socket(0x9, 0xa, 0x4000000) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x13, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000240)="6eea943c1205bffc31c5ec89c7dfe3157516b8e438b181d2db4c1d1bc45590fb25fc3be8abd24fc35c71a3d2ebdb8443c18f5748942f5cdc865473a10defee5a20ca3944535d9ae7e358d326f8e32de843bec4ff6b016e7d78d1fef6d8ecafdd5c44a22761a1bb195fccce18ae0c8d2276eb4a9efd9570cc5b12aa4e918514ec72ea3a193c850165f4595ecf6501848872379930499429f59914fee35ef1716d1d5a5bc898051d9a405dcddff0d266d29e776b2ca68c", 0xb6}, {&(0x7f0000000340)="618d0ad22d817c974d7c7c7445c59c4bdc12018abc1738d1476feb547f5b176a10e4be20029b41e591c45d894db74467762fa25d2779db3e5f4a0ea5071454cbde694360df803f37517f0ec5bd0ac344ec7c55feaf37db05cb98de7728566319a96052494078e480fa1924b92958ed89cbab935803ee865192def8d546cb4fe899eb31bd3d75ea572438e47a0507670bed69d5488a4a79876ab569cb2ae799b64c1d674aaee05c099e1c49e1dd1930b9ee5cce5563095d793f24e6f62dce8474f7c34da250af8f34ae066a1e7487e83426280fdb44e10b3035fd6582", 0xdc}, {&(0x7f0000000440)="d1240680fafb0867dc133f8a7603ecbbcb0a4d0abbeceb120974322df2fbc74567a863b57c3ae96c9751df9f0e599c19ab6b3f7206d3709b7e991efa96ea3c1f407de30d81fefa272d8409474352e59524b5a49f391fd387906ad4349e48ad6eb77ec667f88d5263a5b16547534fdbef917724bce5965c3c3620db0f9775d68a62fd4d089aea84f3ccba5f6459d590578fae7a909cf5dbf279d5a93ae9a41e7227526c679edeee7fdf9ad3c59f2996d8c4ac3dbc5b887dd207e9b3661d3c78caf5ceb65fd56741b964", 0xc9}, {&(0x7f0000000a00)="5d2d381690975e584f48f4354810a3504658a0b25dc5ac8d5e23db256265f74cb7d35770bb4f44f6d961f32e5bd2d43d48eaa2b1734eebeb011d18d8badc406fc1e83c4ba8984508e07b84f15cd8e3c94ac135ca4e2c4d71c922afce7ff61f22fb3f7075f30ecb01a40c1387769f397fd81f949fcdc1e3b6add623494e65145fba4888a63e31", 0x86}, {&(0x7f0000000ac0)="e387d596714914d5b7ea8396aa153ba6715bbc7ec02fcea899f059a6ad60ce6d8b8c0aea70704b9ae2781090779a896b00c54980f54aafa3da46862bd8508c09ff79c3d4342cc7f2154fd4ef86d1812813819e76e0a82486ff4b91d2946885050746e804baa36e7de092812741e9a3d1e5869476727562ca79540c6a75bcfa2cad19741135d5a9f3c1add767bcee278063d2ec639c00200edcbfb4cc832ead8fa8ba0a603d551b17af161221a7b5b40a948583c0e49c2d3fdb774a5fa6897d", 0xbf}], 0x5, &(0x7f0000000540)=[@txtime={{0x18, 0x1, 0x3d, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0xa6}}, @txtime={{0x18, 0x1, 0x3d, 0x400}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x800}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0xd8}}, {{&(0x7f0000000140)=@can, 0x80, &(0x7f0000000800)=[{&(0x7f0000000640)="27e34c25a012aa8be581658cc90026f66aca4757ab9c93cead15261136c012c1095d5f57e2efdc357e25f82c55b9d0f71bbfe286b9b25a80975031799f4d480e05876d5fc6b553db6d487faa23980390aa8cf1e1ec326d39bce2eecb855eb6395f60f1", 0x63}, {&(0x7f00000006c0)="0bd3fa10b8501f82f7e96713f38ab39d4f555c12226675ffd7c5b223553b3ba6b4e3b4edfb67736c9a933836c0833e333387a1e886e856f4ca8f18b92cde29a879cdb47d61b62ef09e9bdbc8b42386f7792428ffbdb77123b40e0c434684fdfb1ef0c5ee40c2bff51f25bf1245508ce63c7e545039c0286b6224126cb0c138adfd158495d9c4e24887ec9e10eb95577171a0a1e25cfba57d0fc04a44266b8bd2467baab6fd7c3f0d94ad4483edea41eaf388a5163b53e998568affc744877b9192c19d32891ed58362627199920e5e4d0e51bc675a1e54659514d826ef", 0xdd}, {&(0x7f0000000080)="35bacc6122557f1f4743176d63809e512c56c8281389f82d53f07cbd9566", 0x1e}, {&(0x7f00000007c0)="6901014a972f3bdaf023cbf743bab0eb656f14bb238f9188ca5902928ca8ad333a927b53a0", 0x25}], 0x4}}], 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket$isdn_base(0x22, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000d00)=[@in6={0xa, 0x4e24, 0xffffffff, @loopback, 0xff}], 0x1c) splice(r0, 0x0, r3, 0x0, 0x4ffe2, 0x0) 21:49:09 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000003000002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:49:10 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4800, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) linkat(r3, &(0x7f0000000080)='./file0\x00', r5, &(0x7f0000000140)='./file0\x00', 0x1400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1014.469886] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1014.484855] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1014.512781] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1014.564943] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1014.583786] EXT4-fs (loop1): get root inode failed [ 1014.588868] EXT4-fs (loop1): mount failed 21:49:10 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x19b, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 1014.652114] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1014.676751] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1014.707595] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1014.767954] EXT4-fs: failed to create workqueue [ 1014.810666] EXT4-fs (loop1): mount failed 21:49:10 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x19c, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:49:10 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200a00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) [ 1015.014487] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1015.025722] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1015.036461] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1015.049135] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated 21:49:10 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x19d, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 1015.062552] EXT4-fs (loop1): get root inode failed [ 1015.083229] EXT4-fs (loop1): mount failed [ 1015.154595] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1015.196332] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 21:49:10 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x19e, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 1015.257478] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1015.325047] EXT4-fs: failed to create workqueue [ 1015.353143] EXT4-fs (loop1): mount failed 21:49:10 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200b00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) [ 1015.526232] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1015.556881] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1015.597166] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1015.626833] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1015.649395] EXT4-fs (loop1): get root inode failed [ 1015.662286] EXT4-fs (loop1): mount failed [ 1015.722449] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1015.743687] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1015.754254] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1015.766682] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1015.779440] EXT4-fs (loop1): get root inode failed [ 1015.786051] EXT4-fs (loop1): mount failed [ 1019.012891] device hsr_slave_1 left promiscuous mode [ 1019.020492] device hsr_slave_0 left promiscuous mode [ 1019.037869] team0 (unregistering): Port device team_slave_1 removed [ 1019.048047] team0 (unregistering): Port device team_slave_0 removed [ 1019.059222] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1019.069543] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1019.101223] bond0 (unregistering): Released all slaves [ 1019.113158] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1019.124169] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1019.134317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1019.146407] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1019.176134] IPVS: ftp: loaded support on port[0] = 21 [ 1019.188782] IPVS: ftp: loaded support on port[0] = 21 [ 1019.477227] chnl_net:caif_netlink_parms(): no params data found [ 1019.557509] chnl_net:caif_netlink_parms(): no params data found [ 1019.741558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.748306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.762834] device bridge_slave_0 entered promiscuous mode [ 1019.770649] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.777018] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.791834] device bridge_slave_0 entered promiscuous mode [ 1019.798883] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.812289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.826031] device bridge_slave_1 entered promiscuous mode [ 1019.847020] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.853673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.862170] device bridge_slave_1 entered promiscuous mode [ 1019.892384] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1019.910133] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1019.920017] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1019.947866] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1019.985509] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1019.996859] team0: Port device team_slave_0 added [ 1020.016507] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1020.025445] team0: Port device team_slave_1 added [ 1020.034409] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1020.045103] team0: Port device team_slave_0 added [ 1020.073482] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1020.081827] team0: Port device team_slave_1 added [ 1020.088034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.094802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.121422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.149729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.160621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.188968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.201762] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1020.213289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.220273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.248455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.259909] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1020.270838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.285018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.291326] Bluetooth: hci3: command 0x0409 tx timeout [ 1020.318597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.343783] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1020.352505] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1020.385973] device hsr_slave_0 entered promiscuous mode [ 1020.396401] device hsr_slave_1 entered promiscuous mode [ 1020.409833] device hsr_slave_0 entered promiscuous mode [ 1020.418426] device hsr_slave_1 entered promiscuous mode [ 1020.425826] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1020.434750] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1020.442976] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1020.450249] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1020.635820] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1020.854983] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1020.930528] Bluetooth: hci5: command 0x0409 tx timeout [ 1021.009574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1021.022206] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1021.136524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1021.145757] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1021.154651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1021.162529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1021.174460] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1021.182098] 8021q: adding VLAN 0 to HW filter on device team0 [ 1021.289048] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1021.297684] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1021.310071] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1021.318397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1021.326931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1021.338493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.345179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.352845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1021.361794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1021.370101] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.377174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.384845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1021.398238] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1021.411640] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1021.418656] 8021q: adding VLAN 0 to HW filter on device team0 [ 1021.426935] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1021.436812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1021.447836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1021.456623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1021.468052] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1021.478773] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1021.583947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1021.592911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1021.601592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.608443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.616189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1021.625005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1021.639706] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1021.649962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1021.659359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1021.669883] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.678821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.789631] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1021.797196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1021.805540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1021.816299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1021.827505] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1021.836547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1021.945072] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1021.954052] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1021.966439] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1021.974580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1021.983927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1021.992374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1022.000474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1022.008608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1022.019156] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1022.125705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1022.134657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1022.143252] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1022.155580] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1022.163733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1022.172010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1022.280749] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1022.287187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1022.296669] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1022.307806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1022.316512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1022.332568] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1022.341295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1022.349456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1022.371639] Bluetooth: hci3: command 0x041b tx timeout [ 1022.472339] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1022.481505] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1022.488793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1022.497396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1022.508338] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1022.521696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1022.528613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1022.646910] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1022.653755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1022.669244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1022.689570] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1022.702007] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1022.715905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1022.725189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1022.735727] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1022.746748] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1022.762906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1022.769891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.779497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1022.787551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1022.797260] device bridge_slave_1 left promiscuous mode [ 1022.803380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.811747] device bridge_slave_0 left promiscuous mode [ 1022.817607] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.828320] device veth1_macvtap left promiscuous mode [ 1022.834732] device veth0_macvtap left promiscuous mode [ 1022.840729] device veth1_vlan left promiscuous mode [ 1022.845933] device veth0_vlan left promiscuous mode [ 1023.010927] Bluetooth: hci5: command 0x041b tx timeout [ 1024.450085] Bluetooth: hci3: command 0x040f tx timeout [ 1025.090185] Bluetooth: hci5: command 0x040f tx timeout [ 1026.530025] Bluetooth: hci3: command 0x0419 tx timeout [ 1027.169916] Bluetooth: hci5: command 0x0419 tx timeout [ 1027.267481] device hsr_slave_1 left promiscuous mode [ 1027.275771] device hsr_slave_0 left promiscuous mode [ 1027.291526] team0 (unregistering): Port device team_slave_1 removed [ 1027.304941] team0 (unregistering): Port device team_slave_0 removed [ 1027.316420] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1027.328362] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1027.362833] bond0 (unregistering): Released all slaves [ 1027.375911] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1027.383225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1027.397138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1027.453750] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1027.465612] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1027.481614] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1027.488656] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1027.506734] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1027.523403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1027.534130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1027.552831] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1027.566296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1027.591086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1027.602404] device veth0_vlan entered promiscuous mode [ 1027.615120] device veth1_vlan entered promiscuous mode [ 1027.628294] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1027.643302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1027.652137] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1027.659220] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1027.673334] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1027.681908] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1027.689237] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1027.708810] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1027.722316] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1027.730994] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1027.739060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1027.751059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1027.763822] device veth0_vlan entered promiscuous mode [ 1027.776937] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1027.785441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1027.794454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1027.817579] device veth1_vlan entered promiscuous mode [ 1027.825321] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1027.836082] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1027.844702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1027.853833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1027.863298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1027.875602] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1027.886238] device veth0_macvtap entered promiscuous mode [ 1027.894342] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1027.912019] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1027.922536] device veth1_macvtap entered promiscuous mode [ 1027.928985] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1027.942527] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1027.953753] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1027.964347] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1027.974461] device veth0_macvtap entered promiscuous mode [ 1027.985260] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1027.992872] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1028.001774] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1028.009200] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1028.023080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1028.048160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1028.072228] device veth1_macvtap entered promiscuous mode [ 1028.078748] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1028.094088] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1028.105979] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1028.116133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1028.127406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.137781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1028.148100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.158058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1028.168776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.179790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1028.199637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.211200] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1028.218328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1028.228311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1028.237174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1028.247774] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1028.261237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1028.272483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.282143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1028.292711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.302202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1028.312338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.321822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1028.333307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.347137] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1028.354558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1028.365451] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1028.374269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1028.383166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1028.396962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1028.414557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.425121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1028.441362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.452610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1028.463256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.472772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1028.485199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.494728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1028.505118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.515631] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1028.523102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1028.561005] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1028.572762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1028.583137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1028.598172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.608718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1028.621312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.631529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1028.642614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.654795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1028.666776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.679495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1028.690830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.713059] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1028.725372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1028.736328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1028.756324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1028.974557] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1028.986794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.997787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.016656] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1029.036122] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1029.042660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1029.050586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.074846] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1029.087962] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1029.096411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1029.106913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.126571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 21:49:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x9effffff00000000}, 0x0) 21:49:24 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x19f, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:49:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200c00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) [ 1029.138822] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1029.147484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1029.170964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.178505] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1029.236318] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1029.270748] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 21:49:24 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000004000002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:49:24 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000340)={0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002", @ANYRES32=r2], 0x44}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRES16=r4, @ANYBLOB="01f8ffd2ff000000002809000000e5be1ae8ab961b3c1bf99588a5017ada9ddee359020000009dc005f22dba0fbbae1763f7f859369b13", @ANYRESOCT], 0x3}, 0x1, 0x0, 0x0, 0x44000040}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe2, 0x0) 21:49:24 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4800, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) linkat(r3, &(0x7f0000000080)='./file0\x00', r5, &(0x7f0000000140)='./file0\x00', 0x1400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:49:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xf0ffffff00000000}, 0x0) 21:49:24 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a0, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 1029.317629] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 21:49:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xffffff7f00000000}, 0x0) [ 1029.394941] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated 21:49:25 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000005000002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1029.442369] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1029.452596] EXT4-fs (loop1): get root inode failed [ 1029.466698] EXT4-fs (loop1): mount failed [ 1029.471907] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1029.534378] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1029.557719] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 21:49:25 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:49:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xffffffff00000000}, 0x0) [ 1029.581295] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 21:49:25 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000006000002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1029.661310] EXT4-fs: failed to create workqueue [ 1029.679340] EXT4-fs (loop1): mount failed 21:49:25 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000007000002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:49:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200f00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:49:25 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 1029.876033] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1029.888001] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1029.900709] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1029.911150] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1029.924684] EXT4-fs (loop1): get root inode failed [ 1029.932599] EXT4-fs (loop1): mount failed [ 1030.003257] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1030.013119] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1030.023206] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1030.033230] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1030.045802] EXT4-fs (loop1): get root inode failed [ 1030.053061] EXT4-fs (loop1): mount failed 21:49:25 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x44}}, 0x48020) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendto$l2tp6(r0, &(0x7f0000000140)="c804abe75804212c308076f514b5c6f28bc193d33af9fe973a6745b5ee7b893935b2a2d126fc72e6cc34b2cff2895669b29c921d9356c20a7099f874471d8c3b3c9ab7acbed855d84d0c4005e2026439df3fa4070330c47d59bb879274644b1f146c7441e26ea609c4a1e8c54108d9a3994e1a3bab09e321fab09f9842800a0d32a096c0005dc37a68eb73a4fd9be28e4c81f5be256b56a52337781fd87005cbff49", 0xa2, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x2, @empty, 0x6, 0x2}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYBLOB="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", @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:49:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xfffffffffffff000}, 0x0) 21:49:25 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000008000002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:49:25 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:49:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200ff8, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:49:25 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4800, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) linkat(r3, &(0x7f0000000080)='./file0\x00', r5, &(0x7f0000000140)='./file0\x00', 0x1400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:49:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x2}, 0x0) 21:49:25 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000009000002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1030.277949] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1030.296279] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1030.303206] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 21:49:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x3}, 0x0) 21:49:25 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 1030.362989] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1030.387063] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 21:49:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x4}, 0x0) 21:49:26 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000048000002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1030.492656] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1030.533073] EXT4-fs (loop1): get root inode failed [ 1030.538535] EXT4-fs (loop1): mount failed [ 1030.620199] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1030.641211] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1030.656402] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1030.676603] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1030.693196] EXT4-fs (loop1): get root inode failed [ 1030.698246] EXT4-fs (loop1): mount failed 21:49:26 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x163, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:49:26 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a5, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:49:26 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c000000000012000000000003000600004c000002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:49:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x7}, 0x0) 21:49:26 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x201004, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:49:26 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4800, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) linkat(r2, &(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000140)='./file0\x00', 0x1400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 21:49:26 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000068000002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1031.123746] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 21:49:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x8}, 0x0) [ 1031.184007] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1031.196841] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 21:49:26 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c000000000012000000000003000600006c000002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:49:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0xe}, 0x0) [ 1031.278345] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1031.297591] EXT4-fs (loop1): get root inode failed [ 1031.331553] EXT4-fs (loop1): mount failed 21:49:26 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000074000002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:49:26 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a6, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:49:26 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x162, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:49:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0xf}, 0x0) [ 1031.401252] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 21:49:27 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c000000000012000000000003000600007a000002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1031.450558] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1031.495159] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1031.542042] EXT4-fs: failed to create workqueue 21:49:27 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000030002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1031.568804] EXT4-fs (loop1): mount failed 21:49:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x202000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) [ 1031.715059] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1031.724574] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1031.743718] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1031.754985] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1031.775334] EXT4-fs (loop1): get root inode failed [ 1031.781403] EXT4-fs (loop1): mount failed [ 1031.824015] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1031.833394] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1031.844753] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1031.854995] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1031.869033] EXT4-fs (loop1): get root inode failed 21:49:27 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4800, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) linkat(r2, &(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000140)='./file0\x00', 0x1400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 21:49:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x60}, 0x0) 21:49:27 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a7, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:49:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x2000021c}}, 0x0) 21:49:27 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000050002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1031.874538] EXT4-fs (loop1): mount failed 21:49:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0xf0}, 0x0) 21:49:27 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:49:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x202300, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:49:27 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a8, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:49:27 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000060002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1032.041064] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1032.060756] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 21:49:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x300}, 0x0) [ 1032.093275] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1032.152103] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1032.155665] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1032.190917] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 21:49:27 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000070002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1032.202566] EXT4-fs (loop1): get root inode failed [ 1032.208489] EXT4-fs (loop1): mount failed [ 1032.269851] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1032.288070] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1032.303237] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1032.315544] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1032.327571] EXT4-fs (loop1): get root inode failed [ 1032.332971] EXT4-fs (loop1): mount failed 21:49:28 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4800, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) linkat(r2, &(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000140)='./file0\x00', 0x1400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 21:49:28 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a9, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:49:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x33c}, 0x0) 21:49:28 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000090002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:49:28 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x202d00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) [ 1032.849060] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1032.863438] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 21:49:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x700}, 0x0) 21:49:28 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) [ 1032.898745] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 21:49:28 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000200002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:49:28 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1aa, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 1032.943930] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated 21:49:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0xe00}, 0x0) [ 1032.984261] EXT4-fs (loop1): get root inode failed [ 1032.988132] FAULT_INJECTION: forcing a failure. [ 1032.988132] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.006753] EXT4-fs (loop1): mount failed [ 1033.030367] CPU: 1 PID: 10871 Comm: syz-executor.5 Not tainted 4.19.163-syzkaller #0 [ 1033.038371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1033.047738] Call Trace: [ 1033.050339] dump_stack+0x1fc/0x2fe [ 1033.054330] should_fail.cold+0xa/0x14 [ 1033.058331] ? setup_fault_attr+0x200/0x200 [ 1033.062670] ? lock_acquire+0x170/0x3c0 [ 1033.066671] __should_failslab+0x115/0x180 [ 1033.071181] should_failslab+0x5/0xf [ 1033.075093] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 1033.080295] __kmalloc_node+0x38/0x70 21:49:28 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1ab, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 1033.084104] kvmalloc_node+0x61/0xf0 [ 1033.087827] video_usercopy+0x427/0x1000 [ 1033.091903] ? v4l_querycap+0x340/0x340 [ 1033.095876] ? v4l_enumstd+0x60/0x60 [ 1033.099600] ? get_pid_task+0xf4/0x190 [ 1033.103494] ? mark_held_locks+0xf0/0xf0 [ 1033.107601] ? proc_fail_nth_write+0x95/0x1d0 [ 1033.112104] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1033.117031] ? video_usercopy+0x1000/0x1000 [ 1033.121356] v4l2_ioctl+0x147/0x1a0 [ 1033.125004] ? video_devdata+0xa0/0xa0 [ 1033.128884] do_vfs_ioctl+0xcdb/0x12e0 [ 1033.132987] ? lock_downgrade+0x720/0x720 [ 1033.137219] ? check_preemption_disabled+0x41/0x280 [ 1033.142343] ? ioctl_preallocate+0x200/0x200 [ 1033.147316] ? __fget+0x356/0x510 [ 1033.150775] ? do_dup2+0x450/0x450 [ 1033.154324] ? vfs_write+0x393/0x540 [ 1033.158114] ? fput+0x2b/0x190 [ 1033.161313] ksys_ioctl+0x9b/0xc0 [ 1033.164764] __x64_sys_ioctl+0x6f/0xb0 [ 1033.168664] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1033.173321] do_syscall_64+0xf9/0x620 [ 1033.177129] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1033.182320] RIP: 0033:0x45e159 [ 1033.185519] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1033.204412] RSP: 002b:00007f97906a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1033.212130] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e159 [ 1033.219395] RDX: 0000000020000340 RSI: 00000000c100565c RDI: 0000000000000003 [ 1033.226716] RBP: 00007f97906a2ca0 R08: 0000000000000000 R09: 0000000000000000 21:49:28 executing program 5 (fault-call:1 fault-nth:1): r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) [ 1033.233980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1033.241979] R13: 00007ffc100b0f6f R14: 00007f97906a39c0 R15: 000000000119bf8c [ 1033.291332] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1033.311700] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1033.326440] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1033.343335] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1033.354152] FAULT_INJECTION: forcing a failure. [ 1033.354152] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.388690] CPU: 0 PID: 10888 Comm: syz-executor.5 Not tainted 4.19.163-syzkaller #0 [ 1033.396607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1033.404651] EXT4-fs (loop1): get root inode failed [ 1033.406239] Call Trace: [ 1033.406262] dump_stack+0x1fc/0x2fe [ 1033.406282] should_fail.cold+0xa/0x14 [ 1033.420929] EXT4-fs (loop1): mount failed [ 1033.421423] ? setup_fault_attr+0x200/0x200 [ 1033.429891] ? lock_acquire+0x170/0x3c0 [ 1033.433938] __should_failslab+0x115/0x180 [ 1033.438434] should_failslab+0x5/0xf [ 1033.442151] __kmalloc+0x2ab/0x3c0 [ 1033.445682] ? __vb2_queue_alloc+0xe2/0xe60 [ 1033.450011] __vb2_queue_alloc+0xe2/0xe60 [ 1033.454148] ? vid_cap_queue_setup+0x3d2/0xa50 [ 1033.458812] vb2_core_create_bufs+0x273/0x7e0 [ 1033.463310] ? __vb2_queue_free+0x870/0x870 [ 1033.467764] ? __mutex_add_waiter+0x160/0x160 [ 1033.472970] vb2_create_bufs+0x332/0x620 [ 1033.477045] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1033.482166] ? __video_do_ioctl+0x632/0xcd0 [ 1033.486496] ? __mutex_add_waiter+0x160/0x160 [ 1033.491061] ? mark_held_locks+0xf0/0xf0 [ 1033.495166] ? __lock_acquire+0x6de/0x3ff0 [ 1033.499413] vb2_ioctl_create_bufs+0x20d/0x360 [ 1033.504011] ? memset+0x20/0x40 [ 1033.507334] v4l_create_bufs+0xb2/0x160 [ 1033.511308] __video_do_ioctl+0x49a/0xcd0 [ 1033.515470] ? v4l_querycap+0x340/0x340 [ 1033.519435] ? __might_fault+0x192/0x1d0 [ 1033.523486] video_usercopy+0x13c/0x1000 [ 1033.527539] ? v4l_querycap+0x340/0x340 [ 1033.531521] ? v4l_enumstd+0x60/0x60 [ 1033.535221] ? get_pid_task+0xf4/0x190 [ 1033.539096] ? mark_held_locks+0xf0/0xf0 [ 1033.543157] ? proc_fail_nth_write+0x95/0x1d0 [ 1033.547816] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1033.552782] ? video_usercopy+0x1000/0x1000 [ 1033.557105] v4l2_ioctl+0x147/0x1a0 [ 1033.560729] ? video_devdata+0xa0/0xa0 [ 1033.564623] do_vfs_ioctl+0xcdb/0x12e0 [ 1033.568534] ? lock_downgrade+0x720/0x720 [ 1033.572674] ? check_preemption_disabled+0x41/0x280 [ 1033.577700] ? ioctl_preallocate+0x200/0x200 [ 1033.582115] ? __fget+0x356/0x510 [ 1033.585593] ? do_dup2+0x450/0x450 [ 1033.589142] ? vfs_write+0x393/0x540 [ 1033.592856] ? fput+0x2b/0x190 [ 1033.596047] ksys_ioctl+0x9b/0xc0 [ 1033.599518] __x64_sys_ioctl+0x6f/0xb0 [ 1033.603410] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1033.608002] do_syscall_64+0xf9/0x620 [ 1033.611808] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1033.616989] RIP: 0033:0x45e159 [ 1033.620171] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:49:29 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4800, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) linkat(r3, &(0x7f0000000080)='./file0\x00', r5, &(0x7f0000000140)='./file0\x00', 0x1400) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:49:29 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000480002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:49:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0xf00}, 0x0) [ 1033.639200] RSP: 002b:00007f97906a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1033.647016] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e159 [ 1033.654665] RDX: 0000000020000340 RSI: 00000000c100565c RDI: 0000000000000003 [ 1033.661934] RBP: 00007f97906a2ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1033.669202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.676458] R13: 00007ffc100b0f6f R14: 00007f97906a39c0 R15: 000000000119bf8c 21:49:29 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c00000000001200000000000300060000004c0002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:49:29 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x203f00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:49:29 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1ac, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:49:29 executing program 5 (fault-call:1 fault-nth:2): r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) 21:49:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x3c03}, 0x0) 21:49:29 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000680002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1033.874010] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1033.886534] FAULT_INJECTION: forcing a failure. [ 1033.886534] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.921654] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1033.978742] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1033.987584] CPU: 0 PID: 10914 Comm: syz-executor.5 Not tainted 4.19.163-syzkaller #0 [ 1033.997249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1034.006608] Call Trace: [ 1034.009212] dump_stack+0x1fc/0x2fe [ 1034.012895] should_fail.cold+0xa/0x14 [ 1034.016881] ? setup_fault_attr+0x200/0x200 [ 1034.021014] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1034.021211] ? lock_acquire+0x170/0x3c0 [ 1034.034399] __should_failslab+0x115/0x180 [ 1034.038651] should_failslab+0x5/0xf [ 1034.042377] kmem_cache_alloc_trace+0x284/0x380 [ 1034.047059] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1034.052433] vb2_vmalloc_alloc+0x70/0x2f0 [ 1034.056611] __vb2_queue_alloc+0x472/0xe60 [ 1034.060873] vb2_core_create_bufs+0x273/0x7e0 [ 1034.065383] ? __vb2_queue_free+0x870/0x870 [ 1034.069992] ? __mutex_add_waiter+0x160/0x160 [ 1034.074629] vb2_create_bufs+0x332/0x620 [ 1034.078710] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1034.083828] ? __video_do_ioctl+0x632/0xcd0 [ 1034.088165] ? __mutex_add_waiter+0x160/0x160 [ 1034.092674] ? mark_held_locks+0xf0/0xf0 [ 1034.096751] ? __lock_acquire+0x6de/0x3ff0 [ 1034.101004] vb2_ioctl_create_bufs+0x20d/0x360 [ 1034.105596] ? memset+0x20/0x40 [ 1034.108889] v4l_create_bufs+0xb2/0x160 [ 1034.113036] __video_do_ioctl+0x49a/0xcd0 [ 1034.117295] ? v4l_querycap+0x340/0x340 [ 1034.121419] ? __might_fault+0x192/0x1d0 [ 1034.125497] video_usercopy+0x13c/0x1000 [ 1034.129575] ? v4l_querycap+0x340/0x340 [ 1034.133997] ? v4l_enumstd+0x60/0x60 [ 1034.137718] ? get_pid_task+0xf4/0x190 [ 1034.141616] ? mark_held_locks+0xf0/0xf0 [ 1034.146064] ? proc_fail_nth_write+0x95/0x1d0 [ 1034.150615] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1034.155571] ? video_usercopy+0x1000/0x1000 [ 1034.160076] v4l2_ioctl+0x147/0x1a0 [ 1034.163711] ? video_devdata+0xa0/0xa0 [ 1034.167607] do_vfs_ioctl+0xcdb/0x12e0 [ 1034.171539] ? lock_downgrade+0x720/0x720 [ 1034.175699] ? check_preemption_disabled+0x41/0x280 [ 1034.180758] ? ioctl_preallocate+0x200/0x200 [ 1034.185179] ? __fget+0x356/0x510 [ 1034.188658] ? do_dup2+0x450/0x450 [ 1034.192292] ? vfs_write+0x393/0x540 [ 1034.196032] ? fput+0x2b/0x190 [ 1034.199244] ksys_ioctl+0x9b/0xc0 [ 1034.202730] __x64_sys_ioctl+0x6f/0xb0 [ 1034.206627] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1034.211393] do_syscall_64+0xf9/0x620 [ 1034.215205] entry_SYSCALL_64_after_hwframe+0x49/0xbe 21:49:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x6000}, 0x0) 21:49:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0xf000}, 0x0) 21:49:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x30000}, 0x0) [ 1034.219848] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1034.220395] RIP: 0033:0x45e159 [ 1034.237557] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1034.256465] RSP: 002b:00007f97906a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1034.261413] EXT4-fs (loop1): get root inode failed [ 1034.264181] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e159 [ 1034.264190] RDX: 0000000020000340 RSI: 00000000c100565c RDI: 0000000000000003 [ 1034.264198] RBP: 00007f97906a2ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1034.264206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1034.264215] R13: 00007ffc100b0f6f R14: 00007f97906a39c0 R15: 000000000119bf8c [ 1034.315085] EXT4-fs (loop1): mount failed [ 1034.360640] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1034.370676] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1034.381171] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1034.392923] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1034.409333] EXT4-fs (loop1): get root inode failed [ 1034.414602] EXT4-fs (loop1): mount failed 21:49:30 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4800, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) linkat(r3, &(0x7f0000000080)='./file0\x00', r5, &(0x7f0000000140)='./file0\x00', 0x1400) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:49:30 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1ad, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:49:30 executing program 5 (fault-call:1 fault-nth:3): r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) 21:49:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x34000}, 0x0) 21:49:30 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c00000000001200000000000300060000006c0002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:49:30 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x204000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) [ 1034.640625] FAULT_INJECTION: forcing a failure. [ 1034.640625] name failslab, interval 1, probability 0, space 0, times 0 [ 1034.659323] CPU: 1 PID: 11002 Comm: syz-executor.5 Not tainted 4.19.163-syzkaller #0 [ 1034.667325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1034.676685] Call Trace: [ 1034.679286] dump_stack+0x1fc/0x2fe [ 1034.682933] should_fail.cold+0xa/0x14 [ 1034.687338] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1034.689606] ? setup_fault_attr+0x200/0x200 [ 1034.689621] ? lock_acquire+0x170/0x3c0 [ 1034.689642] __should_failslab+0x115/0x180 [ 1034.689657] should_failslab+0x5/0xf [ 1034.689669] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 1034.689686] __get_vm_area_node+0x128/0x3a0 [ 1034.689701] __vmalloc_node_range+0xca/0x180 [ 1034.689719] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1034.734086] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1034.738428] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1034.744081] vmalloc_user+0x70/0xe0 [ 1034.747702] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1034.752016] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1034.756510] __vb2_queue_alloc+0x472/0xe60 [ 1034.760745] vb2_core_create_bufs+0x273/0x7e0 [ 1034.765239] ? __vb2_queue_free+0x870/0x870 [ 1034.769551] ? __mutex_add_waiter+0x160/0x160 [ 1034.774039] vb2_create_bufs+0x332/0x620 [ 1034.778268] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1034.783368] ? __video_do_ioctl+0x632/0xcd0 [ 1034.787696] ? __mutex_add_waiter+0x160/0x160 [ 1034.792177] ? mark_held_locks+0xf0/0xf0 [ 1034.796222] ? __lock_acquire+0x6de/0x3ff0 [ 1034.800664] vb2_ioctl_create_bufs+0x20d/0x360 [ 1034.805243] ? memset+0x20/0x40 [ 1034.808512] v4l_create_bufs+0xb2/0x160 [ 1034.812494] __video_do_ioctl+0x49a/0xcd0 [ 1034.816823] ? v4l_querycap+0x340/0x340 [ 1034.820790] ? __might_fault+0x192/0x1d0 [ 1034.824935] video_usercopy+0x13c/0x1000 [ 1034.828990] ? v4l_querycap+0x340/0x340 [ 1034.832959] ? v4l_enumstd+0x60/0x60 [ 1034.836661] ? get_pid_task+0xf4/0x190 [ 1034.840535] ? mark_held_locks+0xf0/0xf0 [ 1034.844581] ? proc_fail_nth_write+0x95/0x1d0 [ 1034.849071] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1034.857324] ? video_usercopy+0x1000/0x1000 [ 1034.861634] v4l2_ioctl+0x147/0x1a0 [ 1034.865343] ? video_devdata+0xa0/0xa0 [ 1034.869238] do_vfs_ioctl+0xcdb/0x12e0 [ 1034.873113] ? lock_downgrade+0x720/0x720 [ 1034.878134] ? check_preemption_disabled+0x41/0x280 [ 1034.883154] ? ioctl_preallocate+0x200/0x200 [ 1034.887817] ? __fget+0x356/0x510 [ 1034.891260] ? do_dup2+0x450/0x450 [ 1034.894879] ? vfs_write+0x393/0x540 [ 1034.898674] ? fput+0x2b/0x190 [ 1034.902032] ksys_ioctl+0x9b/0xc0 [ 1034.905471] __x64_sys_ioctl+0x6f/0xb0 [ 1034.909692] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1034.914257] do_syscall_64+0xf9/0x620 [ 1034.918131] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1034.923304] RIP: 0033:0x45e159 21:49:30 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1ae, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:49:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x400300}, 0x0) 21:49:30 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000740002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1034.926485] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1034.945382] RSP: 002b:00007f97906a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1034.953087] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e159 [ 1034.960343] RDX: 0000000020000340 RSI: 00000000c100565c RDI: 0000000000000003 [ 1034.967953] RBP: 00007f97906a2ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1034.975208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1034.982481] R13: 00007ffc100b0f6f R14: 00007f97906a39c0 R15: 000000000119bf8c 21:49:30 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c00000000001200000000000300060000007a0002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:49:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0xf0ffff}, 0x0) 21:49:30 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1af, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 1035.151673] syz-executor.5: vmalloc: allocation failure: 3621609472 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1035.188382] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1035.222291] CPU: 0 PID: 11002 Comm: syz-executor.5 Not tainted 4.19.163-syzkaller #0 [ 1035.230213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1035.239663] Call Trace: [ 1035.242265] dump_stack+0x1fc/0x2fe [ 1035.245911] warn_alloc.cold+0x7b/0x18f [ 1035.249897] ? zone_watermark_ok_safe+0x260/0x260 [ 1035.250285] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1035.254746] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 1035.254765] ? __get_vm_area_node+0x2e2/0x3a0 [ 1035.254785] __vmalloc_node_range+0x13d/0x180 [ 1035.254801] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1035.254820] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1035.264032] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1035.271381] vmalloc_user+0x70/0xe0 [ 1035.271399] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1035.271413] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1035.271433] __vb2_queue_alloc+0x472/0xe60 [ 1035.271461] vb2_core_create_bufs+0x273/0x7e0 [ 1035.271478] ? __vb2_queue_free+0x870/0x870 [ 1035.271496] ? __mutex_add_waiter+0x160/0x160 [ 1035.271514] vb2_create_bufs+0x332/0x620 [ 1035.271530] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1035.276484] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1035.280579] ? __video_do_ioctl+0x632/0xcd0 [ 1035.280597] ? __mutex_add_waiter+0x160/0x160 [ 1035.280611] ? mark_held_locks+0xf0/0xf0 [ 1035.280627] ? __lock_acquire+0x6de/0x3ff0 [ 1035.280643] vb2_ioctl_create_bufs+0x20d/0x360 [ 1035.280657] ? memset+0x20/0x40 [ 1035.280672] v4l_create_bufs+0xb2/0x160 [ 1035.280689] __video_do_ioctl+0x49a/0xcd0 [ 1035.379476] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1035.381755] ? v4l_querycap+0x340/0x340 [ 1035.381775] ? __might_fault+0x192/0x1d0 [ 1035.381797] video_usercopy+0x13c/0x1000 [ 1035.381815] ? v4l_querycap+0x340/0x340 [ 1035.393552] EXT4-fs (loop1): get root inode failed [ 1035.397032] ? v4l_enumstd+0x60/0x60 [ 1035.397051] ? get_pid_task+0xf4/0x190 [ 1035.397067] ? mark_held_locks+0xf0/0xf0 [ 1035.397082] ? proc_fail_nth_write+0x95/0x1d0 [ 1035.397100] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 1035.405077] EXT4-fs (loop1): mount failed [ 1035.405232] ? video_usercopy+0x1000/0x1000 [ 1035.443794] v4l2_ioctl+0x147/0x1a0 [ 1035.447425] ? video_devdata+0xa0/0xa0 [ 1035.451323] do_vfs_ioctl+0xcdb/0x12e0 [ 1035.455387] ? lock_downgrade+0x720/0x720 [ 1035.459625] ? check_preemption_disabled+0x41/0x280 [ 1035.464630] ? ioctl_preallocate+0x200/0x200 [ 1035.469035] ? __fget+0x356/0x510 [ 1035.472475] ? do_dup2+0x450/0x450 [ 1035.476011] ? vfs_write+0x393/0x540 [ 1035.479708] ? fput+0x2b/0x190 [ 1035.482905] ksys_ioctl+0x9b/0xc0 [ 1035.486353] __x64_sys_ioctl+0x6f/0xb0 [ 1035.490387] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1035.494957] do_syscall_64+0xf9/0x620 [ 1035.498749] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1035.503926] RIP: 0033:0x45e159 [ 1035.507108] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1035.527166] RSP: 002b:00007f97906a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1035.535075] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e159 [ 1035.542563] RDX: 0000000020000340 RSI: 00000000c100565c RDI: 0000000000000003 [ 1035.549902] RBP: 00007f97906a2ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1035.557165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1035.564604] R13: 00007ffc100b0f6f R14: 00007f97906a39c0 R15: 000000000119bf8c 21:49:31 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4800, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) linkat(r3, &(0x7f0000000080)='./file0\x00', r5, &(0x7f0000000140)='./file0\x00', 0x1400) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:49:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x1000000}, 0x0) [ 1035.575509] Mem-Info: [ 1035.577965] active_anon:124042 inactive_anon:23090 isolated_anon:0 [ 1035.577965] active_file:1346 inactive_file:6666 isolated_file:0 [ 1035.577965] unevictable:0 dirty:126 writeback:0 unstable:0 [ 1035.577965] slab_reclaimable:13217 slab_unreclaimable:127285 [ 1035.577965] mapped:57657 shmem:23433 pagetables:1054 bounce:0 [ 1035.577965] free:1333539 free_pcp:642 free_cma:0 [ 1035.634022] Node 0 active_anon:493388kB inactive_anon:43472kB active_file:5380kB inactive_file:26644kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216328kB dirty:500kB writeback:0kB shmem:44580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 157696kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1035.681454] Node 1 active_anon:712kB inactive_anon:48888kB active_file:4kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14300kB dirty:4kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1035.713036] Node 0 DMA free:15892kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1035.746657] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1035.752146] Node 0 DMA32 free:1347332kB min:35996kB low:44992kB high:53988kB active_anon:493832kB inactive_anon:43372kB active_file:5380kB inactive_file:26644kB unevictable:0kB writepending:500kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:8000kB pagetables:4216kB bounce:0kB free_pcp:1860kB local_pcp:868kB free_cma:0kB [ 1035.782784] lowmem_reserve[]: 0 0 1 1 1 [ 1035.786780] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1035.813138] lowmem_reserve[]: 0 0 0 0 0 [ 1035.814664] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1035.817129] Node 1 Normal free:3969784kB min:53876kB low:67344kB high:80812kB active_anon:712kB inactive_anon:48888kB active_file:4kB inactive_file:20kB unevictable:0kB writepending:4kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:192kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1035.817167] lowmem_reserve[]: 0 0 0 0 0 [ 1035.864850] Node 0 DMA: 5*4kB (U) 4*8kB (U) 4*16kB (U) 5*32kB (U) 6*64kB (U) 3*128kB (U) 4*256kB (U) 3*512kB (U) 2*1024kB (U) 1*2048kB (M) 2*4096kB (ME) = 15892kB [ 1035.881826] Node 0 DMA32: 598*4kB (UME) 421*8kB (UME) 101*16kB (UME) 5970*32kB (UME) 3099*64kB (UME) 1620*128kB (UME) 769*256kB (UM) 424*512kB (UM) 125*1024kB (U) 90*2048kB (UM) 4*4096kB (UM) = 1346768kB [ 1035.901083] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1035.912837] Node 1 Normal: 356*4kB (UME) 669*8kB (UME) 566*16kB (UME) 343*32kB (UM) 243*64kB (UME) 189*128kB (UME) 159*256kB (UM) 148*512kB (UM) 134*1024kB (UM) 118*2048kB (UM) 832*4096kB (U) = 3969784kB [ 1035.932241] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1035.942504] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1035.951642] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1035.960587] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1035.969636] 30399 total pagecache pages [ 1035.973619] 0 pages in swap cache [ 1035.977054] Swap cache stats: add 0, delete 0, find 0/0 [ 1035.982505] Free swap = 0kB 21:49:31 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) 21:49:31 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1b0, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:49:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x2000000}, 0x0) 21:49:31 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000000003000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:49:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x204800, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) [ 1035.985525] Total swap = 0kB [ 1035.988522] 2097051 pages RAM [ 1035.991729] 0 pages HighMem/MovableOnly [ 1035.995696] 369639 pages reserved [ 1035.999213] 0 pages cma reserved 21:49:31 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000000008000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1036.087634] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 21:49:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x3000000}, 0x0) 21:49:31 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1b1, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 1036.131193] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1036.203530] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 21:49:31 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000000009000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:49:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x4000000}, 0x0) [ 1036.274624] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1036.349627] EXT4-fs (loop1): get root inode failed [ 1036.387936] EXT4-fs (loop1): mount failed 21:49:32 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4800, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:49:32 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1b2, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 1036.465614] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1036.521871] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1036.552544] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1036.605777] EXT4-fs: failed to create workqueue [ 1036.635978] EXT4-fs (loop1): mount failed [ 1036.639048] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1036.658858] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1040.776507] oom_reaper: reaped process 11126 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1040.805293] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1040.821469] in:imklog cpuset=/ mems_allowed=0-1 [ 1040.826969] CPU: 1 PID: 8434 Comm: in:imklog Not tainted 4.19.163-syzkaller #0 [ 1040.835630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1040.844986] Call Trace: [ 1040.847592] dump_stack+0x1fc/0x2fe [ 1040.851224] dump_header+0x15d/0xc3f [ 1040.854949] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1040.860051] ? ___ratelimit+0x319/0x584 [ 1040.864188] oom_kill_process.cold+0x10/0x692 [ 1040.868766] ? check_preemption_disabled+0x41/0x280 [ 1040.874026] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1040.879784] out_of_memory+0x1072/0x1390 [ 1040.881459] syz-executor.5: vmalloc: allocation failure, allocated 1807994880 of 3621613568 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1040.883848] ? oom_killer_disable+0x270/0x270 [ 1040.897690] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1040.902112] ? mutex_trylock+0x15f/0x1a0 [ 1040.902132] __alloc_pages_nodemask+0x23a2/0x2890 [ 1040.902151] ? find_get_entry+0x4cd/0x8a0 [ 1040.902177] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1040.925335] alloc_pages_current+0x193/0x2a0 [ 1040.929748] filemap_fault+0x146e/0x2180 [ 1040.933814] ext4_filemap_fault+0x84/0xb0 [ 1040.937959] __do_fault+0x10b/0x4b0 [ 1040.941574] __handle_mm_fault+0x273b/0x41c0 [ 1040.945974] ? vm_insert_page+0x9c0/0x9c0 [ 1040.950122] ? lock_downgrade+0x720/0x720 [ 1040.954277] ? check_preemption_disabled+0x41/0x280 [ 1040.959283] handle_mm_fault+0x436/0xb10 [ 1040.963506] __do_page_fault+0x68e/0xd60 [ 1040.967564] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1040.972568] ? spurious_fault+0x840/0x840 [ 1040.976725] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1040.981554] ? page_fault+0x8/0x30 [ 1040.985079] page_fault+0x1e/0x30 [ 1040.988521] RIP: 0033:0x7fec575a322d [ 1040.992322] Code: Bad RIP value. [ 1040.995671] RSP: 002b:00007fec54f3f580 EFLAGS: 00010293 [ 1041.001017] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007fec575a322d [ 1041.008359] RDX: 0000000000001fa0 RSI: 00007fec54f3fda0 RDI: 0000000000000004 [ 1041.015617] RBP: 00005576d1e509d0 R08: 0000000000000000 R09: 0000000004000001 [ 1041.022869] R10: 0000000000000001 R11: 0000000000000293 R12: 00007fec54f3fda0 [ 1041.030130] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007fec54f3fe03 [ 1041.039935] CPU: 0 PID: 11126 Comm: syz-executor.5 Not tainted 4.19.163-syzkaller #0 [ 1041.042691] Mem-Info: [ 1041.047834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1041.050313] active_anon:122537 inactive_anon:23063 isolated_anon:0 [ 1041.050313] active_file:13 inactive_file:0 isolated_file:0 [ 1041.050313] unevictable:0 dirty:9 writeback:0 unstable:0 [ 1041.050313] slab_reclaimable:13181 slab_unreclaimable:127410 [ 1041.050313] mapped:52980 shmem:23406 pagetables:997 bounce:0 [ 1041.050313] free:13840 free_pcp:797 free_cma:0 [ 1041.059564] Call Trace: [ 1041.059588] dump_stack+0x1fc/0x2fe [ 1041.059620] warn_alloc.cold+0x7b/0x18f [ 1041.094116] Node 0 active_anon:489436kB inactive_anon:43364kB active_file:48kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:197552kB dirty:32kB writeback:0kB shmem:44472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 153600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1041.095544] ? zone_watermark_ok_safe+0x260/0x260 [ 1041.099502] Node 1 active_anon:712kB inactive_anon:48888kB active_file:4kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14368kB dirty:4kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1041.103419] ? retint_kernel+0x2d/0x2d [ 1041.131459] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1041.136109] ? policy_node+0x52/0x140 [ 1041.164232] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1041.167045] __vmalloc_area_node+0x4fd/0x780 [ 1041.193330] Node 0 DMA32 free:17640kB min:35996kB low:44992kB high:53988kB active_anon:489032kB inactive_anon:43364kB active_file:948kB inactive_file:672kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7840kB pagetables:3840kB bounce:0kB free_pcp:2940kB local_pcp:1360kB free_cma:0kB [ 1041.197091] ? __vmalloc_node_range+0x180/0x180 [ 1041.202093] lowmem_reserve[]: 0 0 1 1 1 [ 1041.206476] ? _raw_spin_unlock+0x29/0x40 [ 1041.235794] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1041.240429] ? __get_vm_area_node+0x2e2/0x3a0 [ 1041.240452] __vmalloc_node_range+0xed/0x180 [ 1041.244398] lowmem_reserve[]: 0 0 0 0 0 [ 1041.248535] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1041.248548] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1041.248562] vmalloc_user+0x70/0xe0 [ 1041.275780] Node 1 Normal free:26848kB min:53876kB low:67344kB high:80812kB active_anon:712kB inactive_anon:48888kB active_file:4kB inactive_file:20kB unevictable:0kB writepending:4kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:192kB pagetables:148kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1041.279148] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1041.279161] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1041.279179] __vb2_queue_alloc+0x472/0xe60 [ 1041.283575] lowmem_reserve[]: 0 0 0 0 0 [ 1041.287654] vb2_core_create_bufs+0x273/0x7e0 [ 1041.291991] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10860kB [ 1041.297312] ? __vb2_queue_free+0x870/0x870 [ 1041.300934] Node 0 DMA32: 826*4kB (UME) 1045*8kB (UME) 197*16kB (ME) 93*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17792kB [ 1041.329282] ? __mutex_add_waiter+0x160/0x160 [ 1041.329306] vb2_create_bufs+0x332/0x620 [ 1041.333604] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1041.337744] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1041.341976] Node 1 Normal: 146*4kB (UME) 123*8kB (ME) 129*16kB (UME) 101*32kB (M) 69*64kB (UME) 28*128kB (UME) 7*256kB (UM) 2*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 1*4096kB (U) = 26896kB [ 1041.345929] ? __video_do_ioctl+0x632/0xcd0 [ 1041.350422] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1041.363821] ? __mutex_add_waiter+0x160/0x160 [ 1041.363834] ? mark_held_locks+0xf0/0xf0 [ 1041.363853] vb2_ioctl_create_bufs+0x20d/0x360 [ 1041.369308] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1041.381759] ? memset+0x20/0x40 [ 1041.381776] v4l_create_bufs+0xb2/0x160 [ 1041.381792] __video_do_ioctl+0x49a/0xcd0 [ 1041.386270] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1041.390316] ? v4l_querycap+0x340/0x340 [ 1041.390336] ? __might_fault+0x192/0x1d0 [ 1041.401809] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1041.406878] video_usercopy+0x13c/0x1000 [ 1041.423960] 23455 total pagecache pages [ 1041.428268] ? v4l_querycap+0x340/0x340 [ 1041.428287] ? v4l_enumstd+0x60/0x60 [ 1041.438516] 0 pages in swap cache [ 1041.442994] ? mark_held_locks+0xf0/0xf0 [ 1041.447043] Swap cache stats: add 0, delete 0, find 0/0 [ 1041.451605] ? do_futex+0x163/0x1c70 [ 1041.451620] ? mark_held_locks+0xf0/0xf0 [ 1041.451635] ? switch_mm_irqs_off+0x764/0x1340 [ 1041.460198] Free swap = 0kB [ 1041.463465] ? mark_held_locks+0xf0/0xf0 [ 1041.467450] Total swap = 0kB [ 1041.471595] ? debug_check_no_obj_freed+0x201/0x482 [ 1041.471619] ? video_usercopy+0x1000/0x1000 [ 1041.471629] v4l2_ioctl+0x147/0x1a0 [ 1041.471641] ? video_devdata+0xa0/0xa0 [ 1041.471657] do_vfs_ioctl+0xcdb/0x12e0 [ 1041.471671] ? lock_downgrade+0x720/0x720 [ 1041.471680] ? check_preemption_disabled+0x41/0x280 [ 1041.471691] ? ioctl_preallocate+0x200/0x200 [ 1041.471707] ? __fget+0x356/0x510 [ 1041.471721] ? do_dup2+0x450/0x450 [ 1041.471743] ksys_ioctl+0x9b/0xc0 [ 1041.471759] __x64_sys_ioctl+0x6f/0xb0 [ 1041.471771] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1041.471782] do_syscall_64+0xf9/0x620 [ 1041.471799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1041.471810] RIP: 0033:0x45e159 [ 1041.471834] Code: Bad RIP value. [ 1041.471842] RSP: 002b:00007f97906a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1041.471855] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e159 [ 1041.471862] RDX: 0000000020000340 RSI: 00000000c100565c RDI: 0000000000000003 [ 1041.471870] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1041.471878] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1041.471886] R13: 00007ffc100b0f6f R14: 00007f97906a39c0 R15: 000000000119bf8c [ 1041.516833] Mem-Info: [ 1041.518641] 2097051 pages RAM [ 1041.527937] active_anon:122546 inactive_anon:23063 isolated_anon:0 [ 1041.527937] active_file:9 inactive_file:9 isolated_file:0 [ 1041.527937] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1041.527937] slab_reclaimable:13181 slab_unreclaimable:127403 [ 1041.527937] mapped:52941 shmem:23406 pagetables:996 bounce:0 [ 1041.527937] free:13965 free_pcp:755 free_cma:0 [ 1041.531304] 0 pages HighMem/MovableOnly [ 1041.531309] 369639 pages reserved [ 1041.531314] 0 pages cma reserved [ 1041.531326] Out of memory (oom_kill_allocating_task): Kill process 8434 (in:imklog) score 0 or sacrifice child [ 1041.531384] Killed process 8430 (rsyslogd) total-vm:254332kB, anon-rss:972kB, file-rss:0kB, shmem-rss:0kB [ 1041.533495] oom_reaper: reaped process 8430 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1041.547507] Node 0 active_anon:488352kB inactive_anon:43364kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:197396kB dirty:0kB writeback:0kB shmem:44472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1041.547535] Node 1 active_anon:732kB inactive_anon:48888kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14368kB dirty:0kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1041.567852] systemd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1041.587131] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1041.609964] systemd cpuset=/ mems_allowed=0-1 [ 1041.634705] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1041.641963] CPU: 1 PID: 1 Comm: systemd Not tainted 4.19.163-syzkaller #0 [ 1041.664892] Node 0 DMA32 free:22196kB min:35996kB low:44992kB high:53988kB active_anon:488352kB inactive_anon:43364kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7744kB pagetables:3688kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1041.671413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1041.671418] Call Trace: [ 1041.671441] dump_stack+0x1fc/0x2fe [ 1041.671456] dump_header+0x15d/0xc3f [ 1041.671470] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1041.671481] ? ___ratelimit+0x319/0x584 [ 1041.671495] oom_kill_process.cold+0x10/0x692 [ 1041.671508] ? lock_downgrade+0x720/0x720 [ 1041.671521] ? check_preemption_disabled+0x41/0x280 [ 1041.671538] out_of_memory+0x34d/0x1390 [ 1041.671557] ? oom_killer_disable+0x270/0x270 [ 1041.671573] ? mutex_trylock+0x15f/0x1a0 [ 1041.671594] __alloc_pages_nodemask+0x23a2/0x2890 [ 1041.692291] lowmem_reserve[]: 0 0 1 1 1 [ 1041.710344] ? find_get_entry+0x4cd/0x8a0 [ 1041.710368] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1041.710402] alloc_pages_current+0x193/0x2a0 [ 1041.710418] filemap_fault+0x146e/0x2180 [ 1041.710442] ext4_filemap_fault+0x84/0xb0 [ 1041.710457] __do_fault+0x10b/0x4b0 [ 1041.710472] __handle_mm_fault+0x273b/0x41c0 [ 1041.710488] ? vm_insert_page+0x9c0/0x9c0 [ 1041.710510] ? check_preemption_disabled+0x41/0x280 [ 1041.710526] handle_mm_fault+0x436/0xb10 [ 1041.729798] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1041.731536] __do_page_fault+0x68e/0xd60 [ 1041.759933] lowmem_reserve[]: 0 0 0 0 0 [ 1041.780355] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1041.780369] ? spurious_fault+0x840/0x840 [ 1041.780383] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1041.780397] ? page_fault+0x8/0x30 [ 1041.780408] page_fault+0x1e/0x30 [ 1041.780419] RIP: 0033:0x7fdc2e467303 [ 1041.780441] Code: Bad RIP value. [ 1041.780448] RSP: 002b:00007ffe7b79fc70 EFLAGS: 00010293 [ 1041.780459] RAX: 0000000000000001 RBX: 00005606fbb5ef50 RCX: 00007fdc2e467303 [ 1041.780466] RDX: 0000000000000024 RSI: 00007ffe7b79fc80 RDI: 0000000000000004 [ 1041.780474] RBP: 00007ffe7b79ff30 R08: 11644b8de415d7de R09: 0000000000001730 [ 1041.780480] R10: 00000000ffffffff R11: 0000000000000293 R12: 00007ffe7b79fc80 [ 1041.780487] R13: 0000000000000001 R14: ffffffffffffffff R15: 0000000000000003 [ 1041.791990] Mem-Info: [ 1041.815919] Node 1 Normal free:27096kB min:53876kB low:67344kB high:80812kB active_anon:732kB inactive_anon:48888kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:192kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1041.827670] active_anon:122271 inactive_anon:23063 isolated_anon:0 [ 1041.827670] active_file:9 inactive_file:9 isolated_file:0 [ 1041.827670] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1041.827670] slab_reclaimable:13181 slab_unreclaimable:127403 [ 1041.827670] mapped:52941 shmem:23406 pagetables:959 bounce:0 [ 1041.827670] free:15041 free_pcp:1 free_cma:0 [ 1041.855276] lowmem_reserve[]: 0 0 0 0 0 [ 1041.867580] Node 0 active_anon:488352kB inactive_anon:43364kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:197396kB dirty:0kB writeback:0kB shmem:44472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1041.905357] Node 0 DMA: 2*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10864kB [ 1041.913421] Node 1 active_anon:732kB inactive_anon:48888kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14368kB dirty:0kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1041.930988] Node 0 DMA32: 1313*4kB (UME) 1291*8kB (UME) 217*16kB (UME) 99*32kB (UM) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22284kB [ 1041.937066] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1041.938068] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1041.954442] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1041.968316] Node 1 Normal: 146*4kB (UME) 124*8kB (UME) 128*16kB (ME) 101*32kB (M) 69*64kB (UME) 28*128kB (UME) 6*256kB (M) 1*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 1*4096kB (U) = 27144kB [ 1041.972171] Node 0 DMA32 free:22196kB min:35996kB low:44992kB high:53988kB active_anon:488352kB inactive_anon:43364kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7744kB pagetables:3688kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1041.973293] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1041.977437] lowmem_reserve[]: 0 0 1 1 1 [ 1041.997673] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1042.000243] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1042.000274] lowmem_reserve[]: 0 0 0 0 0 [ 1042.000291] Node 1 Normal free:27096kB min:53876kB low:67344kB high:80812kB active_anon:732kB inactive_anon:48888kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:192kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1042.042833] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1042.043506] lowmem_reserve[]: 0 0 0 0 0 [ 1042.064230] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1042.067848] Node 0 DMA: 2*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10864kB [ 1042.094153] 23424 total pagecache pages [ 1042.098829] Node 0 DMA32: 1313*4kB (UME) 1291*8kB (UME) 217*16kB (UME) 99*32kB (UM) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22284kB [ 1042.116819] 0 pages in swap cache [ 1042.144402] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1042.180372] Swap cache stats: add 0, delete 0, find 0/0 [ 1042.212017] Node 1 Normal: 146*4kB (UME) 124*8kB (UME) 128*16kB (ME) 101*32kB (M) 69*64kB (UME) 28*128kB (UME) 6*256kB (M) 1*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 1*4096kB (U) = 27144kB [ 1042.227249] Free swap = 0kB [ 1042.253128] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1042.266572] Total swap = 0kB [ 1042.292811] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1042.309120] 2097051 pages RAM [ 1042.325549] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1042.353143] 0 pages HighMem/MovableOnly [ 1042.366444] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1042.374605] 369639 pages reserved [ 1042.408243] 23424 total pagecache pages [ 1042.430312] 0 pages cma reserved [ 1042.449808] 0 pages in swap cache [ 1042.617712] Swap cache stats: add 0, delete 0, find 0/0 [ 1042.626456] Free swap = 0kB [ 1042.637358] Total swap = 0kB [ 1042.643992] 2097051 pages RAM [ 1042.655949] 0 pages HighMem/MovableOnly [ 1042.663253] 369639 pages reserved [ 1042.666804] 0 pages cma reserved [ 1042.681175] Out of memory: Kill process 8130 (syz-fuzzer) score 68 or sacrifice child [ 1042.693972] Killed process 10050 (syz-executor.0) total-vm:85024kB, anon-rss:1732kB, file-rss:4kB, shmem-rss:0kB [ 1042.714156] oom_reaper: reaped process 10050 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1042.726864] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1042.746793] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1042.751700] CPU: 1 PID: 8151 Comm: syz-fuzzer Not tainted 4.19.163-syzkaller #0 [ 1042.759140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1042.769008] Call Trace: [ 1042.771596] dump_stack+0x1fc/0x2fe [ 1042.775259] dump_header+0x15d/0xc3f [ 1042.779012] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1042.784116] ? ___ratelimit+0x319/0x584 [ 1042.788195] oom_kill_process.cold+0x10/0x692 [ 1042.792691] ? check_preemption_disabled+0x41/0x280 [ 1042.797714] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1042.802992] out_of_memory+0x1072/0x1390 [ 1042.807067] ? oom_killer_disable+0x270/0x270 [ 1042.811564] ? mutex_trylock+0x15f/0x1a0 [ 1042.815630] __alloc_pages_nodemask+0x23a2/0x2890 [ 1042.820477] ? find_get_entry+0x4cd/0x8a0 [ 1042.824635] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1042.829501] alloc_pages_current+0x193/0x2a0 [ 1042.833915] filemap_fault+0x146e/0x2180 [ 1042.837985] ext4_filemap_fault+0x84/0xb0 [ 1042.842240] __do_fault+0x10b/0x4b0 [ 1042.845958] __handle_mm_fault+0x273b/0x41c0 [ 1042.850375] ? vm_insert_page+0x9c0/0x9c0 [ 1042.854522] ? __fget+0x356/0x510 [ 1042.858001] ? check_preemption_disabled+0x41/0x280 [ 1042.863904] handle_mm_fault+0x436/0xb10 [ 1042.867982] __do_page_fault+0x68e/0xd60 [ 1042.872050] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1042.877070] ? spurious_fault+0x840/0x840 [ 1042.881394] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1042.886241] ? page_fault+0x8/0x30 [ 1042.889782] page_fault+0x1e/0x30 [ 1042.897494] RIP: 0033:0x469240 [ 1042.900691] Code: Bad RIP value. [ 1042.904136] RSP: 002b:000000c0004b57f0 EFLAGS: 00010246 [ 1042.909497] RAX: 0000000000000000 RBX: 00000000000003e7 RCX: 0000000000469240 [ 1042.916774] RDX: 0000000000000080 RSI: 000000c0004b5840 RDI: 0000000000000003 [ 1042.924059] RBP: 000000c0004b5e40 R08: 0000000000000000 R09: 0000000000000000 [ 1042.931414] R10: 00000000000003e7 R11: 0000000000000246 R12: 0000000000000003 [ 1042.939915] R13: 000000c000314a80 R14: 000000f2bace08db R15: ffffffffffffffff [ 1042.955774] Mem-Info: [ 1042.958522] active_anon:121846 inactive_anon:23063 isolated_anon:0 [ 1042.958522] active_file:9 inactive_file:9 isolated_file:0 [ 1042.958522] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1042.958522] slab_reclaimable:13181 slab_unreclaimable:127403 [ 1042.958522] mapped:49191 shmem:23406 pagetables:959 bounce:0 [ 1042.958522] free:15161 free_pcp:355 free_cma:0 [ 1042.997369] Node 0 active_anon:486652kB inactive_anon:43364kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162596kB dirty:0kB writeback:0kB shmem:44472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1043.030617] Node 1 active_anon:732kB inactive_anon:48888kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14368kB dirty:0kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1043.065362] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1043.098907] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1043.103963] Node 0 DMA32 free:35168kB min:35996kB low:44992kB high:53988kB active_anon:486524kB inactive_anon:43364kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7680kB pagetables:3520kB bounce:0kB free_pcp:1504kB local_pcp:48kB free_cma:0kB [ 1043.146557] lowmem_reserve[]: 0 0 1 1 1 [ 1043.150641] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1043.187024] lowmem_reserve[]: 0 0 0 0 0 [ 1043.191109] Node 1 Normal free:27176kB min:53876kB low:67344kB high:80812kB active_anon:732kB inactive_anon:48888kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:192kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1043.304580] lowmem_reserve[]: 0 0 0 0 0 [ 1043.334518] Node 0 DMA: 2*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10864kB [ 1043.391781] Node 0 DMA32: 1354*4kB (UME) 1315*8kB (UME) 896*16kB (UME) 101*32kB (UM) 2*64kB (M) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 35168kB [ 1043.484868] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1043.574654] Node 1 Normal: 146*4kB (UME) 124*8kB (UME) 128*16kB (ME) 102*32kB (UM) 69*64kB (UME) 28*128kB (UME) 6*256kB (M) 1*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 1*4096kB (U) = 27176kB [ 1043.707740] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1043.744686] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1043.839467] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1043.877670] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1043.917162] 23424 total pagecache pages [ 1043.927297] 0 pages in swap cache [ 1043.987048] Swap cache stats: add 0, delete 0, find 0/0 [ 1044.017140] Free swap = 0kB [ 1044.037005] Total swap = 0kB [ 1044.077592] 2097051 pages RAM [ 1044.084437] 0 pages HighMem/MovableOnly [ 1044.106754] 369639 pages reserved [ 1044.114056] 0 pages cma reserved [ 1044.117463] Out of memory (oom_kill_allocating_task): Kill process 8151 (syz-fuzzer) score 0 or sacrifice child [ 1044.164300] Killed process 10048 (syz-executor.3) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 1044.190774] oom_reaper: reaped process 10048 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1047.461486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1047.480249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1047.495129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1047.501960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1047.517491] device bridge_slave_1 left promiscuous mode [ 1047.523991] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.537600] device bridge_slave_0 left promiscuous mode [ 1047.543159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.560776] device veth1_macvtap left promiscuous mode [ 1047.566097] device veth0_macvtap left promiscuous mode [ 1047.577803] device veth1_vlan left promiscuous mode [ 1047.582996] device veth0_vlan left promiscuous mode 21:49:44 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c000000000012000000000003000600000000000a000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:49:44 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1b3, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:49:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x7000000}, 0x0) 21:49:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x204c00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:49:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0x2, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) 21:49:45 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4800, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:49:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0x5421, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) [ 1049.697589] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1049.731652] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 21:49:45 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:49:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0x5450, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) [ 1049.794941] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1049.819556] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1049.836752] EXT4-fs (loop1): get root inode failed 21:49:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0x5451, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) [ 1049.850747] EXT4-fs (loop1): mount failed 21:49:45 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1b5, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 1049.936393] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1049.961236] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 21:49:45 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0x5452, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) [ 1050.020639] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1050.052932] EXT4-fs: failed to create workqueue [ 1050.085915] EXT4-fs (loop1): mount failed [ 1054.269473] device hsr_slave_1 left promiscuous mode [ 1054.278137] device hsr_slave_0 left promiscuous mode [ 1054.290935] team0 (unregistering): Port device team_slave_1 removed [ 1054.303823] team0 (unregistering): Port device team_slave_0 removed [ 1054.313690] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1054.324592] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1054.353885] bond0 (unregistering): Released all slaves [ 1054.365137] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1054.374930] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1054.390795] IPVS: ftp: loaded support on port[0] = 21 [ 1054.392478] IPVS: ftp: loaded support on port[0] = 21 [ 1054.599983] chnl_net:caif_netlink_parms(): no params data found [ 1054.659848] chnl_net:caif_netlink_parms(): no params data found [ 1054.872872] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.880898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.895691] device bridge_slave_0 entered promiscuous mode [ 1054.903845] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.916272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.924869] device bridge_slave_0 entered promiscuous mode [ 1054.938433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.944810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.959087] device bridge_slave_1 entered promiscuous mode [ 1054.965465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.977906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.985383] device bridge_slave_1 entered promiscuous mode [ 1055.043794] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1055.060147] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1055.074906] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1055.086355] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1055.147459] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1055.155201] team0: Port device team_slave_0 added [ 1055.166989] Bluetooth: hci3: command 0x0409 tx timeout [ 1055.183887] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1055.194032] team0: Port device team_slave_0 added [ 1055.205304] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1055.214163] team0: Port device team_slave_1 added [ 1055.225563] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1055.233490] team0: Port device team_slave_1 added [ 1055.267534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.273813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.301716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.327926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.334493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.361569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.373204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.379909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.405442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.416649] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1055.425361] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1055.433633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.440900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.472035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.498148] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1055.506368] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1055.518754] device hsr_slave_0 entered promiscuous mode [ 1055.525422] device hsr_slave_1 entered promiscuous mode [ 1055.544932] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1055.554948] device hsr_slave_0 entered promiscuous mode [ 1055.561334] device hsr_slave_1 entered promiscuous mode [ 1055.567919] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1055.588774] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1055.596329] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1055.728012] Bluetooth: hci5: command 0x0409 tx timeout [ 1055.774222] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1055.836555] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1055.872379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1055.890917] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1055.900446] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1055.910299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1055.918224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1055.930788] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1055.937098] 8021q: adding VLAN 0 to HW filter on device team0 [ 1055.955762] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1055.963279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1055.971931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1055.980694] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.987611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1055.995001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1056.192427] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1056.202523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1056.211190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1056.220257] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.226743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.331585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.340820] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1056.351715] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1056.360055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1056.368876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1056.381386] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1056.493547] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1056.500362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1056.509182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1056.519540] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1056.529420] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1056.536196] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1056.543825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1056.552221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1056.560924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1056.568307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1056.675412] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1056.686260] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1056.693498] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.700463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1056.710439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1056.721008] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1056.733809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1056.741742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1056.751081] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1056.759827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1056.768511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1056.776194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.782616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.791412] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1056.798187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1056.901313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1056.910427] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1056.921367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1056.931872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1056.940975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.947590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.955891] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1057.062330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1057.072985] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1057.083822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1057.092638] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1057.101134] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1057.110025] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1057.117492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1057.124184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1057.131801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1057.140189] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1057.152476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1057.256788] Bluetooth: hci3: command 0x041b tx timeout [ 1057.273638] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1057.281292] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1057.289113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1057.297734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1057.310006] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1057.319448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1057.330930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1057.445953] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1057.453130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1057.460903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1057.473058] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1057.585030] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1057.594111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1057.604011] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1057.612457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1057.621819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1057.738983] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1057.747255] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1057.754456] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1057.761901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1057.775797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1057.832808] Bluetooth: hci5: command 0x041b tx timeout [ 1057.903922] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1057.911675] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1057.919220] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1057.934947] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1057.943225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1057.952345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1057.962091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1057.969401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1057.978048] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1057.988462] device veth0_vlan entered promiscuous mode [ 1058.003888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1058.010882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.020818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1058.028511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.037537] device bridge_slave_1 left promiscuous mode [ 1058.043021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.051105] device bridge_slave_0 left promiscuous mode [ 1058.057616] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.067116] device veth1_macvtap left promiscuous mode [ 1058.072437] device veth0_macvtap left promiscuous mode [ 1058.078719] device veth1_vlan left promiscuous mode [ 1058.083859] device veth0_vlan left promiscuous mode [ 1059.326517] Bluetooth: hci3: command 0x040f tx timeout [ 1059.886822] Bluetooth: hci5: command 0x040f tx timeout [ 1061.406799] Bluetooth: hci3: command 0x0419 tx timeout [ 1061.973246] Bluetooth: hci5: command 0x0419 tx timeout [ 1062.508999] device hsr_slave_1 left promiscuous mode [ 1062.517753] device hsr_slave_0 left promiscuous mode [ 1062.535650] team0 (unregistering): Port device team_slave_1 removed [ 1062.553545] team0 (unregistering): Port device team_slave_0 removed [ 1062.564422] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1062.577613] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1062.611207] bond0 (unregistering): Released all slaves [ 1062.630031] device veth1_vlan entered promiscuous mode [ 1062.640838] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1062.650211] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1062.659490] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1062.668323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1062.678066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1062.696364] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1062.723186] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1062.732391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1062.744083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1062.754929] device veth0_macvtap entered promiscuous mode [ 1062.763153] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1062.773663] device veth1_macvtap entered promiscuous mode [ 1062.781512] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1062.800172] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1062.808704] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1062.817501] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1062.830619] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1062.838369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1062.853522] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1062.861620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1062.879953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1062.891432] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1062.901937] device veth0_vlan entered promiscuous mode [ 1062.911535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1062.923803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1062.938110] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1062.950150] device veth1_vlan entered promiscuous mode [ 1062.963679] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1062.972490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1062.991231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.004743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1063.021856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.032653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1063.048147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.060870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1063.078429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.092657] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1063.104608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1063.118888] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1063.126512] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1063.134229] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1063.149535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1063.161557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1063.176959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1063.194530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.205175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1063.220873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.231284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1063.247540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.261581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1063.274361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.287896] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1063.295122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1063.311272] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1063.319830] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1063.331119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1063.348296] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1063.357580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1063.367766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1063.380284] device veth0_macvtap entered promiscuous mode [ 1063.388665] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1063.409454] device veth1_macvtap entered promiscuous mode [ 1063.425304] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1063.444559] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1063.462720] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1063.472892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1063.483417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.495695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1063.514613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.529722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1063.541243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.555741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1063.572600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.582382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1063.593120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.605025] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1063.612516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1063.620943] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1063.629392] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1063.638045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1063.646796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1063.657616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1063.670353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.680837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1063.691225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.706138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1063.719378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.729956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1063.741457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.750785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1063.761195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.772294] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1063.779827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1063.787929] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1063.797628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1063.957531] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1063.964109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.978273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.987191] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1064.014077] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1064.024332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.045794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.060272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 21:49:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x8000000}, 0x0) 21:49:59 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0x5460, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) [ 1064.213300] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1064.235119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.263887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.280671] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1064.294199] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1064.302436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.319246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.331891] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 21:49:59 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000000017000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:49:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x206000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:49:59 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1b6, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:49:59 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4800, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:49:59 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0x40049409, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) 21:49:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0xe000000}, 0x0) 21:50:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0xf000000}, 0x0) 21:50:00 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0x4020940d, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) [ 1064.462871] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1064.480972] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1064.498509] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 21:50:00 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c000000000012000000000003000600000000002c000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:50:00 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0045878, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) [ 1064.529497] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1064.559796] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 21:50:00 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1b7, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:50:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x3c030000}, 0x0) 21:50:00 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c000000000012000000000003000600000000003f000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1064.619033] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1064.681774] EXT4-fs (loop1): get root inode failed [ 1064.718326] EXT4-fs (loop1): mount failed [ 1064.795138] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1064.810888] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1064.825206] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1064.837205] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1064.857657] EXT4-fs (loop1): get root inode failed [ 1064.864092] EXT4-fs (loop1): mount failed 21:50:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x206800, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:50:00 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0045878, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) [ 1064.958763] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1064.982809] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1065.000246] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1065.012068] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1065.027016] EXT4-fs (loop1): get root inode failed [ 1065.033498] EXT4-fs (loop1): mount failed [ 1065.080983] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1065.092827] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1065.106572] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1065.117800] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1065.132334] EXT4-fs (loop1): get root inode failed [ 1065.139528] EXT4-fs (loop1): mount failed 21:50:00 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4800, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:50:00 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000000063000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:50:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x60000000}, 0x0) 21:50:00 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1b8, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:50:00 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0189436, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) 21:50:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x206c00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:50:00 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0205647, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) 21:50:00 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c000000000012000000000003000600007fffffff000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1065.268158] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 21:50:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x9effffff}, 0x0) [ 1065.315769] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1065.344973] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 21:50:00 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0205649, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) [ 1065.366294] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1065.391771] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated 21:50:01 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1b9, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 1065.410848] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 21:50:01 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000020002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1065.464335] EXT4-fs (loop1): get root inode failed [ 1065.522227] EXT4-fs (loop1): mount failed [ 1065.587067] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1065.597019] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1065.617690] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1065.635116] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1065.649887] EXT4-fs (loop1): get root inode failed [ 1065.656384] EXT4-fs (loop1): mount failed 21:50:01 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4800, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:50:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0xf0ffffff}, 0x0) 21:50:01 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc020660b, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) 21:50:01 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000030002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:50:01 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1ba, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:50:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x207400, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:50:01 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0285628, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) [ 1066.122215] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 21:50:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0xfffff000}, 0x0) [ 1066.189524] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 21:50:01 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000040002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:50:01 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1bb, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 1066.266140] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1066.271513] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 21:50:01 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0285629, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) [ 1066.305494] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated 21:50:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 1066.363305] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1066.371129] EXT4-fs (loop1): get root inode failed [ 1066.384958] EXT4-fs (loop1): mount failed [ 1066.420495] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1066.462676] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1066.516891] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1066.531436] EXT4-fs: failed to create workqueue [ 1066.537062] EXT4-fs (loop1): mount failed 21:50:02 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4800, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:50:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0xffffff9e}, 0x0) 21:50:02 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000050002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:50:02 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0585609, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) 21:50:02 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1bc, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:50:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x207a00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:50:02 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) [ 1067.041730] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1067.069326] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 21:50:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0xfffffff0}, 0x0) 21:50:02 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000060002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1067.109066] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1067.147052] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 21:50:02 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1bd, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:50:02 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0585611, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) [ 1067.171602] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1067.186917] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated 21:50:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x3000000000000}, 0x0) [ 1067.233602] EXT4-fs (loop1): get root inode failed [ 1067.269617] EXT4-fs (loop1): mount failed [ 1067.351775] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1067.362941] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1067.385176] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1067.404653] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1067.435173] EXT4-fs (loop1): get root inode failed [ 1067.445351] EXT4-fs (loop1): mount failed 21:50:03 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4800, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:50:03 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000070002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:50:03 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1be, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:50:03 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc058565d, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) 21:50:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x40030000000000}, 0x0) 21:50:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20c003, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) [ 1067.884461] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1067.917454] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 21:50:03 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc1005667, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) 21:50:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) [ 1067.932776] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1067.974324] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1067.985388] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1067.997844] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1068.014206] EXT4-fs (loop1): get root inode failed [ 1068.031439] EXT4-fs (loop1): mount failed 21:50:03 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000080002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:50:03 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1bf, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:50:03 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) 21:50:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x100000000000000}, 0x0) [ 1068.120641] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1068.149565] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1068.180093] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1068.208707] EXT4-fs: failed to create workqueue [ 1068.220032] EXT4-fs (loop1): mount failed 21:50:04 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4800, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:50:04 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000090002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:50:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x200000000000000}, 0x0) 21:50:04 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:50:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20de03, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) [ 1068.741760] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1068.768399] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 21:50:04 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000480002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:50:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x300000000000000}, 0x0) [ 1068.806948] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 21:50:04 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1c1, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 1068.888860] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated 21:50:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x400000000000000}, 0x0) 21:50:04 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c00000000001200000000000300060000004c0002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1068.935161] EXT4-fs (loop1): get root inode failed [ 1068.955238] EXT4-fs (loop1): mount failed [ 1069.077799] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1069.124187] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1069.165840] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1069.187918] EXT4-fs: failed to create workqueue [ 1069.200975] EXT4-fs (loop1): mount failed [ 1073.121424] oom_reaper: reaped process 12056 (syz-executor.5), now anon-rss:0kB, file-rss:33804kB, shmem-rss:0kB [ 1073.223950] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1073.237406] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1073.242538] CPU: 0 PID: 8131 Comm: syz-fuzzer Not tainted 4.19.163-syzkaller #0 [ 1073.250327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1073.259675] Call Trace: [ 1073.262266] dump_stack+0x1fc/0x2fe [ 1073.265888] dump_header+0x15d/0xc3f [ 1073.269589] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1073.274671] ? ___ratelimit+0x319/0x584 [ 1073.278633] oom_kill_process.cold+0x10/0x692 [ 1073.283250] ? check_preemption_disabled+0x41/0x280 [ 1073.288257] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1073.293520] out_of_memory+0x1072/0x1390 [ 1073.297620] ? oom_killer_disable+0x270/0x270 [ 1073.302214] ? mutex_trylock+0x15f/0x1a0 [ 1073.306272] __alloc_pages_nodemask+0x23a2/0x2890 [ 1073.311105] ? find_get_entry+0x4cd/0x8a0 [ 1073.315247] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1073.320085] alloc_pages_current+0x193/0x2a0 [ 1073.325000] filemap_fault+0x146e/0x2180 [ 1073.329582] ext4_filemap_fault+0x84/0xb0 [ 1073.335023] __do_fault+0x10b/0x4b0 [ 1073.338649] __handle_mm_fault+0x273b/0x41c0 [ 1073.343303] ? vm_insert_page+0x9c0/0x9c0 [ 1073.347531] ? check_preemption_disabled+0x41/0x280 [ 1073.352557] handle_mm_fault+0x436/0xb10 [ 1073.356604] __do_page_fault+0x68e/0xd60 [ 1073.360656] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1073.366363] ? spurious_fault+0x840/0x840 [ 1073.370753] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1073.376281] ? page_fault+0x8/0x30 [ 1073.379801] page_fault+0x1e/0x30 [ 1073.383235] RIP: 0033:0x430dd4 [ 1073.386515] Code: Bad RIP value. [ 1073.389867] RSP: 002b:000000c00004de88 EFLAGS: 00010202 [ 1073.395218] RAX: ffffffffffffff92 RBX: 000000002932a5da RCX: 0000000000469093 [ 1073.402473] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001b36f58 [ 1073.409809] RBP: 000000c00004dec8 R08: 0000000000000000 R09: 0000000000000000 [ 1073.417057] R10: 000000c00004deb8 R11: 0000000000000202 R12: 0000000000439470 [ 1073.424303] R13: 0000000000000000 R14: 0000000000b81a70 R15: 0000000000000000 [ 1073.444264] syz-executor.5: vmalloc: allocation failure, allocated 1818038272 of 3621613568 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1073.444399] Mem-Info: [ 1073.464943] active_anon:122781 inactive_anon:23063 isolated_anon:0 [ 1073.464943] active_file:10 inactive_file:12 isolated_file:0 [ 1073.464943] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1073.464943] slab_reclaimable:13120 slab_unreclaimable:124709 [ 1073.464943] mapped:53012 shmem:23405 pagetables:998 bounce:0 [ 1073.464943] free:13890 free_pcp:124 free_cma:0 [ 1073.467654] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1073.499391] Node 0 active_anon:490408kB inactive_anon:43364kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:197396kB dirty:0kB writeback:0kB shmem:44468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 153600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1073.516339] CPU: 0 PID: 12056 Comm: syz-executor.5 Not tainted 4.19.163-syzkaller #0 [ 1073.532319] Node 1 active_anon:716kB inactive_anon:48888kB active_file:8kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14652kB dirty:0kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1073.540075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1073.540080] Call Trace: [ 1073.540101] dump_stack+0x1fc/0x2fe [ 1073.540119] warn_alloc.cold+0x7b/0x18f [ 1073.570176] Node 0 DMA free:10880kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1073.579506] ? zone_watermark_ok_safe+0x260/0x260 [ 1073.579525] ? retint_kernel+0x2d/0x2d [ 1073.582084] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1073.585809] __vmalloc_area_node+0x4fd/0x780 [ 1073.585829] ? __vmalloc_node_range+0x180/0x180 [ 1073.589775] Node 0 DMA32 free:17832kB min:35996kB low:44992kB high:53988kB active_anon:490408kB inactive_anon:43364kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7872kB pagetables:3844kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1073.616750] ? _raw_spin_unlock+0x29/0x40 [ 1073.616762] ? __get_vm_area_node+0x2e2/0x3a0 [ 1073.616780] __vmalloc_node_range+0xed/0x180 [ 1073.621615] lowmem_reserve[]: 0 0 1 1 1 [ 1073.625503] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1073.625517] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1073.625529] vmalloc_user+0x70/0xe0 [ 1073.625540] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1073.625556] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1073.630588] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1073.635004] __vb2_queue_alloc+0x472/0xe60 [ 1073.635030] vb2_core_create_bufs+0x273/0x7e0 [ 1073.635050] ? __vb2_queue_free+0x870/0x870 [ 1073.640846] lowmem_reserve[]: 0 0 0 0 0 [ 1073.671051] ? __mutex_add_waiter+0x160/0x160 [ 1073.671072] vb2_create_bufs+0x332/0x620 [ 1073.671088] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1073.671106] ? __video_do_ioctl+0x632/0xcd0 [ 1073.675275] Node 1 Normal free:26836kB min:53876kB low:67344kB high:80812kB active_anon:716kB inactive_anon:48888kB active_file:8kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:192kB pagetables:148kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1073.680595] ? __mutex_add_waiter+0x160/0x160 [ 1073.687219] lowmem_reserve[]: 0 0 0 0 0 [ 1073.691148] ? mark_held_locks+0xf0/0xf0 [ 1073.699408] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10880kB [ 1073.704728] vb2_ioctl_create_bufs+0x20d/0x360 [ 1073.708337] Node 0 DMA32: 1217*4kB (UME) 993*8kB (UME) 196*16kB (UME) 67*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18092kB [ 1073.712627] ? memset+0x20/0x40 [ 1073.716778] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1073.743134] v4l_create_bufs+0xb2/0x160 [ 1073.743151] __video_do_ioctl+0x49a/0xcd0 [ 1073.743170] ? v4l_querycap+0x340/0x340 [ 1073.743186] ? __might_fault+0x192/0x1d0 [ 1073.747427] Node 1 Normal: 145*4kB (UME) 122*8kB (ME) 128*16kB (UME) 101*32kB (UM) 67*64kB (ME) 27*128kB (UME) 6*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 1*4096kB (U) = 26868kB [ 1073.751981] video_usercopy+0x13c/0x1000 [ 1073.756308] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1073.760805] ? v4l_querycap+0x340/0x340 [ 1073.765340] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1073.769334] ? v4l_enumstd+0x60/0x60 [ 1073.774413] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1073.780722] ? mark_held_locks+0xf0/0xf0 [ 1073.780737] ? do_futex+0x163/0x1c70 [ 1073.780755] ? mark_held_locks+0xf0/0xf0 [ 1073.809992] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1073.814444] ? mark_held_locks+0xf0/0xf0 [ 1073.818423] 23435 total pagecache pages [ 1073.822452] ? debug_check_no_obj_freed+0x201/0x482 [ 1073.834763] 0 pages in swap cache [ 1073.839315] ? video_usercopy+0x1000/0x1000 [ 1073.839330] v4l2_ioctl+0x147/0x1a0 [ 1073.852936] Swap cache stats: add 0, delete 0, find 0/0 [ 1073.856207] ? video_devdata+0xa0/0xa0 [ 1073.856222] do_vfs_ioctl+0xcdb/0x12e0 [ 1073.856243] ? lock_downgrade+0x720/0x720 [ 1073.867940] Free swap = 0kB [ 1073.871874] ? check_preemption_disabled+0x41/0x280 [ 1073.876108] Total swap = 0kB [ 1073.880052] ? ioctl_preallocate+0x200/0x200 [ 1073.884092] 2097051 pages RAM [ 1073.900850] ? __fget+0x356/0x510 [ 1073.900865] ? do_dup2+0x450/0x450 [ 1073.900887] ksys_ioctl+0x9b/0xc0 [ 1073.900903] __x64_sys_ioctl+0x6f/0xb0 [ 1073.904989] 0 pages HighMem/MovableOnly [ 1073.913806] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1073.917810] 369639 pages reserved [ 1073.926464] do_syscall_64+0xf9/0x620 [ 1073.926482] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1073.926493] RIP: 0033:0x45e159 [ 1073.926516] Code: Bad RIP value. [ 1073.930217] 0 pages cma reserved [ 1073.939043] RSP: 002b:00007f97906a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1073.939056] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e159 [ 1073.939063] RDX: 0000000020000340 RSI: 00000000c100565c RDI: 0000000000000003 [ 1073.939069] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1073.939076] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1073.939083] R13: 00007ffc100b0f6f R14: 00007f97906a39c0 R15: 000000000119bf8c [ 1073.950178] Mem-Info: [ 1073.954111] Out of memory (oom_kill_allocating_task): Kill process 8131 (syz-fuzzer) score 0 or sacrifice child [ 1073.960882] active_anon:122781 inactive_anon:23063 isolated_anon:0 [ 1073.960882] active_file:10 inactive_file:12 isolated_file:0 [ 1073.960882] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1073.960882] slab_reclaimable:13120 slab_unreclaimable:124709 [ 1073.960882] mapped:53012 shmem:23405 pagetables:998 bounce:0 [ 1073.960882] free:13890 free_pcp:186 free_cma:0 [ 1073.981417] Killed process 8498 (syz-executor.1) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 1073.984814] Node 0 active_anon:490408kB inactive_anon:43364kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:197396kB dirty:0kB writeback:0kB shmem:44468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 153600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1074.028025] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1074.037177] Node 1 active_anon:716kB inactive_anon:48888kB active_file:8kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14652kB dirty:0kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1074.052224] in:imklog cpuset=/ mems_allowed=0-1 [ 1074.060325] Node 0 DMA free:10880kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1074.067933] CPU: 1 PID: 11194 Comm: in:imklog Not tainted 4.19.163-syzkaller #0 [ 1074.078618] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1074.082189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1074.089495] Node 0 DMA32 free:19032kB min:35996kB low:44992kB high:53988kB active_anon:488580kB inactive_anon:43364kB active_file:40kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7840kB pagetables:3596kB bounce:0kB free_pcp:1608kB local_pcp:248kB free_cma:0kB [ 1074.096701] Call Trace: [ 1074.096726] dump_stack+0x1fc/0x2fe [ 1074.096743] dump_header+0x15d/0xc3f [ 1074.096756] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1074.096767] ? ___ratelimit+0x319/0x584 [ 1074.096784] oom_kill_process.cold+0x10/0x692 [ 1074.104833] lowmem_reserve[]: 0 0 1 1 1 [ 1074.111365] ? check_preemption_disabled+0x41/0x280 [ 1074.113840] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1074.124234] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1074.124263] out_of_memory+0x1072/0x1390 [ 1074.124282] ? oom_killer_disable+0x270/0x270 [ 1074.124298] ? mutex_trylock+0x15f/0x1a0 [ 1074.124333] __alloc_pages_nodemask+0x23a2/0x2890 [ 1074.166443] lowmem_reserve[]: 0 0 0 0 0 [ 1074.171698] ? find_get_entry+0x4cd/0x8a0 [ 1074.208593] Node 1 Normal free:26932kB min:53876kB low:67344kB high:80812kB active_anon:728kB inactive_anon:48888kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:192kB pagetables:148kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1074.214926] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1074.214961] alloc_pages_current+0x193/0x2a0 [ 1074.214981] filemap_fault+0x146e/0x2180 [ 1074.247832] lowmem_reserve[]: 0 0 0 0 0 [ 1074.273631] ext4_filemap_fault+0x84/0xb0 [ 1074.273648] __do_fault+0x10b/0x4b0 [ 1074.273662] __handle_mm_fault+0x273b/0x41c0 [ 1074.273676] ? vm_insert_page+0x9c0/0x9c0 [ 1074.273688] ? lock_downgrade+0x720/0x720 [ 1074.273709] ? check_preemption_disabled+0x41/0x280 [ 1074.284611] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10880kB [ 1074.286532] handle_mm_fault+0x436/0xb10 [ 1074.286554] __do_page_fault+0x68e/0xd60 [ 1074.286574] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1074.286585] ? spurious_fault+0x840/0x840 [ 1074.286597] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1074.286612] ? page_fault+0x8/0x30 [ 1074.286627] page_fault+0x1e/0x30 [ 1074.300299] Node 0 DMA32: 1228*4kB (UME) 1004*8kB (UME) 209*16kB (UME) 75*32kB (UM) 0*64kB 1*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19072kB [ 1074.328059] RIP: 0033:0x7fd62b64122d [ 1074.328083] Code: Bad RIP value. [ 1074.328089] RSP: 002b:00007fd628fdd580 EFLAGS: 00010293 [ 1074.328098] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007fd62b64122d [ 1074.328104] RDX: 0000000000001fa0 RSI: 00007fd628fddda0 RDI: 0000000000000004 [ 1074.328110] RBP: 000055b84eaf99d0 R08: 0000000000000000 R09: 0000000000000000 [ 1074.328117] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007fd628fddda0 [ 1074.328123] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007fd628fdde06 [ 1074.334680] Mem-Info: [ 1074.351828] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1074.357774] active_anon:122327 inactive_anon:23063 isolated_anon:0 [ 1074.357774] active_file:9 inactive_file:9 isolated_file:0 [ 1074.357774] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1074.357774] slab_reclaimable:13120 slab_unreclaimable:124672 [ 1074.357774] mapped:44308 shmem:23405 pagetables:936 bounce:0 [ 1074.357774] free:14841 free_pcp:443 free_cma:0 [ 1074.380139] Node 1 Normal: 145*4kB (UME) 122*8kB (ME) 128*16kB (UME) 103*32kB (UM) 67*64kB (ME) 27*128kB (UME) 6*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 1*4096kB (U) = 26932kB [ 1074.395963] Node 0 active_anon:488580kB inactive_anon:43364kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162580kB dirty:0kB writeback:0kB shmem:44468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1074.406779] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1074.416547] Node 1 active_anon:728kB inactive_anon:48888kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14652kB dirty:0kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1074.428670] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1074.460792] Node 0 DMA free:10880kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1074.483535] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1074.499991] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1074.516185] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1074.536919] Node 0 DMA32 free:31872kB min:35996kB low:44992kB high:53988kB active_anon:488580kB inactive_anon:43364kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7840kB pagetables:3596kB bounce:0kB free_pcp:2568kB local_pcp:1264kB free_cma:0kB [ 1074.560764] 23423 total pagecache pages [ 1074.625893] lowmem_reserve[]: 0 0 1 1 1 [ 1074.654520] 0 pages in swap cache [ 1074.807268] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1075.012099] lowmem_reserve[]: 0 0 0 0 0 [ 1075.019341] Node 1 Normal free:26932kB min:53876kB low:67344kB high:80812kB active_anon:728kB inactive_anon:48888kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:192kB pagetables:148kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1075.029715] Swap cache stats: add 0, delete 0, find 0/0 [ 1075.110710] Free swap = 0kB [ 1075.113756] Total swap = 0kB [ 1075.117606] lowmem_reserve[]: 0 0 0 0 0 [ 1075.119072] 2097051 pages RAM [ 1075.121796] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10880kB [ 1075.136881] 0 pages HighMem/MovableOnly [ 1075.141318] 369639 pages reserved [ 1075.168173] 0 pages cma reserved [ 1075.197925] Node 0 DMA32: 1277*4kB (UME) 2335*8kB (UME) 228*16kB (UME) 99*32kB (UM) 0*64kB 0*128kB 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 31884kB [ 1075.226925] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1075.242839] Node 1 Normal: 145*4kB (UME) 122*8kB (ME) 128*16kB (UME) 103*32kB (UM) 67*64kB (ME) 27*128kB (UME) 6*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 1*4096kB (U) = 26932kB [ 1075.293066] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1075.305288] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1075.320540] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1075.330595] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1075.345678] 23867 total pagecache pages [ 1075.349876] 0 pages in swap cache [ 1075.353329] Swap cache stats: add 0, delete 0, find 0/0 [ 1075.362615] Free swap = 0kB [ 1075.367741] Total swap = 0kB [ 1075.370869] 2097051 pages RAM [ 1075.374607] 0 pages HighMem/MovableOnly [ 1075.382938] 369639 pages reserved [ 1075.388160] 0 pages cma reserved [ 1075.391560] Out of memory (oom_kill_allocating_task): Kill process 11194 (in:imklog) score 0 or sacrifice child [ 1075.410364] Killed process 11188 (rsyslogd) total-vm:254332kB, anon-rss:512kB, file-rss:0kB, shmem-rss:0kB [ 1075.426038] oom_reaper: reaped process 11188 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1078.297688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1078.317913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1078.333340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1078.340965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1078.355890] device bridge_slave_1 left promiscuous mode [ 1078.361426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.375840] device bridge_slave_0 left promiscuous mode [ 1078.381371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.397820] device veth1_macvtap left promiscuous mode [ 1078.403164] device veth0_macvtap left promiscuous mode [ 1078.414835] device veth1_vlan left promiscuous mode [ 1078.419925] device veth0_vlan left promiscuous mode 21:50:16 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x2, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) 21:50:16 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4800, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:50:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x700000000000000}, 0x0) 21:50:16 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000680002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:50:16 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1c2, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:50:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20f80f, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:50:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x800000000000000}, 0x0) 21:50:17 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1c3, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:50:17 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c00000000001200000000000300060000006c0002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:50:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0xe00000000000000}, 0x0) 21:50:17 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000740002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:50:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0xf00000000000000}, 0x0) [ 1086.772793] device hsr_slave_1 left promiscuous mode [ 1086.788166] device hsr_slave_0 left promiscuous mode [ 1086.813351] team0 (unregistering): Port device team_slave_1 removed [ 1086.830955] team0 (unregistering): Port device team_slave_0 removed [ 1086.850231] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1086.867902] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1086.922811] bond0 (unregistering): Released all slaves [ 1086.949031] nla_parse: 2 callbacks suppressed [ 1086.949040] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1086.977534] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1086.994525] IPVS: ftp: loaded support on port[0] = 21 [ 1087.243598] Bluetooth: hci2: command 0x0409 tx timeout [ 1087.294770] chnl_net:caif_netlink_parms(): no params data found [ 1087.491477] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.518031] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.539648] device bridge_slave_0 entered promiscuous mode [ 1087.560057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.579220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.604688] device bridge_slave_1 entered promiscuous mode [ 1087.650022] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1087.675706] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1087.717561] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1087.734540] team0: Port device team_slave_0 added [ 1087.740369] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1087.748404] team0: Port device team_slave_1 added [ 1087.769836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1087.777391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1087.803546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1087.815717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1087.822005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1087.847788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1087.860693] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1087.874386] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1087.899546] device hsr_slave_0 entered promiscuous mode [ 1087.906771] device hsr_slave_1 entered promiscuous mode [ 1087.924436] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1087.932003] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1088.102030] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1088.200894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1088.223328] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1088.233298] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1088.245431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1088.253011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1088.267705] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1088.278173] 8021q: adding VLAN 0 to HW filter on device team0 [ 1088.290641] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1088.301913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1088.317186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1088.327768] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.334218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1088.371586] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1088.379266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1088.394041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1088.402075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1088.416945] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.423334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1088.439449] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1088.447158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1088.465654] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1088.474486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1088.493785] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1088.505363] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1088.512515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1088.522650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1088.541638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1088.550559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1088.567342] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1088.577185] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1088.586645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1088.599825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1088.615431] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1088.624847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1088.635474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1088.644276] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1088.650530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1088.683157] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1088.692390] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1088.707378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1088.717137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1088.735708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1088.756922] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1088.786068] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1088.793305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1088.801811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1088.905680] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1088.913068] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1088.926023] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1088.941198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1088.950467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1088.962973] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1088.974723] device veth0_vlan entered promiscuous mode [ 1088.988412] device veth1_vlan entered promiscuous mode [ 1089.007083] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1089.018930] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1089.027654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1089.038913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1089.050732] device veth0_macvtap entered promiscuous mode [ 1089.058315] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1089.068399] device veth1_macvtap entered promiscuous mode [ 1089.076083] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1089.087469] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1089.098937] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1089.109666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1089.121187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.131413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1089.141873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.151855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1089.162477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.172429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1089.183688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.192956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1089.204059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.215859] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1089.222870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1089.231600] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1089.240149] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1089.248524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1089.257155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1089.268323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1089.281162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.291454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1089.302501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.312379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1089.323195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.332909] Bluetooth: hci2: command 0x041b tx timeout [ 1089.338930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1089.350080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.359957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1089.370394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.381893] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1089.389853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1089.397982] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1089.407570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1089.655777] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1089.662455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.688828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.722622] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1089.739310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1089.748934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.762711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.771074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1089.861475] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1089.886089] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1089.899046] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1089.915145] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1089.932735] EXT4-fs (loop1): get root inode failed [ 1089.939277] EXT4-fs (loop1): mount failed [ 1090.002147] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1090.023037] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1090.077144] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1090.127877] EXT4-fs: failed to create workqueue [ 1090.159682] EXT4-fs (loop1): mount failed [ 1090.690183] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1090.711465] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1090.720351] CPU: 0 PID: 8131 Comm: syz-fuzzer Not tainted 4.19.163-syzkaller #0 [ 1090.727818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1090.737162] Call Trace: [ 1090.739887] dump_stack+0x1fc/0x2fe [ 1090.743506] dump_header+0x15d/0xc3f [ 1090.747207] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1090.752394] ? ___ratelimit+0x319/0x584 [ 1090.756355] oom_kill_process.cold+0x10/0x692 [ 1090.761022] ? check_preemption_disabled+0x41/0x280 [ 1090.766065] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1090.771460] out_of_memory+0x1072/0x1390 [ 1090.775553] ? oom_killer_disable+0x270/0x270 [ 1090.780046] ? mutex_trylock+0x15f/0x1a0 [ 1090.784123] __alloc_pages_nodemask+0x23a2/0x2890 [ 1090.788975] ? find_get_entry+0x4cd/0x8a0 [ 1090.793134] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1090.797987] alloc_pages_current+0x193/0x2a0 [ 1090.802397] filemap_fault+0x146e/0x2180 [ 1090.806710] ext4_filemap_fault+0x84/0xb0 [ 1090.811967] __do_fault+0x10b/0x4b0 [ 1090.815884] __handle_mm_fault+0x273b/0x41c0 [ 1090.820305] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1090.825512] ? vm_insert_page+0x9c0/0x9c0 [ 1090.830054] ? check_preemption_disabled+0x41/0x280 [ 1090.836150] handle_mm_fault+0x436/0xb10 [ 1090.840214] __do_page_fault+0x68e/0xd60 [ 1090.844337] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1090.849347] ? spurious_fault+0x840/0x840 [ 1090.853630] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1090.858491] ? page_fault+0x8/0x30 [ 1090.862017] page_fault+0x1e/0x30 [ 1090.865470] RIP: 0033:0x468a8d [ 1090.868659] Code: Bad RIP value. [ 1090.872009] RSP: 002b:000000c00004df18 EFLAGS: 00010202 [ 1090.877354] RAX: 0000000000000000 RBX: 0000000000004e20 RCX: 0000000000468a8d [ 1090.884796] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c00004df18 [ 1090.892053] RBP: 000000c00004df28 R08: 00000000000d2e11 R09: 00000124fb5873ac [ 1090.899392] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000439470 [ 1090.906658] R13: 0000000000000000 R14: 0000000000b81a70 R15: 0000000000000000 [ 1090.927714] Mem-Info: [ 1090.930185] active_anon:123155 inactive_anon:23091 isolated_anon:0 [ 1090.930185] active_file:62 inactive_file:123 isolated_file:27 [ 1090.930185] unevictable:0 dirty:6 writeback:0 unstable:0 [ 1090.930185] slab_reclaimable:13072 slab_unreclaimable:122215 [ 1090.930185] mapped:53149 shmem:23433 pagetables:1047 bounce:0 [ 1090.930185] free:25136 free_pcp:137 free_cma:0 [ 1090.969422] Node 0 active_anon:491532kB inactive_anon:43440kB active_file:220kB inactive_file:228kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:174892kB dirty:20kB writeback:0kB shmem:44532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 155648kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1090.998001] Node 1 active_anon:1088kB inactive_anon:48924kB active_file:28kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37804kB dirty:4kB writeback:0kB shmem:49200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1091.028513] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1091.057910] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1091.062986] Node 0 DMA32 free:35808kB min:35996kB low:44992kB high:53988kB active_anon:491732kB inactive_anon:43440kB active_file:112kB inactive_file:100kB unevictable:0kB writepending:20kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7840kB pagetables:3692kB bounce:0kB free_pcp:648kB local_pcp:0kB free_cma:0kB [ 1091.118953] lowmem_reserve[]: 0 0 1 1 1 [ 1091.122979] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1091.164852] lowmem_reserve[]: 0 0 0 0 0 [ 1091.169042] Node 1 Normal free:53792kB min:53876kB low:67344kB high:80812kB active_anon:972kB inactive_anon:48920kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:296kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1091.276007] lowmem_reserve[]: 0 0 0 0 0 [ 1091.280816] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10980kB [ 1091.356512] Node 0 DMA32: 1255*4kB (ME) 1664*8kB (UME) 526*16kB (UME) 173*32kB (UME) 58*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36124kB [ 1091.403452] Bluetooth: hci2: command 0x040f tx timeout [ 1091.417043] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1091.430545] Node 1 Normal: 154*4kB (UME) 82*8kB (UME) 130*16kB (UME) 102*32kB (UM) 65*64kB (ME) 26*128kB (ME) 4*256kB (M) 2*512kB (UM) 1*1024kB (U) 0*2048kB 9*4096kB (UM) = 54040kB [ 1091.478311] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1091.528875] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1091.568156] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1091.606837] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1091.642117] 23435 total pagecache pages [ 1091.656801] 0 pages in swap cache [ 1091.660313] Swap cache stats: add 0, delete 0, find 0/0 [ 1091.676229] Free swap = 0kB [ 1091.679284] Total swap = 0kB [ 1091.682327] 2097051 pages RAM [ 1091.685522] 0 pages HighMem/MovableOnly [ 1091.689524] 369639 pages reserved [ 1091.692988] 0 pages cma reserved [ 1091.715331] Out of memory (oom_kill_allocating_task): Kill process 8131 (syz-fuzzer) score 0 or sacrifice child [ 1091.758405] Killed process 12192 (syz-executor.1) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 1091.946999] oom_reaper: reaped process 12149 (syz-executor.5), now anon-rss:0kB, file-rss:33804kB, shmem-rss:0kB [ 1091.968478] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1091.989663] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1092.010223] CPU: 1 PID: 8151 Comm: syz-fuzzer Not tainted 4.19.163-syzkaller #0 [ 1092.017860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1092.027332] Call Trace: [ 1092.029936] dump_stack+0x1fc/0x2fe [ 1092.033577] dump_header+0x15d/0xc3f [ 1092.037397] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1092.042769] ? ___ratelimit+0x319/0x584 [ 1092.046929] oom_kill_process.cold+0x10/0x692 [ 1092.051515] ? check_preemption_disabled+0x41/0x280 [ 1092.056544] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1092.061846] out_of_memory+0x1072/0x1390 [ 1092.065958] ? oom_killer_disable+0x270/0x270 [ 1092.071077] ? mutex_trylock+0x15f/0x1a0 [ 1092.075160] __alloc_pages_nodemask+0x23a2/0x2890 [ 1092.080026] ? find_get_entry+0x4cd/0x8a0 [ 1092.084188] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1092.089065] alloc_pages_current+0x193/0x2a0 [ 1092.093479] filemap_fault+0x146e/0x2180 [ 1092.097650] ext4_filemap_fault+0x84/0xb0 [ 1092.101805] __do_fault+0x10b/0x4b0 [ 1092.105437] __handle_mm_fault+0x273b/0x41c0 [ 1092.109889] ? vm_insert_page+0x9c0/0x9c0 [ 1092.114155] ? check_preemption_disabled+0x41/0x280 [ 1092.119175] handle_mm_fault+0x436/0xb10 [ 1092.123244] __do_page_fault+0x68e/0xd60 [ 1092.127749] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1092.133207] ? spurious_fault+0x840/0x840 [ 1092.137359] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1092.142207] ? page_fault+0x8/0x30 [ 1092.145747] page_fault+0x1e/0x30 [ 1092.149197] RIP: 0033:0x464f20 [ 1092.152397] Code: Bad RIP value. [ 1092.155756] RSP: 002b:000000c00089b230 EFLAGS: 00010246 [ 1092.161344] RAX: 0000000000ae0280 RBX: 0000000000000000 RCX: 000000c0004aa780 [ 1092.168616] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 1092.174357] syz-executor.5: vmalloc: allocation failure, allocated 1830039552 of 3621613568 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1092.175881] RBP: 000000c00089b248 R08: 0000000000000001 R09: 0000000000000000 [ 1092.175892] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 1092.204211] R13: 000000c000314a80 R14: 000000fde7d3e8db R15: 0000000000000000 [ 1092.226761] Mem-Info: [ 1092.229226] active_anon:122565 inactive_anon:23091 isolated_anon:0 [ 1092.229226] active_file:1 inactive_file:1 isolated_file:0 [ 1092.229226] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1092.229226] slab_reclaimable:13064 slab_unreclaimable:122198 [ 1092.229226] mapped:53063 shmem:23433 pagetables:973 bounce:0 [ 1092.229226] free:13898 free_pcp:63 free_cma:0 [ 1092.232809] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1092.277785] Node 0 active_anon:489304kB inactive_anon:43444kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174508kB dirty:0kB writeback:0kB shmem:44536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1092.282159] CPU: 1 PID: 12149 Comm: syz-executor.5 Not tainted 4.19.163-syzkaller #0 [ 1092.313382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1092.316914] Node 1 active_anon:956kB inactive_anon:48920kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37744kB dirty:0kB writeback:0kB shmem:49196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1092.324136] Call Trace: [ 1092.324157] dump_stack+0x1fc/0x2fe [ 1092.324174] warn_alloc.cold+0x7b/0x18f [ 1092.324190] ? zone_watermark_ok_safe+0x260/0x260 [ 1092.324201] ? retint_kernel+0x2d/0x2d [ 1092.324222] ? policy_node+0x116/0x140 [ 1092.324245] __vmalloc_area_node+0x4fd/0x780 [ 1092.363611] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1092.366175] ? __vmalloc_node_range+0x180/0x180 [ 1092.370046] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1092.373939] ? _raw_spin_unlock+0x29/0x40 [ 1092.373953] ? __get_vm_area_node+0x2e2/0x3a0 [ 1092.373970] __vmalloc_node_range+0xed/0x180 [ 1092.373986] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1092.373999] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1092.374010] vmalloc_user+0x70/0xe0 [ 1092.374024] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1092.374038] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1092.374058] __vb2_queue_alloc+0x472/0xe60 [ 1092.388715] Node 0 DMA32 free:17912kB min:35996kB low:44992kB high:53988kB active_anon:489304kB inactive_anon:43444kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7776kB pagetables:3644kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1092.406265] vb2_core_create_bufs+0x273/0x7e0 [ 1092.406282] ? __vb2_queue_free+0x870/0x870 [ 1092.406300] ? __mutex_add_waiter+0x160/0x160 [ 1092.406320] vb2_create_bufs+0x332/0x620 [ 1092.406338] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1092.406352] ? __video_do_ioctl+0x632/0xcd0 [ 1092.406365] ? __mutex_add_waiter+0x160/0x160 [ 1092.406378] ? mark_held_locks+0xf0/0xf0 [ 1092.406396] vb2_ioctl_create_bufs+0x20d/0x360 [ 1092.421060] lowmem_reserve[]: 0 0 1 1 1 [ 1092.424726] ? memset+0x20/0x40 [ 1092.424749] v4l_create_bufs+0xb2/0x160 [ 1092.424778] __video_do_ioctl+0x49a/0xcd0 [ 1092.424801] ? v4l_querycap+0x340/0x340 [ 1092.424828] ? __might_fault+0x192/0x1d0 [ 1092.429250] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1092.433538] video_usercopy+0x13c/0x1000 [ 1092.433554] ? v4l_querycap+0x340/0x340 [ 1092.433569] ? v4l_enumstd+0x60/0x60 [ 1092.433582] ? mark_held_locks+0xf0/0xf0 [ 1092.433596] ? do_futex+0x163/0x1c70 [ 1092.433610] ? mark_held_locks+0xf0/0xf0 [ 1092.433628] ? mark_held_locks+0xf0/0xf0 [ 1092.450294] lowmem_reserve[]: 0 0 0 0 0 [ 1092.451521] ? debug_check_no_obj_freed+0x201/0x482 [ 1092.455824] Node 1 Normal free:26796kB min:53876kB low:67344kB high:80812kB active_anon:956kB inactive_anon:48920kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:248kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1092.484482] ? video_usercopy+0x1000/0x1000 [ 1092.484499] v4l2_ioctl+0x147/0x1a0 [ 1092.484511] ? video_devdata+0xa0/0xa0 [ 1092.484525] do_vfs_ioctl+0xcdb/0x12e0 [ 1092.484539] ? lock_downgrade+0x720/0x720 [ 1092.484549] ? check_preemption_disabled+0x41/0x280 [ 1092.484561] ? ioctl_preallocate+0x200/0x200 [ 1092.484577] ? __fget+0x356/0x510 [ 1092.484591] ? do_dup2+0x450/0x450 [ 1092.484614] ksys_ioctl+0x9b/0xc0 [ 1092.484630] __x64_sys_ioctl+0x6f/0xb0 [ 1092.484641] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1092.484654] do_syscall_64+0xf9/0x620 [ 1092.484672] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1092.484693] RIP: 0033:0x45e159 [ 1092.484715] Code: Bad RIP value. [ 1092.484722] RSP: 002b:00007f97906a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1092.484736] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e159 [ 1092.484744] RDX: 0000000020000340 RSI: 00000000c100565c RDI: 0000000000000003 [ 1092.484752] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1092.484760] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1092.484768] R13: 00007ffc100b0f6f R14: 00007f97906a39c0 R15: 000000000119bf8c [ 1092.501886] Mem-Info: [ 1092.518100] lowmem_reserve[]: 0 0 0 0 0 [ 1092.535285] active_anon:122565 inactive_anon:23091 isolated_anon:0 [ 1092.535285] active_file:1 inactive_file:1 isolated_file:0 [ 1092.535285] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1092.535285] slab_reclaimable:13064 slab_unreclaimable:122198 [ 1092.535285] mapped:53063 shmem:23433 pagetables:973 bounce:0 [ 1092.535285] free:13898 free_pcp:63 free_cma:0 [ 1092.552663] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10872kB [ 1092.591001] Node 0 active_anon:489304kB inactive_anon:43444kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174508kB dirty:0kB writeback:0kB shmem:44536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1092.610786] Node 0 DMA32: 1060*4kB (ME) 1039*8kB (UME) 189*16kB (UME) 76*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18008kB [ 1092.619734] Node 1 active_anon:956kB inactive_anon:48920kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37744kB dirty:0kB writeback:0kB shmem:49196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1092.653607] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1092.678884] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1092.685531] Node 1 Normal: 149*4kB (ME) 81*8kB (ME) 127*16kB (UME) 99*32kB (UM) 66*64kB (UME) 26*128kB (ME) 4*256kB (M) 1*512kB (M) 1*1024kB (U) 1*2048kB (U) 2*4096kB (UM) = 26796kB [ 1092.700567] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1092.713052] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1092.732572] Node 0 DMA32 free:17912kB min:35996kB low:44992kB high:53988kB active_anon:489304kB inactive_anon:43444kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7776kB pagetables:3644kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1092.746360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1092.769540] lowmem_reserve[]: 0 0 1 1 1 [ 1092.769562] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1092.769595] lowmem_reserve[]: 0 0 0 0 0 [ 1092.769615] Node 1 Normal free:26796kB min:53876kB low:67344kB high:80812kB active_anon:956kB inactive_anon:48920kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:248kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1092.769648] lowmem_reserve[]: 0 0 0 0 0 [ 1092.769667] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10872kB [ 1092.769737] Node 0 DMA32: 1061*4kB (UME) 1021*8kB (UME) 182*16kB (UME) 77*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17788kB [ 1092.769790] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1092.769836] Node 1 Normal: 149*4kB (ME) 81*8kB (ME) 127*16kB (UME) 99*32kB (UM) 66*64kB (UME) 26*128kB (ME) 4*256kB (M) 1*512kB (M) 1*1024kB (U) 1*2048kB (U) 2*4096kB (UM) = 26796kB [ 1092.769913] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1092.769922] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1092.769938] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1092.769946] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1092.769950] 23435 total pagecache pages [ 1092.769963] 0 pages in swap cache [ 1092.769971] Swap cache stats: add 0, delete 0, find 0/0 [ 1092.769976] Free swap = 0kB [ 1092.769981] Total swap = 0kB [ 1092.769988] 2097051 pages RAM [ 1092.769993] 0 pages HighMem/MovableOnly [ 1092.769998] 369639 pages reserved [ 1092.770003] 0 pages cma reserved [ 1093.199002] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1093.207893] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1093.216531] 23435 total pagecache pages [ 1093.220509] 0 pages in swap cache [ 1093.223993] Swap cache stats: add 0, delete 0, find 0/0 [ 1093.229377] Free swap = 0kB [ 1093.232423] Total swap = 0kB [ 1093.235491] 2097051 pages RAM [ 1093.238620] 0 pages HighMem/MovableOnly [ 1093.242587] 369639 pages reserved [ 1093.246095] 0 pages cma reserved [ 1093.249462] Out of memory (oom_kill_allocating_task): Kill process 8151 (syz-fuzzer) score 0 or sacrifice child [ 1093.259832] Killed process 11254 (syz-executor.3) total-vm:85024kB, anon-rss:1724kB, file-rss:4kB, shmem-rss:0kB [ 1093.303584] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1093.340032] systemd-journal cpuset=/ mems_allowed=0-1 [ 1093.350226] CPU: 1 PID: 7156 Comm: systemd-journal Not tainted 4.19.163-syzkaller #0 [ 1093.358254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1093.367714] Call Trace: [ 1093.370349] dump_stack+0x1fc/0x2fe [ 1093.373986] dump_header+0x15d/0xc3f [ 1093.377717] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1093.382822] ? ___ratelimit+0x319/0x584 [ 1093.386804] oom_kill_process.cold+0x10/0x692 [ 1093.391329] ? check_preemption_disabled+0x41/0x280 [ 1093.396365] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1093.401651] out_of_memory+0x1072/0x1390 [ 1093.405783] ? oom_killer_disable+0x270/0x270 [ 1093.410461] ? mutex_trylock+0x15f/0x1a0 [ 1093.414706] __alloc_pages_nodemask+0x23a2/0x2890 [ 1093.419589] ? find_get_entry+0x4cd/0x8a0 [ 1093.423781] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1093.428647] alloc_pages_current+0x193/0x2a0 [ 1093.433068] filemap_fault+0x146e/0x2180 [ 1093.437236] ext4_filemap_fault+0x84/0xb0 [ 1093.441395] __do_fault+0x10b/0x4b0 [ 1093.445026] __handle_mm_fault+0x273b/0x41c0 [ 1093.449844] ? vm_insert_page+0x9c0/0x9c0 [ 1093.454128] ? check_preemption_disabled+0x41/0x280 [ 1093.459153] handle_mm_fault+0x436/0xb10 [ 1093.463324] __do_page_fault+0x68e/0xd60 [ 1093.467413] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1093.472442] ? spurious_fault+0x840/0x840 [ 1093.476600] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1093.481536] ? page_fault+0x8/0x30 [ 1093.482981] Bluetooth: hci2: command 0x0419 tx timeout [ 1093.485087] page_fault+0x1e/0x30 [ 1093.485101] RIP: 0033:0x7f4579d5a09d [ 1093.485124] Code: Bad RIP value. [ 1093.485130] RSP: 002b:00007ffee998c310 EFLAGS: 00010202 [ 1093.485141] RAX: 0000000000000000 RBX: 000055e439079310 RCX: 0000000000000017 [ 1093.485147] RDX: 0000000000000000 RSI: 00007ffee998c310 RDI: 00007ffee998c2cc [ 1093.485154] RBP: 00007ffee998c540 R08: 00007ffee99ec000 R09: 000001255e8444de [ 1093.485161] R10: 00131a5297814737 R11: 0000000000000000 R12: 00007ffee998c350 [ 1093.485168] R13: 0000000000000001 R14: 0000000000000001 R15: 0005b63747b13634 [ 1093.513789] Mem-Info: [ 1093.608468] active_anon:122115 inactive_anon:23091 isolated_anon:0 [ 1093.608468] active_file:1 inactive_file:1 isolated_file:0 [ 1093.608468] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1093.608468] slab_reclaimable:13064 slab_unreclaimable:121653 [ 1093.608468] mapped:44363 shmem:23433 pagetables:936 bounce:0 [ 1093.608468] free:17661 free_pcp:433 free_cma:0 [ 1093.662564] Node 0 active_anon:487504kB inactive_anon:43444kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139708kB dirty:0kB writeback:0kB shmem:44536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1093.710514] Node 1 active_anon:956kB inactive_anon:48920kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37744kB dirty:0kB writeback:0kB shmem:49196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1093.788687] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1093.847891] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1093.880535] Node 0 DMA32 free:32964kB min:35996kB low:44992kB high:53988kB active_anon:487504kB inactive_anon:43444kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7744kB pagetables:3496kB bounce:0kB free_pcp:1488kB local_pcp:0kB free_cma:0kB [ 1093.942032] lowmem_reserve[]: 0 0 1 1 1 [ 1093.952124] Node 0 Normal free:12kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1094.166090] lowmem_reserve[]: 0 0 0 0 0 [ 1094.170118] Node 1 Normal free:26796kB min:53876kB low:67344kB high:80812kB active_anon:956kB inactive_anon:48920kB active_file:0kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:248kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1094.309950] lowmem_reserve[]: 0 0 0 0 0 [ 1094.329092] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10872kB [ 1094.389243] Node 0 DMA32: 1099*4kB (UME) 2666*8kB (UME) 201*16kB (UME) 76*32kB (UM) 0*64kB 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 33036kB [ 1094.457810] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1094.521218] Node 1 Normal: 149*4kB (ME) 81*8kB (ME) 127*16kB (UME) 99*32kB (UM) 66*64kB (UME) 26*128kB (ME) 4*256kB (M) 1*512kB (M) 1*1024kB (U) 1*2048kB (U) 2*4096kB (UM) = 26796kB [ 1094.550423] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1094.562955] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1094.573076] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1094.583078] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1094.598334] 24828 total pagecache pages [ 1094.605071] 0 pages in swap cache [ 1094.608877] Swap cache stats: add 0, delete 0, find 0/0 [ 1094.616685] Free swap = 0kB [ 1094.620464] Total swap = 0kB [ 1094.624253] 2097051 pages RAM [ 1094.628503] 0 pages HighMem/MovableOnly [ 1094.632579] 369639 pages reserved [ 1094.636265] 0 pages cma reserved [ 1094.639638] Out of memory (oom_kill_allocating_task): Kill process 7156 (systemd-journal) score 0 or sacrifice child [ 1094.653459] Killed process 7156 (systemd-journal) total-vm:46096kB, anon-rss:484kB, file-rss:0kB, shmem-rss:3268kB [ 1094.667226] oom_reaper: reaped process 7156 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:3356kB [ 1094.801931] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1094.825938] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1094.860208] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1094.902398] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1094.942955] systemd[1]: Stopped Journal Service. [ 1094.974624] systemd[1]: Starting Journal Service... [ 1095.267989] systemd-journald[12469]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1095.674662] systemd[1]: Started Journal Service. [ 1097.920489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1097.929930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1097.944593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1097.960432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1097.970822] device bridge_slave_1 left promiscuous mode [ 1097.977459] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.985748] device bridge_slave_0 left promiscuous mode [ 1097.991452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.004676] device veth1_macvtap left promiscuous mode [ 1098.010005] device veth0_macvtap left promiscuous mode [ 1098.016496] device veth1_vlan left promiscuous mode [ 1098.021565] device veth0_vlan left promiscuous mode 21:50:35 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1c4, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:50:35 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x5, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) 21:50:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20ff01, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:50:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x3c03000000000000}, 0x0) 21:50:35 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4800, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:50:35 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c00000000001200000000000300060000007a0002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:50:36 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1c5, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:50:36 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000000302000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:50:36 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1c6, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:50:36 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000000502000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:50:36 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1c7, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:50:36 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000000602000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1103.802106] Bluetooth: hci4: command 0x0406 tx timeout [ 1106.441743] Bluetooth: hci2: command 0x0409 tx timeout [ 1106.921276] device hsr_slave_1 left promiscuous mode [ 1106.931072] device hsr_slave_0 left promiscuous mode [ 1106.950458] team0 (unregistering): Port device team_slave_1 removed [ 1106.964533] team0 (unregistering): Port device team_slave_0 removed [ 1106.975761] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1106.988600] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1107.049195] bond0 (unregistering): Released all slaves [ 1107.069599] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1107.078922] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1107.109132] IPVS: ftp: loaded support on port[0] = 21 [ 1107.127116] IPVS: ftp: loaded support on port[0] = 21 [ 1107.401817] Bluetooth: hci3: command 0x0409 tx timeout [ 1107.476456] chnl_net:caif_netlink_parms(): no params data found [ 1107.558295] chnl_net:caif_netlink_parms(): no params data found [ 1107.710464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.727259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.743465] device bridge_slave_0 entered promiscuous mode [ 1107.751293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.774200] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.786619] device bridge_slave_1 entered promiscuous mode [ 1107.847089] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1107.876780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.898755] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.917641] device bridge_slave_0 entered promiscuous mode [ 1107.938541] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1107.957885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.971639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.979122] device bridge_slave_1 entered promiscuous mode [ 1108.009613] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1108.022573] team0: Port device team_slave_0 added [ 1108.054211] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1108.062750] team0: Port device team_slave_1 added [ 1108.069627] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1108.086399] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1108.110855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1108.117539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1108.171880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1108.204290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1108.210562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1108.276942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1108.318332] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1108.332335] team0: Port device team_slave_0 added [ 1108.337669] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1108.357982] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1108.372363] team0: Port device team_slave_1 added [ 1108.377672] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1108.444350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1108.450628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1108.476958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1108.490618] device hsr_slave_0 entered promiscuous mode [ 1108.516885] device hsr_slave_1 entered promiscuous mode [ 1108.523584] Bluetooth: hci2: command 0x041b tx timeout [ 1108.534564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1108.540828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1108.611561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1108.632787] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1108.645921] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1108.665667] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1108.688569] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1108.719606] device hsr_slave_0 entered promiscuous mode [ 1108.742193] device hsr_slave_1 entered promiscuous mode [ 1108.748605] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1108.777548] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1109.043235] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1109.131898] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1109.201008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1109.220464] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1109.243237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1109.250617] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1109.258523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1109.267287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1109.277984] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1109.288397] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1109.297074] 8021q: adding VLAN 0 to HW filter on device team0 [ 1109.313162] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1109.333228] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1109.339325] 8021q: adding VLAN 0 to HW filter on device team0 [ 1109.352732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1109.361238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1109.372367] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1109.385662] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1109.398972] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1109.408048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1109.417830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1109.426398] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.432818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1109.442973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1109.457849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1109.467340] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.473788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.481465] Bluetooth: hci3: command 0x041b tx timeout [ 1109.487970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1109.496992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1109.510813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.517271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1109.532857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1109.540840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1109.556439] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1109.574217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1109.586111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1109.597887] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.604339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.619564] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1110.125673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1110.439112] oom_reaper: reaped process 12487 (syz-executor.5), now anon-rss:0kB, file-rss:33804kB, shmem-rss:0kB [ 1110.545136] kworker/0:5 invoked oom-killer: gfp_mask=0x6142c0(GFP_KERNEL|__GFP_NOWARN|__GFP_COMP|__GFP_NOMEMALLOC), nodemask=(null), order=1, oom_score_adj=0 [ 1110.560102] kworker/0:5 cpuset=/ mems_allowed=0-1 [ 1110.565572] CPU: 0 PID: 9395 Comm: kworker/0:5 Not tainted 4.19.163-syzkaller #0 [ 1110.573123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1110.582493] Workqueue: events linkwatch_event [ 1110.586987] Call Trace: [ 1110.589581] dump_stack+0x1fc/0x2fe [ 1110.593213] dump_header+0x15d/0xc3f [ 1110.596963] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1110.602066] ? ___ratelimit+0x319/0x584 [ 1110.606049] oom_kill_process.cold+0x10/0x692 [ 1110.610540] ? oom_badness.part.0+0x135/0x650 [ 1110.615132] ? lock_downgrade+0x720/0x720 [ 1110.619348] ? check_preemption_disabled+0x41/0x280 [ 1110.624465] out_of_memory+0x34d/0x1390 [ 1110.628451] ? oom_killer_disable+0x270/0x270 [ 1110.632965] ? mutex_trylock+0x15f/0x1a0 [ 1110.637038] __alloc_pages_nodemask+0x23a2/0x2890 [ 1110.641903] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1110.646746] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1110.651595] ? linkwatch_do_dev+0xaa/0x110 [ 1110.655810] ? __linkwatch_run_queue+0x22d/0x5d0 [ 1110.660552] ? linkwatch_event+0x4a/0x60 [ 1110.664609] ? mark_held_locks+0xa6/0xf0 [ 1110.668666] ? ____cache_alloc_node+0x156/0x1d0 [ 1110.673610] ? cache_grow_begin+0x64/0x8a0 [ 1110.677837] cache_grow_begin+0xa4/0x8a0 [ 1110.681911] fallback_alloc+0x213/0x2e0 [ 1110.685872] kmem_cache_alloc_node_trace+0xec/0x3b0 [ 1110.690876] __kmalloc_node_track_caller+0x38/0x70 [ 1110.695808] __alloc_skb+0xae/0x560 [ 1110.699423] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 1110.704014] rtmsg_ifinfo+0x83/0x120 [ 1110.707732] netdev_state_change+0x114/0x130 [ 1110.712130] ? dev_get_valid_name+0xe0/0xe0 [ 1110.716530] linkwatch_do_dev+0xaa/0x110 [ 1110.720578] __linkwatch_run_queue+0x22d/0x5d0 [ 1110.725162] ? linkwatch_fire_event+0x280/0x280 [ 1110.729838] linkwatch_event+0x4a/0x60 [ 1110.733732] process_one_work+0x864/0x1570 [ 1110.737971] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 1110.742630] worker_thread+0x64c/0x1130 [ 1110.746618] ? process_one_work+0x1570/0x1570 [ 1110.751120] kthread+0x33f/0x460 [ 1110.754469] ? kthread_park+0x180/0x180 [ 1110.758453] ret_from_fork+0x24/0x30 [ 1110.763724] Mem-Info: [ 1110.766170] active_anon:122607 inactive_anon:25122 isolated_anon:0 [ 1110.766170] active_file:23 inactive_file:7 isolated_file:0 [ 1110.766170] unevictable:0 dirty:17 writeback:1 unstable:0 [ 1110.766170] slab_reclaimable:13122 slab_unreclaimable:123014 [ 1110.766170] mapped:52603 shmem:25478 pagetables:997 bounce:0 [ 1110.766170] free:13898 free_pcp:147 free_cma:0 [ 1110.787759] syz-executor.5: vmalloc: allocation failure, allocated 1817399296 of 3621613568 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1110.800803] Node 0 active_anon:489212kB inactive_anon:43424kB active_file:80kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162628kB dirty:68kB writeback:4kB shmem:44504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 153600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1110.825247] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1110.841613] Node 1 active_anon:1216kB inactive_anon:57064kB active_file:12kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47784kB dirty:0kB writeback:0kB shmem:57408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1110.841620] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1110.841649] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1110.841667] Node 0 DMA32 free:17892kB min:35996kB low:44992kB high:53988kB active_anon:489212kB inactive_anon:43424kB active_file:144kB inactive_file:28kB unevictable:0kB writepending:72kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7776kB pagetables:3652kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 1110.841695] lowmem_reserve[]: 0 0 1 1 1 [ 1110.857640] CPU: 1 PID: 12487 Comm: syz-executor.5 Not tainted 4.19.163-syzkaller #0 [ 1110.874042] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1110.900232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1110.900237] Call Trace: [ 1110.900259] dump_stack+0x1fc/0x2fe [ 1110.900276] warn_alloc.cold+0x7b/0x18f [ 1110.900294] ? zone_watermark_ok_safe+0x260/0x260 [ 1110.900306] ? retint_kernel+0x2d/0x2d [ 1110.900325] ? alloc_pages_current+0x164/0x2a0 [ 1110.900346] __vmalloc_area_node+0x4fd/0x780 [ 1110.900365] ? __vmalloc_node_range+0x180/0x180 [ 1110.900381] ? _raw_spin_unlock+0x29/0x40 [ 1110.900393] ? __get_vm_area_node+0x2e2/0x3a0 [ 1110.900408] __vmalloc_node_range+0xed/0x180 [ 1110.900424] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1110.900439] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1110.900451] vmalloc_user+0x70/0xe0 [ 1110.900465] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1110.900479] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1110.900503] __vb2_queue_alloc+0x472/0xe60 [ 1110.900533] vb2_core_create_bufs+0x273/0x7e0 [ 1110.900551] ? __vb2_queue_free+0x870/0x870 [ 1110.900570] ? __mutex_add_waiter+0x160/0x160 [ 1110.900591] vb2_create_bufs+0x332/0x620 [ 1110.900608] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1110.900623] ? __video_do_ioctl+0x632/0xcd0 [ 1110.900637] ? __mutex_add_waiter+0x160/0x160 [ 1110.900651] ? mark_held_locks+0xf0/0xf0 [ 1110.900671] vb2_ioctl_create_bufs+0x20d/0x360 [ 1110.900684] ? memset+0x20/0x40 [ 1110.900701] v4l_create_bufs+0xb2/0x160 [ 1110.900719] __video_do_ioctl+0x49a/0xcd0 [ 1110.900741] ? v4l_querycap+0x340/0x340 [ 1110.900757] ? __might_fault+0x192/0x1d0 [ 1110.900777] video_usercopy+0x13c/0x1000 [ 1110.900794] ? v4l_querycap+0x340/0x340 [ 1110.900812] ? v4l_enumstd+0x60/0x60 [ 1110.900823] ? mark_held_locks+0xf0/0xf0 [ 1110.900838] ? do_futex+0x163/0x1c70 [ 1110.900853] ? mark_held_locks+0xf0/0xf0 [ 1110.900870] ? mark_held_locks+0xf0/0xf0 [ 1110.900883] ? debug_check_no_obj_freed+0x201/0x482 [ 1110.900907] ? video_usercopy+0x1000/0x1000 [ 1110.900919] v4l2_ioctl+0x147/0x1a0 [ 1110.900930] ? video_devdata+0xa0/0xa0 [ 1110.900946] do_vfs_ioctl+0xcdb/0x12e0 [ 1110.900960] ? lock_downgrade+0x720/0x720 [ 1110.900972] ? check_preemption_disabled+0x41/0x280 [ 1110.900985] ? ioctl_preallocate+0x200/0x200 [ 1110.901004] ? __fget+0x356/0x510 [ 1110.901020] ? do_dup2+0x450/0x450 [ 1110.901044] ksys_ioctl+0x9b/0xc0 [ 1110.901060] __x64_sys_ioctl+0x6f/0xb0 [ 1110.901072] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1110.901087] do_syscall_64+0xf9/0x620 [ 1110.901103] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1110.901114] RIP: 0033:0x45e159 [ 1110.901136] Code: Bad RIP value. [ 1110.901144] RSP: 002b:00007f97906a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1110.901157] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e159 [ 1110.901165] RDX: 0000000020000340 RSI: 00000000c100565c RDI: 0000000000000003 [ 1110.901173] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1110.901181] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1110.901189] R13: 00007ffc100b0f6f R14: 00007f97906a39c0 R15: 000000000119bf8c [ 1110.912420] Mem-Info: [ 1110.935855] lowmem_reserve[]: 0 0 0 0 0 [ 1110.951541] active_anon:122607 inactive_anon:25122 isolated_anon:0 [ 1110.951541] active_file:23 inactive_file:7 isolated_file:0 [ 1110.951541] unevictable:0 dirty:17 writeback:1 unstable:0 [ 1110.951541] slab_reclaimable:13122 slab_unreclaimable:123014 [ 1110.951541] mapped:52603 shmem:25478 pagetables:997 bounce:0 [ 1110.951541] free:13898 free_pcp:147 free_cma:0 [ 1110.973715] Node 1 Normal free:26812kB min:53876kB low:67344kB high:80812kB active_anon:1216kB inactive_anon:57064kB active_file:12kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:352kB pagetables:336kB bounce:0kB free_pcp:336kB local_pcp:88kB free_cma:0kB [ 1110.973748] lowmem_reserve[]: 0 0 0 0 0 [ 1110.973767] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10884kB [ 1110.973898] Node 0 DMA32: 1062*4kB (ME) 1062*8kB (ME) 163*16kB (UME) 80*32kB (M) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17912kB [ 1110.995477] Node 0 active_anon:489212kB inactive_anon:43424kB active_file:80kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162628kB dirty:68kB writeback:4kB shmem:44504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 153600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1110.999870] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1111.004060] Node 1 active_anon:1216kB inactive_anon:57064kB active_file:12kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47784kB dirty:0kB writeback:0kB shmem:57408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1111.011302] Node 1 Normal: 113*4kB (UME) 91*8kB (UME) 44*16kB (UME) 3*32kB (M) 4*64kB (UME) 16*128kB (ME) 8*256kB (UM) 2*512kB (M) 1*1024kB (U) 1*2048kB (U) 4*4096kB (UM) = 26812kB [ 1111.019227] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1111.026004] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1111.026366] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1111.031328] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1111.031338] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1111.031347] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1111.031359] 25543 total pagecache pages [ 1111.031370] 0 pages in swap cache [ 1111.031379] Swap cache stats: add 0, delete 0, find 0/0 [ 1111.031383] Free swap = 0kB [ 1111.031388] Total swap = 0kB [ 1111.031613] 2097051 pages RAM [ 1111.041844] Node 0 DMA32 free:17892kB min:35996kB low:44992kB high:53988kB active_anon:489212kB inactive_anon:43424kB active_file:144kB inactive_file:28kB unevictable:0kB writepending:72kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7776kB pagetables:3652kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1111.049822] 0 pages HighMem/MovableOnly [ 1111.059494] lowmem_reserve[]: 0 0 1 1 1 [ 1111.067145] 369639 pages reserved [ 1111.071043] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1111.075146] 0 pages cma reserved [ 1111.075157] Out of memory: Kill process 8130 (syz-fuzzer) score 68 or sacrifice child [ 1111.076228] Killed process 12525 (syz-executor.1) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 1111.639630] oom_reaper: reaped process 12525 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1111.644244] lowmem_reserve[]: 0 0 0 0 0 [ 1111.665765] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1111.667177] Bluetooth: hci2: command 0x040f tx timeout [ 1111.687898] Node 1 Normal free:26812kB min:53876kB low:67344kB high:80812kB active_anon:1212kB inactive_anon:57064kB active_file:12kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:352kB pagetables:336kB bounce:0kB free_pcp:336kB local_pcp:248kB free_cma:0kB [ 1111.694433] Bluetooth: hci3: command 0x040f tx timeout [ 1111.726570] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1111.735025] CPU: 1 PID: 8151 Comm: syz-fuzzer Not tainted 4.19.163-syzkaller #0 [ 1111.742485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1111.751845] Call Trace: [ 1111.754438] dump_stack+0x1fc/0x2fe [ 1111.757920] lowmem_reserve[]: 0 0 0 0 0 [ 1111.758068] dump_header+0x15d/0xc3f [ 1111.765729] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1111.766944] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10884kB [ 1111.770827] ? ___ratelimit+0x319/0x584 [ 1111.787525] oom_kill_process.cold+0x10/0x692 [ 1111.792024] ? check_preemption_disabled+0x41/0x280 [ 1111.795073] Node 0 DMA32: 1062*4kB (ME) 1253*8kB (UME) 169*16kB (UME) 82*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19600kB [ 1111.797057] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1111.815945] out_of_memory+0x1072/0x1390 [ 1111.820026] ? oom_killer_disable+0x270/0x270 [ 1111.822966] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1111.824522] ? mutex_trylock+0x15f/0x1a0 [ 1111.839577] __alloc_pages_nodemask+0x23a2/0x2890 [ 1111.844443] ? find_get_entry+0x4cd/0x8a0 [ 1111.846885] Node 1 Normal: 113*4kB (UME) 91*8kB (UME) 44*16kB (UME) 4*32kB (UM) 4*64kB (UME) 16*128kB (ME) 8*256kB (UM) 2*512kB (M) 1*1024kB (U) 1*2048kB (U) 4*4096kB (UM) = 26844kB [ 1111.848606] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1111.869744] alloc_pages_current+0x193/0x2a0 [ 1111.874160] filemap_fault+0x146e/0x2180 [ 1111.875851] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1111.878232] ext4_filemap_fault+0x84/0xb0 [ 1111.891183] __do_fault+0x10b/0x4b0 [ 1111.894812] __handle_mm_fault+0x273b/0x41c0 [ 1111.897976] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1111.899303] ? vm_insert_page+0x9c0/0x9c0 [ 1111.912449] ? __fget+0x356/0x510 [ 1111.915935] ? check_preemption_disabled+0x41/0x280 [ 1111.920750] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1111.921075] handle_mm_fault+0x436/0xb10 [ 1111.933949] __do_page_fault+0x68e/0xd60 [ 1111.938017] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1111.942224] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1111.943029] ? spurious_fault+0x840/0x840 [ 1111.955730] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1111.960575] ? page_fault+0x8/0x30 [ 1111.962979] 25511 total pagecache pages [ 1111.964113] page_fault+0x1e/0x30 [ 1111.968068] 0 pages in swap cache [ 1111.971499] RIP: 0033:0x469240 [ 1111.971520] Code: Bad RIP value. [ 1111.971527] RSP: 002b:000000c0004b57f0 EFLAGS: 00010246 [ 1111.971537] RAX: 0000000000000000 RBX: 00000000000003c1 RCX: 0000000000469240 [ 1111.971544] RDX: 0000000000000080 RSI: 000000c0004b5840 RDI: 0000000000000003 [ 1111.971552] RBP: 000000c0004b5e40 R08: 0000000000000000 R09: 0000000000000000 [ 1111.971558] R10: 00000000000003c1 R11: 0000000000000246 R12: 0000000000000003 [ 1111.971567] R13: 000000c000314a80 R14: 00000102cb867adb R15: ffffffffffffffff [ 1111.991944] Mem-Info: [ 1112.000722] Swap cache stats: add 0, delete 0, find 0/0 [ 1112.011078] active_anon:122589 inactive_anon:25122 isolated_anon:0 [ 1112.011078] active_file:17 inactive_file:16 isolated_file:0 [ 1112.011078] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1112.011078] slab_reclaimable:13123 slab_unreclaimable:122605 [ 1112.011078] mapped:52591 shmem:25478 pagetables:959 bounce:0 [ 1112.011078] free:14311 free_pcp:191 free_cma:0 [ 1112.029302] Free swap = 0kB [ 1112.043880] Node 0 active_anon:489144kB inactive_anon:43424kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162580kB dirty:0kB writeback:0kB shmem:44504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1112.075762] Total swap = 0kB [ 1112.110661] 2097051 pages RAM [ 1112.113798] Node 1 active_anon:1212kB inactive_anon:57064kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47784kB dirty:0kB writeback:0kB shmem:57408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1112.113805] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1112.113835] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1112.157093] 0 pages HighMem/MovableOnly [ 1112.172800] Node 0 DMA32 free:19512kB min:35996kB low:44992kB high:53988kB active_anon:489144kB inactive_anon:43424kB active_file:160kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7744kB pagetables:3500kB bounce:0kB free_pcp:440kB local_pcp:12kB free_cma:0kB [ 1112.191007] 369639 pages reserved [ 1112.205573] lowmem_reserve[]: 0 0 1 1 1 [ 1112.213006] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1112.230837] 0 pages cma reserved [ 1112.244348] lowmem_reserve[]: 0 0 0 0 0 [ 1112.248342] Node 1 Normal free:26844kB min:53876kB low:67344kB high:80812kB active_anon:1212kB inactive_anon:57064kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:352kB pagetables:336kB bounce:0kB free_pcp:336kB local_pcp:248kB free_cma:0kB [ 1112.282916] lowmem_reserve[]: 0 0 0 0 0 [ 1112.286923] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10884kB [ 1112.305614] Node 0 DMA32: 1062*4kB (ME) 1255*8kB (UME) 171*16kB (UME) 83*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19680kB [ 1112.320270] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1112.338064] Node 1 Normal: 113*4kB (UME) 91*8kB (UME) 44*16kB (UME) 4*32kB (UM) 4*64kB (UME) 16*128kB (ME) 8*256kB (UM) 2*512kB (M) 1*1024kB (U) 1*2048kB (U) 4*4096kB (UM) = 26844kB [ 1112.360206] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1112.383101] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1112.395056] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1112.406419] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1112.418412] 25511 total pagecache pages [ 1112.424914] 0 pages in swap cache [ 1112.428957] Swap cache stats: add 0, delete 0, find 0/0 [ 1112.437692] Free swap = 0kB [ 1112.440711] Total swap = 0kB [ 1112.446245] 2097051 pages RAM [ 1112.449358] 0 pages HighMem/MovableOnly [ 1112.456710] 369639 pages reserved [ 1112.460171] 0 pages cma reserved [ 1112.466171] Out of memory (oom_kill_allocating_task): Kill process 8151 (syz-fuzzer) score 0 or sacrifice child [ 1112.479844] Killed process 12527 (syz-executor.3) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 1112.499135] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1112.521564] in:imklog cpuset=/ mems_allowed=0-1 [ 1112.526300] CPU: 0 PID: 12134 Comm: in:imklog Not tainted 4.19.163-syzkaller #0 [ 1112.533830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1112.543180] Call Trace: [ 1112.545775] dump_stack+0x1fc/0x2fe [ 1112.549493] dump_header+0x15d/0xc3f [ 1112.553209] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1112.558326] ? ___ratelimit+0x319/0x584 [ 1112.562333] oom_kill_process.cold+0x10/0x692 [ 1112.566829] ? check_preemption_disabled+0x41/0x280 [ 1112.571854] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1112.577135] out_of_memory+0x1072/0x1390 [ 1112.581318] ? oom_killer_disable+0x270/0x270 [ 1112.585818] ? mutex_trylock+0x15f/0x1a0 [ 1112.589899] __alloc_pages_nodemask+0x23a2/0x2890 [ 1112.594756] ? find_get_entry+0x4cd/0x8a0 [ 1112.598923] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1112.604749] alloc_pages_current+0x193/0x2a0 [ 1112.609163] filemap_fault+0x146e/0x2180 [ 1112.613241] ext4_filemap_fault+0x84/0xb0 [ 1112.617393] __do_fault+0x10b/0x4b0 [ 1112.621022] ? do_raw_spin_unlock+0x171/0x230 [ 1112.625519] __handle_mm_fault+0x273b/0x41c0 [ 1112.629933] ? vm_insert_page+0x9c0/0x9c0 [ 1112.634520] ? lock_downgrade+0x720/0x720 [ 1112.638681] ? check_preemption_disabled+0x41/0x280 [ 1112.644323] handle_mm_fault+0x436/0xb10 [ 1112.648398] __do_page_fault+0x68e/0xd60 [ 1112.652508] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1112.657719] ? spurious_fault+0x840/0x840 [ 1112.661964] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1112.666810] ? page_fault+0x8/0x30 [ 1112.670351] page_fault+0x1e/0x30 [ 1112.673802] RIP: 0033:0x558939212590 [ 1112.677698] Code: Bad RIP value. [ 1112.681144] RSP: 002b:00007f843ba39478 EFLAGS: 00010202 [ 1112.686589] RAX: 0000000000000000 RBX: 00007f843ba394b8 RCX: 0000000000000006 [ 1112.693857] RDX: 000000000000003e RSI: 00007f843ba39da3 RDI: 00007f843ba394b8 [ 1112.701128] RBP: 0000000000000006 R08: 00007f843d216940 R09: 0000000004000001 [ 1112.708482] R10: 0000000000000001 R11: 0000000000000000 R12: 00007f843ba39da0 [ 1112.715754] R13: 00007f843ba39da3 R14: 0000000000001f9f R15: 00007f843ba39df3 [ 1112.737866] Mem-Info: [ 1112.740334] active_anon:122589 inactive_anon:25122 isolated_anon:0 [ 1112.740334] active_file:17 inactive_file:14 isolated_file:0 [ 1112.740334] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1112.740334] slab_reclaimable:13123 slab_unreclaimable:122605 [ 1112.740334] mapped:52591 shmem:25478 pagetables:959 bounce:0 [ 1112.740334] free:14268 free_pcp:299 free_cma:0 [ 1112.783860] Node 0 active_anon:489144kB inactive_anon:43424kB active_file:60kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162580kB dirty:0kB writeback:0kB shmem:44504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1112.822677] Node 1 active_anon:1212kB inactive_anon:57064kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47784kB dirty:0kB writeback:0kB shmem:57408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1112.862088] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1112.899732] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1112.905378] Node 0 DMA32 free:19340kB min:35996kB low:44992kB high:53988kB active_anon:489144kB inactive_anon:43424kB active_file:60kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7744kB pagetables:3500kB bounce:0kB free_pcp:704kB local_pcp:424kB free_cma:0kB [ 1112.946247] lowmem_reserve[]: 0 0 1 1 1 [ 1112.950268] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1112.986660] lowmem_reserve[]: 0 0 0 0 0 [ 1112.990691] Node 1 Normal free:26844kB min:53876kB low:67344kB high:80812kB active_anon:1212kB inactive_anon:57064kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:320kB pagetables:336kB bounce:0kB free_pcp:492kB local_pcp:128kB free_cma:0kB [ 1113.030326] lowmem_reserve[]: 0 0 0 0 0 [ 1113.034413] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10884kB [ 1113.058643] Node 0 DMA32: 1063*4kB (UME) 1223*8kB (UME) 171*16kB (UME) 83*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19428kB [ 1113.082550] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1113.100493] Node 1 Normal: 113*4kB (UME) 91*8kB (UME) 44*16kB (UME) 5*32kB (UM) 4*64kB (UME) 16*128kB (ME) 8*256kB (UM) 2*512kB (M) 1*1024kB (U) 1*2048kB (U) 4*4096kB (UM) = 26876kB [ 1113.127582] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1113.139731] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1113.160505] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1113.169615] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1113.189241] 25511 total pagecache pages [ 1113.193345] 0 pages in swap cache [ 1113.196809] Swap cache stats: add 0, delete 0, find 0/0 [ 1113.212034] Free swap = 0kB [ 1113.215066] Total swap = 0kB [ 1113.218096] 2097051 pages RAM [ 1113.227718] 0 pages HighMem/MovableOnly [ 1113.235590] 369639 pages reserved [ 1113.239049] 0 pages cma reserved [ 1113.250462] Out of memory (oom_kill_allocating_task): Kill process 12134 (in:imklog) score 0 or sacrifice child [ 1113.271441] Killed process 12132 (rsyslogd) total-vm:254332kB, anon-rss:596kB, file-rss:0kB, shmem-rss:0kB [ 1113.289963] oom_reaper: reaped process 12132 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1113.300061] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1113.338088] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1113.346489] CPU: 0 PID: 8135 Comm: syz-fuzzer Not tainted 4.19.163-syzkaller #0 [ 1113.353982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1113.363338] Call Trace: [ 1113.365933] dump_stack+0x1fc/0x2fe [ 1113.369567] dump_header+0x15d/0xc3f [ 1113.373307] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1113.378414] ? ___ratelimit+0x319/0x584 [ 1113.382397] oom_kill_process.cold+0x10/0x692 [ 1113.386892] ? check_preemption_disabled+0x41/0x280 [ 1113.391925] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1113.397204] out_of_memory+0x1072/0x1390 [ 1113.401272] ? oom_killer_disable+0x270/0x270 [ 1113.405770] ? mutex_trylock+0x15f/0x1a0 [ 1113.409834] __alloc_pages_nodemask+0x23a2/0x2890 [ 1113.414698] ? find_get_entry+0x4cd/0x8a0 [ 1113.418856] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1113.423722] alloc_pages_current+0x193/0x2a0 [ 1113.428154] filemap_fault+0x146e/0x2180 [ 1113.432229] ext4_filemap_fault+0x84/0xb0 [ 1113.436469] __do_fault+0x10b/0x4b0 [ 1113.440099] __handle_mm_fault+0x273b/0x41c0 [ 1113.444544] ? do_signal+0x49d/0x1670 [ 1113.448364] ? vm_insert_page+0x9c0/0x9c0 [ 1113.452512] ? check_preemption_disabled+0x41/0x280 [ 1113.457522] handle_mm_fault+0x436/0xb10 [ 1113.461594] __do_page_fault+0x68e/0xd60 [ 1113.465679] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1113.470700] ? spurious_fault+0x840/0x840 [ 1113.474836] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1113.479686] ? page_fault+0x8/0x30 [ 1113.483215] page_fault+0x1e/0x30 [ 1113.486654] RIP: 0033:0x468df0 [ 1113.489854] Code: Bad RIP value. [ 1113.493203] RSP: 002b:000000c00014fab8 EFLAGS: 00010286 [ 1113.498723] RAX: 0000000000000000 RBX: 000000c00003fc00 RCX: 0000000000469093 [ 1113.506584] RDX: 000000c00014fac0 RSI: 000000c00014fbf0 RDI: 0000000000000011 [ 1113.513855] RBP: 000000c000089de0 R08: 0000000000000000 R09: 0000000000000000 [ 1113.521123] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000003 [ 1113.528394] R13: 000000c000001800 R14: 0000010218b61cdb R15: 000080c00281ffff [ 1113.543485] Mem-Info: [ 1113.545953] active_anon:122354 inactive_anon:25122 isolated_anon:0 [ 1113.545953] active_file:16 inactive_file:0 isolated_file:0 [ 1113.545953] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1113.545953] slab_reclaimable:13118 slab_unreclaimable:122575 [ 1113.545953] mapped:52591 shmem:25478 pagetables:947 bounce:0 [ 1113.545953] free:16223 free_pcp:352 free_cma:0 [ 1113.580851] Node 0 active_anon:488244kB inactive_anon:43424kB active_file:56kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162580kB dirty:0kB writeback:0kB shmem:44504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1113.610010] Node 1 active_anon:1172kB inactive_anon:57064kB active_file:8kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12984kB dirty:0kB writeback:0kB shmem:57408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1113.721064] Bluetooth: hci2: command 0x0419 tx timeout [ 1113.768391] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1113.907838] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1113.928418] Node 0 DMA32 free:31712kB min:35996kB low:44992kB high:53988kB active_anon:486732kB inactive_anon:43424kB active_file:56kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7648kB pagetables:3548kB bounce:0kB free_pcp:576kB local_pcp:240kB free_cma:0kB [ 1114.029927] lowmem_reserve[]: 0 0 1 1 1 [ 1114.034064] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1114.070337] lowmem_reserve[]: 0 0 0 0 0 [ 1114.074796] Node 1 Normal free:250028kB min:53876kB low:67344kB high:80812kB active_anon:1404kB inactive_anon:57056kB active_file:3792kB inactive_file:9052kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:352kB pagetables:280kB bounce:0kB free_pcp:3004kB local_pcp:1504kB free_cma:0kB [ 1114.113358] lowmem_reserve[]: 0 0 0 0 0 [ 1114.121042] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10884kB [ 1114.152491] Node 0 DMA32: 978*4kB (UME) 2438*8kB (UME) 684*16kB (UME) 92*32kB (UM) 0*64kB 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 38968kB [ 1114.169327] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1114.190145] Node 1 Normal: 27*4kB (UE) 8*8kB (UME) 14*16kB (UME) 6*32kB (UM) 6*64kB (UME) 29*128kB (UME) 37*256kB (UM) 38*512kB (UM) 31*1024kB (UM) 25*2048kB (U) 48*4096kB (U) = 313164kB [ 1114.192591] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1114.231016] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1114.248694] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1114.258479] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1114.276069] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1114.290520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1114.301979] 28906 total pagecache pages [ 1114.306470] 0 pages in swap cache [ 1114.309988] Swap cache stats: add 0, delete 0, find 0/0 [ 1114.316307] Free swap = 0kB [ 1114.319338] Total swap = 0kB [ 1114.323876] 2097051 pages RAM [ 1114.326985] 0 pages HighMem/MovableOnly [ 1114.331903] 369639 pages reserved [ 1114.335417] 0 pages cma reserved [ 1114.338783] Out of memory (oom_kill_allocating_task): Kill process 8135 (syz-fuzzer) score 0 or sacrifice child [ 1114.350621] Killed process 8501 (syz-executor.4) total-vm:85024kB, anon-rss:1724kB, file-rss:4kB, shmem-rss:0kB [ 1117.299345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1117.318657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1117.335672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1117.343869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1117.354377] device bridge_slave_1 left promiscuous mode [ 1117.360049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.372405] device bridge_slave_0 left promiscuous mode [ 1117.377904] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.394776] device veth1_macvtap left promiscuous mode [ 1117.400111] device veth0_macvtap left promiscuous mode [ 1117.409957] device veth1_vlan left promiscuous mode [ 1117.417100] device veth0_vlan left promiscuous mode 21:50:55 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x500, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) 21:50:55 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000000702000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1120.200547] Bluetooth: hci2: command 0x0409 tx timeout [ 1120.920417] Bluetooth: hci3: command 0x0409 tx timeout [ 1122.280293] Bluetooth: hci2: command 0x041b tx timeout [ 1123.000187] Bluetooth: hci3: command 0x041b tx timeout [ 1124.360163] Bluetooth: hci2: command 0x040f tx timeout [ 1125.080088] Bluetooth: hci3: command 0x040f tx timeout [ 1125.844453] device hsr_slave_1 left promiscuous mode [ 1125.854155] device hsr_slave_0 left promiscuous mode [ 1125.875485] team0 (unregistering): Port device team_slave_1 removed [ 1125.886388] team0 (unregistering): Port device team_slave_0 removed [ 1125.898307] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1125.913366] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1125.955972] bond0 (unregistering): Released all slaves [ 1125.988554] IPVS: ftp: loaded support on port[0] = 21 [ 1125.997538] IPVS: ftp: loaded support on port[0] = 21 [ 1126.316617] chnl_net:caif_netlink_parms(): no params data found [ 1126.340527] chnl_net:caif_netlink_parms(): no params data found [ 1126.439907] Bluetooth: hci2: command 0x0419 tx timeout [ 1126.505309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.539158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.557970] device bridge_slave_0 entered promiscuous mode [ 1126.573003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.579437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.599341] device bridge_slave_1 entered promiscuous mode [ 1126.659172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.673821] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.694783] device bridge_slave_0 entered promiscuous mode [ 1126.707282] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1126.720192] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.726613] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.742514] device bridge_slave_1 entered promiscuous mode [ 1126.750903] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1126.797110] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1126.813656] team0: Port device team_slave_0 added [ 1126.821998] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1126.838218] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1126.846232] team0: Port device team_slave_1 added [ 1126.880292] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1126.961674] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1126.981833] team0: Port device team_slave_0 added [ 1126.987839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1127.002917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1127.059838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1127.083424] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1127.100681] team0: Port device team_slave_1 added [ 1127.106605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1127.113696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1127.159832] Bluetooth: hci3: command 0x0419 tx timeout [ 1127.179799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1127.205117] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1127.213746] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1127.222711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1127.228979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1127.255461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1127.293120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1127.299408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1127.359909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1127.412262] device hsr_slave_0 entered promiscuous mode [ 1127.424947] device hsr_slave_1 entered promiscuous mode [ 1127.431514] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1127.438864] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1127.447137] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1127.470149] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1127.501408] device hsr_slave_0 entered promiscuous mode [ 1127.520772] device hsr_slave_1 entered promiscuous mode [ 1127.563617] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1127.599444] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1127.783887] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1128.157841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1128.176591] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1128.189574] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1128.208679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1128.224703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1128.532716] oom_reaper: reaped process 12996 (syz-executor.5), now anon-rss:0kB, file-rss:33860kB, shmem-rss:0kB [ 1128.749885] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1128.769664] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1128.775904] CPU: 1 PID: 8131 Comm: syz-fuzzer Not tainted 4.19.163-syzkaller #0 [ 1128.783710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1128.793067] Call Trace: [ 1128.795661] dump_stack+0x1fc/0x2fe [ 1128.799291] dump_header+0x15d/0xc3f [ 1128.803005] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1128.808367] ? ___ratelimit+0x319/0x584 [ 1128.812379] oom_kill_process.cold+0x10/0x692 [ 1128.816873] ? check_preemption_disabled+0x41/0x280 [ 1128.821895] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1128.827174] out_of_memory+0x1072/0x1390 [ 1128.831244] ? oom_killer_disable+0x270/0x270 [ 1128.835742] ? mutex_trylock+0x15f/0x1a0 [ 1128.839807] __alloc_pages_nodemask+0x23a2/0x2890 [ 1128.844658] ? find_get_entry+0x4cd/0x8a0 [ 1128.848818] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1128.853711] alloc_pages_current+0x193/0x2a0 [ 1128.858123] filemap_fault+0x146e/0x2180 [ 1128.862195] ext4_filemap_fault+0x84/0xb0 [ 1128.866354] __do_fault+0x10b/0x4b0 [ 1128.869986] ? do_raw_spin_unlock+0x171/0x230 [ 1128.874567] __handle_mm_fault+0x273b/0x41c0 [ 1128.878976] ? vm_insert_page+0x9c0/0x9c0 [ 1128.883270] ? check_preemption_disabled+0x41/0x280 [ 1128.888297] handle_mm_fault+0x436/0xb10 [ 1128.892412] __do_page_fault+0x68e/0xd60 [ 1128.896486] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1128.901593] ? spurious_fault+0x840/0x840 [ 1128.905759] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1128.910923] ? page_fault+0x8/0x30 [ 1128.914474] page_fault+0x1e/0x30 [ 1128.917913] RIP: 0033:0x4561b0 [ 1128.921125] Code: Bad RIP value. [ 1128.924487] RSP: 002b:000000c00004df30 EFLAGS: 00010206 [ 1128.930143] RAX: 00000106b438090a RBX: 000000c00003e000 RCX: 0000000000000017 [ 1128.937502] RDX: 00000000122df90a RSI: 000000c00004df10 RDI: 000000c00004deec [ 1128.945057] RBP: 000000c00004dfa0 R08: 00007ffcc70e1000 R09: 0000012f0d67ba26 [ 1128.952424] R10: 000916fc857519b4 R11: 0000000000000001 R12: 0000000000439470 [ 1128.959683] R13: 0000000000000000 R14: 0000000000b81a70 R15: 0000000000000000 [ 1128.982083] Mem-Info: [ 1128.984561] active_anon:122200 inactive_anon:25117 isolated_anon:0 [ 1128.984561] active_file:54 inactive_file:0 isolated_file:1 [ 1128.984561] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1128.984561] slab_reclaimable:13159 slab_unreclaimable:118757 [ 1128.984561] mapped:43941 shmem:25470 pagetables:945 bounce:0 [ 1128.984561] free:13906 free_pcp:124 free_cma:0 [ 1129.018658] Node 0 active_anon:487568kB inactive_anon:43436kB active_file:88kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162552kB dirty:0kB writeback:0kB shmem:44516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1129.047791] Node 1 active_anon:1200kB inactive_anon:57032kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13100kB dirty:0kB writeback:0kB shmem:57364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1129.075214] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1129.102258] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1129.107404] Node 0 DMA32 free:17764kB min:35996kB low:44992kB high:53988kB active_anon:487596kB inactive_anon:43436kB active_file:68kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7744kB pagetables:3652kB bounce:0kB free_pcp:492kB local_pcp:244kB free_cma:0kB [ 1129.147489] lowmem_reserve[]: 0 0 1 1 1 [ 1129.151559] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1129.181907] lowmem_reserve[]: 0 0 0 0 0 [ 1129.185917] Node 1 Normal free:26340kB min:53876kB low:67344kB high:80812kB active_anon:1200kB inactive_anon:57032kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:144kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1129.219006] lowmem_reserve[]: 0 0 0 0 0 [ 1129.223106] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10868kB [ 1129.239635] net_ratelimit: 13 callbacks suppressed [ 1129.239641] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1129.242478] Node 0 DMA32: 985*4kB (UME) 1100*8kB (ME) 177*16kB (UME) 68*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17748kB [ 1129.244620] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1129.251116] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1129.264671] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1129.274170] Node 1 Normal: 87*4kB (UME) 88*8kB (ME) 50*16kB (ME) 11*32kB (M) 9*64kB (UME) 20*128kB (ME) 10*256kB (UM) 6*512kB (UM) 3*1024kB (M) 2*2048kB (UM) 2*4096kB (U) = 26332kB [ 1129.306090] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1129.318803] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1129.338213] syz-executor.5: vmalloc: allocation failure, allocated 1872445440 of 3621613568 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1129.348275] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1129.361321] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1129.366952] CPU: 0 PID: 12996 Comm: syz-executor.5 Not tainted 4.19.163-syzkaller #0 [ 1129.375091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1129.378782] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1129.384433] Call Trace: [ 1129.384455] dump_stack+0x1fc/0x2fe [ 1129.384471] warn_alloc.cold+0x7b/0x18f [ 1129.384489] ? zone_watermark_ok_safe+0x260/0x260 [ 1129.393064] 25504 total pagecache pages [ 1129.395626] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1129.399225] 0 pages in swap cache [ 1129.403185] ? retint_kernel+0x2d/0x2d [ 1129.403212] __vmalloc_area_node+0x4fd/0x780 [ 1129.408026] Swap cache stats: add 0, delete 0, find 0/0 [ 1129.411987] ? __vmalloc_node_range+0x180/0x180 [ 1129.412005] ? _raw_spin_unlock+0x29/0x40 [ 1129.412020] ? __get_vm_area_node+0x2e2/0x3a0 [ 1129.416746] Free swap = 0kB [ 1129.420187] __vmalloc_node_range+0xed/0x180 [ 1129.420202] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1129.420218] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1129.424087] Total swap = 0kB [ 1129.429095] vmalloc_user+0x70/0xe0 [ 1129.434470] 2097051 pages RAM [ 1129.439103] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1129.443253] 0 pages HighMem/MovableOnly [ 1129.447822] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1129.450893] 369639 pages reserved [ 1129.455625] __vb2_queue_alloc+0x472/0xe60 [ 1129.460418] 0 pages cma reserved [ 1129.465760] vb2_core_create_bufs+0x273/0x7e0 [ 1129.468752] Out of memory (oom_kill_allocating_task): Kill process 8131 (syz-fuzzer) score 0 or sacrifice child [ 1129.472362] ? __vb2_queue_free+0x870/0x870 [ 1129.472381] ? __mutex_add_waiter+0x160/0x160 [ 1129.472401] vb2_create_bufs+0x332/0x620 [ 1129.475539] Killed process 12973 (syz-executor.1) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 1129.479787] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1129.479801] ? __video_do_ioctl+0x632/0xcd0 [ 1129.479817] ? __mutex_add_waiter+0x160/0x160 [ 1129.502950] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1129.503415] ? mark_held_locks+0xf0/0xf0 [ 1129.515182] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1129.518262] vb2_ioctl_create_bufs+0x20d/0x360 [ 1129.576911] ? memset+0x20/0x40 [ 1129.580192] v4l_create_bufs+0xb2/0x160 [ 1129.584154] __video_do_ioctl+0x49a/0xcd0 [ 1129.588431] ? v4l_querycap+0x340/0x340 [ 1129.592400] ? __might_fault+0x192/0x1d0 [ 1129.596550] video_usercopy+0x13c/0x1000 [ 1129.600618] ? v4l_querycap+0x340/0x340 [ 1129.604587] ? v4l_enumstd+0x60/0x60 [ 1129.608291] ? mark_held_locks+0xf0/0xf0 [ 1129.612342] ? do_futex+0x163/0x1c70 [ 1129.616049] ? mark_held_locks+0xf0/0xf0 [ 1129.620191] ? mark_held_locks+0xf0/0xf0 [ 1129.624244] ? debug_check_no_obj_freed+0x201/0x482 [ 1129.629258] ? video_usercopy+0x1000/0x1000 [ 1129.633565] v4l2_ioctl+0x147/0x1a0 [ 1129.637180] ? video_devdata+0xa0/0xa0 [ 1129.641297] do_vfs_ioctl+0xcdb/0x12e0 [ 1129.645182] ? lock_downgrade+0x720/0x720 [ 1129.649329] ? check_preemption_disabled+0x41/0x280 [ 1129.654358] ? ioctl_preallocate+0x200/0x200 [ 1129.658762] ? __fget+0x356/0x510 [ 1129.662207] ? do_dup2+0x450/0x450 [ 1129.665759] ksys_ioctl+0x9b/0xc0 [ 1129.669658] __x64_sys_ioctl+0x6f/0xb0 [ 1129.673546] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1129.678120] do_syscall_64+0xf9/0x620 [ 1129.681912] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1129.687095] RIP: 0033:0x45e159 [ 1129.690285] Code: Bad RIP value. [ 1129.693646] RSP: 002b:00007f97906a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1129.701338] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e159 [ 1129.708594] RDX: 0000000020000340 RSI: 00000000c100565c RDI: 0000000000000003 [ 1129.715866] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1129.723297] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1129.730567] R13: 00007ffc100b0f6f R14: 00007f97906a39c0 R15: 000000000119bf8c [ 1129.737841] CPU: 1 PID: 8131 Comm: syz-fuzzer Not tainted 4.19.163-syzkaller #0 [ 1129.745301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1129.750286] Mem-Info: [ 1129.754669] Call Trace: [ 1129.757089] active_anon:122199 inactive_anon:25117 isolated_anon:0 [ 1129.757089] active_file:43 inactive_file:0 isolated_file:0 [ 1129.757089] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1129.757089] slab_reclaimable:13161 slab_unreclaimable:118821 [ 1129.757089] mapped:43935 shmem:25470 pagetables:949 bounce:0 [ 1129.757089] free:13740 free_pcp:217 free_cma:0 [ 1129.759656] dump_stack+0x1fc/0x2fe [ 1129.759674] dump_header+0x15d/0xc3f [ 1129.759689] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1129.759700] ? ___ratelimit+0x319/0x584 [ 1129.759717] oom_kill_process.cold+0x10/0x692 [ 1129.759749] ? check_preemption_disabled+0x41/0x280 [ 1129.802443] Node 0 active_anon:487596kB inactive_anon:43436kB active_file:168kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162580kB dirty:0kB writeback:0kB shmem:44516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1129.806802] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1129.816710] Node 1 active_anon:1200kB inactive_anon:57032kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13160kB dirty:0kB writeback:0kB shmem:57364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1129.820283] out_of_memory+0x1072/0x1390 [ 1129.820304] ? oom_killer_disable+0x270/0x270 [ 1129.820322] ? mutex_trylock+0x15f/0x1a0 [ 1129.820341] __alloc_pages_nodemask+0x23a2/0x2890 [ 1129.857677] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1129.880495] ? find_get_entry+0x4cd/0x8a0 [ 1129.880518] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1129.880553] alloc_pages_current+0x193/0x2a0 [ 1129.880568] filemap_fault+0x146e/0x2180 [ 1129.880590] ext4_filemap_fault+0x84/0xb0 [ 1129.880604] __do_fault+0x10b/0x4b0 [ 1129.880617] ? do_raw_spin_unlock+0x171/0x230 [ 1129.880630] __handle_mm_fault+0x273b/0x41c0 [ 1129.880645] ? vm_insert_page+0x9c0/0x9c0 [ 1129.880650] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1129.880667] ? check_preemption_disabled+0x41/0x280 [ 1129.880683] handle_mm_fault+0x436/0xb10 [ 1129.880699] __do_page_fault+0x68e/0xd60 [ 1129.894105] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1129.898141] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1129.933736] Node 0 DMA32 free:17748kB min:35996kB low:44992kB high:53988kB active_anon:487596kB inactive_anon:43436kB active_file:168kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7712kB pagetables:3652kB bounce:0kB free_pcp:612kB local_pcp:212kB free_cma:0kB [ 1129.938104] ? spurious_fault+0x840/0x840 [ 1129.938119] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1129.938133] ? page_fault+0x8/0x30 [ 1129.938143] page_fault+0x1e/0x30 [ 1129.938153] RIP: 0033:0x4561b0 [ 1129.938174] Code: Bad RIP value. [ 1129.938181] RSP: 002b:000000c00004df30 EFLAGS: 00010206 [ 1129.938191] RAX: 00000106b438090a RBX: 000000c00003e000 RCX: 0000000000000017 [ 1129.938197] RDX: 00000000122df90a RSI: 000000c00004df10 RDI: 000000c00004deec [ 1129.938204] RBP: 000000c00004dfa0 R08: 00007ffcc70e1000 R09: 0000012f0d67ba26 [ 1129.938212] R10: 000916fc857519b4 R11: 0000000000000001 R12: 0000000000439470 [ 1129.938218] R13: 0000000000000000 R14: 0000000000b81a70 R15: 0000000000000000 [ 1129.938757] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1129.945848] lowmem_reserve[]: 0 0 1 1 1 [ 1129.947009] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1129.956394] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1129.959543] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1129.966674] lowmem_reserve[]: 0 0 0 0 0 [ 1130.010837] Mem-Info: [ 1130.031957] Node 1 Normal free:26340kB min:53876kB low:67344kB high:80812kB active_anon:1200kB inactive_anon:57032kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:144kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1130.051405] active_anon:122189 inactive_anon:25117 isolated_anon:0 [ 1130.051405] active_file:29 inactive_file:0 isolated_file:8 [ 1130.051405] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1130.051405] slab_reclaimable:13161 slab_unreclaimable:118826 [ 1130.051405] mapped:43935 shmem:25470 pagetables:925 bounce:0 [ 1130.051405] free:13756 free_pcp:205 free_cma:0 [ 1130.051432] Node 0 active_anon:487556kB inactive_anon:43436kB active_file:124kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:162580kB dirty:0kB writeback:0kB shmem:44516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1130.051459] Node 1 active_anon:1200kB inactive_anon:57032kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13160kB dirty:0kB writeback:0kB shmem:57364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1130.063652] lowmem_reserve[]: 0 0 0 0 0 [ 1130.074823] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1130.080585] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10868kB [ 1130.089486] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1130.094428] Node 0 DMA32: 985*4kB (UME) 1100*8kB (ME) 177*16kB (UME) 70*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17812kB [ 1130.098525] Node 0 DMA32 free:17812kB min:35996kB low:44992kB high:53988kB active_anon:487556kB inactive_anon:43436kB active_file:124kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7712kB pagetables:3556kB bounce:0kB free_pcp:572kB local_pcp:368kB free_cma:0kB [ 1130.105052] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1130.105108] Node 1 Normal: 87*4kB (UME) 88*8kB (ME) 50*16kB (ME) 11*32kB (M) 9*64kB (UME) 20*128kB (ME) 10*256kB (UM) 6*512kB (UM) 3*1024kB (M) 2*2048kB (UM) 2*4096kB (U) = 26332kB [ 1130.131284] lowmem_reserve[]: 0 0 1 1 1 [ 1130.139620] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1130.141767] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1130.144121] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1130.173142] lowmem_reserve[]: 0 0 0 0 0 [ 1130.213473] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1130.242223] Node 1 Normal free:26532kB min:53876kB low:67344kB high:80812kB active_anon:1200kB inactive_anon:57032kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:144kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1130.297021] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1130.299863] lowmem_reserve[]: 0 0 0 0 0 [ 1130.320059] 25504 total pagecache pages [ 1130.336588] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10868kB [ 1130.368462] 0 pages in swap cache [ 1130.372940] Node 0 DMA32: 984*4kB (ME) 1114*8kB (UME) 190*16kB (UME) 70*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18128kB [ 1130.388515] Swap cache stats: add 0, delete 0, find 0/0 [ 1130.397981] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1130.401998] Free swap = 0kB [ 1130.435615] Node 1 Normal: 87*4kB (UME) 89*8kB (UME) 51*16kB (UME) 12*32kB (UM) 8*64kB (ME) 20*128kB (ME) 9*256kB (M) 5*512kB (M) 4*1024kB (UM) 2*2048kB (UM) 2*4096kB (U) = 26580kB [ 1130.437850] Total swap = 0kB [ 1130.447501] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1130.452473] 2097051 pages RAM [ 1130.484830] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1130.509467] 0 pages HighMem/MovableOnly [ 1130.519246] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1130.526298] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1130.526336] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1130.528068] 369639 pages reserved [ 1130.537594] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1130.543051] 0 pages cma reserved [ 1130.546357] 25504 total pagecache pages [ 1130.639718] 0 pages in swap cache [ 1130.643180] Swap cache stats: add 0, delete 0, find 0/0 [ 1130.648536] Free swap = 0kB [ 1130.658194] Total swap = 0kB [ 1130.661277] 2097051 pages RAM [ 1130.664389] 0 pages HighMem/MovableOnly [ 1130.668357] 369639 pages reserved [ 1130.678177] 0 pages cma reserved [ 1130.681809] Out of memory (oom_kill_allocating_task): Kill process 8131 (syz-fuzzer) score 0 or sacrifice child [ 1130.698278] Killed process 12963 (syz-executor.3) total-vm:85024kB, anon-rss:1728kB, file-rss:0kB, shmem-rss:0kB [ 1130.749971] kworker/u4:0 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1130.768990] kworker/u4:0 cpuset=/ mems_allowed=0-1 [ 1130.774089] CPU: 1 PID: 7 Comm: kworker/u4:0 Not tainted 4.19.163-syzkaller #0 [ 1130.781459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1130.790974] Workqueue: events_unbound call_usermodehelper_exec_work [ 1130.797387] Call Trace: [ 1130.799986] dump_stack+0x1fc/0x2fe [ 1130.803617] dump_header+0x15d/0xc3f [ 1130.807436] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1130.812538] ? ___ratelimit+0x319/0x584 [ 1130.816514] oom_kill_process.cold+0x10/0x692 [ 1130.821015] ? oom_badness.part.0+0x135/0x650 [ 1130.825609] ? lock_downgrade+0x720/0x720 [ 1130.829757] ? check_preemption_disabled+0x41/0x280 [ 1130.834780] out_of_memory+0x34d/0x1390 [ 1130.838849] ? oom_killer_disable+0x270/0x270 [ 1130.843353] ? mutex_trylock+0x15f/0x1a0 [ 1130.847427] __alloc_pages_nodemask+0x23a2/0x2890 [ 1130.852289] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1130.857133] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1130.862080] ? mark_held_locks+0xa6/0xf0 [ 1130.866147] ? ____cache_alloc_node+0x156/0x1d0 [ 1130.870817] ? cache_grow_begin+0x64/0x8a0 [ 1130.875079] cache_grow_begin+0xa4/0x8a0 [ 1130.879148] fallback_alloc+0x213/0x2e0 [ 1130.883128] kmem_cache_alloc_node+0xe3/0x3b0 [ 1130.887629] copy_process.part.0+0x1ceb/0x8200 [ 1130.892219] ? __lock_acquire+0x6de/0x3ff0 [ 1130.896460] ? __lock_acquire+0x6de/0x3ff0 [ 1130.900702] ? umh_complete+0x90/0x90 [ 1130.904528] ? __cleanup_sighand+0x60/0x60 [ 1130.908760] ? mark_held_locks+0xf0/0xf0 [ 1130.912828] ? __lock_acquire+0x6de/0x3ff0 [ 1130.917086] _do_fork+0x22f/0xf30 [ 1130.920539] ? umh_complete+0x90/0x90 [ 1130.924340] ? fork_idle+0x220/0x220 [ 1130.928074] ? lock_acquire+0x170/0x3c0 [ 1130.932050] ? debug_object_deactivate+0xfc/0x2e0 [ 1130.936914] ? trace_hardirqs_off+0x64/0x200 [ 1130.941328] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1130.946439] ? umh_complete+0x90/0x90 [ 1130.950241] kernel_thread+0x2f/0x40 [ 1130.953965] call_usermodehelper_exec_work+0x16d/0x260 [ 1130.959246] ? call_usermodehelper_exec_async+0x6a0/0x6a0 [ 1130.964793] process_one_work+0x864/0x1570 [ 1130.969123] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 1130.973908] worker_thread+0x64c/0x1130 [ 1130.977893] ? process_one_work+0x1570/0x1570 [ 1130.982388] kthread+0x33f/0x460 [ 1130.985870] ? kthread_park+0x180/0x180 [ 1130.989847] ret_from_fork+0x24/0x30 [ 1131.023062] Mem-Info: [ 1131.025528] active_anon:122189 inactive_anon:25117 isolated_anon:0 [ 1131.025528] active_file:13 inactive_file:13 isolated_file:8 [ 1131.025528] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1131.025528] slab_reclaimable:13161 slab_unreclaimable:118842 [ 1131.025528] mapped:43935 shmem:25470 pagetables:925 bounce:0 [ 1131.025528] free:13906 free_pcp:61 free_cma:0 [ 1131.065178] Node 0 active_anon:487556kB inactive_anon:43436kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:162580kB dirty:0kB writeback:0kB shmem:44516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1131.102832] Node 1 active_anon:1200kB inactive_anon:57032kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13160kB dirty:0kB writeback:0kB shmem:57364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1131.141956] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1131.168872] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1131.235726] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1131.255417] Node 0 DMA32 free:18008kB min:35996kB low:44992kB high:53988kB active_anon:487516kB inactive_anon:43436kB active_file:64kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7680kB pagetables:3460kB bounce:0kB free_pcp:496kB local_pcp:252kB free_cma:0kB [ 1131.309092] lowmem_reserve[]: 0 0 1 1 1 [ 1131.316504] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1131.360994] lowmem_reserve[]: 0 0 0 0 0 [ 1131.365031] Node 1 Normal free:26612kB min:53876kB low:67344kB high:80812kB active_anon:1200kB inactive_anon:57032kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:144kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1131.414821] lowmem_reserve[]: 0 0 0 0 0 [ 1131.418863] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10868kB [ 1131.445747] Node 0 DMA32: 992*4kB (ME) 1111*8kB (ME) 179*16kB (ME) 71*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17992kB [ 1131.472577] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1131.506189] Node 1 Normal: 87*4kB (UME) 89*8kB (UME) 51*16kB (UME) 13*32kB (UM) 8*64kB (ME) 20*128kB (ME) 9*256kB (M) 5*512kB (M) 4*1024kB (UM) 2*2048kB (UM) 2*4096kB (U) = 26612kB [ 1131.556555] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1131.589281] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1131.652527] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1131.703487] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1131.769373] 26481 total pagecache pages [ 1131.782344] 0 pages in swap cache [ 1131.796392] Swap cache stats: add 0, delete 0, find 0/0 [ 1131.826705] Free swap = 0kB [ 1131.838659] Total swap = 0kB [ 1131.857130] 2097051 pages RAM [ 1131.867131] 0 pages HighMem/MovableOnly [ 1131.881939] 369639 pages reserved [ 1131.889469] 0 pages cma reserved [ 1131.899609] Out of memory: Kill process 8130 (syz-fuzzer) score 68 or sacrifice child [ 1131.917883] Killed process 11256 (syz-executor.0) total-vm:85024kB, anon-rss:1724kB, file-rss:4kB, shmem-rss:0kB [ 1131.949435] oom_reaper: reaped process 11256 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1135.504371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1135.526307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1135.538058] device bridge_slave_1 left promiscuous mode [ 1135.547933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.558814] device bridge_slave_0 left promiscuous mode [ 1135.574193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.586330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1135.601880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1135.611097] device bridge_slave_1 left promiscuous mode [ 1135.616637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.632447] device bridge_slave_0 left promiscuous mode [ 1135.638007] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.655051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1135.665846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1135.677331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1135.688826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1135.704718] device bridge_slave_1 left promiscuous mode [ 1135.713027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.724926] device bridge_slave_0 left promiscuous mode [ 1135.733305] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.752622] device veth1_macvtap left promiscuous mode [ 1135.757978] device veth0_macvtap left promiscuous mode [ 1135.767698] device veth1_vlan left promiscuous mode [ 1135.777644] device veth0_vlan left promiscuous mode [ 1138.279111] Bluetooth: hci2: command 0x0409 tx timeout [ 1139.318811] Bluetooth: hci3: command 0x0409 tx timeout [ 1140.358682] Bluetooth: hci2: command 0x041b tx timeout [ 1141.398835] Bluetooth: hci3: command 0x041b tx timeout [ 1141.688096] device hsr_slave_1 left promiscuous mode [ 1141.695607] device hsr_slave_0 left promiscuous mode [ 1141.707573] team0 (unregistering): Port device team_slave_1 removed [ 1141.717512] team0 (unregistering): Port device team_slave_0 removed [ 1141.729622] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1141.740166] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1141.769478] bond0 (unregistering): Released all slaves [ 1141.805654] device hsr_slave_1 left promiscuous mode [ 1141.813503] device hsr_slave_0 left promiscuous mode [ 1141.828272] team0 (unregistering): Port device team_slave_1 removed [ 1141.838511] team0 (unregistering): Port device team_slave_0 removed [ 1141.847330] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1141.858370] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1141.889714] bond0 (unregistering): Released all slaves [ 1141.901248] bond3 (unregistering): Released all slaves [ 1141.912786] bond2 (unregistering): Released all slaves [ 1141.920902] bond1 (unregistering): Released all slaves [ 1141.956842] device hsr_slave_1 left promiscuous mode [ 1141.967140] device hsr_slave_0 left promiscuous mode [ 1141.986456] team0 (unregistering): Port device team_slave_1 removed [ 1141.996057] team0 (unregistering): Port device team_slave_0 removed [ 1142.009651] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1142.022367] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1142.055659] bond0 (unregistering): Released all slaves [ 1142.074791] IPVS: ftp: loaded support on port[0] = 21 [ 1142.086528] IPVS: ftp: loaded support on port[0] = 21 [ 1142.208342] chnl_net:caif_netlink_parms(): no params data found [ 1142.311667] chnl_net:caif_netlink_parms(): no params data found [ 1142.438531] Bluetooth: hci2: command 0x040f tx timeout [ 1142.557104] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.571230] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.584428] device bridge_slave_0 entered promiscuous mode [ 1142.616440] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.630100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.637760] device bridge_slave_1 entered promiscuous mode [ 1142.651651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.658027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.673173] device bridge_slave_0 entered promiscuous mode [ 1142.698676] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.705061] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.713729] device bridge_slave_1 entered promiscuous mode [ 1142.722518] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1142.745855] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1142.764635] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1142.780514] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1142.788068] team0: Port device team_slave_0 added [ 1142.795671] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1142.805820] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1142.814087] team0: Port device team_slave_1 added [ 1142.847673] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1142.855826] team0: Port device team_slave_0 added [ 1142.862498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1142.869538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1142.895680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1142.907009] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1142.915468] team0: Port device team_slave_1 added [ 1142.921754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1142.929900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1142.955529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1142.980479] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1142.988136] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1142.996996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1143.003685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1143.029337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1143.055890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1143.063578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1143.089558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1143.103961] device hsr_slave_0 entered promiscuous mode [ 1143.110372] device hsr_slave_1 entered promiscuous mode [ 1143.116354] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1143.125050] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1143.132939] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1143.140563] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1143.174843] device hsr_slave_0 entered promiscuous mode [ 1143.180842] device hsr_slave_1 entered promiscuous mode [ 1143.204889] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1143.215009] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1143.405933] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1143.466469] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1143.478498] Bluetooth: hci3: command 0x040f tx timeout [ 1143.524800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1143.550089] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1143.572428] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1143.585972] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1143.595706] 8021q: adding VLAN 0 to HW filter on device team0 [ 1143.606120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1143.619518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1143.630407] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1143.645146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1143.653709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1143.667657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.674339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1143.683657] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1143.699949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1143.706104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1143.714418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1143.722591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1143.730431] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.736775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1143.747045] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1143.755883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1143.766399] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1143.774745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1143.785184] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1143.794269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1143.804758] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1143.813471] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1143.819779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1143.827505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1143.835293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1143.843427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1143.851441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1143.858586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1143.865552] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1143.875040] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1143.883661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1143.892745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1144.096655] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1144.102839] 8021q: adding VLAN 0 to HW filter on device team0 [ 1144.113883] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1144.122490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1144.133719] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1144.141745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1144.151772] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1144.159277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1144.167856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1144.175520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1144.183605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1144.191630] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.197980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1144.205087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1144.219859] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1144.229603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1144.237470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1144.246175] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.252599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1144.263684] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1144.272746] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1144.379791] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1144.390644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1144.396949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1144.406279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1144.414393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1144.423513] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1144.518576] Bluetooth: hci2: command 0x0419 tx timeout [ 1144.541064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1144.552015] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1144.562049] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1144.569248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1144.577534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1144.586101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1144.594259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1144.602948] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1144.617249] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1144.725734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1144.733454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1144.743945] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1144.754842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1144.765647] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1144.772186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1144.784094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1144.793019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1144.803628] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1144.823285] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1144.835207] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1144.842898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1144.852396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1144.863349] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1144.875588] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1144.883215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1144.901509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1144.917755] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1144.928480] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1144.935637] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1144.943375] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1144.954164] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1144.963198] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1144.973801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1144.985228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1144.994103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1145.002778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1145.020044] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1145.027008] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1145.146857] device veth0_vlan entered promiscuous mode [ 1145.161680] device veth1_vlan entered promiscuous mode [ 1145.167790] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1145.181799] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1145.189290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1145.197228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1145.311191] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1145.322618] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1145.329636] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1145.345896] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1145.354013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1145.362102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1145.372524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1145.380260] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1145.491779] device veth0_vlan entered promiscuous mode [ 1145.500058] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1145.511409] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1145.520522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1145.530821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1145.540712] device veth0_macvtap entered promiscuous mode [ 1145.546843] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1145.554697] device veth1_vlan entered promiscuous mode [ 1145.559183] Bluetooth: hci3: command 0x0419 tx timeout [ 1145.564072] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1145.676374] device veth1_macvtap entered promiscuous mode [ 1145.683546] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1145.694805] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1145.703320] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1145.714042] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1145.821359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1145.831288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1145.842081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1145.852536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1145.862233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1145.872406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1145.883133] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1145.890743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1145.904071] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1145.911944] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1145.919846] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1145.927044] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1145.935013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1145.943265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1146.053911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1146.063828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.073698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1146.083887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.094259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1146.104395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.114954] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1146.124767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1146.135086] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1146.143137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1146.162158] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1146.279328] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1146.288176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1146.296077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1146.310164] device veth0_macvtap entered promiscuous mode [ 1146.316707] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1146.326985] device veth1_macvtap entered promiscuous mode [ 1146.343732] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1146.353547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1146.363621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1146.376439] device bridge_slave_1 left promiscuous mode [ 1146.382293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.391692] device bridge_slave_0 left promiscuous mode [ 1146.397147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.406616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1146.414523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1146.422901] device bridge_slave_1 left promiscuous mode [ 1146.428459] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.435397] device bridge_slave_0 left promiscuous mode [ 1146.441020] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.451139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1146.457869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1146.466045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1146.472931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1146.482172] device bridge_slave_1 left promiscuous mode [ 1146.487728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.495665] device bridge_slave_0 left promiscuous mode [ 1146.501932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.514218] device veth1_macvtap left promiscuous mode [ 1146.519758] device veth0_macvtap left promiscuous mode [ 1146.525376] device veth1_vlan left promiscuous mode [ 1146.530763] device veth0_vlan left promiscuous mode [ 1150.919292] device hsr_slave_1 left promiscuous mode [ 1150.927169] device hsr_slave_0 left promiscuous mode [ 1150.939370] team0 (unregistering): Port device team_slave_1 removed [ 1150.953256] team0 (unregistering): Port device team_slave_0 removed [ 1150.962293] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1150.975888] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1151.003063] bond0 (unregistering): Released all slaves [ 1151.039096] device hsr_slave_1 left promiscuous mode [ 1151.046393] device hsr_slave_0 left promiscuous mode [ 1151.061449] team0 (unregistering): Port device team_slave_1 removed [ 1151.071888] team0 (unregistering): Port device team_slave_0 removed [ 1151.083104] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1151.093816] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1151.122689] bond0 (unregistering): Released all slaves [ 1151.162013] device hsr_slave_1 left promiscuous mode [ 1151.171975] device hsr_slave_0 left promiscuous mode [ 1151.186930] team0 (unregistering): Port device team_slave_1 removed [ 1151.198850] team0 (unregistering): Port device team_slave_0 removed [ 1151.208493] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1151.219343] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1151.251640] bond0 (unregistering): Released all slaves [ 1151.267377] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1151.276472] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1151.309224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1151.322234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.332393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1151.344467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.353704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1151.363795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.374455] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1151.381633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1151.389265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1151.397100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1151.408717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1151.419228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.429003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1151.439542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.449615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1151.459740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.471229] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1151.478350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1151.486531] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1151.495112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1151.592350] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1151.600657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.611714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.619383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1151.644169] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1151.653806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.662538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.676095] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1151.780622] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1151.804590] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1151.843045] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1151.856319] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1151.871351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.887708] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1151.889480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.919755] EXT4-fs (loop1): get root inode failed [ 1151.924741] EXT4-fs (loop1): mount failed [ 1151.925258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1151.943057] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1151.950491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.963034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.971244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1152.009861] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1152.019420] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1152.028921] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1152.044113] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1152.066386] EXT4-fs (loop1): get root inode failed [ 1152.072018] EXT4-fs (loop1): mount failed 21:51:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20ff0f, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:51:27 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4800, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:51:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x6000000000000000}, 0x0) 21:51:27 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000000902000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:51:27 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1c8, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:51:27 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x2000, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) [ 1152.171729] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1152.182854] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1152.212960] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1152.236687] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated 21:51:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x9effffff00000000}, 0x0) [ 1152.272585] EXT4-fs (loop1): get root inode failed [ 1152.296265] EXT4-fs (loop1): mount failed [ 1152.383395] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 21:51:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) [ 1152.440066] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 21:51:28 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1c9, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:51:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) [ 1152.496644] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1152.566893] EXT4-fs: failed to create workqueue [ 1152.582409] EXT4-fs (loop1): mount failed 21:51:28 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x600000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:51:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 21:51:28 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1ca, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:51:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) [ 1152.851784] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1152.915873] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1152.962661] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1152.998575] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1153.031337] EXT4-fs (loop1): get root inode failed [ 1153.060028] EXT4-fs (loop1): mount failed [ 1153.119948] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1153.150922] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1153.190138] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1153.227984] EXT4-fs: failed to create workqueue [ 1153.246014] EXT4-fs (loop1): mount failed [ 1155.819822] IPVS: ftp: loaded support on port[0] = 21 [ 1156.016734] chnl_net:caif_netlink_parms(): no params data found [ 1156.124494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.132079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.143395] device bridge_slave_0 entered promiscuous mode [ 1156.152006] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.162279] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.170597] device bridge_slave_1 entered promiscuous mode [ 1156.204664] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1156.214589] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1156.243900] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1156.252355] team0: Port device team_slave_0 added [ 1156.258939] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1156.266595] team0: Port device team_slave_1 added [ 1156.291890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1156.299057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.328970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1156.342760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.351888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.382893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1156.394531] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1156.406992] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1156.441557] device hsr_slave_0 entered promiscuous mode [ 1156.451603] device hsr_slave_1 entered promiscuous mode [ 1156.458250] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1156.465605] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1156.562006] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.568439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1156.575105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.581621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1156.645658] IPVS: ftp: loaded support on port[0] = 21 [ 1156.709070] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1156.715178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1156.740965] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1156.779842] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1156.785954] 8021q: adding VLAN 0 to HW filter on device team0 [ 1156.796459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1156.805853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.816727] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.825347] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1156.858500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1156.871236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.877693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1156.886618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1156.898615] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.904989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1156.941703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1157.008040] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1157.016173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1157.033132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1157.044344] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1157.085900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1157.098450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1157.109337] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1157.115381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1157.143890] chnl_net:caif_netlink_parms(): no params data found [ 1157.169788] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1157.189035] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1157.195330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1157.209105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1157.245990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1157.278658] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1157.293274] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1157.300674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1157.316343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1157.371977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.379432] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.386976] device bridge_slave_0 entered promiscuous mode [ 1157.401751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.421859] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.434403] device bridge_slave_1 entered promiscuous mode [ 1157.472920] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1157.486666] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1157.496027] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1157.505383] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1157.519419] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1157.532558] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1157.540148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1157.549632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1157.567622] device veth0_vlan entered promiscuous mode [ 1157.582926] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1157.590998] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1157.604510] device veth1_vlan entered promiscuous mode [ 1157.612168] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1157.620013] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1157.628955] team0: Port device team_slave_0 added [ 1157.639847] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1157.646917] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1157.659426] team0: Port device team_slave_1 added [ 1157.692829] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1157.701196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1157.710558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1157.740995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1157.753307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1157.764389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1157.796552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1157.813547] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1157.821518] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1157.854033] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1157.865014] device hsr_slave_0 entered promiscuous mode [ 1157.875666] device hsr_slave_1 entered promiscuous mode [ 1157.882205] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1157.889670] Bluetooth: hci4: command 0x0409 tx timeout [ 1157.896372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1157.905365] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1157.919613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1157.932928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1157.943860] device veth0_macvtap entered promiscuous mode [ 1157.952957] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1157.961182] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1157.982738] device veth1_macvtap entered promiscuous mode [ 1157.991194] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1158.003555] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1158.018601] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1158.026065] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1158.046216] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1158.064089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1158.074853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.085466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1158.096042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.106851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1158.127349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.136474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1158.151438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.163559] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1158.175109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1158.188721] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1158.200199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1158.217908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1158.234347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.244717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1158.259976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.273047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1158.288574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.302513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1158.314496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.330865] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1158.341035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1158.354285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1158.370914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1158.502073] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1158.593433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1158.643235] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1158.665009] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1158.673844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1158.687820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1158.700288] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1158.706407] 8021q: adding VLAN 0 to HW filter on device team0 [ 1158.715672] Bluetooth: hci5: command 0x0409 tx timeout [ 1158.724905] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1158.733523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1158.743331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1158.753927] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.760341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1158.778303] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1158.789015] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1158.796182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1158.807581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1158.821949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1158.833595] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.840106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.860719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1158.875745] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1158.885041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1158.913488] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1158.922367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1158.934267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1158.947591] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1158.958401] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1158.965247] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1158.976255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1158.994961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1159.016556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1159.030330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1159.043551] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1159.061598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1159.074608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1159.113690] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1159.127307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1159.144252] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1159.161399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.193543] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1159.205914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.215145] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1159.224859] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1159.233039] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1159.262382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1159.281560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1159.301800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.308013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1159.310908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.347983] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1159.362198] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1159.408155] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1159.415257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1159.429871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1159.941680] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1159.974311] Bluetooth: hci4: command 0x041b tx timeout [ 1160.033723] systemd-journal cpuset=/ mems_allowed=0-1 [ 1160.043986] CPU: 0 PID: 12469 Comm: systemd-journal Not tainted 4.19.163-syzkaller #0 [ 1160.051972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1160.061333] Call Trace: [ 1160.063926] dump_stack+0x1fc/0x2fe [ 1160.067634] dump_header+0x15d/0xc3f [ 1160.071351] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1160.076524] ? ___ratelimit+0x319/0x584 [ 1160.080493] oom_kill_process.cold+0x10/0x692 [ 1160.084975] ? check_preemption_disabled+0x41/0x280 [ 1160.090334] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1160.095784] out_of_memory+0x1072/0x1390 [ 1160.099850] ? oom_killer_disable+0x270/0x270 [ 1160.104360] ? mutex_trylock+0x15f/0x1a0 [ 1160.116684] __alloc_pages_nodemask+0x23a2/0x2890 [ 1160.121578] ? find_get_entry+0x4cd/0x8a0 [ 1160.125741] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1160.130609] alloc_pages_current+0x193/0x2a0 [ 1160.135082] filemap_fault+0x146e/0x2180 [ 1160.139241] ext4_filemap_fault+0x84/0xb0 [ 1160.143382] __do_fault+0x10b/0x4b0 [ 1160.147190] __handle_mm_fault+0x273b/0x41c0 [ 1160.151716] ? lock_acquire+0x170/0x3c0 [ 1160.155675] ? vm_insert_page+0x9c0/0x9c0 [ 1160.159824] ? check_preemption_disabled+0x41/0x280 [ 1160.164834] handle_mm_fault+0x436/0xb10 [ 1160.168885] __do_page_fault+0x68e/0xd60 [ 1160.172930] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1160.177944] ? spurious_fault+0x840/0x840 [ 1160.182092] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1160.186934] ? page_fault+0x8/0x30 [ 1160.190653] page_fault+0x1e/0x30 [ 1160.194314] RIP: 0033:0x7f1b787e8650 [ 1160.198027] Code: Bad RIP value. [ 1160.201400] RSP: 002b:00007fff491e42e8 EFLAGS: 00010202 [ 1160.206768] RAX: 0000000000000001 RBX: 00007fff491e4610 RCX: 0000000000000100 [ 1160.214034] RDX: 0000000000000042 RSI: 00007f1b79289980 RDI: 00007fff491e4610 [ 1160.222788] RBP: 00007f1b79289980 R08: 0000000000000001 R09: 0000000000000001 [ 1160.230081] R10: 0000000000000069 R11: 0000000000000001 R12: 00000000ffffffff [ 1160.237461] R13: 00005561f164f040 R14: 00007fff491e45d0 R15: 00007fff491e4b80 [ 1160.257932] Mem-Info: [ 1160.260419] active_anon:123141 inactive_anon:25094 isolated_anon:0 [ 1160.260419] active_file:8 inactive_file:22 isolated_file:0 [ 1160.260419] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1160.260419] slab_reclaimable:13053 slab_unreclaimable:114197 [ 1160.260419] mapped:52756 shmem:25450 pagetables:999 bounce:0 [ 1160.260419] free:24962 free_pcp:234 free_cma:0 [ 1160.314406] Node 0 active_anon:491200kB inactive_anon:43320kB active_file:28kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162644kB dirty:0kB writeback:0kB shmem:44400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 153600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1160.353898] Node 1 active_anon:1364kB inactive_anon:57056kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48380kB dirty:0kB writeback:0kB shmem:57400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1160.384717] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1160.414781] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1160.423591] Node 0 DMA32 free:35608kB min:35996kB low:44992kB high:53988kB active_anon:491200kB inactive_anon:43320kB active_file:0kB inactive_file:268kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7648kB pagetables:3660kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1160.462878] lowmem_reserve[]: 0 0 1 1 1 [ 1160.466955] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1160.496929] lowmem_reserve[]: 0 0 0 0 0 [ 1160.500934] Node 1 Normal free:53768kB min:53876kB low:67344kB high:80812kB active_anon:1364kB inactive_anon:57056kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:352kB pagetables:336kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1160.532952] lowmem_reserve[]: 0 0 0 0 0 [ 1160.537030] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10972kB [ 1160.551882] Node 0 DMA32: 1364*4kB (UME) 1719*8kB (UMEH) 466*16kB (UME) 191*32kB (UME) 54*64kB (UMH) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36360kB [ 1160.567370] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1160.578716] Node 1 Normal: 132*4kB (UME) 119*8kB (UME) 66*16kB (ME) 24*32kB (UM) 17*64kB (ME) 22*128kB (ME) 10*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 1*2048kB (M) 9*4096kB (U) = 53800kB [ 1160.596023] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1160.606000] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1160.614771] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1160.623990] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1160.632680] 25501 total pagecache pages [ 1160.636665] 0 pages in swap cache [ 1160.640297] Swap cache stats: add 0, delete 0, find 0/0 [ 1160.645665] Free swap = 0kB [ 1160.648752] Total swap = 0kB [ 1160.652911] 2097051 pages RAM [ 1160.656009] 0 pages HighMem/MovableOnly [ 1160.660066] 369639 pages reserved [ 1160.664646] 0 pages cma reserved [ 1160.668080] Out of memory (oom_kill_allocating_task): Kill process 12469 (systemd-journal) score 0 or sacrifice child [ 1160.680932] Killed process 12469 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:2064kB [ 1160.693335] oom_reaper: reaped process 12469 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2064kB [ 1160.757469] Bluetooth: hci5: command 0x041b tx timeout [ 1161.016438] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1161.045531] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1161.050436] CPU: 0 PID: 8135 Comm: syz-fuzzer Not tainted 4.19.163-syzkaller #0 [ 1161.057970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1161.067493] Call Trace: [ 1161.070086] dump_stack+0x1fc/0x2fe [ 1161.073719] dump_header+0x15d/0xc3f [ 1161.077438] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1161.082549] ? ___ratelimit+0x319/0x584 [ 1161.086703] oom_kill_process.cold+0x10/0x692 [ 1161.091197] ? check_preemption_disabled+0x41/0x280 [ 1161.096223] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1161.101505] out_of_memory+0x1072/0x1390 [ 1161.105578] ? oom_killer_disable+0x270/0x270 [ 1161.110080] ? mutex_trylock+0x15f/0x1a0 [ 1161.114601] __alloc_pages_nodemask+0x23a2/0x2890 [ 1161.119458] ? find_get_entry+0x4cd/0x8a0 [ 1161.123615] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1161.128484] alloc_pages_current+0x193/0x2a0 [ 1161.132897] filemap_fault+0x146e/0x2180 [ 1161.136968] ext4_filemap_fault+0x84/0xb0 [ 1161.141121] __do_fault+0x10b/0x4b0 [ 1161.144747] ? do_raw_spin_unlock+0x171/0x230 [ 1161.150723] __handle_mm_fault+0x273b/0x41c0 [ 1161.155142] ? vm_insert_page+0x9c0/0x9c0 [ 1161.159306] ? check_preemption_disabled+0x41/0x280 [ 1161.164331] handle_mm_fault+0x436/0xb10 [ 1161.168403] __do_page_fault+0x68e/0xd60 [ 1161.172482] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1161.177500] ? spurious_fault+0x840/0x840 [ 1161.181648] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1161.187274] ? page_fault+0x8/0x30 [ 1161.190814] page_fault+0x1e/0x30 [ 1161.194263] RIP: 0033:0x44bd00 [ 1161.197463] Code: Bad RIP value. [ 1161.200822] RSP: 002b:000000c00014f968 EFLAGS: 00010287 [ 1161.206181] RAX: 0000000000000017 RBX: 000000c000001680 RCX: 0000000000000001 [ 1161.213447] RDX: 0000000000000101 RSI: 00000000019d1860 RDI: 000000c000314780 [ 1161.220829] RBP: 000000c00014f9e0 R08: fffffffffffffffa R09: 000000c00014fbf0 [ 1161.232460] R10: 00007f86ab3ddc88 R11: 0000000000000206 R12: 000000c0009ea8e0 [ 1161.240166] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1161.271023] Mem-Info: [ 1161.293779] active_anon:123024 inactive_anon:25093 isolated_anon:0 [ 1161.293779] active_file:8 inactive_file:21 isolated_file:2 [ 1161.293779] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1161.293779] slab_reclaimable:13029 slab_unreclaimable:114181 [ 1161.293779] mapped:52226 shmem:25450 pagetables:975 bounce:0 [ 1161.293779] free:25171 free_pcp:2 free_cma:0 [ 1161.346671] Node 0 active_anon:491184kB inactive_anon:43320kB active_file:32kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162576kB dirty:0kB writeback:0kB shmem:44400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 153600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1161.383351] Node 1 active_anon:912kB inactive_anon:57052kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:46328kB dirty:0kB writeback:0kB shmem:57400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1161.421382] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1161.448008] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1161.453058] Node 0 DMA32 free:35884kB min:35996kB low:44992kB high:53988kB active_anon:491184kB inactive_anon:43320kB active_file:132kB inactive_file:320kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7616kB pagetables:3660kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1161.482098] lowmem_reserve[]: 0 0 1 1 1 [ 1161.486096] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1161.512251] lowmem_reserve[]: 0 0 0 0 0 [ 1161.516218] Node 1 Normal free:53824kB min:53876kB low:67344kB high:80812kB active_anon:912kB inactive_anon:57052kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1161.551256] lowmem_reserve[]: 0 0 0 0 0 [ 1161.555270] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10972kB [ 1161.569104] Node 0 DMA32: 1363*4kB (UME) 1718*8kB (UME) 456*16kB (UME) 189*32kB (UME) 54*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35996kB [ 1161.583601] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1161.594712] Node 1 Normal: 133*4kB (ME) 115*8kB (UME) 80*16kB (UME) 26*32kB (M) 20*64kB (ME) 22*128kB (ME) 9*256kB (M) 4*512kB (UM) 3*1024kB (UM) 1*2048kB (M) 9*4096kB (U) = 53996kB [ 1161.611211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1161.620120] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1161.628847] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1161.638062] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1161.646637] 25505 total pagecache pages [ 1161.650668] 0 pages in swap cache [ 1161.654117] Swap cache stats: add 0, delete 0, find 0/0 [ 1161.659669] Free swap = 0kB [ 1161.662694] Total swap = 0kB [ 1161.665708] 2097051 pages RAM [ 1161.680080] 0 pages HighMem/MovableOnly [ 1161.684078] 369639 pages reserved [ 1161.687568] 0 pages cma reserved [ 1161.690940] Out of memory (oom_kill_allocating_task): Kill process 8135 (syz-fuzzer) score 0 or sacrifice child [ 1161.701280] Killed process 14024 (syz-executor.4) total-vm:85024kB, anon-rss:1724kB, file-rss:4kB, shmem-rss:0kB [ 1161.712390] oom_reaper: reaped process 14024 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1161.751959] oom_reaper: reaped process 13959 (syz-executor.5), now anon-rss:0kB, file-rss:33800kB, shmem-rss:0kB [ 1161.952852] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1162.036998] Bluetooth: hci4: command 0x040f tx timeout [ 1162.050289] in:imklog cpuset=/ mems_allowed=0-1 [ 1162.055685] CPU: 1 PID: 12961 Comm: in:imklog Not tainted 4.19.163-syzkaller #0 [ 1162.063131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1162.072569] Call Trace: [ 1162.075161] dump_stack+0x1fc/0x2fe [ 1162.078799] dump_header+0x15d/0xc3f [ 1162.082616] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1162.087723] ? ___ratelimit+0x319/0x584 [ 1162.091701] oom_kill_process.cold+0x10/0x692 [ 1162.096184] ? check_preemption_disabled+0x41/0x280 [ 1162.101202] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1162.106735] out_of_memory+0x1072/0x1390 [ 1162.110961] ? oom_killer_disable+0x270/0x270 [ 1162.115468] ? mutex_trylock+0x15f/0x1a0 [ 1162.119528] __alloc_pages_nodemask+0x23a2/0x2890 [ 1162.124373] ? find_get_entry+0x4cd/0x8a0 [ 1162.128521] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1162.133365] alloc_pages_current+0x193/0x2a0 [ 1162.137770] filemap_fault+0x146e/0x2180 [ 1162.141996] ext4_filemap_fault+0x84/0xb0 [ 1162.146130] __do_fault+0x10b/0x4b0 [ 1162.149741] ? do_raw_spin_unlock+0x171/0x230 [ 1162.154222] __handle_mm_fault+0x273b/0x41c0 [ 1162.158614] ? vm_insert_page+0x9c0/0x9c0 [ 1162.162756] ? lock_downgrade+0x720/0x720 [ 1162.166922] ? check_preemption_disabled+0x41/0x280 [ 1162.171934] handle_mm_fault+0x436/0xb10 [ 1162.176063] __do_page_fault+0x68e/0xd60 [ 1162.180117] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1162.185133] ? spurious_fault+0x840/0x840 [ 1162.189285] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1162.194138] ? page_fault+0x8/0x30 [ 1162.197688] page_fault+0x1e/0x30 [ 1162.201125] RIP: 0033:0x7f7299815238 [ 1162.204848] Code: Bad RIP value. [ 1162.208208] RSP: 002b:00007f7298dc5588 EFLAGS: 00010206 [ 1162.213567] RAX: 00000000000000c6 RBX: 0000000000000000 RCX: 00007f729b42922d [ 1162.220816] RDX: 00000000000000c6 RSI: 000000000000000a RDI: 00007f7298dc5da0 [ 1162.228067] RBP: 000055dc15ef79d0 R08: 0000000000000000 R09: 0000000004000001 [ 1162.235315] R10: 0000000000000001 R11: 0000000000000000 R12: 00007f7298dc5da0 [ 1162.242581] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f7298dc5da0 [ 1162.274439] Mem-Info: [ 1162.277130] active_anon:122052 inactive_anon:25093 isolated_anon:0 [ 1162.277130] active_file:27 inactive_file:5 isolated_file:2 [ 1162.277130] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1162.277130] slab_reclaimable:13029 slab_unreclaimable:114159 [ 1162.277130] mapped:43521 shmem:25450 pagetables:930 bounce:0 [ 1162.277130] free:13901 free_pcp:66 free_cma:0 [ 1162.313821] Node 0 active_anon:487396kB inactive_anon:43320kB active_file:96kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162576kB dirty:0kB writeback:0kB shmem:44400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1162.342021] Node 1 active_anon:812kB inactive_anon:57052kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:11508kB dirty:0kB writeback:0kB shmem:57400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1162.369089] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1162.399895] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1162.404978] Node 0 DMA32 free:17952kB min:35996kB low:44992kB high:53988kB active_anon:487396kB inactive_anon:43320kB active_file:96kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7616kB pagetables:3672kB bounce:0kB free_pcp:256kB local_pcp:256kB free_cma:0kB [ 1162.435145] lowmem_reserve[]: 0 0 1 1 1 [ 1162.439205] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1162.465306] lowmem_reserve[]: 0 0 0 0 0 [ 1162.469329] Node 1 Normal free:26536kB min:53876kB low:67344kB high:80812kB active_anon:812kB inactive_anon:57052kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:320kB pagetables:48kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1162.499808] lowmem_reserve[]: 0 0 0 0 0 [ 1162.503873] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10860kB [ 1162.521826] Node 0 DMA32: 1097*4kB (ME) 1114*8kB (UME) 157*16kB (UME) 68*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17988kB [ 1162.536393] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1162.550955] Node 1 Normal: 112*4kB (UME) 90*8kB (ME) 79*16kB (UME) 25*32kB (UM) 16*64kB (ME) 24*128kB (UME) 10*256kB (UM) 5*512kB (UM) 2*1024kB (M) 2*2048kB (UM) 2*4096kB (U) = 26784kB [ 1162.570666] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1162.579724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1162.588957] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1162.600775] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1162.609458] 25484 total pagecache pages [ 1162.613455] 0 pages in swap cache [ 1162.616945] Swap cache stats: add 0, delete 0, find 0/0 [ 1162.622681] Free swap = 0kB [ 1162.625766] Total swap = 0kB [ 1162.628941] 2097051 pages RAM [ 1162.632076] 0 pages HighMem/MovableOnly [ 1162.641203] 369639 pages reserved [ 1162.644671] 0 pages cma reserved [ 1162.648102] Out of memory (oom_kill_allocating_task): Kill process 12961 (in:imklog) score 0 or sacrifice child [ 1162.659348] Killed process 12940 (rsyslogd) total-vm:254332kB, anon-rss:952kB, file-rss:0kB, shmem-rss:0kB [ 1162.672077] oom_reaper: reaped process 12940 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1162.746983] systemd-cgroups invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1162.760388] systemd-cgroups cpuset=/ mems_allowed=0-1 [ 1162.766231] CPU: 0 PID: 14473 Comm: systemd-cgroups Not tainted 4.19.163-syzkaller #0 [ 1162.774202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1162.783550] Call Trace: [ 1162.786160] dump_stack+0x1fc/0x2fe [ 1162.789791] dump_header+0x15d/0xc3f [ 1162.793534] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1162.798637] ? ___ratelimit+0x319/0x584 [ 1162.802612] oom_kill_process.cold+0x10/0x692 [ 1162.807207] ? check_preemption_disabled+0x41/0x280 [ 1162.812239] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1162.817501] out_of_memory+0x1072/0x1390 [ 1162.821547] ? oom_killer_disable+0x270/0x270 [ 1162.826024] ? mutex_trylock+0x15f/0x1a0 [ 1162.830084] __alloc_pages_nodemask+0x23a2/0x2890 [ 1162.834931] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1162.839760] ? lock_downgrade+0x720/0x720 [ 1162.843898] ? debug_check_no_obj_freed+0xb5/0x482 [ 1162.848838] alloc_pages_current+0x193/0x2a0 [ 1162.853237] ? mark_held_locks+0xf0/0xf0 [ 1162.857284] pte_alloc_one+0x16/0x190 [ 1162.861080] __handle_mm_fault+0x31e7/0x41c0 [ 1162.865482] ? do_mmap+0x59c/0x1080 [ 1162.869099] ? vm_insert_page+0x9c0/0x9c0 [ 1162.873244] ? check_preemption_disabled+0x41/0x280 [ 1162.878460] handle_mm_fault+0x436/0xb10 [ 1162.882676] __do_page_fault+0x68e/0xd60 [ 1162.886740] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1162.891769] ? spurious_fault+0x840/0x840 [ 1162.895905] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1162.900746] ? page_fault+0x8/0x30 [ 1162.904286] page_fault+0x1e/0x30 [ 1162.907743] RIP: 0033:0x7f8a765a7060 [ 1162.911548] Code: Bad RIP value. [ 1162.914906] RSP: 002b:00007ffd28d2e3c8 EFLAGS: 00010202 [ 1162.920270] RAX: 00007f8a765964e0 RBX: 00007f8a767bd000 RCX: 00007f8a7639c660 [ 1162.927559] RDX: 0000000000000000 RSI: 00007f8a767bd040 RDI: 00007f8a767bd000 [ 1162.935043] RBP: 00007ffd28d2e510 R08: 00007f8a7637d000 R09: 0000000070000021 [ 1162.942436] R10: 0000000000000031 R11: 0000000000000206 R12: 00007ffd28d2e5f8 [ 1162.949707] R13: 000000037ffff1a0 R14: 0000000000000801 R15: 00007ffd28d2e5b0 [ 1162.964077] Mem-Info: [ 1162.966549] active_anon:121787 inactive_anon:25093 isolated_anon:0 [ 1162.966549] active_file:18 inactive_file:14 isolated_file:2 [ 1162.966549] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1162.966549] slab_reclaimable:13027 slab_unreclaimable:113925 [ 1162.966549] mapped:43521 shmem:25450 pagetables:930 bounce:0 [ 1162.966549] free:13750 free_pcp:0 free_cma:0 [ 1163.003333] Node 0 active_anon:486372kB inactive_anon:43320kB active_file:68kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162576kB dirty:0kB writeback:0kB shmem:44400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1163.036115] Node 1 active_anon:776kB inactive_anon:57052kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:11508kB dirty:0kB writeback:0kB shmem:57400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1163.067907] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1163.095602] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1163.100683] Node 0 DMA32 free:18024kB min:35996kB low:44992kB high:53988kB active_anon:486372kB inactive_anon:43320kB active_file:56kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7552kB pagetables:3672kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1163.129512] in:imklog: page allocation failure: order:0, mode:0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null) [ 1163.144094] in:imklog cpuset=/ mems_allowed=0-1 [ 1163.148884] CPU: 0 PID: 12961 Comm: in:imklog Not tainted 4.19.163-syzkaller #0 [ 1163.156340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1163.165699] Call Trace: [ 1163.166666] syz-executor.5: vmalloc: allocation failure, allocated 1895346176 of 3621613568 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1163.168305] dump_stack+0x1fc/0x2fe [ 1163.185706] warn_alloc.cold+0x7b/0x18f [ 1163.189688] ? zone_watermark_ok_safe+0x260/0x260 [ 1163.194540] ? usleep_range+0x170/0x170 [ 1163.198630] ? collect_expired_timers+0x2a0/0x2a0 [ 1163.203493] __alloc_pages_nodemask+0x232f/0x2890 [ 1163.208389] ? find_get_entry+0x4cd/0x8a0 [ 1163.212553] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1163.217466] alloc_pages_current+0x193/0x2a0 [ 1163.221887] filemap_fault+0x146e/0x2180 [ 1163.225970] ext4_filemap_fault+0x84/0xb0 [ 1163.230121] __do_fault+0x10b/0x4b0 [ 1163.233750] ? do_raw_spin_unlock+0x171/0x230 [ 1163.238249] __handle_mm_fault+0x273b/0x41c0 [ 1163.242670] ? vm_insert_page+0x9c0/0x9c0 [ 1163.246815] ? lock_downgrade+0x720/0x720 [ 1163.250976] ? check_preemption_disabled+0x41/0x280 [ 1163.254449] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1163.256010] handle_mm_fault+0x436/0xb10 [ 1163.265240] __do_page_fault+0x68e/0xd60 [ 1163.269313] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1163.274339] ? spurious_fault+0x840/0x840 [ 1163.278515] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1163.283768] ? page_fault+0x8/0x30 [ 1163.287304] page_fault+0x1e/0x30 [ 1163.290753] RIP: 0033:0x7f7299815238 [ 1163.294466] Code: Bad RIP value. [ 1163.297818] RSP: 002b:00007f7298dc5588 EFLAGS: 00010206 [ 1163.303207] RAX: 00000000000000c6 RBX: 0000000000000000 RCX: 00007f729b42922d [ 1163.311954] RDX: 00000000000000c6 RSI: 000000000000000a RDI: 00007f7298dc5da0 [ 1163.319310] RBP: 000055dc15ef79d0 R08: 0000000000000000 R09: 0000000004000001 [ 1163.326666] R10: 0000000000000001 R11: 0000000000000000 R12: 00007f7298dc5da0 [ 1163.334195] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f7298dc5da0 [ 1163.341480] CPU: 1 PID: 13962 Comm: syz-executor.5 Not tainted 4.19.163-syzkaller #0 [ 1163.349376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1163.355930] lowmem_reserve[]: 0 0 1 1 1 [ 1163.358721] Call Trace: [ 1163.358742] dump_stack+0x1fc/0x2fe [ 1163.358761] warn_alloc.cold+0x7b/0x18f [ 1163.362802] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1163.365378] ? zone_watermark_ok_safe+0x260/0x260 [ 1163.368993] lowmem_reserve[]: 0 0 0 0 0 [ 1163.372936] ? rcu_nmi_exit+0xb3/0x180 [ 1163.398815] Node 1 Normal free:26856kB min:53876kB low:67344kB high:80812kB active_anon:776kB inactive_anon:57052kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1163.403660] __vmalloc_area_node+0x4fd/0x780 [ 1163.407620] lowmem_reserve[]: 0 0 0 0 0 [ 1163.411486] ? __vmalloc_node_range+0x180/0x180 [ 1163.441631] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10860kB [ 1163.444965] ? _raw_spin_unlock+0x29/0x40 [ 1163.444982] ? __get_vm_area_node+0x2e2/0x3a0 [ 1163.449075] Node 0 DMA32: 1089*4kB (ME) 1095*8kB (UME) 178*16kB (ME) 60*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17884kB [ 1163.453687] __vmalloc_node_range+0xed/0x180 [ 1163.467129] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1163.471256] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1163.475738] Node 1 Normal: 106*4kB (ME) 86*8kB (UME) 73*16kB (UME) 18*32kB (M) 15*64kB (UME) 28*128kB (UME) 10*256kB (UM) 5*512kB (UM) 2*1024kB (M) 2*2048kB (UM) 2*4096kB (U) = 26856kB [ 1163.489252] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1163.489264] vmalloc_user+0x70/0xe0 [ 1163.489276] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1163.489290] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1163.493957] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1163.504641] __vb2_queue_alloc+0x472/0xe60 [ 1163.504667] vb2_core_create_bufs+0x273/0x7e0 [ 1163.504684] ? __vb2_queue_free+0x870/0x870 [ 1163.509011] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1163.525995] ? __mutex_add_waiter+0x160/0x160 [ 1163.526016] vb2_create_bufs+0x332/0x620 [ 1163.526030] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1163.526043] ? __video_do_ioctl+0x632/0xcd0 [ 1163.526057] ? __mutex_add_waiter+0x160/0x160 [ 1163.526070] ? mark_held_locks+0xf0/0xf0 [ 1163.526089] vb2_ioctl_create_bufs+0x20d/0x360 [ 1163.526102] ? memset+0x20/0x40 [ 1163.526118] v4l_create_bufs+0xb2/0x160 [ 1163.526132] __video_do_ioctl+0x49a/0xcd0 [ 1163.526151] ? v4l_querycap+0x340/0x340 [ 1163.526165] ? __might_fault+0x192/0x1d0 [ 1163.526184] video_usercopy+0x13c/0x1000 [ 1163.526201] ? v4l_querycap+0x340/0x340 [ 1163.526216] ? v4l_enumstd+0x60/0x60 [ 1163.526227] ? mark_held_locks+0xf0/0xf0 [ 1163.526241] ? do_futex+0x163/0x1c70 [ 1163.526255] ? mark_held_locks+0xf0/0xf0 [ 1163.526271] ? mark_held_locks+0xf0/0xf0 [ 1163.526284] ? debug_check_no_obj_freed+0x201/0x482 [ 1163.526308] ? video_usercopy+0x1000/0x1000 [ 1163.526326] v4l2_ioctl+0x147/0x1a0 [ 1163.526338] ? video_devdata+0xa0/0xa0 [ 1163.526355] do_vfs_ioctl+0xcdb/0x12e0 [ 1163.526369] ? lock_downgrade+0x720/0x720 [ 1163.526381] ? check_preemption_disabled+0x41/0x280 [ 1163.526395] ? ioctl_preallocate+0x200/0x200 [ 1163.526412] ? __fget+0x356/0x510 [ 1163.526428] ? do_dup2+0x450/0x450 [ 1163.526452] ksys_ioctl+0x9b/0xc0 [ 1163.526468] __x64_sys_ioctl+0x6f/0xb0 [ 1163.526481] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1163.526495] do_syscall_64+0xf9/0x620 [ 1163.526512] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1163.526523] RIP: 0033:0x45e159 [ 1163.526548] Code: Bad RIP value. [ 1163.526555] RSP: 002b:00007f97906a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1163.526569] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e159 [ 1163.526577] RDX: 0000000020000340 RSI: 00000000c100565c RDI: 0000000000000003 [ 1163.526585] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1163.526593] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1163.526601] R13: 00007ffc100b0f6f R14: 00007f97906a39c0 R15: 000000000119bf8c [ 1163.551668] Mem-Info: [ 1163.576060] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1163.591028] active_anon:121787 inactive_anon:25093 isolated_anon:0 [ 1163.591028] active_file:17 inactive_file:17 isolated_file:0 [ 1163.591028] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1163.591028] slab_reclaimable:13027 slab_unreclaimable:113903 [ 1163.591028] mapped:43521 shmem:25450 pagetables:893 bounce:0 [ 1163.591028] free:13829 free_pcp:165 free_cma:0 [ 1163.609429] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1163.630612] Node 0 active_anon:486372kB inactive_anon:43320kB active_file:60kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162576kB dirty:0kB writeback:0kB shmem:44400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1163.652040] 25484 total pagecache pages [ 1163.669739] Node 1 active_anon:776kB inactive_anon:57052kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:11508kB dirty:0kB writeback:0kB shmem:57400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1163.689527] 0 pages in swap cache [ 1163.705791] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1163.726401] Swap cache stats: add 0, delete 0, find 0/0 [ 1163.751106] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1163.774388] Free swap = 0kB [ 1163.786011] Node 0 DMA32 free:17600kB min:35996kB low:44992kB high:53988kB active_anon:486372kB inactive_anon:43320kB active_file:56kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7552kB pagetables:3524kB bounce:0kB free_pcp:672kB local_pcp:284kB free_cma:0kB [ 1163.790032] Total swap = 0kB [ 1163.963381] lowmem_reserve[]: 0 0 1 1 1 [ 1163.969196] 2097051 pages RAM [ 1163.975556] 0 pages HighMem/MovableOnly [ 1163.979663] 369639 pages reserved [ 1163.983105] 0 pages cma reserved [ 1163.990002] Out of memory (oom_kill_allocating_task): Kill process 14473 (systemd-cgroups) score 0 or sacrifice child [ 1164.002324] Killed process 14473 (systemd-cgroups) total-vm:2496kB, anon-rss:36kB, file-rss:0kB, shmem-rss:0kB [ 1164.016799] oom_reaper: reaped process 14473 (systemd-cgroups), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1164.031154] systemd-cgroups: page allocation failure: order:0, mode:0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 1164.046203] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1164.055477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1164.066006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1164.067064] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1164.117070] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1164.117224] Bluetooth: hci4: command 0x0419 tx timeout [ 1164.121876] CPU: 0 PID: 8130 Comm: syz-fuzzer Not tainted 4.19.163-syzkaller #0 [ 1164.135021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1164.144467] Call Trace: [ 1164.147580] dump_stack+0x1fc/0x2fe [ 1164.151223] dump_header+0x15d/0xc3f [ 1164.154939] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1164.160043] ? ___ratelimit+0x319/0x584 [ 1164.164021] oom_kill_process.cold+0x10/0x692 [ 1164.168515] ? check_preemption_disabled+0x41/0x280 [ 1164.173537] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1164.178817] out_of_memory+0x1072/0x1390 [ 1164.182886] ? oom_killer_disable+0x270/0x270 [ 1164.187385] ? mutex_trylock+0x15f/0x1a0 [ 1164.191450] __alloc_pages_nodemask+0x23a2/0x2890 [ 1164.196300] ? find_get_entry+0x4cd/0x8a0 [ 1164.200576] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1164.205497] alloc_pages_current+0x193/0x2a0 [ 1164.209927] filemap_fault+0x146e/0x2180 [ 1164.214000] ext4_filemap_fault+0x84/0xb0 [ 1164.218172] __do_fault+0x10b/0x4b0 [ 1164.221808] __handle_mm_fault+0x273b/0x41c0 [ 1164.226247] ? do_signal+0x49d/0x1670 [ 1164.230048] ? vm_insert_page+0x9c0/0x9c0 [ 1164.234207] ? check_preemption_disabled+0x41/0x280 [ 1164.239232] handle_mm_fault+0x436/0xb10 [ 1164.243304] __do_page_fault+0x68e/0xd60 [ 1164.247374] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1164.252388] ? spurious_fault+0x840/0x840 [ 1164.256538] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1164.261383] ? page_fault+0x8/0x30 [ 1164.265313] page_fault+0x1e/0x30 [ 1164.268768] RIP: 0033:0x468df0 [ 1164.271971] Code: Bad RIP value. [ 1164.275331] RSP: 002b:000000c000009ab8 EFLAGS: 00010286 [ 1164.280697] RAX: 0000000000000000 RBX: 0000000001b378c0 RCX: 0000000000469093 [ 1164.287964] RDX: 000000c000009ac0 RSI: 000000c000009bf0 RDI: 0000000000000011 [ 1164.295235] RBP: 00007ffcc703a850 R08: 0000000000000000 R09: 0000000000000000 [ 1164.302503] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000005 [ 1164.309772] R13: 0000000000000001 R14: 000000c01828c480 R15: 0000000000000000 [ 1164.314848] systemd-cgroups cpuset=/ mems_allowed=0-1 [ 1164.324437] device bridge_slave_1 left promiscuous mode [ 1164.347842] lowmem_reserve[]: 0 0 0 0 0 [ 1164.351857] Node 1 Normal free:27160kB min:53876kB low:67344kB high:80812kB active_anon:764kB inactive_anon:57052kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1164.355836] CPU: 1 PID: 14473 Comm: systemd-cgroups Not tainted 4.19.163-syzkaller #0 [ 1164.380117] lowmem_reserve[]: 0 0 0 0 0 [ 1164.387891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1164.387896] Call Trace: [ 1164.387914] dump_stack+0x1fc/0x2fe [ 1164.387931] warn_alloc.cold+0x7b/0x18f [ 1164.391883] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10860kB [ 1164.401244] ? zone_watermark_ok_safe+0x260/0x260 [ 1164.401255] ? mark_oom_victim+0x68/0x420 [ 1164.401278] ? wait_for_completion_io+0x10/0x10 [ 1164.403833] Node 0 DMA32: 1157*4kB (UME) 1125*8kB (UME) 188*16kB (UME) 64*32kB (UM) 2*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19068kB [ 1164.407458] __alloc_pages_nodemask+0x232f/0x2890 [ 1164.407488] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1164.411423] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1164.424716] ? lock_downgrade+0x720/0x720 [ 1164.424729] ? debug_check_no_obj_freed+0xb5/0x482 [ 1164.424761] alloc_pages_current+0x193/0x2a0 [ 1164.429582] Node 1 Normal: 106*4kB (UME) 102*8kB (UME) 81*16kB (UME) 20*32kB (UM) 15*64kB (UME) 28*128kB (UME) 10*256kB (UM) 5*512kB (UM) 2*1024kB (M) 2*2048kB (UM) 2*4096kB (U) = 27176kB [ 1164.433715] ? mark_held_locks+0xf0/0xf0 [ 1164.438445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1164.452800] pte_alloc_one+0x16/0x190 [ 1164.452816] __handle_mm_fault+0x31e7/0x41c0 [ 1164.452835] ? do_mmap+0x59c/0x1080 [ 1164.452846] ? vm_insert_page+0x9c0/0x9c0 [ 1164.452865] ? check_preemption_disabled+0x41/0x280 [ 1164.452880] handle_mm_fault+0x436/0xb10 [ 1164.452895] __do_page_fault+0x68e/0xd60 [ 1164.452914] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1164.452926] ? spurious_fault+0x840/0x840 [ 1164.452941] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1164.452957] ? page_fault+0x8/0x30 [ 1164.452968] page_fault+0x1e/0x30 [ 1164.452979] RIP: 0033:0x7f8a765a7060 [ 1164.453000] Code: Bad RIP value. [ 1164.453007] RSP: 002b:00007ffd28d2e3c8 EFLAGS: 00010202 [ 1164.453018] RAX: 00007f8a765964e0 RBX: 00007f8a767bd000 RCX: 00007f8a7639c660 [ 1164.453026] RDX: 0000000000000000 RSI: 00007f8a767bd040 RDI: 00007f8a767bd000 [ 1164.453034] RBP: 00007ffd28d2e510 R08: 00007f8a7637d000 R09: 0000000070000021 [ 1164.453041] R10: 0000000000000031 R11: 0000000000000206 R12: 00007ffd28d2e5f8 [ 1164.453048] R13: 000000037ffff1a0 R14: 0000000000000801 R15: 00007ffd28d2e5b0 [ 1164.494730] Mem-Info: [ 1164.541152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.548920] active_anon:121777 inactive_anon:25093 isolated_anon:0 [ 1164.548920] active_file:23 inactive_file:4 isolated_file:1 [ 1164.548920] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1164.548920] slab_reclaimable:12998 slab_unreclaimable:113669 [ 1164.548920] mapped:43521 shmem:25450 pagetables:900 bounce:0 [ 1164.548920] free:14256 free_pcp:3 free_cma:0 [ 1164.563051] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1164.566100] Node 0 active_anon:486344kB inactive_anon:43320kB active_file:84kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:162576kB dirty:0kB writeback:0kB shmem:44400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1164.577257] device bridge_slave_0 left promiscuous mode [ 1164.582206] Node 1 active_anon:764kB inactive_anon:57052kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:11508kB dirty:0kB writeback:0kB shmem:57400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1164.585946] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.593257] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1164.608482] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1164.615780] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1164.629812] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1164.631833] Node 0 DMA32 free:19004kB min:35996kB low:44992kB high:53988kB active_anon:486344kB inactive_anon:43320kB active_file:0kB inactive_file:136kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7520kB pagetables:3552kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 1164.674595] 25498 total pagecache pages [ 1164.704009] lowmem_reserve[]: 0 0 1 1 1 [ 1164.715573] 0 pages in swap cache [ 1164.737256] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1164.750448] Swap cache stats: add 0, delete 0, find 0/0 [ 1164.768894] lowmem_reserve[]: 0 0 0 0 0 [ 1164.787146] Free swap = 0kB [ 1164.800551] Node 1 Normal free:27160kB min:53876kB low:67344kB high:80812kB active_anon:764kB inactive_anon:57052kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:256kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1164.827379] Total swap = 0kB [ 1164.828530] lowmem_reserve[]: 0 0 0 0 0 [ 1164.830921] 2097051 pages RAM [ 1164.858953] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10860kB [ 1164.870452] 0 pages HighMem/MovableOnly [ 1164.870924] Node 0 DMA32: 1171*4kB (UME) 1131*8kB (UME) 188*16kB (UME) 64*32kB (UM) 2*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19172kB [ 1164.904916] 369639 pages reserved [ 1164.905916] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1164.909228] 0 pages cma reserved [ 1164.922931] Node 1 Normal: 106*4kB (UME) 102*8kB (UME) 81*16kB (UME) 20*32kB (UM) 15*64kB (UME) 28*128kB (UME) 10*256kB (UM) 5*512kB (UM) 2*1024kB (M) 2*2048kB (UM) 2*4096kB (U) = 27176kB [ 1164.977729] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1164.991541] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1165.000555] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1165.014337] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1165.023243] 25498 total pagecache pages [ 1165.031910] 0 pages in swap cache [ 1165.035381] Swap cache stats: add 0, delete 0, find 0/0 [ 1165.041337] Free swap = 0kB [ 1165.044360] Total swap = 0kB [ 1165.052024] 2097051 pages RAM [ 1165.055816] 0 pages HighMem/MovableOnly [ 1165.059899] 369639 pages reserved [ 1165.063344] 0 pages cma reserved [ 1165.066840] Out of memory (oom_kill_allocating_task): Kill process 8130 (syz-fuzzer) score 0 or sacrifice child [ 1165.078249] Killed process 14022 (syz-executor.0) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 1165.089707] oom_reaper: reaped process 14022 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1165.091898] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1165.114864] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1165.119809] CPU: 1 PID: 8130 Comm: syz-fuzzer Not tainted 4.19.163-syzkaller #0 [ 1165.127253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1165.136604] Call Trace: [ 1165.139197] dump_stack+0x1fc/0x2fe [ 1165.142834] dump_header+0x15d/0xc3f [ 1165.146549] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1165.151764] ? ___ratelimit+0x319/0x584 [ 1165.155747] oom_kill_process.cold+0x10/0x692 [ 1165.160366] ? check_preemption_disabled+0x41/0x280 [ 1165.165410] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1165.170692] out_of_memory+0x1072/0x1390 [ 1165.174791] ? oom_killer_disable+0x270/0x270 [ 1165.179309] ? mutex_trylock+0x15f/0x1a0 [ 1165.183381] __alloc_pages_nodemask+0x23a2/0x2890 [ 1165.188258] ? find_get_entry+0x4cd/0x8a0 [ 1165.192441] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1165.197339] alloc_pages_current+0x193/0x2a0 [ 1165.201754] filemap_fault+0x146e/0x2180 [ 1165.206875] ext4_filemap_fault+0x84/0xb0 [ 1165.211029] __do_fault+0x10b/0x4b0 [ 1165.214661] __handle_mm_fault+0x273b/0x41c0 [ 1165.219075] ? do_signal+0x49d/0x1670 [ 1165.222874] ? vm_insert_page+0x9c0/0x9c0 [ 1165.227034] ? check_preemption_disabled+0x41/0x280 [ 1165.232056] handle_mm_fault+0x436/0xb10 [ 1165.236120] __do_page_fault+0x68e/0xd60 [ 1165.240221] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1165.245241] ? spurious_fault+0x840/0x840 [ 1165.249392] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1165.254287] ? page_fault+0x8/0x30 [ 1165.257826] page_fault+0x1e/0x30 [ 1165.261276] RIP: 0033:0x468df0 [ 1165.264476] Code: Bad RIP value. [ 1165.268036] RSP: 002b:000000c000009ab8 EFLAGS: 00010286 [ 1165.273485] RAX: 0000000000000000 RBX: 0000000001b378c0 RCX: 0000000000469093 [ 1165.280757] RDX: 000000c000009ac0 RSI: 000000c000009bf0 RDI: 0000000000000011 [ 1165.288029] RBP: 00007ffcc703a850 R08: 0000000000000000 R09: 0000000000000000 [ 1165.295308] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000005 [ 1165.302651] R13: 0000000000000001 R14: 000000c01828c480 R15: 0000000000000000 [ 1165.425246] Mem-Info: [ 1165.427837] active_anon:121341 inactive_anon:25093 isolated_anon:0 [ 1165.427837] active_file:16 inactive_file:17 isolated_file:0 [ 1165.427837] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1165.427837] slab_reclaimable:12983 slab_unreclaimable:113654 [ 1165.427837] mapped:34821 shmem:25450 pagetables:896 bounce:0 [ 1165.427837] free:17439 free_pcp:443 free_cma:0 [ 1165.484863] Node 0 active_anon:484600kB inactive_anon:43320kB active_file:64kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127776kB dirty:0kB writeback:0kB shmem:44400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1165.527187] Node 1 active_anon:764kB inactive_anon:57052kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:11508kB dirty:0kB writeback:0kB shmem:57400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1165.568530] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1165.610114] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1165.615185] Node 0 DMA32 free:31720kB min:35996kB low:44992kB high:53988kB active_anon:484600kB inactive_anon:43320kB active_file:160kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7488kB pagetables:3536kB bounce:0kB free_pcp:1764kB local_pcp:1316kB free_cma:0kB [ 1165.658389] lowmem_reserve[]: 0 0 1 1 1 [ 1165.662407] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1165.702111] lowmem_reserve[]: 0 0 0 0 0 [ 1165.706125] Node 1 Normal free:27176kB min:53876kB low:67344kB high:80812kB active_anon:764kB inactive_anon:57052kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:256kB pagetables:48kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1165.749832] lowmem_reserve[]: 0 0 0 0 0 [ 1165.753925] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10860kB [ 1165.781029] Node 0 DMA32: 1177*4kB (UME) 1173*8kB (UME) 237*16kB (UME) 111*32kB (UM) 44*64kB (U) 41*128kB (UM) 3*256kB (U) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 31804kB [ 1165.809855] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1165.825591] Node 1 Normal: 106*4kB (UME) 102*8kB (UME) 81*16kB (UME) 19*32kB (M) 15*64kB (UME) 28*128kB (UME) 10*256kB (UM) 5*512kB (UM) 2*1024kB (M) 2*2048kB (UM) 2*4096kB (U) = 27144kB [ 1165.871134] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1165.912228] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1165.954898] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1165.986037] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1166.041464] 25483 total pagecache pages [ 1166.045473] 0 pages in swap cache [ 1166.070466] Swap cache stats: add 0, delete 0, find 0/0 [ 1166.075865] Free swap = 0kB [ 1166.113421] Total swap = 0kB [ 1166.119955] 2097051 pages RAM [ 1166.123083] 0 pages HighMem/MovableOnly [ 1166.144396] 369639 pages reserved [ 1166.151289] 0 pages cma reserved [ 1166.154656] Out of memory (oom_kill_allocating_task): Kill process 8130 (syz-fuzzer) score 0 or sacrifice child [ 1166.183948] Killed process 13419 (syz-executor.1) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 1166.272450] kworker/u4:0 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1166.315103] kworker/u4:0 cpuset=/ mems_allowed=0-1 [ 1166.342296] CPU: 1 PID: 7 Comm: kworker/u4:0 Not tainted 4.19.163-syzkaller #0 [ 1166.350338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1166.359821] Workqueue: events_unbound call_usermodehelper_exec_work [ 1166.366353] Call Trace: [ 1166.368957] dump_stack+0x1fc/0x2fe [ 1166.372595] dump_header+0x15d/0xc3f [ 1166.376344] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1166.382139] ? ___ratelimit+0x319/0x584 [ 1166.386158] oom_kill_process.cold+0x10/0x692 [ 1166.390683] ? oom_badness.part.0+0x135/0x650 [ 1166.395197] ? lock_downgrade+0x720/0x720 [ 1166.399337] ? check_preemption_disabled+0x41/0x280 [ 1166.404343] out_of_memory+0x34d/0x1390 [ 1166.408412] ? oom_killer_disable+0x270/0x270 [ 1166.412950] ? mutex_trylock+0x15f/0x1a0 [ 1166.417022] __alloc_pages_nodemask+0x23a2/0x2890 [ 1166.421971] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1166.426826] ? should_fail+0x142/0x7b0 [ 1166.430702] ? fs_reclaim_release+0xd0/0x110 [ 1166.435113] ? check_preemption_disabled+0x41/0x280 [ 1166.440144] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1166.445159] ? kmem_cache_alloc_node+0x351/0x3b0 [ 1166.449928] copy_process.part.0+0x3cf/0x8200 [ 1166.454609] ? __lock_acquire+0x6de/0x3ff0 [ 1166.458834] ? __lock_acquire+0x6de/0x3ff0 [ 1166.463239] ? umh_complete+0x90/0x90 [ 1166.467033] ? __cleanup_sighand+0x60/0x60 [ 1166.471259] ? __update_load_avg_se+0x5ec/0xa00 [ 1166.475921] ? __lock_acquire+0x6de/0x3ff0 [ 1166.480177] _do_fork+0x22f/0xf30 [ 1166.483619] ? umh_complete+0x90/0x90 [ 1166.487425] ? fork_idle+0x220/0x220 [ 1166.491126] ? mark_held_locks+0xa6/0xf0 [ 1166.495234] ? _raw_spin_unlock_irq+0x24/0x80 [ 1166.499726] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1166.504388] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1166.509049] ? kernel_sigaction+0x14b/0x230 [ 1166.513450] ? recalc_sigpending+0x220/0x220 [ 1166.517846] ? umh_complete+0x90/0x90 [ 1166.521636] kernel_thread+0x2f/0x40 [ 1166.525338] call_usermodehelper_exec_work+0xb8/0x260 [ 1166.530514] ? call_usermodehelper_exec_async+0x6a0/0x6a0 [ 1166.536303] process_one_work+0x864/0x1570 [ 1166.540706] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 1166.545548] worker_thread+0x64c/0x1130 [ 1166.549514] ? process_one_work+0x1570/0x1570 [ 1166.553994] kthread+0x33f/0x460 [ 1166.557467] ? kthread_park+0x180/0x180 [ 1166.561446] ret_from_fork+0x24/0x30 [ 1166.567034] Mem-Info: [ 1166.569557] active_anon:120877 inactive_anon:25093 isolated_anon:0 [ 1166.569557] active_file:29 inactive_file:0 isolated_file:0 [ 1166.569557] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1166.569557] slab_reclaimable:12983 slab_unreclaimable:113654 [ 1166.569557] mapped:26117 shmem:25450 pagetables:811 bounce:0 [ 1166.569557] free:17957 free_pcp:475 free_cma:0 [ 1166.604135] Node 0 active_anon:482756kB inactive_anon:43320kB active_file:116kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:92960kB dirty:0kB writeback:0kB shmem:44400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1166.632980] Node 1 active_anon:752kB inactive_anon:57052kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:11508kB dirty:0kB writeback:0kB shmem:57400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1166.660051] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1166.688222] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1166.693838] Node 0 DMA32 free:39508kB min:35996kB low:44992kB high:53988kB active_anon:482756kB inactive_anon:43320kB active_file:112kB inactive_file:5712kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7456kB pagetables:3196kB bounce:0kB free_pcp:2844kB local_pcp:1392kB free_cma:0kB [ 1166.746288] lowmem_reserve[]: 0 0 1 1 1 [ 1166.750357] Node 0 Normal free:0kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1166.779301] lowmem_reserve[]: 0 0 0 0 0 [ 1166.783292] Node 1 Normal free:80828kB min:53876kB low:67344kB high:80812kB active_anon:852kB inactive_anon:57052kB active_file:200kB inactive_file:1904kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:224kB pagetables:48kB bounce:0kB free_pcp:2672kB local_pcp:1304kB free_cma:0kB [ 1166.819252] lowmem_reserve[]: 0 0 0 0 0 [ 1166.823282] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10860kB [ 1166.850039] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1166.856359] Node 0 DMA32: 397*4kB (UME) 2079*8kB (UMEH) 248*16kB (UME) 105*32kB (UM) 42*64kB (U) 43*128kB (UM) 3*256kB (U) 5*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 38092kB [ 1166.870256] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1166.905028] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1166.916972] systemd[1]: rsyslog.service: Unit entered failed state. [ 1166.923969] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1166.959485] Node 1 Normal: 12*4kB (UE) 122*8kB (UE) 146*16kB (UE) 110*32kB (UM) 96*64kB (UME) 85*128kB (UME) 61*256kB (UM) 39*512kB (UM) 26*1024kB (UM) 19*2048kB (UM) 17*4096kB (U) = 194656kB [ 1166.988202] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1167.031724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1167.034112] device hsr_slave_1 left promiscuous mode [ 1167.052507] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1167.059951] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1167.068597] device hsr_slave_0 left promiscuous mode [ 1167.084105] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1167.091424] team0 (unregistering): Port device team_slave_1 removed [ 1167.096055] systemd[1]: Stopped Journal Service. [ 1167.097978] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1167.128892] team0 (unregistering): Port device team_slave_0 removed [ 1167.129886] systemd[1]: Starting Journal Service... [ 1167.144812] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1167.154299] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1167.158075] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1167.186056] 30486 total pagecache pages [ 1167.191285] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1167.199556] 0 pages in swap cache [ 1167.203879] Swap cache stats: add 0, delete 0, find 0/0 [ 1167.224477] Free swap = 0kB [ 1167.264213] Total swap = 0kB [ 1167.278813] bond0 (unregistering): Released all slaves [ 1167.286586] 2097051 pages RAM [ 1167.289713] 0 pages HighMem/MovableOnly [ 1167.293676] 369639 pages reserved [ 1167.323531] 0 pages cma reserved [ 1167.336277] Out of memory: Kill process 8130 (syz-fuzzer) score 68 or sacrifice child [ 1167.386297] Killed process 13409 (syz-executor.3) total-vm:85024kB, anon-rss:1724kB, file-rss:0kB, shmem-rss:0kB [ 1167.626924] systemd-journald[14494]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1171.670029] IPVS: ftp: loaded support on port[0] = 21 [ 1172.310645] IPVS: ftp: loaded support on port[0] = 21 [ 1173.155782] Bluetooth: hci2: command 0x0409 tx timeout [ 1173.362543] chnl_net:caif_netlink_parms(): no params data found [ 1173.464934] chnl_net:caif_netlink_parms(): no params data found [ 1174.052787] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.059578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.069060] device bridge_slave_0 entered promiscuous mode [ 1174.076942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.083445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.095885] device bridge_slave_1 entered promiscuous mode [ 1174.195697] Bluetooth: hci3: command 0x0409 tx timeout [ 1174.401566] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1174.415530] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1174.442177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.449789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.457888] device bridge_slave_0 entered promiscuous mode [ 1174.747665] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1174.754930] team0: Port device team_slave_0 added [ 1174.761098] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.768087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.775092] device bridge_slave_1 entered promiscuous mode [ 1174.788648] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1174.800126] team0: Port device team_slave_1 added [ 1175.092755] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1175.109532] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1175.135243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1175.142530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1175.170799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1175.185170] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1175.193035] team0: Port device team_slave_0 added [ 1175.235606] Bluetooth: hci2: command 0x041b tx timeout [ 1175.480109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1175.486445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1175.514164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1175.525003] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1175.533137] team0: Port device team_slave_1 added [ 1175.545017] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1175.552960] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1175.668776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1175.675184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1175.702645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1175.720207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1175.726723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1175.754298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1175.772779] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1175.880065] device hsr_slave_0 entered promiscuous mode [ 1175.885961] device hsr_slave_1 entered promiscuous mode [ 1175.891796] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1175.899277] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1175.911693] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1175.937909] device hsr_slave_0 entered promiscuous mode [ 1175.944195] device hsr_slave_1 entered promiscuous mode [ 1175.956538] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1176.069530] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1176.275625] Bluetooth: hci3: command 0x041b tx timeout [ 1176.406852] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1176.434298] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1176.573525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1176.584101] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1176.594581] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1176.602699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1176.610581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1176.629259] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1176.635614] 8021q: adding VLAN 0 to HW filter on device team0 [ 1176.647423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1176.654168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1176.663581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1176.671383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1176.679783] device bridge_slave_1 left promiscuous mode [ 1176.686931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.693997] device bridge_slave_0 left promiscuous mode [ 1176.700799] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.710190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1176.717081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1176.724901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1176.732095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1176.740622] device bridge_slave_1 left promiscuous mode [ 1176.746173] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.753235] device bridge_slave_0 left promiscuous mode [ 1176.759258] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.769846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1176.777166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1176.784790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1176.791663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1176.799866] device bridge_slave_1 left promiscuous mode [ 1176.805308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.813107] device bridge_slave_0 left promiscuous mode [ 1176.818838] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.833130] device veth1_macvtap left promiscuous mode [ 1176.838547] device veth0_macvtap left promiscuous mode [ 1176.843938] device veth1_vlan left promiscuous mode [ 1176.849304] device veth0_vlan left promiscuous mode [ 1176.854918] device veth1_macvtap left promiscuous mode [ 1176.860700] device veth0_macvtap left promiscuous mode [ 1176.866581] device veth1_vlan left promiscuous mode [ 1176.871627] device veth0_vlan left promiscuous mode [ 1176.877174] device veth1_macvtap left promiscuous mode [ 1176.882500] device veth0_macvtap left promiscuous mode [ 1176.888860] device veth1_vlan left promiscuous mode [ 1176.893903] device veth0_vlan left promiscuous mode [ 1177.325413] Bluetooth: hci2: command 0x040f tx timeout [ 1178.355429] Bluetooth: hci3: command 0x040f tx timeout [ 1179.395279] Bluetooth: hci2: command 0x0419 tx timeout [ 1180.435473] Bluetooth: hci3: command 0x0419 tx timeout [ 1189.888855] device hsr_slave_1 left promiscuous mode [ 1189.900267] device hsr_slave_0 left promiscuous mode [ 1189.917396] team0 (unregistering): Port device team_slave_1 removed [ 1189.930299] team0 (unregistering): Port device team_slave_0 removed [ 1189.939777] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1189.951653] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1189.981947] bond0 (unregistering): Released all slaves [ 1190.020797] device hsr_slave_1 left promiscuous mode [ 1190.029881] device hsr_slave_0 left promiscuous mode [ 1190.045972] team0 (unregistering): Port device team_slave_1 removed [ 1190.055807] team0 (unregistering): Port device team_slave_0 removed [ 1190.066996] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1190.077139] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1190.106243] bond0 (unregistering): Released all slaves [ 1190.143118] device hsr_slave_1 left promiscuous mode [ 1190.150463] device hsr_slave_0 left promiscuous mode [ 1190.166998] team0 (unregistering): Port device team_slave_1 removed [ 1190.178364] team0 (unregistering): Port device team_slave_0 removed [ 1190.187273] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1190.198473] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1190.231444] bond0 (unregistering): Released all slaves [ 1190.247529] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1190.258299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1190.266894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1190.274552] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.280993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1190.288536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1190.302809] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1190.315150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1190.322956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1190.331028] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.337458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1190.348479] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1190.359297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1190.372304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1190.380736] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1190.389022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1190.405923] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1190.415998] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1190.423863] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1190.431235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1190.439757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1190.448429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1190.456894] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1190.468013] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1190.475311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1190.482333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1190.490288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1190.499938] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1190.508057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1190.515917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1190.525590] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1190.532087] 8021q: adding VLAN 0 to HW filter on device team0 [ 1190.540718] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1190.549817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1190.557837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1190.572357] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1190.580672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1190.589868] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1190.601981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1190.609923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1190.617879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.624413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1190.634674] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1190.644016] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1190.657588] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1190.664869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1190.671974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1190.680284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1190.688132] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.694542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1190.702114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1190.713762] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1190.725816] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1190.732595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1190.746773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1190.754095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1190.765239] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1190.777063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1190.787050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1190.796383] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1190.806018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1190.814908] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1190.822638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1190.835182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1190.845632] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1190.860009] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1190.868592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1190.876327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1190.883894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1190.891806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1190.902182] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1190.909142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1190.923146] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1190.940861] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1190.952537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1190.968045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1190.978351] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1190.987831] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1190.994070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1191.001943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1191.016459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1191.045569] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1191.066470] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1191.073511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1191.088350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1191.100671] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1191.117978] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1191.135242] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1191.150177] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1191.157858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1191.170868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1191.180990] device veth0_vlan entered promiscuous mode [ 1191.191717] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1191.208506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1191.222682] device veth1_vlan entered promiscuous mode [ 1191.238547] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1191.252725] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1191.261546] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1191.273196] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1191.283401] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1191.294816] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1191.302743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1191.319359] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1191.334751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1191.343053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1191.356248] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1191.365786] device veth0_vlan entered promiscuous mode [ 1191.379433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1191.387696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1191.400816] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1191.411239] device veth1_vlan entered promiscuous mode [ 1191.421863] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1191.434708] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1191.447114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1191.455376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1191.465552] device veth0_macvtap entered promiscuous mode [ 1191.472387] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1191.498939] device veth1_macvtap entered promiscuous mode [ 1191.505465] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1191.513198] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1191.529085] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1191.546142] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1191.561302] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1191.572899] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1191.583816] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1191.592793] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1191.603303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1191.611848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1191.622878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1191.633920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1191.645594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.655317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1191.665347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.676141] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1191.683756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1191.696509] device veth0_macvtap entered promiscuous mode [ 1191.702777] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1191.710474] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1191.722616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1191.731614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1191.743492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1191.753632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.762800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1191.772571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.783140] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1191.790845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1191.800030] device veth1_macvtap entered promiscuous mode [ 1191.807935] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1191.823308] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1191.834094] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1191.841709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1191.853191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1191.866892] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1191.886579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1191.896804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.907236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1191.917674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.927367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1191.937658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.948205] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1191.956357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1191.969245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1191.979155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.990658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1192.001125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.010361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1192.020162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.031076] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1192.039340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1192.048604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1192.056901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1192.065544] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1192.073358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1192.309491] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1192.319134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.349108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.375932] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1192.390528] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1192.400441] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1192.408383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.415953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.423063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.430990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.448681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1192.460920] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1192.478163] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1192.484650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.491768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.507370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1192.621913] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1192.634614] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 21:52:08 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4800, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:52:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 21:52:08 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1cb, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:52:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:52:08 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x1000000, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) 21:52:08 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000002002000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1193.430641] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1193.439498] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 21:52:09 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000004802000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:52:09 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1cc, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:52:09 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000004c02000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:52:09 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1cd, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:52:09 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000006802000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:52:09 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000006c02000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:52:09 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1194.311675] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1194.345952] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1196.717324] IPVS: ftp: loaded support on port[0] = 21 [ 1196.832941] chnl_net:caif_netlink_parms(): no params data found [ 1196.912182] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.921433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.930057] device bridge_slave_0 entered promiscuous mode [ 1196.938647] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.947205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.955423] device bridge_slave_1 entered promiscuous mode [ 1196.979173] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1196.989385] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1197.018361] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1197.027006] team0: Port device team_slave_0 added [ 1197.032871] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1197.045845] team0: Port device team_slave_1 added [ 1197.074321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1197.080772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1197.108730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1197.123824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1197.130077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1197.157612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1197.169516] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1197.179026] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1197.206962] device hsr_slave_0 entered promiscuous mode [ 1197.212807] device hsr_slave_1 entered promiscuous mode [ 1197.220394] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1197.228547] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1197.336226] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.342644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1197.349364] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.355785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1197.430327] IPVS: ftp: loaded support on port[0] = 21 [ 1197.457336] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1197.463446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1197.499238] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1197.540081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1197.548490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.559002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.567444] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1197.581228] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1197.589496] 8021q: adding VLAN 0 to HW filter on device team0 [ 1197.625919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1197.636175] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.642542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1197.653015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1197.662819] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.669237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1197.716721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1197.727576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1197.761902] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1197.777484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1197.789320] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1197.800766] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1197.809354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1197.822063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1197.846343] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1197.861800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1197.869206] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1197.882047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1197.897696] chnl_net:caif_netlink_parms(): no params data found [ 1197.912249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1197.967776] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1198.001141] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1198.009678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1198.022838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1198.131441] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.145957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.153430] device bridge_slave_0 entered promiscuous mode [ 1198.170014] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1198.182123] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1198.190657] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1198.202432] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.210476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.221937] device bridge_slave_1 entered promiscuous mode [ 1198.238950] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1198.247492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1198.260078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1198.282030] device veth0_vlan entered promiscuous mode [ 1198.290953] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1198.303032] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1198.326255] device veth1_vlan entered promiscuous mode [ 1198.333432] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1198.349922] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1198.368358] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1198.380137] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1198.406839] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1198.416173] team0: Port device team_slave_0 added [ 1198.424755] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1198.435837] team0: Port device team_slave_1 added [ 1198.445553] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1198.470084] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1198.480218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1198.489529] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1198.498902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1198.507782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1198.517472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1198.526031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1198.554167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1198.565547] device veth0_macvtap entered promiscuous mode [ 1198.571892] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1198.586012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1198.592284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1198.619211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1198.630769] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1198.642263] device veth1_macvtap entered promiscuous mode [ 1198.649275] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1198.656249] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1198.669396] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1198.701488] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1198.714274] device hsr_slave_0 entered promiscuous mode [ 1198.720475] device hsr_slave_1 entered promiscuous mode [ 1198.728578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1198.739274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1198.749892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1198.763694] Bluetooth: hci4: command 0x0409 tx timeout [ 1198.769818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1198.783382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1198.798043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1198.807439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1198.822142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1198.833017] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1198.844891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1198.852202] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1198.860010] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1198.868906] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1198.876912] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1198.887328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1198.898009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1198.910450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1198.921551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1198.931226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1198.941496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1198.951956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1198.966390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1198.977490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1198.990616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1199.008396] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1199.016442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1199.033740] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1199.041641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1199.196658] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1199.262597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1199.272761] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1199.288253] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1199.295213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1199.302290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1199.313311] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1199.321250] 8021q: adding VLAN 0 to HW filter on device team0 [ 1199.337593] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1199.345257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1199.353205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1199.369906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.376334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1199.391661] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1199.399784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1199.414259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1199.431804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1199.449031] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.455480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1199.469542] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1199.476890] Bluetooth: hci5: command 0x0409 tx timeout [ 1199.488428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1199.510286] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1199.520996] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1199.533709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1199.542181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1199.555184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1199.568030] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1199.576689] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1199.584933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1199.600938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1199.611884] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1199.630979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1199.639887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1199.670921] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1199.690462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1199.698988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1199.709632] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1199.718383] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1199.729211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1199.737792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1199.751039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1199.775456] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1199.790926] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1199.800414] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1199.815145] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1199.828521] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1199.838541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1199.855708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1199.864908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1199.879574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1199.903286] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1199.911672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1199.944183] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1199.951645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1199.975134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 21:52:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 21:52:15 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1ce, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) [ 1200.047784] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1200.075131] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1200.081858] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1200.175825] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1200.183342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1200.202087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1200.235643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1200.242714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1200.286235] device veth0_vlan entered promiscuous mode [ 1200.346480] device veth1_vlan entered promiscuous mode [ 1200.366973] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1200.407245] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1200.483576] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1200.497823] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1200.505938] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1200.522651] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1200.558161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1200.578512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1200.780726] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1200.813077] systemd-journal cpuset=/ mems_allowed=0-1 [ 1200.834097] Bluetooth: hci4: command 0x041b tx timeout [ 1200.846896] CPU: 1 PID: 14494 Comm: systemd-journal Not tainted 4.19.163-syzkaller #0 [ 1200.854980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1200.864315] Call Trace: [ 1200.866889] dump_stack+0x1fc/0x2fe [ 1200.870507] dump_header+0x15d/0xc3f [ 1200.874203] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1200.879293] ? ___ratelimit+0x319/0x584 [ 1200.883263] oom_kill_process.cold+0x10/0x692 [ 1200.887738] ? check_preemption_disabled+0x41/0x280 [ 1200.892742] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1200.898003] out_of_memory+0x1072/0x1390 [ 1200.902048] ? oom_killer_disable+0x270/0x270 [ 1200.906539] ? mutex_trylock+0x15f/0x1a0 [ 1200.910597] __alloc_pages_nodemask+0x23a2/0x2890 [ 1200.915434] ? find_get_entry+0x4cd/0x8a0 [ 1200.919577] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1200.924433] alloc_pages_current+0x193/0x2a0 [ 1200.928839] filemap_fault+0x146e/0x2180 [ 1200.932892] ext4_filemap_fault+0x84/0xb0 [ 1200.937024] __do_fault+0x10b/0x4b0 [ 1200.940649] __handle_mm_fault+0x273b/0x41c0 [ 1200.945041] ? vm_insert_page+0x9c0/0x9c0 [ 1200.949175] ? check_preemption_disabled+0x41/0x280 [ 1200.954172] handle_mm_fault+0x436/0xb10 [ 1200.958231] __do_page_fault+0x68e/0xd60 [ 1200.962275] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1200.967358] ? spurious_fault+0x840/0x840 [ 1200.971502] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1200.976335] ? page_fault+0x8/0x30 [ 1200.980034] page_fault+0x1e/0x30 [ 1200.983472] RIP: 0033:0x7f8d641f79c7 [ 1200.987175] Code: Bad RIP value. [ 1200.990520] RSP: 002b:00007ffdd42fd638 EFLAGS: 00010246 [ 1200.995862] RAX: 0000000000000000 RBX: 00007ffdd4300550 RCX: 00007f8d641f79c7 [ 1201.003294] RDX: 00007f8d64c68a00 RSI: 0000000000000000 RDI: 000055880add89a3 [ 1201.010545] RBP: 00007ffdd42fd670 R08: 0000000000000000 R09: 0000000000000000 [ 1201.017925] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1201.025182] R13: 0000000000000000 R14: 00007ffdd4300550 R15: 00007ffdd42fdb60 [ 1201.051451] Mem-Info: [ 1201.054273] active_anon:122052 inactive_anon:27126 isolated_anon:0 [ 1201.054273] active_file:39 inactive_file:0 isolated_file:0 [ 1201.054273] unevictable:0 dirty:29 writeback:0 unstable:0 [ 1201.054273] slab_reclaimable:12866 slab_unreclaimable:114547 [ 1201.054273] mapped:52731 shmem:27498 pagetables:996 bounce:0 [ 1201.054273] free:24907 free_pcp:0 free_cma:0 [ 1201.092925] Node 0 active_anon:485528kB inactive_anon:48912kB active_file:108kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:134408kB dirty:48kB writeback:56kB shmem:49992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 153600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1201.131025] Node 1 active_anon:2604kB inactive_anon:59592kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:76336kB dirty:0kB writeback:0kB shmem:60000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1201.163150] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1201.189818] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1201.195939] Node 0 DMA32 free:35896kB min:35996kB low:44992kB high:53988kB active_anon:485608kB inactive_anon:48912kB active_file:60kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7456kB pagetables:3412kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1201.225574] lowmem_reserve[]: 0 0 1 1 1 [ 1201.229561] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1201.256043] lowmem_reserve[]: 0 0 0 0 0 [ 1201.260035] Node 1 Normal free:53616kB min:53876kB low:67344kB high:80812kB active_anon:2604kB inactive_anon:59592kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:568kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1201.288828] lowmem_reserve[]: 0 0 0 0 0 [ 1201.292828] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10952kB [ 1201.305917] Node 0 DMA32: 1394*4kB (UMEH) 1382*8kB (UMEH) 536*16kB (UMEH) 202*32kB (MEH) 62*64kB (MH) 2*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35896kB [ 1201.329982] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1201.341174] Node 1 Normal: 196*4kB (ME) 180*8kB (ME) 124*16kB (ME) 56*32kB (UM) 37*64kB (ME) 28*128kB (UME) 13*256kB (UM) 9*512kB (M) 1*1024kB (U) 0*2048kB 8*4096kB (UM) = 53680kB [ 1201.361325] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1201.370238] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1201.379145] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1201.388080] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1201.397669] 27524 total pagecache pages [ 1201.401660] 0 pages in swap cache [ 1201.405595] Swap cache stats: add 0, delete 0, find 0/0 [ 1201.410951] Free swap = 0kB [ 1201.414067] Total swap = 0kB [ 1201.417083] 2097051 pages RAM [ 1201.420180] 0 pages HighMem/MovableOnly [ 1201.424262] 369639 pages reserved [ 1201.427711] 0 pages cma reserved [ 1201.431328] Out of memory (oom_kill_allocating_task): Kill process 14494 (systemd-journal) score 0 or sacrifice child [ 1201.442209] Killed process 14494 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1812kB [ 1201.453968] oom_reaper: reaped process 14494 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1816kB [ 1201.460930] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1201.483140] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1201.491493] CPU: 0 PID: 8130 Comm: syz-fuzzer Not tainted 4.19.163-syzkaller #0 [ 1201.498968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1201.508662] Call Trace: [ 1201.511236] dump_stack+0x1fc/0x2fe [ 1201.514848] dump_header+0x15d/0xc3f [ 1201.518546] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1201.523639] ? ___ratelimit+0x319/0x584 [ 1201.527609] oom_kill_process.cold+0x10/0x692 [ 1201.538998] ? check_preemption_disabled+0x41/0x280 [ 1201.544022] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1201.549314] out_of_memory+0x1072/0x1390 [ 1201.553370] ? oom_killer_disable+0x270/0x270 [ 1201.554216] Bluetooth: hci5: command 0x041b tx timeout [ 1201.557867] ? mutex_trylock+0x15f/0x1a0 [ 1201.567179] __alloc_pages_nodemask+0x23a2/0x2890 [ 1201.572006] ? find_get_entry+0x4cd/0x8a0 [ 1201.576140] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1201.580976] alloc_pages_current+0x193/0x2a0 [ 1201.585379] filemap_fault+0x146e/0x2180 [ 1201.589438] ext4_filemap_fault+0x84/0xb0 [ 1201.593589] __do_fault+0x10b/0x4b0 [ 1201.597720] ? do_raw_spin_unlock+0x171/0x230 [ 1201.602200] __handle_mm_fault+0x273b/0x41c0 [ 1201.606605] ? vm_insert_page+0x9c0/0x9c0 [ 1201.610774] ? check_preemption_disabled+0x41/0x280 [ 1201.615796] handle_mm_fault+0x436/0xb10 [ 1201.619847] __do_page_fault+0x68e/0xd60 [ 1201.623910] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1201.628957] ? spurious_fault+0x840/0x840 [ 1201.633093] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1201.637935] ? page_fault+0x8/0x30 [ 1201.641458] page_fault+0x1e/0x30 [ 1201.644900] RIP: 0033:0x449fb9 [ 1201.648095] Code: Bad RIP value. [ 1201.651451] RSP: 002b:000000c000009938 EFLAGS: 00010206 [ 1201.656794] RAX: 000000c000314f00 RBX: 000000000040cd92 RCX: 0000000000000000 [ 1201.664054] RDX: 00000000002a2526 RSI: 0000000000000001 RDI: 000000c000009828 [ 1201.671496] RBP: 000000c000009960 R08: 0000000000f68d20 R09: 0000000000c1fe82 [ 1201.678765] R10: 0000000000bf1fa0 R11: 00000000002a2528 R12: 00000000000000f1 [ 1201.686022] R13: 0000000000000000 R14: 0000000000b816d1 R15: 0000000000000000 [ 1201.730429] Mem-Info: [ 1201.743495] active_anon:121978 inactive_anon:27126 isolated_anon:0 [ 1201.743495] active_file:177 inactive_file:221 isolated_file:0 [ 1201.743495] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1201.743495] slab_reclaimable:12879 slab_unreclaimable:114316 [ 1201.743495] mapped:52453 shmem:27498 pagetables:996 bounce:0 [ 1201.743495] free:25130 free_pcp:89 free_cma:0 [ 1201.792532] Node 0 active_anon:485508kB inactive_anon:48912kB active_file:444kB inactive_file:388kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:133076kB dirty:0kB writeback:0kB shmem:49992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 153600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1201.822939] Node 1 active_anon:2404kB inactive_anon:59592kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:76336kB dirty:0kB writeback:0kB shmem:60000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1201.851097] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1201.881941] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1201.887867] Node 0 DMA32 free:36228kB min:35996kB low:44992kB high:53988kB active_anon:485508kB inactive_anon:48912kB active_file:60kB inactive_file:1228kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7456kB pagetables:3412kB bounce:0kB free_pcp:92kB local_pcp:24kB free_cma:0kB [ 1201.926984] lowmem_reserve[]: 0 0 1 1 1 [ 1201.931054] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1201.957036] lowmem_reserve[]: 0 0 0 0 0 [ 1201.961019] Node 1 Normal free:53840kB min:53876kB low:67344kB high:80812kB active_anon:2404kB inactive_anon:59592kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:480kB pagetables:568kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1201.994435] lowmem_reserve[]: 0 0 0 0 0 [ 1201.998976] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10952kB [ 1202.013049] Node 0 DMA32: 1254*4kB (MEH) 1453*8kB (UMEH) 567*16kB (UMEH) 200*32kB (UMEH) 64*64kB (UMH) 2*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36464kB [ 1202.039555] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1202.065028] Node 1 Normal: 175*4kB (UME) 153*8kB (ME) 118*16kB (UME) 45*32kB (M) 36*64kB (UME) 26*128kB (ME) 15*256kB (M) 10*512kB (M) 1*1024kB (U) 0*2048kB 8*4096kB (UM) = 53636kB [ 1202.083365] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1202.092223] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1202.103068] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1202.111981] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1202.124859] 27537 total pagecache pages [ 1202.128868] 0 pages in swap cache [ 1202.132302] Swap cache stats: add 0, delete 0, find 0/0 [ 1202.137699] Free swap = 0kB [ 1202.140702] Total swap = 0kB [ 1202.143932] 2097051 pages RAM [ 1202.147023] 0 pages HighMem/MovableOnly [ 1202.150971] 369639 pages reserved [ 1202.154488] 0 pages cma reserved [ 1202.157845] Out of memory (oom_kill_allocating_task): Kill process 8130 (syz-fuzzer) score 0 or sacrifice child [ 1202.168271] Killed process 15102 (syz-executor.3) total-vm:85024kB, anon-rss:1732kB, file-rss:4kB, shmem-rss:0kB [ 1203.080356] oom_reaper: reaped process 15063 (syz-executor.5), now anon-rss:0kB, file-rss:33804kB, shmem-rss:0kB [ 1203.110277] rs:main Q:Reg invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1203.166648] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1203.171715] CPU: 0 PID: 14508 Comm: rs:main Q:Reg Not tainted 4.19.163-syzkaller #0 [ 1203.179507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1203.188887] Call Trace: [ 1203.191483] dump_stack+0x1fc/0x2fe [ 1203.195114] dump_header+0x15d/0xc3f [ 1203.198870] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1203.203974] ? ___ratelimit+0x319/0x584 [ 1203.208038] oom_kill_process.cold+0x10/0x692 [ 1203.212550] ? check_preemption_disabled+0x41/0x280 [ 1203.217573] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1203.222856] out_of_memory+0x1072/0x1390 [ 1203.226924] ? oom_killer_disable+0x270/0x270 [ 1203.231414] ? mutex_trylock+0x15f/0x1a0 [ 1203.235461] __alloc_pages_nodemask+0x23a2/0x2890 [ 1203.240292] ? find_get_entry+0x4cd/0x8a0 [ 1203.244437] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1203.249289] alloc_pages_current+0x193/0x2a0 [ 1203.253789] filemap_fault+0x146e/0x2180 [ 1203.257837] ext4_filemap_fault+0x84/0xb0 [ 1203.262323] __do_fault+0x10b/0x4b0 [ 1203.265948] __handle_mm_fault+0x273b/0x41c0 [ 1203.270336] ? vm_insert_page+0x9c0/0x9c0 [ 1203.274465] ? lock_downgrade+0x720/0x720 [ 1203.278598] ? check_preemption_disabled+0x41/0x280 [ 1203.283597] handle_mm_fault+0x436/0xb10 [ 1203.287642] __do_page_fault+0x68e/0xd60 [ 1203.291686] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1203.296700] ? spurious_fault+0x840/0x840 [ 1203.300830] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1203.305655] ? page_fault+0x8/0x30 [ 1203.309178] page_fault+0x1e/0x30 [ 1203.312611] RIP: 0033:0x5642af41ff24 [ 1203.316320] Code: Bad RIP value. [ 1203.319662] RSP: 002b:00007fd0d174dac0 EFLAGS: 00010297 [ 1203.325014] RAX: 0000000000000001 RBX: 00005642af680bec RCX: 0000000000000001 [ 1203.332263] RDX: 00005642af4553a8 RSI: 0000000000000fa1 RDI: 00005642afa6bd30 [ 1203.340019] RBP: 00005642afa66260 R08: 0000000000000000 R09: 0000000000000000 [ 1203.347390] R10: 0000000000000000 R11: 0000000000000000 R12: 00005642afa6bd30 [ 1203.354650] R13: 00005642af680bec R14: 00007fd0cc05dcd0 R15: 00005642afa66290 [ 1203.367410] Mem-Info: [ 1203.369888] active_anon:120950 inactive_anon:27122 isolated_anon:0 [ 1203.369888] active_file:24 inactive_file:1 isolated_file:0 [ 1203.369888] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1203.369888] slab_reclaimable:12879 slab_unreclaimable:113896 [ 1203.369888] mapped:43546 shmem:27494 pagetables:923 bounce:0 [ 1203.369888] free:13844 free_pcp:181 free_cma:0 [ 1203.389341] syz-executor.5: vmalloc: allocation failure, allocated 1890856960 of 3621613568 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1203.407091] Node 0 active_anon:481480kB inactive_anon:48908kB active_file:84kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127860kB dirty:0kB writeback:0kB shmem:49992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 153600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1203.450040] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1203.450446] Node 1 active_anon:2320kB inactive_anon:59580kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46324kB dirty:0kB writeback:0kB shmem:59984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1203.473288] CPU: 1 PID: 15065 Comm: syz-executor.5 Not tainted 4.19.163-syzkaller #0 [ 1203.485826] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1203.491548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1203.491558] Call Trace: [ 1203.517784] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1203.527009] dump_stack+0x1fc/0x2fe [ 1203.527026] warn_alloc.cold+0x7b/0x18f [ 1203.527045] ? zone_watermark_ok_safe+0x260/0x260 [ 1203.529602] Node 0 DMA32 free:17880kB min:35996kB low:44992kB high:53988kB active_anon:481480kB inactive_anon:48908kB active_file:72kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7424kB pagetables:3376kB bounce:0kB free_pcp:240kB local_pcp:240kB free_cma:0kB [ 1203.535487] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1203.535505] ? retint_kernel+0x2d/0x2d [ 1203.535529] __vmalloc_area_node+0x4fd/0x780 [ 1203.535549] ? __vmalloc_node_range+0x180/0x180 [ 1203.539182] lowmem_reserve[]: 0 0 1 1 1 [ 1203.543162] ? _raw_spin_unlock+0x29/0x40 [ 1203.543174] ? __get_vm_area_node+0x2e2/0x3a0 [ 1203.543193] __vmalloc_node_range+0xed/0x180 [ 1203.548095] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1203.577414] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1203.577428] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1203.577440] vmalloc_user+0x70/0xe0 [ 1203.577453] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1203.577466] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1203.577481] __vb2_queue_alloc+0x472/0xe60 [ 1203.577506] vb2_core_create_bufs+0x273/0x7e0 [ 1203.577522] ? __vb2_queue_free+0x870/0x870 [ 1203.577540] ? __mutex_add_waiter+0x160/0x160 [ 1203.577561] vb2_create_bufs+0x332/0x620 [ 1203.577576] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1203.577590] ? __video_do_ioctl+0x632/0xcd0 [ 1203.577605] ? __mutex_add_waiter+0x160/0x160 [ 1203.577619] ? mark_held_locks+0xf0/0xf0 [ 1203.577640] vb2_ioctl_create_bufs+0x20d/0x360 [ 1203.577654] ? memset+0x20/0x40 [ 1203.577671] v4l_create_bufs+0xb2/0x160 [ 1203.577689] __video_do_ioctl+0x49a/0xcd0 [ 1203.577710] ? v4l_querycap+0x340/0x340 [ 1203.577727] ? __might_fault+0x192/0x1d0 [ 1203.577747] video_usercopy+0x13c/0x1000 [ 1203.577764] ? v4l_querycap+0x340/0x340 [ 1203.577780] ? v4l_enumstd+0x60/0x60 [ 1203.577792] ? mark_held_locks+0xf0/0xf0 [ 1203.577807] ? do_futex+0x163/0x1c70 [ 1203.577820] ? mark_held_locks+0xf0/0xf0 [ 1203.577837] ? mark_held_locks+0xf0/0xf0 [ 1203.577850] ? debug_check_no_obj_freed+0x201/0x482 [ 1203.577871] ? video_usercopy+0x1000/0x1000 [ 1203.577883] v4l2_ioctl+0x147/0x1a0 [ 1203.577895] ? video_devdata+0xa0/0xa0 [ 1203.577911] do_vfs_ioctl+0xcdb/0x12e0 [ 1203.577925] ? lock_downgrade+0x720/0x720 [ 1203.577937] ? check_preemption_disabled+0x41/0x280 [ 1203.577951] ? ioctl_preallocate+0x200/0x200 [ 1203.577969] ? __fget+0x356/0x510 [ 1203.577986] ? do_dup2+0x450/0x450 [ 1203.578010] ksys_ioctl+0x9b/0xc0 [ 1203.578026] __x64_sys_ioctl+0x6f/0xb0 [ 1203.578039] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1203.578053] do_syscall_64+0xf9/0x620 [ 1203.578070] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1203.578081] RIP: 0033:0x45e159 [ 1203.578106] Code: Bad RIP value. [ 1203.578114] RSP: 002b:00007f97906a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1203.578127] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e159 [ 1203.578136] RDX: 0000000020000340 RSI: 00000000c100565c RDI: 0000000000000003 [ 1203.578144] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1203.578151] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1203.578160] R13: 00007ffc100b0f6f R14: 00007f97906a39c0 R15: 000000000119bf8c [ 1203.620625] warn_alloc_show_mem: 2 callbacks suppressed [ 1203.620629] Mem-Info: [ 1203.652302] lowmem_reserve[]: 0 0 0 0 0 [ 1203.670574] Bluetooth: hci5: command 0x040f tx timeout [ 1203.680858] Node 1 Normal free:26892kB min:53876kB low:67344kB high:80812kB active_anon:2320kB inactive_anon:59580kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:316kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1203.710241] active_anon:120950 inactive_anon:27122 isolated_anon:0 [ 1203.710241] active_file:24 inactive_file:1 isolated_file:0 [ 1203.710241] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1203.710241] slab_reclaimable:12879 slab_unreclaimable:113896 [ 1203.710241] mapped:43546 shmem:27494 pagetables:923 bounce:0 [ 1203.710241] free:13909 free_pcp:115 free_cma:0 [ 1203.722298] lowmem_reserve[]: 0 0 0 0 0 [ 1203.747367] Node 0 active_anon:481480kB inactive_anon:48908kB active_file:84kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127860kB dirty:0kB writeback:0kB shmem:49992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 153600kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1203.757899] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10860kB [ 1203.779485] Node 1 active_anon:2320kB inactive_anon:59580kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46324kB dirty:0kB writeback:0kB shmem:59984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1203.791937] Node 0 DMA32: 1128*4kB (UMEH) 854*8kB (MEH) 206*16kB (UMEH) 81*32kB (UMH) 3*64kB (H) 2*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17680kB [ 1203.819406] Node 0 DMA free:10892kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1203.834251] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1203.879574] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1203.891878] Node 1 Normal: 159*4kB (UME) 143*8kB (UME) 104*16kB (ME) 42*32kB (M) 39*64kB (UME) 27*128kB (UME) 14*256kB (M) 9*512kB (M) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 27124kB [ 1203.918412] Node 0 DMA32 free:17880kB min:35996kB low:44992kB high:53988kB active_anon:481480kB inactive_anon:48908kB active_file:72kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7424kB pagetables:3376kB bounce:0kB free_pcp:444kB local_pcp:240kB free_cma:0kB [ 1203.939931] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1203.972007] lowmem_reserve[]: 0 0 1 1 1 [ 1204.008406] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1204.045088] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1204.084631] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1204.121784] lowmem_reserve[]: 0 0 0 0 0 [ 1204.152122] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1204.177053] Node 1 Normal free:27124kB min:53876kB low:67344kB high:80812kB active_anon:2316kB inactive_anon:59580kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:480kB pagetables:316kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1204.207455] 27528 total pagecache pages [ 1204.232054] lowmem_reserve[]: 0 0 0 0 0 [ 1204.250856] 0 pages in swap cache [ 1204.257901] Swap cache stats: add 0, delete 0, find 0/0 [ 1204.269754] Free swap = 0kB [ 1204.272930] Total swap = 0kB [ 1204.272988] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 2*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10892kB [ 1204.288371] 2097051 pages RAM [ 1204.292657] 0 pages HighMem/MovableOnly [ 1204.300748] Node 0 DMA32: 1128*4kB (UMEH) 854*8kB (MEH) 209*16kB (UMEH) 84*32kB (UMH) 5*64kB (UH) 4*128kB (UH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18208kB [ 1204.318055] 369639 pages reserved [ 1204.321511] 0 pages cma reserved [ 1204.326655] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1204.340282] Node 1 Normal: 159*4kB (UME) 143*8kB (UME) 104*16kB (ME) 43*32kB (UM) 38*64kB (ME) 27*128kB (UME) 14*256kB (M) 9*512kB (M) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 27092kB [ 1204.342341] Out of memory (oom_kill_allocating_task): Kill process 14508 (rs:main Q:Reg) score 0 or sacrifice child [ 1204.382162] Killed process 14495 (rsyslogd) total-vm:254332kB, anon-rss:928kB, file-rss:0kB, shmem-rss:0kB [ 1204.407568] oom_reaper: reaped process 14495 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1204.412392] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1204.429593] syz-executor.1 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1204.456110] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1204.461255] CPU: 0 PID: 15105 Comm: syz-executor.1 Not tainted 4.19.163-syzkaller #0 [ 1204.469304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1204.473094] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1204.478825] Call Trace: [ 1204.489974] dump_stack+0x1fc/0x2fe [ 1204.493604] dump_header+0x15d/0xc3f [ 1204.496881] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1204.497419] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1204.506267] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1204.511338] ? ___ratelimit+0x319/0x584 [ 1204.519915] 27528 total pagecache pages [ 1204.523878] oom_kill_process.cold+0x10/0x692 [ 1204.523895] ? check_preemption_disabled+0x41/0x280 [ 1204.527846] 0 pages in swap cache [ 1204.532344] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1204.537350] Swap cache stats: add 0, delete 0, find 0/0 [ 1204.540773] out_of_memory+0x1072/0x1390 [ 1204.546067] Free swap = 0kB [ 1204.551418] ? oom_killer_disable+0x270/0x270 [ 1204.555467] Total swap = 0kB [ 1204.558460] ? mutex_trylock+0x15f/0x1a0 [ 1204.562942] 2097051 pages RAM [ 1204.565966] __alloc_pages_nodemask+0x23a2/0x2890 [ 1204.565983] ? find_get_entry+0x4cd/0x8a0 [ 1204.566006] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1204.570033] 0 pages HighMem/MovableOnly [ 1204.573145] alloc_pages_current+0x193/0x2a0 [ 1204.573161] filemap_fault+0x146e/0x2180 [ 1204.577991] 369639 pages reserved [ 1204.582134] ext4_filemap_fault+0x84/0xb0 [ 1204.586967] 0 pages cma reserved [ 1204.590912] __do_fault+0x10b/0x4b0 [ 1204.613887] __handle_mm_fault+0x273b/0x41c0 [ 1204.618302] ? vm_insert_page+0x9c0/0x9c0 [ 1204.622453] ? debug_object_active_state+0x254/0x330 [ 1204.627567] ? check_preemption_disabled+0x41/0x280 [ 1204.632596] handle_mm_fault+0x436/0xb10 [ 1204.636673] __do_page_fault+0x68e/0xd60 [ 1204.640749] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1204.645766] ? spurious_fault+0x840/0x840 [ 1204.649926] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1204.654773] ? page_fault+0x8/0x30 [ 1204.658315] page_fault+0x1e/0x30 [ 1204.661767] RIP: 0033:0x446770 [ 1204.664968] Code: Bad RIP value. [ 1204.668332] RSP: 002b:00007ffec61f5e58 EFLAGS: 00010246 [ 1204.673700] RAX: 00007ffec61f6500 RBX: 00007ffec61f63c0 RCX: 00000000fbad8001 [ 1204.680967] RDX: 00007ffec61f64e8 RSI: 0000000000000025 RDI: 00000000004c383d [ 1204.688233] RBP: 00007ffec61f63b0 R08: 0000000000000000 R09: 0000000000000005 [ 1204.695499] R10: 0000000000000000 R11: 000000000051ed04 R12: 00000000004c383d [ 1204.703288] R13: 00007ffec61f64e8 R14: 0000000000000001 R15: 0000000000000000 [ 1204.730729] Mem-Info: [ 1204.733311] active_anon:120667 inactive_anon:27122 isolated_anon:0 [ 1204.733311] active_file:42 inactive_file:0 isolated_file:0 [ 1204.733311] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1204.733311] slab_reclaimable:12879 slab_unreclaimable:113405 [ 1204.733311] mapped:43521 shmem:27494 pagetables:922 bounce:0 [ 1204.733311] free:14867 free_pcp:59 free_cma:0 [ 1204.780222] Node 0 active_anon:481252kB inactive_anon:48908kB active_file:160kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127760kB dirty:0kB writeback:0kB shmem:49992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1204.822130] Node 1 active_anon:1416kB inactive_anon:59580kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46324kB dirty:0kB writeback:0kB shmem:59984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1204.867638] Node 0 DMA free:10892kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1204.907554] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1204.912623] Node 0 DMA32 free:20004kB min:35996kB low:44992kB high:53988kB active_anon:481252kB inactive_anon:48908kB active_file:160kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7424kB pagetables:3372kB bounce:0kB free_pcp:456kB local_pcp:212kB free_cma:0kB [ 1204.954900] lowmem_reserve[]: 0 0 1 1 1 [ 1204.958917] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1204.998831] lowmem_reserve[]: 0 0 0 0 0 [ 1205.002850] Node 1 Normal free:28124kB min:53876kB low:67344kB high:80812kB active_anon:1416kB inactive_anon:59580kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:352kB pagetables:316kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1205.044478] lowmem_reserve[]: 0 0 0 0 0 [ 1205.048532] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 2*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10892kB [ 1205.075552] Node 0 DMA32: 1113*4kB (UMEH) 926*8kB (UMEH) 277*16kB (UMEH) 90*32kB (UMH) 5*64kB (UH) 4*128kB (UH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20004kB [ 1205.092503] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1205.110291] Node 1 Normal: 145*4kB (UME) 125*8kB (UME) 95*16kB (UME) 45*32kB (UM) 37*64kB (ME) 27*128kB (UME) 12*256kB (M) 9*512kB (M) 4*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 28284kB [ 1205.142662] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1205.167834] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1205.191825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1205.217264] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1205.249514] 27528 total pagecache pages [ 1205.263827] 0 pages in swap cache [ 1205.267304] Swap cache stats: add 0, delete 0, find 0/0 [ 1205.272661] Free swap = 0kB [ 1205.290621] Total swap = 0kB [ 1205.293757] 2097051 pages RAM [ 1205.298452] 0 pages HighMem/MovableOnly [ 1205.302432] 369639 pages reserved [ 1205.320932] 0 pages cma reserved [ 1205.332330] Out of memory (oom_kill_allocating_task): Kill process 15105 (syz-executor.1) score 0 or sacrifice child [ 1205.361703] Killed process 15105 (syz-executor.1) total-vm:93220kB, anon-rss:88kB, file-rss:34240kB, shmem-rss:0kB [ 1205.392647] oom_reaper: reaped process 15105 (syz-executor.1), now anon-rss:0kB, file-rss:34240kB, shmem-rss:0kB [ 1205.422304] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1205.469857] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1205.520061] CPU: 1 PID: 8130 Comm: syz-fuzzer Not tainted 4.19.163-syzkaller #0 [ 1205.527551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1205.536908] Call Trace: [ 1205.539501] dump_stack+0x1fc/0x2fe [ 1205.543134] dump_header+0x15d/0xc3f [ 1205.546862] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1205.551964] ? ___ratelimit+0x319/0x584 [ 1205.555949] oom_kill_process.cold+0x10/0x692 [ 1205.560447] ? check_preemption_disabled+0x41/0x280 [ 1205.565471] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1205.570771] out_of_memory+0x1072/0x1390 [ 1205.574843] ? oom_killer_disable+0x270/0x270 [ 1205.579430] ? mutex_trylock+0x15f/0x1a0 [ 1205.583501] __alloc_pages_nodemask+0x23a2/0x2890 [ 1205.588438] ? find_get_entry+0x4cd/0x8a0 [ 1205.592641] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1205.597509] alloc_pages_current+0x193/0x2a0 [ 1205.601928] filemap_fault+0x146e/0x2180 [ 1205.606008] ext4_filemap_fault+0x84/0xb0 [ 1205.610169] __do_fault+0x10b/0x4b0 [ 1205.613801] ? do_raw_spin_unlock+0x171/0x230 [ 1205.618311] __handle_mm_fault+0x273b/0x41c0 [ 1205.622749] ? vm_insert_page+0x9c0/0x9c0 [ 1205.626917] ? check_preemption_disabled+0x41/0x280 [ 1205.632132] handle_mm_fault+0x436/0xb10 [ 1205.636210] __do_page_fault+0x68e/0xd60 [ 1205.640291] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1205.645321] ? spurious_fault+0x840/0x840 [ 1205.649482] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1205.654444] ? page_fault+0x8/0x30 [ 1205.657986] page_fault+0x1e/0x30 [ 1205.661437] RIP: 0033:0x4650f0 [ 1205.664634] Code: Bad RIP value. [ 1205.667994] RSP: 002b:000000c0004b7710 EFLAGS: 00010217 [ 1205.673352] RAX: 000000c0004b7700 RBX: 000000005f806d57 RCX: 000000c000314f00 [ 1205.680620] RDX: 000000c00a70da80 RSI: 0000000000943c00 RDI: 0000000000000038 [ 1205.687915] RBP: 000000c0004b7740 R08: 0000000000000000 R09: 0000000000203006 [ 1205.695188] R10: 0000000000000002 R11: 0000000000000011 R12: 00000000000000f1 [ 1205.702481] R13: 0000000000000000 R14: 0000000000b816d1 R15: 0000000000000000 [ 1205.748489] Mem-Info: [ 1205.750958] active_anon:120626 inactive_anon:27122 isolated_anon:0 [ 1205.750958] active_file:12 inactive_file:17 isolated_file:0 [ 1205.750958] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1205.750958] slab_reclaimable:12879 slab_unreclaimable:113424 [ 1205.750958] mapped:43521 shmem:27494 pagetables:891 bounce:0 [ 1205.750958] free:14753 free_pcp:116 free_cma:0 [ 1205.811847] Node 0 active_anon:481156kB inactive_anon:48908kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127760kB dirty:0kB writeback:0kB shmem:49992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1205.921624] Node 1 active_anon:1348kB inactive_anon:59580kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46324kB dirty:0kB writeback:0kB shmem:59984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1206.004790] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1206.052680] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1206.060972] Node 0 DMA32 free:21480kB min:35996kB low:44992kB high:53988kB active_anon:481156kB inactive_anon:48908kB active_file:112kB inactive_file:76kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7424kB pagetables:3324kB bounce:0kB free_pcp:404kB local_pcp:168kB free_cma:0kB [ 1206.151886] lowmem_reserve[]: 0 0 1 1 1 [ 1206.213077] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1206.347306] lowmem_reserve[]: 0 0 0 0 0 [ 1206.351352] Node 1 Normal free:28484kB min:53876kB low:67344kB high:80812kB active_anon:1296kB inactive_anon:59580kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:320kB pagetables:144kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1206.438678] lowmem_reserve[]: 0 0 0 0 0 [ 1206.442714] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10868kB [ 1206.492863] Node 0 DMA32: 1116*4kB (UMEH) 989*8kB (UMEH) 328*16kB (UMEH) 96*32kB (UMH) 5*64kB (UH) 5*128kB (UH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 21656kB [ 1206.544665] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1206.585935] Node 1 Normal: 137*4kB (UME) 122*8kB (UME) 103*16kB (UME) 45*32kB (UM) 39*64kB (UME) 27*128kB (UME) 12*256kB (M) 9*512kB (M) 4*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 28484kB [ 1206.637439] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1206.711661] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1206.759014] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1206.783674] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1206.792362] 27528 total pagecache pages [ 1206.832537] 0 pages in swap cache [ 1206.853839] Swap cache stats: add 0, delete 0, find 0/0 [ 1206.859228] Free swap = 0kB [ 1206.862256] Total swap = 0kB [ 1206.922928] 2097051 pages RAM [ 1206.926065] 0 pages HighMem/MovableOnly [ 1206.930030] 369639 pages reserved [ 1206.961940] 0 pages cma reserved [ 1207.011498] Out of memory (oom_kill_allocating_task): Kill process 8130 (syz-fuzzer) score 0 or sacrifice child [ 1207.080642] Killed process 2436 (syz-executor.2) total-vm:85024kB, anon-rss:1724kB, file-rss:0kB, shmem-rss:0kB [ 1207.253837] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1207.280921] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1207.324373] systemd[1]: rsyslog.service: Unit entered failed state. [ 1207.337762] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1207.346180] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1207.369391] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1207.383751] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1207.393063] systemd[1]: Stopped Journal Service. [ 1207.450303] systemd[1]: Starting Journal Service... [ 1207.498963] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1207.683357] systemd-journald[15601]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1210.781503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1210.800057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1210.815552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1210.822271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1210.838950] device bridge_slave_1 left promiscuous mode [ 1210.846850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.858319] device bridge_slave_0 left promiscuous mode [ 1210.866309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.881047] device veth1_macvtap left promiscuous mode [ 1210.889174] device veth0_macvtap left promiscuous mode [ 1210.898711] device veth1_vlan left promiscuous mode [ 1210.906156] device veth0_vlan left promiscuous mode [ 1213.392451] Bluetooth: hci1: command 0x0409 tx timeout [ 1215.482345] Bluetooth: hci1: command 0x041b tx timeout [ 1216.276396] device hsr_slave_1 left promiscuous mode [ 1216.284774] device hsr_slave_0 left promiscuous mode [ 1216.302086] team0 (unregistering): Port device team_slave_1 removed [ 1216.311475] team0 (unregistering): Port device team_slave_0 removed [ 1216.321627] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1216.331846] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1216.365969] bond0 (unregistering): Released all slaves [ 1216.384807] IPVS: ftp: loaded support on port[0] = 21 [ 1216.484759] chnl_net:caif_netlink_parms(): no params data found [ 1216.619840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.627322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.637000] device bridge_slave_0 entered promiscuous mode [ 1216.646815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.654067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.663165] device bridge_slave_1 entered promiscuous mode [ 1216.687928] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1216.697987] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1216.721729] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1216.730069] team0: Port device team_slave_0 added [ 1216.737671] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1216.746099] team0: Port device team_slave_1 added [ 1216.768525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1216.775630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1216.803720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1216.819319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1216.827071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1216.858482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1216.877642] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1216.885363] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1216.923842] device hsr_slave_0 entered promiscuous mode [ 1216.929903] device hsr_slave_1 entered promiscuous mode [ 1216.942728] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1216.950023] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1217.090664] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.097111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1217.103879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.110234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1217.177547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1217.194748] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1217.206296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1217.214422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.221230] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.241941] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1217.249114] 8021q: adding VLAN 0 to HW filter on device team0 [ 1217.260091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1217.273294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.279767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1217.307436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1217.315883] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.322497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1217.331501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1217.352818] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1217.360290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1217.369256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1217.378559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1217.389285] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1217.399806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1217.426574] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1217.436704] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1217.446644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1217.454410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1217.475111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1217.533728] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1217.545826] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1217.553489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1217.561405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1217.564762] Bluetooth: hci1: command 0x040f tx timeout [ 1217.604826] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1217.613190] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1217.620322] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1217.630380] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1217.637811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1217.646181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1217.655735] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1217.665441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1217.687531] device veth0_vlan entered promiscuous mode [ 1217.696472] device veth1_vlan entered promiscuous mode [ 1217.702839] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1217.711587] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1217.733144] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1217.743205] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1217.750086] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1217.758397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1217.766379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1217.774485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1217.793312] device veth0_macvtap entered promiscuous mode [ 1217.799797] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1217.809372] device veth1_macvtap entered promiscuous mode [ 1217.816352] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1217.831367] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1217.843782] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1217.845671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1217.861932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.872178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1217.881903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.891180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1217.901159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.910326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1217.920457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.931521] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1217.938833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1217.947526] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1217.955271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1217.962795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1217.970525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1217.981123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1217.991835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.001658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1218.011781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.020977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1218.030828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.040001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1218.049771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.060053] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1218.067079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1218.077168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1218.085313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1218.221715] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1218.236588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.256499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.257197] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1218.284754] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1218.295031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.302945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.309668] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1218.381354] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1218.390716] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1218.400187] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1218.411670] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1218.424268] EXT4-fs (loop1): get root inode failed [ 1218.429280] EXT4-fs (loop1): mount failed [ 1218.434781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1218.441511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1218.454143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1218.460875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1218.471004] device bridge_slave_1 left promiscuous mode [ 1218.477030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.484400] device bridge_slave_0 left promiscuous mode [ 1218.490232] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.500391] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1218.518322] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1218.518455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1218.528584] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1218.546216] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1218.558266] EXT4-fs (loop1): get root inode failed [ 1218.559337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1218.564052] EXT4-fs (loop1): mount failed [ 1218.576029] device bridge_slave_1 left promiscuous mode [ 1218.581481] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.589789] device bridge_slave_0 left promiscuous mode [ 1218.595704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.629342] device veth1_macvtap left promiscuous mode [ 1218.635449] device veth0_macvtap left promiscuous mode [ 1218.640792] device veth1_vlan left promiscuous mode [ 1218.650648] device veth0_vlan left promiscuous mode [ 1218.651445] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1218.665486] device veth1_vlan left promiscuous mode [ 1218.666495] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 21:52:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:52:34 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000007402000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) 21:52:34 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1cf, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000140)) 21:52:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x0) 21:52:34 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x34404af7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x2000000, 0x81, 0x1, {0x1, @raw_data="acb061d9a7fd8411b5c306eea84f937884e43d65b554ddd7f19abbe1613837fef46eee067f37d8be368cc9166be1cab7184c65dbca953299076a9833cf34334379487e5d004e4c70ca63d5be272acb9fab06f7e62518cfe324686203b30c6204c4b1dcd84322c65332700c29aeafcc524339568b4bd3a007f10bd2d252786ceb795805e94cb58510c928bf57cfd9d0077d489108cf480a4a80296ba047ad6e33ddaa6f789635fba93e89b87f55bc528daa27493cb86229f2c6de7d6bfad6ad15bdd0342720092988"}}) [ 1218.670992] device veth0_vlan left promiscuous mode [ 1218.682583] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1218.694536] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1218.708588] EXT4-fs (loop1): get root inode failed [ 1218.713715] EXT4-fs (loop1): mount failed 21:52:34 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000b34d530c7aaf2b99c7a587cb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1218.766693] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1218.798196] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1218.821294] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1218.848166] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated 21:52:34 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000007a02000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1218.938848] EXT4-fs (loop1): get root inode failed [ 1218.962145] EXT4-fs (loop1): mount failed 21:52:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}], 0x2000811, &(0x7f0000000040)=ANY=[]) 21:52:34 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000000202000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1219.154296] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 21:52:34 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000000302000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1219.198242] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1219.250184] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1219.266645] device hsr_slave_1 left promiscuous mode 21:52:34 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000000402000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1219.298546] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 1219.310021] device hsr_slave_0 left promiscuous mode [ 1219.333534] team0 (unregistering): Port device team_slave_1 removed [ 1219.369576] team0 (unregistering): Port device team_slave_0 removed [ 1219.375707] EXT4-fs (loop1): get root inode failed [ 1219.392578] EXT4-fs (loop1): mount failed 21:52:35 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000000502000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1219.418723] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1219.467886] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1219.480904] bond0 (unregistering): Releasing backup interface bond_slave_0 21:52:35 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000000602000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1219.542192] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1219.596700] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1219.636765] bond0 (unregistering): Released all slaves 21:52:35 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300000c0000000000120000000000030006000000000702000000e00000010000000000000a0002000100000000000000000000000000030005000000000002000000e000000100000000000000000100140000000000010016"], 0x60}}, 0x0) [ 1219.636801] Bluetooth: hci1: command 0x0419 tx timeout [ 1219.649377] EXT4-fs: failed to create workqueue [ 1219.669998] EXT4-fs (loop1): mount failed [ 1219.820013] device hsr_slave_1 left promiscuous mode [ 1219.850411] device hsr_slave_0 left promiscuous mode [ 1219.896123] team0 (unregistering): Port device team_slave_1 removed [ 1219.921714] team0 (unregistering): Port device team_slave_0 removed [ 1219.945932] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1219.972019] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1220.063248] bond0 (unregistering): Released all slaves [ 1222.487460] IPVS: ftp: loaded support on port[0] = 21 [ 1222.650930] chnl_net:caif_netlink_parms(): no params data found [ 1222.746174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.758963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.767902] device bridge_slave_0 entered promiscuous mode [ 1222.779638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.786613] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.798198] device bridge_slave_1 entered promiscuous mode [ 1222.827179] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1222.837036] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1222.865371] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1222.878379] team0: Port device team_slave_0 added [ 1222.885003] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1222.897032] team0: Port device team_slave_1 added [ 1222.924732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1222.931013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1222.964119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1222.978488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1222.988170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1223.022825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1223.038217] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1223.047320] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1223.083923] device hsr_slave_0 entered promiscuous mode [ 1223.090028] device hsr_slave_1 entered promiscuous mode [ 1223.100216] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1223.109043] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1223.196357] IPVS: ftp: loaded support on port[0] = 21 [ 1223.338567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.344999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1223.351715] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.358256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1223.510646] chnl_net:caif_netlink_parms(): no params data found [ 1223.524007] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1223.530102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1223.562797] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1223.600733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1223.608724] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.616697] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.625946] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1223.638508] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1223.644921] 8021q: adding VLAN 0 to HW filter on device team0 [ 1223.657064] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1223.666731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1223.678445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1223.689126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.696162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1223.713610] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1223.721463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1223.742987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1223.750760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.757179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1223.773454] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1223.794903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1223.826535] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1223.835241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1223.843561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.849912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.857542] device bridge_slave_0 entered promiscuous mode [ 1223.865630] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.872888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.880381] device bridge_slave_1 entered promiscuous mode [ 1223.889521] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1223.897418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1223.905911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1223.923393] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1223.931645] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1223.939028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1223.949176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1223.968017] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1223.976486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1223.985731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1223.996010] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1224.007266] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1224.015776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1224.029705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1224.040730] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1224.053527] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1224.059574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1224.093815] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1224.101322] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1224.110295] team0: Port device team_slave_0 added [ 1224.118286] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1224.126499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1224.134644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1224.142391] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1224.149969] team0: Port device team_slave_1 added [ 1224.161014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1224.188602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1224.196976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1224.223233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1224.239195] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1224.249975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1224.257086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1224.283992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1224.298269] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1224.307406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1224.316190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1224.325105] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1224.340503] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1224.383645] device hsr_slave_0 entered promiscuous mode [ 1224.389920] device hsr_slave_1 entered promiscuous mode [ 1224.397580] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1224.405308] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1224.440925] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1224.452549] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1224.459567] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1224.489093] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1224.498277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1224.507556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1224.522391] device veth0_vlan entered promiscuous mode [ 1224.532416] Bluetooth: hci4: command 0x0409 tx timeout [ 1224.556754] device veth1_vlan entered promiscuous mode [ 1224.564001] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1224.570466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1224.579206] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1224.587112] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1224.609240] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1224.644471] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1224.656396] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1224.672379] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1224.684801] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1224.691946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1224.700008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1224.720759] device veth0_macvtap entered promiscuous mode [ 1224.728562] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1224.749431] device veth1_macvtap entered promiscuous mode [ 1224.756700] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1224.779706] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1224.796189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1224.806229] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1224.818019] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1224.828738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1224.840296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.851556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1224.861358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.871903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1224.882310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.892238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1224.902729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.914099] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1224.921085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1224.933853] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1224.942061] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1224.949423] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1224.959559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1224.969392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1224.978757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1224.986694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1224.996628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1225.007742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.017753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1225.028557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.038425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1225.048919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.060108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1225.071056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.083737] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1225.093080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1225.101373] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1225.109333] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.117919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1225.126976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1225.145393] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1225.153557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1225.163460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1225.181869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.188235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.204393] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1225.212020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1225.219497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1225.233412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1225.241119] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.247531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1225.265058] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1225.272576] Bluetooth: hci5: command 0x0409 tx timeout [ 1225.279093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1225.297281] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1225.311064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1225.335020] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1225.354285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1225.372352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1225.392158] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1225.399488] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1225.413160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1225.421332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1225.438477] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1225.449136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1225.466881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1225.482257] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1225.492581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1225.500269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1225.527381] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1225.538141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1225.573022] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1225.581106] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1225.589762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1225.597843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1225.610771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1225.638125] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1225.657173] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1225.670352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1225.685845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1225.776509] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1225.797242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1225.809731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1225.836978] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1225.849916] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1225.857379] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1225.891138] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1225.916525] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1225.929398] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1225.937102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1225.945330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1225.954021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1225.955765] device veth0_vlan entered promiscuous mode [ 1225.961150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1225.968174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1225.985406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1225.998854] device veth1_vlan entered promiscuous mode [ 1226.006263] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1226.013235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1226.020485] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1226.033348] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1226.046754] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1226.093235] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1226.111141] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1226.133720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1226.175569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1226.192269] device veth0_macvtap entered promiscuous mode [ 1226.205649] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1226.230012] device veth1_macvtap entered promiscuous mode [ 1226.237640] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1226.287161] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1226.310081] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1226.320486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1226.331046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.341187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1226.351774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.360895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1226.371883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.381027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1226.393276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.403300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1226.413809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.425009] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1226.433748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1226.440659] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1226.450049] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1226.463150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1226.475617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1226.487325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1226.500133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.510103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1226.521139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.531005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1226.542025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.551646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1226.586092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.607479] Bluetooth: hci4: command 0x041b tx timeout [ 1226.613493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1226.648859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.672934] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1226.679870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1226.744198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1226.762235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1227.006313] oom_reaper: reaped process 15906 (syz-executor.5), now anon-rss:0kB, file-rss:33812kB, shmem-rss:0kB [ 1227.032173] modprobe invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1227.081066] modprobe cpuset=/ mems_allowed=0-1 [ 1227.086154] CPU: 1 PID: 16423 Comm: modprobe Not tainted 4.19.163-syzkaller #0 [ 1227.093579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1227.102928] Call Trace: [ 1227.105518] dump_stack+0x1fc/0x2fe [ 1227.109175] dump_header+0x15d/0xc3f [ 1227.112903] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1227.118184] ? ___ratelimit+0x319/0x584 [ 1227.122155] oom_kill_process.cold+0x10/0x692 [ 1227.126649] ? check_preemption_disabled+0x41/0x280 [ 1227.131673] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1227.136942] out_of_memory+0x1072/0x1390 [ 1227.141018] ? oom_killer_disable+0x270/0x270 [ 1227.145974] ? mutex_trylock+0x15f/0x1a0 [ 1227.150715] __alloc_pages_nodemask+0x23a2/0x2890 [ 1227.155584] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1227.160428] ? flush_tlb_mm_range+0x185/0x320 [ 1227.165028] ? do_raw_spin_unlock+0x171/0x230 [ 1227.169580] alloc_pages_current+0x193/0x2a0 [ 1227.177103] __pmd_alloc+0x37/0x440 [ 1227.180716] move_page_tables+0x14d9/0x1b50 [ 1227.185053] shift_arg_pages+0x1a7/0x450 [ 1227.189107] ? mprotect_fixup+0x54c/0x9b0 [ 1227.193353] ? put_arg_page+0x210/0x210 [ 1227.197318] ? get_random_u32+0xf3/0x1e0 [ 1227.201374] ? change_protection+0xc0/0xc0 [ 1227.205609] ? lock_downgrade+0x720/0x720 [ 1227.209792] ? lock_acquire+0x170/0x3c0 [ 1227.213768] ? get_random_u32+0x46/0x1e0 [ 1227.217923] ? lock_acquire+0x170/0x3c0 [ 1227.221899] ? setup_arg_pages+0x297/0x790 [ 1227.226143] setup_arg_pages+0x62a/0x790 [ 1227.233517] ? shift_arg_pages+0x450/0x450 [ 1227.237741] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1227.242311] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1227.247404] load_elf_binary+0xba0/0x5050 [ 1227.251549] ? do_raw_read_unlock+0x3b/0x70 [ 1227.255870] ? _raw_read_unlock+0x29/0x40 [ 1227.260027] ? elf_core_dump+0x4c70/0x4c70 [ 1227.264249] ? lock_acquire+0x170/0x3c0 [ 1227.268211] ? search_binary_handler.part.0+0x108/0x4e0 [ 1227.273562] ? ima_file_mmap+0x130/0x130 [ 1227.277615] search_binary_handler.part.0+0xf9/0x4e0 [ 1227.282721] __do_execve_file+0x1357/0x2360 [ 1227.287041] ? open_exec+0x70/0x70 [ 1227.290579] ? do_raw_spin_unlock+0x171/0x230 [ 1227.295066] ? check_preemption_disabled+0x41/0x280 [ 1227.300079] do_execve+0x35/0x50 [ 1227.303438] call_usermodehelper_exec_async+0x50e/0x6a0 [ 1227.308793] ? umh_complete+0x90/0x90 [ 1227.312591] ret_from_fork+0x24/0x30 [ 1227.327297] Mem-Info: [ 1227.329768] active_anon:121784 inactive_anon:29158 isolated_anon:0 [ 1227.329768] active_file:17 inactive_file:17 isolated_file:0 [ 1227.329768] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1227.329768] slab_reclaimable:13013 slab_unreclaimable:116050 [ 1227.329768] mapped:52642 shmem:29546 pagetables:996 bounce:0 [ 1227.329768] free:13835 free_pcp:150 free_cma:0 [ 1227.331506] Bluetooth: hci5: command 0x041b tx timeout [ 1227.368875] syz-executor.5: vmalloc: allocation failure, allocated 1833771008 of 3621613568 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1227.382079] Node 0 active_anon:485020kB inactive_anon:48864kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162580kB dirty:0kB writeback:0kB shmem:50008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1227.390327] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1227.422467] CPU: 0 PID: 15906 Comm: syz-executor.5 Not tainted 4.19.163-syzkaller #0 [ 1227.429419] Node 1 active_anon:2116kB inactive_anon:67768kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47988kB dirty:0kB writeback:0kB shmem:68176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1227.430377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1227.457562] Node 0 DMA free:10880kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1227.466869] Call Trace: [ 1227.466894] dump_stack+0x1fc/0x2fe [ 1227.466911] warn_alloc.cold+0x7b/0x18f [ 1227.466927] ? zone_watermark_ok_safe+0x260/0x260 [ 1227.466944] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1227.493383] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1227.495930] ? retint_kernel+0x2d/0x2d [ 1227.499525] Node 0 DMA32 free:17652kB min:35996kB low:44992kB high:53988kB active_anon:485020kB inactive_anon:48864kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7488kB pagetables:3592kB bounce:0kB free_pcp:588kB local_pcp:232kB free_cma:0kB [ 1227.503508] __vmalloc_area_node+0x4fd/0x780 [ 1227.503531] ? __vmalloc_node_range+0x180/0x180 [ 1227.508356] lowmem_reserve[]: 0 0 1 1 1 [ 1227.513117] ? _raw_spin_unlock+0x29/0x40 [ 1227.513131] ? __get_vm_area_node+0x2e2/0x3a0 [ 1227.513147] __vmalloc_node_range+0xed/0x180 [ 1227.513167] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1227.518250] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1227.522261] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1227.522275] vmalloc_user+0x70/0xe0 [ 1227.522288] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1227.522308] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1227.551317] lowmem_reserve[]: 0 0 0 0 0 [ 1227.555699] __vb2_queue_alloc+0x472/0xe60 [ 1227.560681] Node 1 Normal free:26552kB min:53876kB low:67344kB high:80812kB active_anon:2116kB inactive_anon:67768kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:544kB pagetables:392kB bounce:0kB free_pcp:252kB local_pcp:248kB free_cma:0kB [ 1227.564657] vb2_core_create_bufs+0x273/0x7e0 [ 1227.564679] ? __vb2_queue_free+0x870/0x870 [ 1227.568998] lowmem_reserve[]: 0 0 0 0 0 [ 1227.573485] ? __mutex_add_waiter+0x160/0x160 [ 1227.573507] vb2_create_bufs+0x332/0x620 [ 1227.578065] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10880kB [ 1227.582465] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1227.582477] ? __video_do_ioctl+0x632/0xcd0 [ 1227.582495] ? __mutex_add_waiter+0x160/0x160 [ 1227.608533] Node 0 DMA32: 1065*4kB (MEH) 850*8kB (UMEH) 188*16kB (UME) 76*32kB (UM) 0*64kB 1*128kB (H) 0*256kB 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 17652kB [ 1227.613852] ? mark_held_locks+0xf0/0xf0 [ 1227.613866] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1227.613883] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1227.617483] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1227.621817] vb2_ioctl_create_bufs+0x20d/0x360 [ 1227.621837] ? memset+0x20/0x40 [ 1227.625957] Node 1 Normal: 200*4kB (M) 161*8kB (ME) 129*16kB (ME) 59*32kB (UM) 55*64kB (UME) 39*128kB (UME) 21*256kB (UM) 5*512kB (M) 0*1024kB 2*2048kB (UM) 0*4096kB = 26584kB [ 1227.629928] v4l_create_bufs+0xb2/0x160 [ 1227.634153] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1227.662879] __video_do_ioctl+0x49a/0xcd0 [ 1227.662899] ? v4l_querycap+0x340/0x340 [ 1227.662914] ? __might_fault+0x192/0x1d0 [ 1227.662932] video_usercopy+0x13c/0x1000 [ 1227.667465] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1227.671783] ? v4l_querycap+0x340/0x340 [ 1227.671798] ? v4l_enumstd+0x60/0x60 [ 1227.671810] ? mark_held_locks+0xf0/0xf0 [ 1227.671828] ? do_futex+0x163/0x1c70 [ 1227.675805] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1227.680395] ? mark_held_locks+0xf0/0xf0 [ 1227.684484] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1227.696666] ? mark_held_locks+0xf0/0xf0 [ 1227.696679] ? debug_check_no_obj_freed+0x201/0x482 [ 1227.696701] ? video_usercopy+0x1000/0x1000 [ 1227.701825] 29580 total pagecache pages [ 1227.706132] v4l2_ioctl+0x147/0x1a0 [ 1227.710613] 0 pages in swap cache [ 1227.725007] ? video_devdata+0xa0/0xa0 [ 1227.725024] do_vfs_ioctl+0xcdb/0x12e0 [ 1227.725037] ? lock_downgrade+0x720/0x720 [ 1227.725053] ? check_preemption_disabled+0x41/0x280 [ 1227.729106] Swap cache stats: add 0, delete 0, find 0/0 [ 1227.733670] ? ioctl_preallocate+0x200/0x200 [ 1227.733687] ? __fget+0x356/0x510 [ 1227.733703] ? do_dup2+0x450/0x450 [ 1227.738430] Free swap = 0kB [ 1227.749428] ksys_ioctl+0x9b/0xc0 [ 1227.749446] __x64_sys_ioctl+0x6f/0xb0 [ 1227.754017] Total swap = 0kB [ 1227.757271] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1227.773061] 2097051 pages RAM [ 1227.777022] do_syscall_64+0xf9/0x620 [ 1227.786054] 0 pages HighMem/MovableOnly [ 1227.790178] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1227.794163] 369639 pages reserved [ 1227.798217] RIP: 0033:0x45e159 [ 1227.802273] 0 pages cma reserved [ 1227.810829] Code: Bad RIP value. [ 1227.814831] Out of memory (oom_kill_allocating_task): Kill process 16423 (modprobe) score 0 or sacrifice child [ 1227.818499] RSP: 002b:00007f97906a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1227.822588] Killed process 16423 (modprobe) total-vm:4kB, anon-rss:4kB, file-rss:0kB, shmem-rss:0kB [ 1227.826241] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e159 [ 1227.838350] modprobe: page allocation failure: order:0, mode:0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 1227.839103] RDX: 0000000020000340 RSI: 00000000c100565c RDI: 0000000000000003 [ 1227.847686] modprobe cpuset=/ mems_allowed=0-1 [ 1227.851721] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1227.851730] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1227.851738] R13: 00007ffc100b0f6f R14: 00007f97906a39c0 R15: 000000000119bf8c [ 1227.856573] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1227.857018] CPU: 1 PID: 16423 Comm: modprobe Not tainted 4.19.163-syzkaller #0 [ 1227.861056] in:imklog cpuset=/ mems_allowed=0-1 [ 1227.865010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1227.865014] Call Trace: [ 1227.865031] dump_stack+0x1fc/0x2fe [ 1227.865046] warn_alloc.cold+0x7b/0x18f [ 1227.865062] ? zone_watermark_ok_safe+0x260/0x260 [ 1227.865073] ? mark_oom_victim+0x68/0x420 [ 1227.865095] ? wait_for_completion_io+0x10/0x10 [ 1227.865118] __alloc_pages_nodemask+0x232f/0x2890 [ 1227.865148] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1227.865162] ? flush_tlb_mm_range+0x185/0x320 [ 1227.865192] ? do_raw_spin_unlock+0x171/0x230 [ 1227.865210] alloc_pages_current+0x193/0x2a0 [ 1227.865225] __pmd_alloc+0x37/0x440 [ 1227.865242] move_page_tables+0x14d9/0x1b50 [ 1227.865270] shift_arg_pages+0x1a7/0x450 [ 1227.865285] ? mprotect_fixup+0x54c/0x9b0 [ 1227.865297] ? put_arg_page+0x210/0x210 [ 1227.865317] ? get_random_u32+0xf3/0x1e0 [ 1227.865333] ? change_protection+0xc0/0xc0 [ 1227.865346] ? lock_downgrade+0x720/0x720 [ 1227.865356] ? lock_acquire+0x170/0x3c0 [ 1227.865367] ? get_random_u32+0x46/0x1e0 [ 1227.865383] ? lock_acquire+0x170/0x3c0 [ 1227.865395] ? setup_arg_pages+0x297/0x790 [ 1227.865415] setup_arg_pages+0x62a/0x790 [ 1227.865433] ? shift_arg_pages+0x450/0x450 [ 1227.865446] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1227.865458] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1227.865476] load_elf_binary+0xba0/0x5050 [ 1227.865501] ? do_raw_read_unlock+0x3b/0x70 [ 1227.865512] ? _raw_read_unlock+0x29/0x40 [ 1227.865530] ? elf_core_dump+0x4c70/0x4c70 [ 1227.865542] ? lock_acquire+0x170/0x3c0 [ 1227.865556] ? search_binary_handler.part.0+0x108/0x4e0 [ 1227.865572] ? ima_file_mmap+0x130/0x130 [ 1227.865590] search_binary_handler.part.0+0xf9/0x4e0 [ 1227.865608] __do_execve_file+0x1357/0x2360 [ 1227.865626] ? open_exec+0x70/0x70 [ 1227.865640] ? do_raw_spin_unlock+0x171/0x230 [ 1227.865651] ? check_preemption_disabled+0x41/0x280 [ 1227.865675] do_execve+0x35/0x50 [ 1227.865693] call_usermodehelper_exec_async+0x50e/0x6a0 [ 1227.865704] ? umh_complete+0x90/0x90 [ 1227.865718] ret_from_fork+0x24/0x30 [ 1227.908122] Mem-Info: [ 1227.918204] CPU: 0 PID: 15606 Comm: in:imklog Not tainted 4.19.163-syzkaller #0 [ 1227.924773] active_anon:121784 inactive_anon:29158 isolated_anon:0 [ 1227.924773] active_file:17 inactive_file:17 isolated_file:0 [ 1227.924773] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1227.924773] slab_reclaimable:13013 slab_unreclaimable:116050 [ 1227.924773] mapped:52642 shmem:29546 pagetables:996 bounce:0 [ 1227.924773] free:13772 free_pcp:207 free_cma:0 [ 1227.928966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1227.932123] Node 0 active_anon:485020kB inactive_anon:48864kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162580kB dirty:0kB writeback:0kB shmem:50008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1227.935854] Call Trace: [ 1227.939821] Node 1 active_anon:2116kB inactive_anon:67768kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47988kB dirty:0kB writeback:0kB shmem:68176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1227.944989] dump_stack+0x1fc/0x2fe [ 1227.945011] dump_header+0x15d/0xc3f [ 1227.948445] Node 0 DMA free:10880kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1227.951627] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1227.951638] ? ___ratelimit+0x319/0x584 [ 1227.951655] oom_kill_process.cold+0x10/0x692 [ 1227.954990] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1227.958371] ? check_preemption_disabled+0x41/0x280 [ 1227.968495] Node 0 DMA32 free:17652kB min:35996kB low:44992kB high:53988kB active_anon:485020kB inactive_anon:48864kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7488kB pagetables:3592kB bounce:0kB free_pcp:576kB local_pcp:220kB free_cma:0kB [ 1227.976191] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1227.976208] out_of_memory+0x1072/0x1390 [ 1227.985376] lowmem_reserve[]: 0 0 1 1 1 [ 1227.992649] ? oom_killer_disable+0x270/0x270 [ 1227.992668] ? mutex_trylock+0x15f/0x1a0 [ 1227.992686] __alloc_pages_nodemask+0x23a2/0x2890 [ 1228.003439] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1228.010684] ? find_get_entry+0x4cd/0x8a0 [ 1228.015270] lowmem_reserve[]: 0 0 0 0 0 [ 1228.022606] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1228.022642] alloc_pages_current+0x193/0x2a0 [ 1228.029960] Node 1 Normal free:26552kB min:53876kB low:67344kB high:80812kB active_anon:2116kB inactive_anon:67768kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:544kB pagetables:392kB bounce:0kB free_pcp:252kB local_pcp:248kB free_cma:0kB [ 1228.037224] filemap_fault+0x146e/0x2180 [ 1228.037250] ext4_filemap_fault+0x84/0xb0 [ 1228.048600] lowmem_reserve[]: 0 0 0 0 0 [ 1228.056370] __do_fault+0x10b/0x4b0 [ 1228.056390] __handle_mm_fault+0x273b/0x41c0 [ 1228.056405] ? vm_insert_page+0x9c0/0x9c0 [ 1228.061073] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10880kB [ 1228.070448] ? lock_downgrade+0x720/0x720 [ 1228.070468] ? check_preemption_disabled+0x41/0x280 [ 1228.070483] handle_mm_fault+0x436/0xb10 [ 1228.070503] __do_page_fault+0x68e/0xd60 [ 1228.073106] Node 0 DMA32: 1065*4kB (MEH) 850*8kB (UMEH) 188*16kB (UME) 76*32kB (UM) 0*64kB 1*128kB (H) 0*256kB 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 17652kB [ 1228.076737] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1228.080680] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1228.085533] ? spurious_fault+0x840/0x840 [ 1228.085548] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1228.085564] ? page_fault+0x8/0x30 [ 1228.089697] Node 1 Normal: 200*4kB (M) 161*8kB (ME) 129*16kB (ME) 61*32kB (UM) 55*64kB (UME) 39*128kB (UME) 21*256kB (UM) 5*512kB (M) 0*1024kB 2*2048kB (UM) 0*4096kB = 26648kB [ 1228.094370] page_fault+0x1e/0x30 [ 1228.094382] RIP: 0033:0x7f0e0840022d [ 1228.094406] Code: Bad RIP value. [ 1228.099219] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1228.104036] RSP: 002b:00007f0e05d9c580 EFLAGS: 00010293 [ 1228.104046] RAX: 0000000000000102 RBX: 0000000000000000 RCX: 00007f0e0840022d [ 1228.104053] RDX: 0000000000001fa0 RSI: 00007f0e05d9cda0 RDI: 0000000000000004 [ 1228.104060] RBP: 000055a7b7aee9d0 R08: 0000000000000000 R09: 0000000000000000 [ 1228.104066] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f0e05d9cda0 [ 1228.104071] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f0e05d9ce49 [ 1228.108309] Mem-Info: [ 1228.129719] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1228.129731] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1228.129741] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1228.129746] 29580 total pagecache pages [ 1228.129758] 0 pages in swap cache [ 1228.129766] Swap cache stats: add 0, delete 0, find 0/0 [ 1228.129771] Free swap = 0kB [ 1228.129775] Total swap = 0kB [ 1228.129783] 2097051 pages RAM [ 1228.129787] 0 pages HighMem/MovableOnly [ 1228.129792] 369639 pages reserved [ 1228.129796] 0 pages cma reserved [ 1228.691159] Bluetooth: hci4: command 0x040f tx timeout [ 1228.805528] active_anon:121784 inactive_anon:29158 isolated_anon:0 [ 1228.805528] active_file:17 inactive_file:17 isolated_file:0 [ 1228.805528] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1228.805528] slab_reclaimable:13013 slab_unreclaimable:115818 [ 1228.805528] mapped:52642 shmem:29546 pagetables:996 bounce:0 [ 1228.805528] free:14032 free_pcp:218 free_cma:0 [ 1228.841478] Node 0 active_anon:485020kB inactive_anon:48864kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162580kB dirty:0kB writeback:0kB shmem:50008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1228.870272] Node 1 active_anon:2116kB inactive_anon:67768kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47988kB dirty:0kB writeback:0kB shmem:68176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1228.897569] Node 0 DMA free:10880kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1228.925045] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1228.930094] Node 0 DMA32 free:18492kB min:35996kB low:44992kB high:53988kB active_anon:485020kB inactive_anon:48864kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7488kB pagetables:3592kB bounce:0kB free_pcp:596kB local_pcp:232kB free_cma:0kB [ 1228.959312] lowmem_reserve[]: 0 0 1 1 1 [ 1228.963367] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1228.989381] lowmem_reserve[]: 0 0 0 0 0 [ 1228.993543] Node 1 Normal free:26752kB min:53876kB low:67344kB high:80812kB active_anon:2116kB inactive_anon:67768kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:392kB bounce:0kB free_pcp:272kB local_pcp:268kB free_cma:0kB [ 1229.022539] lowmem_reserve[]: 0 0 0 0 0 [ 1229.026536] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10880kB [ 1229.044563] Node 0 DMA32: 1065*4kB (MEH) 937*8kB (UMEH) 194*16kB (UME) 77*32kB (UM) 2*64kB (U) 1*128kB (H) 0*256kB 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 18604kB [ 1229.063630] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1229.075403] Node 1 Normal: 200*4kB (M) 164*8kB (UME) 135*16kB (UME) 62*32kB (UM) 55*64kB (UME) 39*128kB (UME) 21*256kB (UM) 5*512kB (M) 0*1024kB 2*2048kB (UM) 0*4096kB = 26800kB [ 1229.095373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1229.108051] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1229.120173] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1229.136400] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1229.145090] 29580 total pagecache pages [ 1229.149076] 0 pages in swap cache [ 1229.160520] Swap cache stats: add 0, delete 0, find 0/0 [ 1229.165969] Free swap = 0kB [ 1229.168986] Total swap = 0kB [ 1229.179290] 2097051 pages RAM [ 1229.182451] 0 pages HighMem/MovableOnly [ 1229.186425] 369639 pages reserved [ 1229.189890] 0 pages cma reserved [ 1229.200254] Out of memory (oom_kill_allocating_task): Kill process 15606 (in:imklog) score 0 or sacrifice child [ 1229.210795] Killed process 15602 (rsyslogd) total-vm:254332kB, anon-rss:736kB, file-rss:0kB, shmem-rss:0kB [ 1229.229600] oom_reaper: reaped process 15602 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1229.249931] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1229.300720] systemd-journal cpuset=/ mems_allowed=0-1 [ 1229.309807] CPU: 1 PID: 15601 Comm: systemd-journal Not tainted 4.19.163-syzkaller #0 [ 1229.317787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1229.327145] Call Trace: [ 1229.329737] dump_stack+0x1fc/0x2fe [ 1229.333370] dump_header+0x15d/0xc3f [ 1229.337086] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1229.342211] ? ___ratelimit+0x319/0x584 [ 1229.346285] oom_kill_process.cold+0x10/0x692 [ 1229.350817] ? check_preemption_disabled+0x41/0x280 [ 1229.355840] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1229.361124] out_of_memory+0x1072/0x1390 [ 1229.365194] ? oom_killer_disable+0x270/0x270 [ 1229.369698] ? mutex_trylock+0x15f/0x1a0 [ 1229.373765] __alloc_pages_nodemask+0x23a2/0x2890 [ 1229.378614] ? find_get_entry+0x4cd/0x8a0 [ 1229.382775] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1229.387761] alloc_pages_current+0x193/0x2a0 [ 1229.392176] filemap_fault+0x146e/0x2180 [ 1229.396251] ext4_filemap_fault+0x84/0xb0 [ 1229.400406] __do_fault+0x10b/0x4b0 [ 1229.404037] __handle_mm_fault+0x273b/0x41c0 [ 1229.408450] ? vm_insert_page+0x9c0/0x9c0 [ 1229.412612] ? check_preemption_disabled+0x41/0x280 [ 1229.417634] handle_mm_fault+0x436/0xb10 [ 1229.421707] __do_page_fault+0x68e/0xd60 [ 1229.425778] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1229.430797] ? spurious_fault+0x840/0x840 [ 1229.434946] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1229.439806] ? page_fault+0x8/0x30 [ 1229.443353] page_fault+0x1e/0x30 [ 1229.446809] RIP: 0033:0x7fe086b282e3 [ 1229.450541] Code: Bad RIP value. [ 1229.453907] RSP: 002b:00007ffd26b945b8 EFLAGS: 00010246 [ 1229.459279] RAX: 0000000000000001 RBX: 000055c5c87171e0 RCX: 00007fe086b282e3 [ 1229.466581] RDX: 0000000000000013 RSI: 00007ffd26b945c0 RDI: 000000000000000c [ 1229.473858] RBP: 00007ffd26b947b0 R08: 00007ffd26bd9000 R09: 0000014970b97527 [ 1229.481136] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd26b945c0 [ 1229.488405] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005b6374fd501f9 [ 1229.504096] Bluetooth: hci5: command 0x040f tx timeout [ 1229.516347] Mem-Info: [ 1229.519151] active_anon:121583 inactive_anon:29158 isolated_anon:0 [ 1229.519151] active_file:17 inactive_file:17 isolated_file:0 [ 1229.519151] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1229.519151] slab_reclaimable:13012 slab_unreclaimable:115596 [ 1229.519151] mapped:52642 shmem:29546 pagetables:995 bounce:0 [ 1229.519151] free:14745 free_pcp:2 free_cma:0 [ 1229.562396] Node 0 active_anon:484620kB inactive_anon:48864kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162580kB dirty:0kB writeback:0kB shmem:50008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1229.600377] Node 1 active_anon:1712kB inactive_anon:67768kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47988kB dirty:0kB writeback:0kB shmem:68176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1229.637082] Node 0 DMA free:10880kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1229.672425] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1229.677497] Node 0 DMA32 free:20496kB min:35996kB low:44992kB high:53988kB active_anon:484620kB inactive_anon:48864kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2763492kB mlocked:0kB kernel_stack:7488kB pagetables:3592kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1229.716011] lowmem_reserve[]: 0 0 1 1 1 [ 1229.720042] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1229.754615] lowmem_reserve[]: 0 0 0 0 0 [ 1229.758634] Node 1 Normal free:27600kB min:53876kB low:67344kB high:80812kB active_anon:1712kB inactive_anon:67768kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:388kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1229.797435] lowmem_reserve[]: 0 0 0 0 0 [ 1229.804806] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (ME) = 10880kB [ 1229.825511] Node 0 DMA32: 1067*4kB (UMEH) 1114*8kB (UMEH) 204*16kB (UME) 89*32kB (UM) 2*64kB (U) 1*128kB (H) 0*256kB 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 20572kB [ 1229.842783] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1229.860573] Node 1 Normal: 206*4kB (UM) 176*8kB (UME) 134*16kB (UME) 64*32kB (UM) 55*64kB (UME) 41*128kB (UME) 21*256kB (M) 6*512kB (UM) 0*1024kB 2*2048kB (UM) 0*4096kB = 27736kB [ 1229.886932] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1229.898371] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1229.915834] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1229.926436] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1229.943508] 29580 total pagecache pages [ 1229.947507] 0 pages in swap cache [ 1229.950955] Swap cache stats: add 0, delete 0, find 0/0 [ 1229.970152] Free swap = 0kB [ 1229.973808] Total swap = 0kB [ 1229.976834] 2097051 pages RAM [ 1229.979937] 0 pages HighMem/MovableOnly [ 1229.992493] 369639 pages reserved [ 1229.995978] 0 pages cma reserved [ 1229.999359] Out of memory (oom_kill_allocating_task): Kill process 15601 (systemd-journal) score 0 or sacrifice child [ 1230.017259] Killed process 15601 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:4kB, shmem-rss:1544kB [ 1230.031584] oom_reaper: reaped process 15601 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1544kB [ 1230.060493] kworker/u4:9 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1230.086518] kworker/u4:9 cpuset=/ mems_allowed=0-1 [ 1230.098338] CPU: 0 PID: 5609 Comm: kworker/u4:9 Not tainted 4.19.163-syzkaller #0 [ 1230.105980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1230.115348] Workqueue: events_unbound call_usermodehelper_exec_work [ 1230.121747] Call Trace: [ 1230.124326] dump_stack+0x1fc/0x2fe [ 1230.127956] dump_header+0x15d/0xc3f [ 1230.131756] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1230.136842] ? ___ratelimit+0x319/0x584 [ 1230.140831] oom_kill_process.cold+0x10/0x692 [ 1230.145325] ? oom_badness.part.0+0x135/0x650 [ 1230.149803] ? lock_downgrade+0x720/0x720 [ 1230.153951] ? check_preemption_disabled+0x41/0x280 [ 1230.158968] out_of_memory+0x34d/0x1390 [ 1230.162935] ? oom_killer_disable+0x270/0x270 [ 1230.167431] ? mutex_trylock+0x15f/0x1a0 [ 1230.171506] __alloc_pages_nodemask+0x23a2/0x2890 [ 1230.176347] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1230.181175] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1230.186028] ? mark_held_locks+0xa6/0xf0 [ 1230.190089] ? ____cache_alloc_node+0x156/0x1d0 [ 1230.194754] ? cache_grow_begin+0x64/0x8a0 [ 1230.198973] cache_grow_begin+0xa4/0x8a0 [ 1230.203022] fallback_alloc+0x213/0x2e0 [ 1230.207009] kmem_cache_alloc_node+0xe3/0x3b0 [ 1230.211589] copy_process.part.0+0x1ceb/0x8200 [ 1230.216157] ? __lock_acquire+0x6de/0x3ff0 [ 1230.220390] ? mark_held_locks+0xf0/0xf0 [ 1230.224450] ? __lock_acquire+0x6de/0x3ff0 [ 1230.228671] ? umh_complete+0x90/0x90 [ 1230.232470] ? __cleanup_sighand+0x60/0x60 [ 1230.236706] ? mark_held_locks+0xf0/0xf0 [ 1230.240766] ? __lock_acquire+0x6de/0x3ff0 [ 1230.245005] _do_fork+0x22f/0xf30 [ 1230.248445] ? umh_complete+0x90/0x90 [ 1230.252245] ? fork_idle+0x220/0x220 [ 1230.255946] ? lock_downgrade+0x720/0x720 [ 1230.260077] ? lock_acquire+0x170/0x3c0 [ 1230.264049] ? try_to_wake_up+0x7b/0x1050 [ 1230.268204] ? trace_hardirqs_off+0x64/0x200 [ 1230.272619] ? umh_complete+0x90/0x90 [ 1230.276410] kernel_thread+0x2f/0x40 [ 1230.280109] call_usermodehelper_exec_work+0x16d/0x260 [ 1230.285384] ? call_usermodehelper_exec_async+0x6a0/0x6a0 [ 1230.290918] process_one_work+0x864/0x1570 [ 1230.295157] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 1230.299816] worker_thread+0x64c/0x1130 [ 1230.303794] ? __kthread_parkme+0x133/0x1e0 [ 1230.308099] ? process_one_work+0x1570/0x1570 [ 1230.312578] kthread+0x33f/0x460 [ 1230.315929] ? kthread_park+0x180/0x180 [ 1230.319889] ret_from_fork+0x24/0x30 [ 1230.334591] Mem-Info: [ 1230.337049] active_anon:121444 inactive_anon:29158 isolated_anon:0 [ 1230.337049] active_file:18 inactive_file:15 isolated_file:0 [ 1230.337049] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1230.337049] slab_reclaimable:13012 slab_unreclaimable:115561 [ 1230.337049] mapped:52242 shmem:29546 pagetables:964 bounce:0 [ 1230.337049] free:16368 free_pcp:376 free_cma:0 [ 1230.377910] Node 0 active_anon:484596kB inactive_anon:48864kB active_file:36kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162580kB dirty:0kB writeback:0kB shmem:50008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1230.407339] Node 1 active_anon:1180kB inactive_anon:67768kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46388kB dirty:0kB writeback:0kB shmem:68176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1230.435769] Node 0 DMA free:10880kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1230.467533] ------------[ cut here ]------------ [ 1230.473760] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1230.479019] memory commitment underflow [ 1230.479126] WARNING: CPU: 0 PID: 16425 at mm/util.c:668 __vm_enough_memory+0x516/0x650 [ 1230.491409] Kernel panic - not syncing: panic_on_warn set ... [ 1230.491409] [ 1230.498787] CPU: 0 PID: 16425 Comm: kworker/u4:0 Not tainted 4.19.163-syzkaller #0 [ 1230.506489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1230.515839] Call Trace: [ 1230.518432] dump_stack+0x1fc/0x2fe [ 1230.522100] panic+0x26a/0x50e [ 1230.525295] ? __warn_printk+0xf3/0xf3 [ 1230.529194] ? __vm_enough_memory+0x516/0x650 [ 1230.533715] ? __probe_kernel_read+0x130/0x1b0 [ 1230.538294] ? __warn.cold+0x5/0x61 [ 1230.541926] ? __warn+0xe4/0x200 [ 1230.545293] ? __vm_enough_memory+0x516/0x650 [ 1230.550227] __warn.cold+0x20/0x61 [ 1230.553768] ? kvm_sched_clock_read+0x14/0x40 [ 1230.558264] ? __vm_enough_memory+0x516/0x650 [ 1230.562761] report_bug+0x262/0x2b0 [ 1230.566409] do_error_trap+0x1d7/0x310 [ 1230.570324] ? math_error+0x310/0x310 [ 1230.574150] ? mark_held_locks+0xa6/0xf0 [ 1230.578276] ? vprintk_emit+0x22d/0x740 [ 1230.582253] ? error_entry+0x72/0xd0 [ 1230.585970] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1230.591078] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1230.595927] invalid_op+0x14/0x20 [ 1230.599384] RIP: 0010:__vm_enough_memory+0x516/0x650 [ 1230.604574] Code: 09 31 ff 89 de e8 ea b4 db ff 84 db 0f 85 a9 fb ff ff e8 ad b3 db ff 48 c7 c7 20 e4 71 88 c6 05 8c 63 85 09 01 e8 85 90 af ff <0f> 0b 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 0f b6 14 [ 1230.623483] RSP: 0000:ffff88814935fd30 EFLAGS: 00010282 [ 1230.629126] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1230.636517] RDX: 0000000000000000 RSI: ffffffff814fdbb1 RDI: ffffed102926bf98 [ 1230.643786] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000006c25 [ 1230.651226] R10: 0000000000000006 R11: 0000000000000000 R12: 0000000000000001 [ 1230.658590] R13: ffffffffffe9221a R14: ffffffff8a0094c0 R15: 0000000000000d2b [ 1230.666253] ? vprintk_func+0x81/0x17e [ 1230.670164] insert_vm_struct+0x291/0x340 [ 1230.674320] __do_execve_file+0xdfe/0x2360 [ 1230.678580] ? open_exec+0x70/0x70 [ 1230.682136] ? lock_acquire+0x170/0x3c0 [ 1230.686108] ? check_preemption_disabled+0x41/0x280 [ 1230.691148] do_execve+0x35/0x50 [ 1230.694521] call_usermodehelper_exec_async+0x50e/0x6a0 [ 1230.699986] ? umh_complete+0x90/0x90 [ 1230.703804] ret_from_fork+0x24/0x30 [ 1230.708604] Kernel Offset: disabled [ 1230.712540] Rebooting in 86400 seconds..