commended to keep mac addresses unique to avoid problems! [ 1897.150575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1897.164173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1897.174281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1897.192258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1897.203880] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1897.214305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1897.224572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1897.238020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1897.249773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1897.262093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1897.274312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1897.285328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1897.300767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1897.311242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1897.325332] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1897.333640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1897.344781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1897.354587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1897.371633] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1897.383277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 23:22:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x9}, 0x0, 0x40000000, 0x0, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:22:50 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x3ca26104, 0x0, 0x0, 0x10000000}, 0x9, 0x40000000, &(0x7f00000000c0)={{0x9, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:22:50 executing program 4: socketpair(0x0, 0x1, 0x0, 0x0) 23:22:50 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) 23:22:50 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) 23:22:50 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x0, 0x0, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:22:50 executing program 5 (fault-call:1 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) 23:22:50 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') write$sndseq(r0, 0x0, 0x0) 23:22:50 executing program 5: getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, 0x0, &(0x7f0000000200)) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 23:22:50 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') write$sndseq(r0, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x800}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) 23:22:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x2c, 0xc, 0xdc000000, &(0x7f0000000000)) r1 = accept4(r0, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80, 0x80000) getsockopt$inet6_tcp_int(r1, 0x6, 0x8, 0x0, &(0x7f0000000200)=0x6b) 23:22:50 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000040)={0x7fffffff, 0x1, 0x0, 'queue0\x00', 0x1}) [ 1899.952970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1899.978961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1900.023788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1900.039446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1900.052817] device bridge_slave_1 left promiscuous mode [ 1900.080988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1900.110365] device bridge_slave_0 left promiscuous mode [ 1900.136166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1900.145569] device veth1_macvtap left promiscuous mode [ 1900.159022] device veth0_macvtap left promiscuous mode [ 1900.164370] device veth1_vlan left promiscuous mode [ 1900.174588] device veth0_vlan left promiscuous mode [ 1900.301310] device hsr_slave_1 left promiscuous mode [ 1900.313967] device hsr_slave_0 left promiscuous mode [ 1900.332655] team0 (unregistering): Port device team_slave_1 removed [ 1900.346475] team0 (unregistering): Port device team_slave_0 removed [ 1900.360758] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1900.371672] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1900.412648] bond0 (unregistering): Released all slaves 23:22:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x3ca26104, 0x0, 0x9}, 0x9, 0x40000000, &(0x7f00000000c0)={{0x9, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) [ 1902.440039] IPVS: ftp: loaded support on port[0] = 21 [ 1902.534095] IPVS: ftp: loaded support on port[0] = 21 [ 1902.720781] chnl_net:caif_netlink_parms(): no params data found [ 1902.873289] chnl_net:caif_netlink_parms(): no params data found [ 1902.961197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1902.971655] bridge0: port 1(bridge_slave_0) entered disabled state [ 1902.981607] device bridge_slave_0 entered promiscuous mode [ 1903.014933] bridge0: port 2(bridge_slave_1) entered blocking state [ 1903.022425] bridge0: port 2(bridge_slave_1) entered disabled state [ 1903.034007] device bridge_slave_1 entered promiscuous mode [ 1903.041468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1903.051855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1903.063364] device bridge_slave_0 entered promiscuous mode [ 1903.095356] bridge0: port 2(bridge_slave_1) entered blocking state [ 1903.102344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1903.114689] device bridge_slave_1 entered promiscuous mode [ 1903.123087] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1903.144824] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1903.167354] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1903.177422] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1903.215188] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1903.223187] team0: Port device team_slave_0 added [ 1903.229529] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1903.241400] team0: Port device team_slave_0 added [ 1903.247759] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1903.255006] team0: Port device team_slave_1 added [ 1903.265331] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1903.273748] team0: Port device team_slave_1 added [ 1903.326303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1903.332574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1903.363295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1903.376176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1903.382419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1903.414250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1903.426269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1903.432516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1903.462727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1903.474567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1903.485344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1903.515253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1903.530448] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1903.538610] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1903.546024] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1903.553518] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1903.611973] device hsr_slave_0 entered promiscuous mode [ 1903.622215] device hsr_slave_1 entered promiscuous mode [ 1903.633364] device hsr_slave_0 entered promiscuous mode [ 1903.644622] device hsr_slave_1 entered promiscuous mode [ 1903.651301] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1903.662887] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1903.670713] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1903.682186] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1903.912603] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1903.920022] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1903.980282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1903.989253] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1903.999148] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1904.005305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1904.014136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1904.027267] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1904.033350] 8021q: adding VLAN 0 to HW filter on device team0 [ 1904.048444] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1904.055483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1904.069029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1904.078270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1904.084623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1904.100527] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1904.110598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1904.121117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1904.132004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1904.142163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1904.148655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1904.168274] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1904.181747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1904.193907] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1904.205419] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1904.213419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1904.226226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1904.234782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1904.251063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1904.270051] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1904.280685] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1904.292469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1904.301250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1904.315675] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1904.330583] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1904.341135] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1904.353517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1904.362424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1904.374870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1904.382724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1904.397415] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1904.405585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1904.422665] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1904.429377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1904.444691] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1904.452419] 8021q: adding VLAN 0 to HW filter on device team0 [ 1904.463249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1904.472051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1904.490206] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1904.495993] Bluetooth: hci3 command 0x0409 tx timeout [ 1904.501804] Bluetooth: hci0 command 0x0409 tx timeout [ 1904.505085] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1904.514964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1904.528194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1904.540086] bridge0: port 1(bridge_slave_0) entered blocking state [ 1904.546485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1904.557958] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1904.570468] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1904.582055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1904.594042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1904.602972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1904.615436] bridge0: port 2(bridge_slave_1) entered blocking state [ 1904.621859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1904.633867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1904.641568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1904.655247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1904.664715] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1904.676840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1904.697915] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1904.708383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1904.719238] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1904.726696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1904.734641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1904.752962] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1904.765424] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1904.774064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1904.782734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1904.797895] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1904.810861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1904.830451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1904.840220] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1904.856119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1904.863789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1904.880439] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1904.886601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1904.901971] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1904.922143] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1904.930247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1904.938364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1904.957550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1905.022390] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1905.033409] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1905.047369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1905.061055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1905.151511] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1905.165166] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1905.179294] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1905.188117] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1905.197125] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1905.206254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1905.256395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1905.292901] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1905.309988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1905.323266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1905.346836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1905.353734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1905.378859] device veth0_vlan entered promiscuous mode [ 1905.411832] device veth1_vlan entered promiscuous mode [ 1905.432563] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1905.651776] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1905.763916] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1905.779718] in:imklog cpuset=/ mems_allowed=0-1 [ 1905.784895] CPU: 1 PID: 16107 Comm: in:imklog Not tainted 4.14.214-syzkaller #0 [ 1905.792343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1905.801691] Call Trace: [ 1905.804268] dump_stack+0x1b2/0x283 [ 1905.807882] dump_header+0x178/0x82f [ 1905.811596] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1905.816683] ? ___ratelimit+0x2cd/0x522 [ 1905.820640] oom_kill_process.cold+0x10/0xb18 [ 1905.825120] out_of_memory+0xe3e/0x1190 [ 1905.829079] ? oom_killer_disable+0x1c0/0x1c0 [ 1905.833694] ? mutex_trylock+0x152/0x1a0 [ 1905.837746] __alloc_pages_nodemask+0x23e1/0x2720 [ 1905.842598] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1905.847454] alloc_pages_current+0x155/0x260 [ 1905.851856] filemap_fault+0xea3/0x1980 [ 1905.855832] ext4_filemap_fault+0x84/0xb0 [ 1905.859969] __do_fault+0xfa/0x380 [ 1905.863494] __handle_mm_fault+0x2497/0x4620 [ 1905.867887] ? vm_insert_page+0x7c0/0x7c0 [ 1905.872020] ? lock_downgrade+0x740/0x740 [ 1905.876162] handle_mm_fault+0x391/0x860 [ 1905.880211] __do_page_fault+0x549/0xad0 [ 1905.884249] ? spurious_fault+0x640/0x640 [ 1905.888379] ? do_page_fault+0x60/0x4f2 [ 1905.892336] ? page_fault+0x2f/0x50 [ 1905.895948] page_fault+0x45/0x50 [ 1905.899386] RIP: 1fa0:0x1f9f [ 1905.902391] RSP: ac0a7de8:00007efeac0a7da0 EFLAGS: 7efeac0a7da0 [ 1905.908895] Mem-Info: [ 1905.919515] active_anon:17476 inactive_anon:27046 isolated_anon:0 [ 1905.919515] active_file:49 inactive_file:21 isolated_file:0 [ 1905.919515] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1905.919515] slab_reclaimable:12478 slab_unreclaimable:111876 [ 1905.919515] mapped:52797 shmem:27414 pagetables:764 bounce:0 [ 1905.919515] free:24994 free_pcp:0 free_cma:0 [ 1905.956681] Node 0 active_anon:69104kB inactive_anon:108132kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176936kB dirty:0kB writeback:0kB shmem:109580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1905.984759] Node 1 active_anon:800kB inactive_anon:52kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34240kB dirty:0kB writeback:0kB shmem:76kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1906.011391] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1906.038909] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1906.043952] Node 0 DMA32 free:36016kB min:36200kB low:45248kB high:54296kB active_anon:67056kB inactive_anon:108128kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7104kB pagetables:2776kB bounce:0kB free_pcp:128kB local_pcp:120kB free_cma:0kB [ 1906.073594] lowmem_reserve[]: 0 0 0 0 0 [ 1906.077663] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1906.103347] lowmem_reserve[]: 0 0 0 0 0 [ 1906.107566] Node 1 Normal free:53252kB min:53696kB low:67120kB high:80544kB active_anon:800kB inactive_anon:52kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:280kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1906.135964] lowmem_reserve[]: 0 0 0 0 0 [ 1906.139967] Node 0 DMA: 1*4kB (M) 1*8kB (M) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 4*256kB (UM) 5*512kB (UM) 1*1024kB (M) 1*2048kB (M) 1*4096kB (M) = 11068kB [ 1906.154921] Node 0 DMA32: 1110*4kB (UME) 648*8kB (MEH) 333*16kB (UMEH) 123*32kB (MEH) 53*64kB (UMEH) 31*128kB (UMH) 14*256kB (UMH) 4*512kB (M) 4*1024kB (UMH) 0*2048kB 0*4096kB = 35976kB [ 1906.172386] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1906.183234] Node 1 Normal: 97*4kB (M) 81*8kB (UME) 69*16kB (UME) 52*32kB (M) 43*64kB (UM) 19*128kB (M) 5*256kB (ME) 6*512kB (UME) 3*1024kB (UME) 4*2048kB (UM) 7*4096kB (UM) = 53276kB [ 1906.199773] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1906.208729] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1906.217335] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1906.226189] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1906.234794] 27448 total pagecache pages [ 1906.238788] 0 pages in swap cache [ 1906.242227] Swap cache stats: add 0, delete 0, find 0/0 [ 1906.247615] Free swap = 0kB [ 1906.250623] Total swap = 0kB [ 1906.253694] 2097051 pages RAM [ 1906.256876] 0 pages HighMem/MovableOnly [ 1906.260841] 363840 pages reserved [ 1906.264299] 0 pages cma reserved [ 1906.267678] Out of memory (oom_kill_allocating_task): Kill process 16107 (in:imklog) score 0 or sacrifice child [ 1906.277973] Killed process 16105 (rsyslogd) total-vm:254332kB, anon-rss:560kB, file-rss:0kB, shmem-rss:0kB [ 1906.289151] oom_reaper: reaped process 16105 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1906.310522] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1906.325826] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1906.330709] CPU: 0 PID: 7979 Comm: syz-fuzzer Not tainted 4.14.214-syzkaller #0 [ 1906.338142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1906.347473] Call Trace: [ 1906.350061] dump_stack+0x1b2/0x283 [ 1906.353664] dump_header+0x178/0x82f [ 1906.357355] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1906.362430] ? ___ratelimit+0x2cd/0x522 [ 1906.366383] oom_kill_process.cold+0x10/0xb18 [ 1906.370858] out_of_memory+0xe3e/0x1190 [ 1906.374849] ? oom_killer_disable+0x1c0/0x1c0 [ 1906.379355] ? mutex_trylock+0x152/0x1a0 [ 1906.383390] __alloc_pages_nodemask+0x23e1/0x2720 [ 1906.388213] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1906.393038] alloc_pages_current+0x155/0x260 [ 1906.397421] filemap_fault+0xea3/0x1980 [ 1906.401374] ext4_filemap_fault+0x84/0xb0 [ 1906.405496] __do_fault+0xfa/0x380 [ 1906.409026] __handle_mm_fault+0x2497/0x4620 [ 1906.413407] ? vm_insert_page+0x7c0/0x7c0 [ 1906.417528] ? lock_downgrade+0x740/0x740 [ 1906.421655] handle_mm_fault+0x391/0x860 [ 1906.425706] __do_page_fault+0x549/0xad0 [ 1906.429761] ? spurious_fault+0x640/0x640 [ 1906.433894] ? do_page_fault+0x60/0x4f2 [ 1906.437843] ? page_fault+0x2f/0x50 [ 1906.441445] page_fault+0x45/0x50 [ 1906.444870] RIP: 0000:0xb358f8 [ 1906.448032] RSP: 3b976a26:000000c00003dec8 EFLAGS: 00438920 [ 1906.448591] Mem-Info: [ 1906.456750] active_anon:17250 inactive_anon:27046 isolated_anon:0 [ 1906.456750] active_file:25 inactive_file:9 isolated_file:0 [ 1906.456750] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1906.456750] slab_reclaimable:12478 slab_unreclaimable:111884 [ 1906.456750] mapped:52796 shmem:27414 pagetables:764 bounce:0 [ 1906.456750] free:25076 free_pcp:0 free_cma:0 [ 1906.489827] Node 0 active_anon:68204kB inactive_anon:108132kB active_file:56kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176944kB dirty:0kB writeback:0kB shmem:109580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1906.517991] Node 1 active_anon:796kB inactive_anon:52kB active_file:40kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34240kB dirty:0kB writeback:0kB shmem:76kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1906.544526] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1906.570982] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1906.576292] Bluetooth: hci0 command 0x041b tx timeout [ 1906.577513] Node 0 DMA32 free:35856kB min:36200kB low:45248kB high:54296kB active_anon:66156kB inactive_anon:108128kB active_file:116kB inactive_file:168kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7008kB pagetables:2776kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1906.581563] Bluetooth: hci3 command 0x041b tx timeout [ 1906.620212] lowmem_reserve[]: 0 0 0 0 0 [ 1906.624203] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1906.651877] lowmem_reserve[]: 0 0 0 0 0 [ 1906.661452] Node 1 Normal free:53256kB min:53696kB low:67120kB high:80544kB active_anon:796kB inactive_anon:52kB active_file:40kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:280kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1906.691593] lowmem_reserve[]: 0 0 0 0 0 [ 1906.695589] Node 0 DMA: 1*4kB (M) 1*8kB (M) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 4*256kB (UM) 5*512kB (UM) 1*1024kB (M) 1*2048kB (M) 1*4096kB (M) = 11068kB [ 1906.714958] Node 0 DMA32: 1309*4kB (ME) 655*8kB (ME) 329*16kB (MEH) 124*32kB (MEH) 54*64kB (UMEH) 31*128kB (UMH) 13*256kB (UMH) 5*512kB (UM) 3*1024kB (MH) 0*2048kB 0*4096kB = 36092kB [ 1906.733578] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1906.744351] Node 1 Normal: 96*4kB (M) 80*8kB (UME) 68*16kB (UME) 51*32kB (M) 42*64kB (UM) 20*128kB (M) 5*256kB (ME) 6*512kB (UME) 3*1024kB (UME) 4*2048kB (UM) 7*4096kB (UM) = 53280kB [ 1906.760992] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1906.769888] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1906.778507] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1906.787383] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1906.795998] 27470 total pagecache pages [ 1906.799965] 0 pages in swap cache [ 1906.803409] Swap cache stats: add 0, delete 0, find 0/0 [ 1906.808795] Free swap = 0kB [ 1906.811793] Total swap = 0kB [ 1906.814786] 2097051 pages RAM [ 1906.817991] 0 pages HighMem/MovableOnly [ 1906.821958] 363840 pages reserved [ 1906.825383] 0 pages cma reserved [ 1906.828773] Out of memory (oom_kill_allocating_task): Kill process 7979 (syz-fuzzer) score 0 or sacrifice child [ 1906.840138] Killed process 14007 (syz-executor.2) total-vm:85024kB, anon-rss:72kB, file-rss:4kB, shmem-rss:0kB [ 1906.861950] oom_reaper: reaped process 14007 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1906.878065] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1906.902418] systemd-journal cpuset=/ mems_allowed=0-1 [ 1906.909927] CPU: 0 PID: 14855 Comm: systemd-journal Not tainted 4.14.214-syzkaller #0 [ 1906.917889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1906.927224] Call Trace: [ 1906.929798] dump_stack+0x1b2/0x283 [ 1906.933399] dump_header+0x178/0x82f [ 1906.937089] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1906.942163] ? ___ratelimit+0x2cd/0x522 [ 1906.946110] oom_kill_process.cold+0x10/0xb18 [ 1906.950598] out_of_memory+0xe3e/0x1190 [ 1906.954547] ? oom_killer_disable+0x1c0/0x1c0 [ 1906.959016] ? mutex_trylock+0x152/0x1a0 [ 1906.963061] __alloc_pages_nodemask+0x23e1/0x2720 [ 1906.967883] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1906.972707] alloc_pages_current+0x155/0x260 [ 1906.977090] filemap_fault+0xea3/0x1980 [ 1906.981040] ext4_filemap_fault+0x84/0xb0 [ 1906.985178] __do_fault+0xfa/0x380 [ 1906.988692] __handle_mm_fault+0x2497/0x4620 [ 1906.993073] ? vm_insert_page+0x7c0/0x7c0 [ 1906.997200] ? check_stack_object+0x86/0xa0 [ 1907.001509] handle_mm_fault+0x391/0x860 [ 1907.005544] __do_page_fault+0x549/0xad0 [ 1907.009580] ? spurious_fault+0x640/0x640 [ 1907.013702] ? do_page_fault+0x60/0x4f2 [ 1907.017656] ? page_fault+0x2f/0x50 [ 1907.021256] page_fault+0x45/0x50 [ 1907.025637] RIP: e0c0:0x55a268b5cf40 [ 1907.029319] RSP: a3479b00:0000000000000042 EFLAGS: 000001d8 [ 1907.036319] Mem-Info: [ 1907.044452] active_anon:17237 inactive_anon:27046 isolated_anon:0 [ 1907.044452] active_file:18 inactive_file:16 isolated_file:0 [ 1907.044452] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1907.044452] slab_reclaimable:12474 slab_unreclaimable:111882 [ 1907.044452] mapped:52794 shmem:27414 pagetables:734 bounce:0 [ 1907.044452] free:25097 free_pcp:100 free_cma:0 [ 1907.082100] Node 0 active_anon:68196kB inactive_anon:108132kB active_file:52kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176936kB dirty:0kB writeback:0kB shmem:109580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1907.112106] Node 1 active_anon:752kB inactive_anon:52kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34240kB dirty:0kB writeback:0kB shmem:76kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1907.147098] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1907.180332] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1907.185389] Node 0 DMA32 free:35960kB min:36200kB low:45248kB high:54296kB active_anon:66148kB inactive_anon:108128kB active_file:108kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:6976kB pagetables:2656kB bounce:0kB free_pcp:400kB local_pcp:132kB free_cma:0kB [ 1907.218640] lowmem_reserve[]: 0 0 0 0 0 [ 1907.222750] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1907.250565] lowmem_reserve[]: 0 0 0 0 0 [ 1907.254665] Node 1 Normal free:53360kB min:53696kB low:67120kB high:80544kB active_anon:752kB inactive_anon:52kB active_file:16kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:280kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1907.284505] lowmem_reserve[]: 0 0 0 0 0 [ 1907.290750] Node 0 DMA: 1*4kB (M) 1*8kB (M) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 4*256kB (UM) 5*512kB (UM) 1*1024kB (M) 1*2048kB (M) 1*4096kB (M) = 11068kB [ 1907.311654] Node 0 DMA32: 1308*4kB (ME) 655*8kB (ME) 329*16kB (MEH) 124*32kB (MEH) 54*64kB (UMEH) 30*128kB (MH) 13*256kB (UMH) 5*512kB (UM) 3*1024kB (MH) 0*2048kB 0*4096kB = 35960kB [ 1907.335427] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1907.354434] Node 1 Normal: 88*4kB (UM) 72*8kB (UME) 61*16kB (UME) 50*32kB (UM) 41*64kB (UM) 23*128kB (M) 5*256kB (ME) 6*512kB (UME) 3*1024kB (UME) 4*2048kB (UM) 7*4096kB (UM) = 53360kB [ 1907.375967] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1907.384904] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1907.393538] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1907.404622] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1907.413328] 27448 total pagecache pages [ 1907.419422] 0 pages in swap cache [ 1907.422889] Swap cache stats: add 0, delete 0, find 0/0 [ 1907.428279] Free swap = 0kB [ 1907.431280] Total swap = 0kB [ 1907.434286] 2097051 pages RAM [ 1907.437423] 0 pages HighMem/MovableOnly [ 1907.441406] 363840 pages reserved [ 1907.444830] 0 pages cma reserved [ 1907.448217] Out of memory (oom_kill_allocating_task): Kill process 14855 (systemd-journal) score 0 or sacrifice child [ 1907.459038] Killed process 14855 (systemd-journal) total-vm:46096kB, anon-rss:480kB, file-rss:0kB, shmem-rss:2260kB [ 1907.488868] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1907.513490] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1907.525791] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1907.659071] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1907.695125] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1908.026822] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1908.092857] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1908.098601] CPU: 1 PID: 7978 Comm: syz-fuzzer Not tainted 4.14.214-syzkaller #0 [ 1908.106047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1908.115389] Call Trace: [ 1908.117975] dump_stack+0x1b2/0x283 [ 1908.121597] dump_header+0x178/0x82f [ 1908.125297] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1908.130383] ? ___ratelimit+0x2cd/0x522 [ 1908.134335] oom_kill_process.cold+0x10/0xb18 [ 1908.138811] out_of_memory+0xe3e/0x1190 [ 1908.142765] ? oom_killer_disable+0x1c0/0x1c0 [ 1908.147241] ? mutex_trylock+0x152/0x1a0 [ 1908.151285] __alloc_pages_nodemask+0x23e1/0x2720 [ 1908.156124] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1908.160976] alloc_pages_current+0x155/0x260 [ 1908.165380] filemap_fault+0xea3/0x1980 [ 1908.169351] ext4_filemap_fault+0x84/0xb0 [ 1908.173494] __do_fault+0xfa/0x380 [ 1908.177028] __handle_mm_fault+0x2497/0x4620 [ 1908.183603] ? vm_insert_page+0x7c0/0x7c0 [ 1908.187745] ? __might_fault+0x177/0x1b0 [ 1908.191807] handle_mm_fault+0x391/0x860 [ 1908.195860] __do_page_fault+0x549/0xad0 [ 1908.199920] ? spurious_fault+0x640/0x640 [ 1908.204154] ? do_page_fault+0x60/0x4f2 [ 1908.208121] ? page_fault+0x2f/0x50 [ 1908.211739] page_fault+0x45/0x50 [ 1908.215178] RIP: 1ac0ec0:0x200 [ 1908.218357] RSP: ff800000:000000c000772740 EFLAGS: 00000003 [ 1908.248184] Mem-Info: [ 1908.256751] active_anon:17223 inactive_anon:27044 isolated_anon:0 [ 1908.256751] active_file:29 inactive_file:24 isolated_file:26 [ 1908.256751] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1908.256751] slab_reclaimable:12465 slab_unreclaimable:111122 [ 1908.256751] mapped:43560 shmem:27413 pagetables:737 bounce:0 [ 1908.256751] free:25131 free_pcp:239 free_cma:0 [ 1908.290434] Node 0 active_anon:67728kB inactive_anon:108128kB active_file:76kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174168kB dirty:0kB writeback:0kB shmem:109580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1908.318599] Node 1 active_anon:1164kB inactive_anon:48kB active_file:56kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72kB dirty:0kB writeback:0kB shmem:72kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1908.346258] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1908.376736] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1908.383563] Node 0 DMA32 free:36552kB min:36200kB low:45248kB high:54296kB active_anon:65680kB inactive_anon:108124kB active_file:232kB inactive_file:1156kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7008kB pagetables:2588kB bounce:0kB free_pcp:104kB local_pcp:8kB free_cma:0kB [ 1908.426173] lowmem_reserve[]: 0 0 0 0 0 [ 1908.430189] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1908.455855] lowmem_reserve[]: 0 0 0 0 0 [ 1908.459835] Node 1 Normal free:53572kB min:53696kB low:67120kB high:80544kB active_anon:1164kB inactive_anon:48kB active_file:0kB inactive_file:124kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:608kB pagetables:360kB bounce:0kB free_pcp:64kB local_pcp:8kB free_cma:0kB [ 1908.488708] lowmem_reserve[]: 0 0 0 0 0 [ 1908.492720] Node 0 DMA: 1*4kB (M) 1*8kB (M) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 4*256kB (UM) 5*512kB (UM) 1*1024kB (M) 1*2048kB (M) 1*4096kB (M) = 11068kB [ 1908.508315] Node 0 DMA32: 845*4kB (UME) 794*8kB (UMEH) 338*16kB (UME) 122*32kB (UMEH) 59*64kB (UMEH) 33*128kB (UMH) 13*256kB (UMH) 5*512kB (M) 3*1024kB (MH) 0*2048kB 0*4096kB = 36004kB [ 1908.525108] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1908.537776] Node 1 Normal: 118*4kB (UME) 99*8kB (M) 73*16kB (UME) 38*32kB (UM) 24*64kB (UM) 31*128kB (UM) 7*256kB (ME) 6*512kB (UME) 3*1024kB (UME) 4*2048kB (UM) 7*4096kB (UM) = 53952kB [ 1908.555172] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1908.564110] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1908.572718] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1908.582100] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1908.590718] 27464 total pagecache pages [ 1908.594680] 0 pages in swap cache [ 1908.598158] Swap cache stats: add 0, delete 0, find 0/0 [ 1908.603492] Free swap = 0kB [ 1908.606569] Total swap = 0kB [ 1908.609571] 2097051 pages RAM [ 1908.612646] 0 pages HighMem/MovableOnly [ 1908.616985] 363840 pages reserved [ 1908.620431] 0 pages cma reserved [ 1908.623769] Out of memory (oom_kill_allocating_task): Kill process 7978 (syz-fuzzer) score 0 or sacrifice child [ 1908.634174] Killed process 15440 (syz-executor.5) total-vm:85024kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 1908.658307] Bluetooth: hci3 command 0x040f tx timeout [ 1908.712390] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1908.720818] Bluetooth: hci0 command 0x040f tx timeout [ 1908.728958] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1908.754277] CPU: 1 PID: 16674 Comm: systemd-udevd Not tainted 4.14.214-syzkaller #0 [ 1908.762082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1908.771425] Call Trace: [ 1908.773993] dump_stack+0x1b2/0x283 [ 1908.777602] dump_header+0x178/0x82f [ 1908.781293] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1908.786376] ? ___ratelimit+0x2cd/0x522 [ 1908.790326] oom_kill_process.cold+0x10/0xb18 [ 1908.794801] out_of_memory+0xe3e/0x1190 [ 1908.798766] ? oom_killer_disable+0x1c0/0x1c0 [ 1908.803235] ? mutex_trylock+0x152/0x1a0 [ 1908.807271] __alloc_pages_nodemask+0x23e1/0x2720 [ 1908.812095] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1908.816927] alloc_pages_current+0x155/0x260 [ 1908.821313] filemap_fault+0xea3/0x1980 [ 1908.825267] ext4_filemap_fault+0x84/0xb0 [ 1908.829390] __do_fault+0xfa/0x380 [ 1908.832906] __handle_mm_fault+0x2497/0x4620 [ 1908.837290] ? vm_insert_page+0x7c0/0x7c0 [ 1908.841426] ? __fsnotify_inode_delete+0x20/0x20 [ 1908.846157] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1908.852804] handle_mm_fault+0x391/0x860 [ 1908.856857] __do_page_fault+0x549/0xad0 [ 1908.860896] ? spurious_fault+0x640/0x640 [ 1908.865032] ? do_page_fault+0x60/0x4f2 [ 1908.868988] ? page_fault+0x2f/0x50 [ 1908.872602] page_fault+0x45/0x50 [ 1908.876030] RIP: 35dc4900:0xfff [ 1908.879291] RSP: 36a99f30:0000000000000d68 EFLAGS: 7fcc35dc5440 [ 1908.902765] Mem-Info: [ 1908.922404] active_anon:17214 inactive_anon:27044 isolated_anon:0 [ 1908.922404] active_file:27 inactive_file:12 isolated_file:0 [ 1908.922404] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1908.922404] slab_reclaimable:12465 slab_unreclaimable:110725 [ 1908.922404] mapped:34862 shmem:27413 pagetables:720 bounce:0 [ 1908.922404] free:25777 free_pcp:190 free_cma:0 [ 1908.978692] Node 0 active_anon:67608kB inactive_anon:108128kB active_file:12kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139268kB dirty:0kB writeback:0kB shmem:109580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1909.033283] Node 1 active_anon:1160kB inactive_anon:48kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:72kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1909.073475] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1909.109847] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1909.114891] Node 0 DMA32 free:36024kB min:36200kB low:45248kB high:54296kB active_anon:65560kB inactive_anon:108124kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:6976kB pagetables:2416kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1909.153563] lowmem_reserve[]: 0 0 0 0 0 [ 1909.158197] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1909.191744] lowmem_reserve[]: 0 0 0 0 0 [ 1909.195784] Node 1 Normal free:53456kB min:53696kB low:67120kB high:80544kB active_anon:1160kB inactive_anon:48kB active_file:64kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:608kB pagetables:372kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1909.234984] lowmem_reserve[]: 0 0 0 0 0 [ 1909.243067] Node 0 DMA: 1*4kB (M) 1*8kB (M) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 4*256kB (UM) 5*512kB (UM) 1*1024kB (M) 1*2048kB (M) 1*4096kB (M) = 11068kB [ 1909.264015] Node 0 DMA32: 1275*4kB (UME) 647*8kB (UMEH) 323*16kB (MEH) 118*32kB (MEH) 57*64kB (MEH) 31*128kB (UMH) 13*256kB (UMH) 5*512kB (M) 3*1024kB (MH) 0*2048kB 0*4096kB = 35796kB [ 1909.283482] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1909.311101] Node 1 Normal: 116*4kB (UME) 100*8kB (UM) 74*16kB (UME) 38*32kB (UM) 24*64kB (UM) 27*128kB (UM) 7*256kB (ME) 6*512kB (UME) 3*1024kB (UME) 4*2048kB (UM) 7*4096kB (UM) = 53456kB [ 1909.338086] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1909.353015] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1909.364123] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1909.381243] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1909.392104] 27435 total pagecache pages [ 1909.402139] 0 pages in swap cache [ 1909.407721] Swap cache stats: add 0, delete 0, find 0/0 [ 1909.413080] Free swap = 0kB [ 1909.422104] Total swap = 0kB [ 1909.425119] 2097051 pages RAM [ 1909.430185] 0 pages HighMem/MovableOnly [ 1909.434150] 363840 pages reserved [ 1909.444832] 0 pages cma reserved [ 1909.454166] Out of memory (oom_kill_allocating_task): Kill process 16674 (systemd-udevd) score 0 or sacrifice child [ 1909.476736] Killed process 16674 (systemd-udevd) total-vm:45488kB, anon-rss:2632kB, file-rss:0kB, shmem-rss:0kB [ 1909.502355] oom_reaper: reaped process 16674 (systemd-udevd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1909.527671] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1909.542042] systemd cpuset=/ mems_allowed=0-1 [ 1909.546621] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.214-syzkaller #0 [ 1909.553535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1909.562884] Call Trace: [ 1909.565469] dump_stack+0x1b2/0x283 [ 1909.569085] dump_header+0x178/0x82f [ 1909.572825] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1909.577903] ? ___ratelimit+0x2cd/0x522 [ 1909.581851] oom_kill_process.cold+0x10/0xb18 [ 1909.586324] ? lock_downgrade+0x740/0x740 [ 1909.590536] out_of_memory+0x2dc/0x1190 [ 1909.594483] ? oom_killer_disable+0x1c0/0x1c0 [ 1909.598952] ? mutex_trylock+0x152/0x1a0 [ 1909.602986] __alloc_pages_nodemask+0x23e1/0x2720 [ 1909.608116] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1909.612941] alloc_pages_current+0x155/0x260 [ 1909.617324] filemap_fault+0xea3/0x1980 [ 1909.621277] ext4_filemap_fault+0x84/0xb0 [ 1909.625401] __do_fault+0xfa/0x380 [ 1909.628914] __handle_mm_fault+0x2497/0x4620 [ 1909.633295] ? vm_insert_page+0x7c0/0x7c0 [ 1909.637416] ? lock_acquire+0x170/0x3f0 [ 1909.641415] handle_mm_fault+0x391/0x860 [ 1909.645455] __do_page_fault+0x549/0xad0 [ 1909.649506] ? spurious_fault+0x640/0x640 [ 1909.653629] ? do_page_fault+0x60/0x4f2 [ 1909.657576] ? page_fault+0x2f/0x50 [ 1909.661177] page_fault+0x45/0x50 [ 1909.664614] RIP: 3ae88900:0x55dea5d55ea0 [ 1909.668645] RSP: a5e2f730:00007f0cbd054d13 EFLAGS: 7ffc3ae887f0 [ 1909.669320] Mem-Info: [ 1909.677836] active_anon:17156 inactive_anon:27044 isolated_anon:0 [ 1909.677836] active_file:0 inactive_file:25 isolated_file:0 [ 1909.677836] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1909.677836] slab_reclaimable:12465 slab_unreclaimable:110805 [ 1909.677836] mapped:34817 shmem:27413 pagetables:677 bounce:0 [ 1909.677836] free:25114 free_pcp:86 free_cma:0 [ 1909.711241] Node 0 active_anon:67540kB inactive_anon:108128kB active_file:0kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139268kB dirty:0kB writeback:0kB shmem:109580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1909.739190] Node 1 active_anon:1084kB inactive_anon:48kB active_file:0kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:72kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1909.765607] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1909.792419] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1909.797599] Node 0 DMA32 free:35856kB min:36200kB low:45248kB high:54296kB active_anon:65492kB inactive_anon:108124kB active_file:0kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:6976kB pagetables:2416kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 1909.826562] lowmem_reserve[]: 0 0 0 0 0 [ 1909.830540] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1909.856177] lowmem_reserve[]: 0 0 0 0 0 [ 1909.860170] Node 1 Normal free:53564kB min:53696kB low:67120kB high:80544kB active_anon:1084kB inactive_anon:48kB active_file:0kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:292kB bounce:0kB free_pcp:100kB local_pcp:0kB free_cma:0kB [ 1909.888442] lowmem_reserve[]: 0 0 0 0 0 [ 1909.892421] Node 0 DMA: 1*4kB (M) 1*8kB (M) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 4*256kB (UM) 5*512kB (UM) 1*1024kB (M) 1*2048kB (M) 1*4096kB (M) = 11068kB [ 1909.907461] Node 0 DMA32: 1271*4kB (ME) 642*8kB (ME) 324*16kB (UME) 120*32kB (UMEH) 59*64kB (UMEH) 30*128kB (MH) 13*256kB (UMH) 5*512kB (M) 3*1024kB (MH) 0*2048kB 0*4096kB = 35820kB [ 1909.924103] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1909.934846] Node 1 Normal: 117*4kB (UME) 97*8kB (UM) 74*16kB (UME) 42*32kB (UM) 24*64kB (UM) 27*128kB (UM) 7*256kB (ME) 6*512kB (UME) 3*1024kB (UME) 4*2048kB (UM) 7*4096kB (UM) = 53564kB [ 1909.952000] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1909.960881] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1909.969486] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1909.978353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1909.986981] 27435 total pagecache pages [ 1909.990948] 0 pages in swap cache [ 1909.994388] Swap cache stats: add 0, delete 0, find 0/0 [ 1909.999775] Free swap = 0kB [ 1910.002772] Total swap = 0kB [ 1910.005807] 2097051 pages RAM [ 1910.008894] 0 pages HighMem/MovableOnly [ 1910.012850] 363840 pages reserved [ 1910.022513] 0 pages cma reserved [ 1910.025937] Out of memory: Kill process 16193 (syz-executor.1) score 1005 or sacrifice child [ 1910.034620] Killed process 16195 (syz-executor.1) total-vm:93348kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 1910.102527] oom_reaper: reaped process 16195 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1910.143708] systemd-cgroups invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1910.174138] systemd-cgroups cpuset=/ mems_allowed=0-1 [ 1910.179715] CPU: 0 PID: 16668 Comm: systemd-cgroups Not tainted 4.14.214-syzkaller #0 [ 1910.187675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1910.197012] Call Trace: [ 1910.199577] dump_stack+0x1b2/0x283 [ 1910.203182] dump_header+0x178/0x82f [ 1910.206873] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1910.211947] ? ___ratelimit+0x2cd/0x522 [ 1910.215932] oom_kill_process.cold+0x10/0xb18 [ 1910.220404] out_of_memory+0xe3e/0x1190 [ 1910.225395] ? oom_killer_disable+0x1c0/0x1c0 [ 1910.229862] ? mutex_trylock+0x152/0x1a0 [ 1910.233922] __alloc_pages_nodemask+0x23e1/0x2720 [ 1910.238757] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1910.243596] alloc_pages_current+0x155/0x260 [ 1910.248055] filemap_fault+0xea3/0x1980 [ 1910.252130] ext4_filemap_fault+0x84/0xb0 [ 1910.256256] __do_fault+0xfa/0x380 [ 1910.259774] __handle_mm_fault+0x2497/0x4620 [ 1910.264157] ? vm_insert_page+0x7c0/0x7c0 [ 1910.268278] ? vm_mmap_pgoff+0x168/0x1a0 [ 1910.272312] ? vm_mmap_pgoff+0xcb/0x1a0 [ 1910.276265] handle_mm_fault+0x391/0x860 [ 1910.280312] __do_page_fault+0x549/0xad0 [ 1910.284360] ? spurious_fault+0x640/0x640 [ 1910.288483] ? do_page_fault+0x60/0x4f2 [ 1910.292430] ? page_fault+0x2f/0x50 [ 1910.296030] page_fault+0x45/0x50 [ 1910.299455] RIP: 7ffff1a0:0x801 [ 1910.302713] RSP: 6a1a99e0:00007ffe263ebd60 EFLAGS: 7ffe263ebe48 [ 1910.307028] Mem-Info: [ 1910.315563] active_anon:16627 inactive_anon:27044 isolated_anon:0 [ 1910.315563] active_file:46 inactive_file:13 isolated_file:0 [ 1910.315563] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1910.315563] slab_reclaimable:12465 slab_unreclaimable:110815 [ 1910.315563] mapped:34834 shmem:27413 pagetables:678 bounce:0 [ 1910.315563] free:13897 free_pcp:60 free_cma:0 [ 1910.371011] syz-executor.1: vmalloc: allocation failure, allocated 611254272 of 1073745920 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1910.386344] Node 0 active_anon:65424kB inactive_anon:108128kB active_file:160kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139336kB dirty:0kB writeback:0kB shmem:109580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1910.489163] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1910.532028] CPU: 1 PID: 16195 Comm: syz-executor.1 Not tainted 4.14.214-syzkaller #0 [ 1910.539933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1910.549280] Call Trace: [ 1910.551866] dump_stack+0x1b2/0x283 [ 1910.555490] warn_alloc.cold+0x96/0x1cc [ 1910.559456] ? zone_watermark_ok_safe+0x220/0x220 [ 1910.564289] ? retint_kernel+0x2d/0x2d [ 1910.568185] __vmalloc_area_node+0x48a/0x680 [ 1910.572591] ? __vmalloc_node_range+0x150/0x150 [ 1910.577255] ? __get_vm_area_node+0x27d/0x340 [ 1910.581744] __vmalloc_node_range+0xbe/0x150 [ 1910.582607] Node 1 active_anon:1084kB inactive_anon:48kB active_file:24kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:72kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1910.586170] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1910.586178] vmalloc_user+0x47/0xa0 [ 1910.586187] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1910.586199] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1910.586207] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1910.586217] __vb2_queue_alloc+0x47a/0xd90 [ 1910.586234] vb2_core_create_bufs+0x279/0x5a0 [ 1910.643910] ? __vb2_queue_free+0x7a0/0x7a0 [ 1910.648233] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1910.653604] ? trace_hardirqs_on+0x10/0x10 [ 1910.657835] vb2_create_bufs+0x2e1/0x5b0 [ 1910.661896] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 1910.667101] ? vb2_thread_start.cold+0x24/0x24 [ 1910.671671] ? trace_hardirqs_on+0x10/0x10 [ 1910.675903] v4l_create_bufs+0xa4/0x150 [ 1910.679872] __video_do_ioctl+0x65b/0x6a0 [ 1910.684015] ? video_ioctl2+0x30/0x30 [ 1910.687809] ? __might_fault+0x177/0x1b0 [ 1910.691865] video_usercopy+0xf5/0xe90 [ 1910.695742] ? video_ioctl2+0x30/0x30 [ 1910.699535] ? v4l_g_ctrl+0x390/0x390 [ 1910.703935] ? lock_acquire+0x170/0x3f0 [ 1910.707930] ? trace_hardirqs_on+0x10/0x10 [ 1910.712157] ? trace_hardirqs_on+0x10/0x10 [ 1910.716385] ? futex_exit_release+0x220/0x220 [ 1910.720870] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1910.725967] ? __might_fault+0x104/0x1b0 [ 1910.730036] v4l2_ioctl+0x1bb/0x2f0 [ 1910.733653] ? v4l2_open+0x2f0/0x2f0 [ 1910.735953] Bluetooth: hci3 command 0x0419 tx timeout [ 1910.737358] do_vfs_ioctl+0x75a/0xff0 [ 1910.746363] ? ioctl_preallocate+0x1a0/0x1a0 [ 1910.750770] ? lock_downgrade+0x740/0x740 [ 1910.754912] ? __fget+0x225/0x360 [ 1910.758356] ? do_vfs_ioctl+0xff0/0xff0 [ 1910.762328] ? security_file_ioctl+0x83/0xb0 [ 1910.766474] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:4kB active_file:0kB inactive_file:68kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1910.766733] SyS_ioctl+0x7f/0xb0 [ 1910.766743] ? do_vfs_ioctl+0xff0/0xff0 [ 1910.800573] do_syscall_64+0x1d5/0x640 [ 1910.804460] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1910.807921] lowmem_reserve[]: [ 1910.809636] RIP: 0033:0x45e219 [ 1910.809638] 0 2717 [ 1910.812722] RSP: 002b:00007f1258c35c68 EFLAGS: 00000246 [ 1910.816003] Bluetooth: hci0 command 0x0419 tx timeout [ 1910.818118] ORIG_RAX: 0000000000000010 [ 1910.823486] 2718 [ 1910.828708] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1910.828713] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1910.828718] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1910.828723] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1910.828728] R13: 00007ffc959d86ff R14: 00007f1258c369c0 R15: 000000000119bf8c [ 1911.229475] 2718 2718 [ 1911.232011] Node 0 DMA32 free:17768kB min:36200kB low:45248kB high:54296kB active_anon:65388kB inactive_anon:108124kB active_file:12kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:6976kB pagetables:2412kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1911.319623] lowmem_reserve[]: 0 0 0 0 0 [ 1911.382068] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1911.428471] Mem-Info: [ 1911.429338] lowmem_reserve[]: 0 0 0 0 0 [ 1911.432774] active_anon:16625 inactive_anon:27044 isolated_anon:0 [ 1911.432774] active_file:313 inactive_file:455 isolated_file:32 [ 1911.432774] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1911.432774] slab_reclaimable:12465 slab_unreclaimable:110810 [ 1911.432774] mapped:35293 shmem:27413 pagetables:677 bounce:0 [ 1911.432774] free:18857 free_pcp:116 free_cma:0 [ 1911.435908] Node 1 Normal free:27164kB min:53696kB low:67120kB high:80544kB active_anon:1084kB inactive_anon:48kB active_file:132kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:292kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 1911.505271] lowmem_reserve[]: 0 0 0 0 0 [ 1911.517536] Node 0 DMA: 1*4kB (M) 4*8kB (M) 6*16kB (M) 4*32kB (UM) 5*64kB (M) 4*128kB (UM) 5*256kB (UM) 1*512kB (U) 0*1024kB 2*2048kB (M) 1*4096kB (M) = 11076kB [ 1911.533022] Node 0 DMA32: 976*4kB (UME) 702*8kB (UMEH) 413*16kB (UMEH) 240*32kB (UMEH) 187*64kB (UMEH) 1*128kB (U) 2*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 37440kB [ 1911.549511] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1911.560739] Node 1 Normal: 117*4kB (UME) 120*8kB (UM) 74*16kB (UME) 43*32kB (UM) 25*64kB (M) 24*128kB (UM) 7*256kB (ME) 5*512kB (ME) 2*1024kB (ME) 4*2048kB (UM) 1*4096kB (M) = 27348kB [ 1911.565040] Node 0 active_anon:65516kB inactive_anon:108128kB active_file:68kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139372kB dirty:0kB writeback:0kB shmem:109580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1911.577729] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1911.614607] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1911.624321] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1911.664092] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1911.673085] 28195 total pagecache pages [ 1911.677518] 0 pages in swap cache [ 1911.681364] Swap cache stats: add 0, delete 0, find 0/0 [ 1911.687127] Free swap = 0kB [ 1911.690509] Total swap = 0kB [ 1911.692336] Node 1 active_anon:1084kB inactive_anon:48kB active_file:132kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:72kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1911.693844] 2097051 pages RAM [ 1911.725193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1911.725624] 0 pages HighMem/MovableOnly [ 1911.736026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1911.741779] 363840 pages reserved [ 1911.746157] 0 pages cma reserved [ 1911.749893] Out of memory (oom_kill_allocating_task): Kill process 16668 (systemd-cgroups) score 0 or sacrifice child [ 1911.762895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1911.764610] Killed process 16668 (systemd-cgroups) total-vm:22208kB, anon-rss:104kB, file-rss:0kB, shmem-rss:0kB [ 1911.784215] Node 0 DMA free:11112kB min:204kB low:252kB high:300kB active_anon:28kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1911.797087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1911.816020] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1911.822425] Node 0 DMA32 free:36580kB min:36200kB low:45248kB high:54296kB active_anon:65388kB inactive_anon:108124kB active_file:1200kB inactive_file:1736kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:6976kB pagetables:2412kB bounce:0kB free_pcp:456kB local_pcp:240kB free_cma:0kB [ 1911.835490] device bridge_slave_1 left promiscuous mode [ 1911.852447] lowmem_reserve[]: 0 0 0 0 0 [ 1911.862224] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1911.888387] lowmem_reserve[]: 0 0 0 0 0 [ 1911.892751] Node 1 Normal free:27464kB min:53696kB low:67120kB high:80544kB active_anon:1084kB inactive_anon:48kB active_file:132kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:292kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1911.921259] lowmem_reserve[]: 0 0 0 0 0 [ 1911.925708] Node 0 DMA: 8*4kB (UM) 7*8kB (UM) 7*16kB (UM) 2*32kB (M) 5*64kB (UM) 4*128kB (M) 5*256kB (UM) 1*512kB (U) 0*1024kB 2*2048kB (M) 1*4096kB (M) = 11080kB [ 1911.941854] Node 0 DMA32: 1082*4kB (UMEH) 827*8kB (UMEH) 435*16kB (UMEH) 243*32kB (UMEH) 187*64kB (UMEH) 1*128kB (U) 2*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 39312kB [ 1911.958326] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1911.967526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1911.969425] Node 1 Normal: 119*4kB (UME) 112*8kB (UM) 70*16kB (UME) 41*32kB (UM) 31*64kB (M) 24*128kB (UM) 7*256kB (ME) 5*512kB (ME) 2*1024kB (ME) 4*2048kB (UM) 1*4096kB (M) = 27548kB [ 1911.993738] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1912.002787] device bridge_slave_0 left promiscuous mode [ 1912.023176] bridge0: port 1(bridge_slave_0) entered disabled state [ 1912.025228] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1912.078218] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1912.087202] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1912.095872] 27607 total pagecache pages [ 1912.100213] 0 pages in swap cache [ 1912.104008] device veth1_macvtap left promiscuous mode [ 1912.104037] Swap cache stats: add 0, delete 0, find 0/0 [ 1912.112193] device veth0_macvtap left promiscuous mode [ 1912.115061] Free swap = 0kB [ 1912.123377] Total swap = 0kB [ 1912.126853] 2097051 pages RAM [ 1912.130312] 0 pages HighMem/MovableOnly [ 1912.132641] device veth1_vlan left promiscuous mode [ 1912.134630] 363840 pages reserved [ 1912.143218] 0 pages cma reserved [ 1912.145814] device veth0_vlan left promiscuous mode [ 1912.370995] systemd[1]: rsyslog.service: Unit entered failed state. [ 1912.425621] device hsr_slave_1 left promiscuous mode [ 1912.447400] device hsr_slave_0 left promiscuous mode [ 1912.482693] team0 (unregistering): Port device team_slave_1 removed [ 1912.506608] team0 (unregistering): Port device team_slave_0 removed [ 1912.529455] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1912.561371] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1912.613186] bond0 (unregistering): Released all slaves [ 1912.619784] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1912.711770] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1912.720732] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1912.743043] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1912.745682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1912.763565] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1912.763983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1912.775436] systemd[1]: Stopped Journal Service. [ 1912.801096] device veth0_macvtap entered promiscuous mode [ 1912.807868] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1912.817677] systemd[1]: Starting Journal Service... [ 1912.842157] device veth1_macvtap entered promiscuous mode [ 1912.844082] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1912.849984] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1912.878836] systemd[1]: Stopped System Logging Service. [ 1912.880761] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1912.904115] systemd[1]: Starting System Logging Service... [ 1912.920823] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1912.940696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1912.970978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1912.980266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1913.004595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.033564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1913.065371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.086561] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1913.115736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1913.124175] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1913.148887] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1913.166125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1913.174003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1913.201480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1913.220112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.252579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1913.288634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.307095] systemd-journald[16686]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1913.308331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1913.365574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.386125] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1913.393107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1913.397343] systemd-journald[16686]: /dev/kmsg buffer overrun, some messages lost. [ 1913.419297] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1913.427048] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1913.445780] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1913.452007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1913.460381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1913.499617] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1913.516511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1913.523940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1913.540697] systemd[1]: Started System Logging Service. [ 1913.548539] device veth0_vlan entered promiscuous mode [ 1913.556293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1913.582234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1913.618810] device veth1_vlan entered promiscuous mode [ 1913.624909] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1913.656063] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1913.673801] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1913.711788] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1913.723282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1913.734178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1913.751682] device veth0_macvtap entered promiscuous mode [ 1913.759379] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1913.771324] device veth1_macvtap entered promiscuous mode [ 1913.783854] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1913.823253] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1913.851317] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1913.870294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1913.890904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.900973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1913.927905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.945568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1913.965519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.974645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1914.004238] systemd[1]: Started Journal Service. [ 1914.015601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1914.044367] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1914.058882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1914.067021] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1914.076671] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1914.083879] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1914.092657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1914.107051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1914.125697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1914.134815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1914.149246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1914.159629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1914.180257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1914.189710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1914.200650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1914.211904] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1914.219702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1914.228751] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1914.238342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1914.887768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1914.894490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1914.907590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1914.914370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1914.926461] device bridge_slave_1 left promiscuous mode [ 1914.932074] bridge0: port 2(bridge_slave_1) entered disabled state [ 1914.943912] device bridge_slave_0 left promiscuous mode [ 1914.950242] bridge0: port 1(bridge_slave_0) entered disabled state [ 1914.963353] device veth1_macvtap left promiscuous mode [ 1914.970050] device veth0_macvtap left promiscuous mode [ 1914.981973] device veth1_vlan left promiscuous mode [ 1914.987864] device veth0_vlan left promiscuous mode [ 1915.108965] device hsr_slave_1 left promiscuous mode [ 1915.121178] device hsr_slave_0 left promiscuous mode [ 1915.143777] team0 (unregistering): Port device team_slave_1 removed [ 1915.157397] team0 (unregistering): Port device team_slave_0 removed [ 1915.172406] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1915.183168] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1915.224226] bond0 (unregistering): Released all slaves 23:23:06 executing program 4: socketpair(0x0, 0x1, 0x0, 0x0) 23:23:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x20a240, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x40, 0x2, 0x2, "81d82a45fc4da6389ddb725ce3f177ff6dae5de4864a5a5400", 0x33424752}) 23:23:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x9}, 0x0, 0x40000000, 0x0, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:23:06 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080028bd7000fcdbdf250e000000080006003f0000005800018008000500010007000800060077727200bb23ce235c2eeef10c92325cd159cc0c00070011000000010000000c000700300000002d00000007000600727200000600020000000000080008000010000014000300acf6c5e93a0de572c1d49817d5dbef0cbcdcaa63f445b4db35e1ac8ed293b5cb44dc93e6f73a7596429db80c5c1faa4b121385ce6c596d8595d4438a2af49acc4e083c84"], 0x74}, 0x1, 0x0, 0x0, 0x8004}, 0x8010) write$sndseq(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) accept4$packet(r1, 0x0, &(0x7f0000000040), 0x80800) 23:23:08 executing program 4: socketpair(0x28, 0x0, 0x0, 0x0) 23:23:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x3ca26104, 0x0, 0x9}, 0x9, 0x40000000, &(0x7f00000000c0)={{0x9, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:23:08 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x0, 0x0, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:23:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x9}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x0, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:23:08 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x6, 0x3, 0x2}) write$sndseq(r0, 0x0, 0x0) 23:23:08 executing program 4: socketpair(0x28, 0x0, 0x0, 0x0) 23:23:08 executing program 3: r0 = getpid() syz_open_procfs(r0, 0x0) getpid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/dev_mcast\x00') write$sndseq(r1, 0x0, 0x0) 23:23:08 executing program 4: socketpair(0x28, 0x0, 0x0, 0x0) 23:23:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x2c, 0xc, 0xdc000000, &(0x7f0000000000)) r1 = accept4(r0, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80, 0x80000) getsockopt$inet6_tcp_int(r1, 0x6, 0x8, 0x0, &(0x7f0000000200)=0x6b) 23:23:08 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='maps\x00') write$sndseq(r1, 0x0, 0x0) 23:23:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x2c, 0xc, 0xdc000000, &(0x7f0000000000)) r1 = accept4(r0, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80, 0x80000) getsockopt$inet6_tcp_int(r1, 0x6, 0x8, 0x0, &(0x7f0000000200)=0x6b) [ 1917.962589] IPVS: ftp: loaded support on port[0] = 21 [ 1918.153658] chnl_net:caif_netlink_parms(): no params data found [ 1918.239607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1918.247089] bridge0: port 1(bridge_slave_0) entered disabled state [ 1918.254471] device bridge_slave_0 entered promiscuous mode [ 1918.264928] bridge0: port 2(bridge_slave_1) entered blocking state [ 1918.272002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1918.279998] device bridge_slave_1 entered promiscuous mode [ 1918.323676] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1918.333275] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1918.359372] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1918.367147] team0: Port device team_slave_0 added [ 1918.372887] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1918.381565] team0: Port device team_slave_1 added [ 1918.404755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1918.411556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1918.438833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1918.450799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1918.457884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1918.483950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1918.501367] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1918.509080] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1918.545232] device hsr_slave_0 entered promiscuous mode [ 1918.551306] device hsr_slave_1 entered promiscuous mode [ 1918.560838] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1918.568456] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1918.714190] bridge0: port 2(bridge_slave_1) entered blocking state [ 1918.720603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1918.727264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1918.733625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1918.773522] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1918.779868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1918.789683] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1918.799629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1918.807026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1918.813803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1918.824601] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1918.831118] 8021q: adding VLAN 0 to HW filter on device team0 [ 1918.841808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1918.850711] bridge0: port 1(bridge_slave_0) entered blocking state [ 1918.857239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1918.875660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1918.884469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1918.891035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1918.911751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1918.923126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1918.938360] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1918.952498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1918.963840] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1918.974045] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1918.981930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1918.993249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1919.010721] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1919.018213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1919.030115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1919.040884] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1919.050083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1919.135314] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1919.151081] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1919.163608] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1919.174556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1919.185393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1919.234650] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1919.242572] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1919.254170] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1919.268298] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1919.274897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1919.283775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1919.298326] device veth0_vlan entered promiscuous mode [ 1919.305947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1919.313222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1919.327338] device veth1_vlan entered promiscuous mode [ 1919.333319] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1919.347981] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1919.364181] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1919.374847] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1919.386020] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1919.393634] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1919.403517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1919.413931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1919.426723] device veth0_macvtap entered promiscuous mode [ 1919.432974] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1919.447153] device veth1_macvtap entered promiscuous mode [ 1919.453452] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1919.468290] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1919.481183] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1919.491240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1919.504356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.514184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1919.527539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.540147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1919.553540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.563365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1919.577385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.588434] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1919.598770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1919.606666] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1919.614392] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1919.624909] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1919.633797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1919.646598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1919.661016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.670962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1919.684023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.693661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1919.708306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.717664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1919.731194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.742425] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1919.753214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1919.760489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1919.772503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1919.828457] IPVS: ftp: loaded support on port[0] = 21 [ 1920.015181] Bluetooth: hci1 command 0x0409 tx timeout [ 1920.082975] chnl_net:caif_netlink_parms(): no params data found [ 1920.233468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1920.261596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1920.278065] device bridge_slave_0 entered promiscuous mode 23:23:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000000)=""/173, &(0x7f00000000c0)=0xad) 23:23:11 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000040)={{0xf3, 0x3}, 0x0, 0x0, 0x8, {0x68, 0x5}, 0x3, 0xe89}) [ 1920.290895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1920.306323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1920.333107] device bridge_slave_1 entered promiscuous mode [ 1920.409760] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1920.422042] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1920.452482] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1920.463668] team0: Port device team_slave_0 added [ 1920.470152] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1920.481834] team0: Port device team_slave_1 added [ 1920.513895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1920.524050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1920.554310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1920.570850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1920.581481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1920.611065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1920.622700] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1920.635378] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1920.672201] device hsr_slave_0 entered promiscuous mode [ 1920.678268] device hsr_slave_1 entered promiscuous mode [ 1920.686095] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1920.693246] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1920.804254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1920.810663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1920.817318] bridge0: port 1(bridge_slave_0) entered blocking state [ 1920.823669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1920.874578] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1920.883884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1920.894997] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1920.904106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1920.916755] bridge0: port 1(bridge_slave_0) entered disabled state [ 1920.923628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1920.938768] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1920.944837] 8021q: adding VLAN 0 to HW filter on device team0 [ 1920.960620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1920.968801] bridge0: port 1(bridge_slave_0) entered blocking state [ 1920.975192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1920.994592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1921.002895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1921.009283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1921.032303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1921.043729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1921.052532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1921.067861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1921.082440] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1921.088620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1921.099381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1921.106909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1921.125521] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1921.141091] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1921.147686] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1921.154812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1921.163021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1921.174663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1921.264077] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1921.279331] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1921.289458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1921.302531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1921.356382] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1921.363674] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1921.374610] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1921.390528] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1921.398350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1921.409949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1921.419704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1921.430138] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1921.440687] device veth0_vlan entered promiscuous mode [ 1921.457510] device veth1_vlan entered promiscuous mode [ 1921.463570] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1921.478166] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1921.494450] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1921.509430] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1921.517858] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1921.528939] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1921.537516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1921.549561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1921.560520] device veth0_macvtap entered promiscuous mode [ 1921.570993] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1921.582139] device veth1_macvtap entered promiscuous mode [ 1921.592071] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1921.603255] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1921.623333] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1921.637921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1921.650016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1921.662418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1921.676376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1921.687312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1921.699017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1921.710566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1921.722268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1921.733358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1921.746876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1921.758584] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1921.768764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1921.777211] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1921.787639] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1921.796583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1921.804609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1921.819349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1921.830834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1921.843274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1921.855121] Bluetooth: hci4 command 0x0409 tx timeout [ 1921.865839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1921.877895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1921.889020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1921.902004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1921.912944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1921.926119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1921.938217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1921.951254] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1921.960555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1921.969790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1921.980235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1922.095316] Bluetooth: hci1 command 0x041b tx timeout [ 1923.188939] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1923.201588] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1923.208538] CPU: 0 PID: 7998 Comm: syz-fuzzer Not tainted 4.14.214-syzkaller #0 [ 1923.215993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1923.225435] Call Trace: [ 1923.228123] dump_stack+0x1b2/0x283 [ 1923.231743] dump_header+0x178/0x82f [ 1923.235449] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1923.240540] ? ___ratelimit+0x2cd/0x522 [ 1923.244507] oom_kill_process.cold+0x10/0xb18 [ 1923.248998] out_of_memory+0xe3e/0x1190 [ 1923.252967] ? oom_killer_disable+0x1c0/0x1c0 [ 1923.257467] ? mutex_trylock+0x152/0x1a0 [ 1923.261521] __alloc_pages_nodemask+0x23e1/0x2720 [ 1923.266371] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1923.271238] alloc_pages_current+0x155/0x260 [ 1923.275640] filemap_fault+0xea3/0x1980 [ 1923.279613] ext4_filemap_fault+0x84/0xb0 [ 1923.283752] __do_fault+0xfa/0x380 [ 1923.287282] __handle_mm_fault+0x2497/0x4620 [ 1923.291680] ? vm_insert_page+0x7c0/0x7c0 [ 1923.295819] ? __fsnotify_inode_delete+0x20/0x20 [ 1923.300569] ? setup_sigcontext+0x820/0x820 [ 1923.304884] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1923.311548] handle_mm_fault+0x391/0x860 [ 1923.315603] __do_page_fault+0x549/0xad0 [ 1923.319659] ? spurious_fault+0x640/0x640 [ 1923.323807] ? do_page_fault+0x60/0x4f2 [ 1923.327780] ? page_fault+0x2f/0x50 [ 1923.331406] page_fault+0x45/0x50 [ 1923.334850] RIP: ad800:0xb3557f [ 1923.338114] RSP: 0008:000000c0046cf928 EFLAGS: 00000003 [ 1923.562958] Mem-Info: [ 1923.574727] active_anon:18064 inactive_anon:29078 isolated_anon:0 [ 1923.574727] active_file:21 inactive_file:0 isolated_file:0 [ 1923.574727] unevictable:0 dirty:33 writeback:0 unstable:0 [ 1923.574727] slab_reclaimable:12583 slab_unreclaimable:114126 [ 1923.574727] mapped:52675 shmem:29462 pagetables:788 bounce:0 [ 1923.574727] free:25049 free_pcp:1 free_cma:0 [ 1923.675869] Node 0 active_anon:71636kB inactive_anon:116256kB active_file:100kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210680kB dirty:80kB writeback:0kB shmem:117776kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1923.766817] Node 1 active_anon:620kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:52kB writeback:0kB shmem:72kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1923.802112] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1923.846343] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1923.851402] Node 0 DMA32 free:35840kB min:36200kB low:45248kB high:54296kB active_anon:69588kB inactive_anon:116252kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:480kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:3028kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1923.935617] Bluetooth: hci4 command 0x041b tx timeout [ 1923.938954] lowmem_reserve[]: 0 0 0 0 0 [ 1923.944881] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1923.974699] lowmem_reserve[]: 0 0 0 0 0 [ 1923.978792] Node 1 Normal free:53424kB min:53696kB low:67120kB high:80544kB active_anon:528kB inactive_anon:56kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1924.010745] lowmem_reserve[]: 0 0 0 0 0 [ 1924.015124] Node 0 DMA: 1*4kB (M) 1*8kB (M) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 5*128kB (UM) 6*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (M) 1*4096kB (M) = 11068kB [ 1924.033967] Node 0 DMA32: 1279*4kB (UME) 706*8kB (UME) 353*16kB (UME) 131*32kB (ME) 66*64kB (UME) 32*128kB (UM) 6*256kB (M) 3*512kB (UM) 4*1024kB (M) 0*2048kB 0*4096kB = 36092kB [ 1924.056316] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1924.067241] Node 1 Normal: 88*4kB (UME) 72*8kB (M) 57*16kB (ME) 52*32kB (UM) 32*64kB (UM) 16*128kB (UM) 13*256kB (UME) 5*512kB (ME) 3*1024kB (UME) 4*2048kB (UM) 7*4096kB (UM) = 53424kB [ 1924.083969] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1924.092845] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1924.101887] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1924.111342] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1924.119954] 29485 total pagecache pages [ 1924.123926] 0 pages in swap cache [ 1924.127446] Swap cache stats: add 0, delete 0, find 0/0 [ 1924.132791] Free swap = 0kB [ 1924.135834] Total swap = 0kB [ 1924.138839] 2097051 pages RAM [ 1924.141929] 0 pages HighMem/MovableOnly [ 1924.146069] 363840 pages reserved [ 1924.149502] 0 pages cma reserved [ 1924.152840] Out of memory (oom_kill_allocating_task): Kill process 7998 (syz-fuzzer) score 0 or sacrifice child [ 1924.163130] Killed process 16766 (syz-executor.5) total-vm:85024kB, anon-rss:1724kB, file-rss:4kB, shmem-rss:0kB [ 1924.175052] Bluetooth: hci1 command 0x040f tx timeout [ 1924.241300] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1924.285251] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1924.290051] CPU: 0 PID: 7978 Comm: syz-fuzzer Not tainted 4.14.214-syzkaller #0 [ 1924.297486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1924.306829] Call Trace: [ 1924.309400] dump_stack+0x1b2/0x283 [ 1924.313023] dump_header+0x178/0x82f [ 1924.316722] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1924.321812] ? ___ratelimit+0x2cd/0x522 [ 1924.325771] oom_kill_process.cold+0x10/0xb18 [ 1924.330268] out_of_memory+0xe3e/0x1190 [ 1924.334232] ? oom_killer_disable+0x1c0/0x1c0 [ 1924.338722] ? mutex_trylock+0x152/0x1a0 [ 1924.342771] __alloc_pages_nodemask+0x23e1/0x2720 [ 1924.347598] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1924.352428] alloc_pages_current+0x155/0x260 [ 1924.356819] filemap_fault+0xea3/0x1980 [ 1924.360778] ext4_filemap_fault+0x84/0xb0 [ 1924.364906] __do_fault+0xfa/0x380 [ 1924.368426] __handle_mm_fault+0x2497/0x4620 [ 1924.372826] ? vm_insert_page+0x7c0/0x7c0 [ 1924.376964] handle_mm_fault+0x391/0x860 [ 1924.381006] __do_page_fault+0x549/0xad0 [ 1924.385049] ? spurious_fault+0x640/0x640 [ 1924.389174] ? do_page_fault+0x60/0x4f2 [ 1924.393122] ? page_fault+0x2f/0x50 [ 1924.396730] page_fault+0x45/0x50 [ 1924.400158] RIP: 0001:0x1c04a04efe6 [ 1924.403756] RSP: 0000:00007ffebb3e9f80 EFLAGS: 1c04a04efe6 [ 1924.422351] Mem-Info: [ 1924.444852] active_anon:17585 inactive_anon:29078 isolated_anon:0 [ 1924.444852] active_file:35 inactive_file:145 isolated_file:0 [ 1924.444852] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1924.444852] slab_reclaimable:12581 slab_unreclaimable:114061 [ 1924.444852] mapped:43989 shmem:29462 pagetables:735 bounce:0 [ 1924.444852] free:25417 free_pcp:95 free_cma:0 [ 1924.482721] Node 0 active_anon:69812kB inactive_anon:116256kB active_file:236kB inactive_file:604kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:176156kB dirty:0kB writeback:0kB shmem:117776kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1924.517635] Node 1 active_anon:528kB inactive_anon:56kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:72kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1924.563730] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1924.599583] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1924.608367] Node 0 DMA32 free:40876kB min:36200kB low:45248kB high:54296kB active_anon:67764kB inactive_anon:116252kB active_file:1736kB inactive_file:3504kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2932kB bounce:0kB free_pcp:228kB local_pcp:52kB free_cma:0kB [ 1924.647288] lowmem_reserve[]: 0 0 0 0 0 [ 1924.664852] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1924.722067] lowmem_reserve[]: 0 0 0 0 0 [ 1924.726191] Node 1 Normal free:55316kB min:53696kB low:67120kB high:80544kB active_anon:528kB inactive_anon:56kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:8kB bounce:0kB free_pcp:208kB local_pcp:208kB free_cma:0kB [ 1924.766486] lowmem_reserve[]: 0 0 0 0 0 [ 1924.772261] Node 0 DMA: 1*4kB (M) 1*8kB (M) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 5*128kB (UM) 6*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (M) 1*4096kB (M) = 11068kB [ 1924.793378] Node 0 DMA32: 2882*4kB (UME) 631*8kB (UME) 284*16kB (ME) 121*32kB (ME) 60*64kB (ME) 26*128kB (M) 4*256kB (M) 3*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 36768kB [ 1924.813617] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1924.830820] Node 1 Normal: 77*4kB (UME) 69*8kB (UM) 56*16kB (UME) 53*32kB (UM) 36*64kB (UM) 16*128kB (UM) 12*256kB (UME) 6*512kB (ME) 3*1024kB (UME) 4*2048kB (UM) 7*4096kB (UM) = 53884kB [ 1924.852320] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1924.861740] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1924.875116] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1924.884326] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1924.898999] 29675 total pagecache pages [ 1924.903003] 0 pages in swap cache [ 1924.909275] Swap cache stats: add 0, delete 0, find 0/0 [ 1924.917896] Free swap = 0kB [ 1924.921234] Total swap = 0kB [ 1924.926198] 2097051 pages RAM [ 1924.929312] 0 pages HighMem/MovableOnly [ 1924.933282] 363840 pages reserved [ 1924.939391] 0 pages cma reserved [ 1924.942752] Out of memory (oom_kill_allocating_task): Kill process 7978 (syz-fuzzer) score 0 or sacrifice child [ 1924.954376] Killed process 16986 (syz-executor.2) total-vm:85024kB, anon-rss:72kB, file-rss:4kB, shmem-rss:0kB [ 1924.978966] oom_reaper: reaped process 16986 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1925.176457] oom_reaper: reaped process 16776 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1925.200486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1925.210472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1925.303825] syz-executor.0 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1925.318526] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1925.323735] CPU: 1 PID: 16776 Comm: syz-executor.0 Not tainted 4.14.214-syzkaller #0 [ 1925.331597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1925.341046] Call Trace: [ 1925.343617] dump_stack+0x1b2/0x283 [ 1925.347225] dump_header+0x178/0x82f [ 1925.350956] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1925.356035] ? ___ratelimit+0x2cd/0x522 [ 1925.359991] oom_kill_process.cold+0x10/0xb18 [ 1925.364470] out_of_memory+0xe3e/0x1190 [ 1925.368425] ? oom_killer_disable+0x1c0/0x1c0 [ 1925.372895] ? mutex_trylock+0x152/0x1a0 [ 1925.376932] __alloc_pages_nodemask+0x23e1/0x2720 [ 1925.381757] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1925.386585] alloc_pages_current+0x155/0x260 [ 1925.390970] __vmalloc_area_node+0x40a/0x680 [ 1925.395355] ? __vmalloc_node_range+0x150/0x150 [ 1925.399997] ? __get_vm_area_node+0x27d/0x340 [ 1925.404466] __vmalloc_node_range+0xbe/0x150 [ 1925.408856] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1925.414195] vmalloc_user+0x47/0xa0 [ 1925.417795] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1925.422090] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1925.427427] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1925.431591] __vb2_queue_alloc+0x47a/0xd90 [ 1925.435807] vb2_core_create_bufs+0x279/0x5a0 [ 1925.440281] ? __vb2_queue_free+0x7a0/0x7a0 [ 1925.444686] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1925.450022] ? trace_hardirqs_on+0x10/0x10 [ 1925.454231] vb2_create_bufs+0x2e1/0x5b0 [ 1925.458269] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 1925.463345] ? vb2_thread_start.cold+0x24/0x24 [ 1925.467900] ? trace_hardirqs_on+0x10/0x10 [ 1925.472130] v4l_create_bufs+0xa4/0x150 [ 1925.476093] __video_do_ioctl+0x65b/0x6a0 [ 1925.480224] ? video_ioctl2+0x30/0x30 [ 1925.484007] ? __might_fault+0x177/0x1b0 [ 1925.488052] video_usercopy+0xf5/0xe90 [ 1925.491927] ? video_ioctl2+0x30/0x30 [ 1925.495709] ? v4l_g_ctrl+0x390/0x390 [ 1925.499486] ? lock_acquire+0x170/0x3f0 [ 1925.503439] ? trace_hardirqs_on+0x10/0x10 [ 1925.507652] ? trace_hardirqs_on+0x10/0x10 [ 1925.511864] ? futex_exit_release+0x220/0x220 [ 1925.516334] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1925.521412] ? __might_fault+0x104/0x1b0 [ 1925.525452] v4l2_ioctl+0x1bb/0x2f0 [ 1925.529066] ? v4l2_open+0x2f0/0x2f0 [ 1925.532754] do_vfs_ioctl+0x75a/0xff0 [ 1925.536533] ? ioctl_preallocate+0x1a0/0x1a0 [ 1925.540914] ? lock_downgrade+0x740/0x740 [ 1925.545038] ? __fget+0x225/0x360 [ 1925.548479] ? do_vfs_ioctl+0xff0/0xff0 [ 1925.552433] ? security_file_ioctl+0x83/0xb0 [ 1925.556817] SyS_ioctl+0x7f/0xb0 [ 1925.560159] ? do_vfs_ioctl+0xff0/0xff0 [ 1925.564134] do_syscall_64+0x1d5/0x640 [ 1925.568001] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1925.573165] RIP: 0033:0x45e219 [ 1925.576328] RSP: 002b:00007f1ac3343c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1925.584010] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1925.591255] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1925.598499] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1925.605743] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1925.612987] R13: 00007ffc3c007fbf R14: 00007f1ac33449c0 R15: 000000000119bf8c [ 1925.625966] Mem-Info: [ 1925.628390] active_anon:16994 inactive_anon:29076 isolated_anon:0 [ 1925.628390] active_file:24 inactive_file:0 isolated_file:0 [ 1925.628390] unevictable:0 dirty:1 writeback:1 unstable:0 [ 1925.628390] slab_reclaimable:12573 slab_unreclaimable:113327 [ 1925.628390] mapped:35255 shmem:29458 pagetables:660 bounce:0 [ 1925.628390] free:14095 free_pcp:9 free_cma:0 [ 1925.663615] Node 0 active_anon:67656kB inactive_anon:116248kB active_file:0kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141020kB dirty:4kB writeback:4kB shmem:117760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1925.691511] Node 1 active_anon:320kB inactive_anon:56kB active_file:0kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:72kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1925.717690] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1925.743882] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1925.755830] Node 0 DMA32 free:18852kB min:36200kB low:45248kB high:54296kB active_anon:67656kB inactive_anon:116244kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7072kB pagetables:2640kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1925.788483] lowmem_reserve[]: 0 0 0 0 0 [ 1925.792486] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1925.820010] lowmem_reserve[]: 0 0 0 0 0 [ 1925.824093] Node 1 Normal free:26904kB min:53696kB low:67120kB high:80544kB active_anon:320kB inactive_anon:56kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1925.852156] lowmem_reserve[]: 0 0 0 0 0 [ 1925.856190] Node 0 DMA: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 2*2048kB (M) 1*4096kB (M) = 10964kB [ 1925.871359] Node 0 DMA32: 1191*4kB (UME) 630*8kB (UME) 281*16kB (UME) 83*32kB (UME) 26*64kB (UME) 5*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19260kB [ 1925.886519] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1925.897231] Node 1 Normal: 54*4kB (UME) 55*8kB (M) 46*16kB (ME) 44*32kB (UM) 31*64kB (M) 17*128kB (UM) 14*256kB (UME) 6*512kB (ME) 3*1024kB (UME) 3*2048kB (M) 1*4096kB (M) = 26928kB [ 1925.913683] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1925.922533] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1925.931145] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1925.940061] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1925.948680] 29483 total pagecache pages [ 1925.952641] 0 pages in swap cache [ 1925.956111] Swap cache stats: add 0, delete 0, find 0/0 [ 1925.961460] Free swap = 0kB [ 1925.964461] Total swap = 0kB [ 1925.967508] 2097051 pages RAM [ 1925.970597] 0 pages HighMem/MovableOnly [ 1925.974543] 363840 pages reserved [ 1925.977995] 0 pages cma reserved [ 1925.981336] Out of memory (oom_kill_allocating_task): Kill process 16776 (syz-executor.0) score 0 or sacrifice child [ 1925.992030] Killed process 16776 (syz-executor.0) total-vm:93348kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1926.006849] syz-executor.0: vmalloc: allocation failure, allocated 612683776 of 1073745920 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1926.016672] kworker/u4:6 invoked oom-killer: gfp_mask=0x14142c0(GFP_KERNEL|__GFP_NOWARN|__GFP_COMP|__GFP_NOMEMALLOC), nodemask=(null), order=1, oom_score_adj=0 [ 1926.021196] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1926.040623] CPU: 1 PID: 16776 Comm: syz-executor.0 Not tainted 4.14.214-syzkaller #0 [ 1926.048494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1926.051138] kworker/u4:6 cpuset= [ 1926.057832] Call Trace: [ 1926.057849] dump_stack+0x1b2/0x283 [ 1926.057863] warn_alloc.cold+0x96/0x1cc [ 1926.057872] ? zone_watermark_ok_safe+0x220/0x220 [ 1926.061216] / [ 1926.063794] __vmalloc_area_node+0x48a/0x680 [ 1926.063809] ? __vmalloc_node_range+0x150/0x150 [ 1926.067604] mems_allowed=0-1 [ 1926.071541] ? __get_vm_area_node+0x27d/0x340 [ 1926.094632] __vmalloc_node_range+0xbe/0x150 [ 1926.099023] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1926.104366] vmalloc_user+0x47/0xa0 [ 1926.107975] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1926.112274] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1926.117614] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1926.121772] __vb2_queue_alloc+0x47a/0xd90 [ 1926.126086] vb2_core_create_bufs+0x279/0x5a0 [ 1926.130562] ? __vb2_queue_free+0x7a0/0x7a0 [ 1926.134872] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1926.140223] ? trace_hardirqs_on+0x10/0x10 [ 1926.144441] vb2_create_bufs+0x2e1/0x5b0 [ 1926.148488] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 1926.153584] ? vb2_thread_start.cold+0x24/0x24 [ 1926.158166] ? trace_hardirqs_on+0x10/0x10 [ 1926.162384] v4l_create_bufs+0xa4/0x150 [ 1926.166339] __video_do_ioctl+0x65b/0x6a0 [ 1926.170467] ? video_ioctl2+0x30/0x30 [ 1926.174263] ? __might_fault+0x177/0x1b0 [ 1926.178307] video_usercopy+0xf5/0xe90 [ 1926.182176] ? video_ioctl2+0x30/0x30 [ 1926.185955] ? v4l_g_ctrl+0x390/0x390 [ 1926.189732] ? lock_acquire+0x170/0x3f0 [ 1926.193682] ? trace_hardirqs_on+0x10/0x10 [ 1926.197894] ? trace_hardirqs_on+0x10/0x10 [ 1926.202114] ? futex_exit_release+0x220/0x220 [ 1926.206588] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1926.211670] ? __might_fault+0x104/0x1b0 [ 1926.215711] v4l2_ioctl+0x1bb/0x2f0 [ 1926.219314] ? v4l2_open+0x2f0/0x2f0 [ 1926.223007] do_vfs_ioctl+0x75a/0xff0 [ 1926.226787] ? ioctl_preallocate+0x1a0/0x1a0 [ 1926.231174] ? lock_downgrade+0x740/0x740 [ 1926.235303] ? __fget+0x225/0x360 [ 1926.238735] ? do_vfs_ioctl+0xff0/0xff0 [ 1926.242688] ? security_file_ioctl+0x83/0xb0 [ 1926.247076] SyS_ioctl+0x7f/0xb0 [ 1926.250419] ? do_vfs_ioctl+0xff0/0xff0 [ 1926.254371] do_syscall_64+0x1d5/0x640 [ 1926.258243] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1926.263412] RIP: 0033:0x45e219 [ 1926.266581] RSP: 002b:00007f1ac3343c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1926.274268] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1926.281521] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1926.288774] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1926.296025] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1926.303275] R13: 00007ffc3c007fbf R14: 00007f1ac33449c0 R15: 000000000119bf8c [ 1926.310539] CPU: 0 PID: 8657 Comm: kworker/u4:6 Not tainted 4.14.214-syzkaller #0 [ 1926.311922] Mem-Info: [ 1926.318158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1926.318172] Workqueue: netns cleanup_net [ 1926.318178] Call Trace: [ 1926.318189] dump_stack+0x1b2/0x283 [ 1926.318200] dump_header+0x178/0x82f [ 1926.318211] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1926.318220] ? ___ratelimit+0x2cd/0x522 [ 1926.320620] active_anon:16992 inactive_anon:29076 isolated_anon:0 [ 1926.320620] active_file:12 inactive_file:13 isolated_file:0 [ 1926.320620] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1926.320620] slab_reclaimable:12572 slab_unreclaimable:113336 [ 1926.320620] mapped:35241 shmem:29458 pagetables:660 bounce:0 [ 1926.320620] free:14296 free_pcp:1 free_cma:0 [ 1926.329961] oom_kill_process.cold+0x10/0xb18 [ 1926.329973] ? lock_downgrade+0x740/0x740 [ 1926.329984] out_of_memory+0x2dc/0x1190 [ 1926.329996] ? oom_killer_disable+0x1c0/0x1c0 [ 1926.330004] ? mutex_trylock+0x152/0x1a0 [ 1926.330013] __alloc_pages_nodemask+0x23e1/0x2720 [ 1926.330031] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1926.334079] Node 0 active_anon:67648kB inactive_anon:116248kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140964kB dirty:0kB writeback:0kB shmem:117760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1926.336634] ? cleanup_net+0x3b3/0x840 [ 1926.336641] ? process_one_work+0x793/0x14a0 [ 1926.336656] ? mark_held_locks+0xa6/0xf0 [ 1926.336667] ? cache_grow_begin+0x41/0x630 [ 1926.340277] Node 1 active_anon:320kB inactive_anon:56kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:72kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1926.343972] cache_grow_begin+0x91/0x630 [ 1926.349092] Node 0 [ 1926.353017] ? cache_grow_begin+0x91/0x630 [ 1926.386202] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1926.390636] fallback_alloc+0x207/0x2c0 [ 1926.394772] lowmem_reserve[]: [ 1926.398712] kmem_cache_alloc_node_trace+0xed/0x400 [ 1926.403174] 0 [ 1926.407216] __kmalloc_node_track_caller+0x38/0x70 [ 1926.407227] __alloc_skb+0x96/0x510 [ 1926.407237] rtmsg_ifinfo_build_skb+0x65/0x130 [ 1926.407247] rtnetlink_event+0xee/0x1a0 [ 1926.412061] 2717 [ 1926.416882] notifier_call_chain+0x108/0x1a0 [ 1926.416895] netdev_upper_dev_unlink+0x1a7/0x200 [ 1926.416901] ? netdev_notify_peers+0xd0/0xd0 [ 1926.416917] batadv_hardif_disable_interface.cold+0x74c/0x92e [ 1926.445200] 2718 [ 1926.448539] batadv_softif_destroy_netlink+0xab/0x200 [ 1926.452911] 2718 [ 1926.456951] ? batadv_interface_kill_vid+0x150/0x150 [ 1926.456959] default_device_exit_batch+0x204/0x380 [ 1926.456967] ? unregister_netdevice_many+0x50/0x50 [ 1926.456982] ? do_wait_intr_irq+0x270/0x270 [ 1926.461193] 2718 [ 1926.487281] ? __local_bh_enable_ip+0xc1/0x170 [ 1926.487289] ? unregister_netdevice_many+0x50/0x50 [ 1926.487296] ? dev_change_net_namespace+0xc90/0xc90 [ 1926.487304] ops_exit_list+0xf9/0x150 [ 1926.487314] cleanup_net+0x3b3/0x840 [ 1926.493563] ? net_drop_ns+0x70/0x70 [ 1926.497970] Node 0 [ 1926.523250] ? lock_acquire+0x170/0x3f0 [ 1926.523262] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1926.523272] process_one_work+0x793/0x14a0 [ 1926.523283] ? work_busy+0x320/0x320 [ 1926.523288] ? worker_thread+0x158/0xff0 [ 1926.523297] ? _raw_spin_unlock_irq+0x24/0x80 [ 1926.523307] worker_thread+0x5cc/0xff0 [ 1926.527312] DMA32 free:19260kB min:36200kB low:45248kB high:54296kB active_anon:67648kB inactive_anon:116244kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7040kB pagetables:2640kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1926.530439] ? rescuer_thread+0xc80/0xc80 [ 1926.535447] lowmem_reserve[]: [ 1926.537210] kthread+0x30d/0x420 [ 1926.542110] 0 [ 1926.545715] ? kthread_create_on_node+0xd0/0xd0 [ 1926.545725] ret_from_fork+0x24/0x30 [ 1926.564372] Mem-Info: [ 1926.565634] 0 0 0 0 [ 1926.565650] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1926.565668] lowmem_reserve[]: 0 0 0 0 0 [ 1926.565687] Node 1 Normal free:26960kB min:53696kB low:67120kB high:80544kB active_anon:320kB inactive_anon:56kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1926.565705] lowmem_reserve[]: [ 1926.577046] active_anon:16992 inactive_anon:29076 isolated_anon:0 [ 1926.577046] active_file:12 inactive_file:13 isolated_file:0 [ 1926.577046] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1926.577046] slab_reclaimable:12572 slab_unreclaimable:113336 [ 1926.577046] mapped:35241 shmem:29458 pagetables:660 bounce:0 [ 1926.577046] free:14296 free_pcp:1 free_cma:0 [ 1926.579106] 0 [ 1926.583676] Node 0 active_anon:67648kB inactive_anon:116248kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140964kB dirty:0kB writeback:0kB shmem:117760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1926.585756] 0 0 0 0 [ 1926.585770] Node 0 DMA: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 2*2048kB (M) 1*4096kB (M) = 10964kB [ 1926.585846] Node 0 DMA32: 1191*4kB (UME) 630*8kB (UME) 281*16kB (UME) 82*32kB (UME) 26*64kB (UME) 5*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19228kB [ 1926.585903] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1926.585949] Node 1 Normal: 54*4kB (UME) 55*8kB (M) 46*16kB (ME) 45*32kB (UM) 31*64kB (M) 17*128kB (UM) 14*256kB (UME) 6*512kB (ME) 3*1024kB (UME) 3*2048kB (M) 1*4096kB (M) = 26960kB [ 1926.586033] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1926.586039] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1926.586045] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1926.586052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1926.586055] 29483 total pagecache pages [ 1926.586070] 0 pages in swap cache [ 1926.586075] Swap cache stats: add 0, delete 0, find 0/0 [ 1926.586079] Free swap = 0kB [ 1926.586082] Total swap = 0kB [ 1926.586088] 2097051 pages RAM [ 1926.586091] 0 pages HighMem/MovableOnly [ 1926.586094] 363840 pages reserved [ 1926.586098] 0 pages cma reserved [ 1926.991260] Node 1 active_anon:320kB inactive_anon:56kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:72kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1927.025311] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1927.061748] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1927.069301] Node 0 DMA32 free:19228kB min:36200kB low:45248kB high:54296kB active_anon:67648kB inactive_anon:116244kB active_file:68kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7040kB pagetables:2640kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 1927.102756] lowmem_reserve[]: 0 0 0 0 0 [ 1927.107315] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1927.137468] lowmem_reserve[]: 0 0 0 0 0 [ 1927.141977] Node 1 Normal free:74792kB min:53696kB low:67120kB high:80544kB active_anon:320kB inactive_anon:56kB active_file:100kB inactive_file:4720kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:0kB bounce:0kB free_pcp:772kB local_pcp:96kB free_cma:0kB [ 1927.175386] lowmem_reserve[]: 0 0 0 0 0 [ 1927.179643] Node 0 DMA: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 2*2048kB (M) 1*4096kB (M) = 10964kB [ 1927.200976] Node 0 DMA32: 1160*4kB (UME) 941*8kB (UME) 293*16kB (UME) 84*32kB (UME) 26*64kB (UME) 5*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 21848kB [ 1927.220876] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1927.232560] Node 1 Normal: 8*4kB (UME) 1*8kB (M) 1*16kB (E) 0*32kB 1*64kB (M) 2*128kB (UM) 16*256kB (UME) 13*512kB (UME) 14*1024kB (UME) 14*2048kB (UM) 22*4096kB (UM) = 144248kB [ 1927.257693] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1927.270596] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1927.291120] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1927.300696] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1927.314718] 31592 total pagecache pages [ 1927.318709] 0 pages in swap cache [ 1927.322154] Swap cache stats: add 0, delete 0, find 0/0 [ 1927.331510] Free swap = 0kB [ 1927.335181] Total swap = 0kB [ 1927.338207] 2097051 pages RAM [ 1927.341398] 0 pages HighMem/MovableOnly [ 1927.349700] 363840 pages reserved [ 1927.353814] 0 pages cma reserved 23:23:18 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x3ca26104, 0x0, 0x9}, 0x9, 0x40000000, &(0x7f00000000c0)={{0x9, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:23:18 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040805}, 0x4000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') write$sndseq(r1, 0x0, 0x0) [ 1927.357842] Out of memory: Kill process 7978 (syz-fuzzer) score 7 or sacrifice child [ 1927.370762] Killed process 16234 (syz-executor.4) total-vm:85024kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 1927.405072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1927.411893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1927.466652] device bridge_slave_1 left promiscuous mode [ 1927.474077] bridge0: port 2(bridge_slave_1) entered disabled state [ 1927.487359] device bridge_slave_0 left promiscuous mode [ 1927.493269] bridge0: port 1(bridge_slave_0) entered disabled state [ 1927.509961] device veth1_macvtap left promiscuous mode [ 1927.518328] device veth0_macvtap left promiscuous mode [ 1927.524025] device veth1_vlan left promiscuous mode [ 1927.530684] device veth0_vlan left promiscuous mode [ 1927.692788] device hsr_slave_1 left promiscuous mode [ 1927.707595] device hsr_slave_0 left promiscuous mode [ 1927.730014] team0 (unregistering): Port device team_slave_1 removed [ 1927.746296] team0 (unregistering): Port device team_slave_0 removed [ 1927.760439] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1927.772599] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1927.817992] bond0 (unregistering): Released all slaves [ 1929.667025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1929.673741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1929.686033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1929.692827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1929.705945] device bridge_slave_1 left promiscuous mode [ 1929.711450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1929.722816] device bridge_slave_0 left promiscuous mode [ 1929.729145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1929.742305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1929.749739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1929.761665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1929.769151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1929.782535] device bridge_slave_1 left promiscuous mode [ 1929.788988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1929.800165] device bridge_slave_0 left promiscuous mode [ 1929.806467] bridge0: port 1(bridge_slave_0) entered disabled state [ 1929.820777] device veth1_macvtap left promiscuous mode [ 1929.826230] device veth0_macvtap left promiscuous mode [ 1929.831540] device veth1_vlan left promiscuous mode [ 1929.841025] device veth0_vlan left promiscuous mode [ 1929.847255] device veth1_macvtap left promiscuous mode [ 1929.852549] device veth0_macvtap left promiscuous mode [ 1929.868255] device veth1_vlan left promiscuous mode [ 1929.873315] device veth0_vlan left promiscuous mode [ 1930.073773] device hsr_slave_1 left promiscuous mode [ 1930.089281] device hsr_slave_0 left promiscuous mode [ 1930.113445] team0 (unregistering): Port device team_slave_1 removed [ 1930.128260] team0 (unregistering): Port device team_slave_0 removed [ 1930.141412] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1930.152707] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1930.198278] bond0 (unregistering): Released all slaves [ 1930.247416] device hsr_slave_1 left promiscuous mode [ 1930.260830] device hsr_slave_0 left promiscuous mode [ 1930.280244] team0 (unregistering): Port device team_slave_1 removed [ 1930.290223] team0 (unregistering): Port device team_slave_0 removed [ 1930.306271] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1930.321825] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1930.357380] bond0 (unregistering): Released all slaves 23:23:22 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x9}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x0, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:23:22 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:23:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x2c, 0xc, 0xdc000000, &(0x7f0000000000)) r1 = accept4(r0, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80, 0x80000) getsockopt$inet6_tcp_int(r1, 0x6, 0x8, 0x0, &(0x7f0000000200)=0x6b) 23:23:22 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') write$sndseq(r0, 0x0, 0x0) 23:23:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="a4000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000fcdbdf250200000008000500010400001c000280080006008cc9000006000f0020000000080003000400000008000400000000005800018008000500020000000c000700000000001700000008000500000000000800090070000000060004004e220000080006006f76660007000600666f00000c000d95d29b624d0700ba2f0f2d20000008be4227c1518c000c000700100000002a0000000c000180080009003100000066d7d2303e54b42d3c0d2fe32a6d54bbaa7077d4a676d9482a27c57b6f7be9ae75158f9c3aed8a61927a690ae4d5d6cdc609b3801b2aefb27d01dcf322a54d9c8271bbffb32a7555320f6a04c7bf90f061872072cf8f01aa90552a33b8f891bb182b09b31d44c94e58cbf9013062dd2200ccefcc7561f8b05e628dff5e6241cfc2d44366dff27cf69509e4e3d531699cc521696f7221bf04fe3a90a59ee1c7603681935e8b841af2582de39cdbe882999591219b5ce5d74da57b7442b56cea6070f75fecf59d0d48357a"], 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x4890) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) [ 1931.372589] IPVS: ftp: loaded support on port[0] = 21 23:23:22 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x840) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r5, 0x109}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r5, 0x109}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe26bfdf4d7653de7}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100025bd7000fedbdf25100000000500380001000000050033000200000008000600", @ANYRES32=0x0, @ANYBLOB="050033000000000005002f000100000005003300020000000a0009000880c2000003000008000b00340000000500330002000000"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x44) write$sndseq(r0, 0x0, 0x0) 23:23:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='io.stat\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf25020000004800028006000f00008000000800080006000000080008002877000014000100ff020000000000000000000000000001060002004e2400000800050009000000060002004e23000014000280060002004e22000008000700060000001400028008000800407d00000800030001000000080005000000000008000600ff0f00001400028006000f000e0000000800030000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0x7, 0x95, 0x7, 0x8, @loopback, @remote, 0x7800, 0x7, 0x23df, 0x2}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x20, @private2, @mcast2, 0x700, 0x81, 0x568, 0x42}}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, 0x0) bind$pptp(r4, &(0x7f0000000640)={0x18, 0x2, {0x2, @loopback}}, 0x1e) write$sndseq(r4, 0x0, 0x17) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/mice\x00', 0x1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r6, 0x2f, 0x0, 0x1, 0x8, 0x49, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, [], 0xa}, 0x8, 0x80, 0x5, 0x44e}}) 23:23:22 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getspdinfo={0x14, 0x25, 0x100, 0x70bd29, 0x25dfdbfc, 0x0, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40088}, 0x8040001) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nf_conntrack_expect\x00') write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000080)={{0x80, 0xd0}, {0x5, 0x2}, 0x1, 0x5, 0x9}) [ 1931.639851] chnl_net:caif_netlink_parms(): no params data found 23:23:22 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='attr/sockcreate\x00') write$sndseq(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x40, 0x9, 0x8, 0x6, 0x0, 0x0, 0x2020, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x64a5210}, 0x800, 0x7fffffff, 0x80000001, 0x1, 0x16, 0x4, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) 23:23:22 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x808c1}, 0x20c0) write$sndseq(r0, 0x0, 0x0) [ 1931.857755] bridge0: port 1(bridge_slave_0) entered blocking state [ 1931.865657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1931.873465] device bridge_slave_0 entered promiscuous mode [ 1931.884191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1931.891371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1931.902211] device bridge_slave_1 entered promiscuous mode [ 1931.932821] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1931.934508] Bluetooth: hci0 command 0x0409 tx timeout [ 1931.943796] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1931.971194] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1931.979419] team0: Port device team_slave_0 added [ 1931.986202] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1931.993691] team0: Port device team_slave_1 added [ 1932.021499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1932.028318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1932.058445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1932.070375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1932.080086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1932.110546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1932.122298] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1932.133182] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1932.162241] device hsr_slave_0 entered promiscuous mode [ 1932.168387] device hsr_slave_1 entered promiscuous mode [ 1932.175831] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1932.183054] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1932.311480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1932.317910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1932.324595] bridge0: port 1(bridge_slave_0) entered blocking state [ 1932.330950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1932.380927] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1932.387220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1932.397862] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1932.411174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1932.420994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1932.430938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1932.442138] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1932.449385] 8021q: adding VLAN 0 to HW filter on device team0 [ 1932.459572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1932.468492] bridge0: port 1(bridge_slave_0) entered blocking state [ 1932.474908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1932.493716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1932.513778] bridge0: port 2(bridge_slave_1) entered blocking state [ 1932.520200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1932.548085] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1932.563199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1932.579901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1932.597764] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1932.615021] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1932.623268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1932.636547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1932.663425] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1932.677312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1932.695158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1932.704672] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1932.710713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1932.741971] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1932.749783] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1932.756340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1932.763060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1932.775542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1932.846322] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1932.857135] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1932.865335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1932.873191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1932.921017] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1932.931815] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1932.939631] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1932.952639] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1932.960193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1932.970962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1932.980952] device veth0_vlan entered promiscuous mode [ 1932.993260] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1933.001368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1933.014959] device veth1_vlan entered promiscuous mode [ 1933.020964] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1933.034657] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1933.050591] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1933.062171] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1933.072800] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1933.081078] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1933.091816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1933.100299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1933.113294] device veth0_macvtap entered promiscuous mode [ 1933.121276] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1933.135982] device veth1_macvtap entered promiscuous mode [ 1933.142307] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1933.156344] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1933.169622] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1933.178960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1933.192450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1933.202301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1933.220228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1933.230724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1933.243077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1933.256822] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1933.263790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1933.273431] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1933.283889] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1933.293208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1933.303825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1933.316144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1933.329373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1933.339615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1933.352713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1933.362613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1933.375761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1933.387150] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1933.394142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1933.404015] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1933.413439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1933.735804] IPVS: ftp: loaded support on port[0] = 21 [ 1933.818185] IPVS: ftp: loaded support on port[0] = 21 [ 1933.962463] chnl_net:caif_netlink_parms(): no params data found [ 1934.024258] Bluetooth: hci0 command 0x041b tx timeout [ 1934.100393] chnl_net:caif_netlink_parms(): no params data found [ 1934.172369] bridge0: port 1(bridge_slave_0) entered blocking state [ 1934.190895] bridge0: port 1(bridge_slave_0) entered disabled state [ 1934.200815] device bridge_slave_0 entered promiscuous mode [ 1934.211897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1934.222209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1934.231132] device bridge_slave_1 entered promiscuous mode [ 1934.273166] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1934.294158] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1934.311493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1934.323091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1934.331030] device bridge_slave_0 entered promiscuous mode 23:23:25 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x3ca26104, 0x0, 0x9, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x9, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:23:25 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x6, 0x7f, 0x40, {0x81, 0x469b}, 0xffffffff, 0x6}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, r1, 0x210, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x843}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x408c0}, 0x20000001) [ 1934.365155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1934.372115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1934.384024] device bridge_slave_1 entered promiscuous mode [ 1934.391676] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1934.422625] team0: Port device team_slave_0 added [ 1934.460813] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1934.468991] team0: Port device team_slave_1 added [ 1934.480178] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1934.509216] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1934.553569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1934.565827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1934.595968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1934.623385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1934.632892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1934.662447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1934.673356] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1934.685938] team0: Port device team_slave_0 added [ 1934.692699] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1934.704749] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1934.712156] team0: Port device team_slave_1 added [ 1934.721700] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1934.779788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1934.786592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1934.816772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1934.833367] device hsr_slave_0 entered promiscuous mode [ 1934.841839] device hsr_slave_1 entered promiscuous mode [ 1934.851317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1934.860162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1934.889774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1934.901247] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1934.913452] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1934.921417] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1934.938199] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1934.984670] device hsr_slave_0 entered promiscuous mode [ 1934.991247] device hsr_slave_1 entered promiscuous mode [ 1935.008633] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1935.026856] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1935.118997] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1935.197259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1935.221625] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1935.232051] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1935.245014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1935.252276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1935.270992] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1935.278232] 8021q: adding VLAN 0 to HW filter on device team0 [ 1935.311225] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1935.330874] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1935.345482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1935.372170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1935.385169] bridge0: port 1(bridge_slave_0) entered blocking state [ 1935.391538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1935.419952] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1935.427648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1935.436029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1935.443861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1935.451871] bridge0: port 2(bridge_slave_1) entered blocking state [ 1935.458277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1935.476313] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1935.494792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1935.511983] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1935.529275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1935.540295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1935.552707] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1935.560615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1935.569308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1935.579584] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1935.589096] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1935.596693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1935.603886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1935.612743] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1935.625344] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1935.639653] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1935.645978] 8021q: adding VLAN 0 to HW filter on device team0 [ 1935.655473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1935.662371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1935.670103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1935.680397] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1935.692262] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1935.700563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1935.708844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1935.716760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1935.723116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1935.733869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1935.741759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1935.755535] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1935.769048] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1935.776942] Bluetooth: hci1 command 0x0409 tx timeout [ 1935.782994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1935.794084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1935.802513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1935.814030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1935.820439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1935.831644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1935.842312] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1935.854646] Bluetooth: hci4 command 0x0409 tx timeout [ 1935.860226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1935.873494] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1935.880313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1935.893455] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1935.908611] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1935.915656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1935.923633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1935.938975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1935.947697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1935.968399] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1935.980301] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1935.988882] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1936.000432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1936.009890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1936.025314] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1936.033198] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1936.045182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1936.052772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1936.061211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1936.068633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1936.081059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1936.090517] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1936.097381] Bluetooth: hci0 command 0x040f tx timeout [ 1936.103137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1936.126414] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1936.138650] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1936.145392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1936.152121] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1936.167199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1936.275487] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1936.291424] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1936.299221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1936.313017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1936.373599] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1936.393843] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1936.410395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1936.422938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1936.443828] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1936.452550] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1936.466068] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1936.480402] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1936.487959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1936.501599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1936.512219] device veth0_vlan entered promiscuous mode [ 1936.527037] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1936.540813] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1936.551437] device veth1_vlan entered promiscuous mode [ 1936.565980] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1936.583145] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1936.602693] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1936.611957] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1936.623040] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1936.636848] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1936.647705] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1936.656882] device veth0_vlan entered promiscuous mode [ 1936.662953] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1936.670728] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1936.678251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1936.686719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1936.696556] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1936.708165] device veth1_vlan entered promiscuous mode [ 1936.715153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1936.722066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1936.729829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1936.738218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1936.748251] device veth0_macvtap entered promiscuous mode [ 1936.757931] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1936.775199] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1936.787722] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1936.797254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1936.805187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1936.812959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1936.823792] device veth1_macvtap entered promiscuous mode [ 1936.831141] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1936.843030] device veth0_macvtap entered promiscuous mode [ 1936.850309] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1936.860321] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1936.870289] device veth1_macvtap entered promiscuous mode [ 1936.877451] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1936.887278] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1936.897724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1936.907924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1936.917287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1936.927605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1936.937008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1936.946970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1936.956454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1936.966500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1936.977770] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1936.985056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1937.000144] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1937.007958] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1937.016007] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1937.023419] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1937.031706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1937.042841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1937.053675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1937.067264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.077358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1937.090642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.100706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1937.113669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.123690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1937.137460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.150037] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1937.160515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1937.170588] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1937.181908] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1937.190472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1937.208107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1937.218631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.228580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1937.238766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.248568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1937.258859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.268234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1937.278698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.288106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1937.298802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.309579] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1937.317221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1937.329261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1937.337848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1937.347753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1937.407414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.424321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1937.438070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.447739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1937.458280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.467669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1937.477693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.489227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1937.499315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1937.509974] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1937.521214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1937.535014] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1937.542722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1937.856463] Bluetooth: hci1 command 0x041b tx timeout [ 1937.934670] Bluetooth: hci4 command 0x041b tx timeout [ 1938.174728] Bluetooth: hci0 command 0x0419 tx timeout [ 1938.308152] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1938.321228] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1938.344029] CPU: 0 PID: 17564 Comm: syz-executor.4 Not tainted 4.14.214-syzkaller #0 [ 1938.351928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1938.361271] Call Trace: [ 1938.363858] dump_stack+0x1b2/0x283 [ 1938.367478] dump_header+0x178/0x82f [ 1938.371182] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1938.376279] ? ___ratelimit+0x2cd/0x522 [ 1938.380257] oom_kill_process.cold+0x10/0xb18 [ 1938.384754] out_of_memory+0xe3e/0x1190 [ 1938.388732] ? oom_killer_disable+0x1c0/0x1c0 [ 1938.393215] ? mutex_trylock+0x152/0x1a0 [ 1938.397269] __alloc_pages_nodemask+0x23e1/0x2720 [ 1938.402115] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1938.406964] alloc_pages_current+0x155/0x260 [ 1938.411364] filemap_fault+0xea3/0x1980 [ 1938.415346] ext4_filemap_fault+0x84/0xb0 [ 1938.419492] __do_fault+0xfa/0x380 [ 1938.423045] __handle_mm_fault+0x2497/0x4620 [ 1938.427447] ? vm_insert_page+0x7c0/0x7c0 [ 1938.431587] ? __might_fault+0x177/0x1b0 [ 1938.435650] ? ipv6_getsockopt+0xa5/0x1e0 [ 1938.439806] handle_mm_fault+0x391/0x860 [ 1938.443863] __do_page_fault+0x549/0xad0 [ 1938.447923] ? spurious_fault+0x640/0x640 [ 1938.452064] ? do_page_fault+0x60/0x4f2 [ 1938.456032] ? page_fault+0x2f/0x50 [ 1938.459671] page_fault+0x45/0x50 [ 1938.463112] RIP: 74cca0:0x4f8 [ 1938.466206] RSP: 0003:0000000000000029 EFLAGS: 004d2846 [ 1938.470987] Mem-Info: [ 1938.478841] active_anon:18024 inactive_anon:29079 isolated_anon:0 [ 1938.478841] active_file:23 inactive_file:27 isolated_file:0 [ 1938.478841] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1938.478841] slab_reclaimable:12490 slab_unreclaimable:112966 [ 1938.478841] mapped:52761 shmem:29462 pagetables:757 bounce:0 [ 1938.478841] free:25119 free_pcp:54 free_cma:0 [ 1938.524214] Node 0 active_anon:71520kB inactive_anon:116260kB active_file:96kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210948kB dirty:0kB writeback:0kB shmem:117772kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1938.606224] Node 1 active_anon:576kB inactive_anon:56kB active_file:20kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72kB dirty:0kB writeback:0kB shmem:76kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1938.678078] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:1664kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1938.743077] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1938.764415] Node 0 DMA32 free:36012kB min:36200kB low:45248kB high:54296kB active_anon:69856kB inactive_anon:116256kB active_file:108kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:3020kB bounce:0kB free_pcp:144kB local_pcp:44kB free_cma:0kB [ 1938.839793] lowmem_reserve[]: 0 0 0 0 0 [ 1938.864005] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1938.913358] lowmem_reserve[]: 0 0 0 0 0 [ 1938.921190] Node 1 Normal free:53672kB min:53696kB low:67120kB high:80544kB active_anon:576kB inactive_anon:56kB active_file:64kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1938.966738] lowmem_reserve[]: 0 0 0 0 0 [ 1938.970879] Node 0 DMA: 1*4kB (M) 2*8kB (UM) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 5*128kB (UM) 8*256kB (UM) 2*512kB (UM) 1*1024kB (M) 1*2048kB (M) 1*4096kB (M) = 11076kB [ 1938.987423] Node 0 DMA32: 1240*4kB (UME) 672*8kB (UME) 322*16kB (UME) 97*32kB (UME) 38*64kB (ME) 8*128kB (UM) 1*256kB (M) 1*512kB (M) 13*1024kB (UM) 0*2048kB 0*4096kB = 36128kB [ 1939.044566] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1939.077860] Node 1 Normal: 107*4kB (UM) 83*8kB (M) 57*16kB (UME) 49*32kB (UM) 35*64kB (M) 23*128kB (UM) 20*256kB (UME) 6*512kB (UME) 4*1024kB (UME) 2*2048kB (UM) 7*4096kB (UM) = 53812kB [ 1939.099822] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1939.136489] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1939.180246] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1939.221991] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1939.247282] 29519 total pagecache pages [ 1939.251270] 0 pages in swap cache [ 1939.267170] Swap cache stats: add 0, delete 0, find 0/0 [ 1939.272619] Free swap = 0kB [ 1939.293513] Total swap = 0kB [ 1939.312953] 2097051 pages RAM [ 1939.323050] 0 pages HighMem/MovableOnly [ 1939.353000] 363840 pages reserved [ 1939.371039] 0 pages cma reserved [ 1939.390562] Out of memory (oom_kill_allocating_task): Kill process 17564 (syz-executor.4) score 0 or sacrifice child [ 1939.410776] Killed process 17564 (syz-executor.4) total-vm:93220kB, anon-rss:104kB, file-rss:34804kB, shmem-rss:0kB [ 1939.431194] oom_reaper: reaped process 17564 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1939.571451] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1939.595001] systemd-journal cpuset=/ mems_allowed=0-1 [ 1939.600233] CPU: 1 PID: 16686 Comm: systemd-journal Not tainted 4.14.214-syzkaller #0 [ 1939.608187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1939.617529] Call Trace: [ 1939.620111] dump_stack+0x1b2/0x283 [ 1939.623732] dump_header+0x178/0x82f [ 1939.627442] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1939.632536] ? ___ratelimit+0x2cd/0x522 [ 1939.636506] oom_kill_process.cold+0x10/0xb18 [ 1939.641003] out_of_memory+0xe3e/0x1190 [ 1939.644994] ? oom_killer_disable+0x1c0/0x1c0 [ 1939.649492] ? mutex_trylock+0x152/0x1a0 [ 1939.653552] __alloc_pages_nodemask+0x23e1/0x2720 [ 1939.658400] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1939.663250] alloc_pages_current+0x155/0x260 [ 1939.667779] filemap_fault+0xea3/0x1980 [ 1939.671754] ext4_filemap_fault+0x84/0xb0 [ 1939.675896] __do_fault+0xfa/0x380 [ 1939.679427] __handle_mm_fault+0x2497/0x4620 [ 1939.683842] ? ____cache_alloc_node+0xf4/0x1d0 [ 1939.688411] ? vm_insert_page+0x7c0/0x7c0 [ 1939.692551] ? check_stack_object+0x86/0xa0 [ 1939.696874] handle_mm_fault+0x391/0x860 [ 1939.700932] __do_page_fault+0x549/0xad0 [ 1939.704990] ? spurious_fault+0x640/0x640 [ 1939.709126] ? do_page_fault+0x60/0x4f2 [ 1939.713077] ? page_fault+0x2f/0x50 [ 1939.716680] page_fault+0x45/0x50 [ 1939.720116] RIP: 7c61e040:0x7fff8cde3e50 [ 1939.724150] RSP: 8cde3e90:00007f0b233bd980 EFLAGS: ffffffff [ 1939.801870] Mem-Info: [ 1939.826403] active_anon:18032 inactive_anon:29079 isolated_anon:0 [ 1939.826403] active_file:46 inactive_file:0 isolated_file:0 [ 1939.826403] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1939.826403] slab_reclaimable:12490 slab_unreclaimable:112949 [ 1939.826403] mapped:52746 shmem:29462 pagetables:759 bounce:0 [ 1939.826403] free:25108 free_pcp:0 free_cma:0 [ 1939.940053] Node 0 active_anon:71512kB inactive_anon:116260kB active_file:80kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210932kB dirty:0kB writeback:0kB shmem:117772kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1940.001198] Node 1 active_anon:544kB inactive_anon:56kB active_file:84kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:76kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1940.029569] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:1664kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1940.060326] Bluetooth: hci4 command 0x040f tx timeout [ 1940.077911] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1940.082961] Node 0 DMA32 free:36124kB min:36200kB low:45248kB high:54296kB active_anon:69848kB inactive_anon:116256kB active_file:28kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2932kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1940.124103] lowmem_reserve[]: 0 0 0 0 0 [ 1940.128149] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1940.164057] lowmem_reserve[]: 0 0 0 0 0 [ 1940.168093] Node 1 Normal free:53292kB min:53696kB low:67120kB high:80544kB active_anon:544kB inactive_anon:56kB active_file:92kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1940.203476] lowmem_reserve[]: 0 0 0 0 0 [ 1940.211419] Node 0 DMA: 1*4kB (M) 2*8kB (UM) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 5*128kB (UM) 8*256kB (UM) 2*512kB (UM) 1*1024kB (M) 1*2048kB (M) 1*4096kB (M) = 11076kB [ 1940.232714] Node 0 DMA32: 1241*4kB (ME) 675*8kB (ME) 327*16kB (MEH) 99*32kB (MEH) 39*64kB (MEH) 7*128kB (M) 2*256kB (MH) 2*512kB (MH) 12*1024kB (UM) 0*2048kB 0*4096kB = 35980kB [ 1940.255176] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1940.270067] Node 1 Normal: 99*4kB (M) 78*8kB (M) 55*16kB (UME) 48*32kB (M) 33*64kB (M) 23*128kB (UM) 21*256kB (UME) 5*512kB (ME) 4*1024kB (UME) 2*2048kB (UM) 7*4096kB (UM) = 53292kB [ 1940.291735] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1940.313257] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1940.321918] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1940.338925] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1940.349574] 29495 total pagecache pages [ 1940.353550] 0 pages in swap cache [ 1940.361456] Swap cache stats: add 0, delete 0, find 0/0 [ 1940.371026] Free swap = 0kB [ 1940.378797] Total swap = 0kB [ 1940.381937] 2097051 pages RAM [ 1940.389345] 0 pages HighMem/MovableOnly [ 1940.393304] 363840 pages reserved [ 1940.399332] 0 pages cma reserved [ 1940.402697] Out of memory (oom_kill_allocating_task): Kill process 16686 (systemd-journal) score 0 or sacrifice child [ 1940.423510] Killed process 16686 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:2016kB [ 1940.441090] oom_reaper: reaped process 16686 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2016kB [ 1940.456060] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1940.476008] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1940.480939] CPU: 1 PID: 7979 Comm: syz-fuzzer Not tainted 4.14.214-syzkaller #0 [ 1940.488387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1940.497727] Call Trace: [ 1940.500295] dump_stack+0x1b2/0x283 [ 1940.503908] dump_header+0x178/0x82f [ 1940.507603] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1940.512681] ? ___ratelimit+0x2cd/0x522 [ 1940.516632] oom_kill_process.cold+0x10/0xb18 [ 1940.521192] out_of_memory+0xe3e/0x1190 [ 1940.525145] ? oom_killer_disable+0x1c0/0x1c0 [ 1940.529614] ? mutex_trylock+0x152/0x1a0 [ 1940.533665] __alloc_pages_nodemask+0x23e1/0x2720 [ 1940.538576] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1940.543438] alloc_pages_current+0x155/0x260 [ 1940.547826] filemap_fault+0xea3/0x1980 [ 1940.551779] ext4_filemap_fault+0x84/0xb0 [ 1940.555902] __do_fault+0xfa/0x380 [ 1940.559416] __handle_mm_fault+0x2497/0x4620 [ 1940.563801] ? vm_insert_page+0x7c0/0x7c0 [ 1940.567927] ? lock_downgrade+0x740/0x740 [ 1940.572057] handle_mm_fault+0x391/0x860 [ 1940.576097] __do_page_fault+0x549/0xad0 [ 1940.580133] ? spurious_fault+0x640/0x640 [ 1940.584257] ? do_page_fault+0x60/0x4f2 [ 1940.588206] ? page_fault+0x2f/0x50 [ 1940.591806] page_fault+0x45/0x50 [ 1940.595235] RIP: 0000:0xb358f8 [ 1940.598397] RSP: 383f7607:000000c00003dec8 EFLAGS: 00438920 [ 1940.606570] Mem-Info: [ 1940.618895] active_anon:17914 inactive_anon:29079 isolated_anon:0 [ 1940.618895] active_file:0 inactive_file:21 isolated_file:0 [ 1940.618895] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1940.618895] slab_reclaimable:12477 slab_unreclaimable:112984 [ 1940.618895] mapped:52244 shmem:29462 pagetables:735 bounce:0 [ 1940.618895] free:25118 free_pcp:0 free_cma:0 [ 1940.656409] Node 0 active_anon:71112kB inactive_anon:116260kB active_file:0kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208984kB dirty:0kB writeback:0kB shmem:117772kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1940.692398] Node 1 active_anon:544kB inactive_anon:56kB active_file:12kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:76kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1940.730969] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:1664kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1940.765627] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1940.770681] Node 0 DMA32 free:36160kB min:36200kB low:45248kB high:54296kB active_anon:69376kB inactive_anon:116252kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2840kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB [ 1940.803930] lowmem_reserve[]: 0 0 0 0 0 [ 1940.807933] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1940.837940] lowmem_reserve[]: 0 0 0 0 0 [ 1940.841953] Node 1 Normal free:53360kB min:53696kB low:67120kB high:80544kB active_anon:544kB inactive_anon:56kB active_file:56kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1940.873975] lowmem_reserve[]: 0 0 0 0 0 [ 1940.877978] Node 0 DMA: 1*4kB (M) 2*8kB (UM) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 5*128kB (UM) 8*256kB (UM) 2*512kB (UM) 1*1024kB (M) 1*2048kB (M) 1*4096kB (M) = 11076kB [ 1940.895205] Node 0 DMA32: 1245*4kB (ME) 673*8kB (ME) 330*16kB (ME) 103*32kB (ME) 43*64kB (UME) 8*128kB (UM) 2*256kB (UM) 1*512kB (M) 12*1024kB (UM) 0*2048kB 0*4096kB = 36028kB [ 1940.913162] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1940.927926] Node 1 Normal: 100*4kB (UM) 78*8kB (M) 55*16kB (UME) 50*32kB (UM) 33*64kB (M) 23*128kB (UM) 21*256kB (UME) 5*512kB (ME) 4*1024kB (UME) 2*2048kB (UM) 7*4096kB (UM) = 53360kB [ 1940.948760] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1940.957644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1940.970316] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1940.979461] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1940.992124] 29495 total pagecache pages [ 1940.996134] 0 pages in swap cache [ 1940.999576] Swap cache stats: add 0, delete 0, find 0/0 [ 1941.009051] Free swap = 0kB [ 1941.012065] Total swap = 0kB [ 1941.020843] 2097051 pages RAM [ 1941.028700] 0 pages HighMem/MovableOnly [ 1941.032673] 363840 pages reserved [ 1941.043446] 0 pages cma reserved [ 1941.050101] Out of memory (oom_kill_allocating_task): Kill process 7979 (syz-fuzzer) score 0 or sacrifice child [ 1941.073156] Killed process 17329 (syz-executor.2) total-vm:85024kB, anon-rss:1732kB, file-rss:4kB, shmem-rss:0kB [ 1941.098056] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1941.119050] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1941.126652] CPU: 1 PID: 7979 Comm: syz-fuzzer Not tainted 4.14.214-syzkaller #0 [ 1941.134112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1941.143468] Call Trace: [ 1941.146085] dump_stack+0x1b2/0x283 [ 1941.149750] dump_header+0x178/0x82f [ 1941.153456] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1941.158546] ? ___ratelimit+0x2cd/0x522 [ 1941.162587] oom_kill_process.cold+0x10/0xb18 [ 1941.167066] out_of_memory+0xe3e/0x1190 [ 1941.171023] ? oom_killer_disable+0x1c0/0x1c0 [ 1941.175494] ? mutex_trylock+0x152/0x1a0 [ 1941.179530] __alloc_pages_nodemask+0x23e1/0x2720 [ 1941.184372] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1941.189298] alloc_pages_current+0x155/0x260 [ 1941.193697] filemap_fault+0xea3/0x1980 [ 1941.197652] ext4_filemap_fault+0x84/0xb0 [ 1941.201780] __do_fault+0xfa/0x380 [ 1941.205316] __handle_mm_fault+0x2497/0x4620 [ 1941.209702] ? vm_insert_page+0x7c0/0x7c0 [ 1941.213827] ? lock_downgrade+0x740/0x740 [ 1941.217973] handle_mm_fault+0x391/0x860 [ 1941.222017] __do_page_fault+0x549/0xad0 [ 1941.226058] ? spurious_fault+0x640/0x640 [ 1941.230182] ? do_page_fault+0x60/0x4f2 [ 1941.234148] ? page_fault+0x2f/0x50 [ 1941.237755] page_fault+0x45/0x50 [ 1941.241246] RIP: 0000:0xb358f8 [ 1941.244426] RSP: 383f7607:000000c00003dec8 EFLAGS: 00438920 [ 1941.249079] Mem-Info: [ 1941.249099] active_anon:17896 inactive_anon:29078 isolated_anon:0 [ 1941.249099] active_file:40 inactive_file:0 isolated_file:0 [ 1941.249099] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1941.249099] slab_reclaimable:12475 slab_unreclaimable:112992 [ 1941.249099] mapped:52225 shmem:29462 pagetables:711 bounce:0 [ 1941.249099] free:25118 free_pcp:60 free_cma:0 [ 1941.249112] Node 0 active_anon:71040kB inactive_anon:116256kB active_file:48kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:117772kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1941.249124] Node 1 active_anon:544kB inactive_anon:56kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:76kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1941.249127] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:1664kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1941.249146] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1941.382402] Node 0 DMA32 free:36036kB min:36200kB low:45248kB high:54296kB active_anon:69376kB inactive_anon:116252kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2840kB bounce:0kB free_pcp:220kB local_pcp:100kB free_cma:0kB [ 1941.415637] lowmem_reserve[]: 0 0 0 0 0 [ 1941.419645] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1941.449337] lowmem_reserve[]: 0 0 0 0 0 [ 1941.453455] Node 1 Normal free:53360kB min:53696kB low:67120kB high:80544kB active_anon:544kB inactive_anon:56kB active_file:24kB inactive_file:68kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1941.485873] lowmem_reserve[]: 0 0 0 0 0 [ 1941.489885] Node 0 DMA: 1*4kB (M) 2*8kB (UM) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 5*128kB (UM) 8*256kB (UM) 2*512kB (UM) 1*1024kB (M) 1*2048kB (M) 1*4096kB (M) = 11076kB [ 1941.509089] Node 0 DMA32: 1245*4kB (ME) 675*8kB (UMEH) 332*16kB (UMEH) 105*32kB (UMEH) 43*64kB (UME) 9*128kB (UMH) 3*256kB (UMH) 2*512kB (UM) 11*1024kB (UM) 0*2048kB 0*4096kB = 36012kB [ 1941.530049] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1941.541428] Node 1 Normal: 100*4kB (UM) 78*8kB (M) 55*16kB (UME) 50*32kB (UM) 33*64kB (M) 23*128kB (UM) 21*256kB (UME) 5*512kB (ME) 4*1024kB (UME) 2*2048kB (UM) 7*4096kB (UM) = 53360kB [ 1941.563206] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1941.572372] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1941.585246] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1941.596261] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1941.606877] 29495 total pagecache pages [ 1941.610852] 0 pages in swap cache [ 1941.617788] Swap cache stats: add 0, delete 0, find 0/0 [ 1941.623243] Free swap = 0kB [ 1941.628408] Total swap = 0kB [ 1941.631449] 2097051 pages RAM [ 1941.636618] 0 pages HighMem/MovableOnly [ 1941.640582] 363840 pages reserved [ 1941.646108] 0 pages cma reserved [ 1941.649473] Out of memory (oom_kill_allocating_task): Kill process 7979 (syz-fuzzer) score 0 or sacrifice child [ 1941.661952] Killed process 17565 (syz-executor.5) total-vm:85024kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 1941.724353] oom_reaper: reaped process 17329 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1942.018831] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1942.033212] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1942.124343] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1942.147172] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1942.174790] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1942.190572] systemd[1]: Stopped Journal Service. [ 1942.267744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1942.275656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1942.285581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1942.292757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1942.302758] device bridge_slave_1 left promiscuous mode [ 1942.315463] bridge0: port 2(bridge_slave_1) entered disabled state [ 1942.322876] device bridge_slave_0 left promiscuous mode [ 1942.337052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1942.349759] device veth1_macvtap left promiscuous mode [ 1942.360215] device veth0_macvtap left promiscuous mode [ 1942.392154] device veth1_vlan left promiscuous mode [ 1942.402489] device veth0_vlan left promiscuous mode [ 1942.576849] kworker/u4:4 invoked oom-killer: gfp_mask=0x14142c0(GFP_KERNEL|__GFP_NOWARN|__GFP_COMP|__GFP_NOMEMALLOC), nodemask=(null), order=1, oom_score_adj=0 [ 1942.593164] kworker/u4:4 cpuset=/ mems_allowed=0-1 [ 1942.600099] CPU: 1 PID: 29363 Comm: kworker/u4:4 Not tainted 4.14.214-syzkaller #0 [ 1942.607816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1942.617163] Workqueue: netns cleanup_net [ 1942.621323] Call Trace: [ 1942.623887] dump_stack+0x1b2/0x283 [ 1942.627493] dump_header+0x178/0x82f [ 1942.631181] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1942.636260] ? ___ratelimit+0x2cd/0x522 [ 1942.640211] oom_kill_process.cold+0x10/0xb18 [ 1942.644683] ? lock_downgrade+0x740/0x740 [ 1942.648810] out_of_memory+0x2dc/0x1190 [ 1942.652765] ? oom_killer_disable+0x1c0/0x1c0 [ 1942.657238] ? mutex_trylock+0x152/0x1a0 [ 1942.661276] __alloc_pages_nodemask+0x23e1/0x2720 [ 1942.666099] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1942.670919] ? process_one_work+0x793/0x14a0 [ 1942.675302] ? worker_thread+0x5cc/0xff0 [ 1942.679342] ? mark_held_locks+0xa6/0xf0 [ 1942.683377] ? cache_grow_begin+0x41/0x630 [ 1942.687593] cache_grow_begin+0x91/0x630 [ 1942.691629] ? cache_grow_begin+0x91/0x630 [ 1942.695840] fallback_alloc+0x207/0x2c0 [ 1942.699794] kmem_cache_alloc_node_trace+0xed/0x400 [ 1942.704789] __kmalloc_node_track_caller+0x38/0x70 [ 1942.709709] __alloc_skb+0x96/0x510 [ 1942.713329] rtmsg_ifinfo_build_skb+0x65/0x130 [ 1942.717895] rtmsg_ifinfo+0x68/0x100 [ 1942.721589] dev_close_many+0x2bf/0x5f0 [ 1942.725652] ? kernfs_put.part.0+0x1d2/0x490 [ 1942.730040] ? __dev_close_many+0x270/0x270 [ 1942.734337] ? kernfs_put.part.0+0x1d2/0x490 [ 1942.738722] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1942.743740] rollback_registered_many+0x399/0xba0 [ 1942.748567] ? netdev_state_change+0xf0/0xf0 [ 1942.752952] ? sysfs_remove_group+0xbe/0x100 [ 1942.757337] unregister_netdevice_many.part.0+0x18/0x2e0 [ 1942.762781] default_device_exit_batch+0x2d8/0x380 [ 1942.767689] ? unregister_netdevice_many+0x50/0x50 [ 1942.772594] ? do_wait_intr_irq+0x270/0x270 [ 1942.776893] ? __local_bh_enable_ip+0xc1/0x170 [ 1942.781447] ? unregister_netdevice_many+0x50/0x50 [ 1942.786351] ? dev_change_net_namespace+0xc90/0xc90 [ 1942.791341] ops_exit_list+0xf9/0x150 [ 1942.795119] cleanup_net+0x3b3/0x840 [ 1942.798812] ? net_drop_ns+0x70/0x70 [ 1942.802498] ? lock_acquire+0x170/0x3f0 [ 1942.806448] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1942.811914] process_one_work+0x793/0x14a0 [ 1942.816132] ? work_busy+0x320/0x320 [ 1942.819820] ? worker_thread+0x158/0xff0 [ 1942.823859] ? _raw_spin_unlock_irq+0x24/0x80 [ 1942.828338] worker_thread+0x5cc/0xff0 [ 1942.832208] ? rescuer_thread+0xc80/0xc80 [ 1942.836336] kthread+0x30d/0x420 [ 1942.839680] ? kthread_create_on_node+0xd0/0xd0 [ 1942.844326] ret_from_fork+0x24/0x30 [ 1942.869497] Mem-Info: [ 1942.871939] active_anon:17374 inactive_anon:29069 isolated_anon:0 [ 1942.871939] active_file:28 inactive_file:0 isolated_file:0 [ 1942.871939] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1942.871939] slab_reclaimable:12474 slab_unreclaimable:111001 [ 1942.871939] mapped:26117 shmem:29450 pagetables:590 bounce:0 [ 1942.871939] free:25139 free_pcp:30 free_cma:0 [ 1942.913543] Node 0 active_anon:69188kB inactive_anon:116244kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104456kB dirty:0kB writeback:0kB shmem:117756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1942.956295] Node 1 active_anon:308kB inactive_anon:32kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:44kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1942.985033] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1943.011319] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1943.016401] Node 0 DMA32 free:35700kB min:36200kB low:45248kB high:54296kB active_anon:69188kB inactive_anon:116240kB active_file:64kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:6976kB pagetables:2360kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 1943.045923] lowmem_reserve[]: 0 0 0 0 0 [ 1943.049911] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1943.077924] lowmem_reserve[]: 0 0 0 0 0 [ 1943.081934] Node 1 Normal free:53668kB min:53696kB low:67120kB high:80544kB active_anon:308kB inactive_anon:32kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1943.114872] lowmem_reserve[]: 0 0 0 0 0 [ 1943.118995] Node 0 DMA: 2*4kB (UM) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 1*64kB (M) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 1*1024kB (M) 2*2048kB (M) 1*4096kB (M) = 11056kB [ 1943.136099] Node 0 DMA32: 1236*4kB (UME) 682*8kB (UME) 348*16kB (MEH) 120*32kB (UMEH) 46*64kB (UME) 13*128kB (UMH) 1*256kB (U) 2*512kB (UM) 10*1024kB (U) 0*2048kB 0*4096kB = 35936kB [ 1943.160331] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1943.171265] Node 1 Normal: 63*4kB (UM) 49*8kB (M) 42*16kB (UME) 38*32kB (UM) 35*64kB (M) 22*128kB (UM) 16*256kB (UME) 8*512kB (ME) 3*1024kB (UME) 3*2048kB (UM) 7*4096kB (UM) = 53668kB [ 1943.191863] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1943.208631] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1943.217365] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1943.228136] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1943.236798] 29484 total pagecache pages [ 1943.240759] 0 pages in swap cache [ 1943.246712] Swap cache stats: add 0, delete 0, find 0/0 [ 1943.252061] Free swap = 0kB [ 1943.255110] Total swap = 0kB [ 1943.258118] 2097051 pages RAM [ 1943.261330] 0 pages HighMem/MovableOnly [ 1943.267380] 363840 pages reserved [ 1943.270825] 0 pages cma reserved [ 1943.274220] Out of memory: Kill process 17344 (syz-executor.0) score 1005 or sacrifice child [ 1943.282797] Killed process 17348 (syz-executor.0) total-vm:93348kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 1943.350426] oom_reaper: reaped process 17348 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1943.383199] syz-executor.0 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1943.399773] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1943.408785] CPU: 1 PID: 17348 Comm: syz-executor.0 Not tainted 4.14.214-syzkaller #0 [ 1943.416671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1943.426003] Call Trace: [ 1943.428588] dump_stack+0x1b2/0x283 [ 1943.432194] dump_header+0x178/0x82f [ 1943.435935] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1943.441016] ? ___ratelimit+0x2cd/0x522 [ 1943.445008] oom_kill_process.cold+0x10/0xb18 [ 1943.449586] out_of_memory+0xe3e/0x1190 [ 1943.453538] ? oom_killer_disable+0x1c0/0x1c0 [ 1943.458009] ? mutex_trylock+0x152/0x1a0 [ 1943.462047] __alloc_pages_nodemask+0x23e1/0x2720 [ 1943.466872] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1943.471689] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1943.476691] ? retint_kernel+0x2d/0x2d [ 1943.480557] alloc_pages_current+0x155/0x260 [ 1943.484942] __vmalloc_area_node+0x40a/0x680 [ 1943.489328] ? __vmalloc_node_range+0x150/0x150 [ 1943.493973] ? __get_vm_area_node+0x27d/0x340 [ 1943.498445] __vmalloc_node_range+0xbe/0x150 [ 1943.502861] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1943.508200] vmalloc_user+0x47/0xa0 [ 1943.511936] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1943.516233] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1943.521571] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1943.525698] __vb2_queue_alloc+0x47a/0xd90 [ 1943.529911] vb2_core_create_bufs+0x279/0x5a0 [ 1943.534381] ? __vb2_queue_free+0x7a0/0x7a0 [ 1943.538680] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1943.544021] ? trace_hardirqs_on+0x10/0x10 [ 1943.548248] vb2_create_bufs+0x2e1/0x5b0 [ 1943.552287] ? vb2_thread_start.cold+0x24/0x24 [ 1943.556842] ? trace_hardirqs_on+0x10/0x10 [ 1943.561056] v4l_create_bufs+0xa4/0x150 [ 1943.565008] __video_do_ioctl+0x65b/0x6a0 [ 1943.569222] ? video_ioctl2+0x30/0x30 [ 1943.573001] ? __might_fault+0x177/0x1b0 [ 1943.577039] video_usercopy+0xf5/0xe90 [ 1943.580908] ? video_ioctl2+0x30/0x30 [ 1943.584688] ? v4l_g_ctrl+0x390/0x390 [ 1943.588463] ? lock_acquire+0x170/0x3f0 [ 1943.592413] ? trace_hardirqs_on+0x10/0x10 [ 1943.596626] ? trace_hardirqs_on+0x10/0x10 [ 1943.600923] ? retint_kernel+0x2d/0x2d [ 1943.604787] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1943.609781] ? __might_fault+0x104/0x1b0 [ 1943.613821] v4l2_ioctl+0x1bb/0x2f0 [ 1943.617438] ? v4l2_open+0x2f0/0x2f0 [ 1943.621128] do_vfs_ioctl+0x75a/0xff0 [ 1943.624922] ? ioctl_preallocate+0x1a0/0x1a0 [ 1943.629362] ? lock_downgrade+0x740/0x740 [ 1943.633500] ? __fget+0x225/0x360 [ 1943.636933] ? do_vfs_ioctl+0xff0/0xff0 [ 1943.640901] ? security_file_ioctl+0x83/0xb0 [ 1943.645305] SyS_ioctl+0x7f/0xb0 [ 1943.648647] ? do_vfs_ioctl+0xff0/0xff0 [ 1943.652599] do_syscall_64+0x1d5/0x640 [ 1943.656472] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1943.661641] RIP: 0033:0x45e219 [ 1943.664805] RSP: 002b:00007f1ac3343c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1943.672489] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1943.679762] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1943.687009] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1943.694255] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1943.701625] R13: 00007ffc3c007fbf R14: 00007f1ac33449c0 R15: 000000000119bf8c [ 1943.716515] Mem-Info: [ 1943.718946] active_anon:16836 inactive_anon:29069 isolated_anon:0 [ 1943.718946] active_file:32 inactive_file:2 isolated_file:0 [ 1943.718946] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1943.718946] slab_reclaimable:12466 slab_unreclaimable:110915 [ 1943.718946] mapped:26113 shmem:29450 pagetables:589 bounce:0 [ 1943.718946] free:13935 free_pcp:116 free_cma:0 [ 1943.752594] Node 0 active_anon:67040kB inactive_anon:116244kB active_file:128kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104452kB dirty:0kB writeback:0kB shmem:117756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1943.780771] Node 1 active_anon:304kB inactive_anon:32kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:44kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1943.806947] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1943.833433] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1943.838486] Node 0 DMA32 free:18004kB min:36200kB low:45248kB high:54296kB active_anon:67040kB inactive_anon:116240kB active_file:132kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:6976kB pagetables:2356kB bounce:0kB free_pcp:340kB local_pcp:220kB free_cma:0kB [ 1943.867837] lowmem_reserve[]: 0 0 0 0 0 [ 1943.871804] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1943.897353] lowmem_reserve[]: 0 0 0 0 0 [ 1943.901365] Node 1 Normal free:26760kB min:53696kB low:67120kB high:80544kB active_anon:304kB inactive_anon:32kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:0kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 1943.929409] lowmem_reserve[]: 0 0 0 0 0 [ 1943.933494] Node 0 DMA: 2*4kB (UM) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 2*2048kB (M) 1*4096kB (M) = 10976kB [ 1943.948730] Node 0 DMA32: 1109*4kB (UME) 560*8kB (ME) 272*16kB (UME) 83*32kB (UME) 21*64kB (UME) 2*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18036kB [ 1943.963727] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1943.974492] Node 1 Normal: 50*4kB (UM) 50*8kB (UM) 41*16kB (ME) 37*32kB (M) 36*64kB (UM) 22*128kB (UM) 15*256kB (ME) 8*512kB (ME) 3*1024kB (UME) 2*2048kB (M) 1*4096kB (M) = 26760kB [ 1943.990843] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1944.000292] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1944.008911] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1944.018075] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1944.023769] net_ratelimit: 22 callbacks suppressed [ 1944.023773] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1944.026789] 29484 total pagecache pages [ 1944.042223] 0 pages in swap cache [ 1944.045721] Swap cache stats: add 0, delete 0, find 0/0 [ 1944.051186] Free swap = 0kB [ 1944.054266] Total swap = 0kB [ 1944.057276] 2097051 pages RAM [ 1944.060368] 0 pages HighMem/MovableOnly [ 1944.064375] 363840 pages reserved [ 1944.067945] 0 pages cma reserved [ 1944.071300] Out of memory (oom_kill_allocating_task): Kill process 17348 (syz-executor.0) score 0 or sacrifice child [ 1944.081975] Killed process 17348 (syz-executor.0) total-vm:93348kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1944.092128] syz-executor.0: vmalloc: allocation failure, allocated 660922368 of 1073745920 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1944.095441] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1944.106000] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1944.106024] CPU: 1 PID: 17348 Comm: syz-executor.0 Not tainted 4.14.214-syzkaller #0 [ 1944.128672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1944.130821] (null) [ 1944.138016] Call Trace: [ 1944.138054] dump_stack+0x1b2/0x283 [ 1944.138066] warn_alloc.cold+0x96/0x1cc [ 1944.138077] ? zone_watermark_ok_safe+0x220/0x220 [ 1944.140210] , order=0, oom_score_adj=0 [ 1944.142783] ? retint_kernel+0x2d/0x2d [ 1944.146422] syz-fuzzer cpuset= [ 1944.150373] __vmalloc_area_node+0x48a/0x680 [ 1944.155197] / [ 1944.159141] ? __vmalloc_node_range+0x150/0x150 [ 1944.163011] mems_allowed=0-1 [ 1944.166191] ? __get_vm_area_node+0x27d/0x340 [ 1944.166205] __vmalloc_node_range+0xbe/0x150 [ 1944.166223] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1944.194243] vmalloc_user+0x47/0xa0 [ 1944.197858] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1944.202158] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1944.207514] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1944.211642] __vb2_queue_alloc+0x47a/0xd90 [ 1944.215895] vb2_core_create_bufs+0x279/0x5a0 [ 1944.220457] ? __vb2_queue_free+0x7a0/0x7a0 [ 1944.224765] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1944.230106] ? trace_hardirqs_on+0x10/0x10 [ 1944.234336] vb2_create_bufs+0x2e1/0x5b0 [ 1944.238378] ? vb2_thread_start.cold+0x24/0x24 [ 1944.242951] ? trace_hardirqs_on+0x10/0x10 [ 1944.248299] v4l_create_bufs+0xa4/0x150 [ 1944.252255] __video_do_ioctl+0x65b/0x6a0 [ 1944.256477] ? video_ioctl2+0x30/0x30 [ 1944.260257] ? __might_fault+0x177/0x1b0 [ 1944.264303] video_usercopy+0xf5/0xe90 [ 1944.268169] ? video_ioctl2+0x30/0x30 [ 1944.271976] ? v4l_g_ctrl+0x390/0x390 [ 1944.275786] ? lock_acquire+0x170/0x3f0 [ 1944.279838] ? trace_hardirqs_on+0x10/0x10 [ 1944.284065] ? trace_hardirqs_on+0x10/0x10 [ 1944.288287] ? retint_kernel+0x2d/0x2d [ 1944.292158] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1944.297160] ? __might_fault+0x104/0x1b0 [ 1944.301207] v4l2_ioctl+0x1bb/0x2f0 [ 1944.304813] ? v4l2_open+0x2f0/0x2f0 [ 1944.308508] do_vfs_ioctl+0x75a/0xff0 [ 1944.312286] ? ioctl_preallocate+0x1a0/0x1a0 [ 1944.316675] ? lock_downgrade+0x740/0x740 [ 1944.320820] ? __fget+0x225/0x360 [ 1944.324279] ? do_vfs_ioctl+0xff0/0xff0 [ 1944.328234] ? security_file_ioctl+0x83/0xb0 [ 1944.332756] SyS_ioctl+0x7f/0xb0 [ 1944.336108] ? do_vfs_ioctl+0xff0/0xff0 [ 1944.340082] do_syscall_64+0x1d5/0x640 [ 1944.343962] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1944.349222] RIP: 0033:0x45e219 [ 1944.352391] RSP: 002b:00007f1ac3343c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1944.360100] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1944.367355] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1944.374633] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1944.381901] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1944.389149] R13: 00007ffc3c007fbf R14: 00007f1ac33449c0 R15: 000000000119bf8c [ 1944.396416] CPU: 0 PID: 7979 Comm: syz-fuzzer Not tainted 4.14.214-syzkaller #0 [ 1944.397319] Mem-Info: [ 1944.403873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1944.403877] Call Trace: [ 1944.403890] dump_stack+0x1b2/0x283 [ 1944.403901] dump_header+0x178/0x82f [ 1944.403911] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1944.403921] ? ___ratelimit+0x2cd/0x522 [ 1944.406322] active_anon:16836 inactive_anon:29069 isolated_anon:0 [ 1944.406322] active_file:18 inactive_file:16 isolated_file:0 [ 1944.406322] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1944.406322] slab_reclaimable:12466 slab_unreclaimable:110916 [ 1944.406322] mapped:26113 shmem:29450 pagetables:589 bounce:0 [ 1944.406322] free:13943 free_pcp:110 free_cma:0 [ 1944.415750] oom_kill_process.cold+0x10/0xb18 [ 1944.415765] out_of_memory+0xe3e/0x1190 [ 1944.415776] ? oom_killer_disable+0x1c0/0x1c0 [ 1944.415783] ? mutex_trylock+0x152/0x1a0 [ 1944.415793] __alloc_pages_nodemask+0x23e1/0x2720 [ 1944.415812] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1944.418376] Node 0 active_anon:67040kB inactive_anon:116244kB active_file:68kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104452kB dirty:0kB writeback:0kB shmem:117756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1944.421984] alloc_pages_current+0x155/0x260 [ 1944.425687] Node 1 active_anon:304kB inactive_anon:32kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:44kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1944.430745] filemap_fault+0xea3/0x1980 [ 1944.434715] Node 0 [ 1944.468027] ext4_filemap_fault+0x84/0xb0 [ 1944.468037] __do_fault+0xfa/0x380 [ 1944.468047] __handle_mm_fault+0x2497/0x4620 [ 1944.472535] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1944.476478] ? trace_hardirqs_on+0x10/0x10 [ 1944.476485] ? vm_insert_page+0x7c0/0x7c0 [ 1944.476511] ? __fget+0x225/0x360 [ 1944.476528] handle_mm_fault+0x391/0x860 [ 1944.480997] lowmem_reserve[]: [ 1944.485040] __do_page_fault+0x549/0xad0 [ 1944.485052] ? spurious_fault+0x640/0x640 [ 1944.485061] ? do_page_fault+0x60/0x4f2 [ 1944.485069] ? page_fault+0x2f/0x50 [ 1944.485078] page_fault+0x45/0x50 [ 1944.489893] 0 [ 1944.494712] RIP: 0000:0xb358f8 [ 1944.494717] RSP: ac180:000000c00003dec0 EFLAGS: 00438920 [ 1944.511585] Mem-Info: [ 1944.522647] 2717 [ 1944.538419] active_anon:16836 inactive_anon:29069 isolated_anon:0 [ 1944.538419] active_file:18 inactive_file:16 isolated_file:0 [ 1944.538419] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1944.538419] slab_reclaimable:12466 slab_unreclaimable:110916 [ 1944.538419] mapped:26113 shmem:29450 pagetables:589 bounce:0 [ 1944.538419] free:13943 free_pcp:109 free_cma:0 [ 1944.555428] 2718 [ 1944.568554] Node 0 active_anon:67040kB inactive_anon:116244kB active_file:68kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104452kB dirty:0kB writeback:0kB shmem:117756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1944.571528] 2718 [ 1944.606775] Node 1 active_anon:304kB inactive_anon:32kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:44kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1944.612158] 2718 [ 1944.612972] Node 0 [ 1944.616090] Node 0 DMA32 free:18036kB min:36200kB low:45248kB high:54296kB active_anon:67040kB inactive_anon:116240kB active_file:68kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:6976kB pagetables:2356kB bounce:0kB free_pcp:312kB local_pcp:216kB free_cma:0kB [ 1944.616111] lowmem_reserve[]: 0 0 0 0 0 [ 1944.616130] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1944.616152] lowmem_reserve[]: 0 0 0 0 [ 1944.628441] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1944.632596] 0 [ 1944.632901] lowmem_reserve[]: [ 1944.636389] Node 1 Normal free:26760kB min:53696kB low:67120kB high:80544kB active_anon:304kB inactive_anon:32kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:0kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 1944.636408] lowmem_reserve[]: 0 0 0 0 0 [ 1944.636427] Node 0 DMA: 2*4kB (UM) 1*8kB (M) 1*16kB (M) [ 1944.644463] 0 [ 1944.650113] 2*32kB [ 1944.651289] 2717 [ 1944.684955] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1944.685007] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1944.688678] (UM) [ 1944.726385] 2718 [ 1944.746684] 2*64kB [ 1944.758443] 2718 [ 1944.780002] (UM) [ 1944.780663] 2718 [ 1944.809383] 2*128kB [ 1944.842657] (UM) [ 1944.875695] Node 0 [ 1944.884372] 1*256kB [ 1944.896830] DMA32 free:18036kB min:36200kB low:45248kB high:54296kB active_anon:67040kB inactive_anon:116240kB active_file:68kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:6976kB pagetables:2356kB bounce:0kB free_pcp:300kB local_pcp:84kB free_cma:0kB [ 1944.902367] (M) [ 1944.903346] lowmem_reserve[]: [ 1944.909999] 2*512kB [ 1944.915355] 0 [ 1944.921238] (UM) [ 1944.954124] 0 0 0 0 [ 1944.960842] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1944.961143] 1*1024kB (M) 2*2048kB (M) 1*4096kB (M) = 10976kB [ 1944.997048] lowmem_reserve[]: [ 1945.000372] Node 0 [ 1945.000379] 0 [ 1945.003488] DMA32: 1110*4kB [ 1945.012769] 0 [ 1945.013252] (UME) [ 1945.016374] 0 [ 1945.019275] 562*8kB [ 1945.019749] 0 [ 1945.021551] (UME) [ 1945.030576] 0 [ 1945.031271] 271*16kB [ 1945.036134] (ME) 83*32kB (UMEH) 21*64kB (UME) 2*128kB (H) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18040kB [ 1945.037499] Node 1 [ 1945.053356] Node 0 [ 1945.054371] Normal free:26760kB min:53696kB low:67120kB high:80544kB active_anon:304kB inactive_anon:32kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:0kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 1945.057321] Normal: [ 1945.057932] lowmem_reserve[]: [ 1945.092738] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1945.097156] 0 0 0 0 0 [ 1945.112494] Node 1 [ 1945.113582] Node 0 [ 1945.113585] Normal: 50*4kB [ 1945.117644] DMA: [ 1945.118564] (UM) [ 1945.121009] 2*4kB [ 1945.123047] 50*8kB [ 1945.130485] (UM) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 2*2048kB (M) 1*4096kB (M) = 10976kB [ 1945.134320] (UM) 41*16kB (ME) 37*32kB (M) 36*64kB (UM) 22*128kB (UM) 15*256kB (ME) 8*512kB (ME) 3*1024kB (UME) 2*2048kB (M) 1*4096kB (M) = 26760kB [ 1945.154002] Node 0 DMA32: 1111*4kB (UME) 562*8kB (UME) 271*16kB (ME) 84*32kB (UMEH) 21*64kB (UME) 2*128kB (H) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18076kB [ 1945.169922] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1945.185360] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1945.193871] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1945.204638] Node 1 Normal: 50*4kB (UM) 50*8kB (UM) 41*16kB (ME) 37*32kB (M) 36*64kB (UM) 22*128kB (UM) 15*256kB (ME) 8*512kB (ME) 3*1024kB (UME) 2*2048kB (M) 1*4096kB (M) = 26760kB [ 1945.211613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1945.229627] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1945.238648] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1945.247514] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1945.250140] 29484 total pagecache pages [ 1945.265179] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1945.269217] 0 pages in swap cache [ 1945.277488] Swap cache stats: add 0, delete 0, find 0/0 [ 1945.278890] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1945.282832] Free swap = 0kB [ 1945.282837] Total swap = 0kB [ 1945.293106] 29484 total pagecache pages [ 1945.294846] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1945.294888] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1945.294930] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1945.301821] 2097051 pages RAM [ 1945.307086] 0 pages in swap cache [ 1945.309137] 0 pages HighMem/MovableOnly [ 1945.321392] Swap cache stats: add 0, delete 0, find 0/0 [ 1945.328044] 363840 pages reserved [ 1945.328910] Free swap = 0kB [ 1945.332866] 0 pages cma reserved [ 1945.344901] Total swap = 0kB [ 1945.351139] 2097051 pages RAM [ 1945.359792] 0 pages HighMem/MovableOnly [ 1945.365846] 363840 pages reserved [ 1945.369304] 0 pages cma reserved [ 1945.372661] Out of memory (oom_kill_allocating_task): Kill process 7979 (syz-fuzzer) score 0 or sacrifice child [ 1945.389131] Killed process 15438 (syz-executor.1) total-vm:85024kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 1945.413328] oom_reaper: reaped process 15438 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1945.435611] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1945.467565] in:imklog cpuset=/ mems_allowed=0-1 [ 1945.472265] CPU: 1 PID: 16692 Comm: in:imklog Not tainted 4.14.214-syzkaller #0 [ 1945.481542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1945.490900] Call Trace: [ 1945.493493] dump_stack+0x1b2/0x283 [ 1945.497214] dump_header+0x178/0x82f [ 1945.500925] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1945.506048] ? ___ratelimit+0x2cd/0x522 [ 1945.510022] oom_kill_process.cold+0x10/0xb18 [ 1945.514529] out_of_memory+0xe3e/0x1190 [ 1945.518505] ? oom_killer_disable+0x1c0/0x1c0 [ 1945.522999] ? mutex_trylock+0x152/0x1a0 [ 1945.527065] __alloc_pages_nodemask+0x23e1/0x2720 [ 1945.532004] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1945.536856] alloc_pages_current+0x155/0x260 [ 1945.541265] filemap_fault+0xea3/0x1980 [ 1945.545243] ext4_filemap_fault+0x84/0xb0 [ 1945.549386] __do_fault+0xfa/0x380 [ 1945.552920] __handle_mm_fault+0x2497/0x4620 [ 1945.557326] ? vm_insert_page+0x7c0/0x7c0 [ 1945.561468] ? lock_downgrade+0x740/0x740 [ 1945.565619] handle_mm_fault+0x391/0x860 [ 1945.569678] __do_page_fault+0x549/0xad0 [ 1945.573739] ? spurious_fault+0x640/0x640 [ 1945.577878] ? do_page_fault+0x60/0x4f2 [ 1945.581845] ? page_fault+0x2f/0x50 [ 1945.585464] page_fault+0x45/0x50 [ 1945.588898] RIP: ffffffff:0x1f9f [ 1945.592240] RSP: 2b5cc78b:0000000000000000 EFLAGS: 7f20b0a8a308 [ 1945.596862] Mem-Info: [ 1945.605396] active_anon:16811 inactive_anon:29069 isolated_anon:0 [ 1945.605396] active_file:11 inactive_file:11 isolated_file:0 [ 1945.605396] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1945.605396] slab_reclaimable:12466 slab_unreclaimable:110926 [ 1945.605396] mapped:17413 shmem:29450 pagetables:552 bounce:0 [ 1945.605396] free:16940 free_pcp:268 free_cma:0 [ 1945.648235] Node 0 active_anon:66940kB inactive_anon:116244kB active_file:48kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69652kB dirty:0kB writeback:0kB shmem:117756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1945.698723] systemd[1]: systemd-journald.service: Failed to fork: Cannot allocate memory [ 1945.728196] systemd[1]: systemd-journald.service: Failed to run 'start' task: Cannot allocate memory [ 1945.729768] Node 1 active_anon:304kB inactive_anon:32kB active_file:96kB inactive_file:6808kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4300kB dirty:0kB writeback:0kB shmem:44kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1945.797934] systemd[1]: Failed to start Journal Service. [ 1945.811907] systemd[1]: Dependency failed for Flush Journal to Persistent Storage. [ 1945.816724] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1945.863381] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1945.875790] Node 0 DMA32 free:35140kB min:36200kB low:45248kB high:54296kB active_anon:66940kB inactive_anon:116240kB active_file:48kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:6944kB pagetables:2208kB bounce:0kB free_pcp:896kB local_pcp:204kB free_cma:0kB [ 1945.924694] device hsr_slave_1 left promiscuous mode [ 1945.935196] device hsr_slave_0 left promiscuous mode [ 1945.950127] lowmem_reserve[]: 0 0 0 0 0 [ 1945.955954] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1945.984586] team0 (unregistering): Port device team_slave_1 removed [ 1945.995164] team0 (unregistering): Port device team_slave_0 removed [ 1946.005589] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1946.014058] lowmem_reserve[]: 0 0 0 0 0 [ 1946.024515] Node 1 Normal free:449952kB min:53696kB low:67120kB high:80544kB active_anon:776kB inactive_anon:20kB active_file:2024kB inactive_file:10916kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:0kB bounce:0kB free_pcp:1140kB local_pcp:408kB free_cma:0kB [ 1946.056697] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1946.078637] systemd-journald[18125]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1946.094934] bond0 (unregistering): Released all slaves [ 1946.127488] lowmem_reserve[]: 0 0 0 0 0 [ 1946.135308] Node 0 DMA: 6*4kB (UM) 3*8kB (UM) 4*16kB (UM) 3*32kB (UM) 4*64kB (UM) 6*128kB (UM) 5*256kB (UM) 2*512kB (UM) 1*1024kB (M) 2*2048kB (M) 1*4096kB (M) = 12752kB [ 1946.171118] Node 0 DMA32: 8629*4kB (UMEH) 3932*8kB (UMEH) 1346*16kB (UME) 666*32kB (UME) 315*64kB (UME) 28*128kB (UH) 7*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 136404kB [ 1946.185132] systemd-journald[18125]: /dev/kmsg buffer overrun, some messages lost. [ 1946.234802] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1946.267015] Node 1 Normal: 33*4kB (UM) 53*8kB (U) 68*16kB (UME) 75*32kB (UM) 84*64kB (U) 55*128kB (U) 59*256kB (UME) 48*512kB (UME) 48*1024kB (UME) 29*2048kB (UM) 75*4096kB (UM) = 471884kB [ 1946.306637] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1946.327121] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1946.346940] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1946.366924] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1946.393630] 37141 total pagecache pages [ 1946.397625] 0 pages in swap cache [ 1946.401061] Swap cache stats: add 0, delete 0, find 0/0 [ 1946.426751] Free swap = 0kB [ 1946.429796] Total swap = 0kB [ 1946.432810] 2097051 pages RAM [ 1946.446744] 0 pages HighMem/MovableOnly [ 1946.450735] 363840 pages reserved [ 1946.463589] 0 pages cma reserved [ 1946.466963] Out of memory (oom_kill_allocating_task): Kill process 16692 (in:imklog) score 0 or sacrifice child [ 1946.493625] Killed process 16687 (rsyslogd) total-vm:254332kB, anon-rss:1112kB, file-rss:0kB, shmem-rss:0kB [ 1946.508500] oom_reaper: reaped process 16687 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1948.516102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1948.522835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1948.536063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1948.542771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1948.555129] device bridge_slave_1 left promiscuous mode [ 1948.560762] bridge0: port 2(bridge_slave_1) entered disabled state [ 1948.571930] device bridge_slave_0 left promiscuous mode [ 1948.590955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1948.617945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1948.634509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1948.657941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1948.664876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1948.673070] device bridge_slave_1 left promiscuous mode [ 1948.679732] bridge0: port 2(bridge_slave_1) entered disabled state [ 1948.688453] device bridge_slave_0 left promiscuous mode [ 1948.695325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1948.705561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1948.712358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1948.721945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1948.729356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1948.738170] device bridge_slave_1 left promiscuous mode [ 1948.744404] bridge0: port 2(bridge_slave_1) entered disabled state [ 1948.751758] device bridge_slave_0 left promiscuous mode [ 1948.758166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1948.771265] device veth1_macvtap left promiscuous mode [ 1948.777354] device veth0_macvtap left promiscuous mode [ 1948.782680] device veth1_vlan left promiscuous mode [ 1948.788715] device veth0_vlan left promiscuous mode [ 1948.794813] device veth1_macvtap left promiscuous mode [ 1948.800322] device veth0_macvtap left promiscuous mode [ 1948.806859] device veth1_vlan left promiscuous mode [ 1948.811916] device veth0_vlan left promiscuous mode [ 1948.818136] device veth1_macvtap left promiscuous mode [ 1948.824122] device veth0_macvtap left promiscuous mode [ 1948.829443] device veth1_vlan left promiscuous mode [ 1948.835399] device veth0_vlan left promiscuous mode [ 1949.047029] device hsr_slave_1 left promiscuous mode [ 1949.057793] device hsr_slave_0 left promiscuous mode [ 1949.073026] team0 (unregistering): Port device team_slave_1 removed [ 1949.084364] team0 (unregistering): Port device team_slave_0 removed [ 1949.094465] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1949.106264] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1949.150151] bond0 (unregistering): Released all slaves [ 1949.201847] device hsr_slave_1 left promiscuous mode [ 1949.213041] device hsr_slave_0 left promiscuous mode [ 1949.233007] team0 (unregistering): Port device team_slave_1 removed [ 1949.247643] team0 (unregistering): Port device team_slave_0 removed [ 1949.258674] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1949.274398] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1949.313877] bond0 (unregistering): Released all slaves [ 1949.365892] device hsr_slave_1 left promiscuous mode [ 1949.376512] device hsr_slave_0 left promiscuous mode [ 1949.392590] team0 (unregistering): Port device team_slave_1 removed [ 1949.407653] team0 (unregistering): Port device team_slave_0 removed [ 1949.417753] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1949.432161] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1949.472740] bond0 (unregistering): Released all slaves [ 1950.537467] IPVS: ftp: loaded support on port[0] = 21 [ 1950.572412] IPVS: ftp: loaded support on port[0] = 21 23:23:41 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x9}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x0, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:23:41 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) [ 1950.638049] chnl_net:caif_netlink_parms(): no params data found [ 1950.653842] Bluetooth: hci1 command 0x0409 tx timeout [ 1950.655216] Bluetooth: hci0 command 0x0409 tx timeout [ 1950.818484] chnl_net:caif_netlink_parms(): no params data found [ 1950.935372] bridge0: port 1(bridge_slave_0) entered blocking state [ 1950.942355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1950.951026] device bridge_slave_0 entered promiscuous mode [ 1950.958656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1950.966131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1950.974547] device bridge_slave_0 entered promiscuous mode [ 1950.981222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1950.989136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1950.997267] device bridge_slave_1 entered promiscuous mode [ 1951.004126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1951.010477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1951.019017] device bridge_slave_1 entered promiscuous mode [ 1951.055702] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1951.066011] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1951.075301] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1951.092665] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1951.123156] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1951.130937] team0: Port device team_slave_0 added [ 1951.137490] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1951.146513] team0: Port device team_slave_0 added [ 1951.151761] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1951.160745] team0: Port device team_slave_1 added [ 1951.166774] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1951.174991] team0: Port device team_slave_1 added [ 1951.210731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1951.217729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1951.244811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1951.255900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1951.262146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1951.289234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1951.300772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1951.309685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1951.338410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1951.350458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1951.360302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1951.389370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1951.401786] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1951.412826] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1951.421066] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1951.433161] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1951.489064] device hsr_slave_0 entered promiscuous mode [ 1951.495703] device hsr_slave_1 entered promiscuous mode [ 1951.505365] device hsr_slave_0 entered promiscuous mode [ 1951.515703] device hsr_slave_1 entered promiscuous mode [ 1951.521645] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1951.530955] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1951.540743] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1951.549424] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1951.782247] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1951.794159] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1951.888629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1951.905760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1951.913362] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1951.921723] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1951.929324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1951.937243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1951.946297] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1951.954595] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1951.960665] 8021q: adding VLAN 0 to HW filter on device team0 [ 1951.970860] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1951.979424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1951.987183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1951.997042] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1952.007239] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1952.014677] 8021q: adding VLAN 0 to HW filter on device team0 [ 1952.021011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1952.030222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1952.038575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1952.044984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1952.055041] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1952.065165] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1952.074286] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1952.084877] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1952.092049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1952.100424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1952.109179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1952.117694] bridge0: port 2(bridge_slave_1) entered blocking state [ 1952.124106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1952.132314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1952.140935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1952.149986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1952.161186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1952.167733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1952.178026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1952.186571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1952.197513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1952.203937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1952.213903] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1952.222875] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1952.234381] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1952.241352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1952.248819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1952.260847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1952.269784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1952.280670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1952.291618] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1952.304178] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1952.314501] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1952.321956] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1952.329985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1952.339778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1952.352241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1952.360485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1952.371007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1952.381040] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1952.391954] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1952.399570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1952.409956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1952.420797] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1952.430471] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1952.437891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1952.453872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1952.461519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1952.469951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1952.480237] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1952.491854] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1952.498834] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1952.506078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1952.519488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1952.529640] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1952.546750] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1952.553146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1952.561465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1952.574110] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1952.580108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1952.591391] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1952.598583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1952.608239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1952.620995] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1952.634615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1952.648731] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1952.655825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1952.662523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1952.684349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1952.734143] Bluetooth: hci0 command 0x041b tx timeout [ 1952.740438] Bluetooth: hci1 command 0x041b tx timeout [ 1952.818418] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1952.828518] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1952.841670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1952.851299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1952.868246] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1952.882674] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1952.899195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1952.910408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1952.962599] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1952.975758] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1952.982622] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1953.007791] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1953.029570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1953.041993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1953.060279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1953.067377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1953.080177] device veth0_vlan entered promiscuous mode [ 1953.089488] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1953.092065] IPVS: ftp: loaded support on port[0] = 21 [ 1953.099817] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1953.108344] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1953.125160] device veth1_vlan entered promiscuous mode [ 1953.131141] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1953.165724] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1953.177896] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1953.189321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1953.200163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1953.208682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1953.218887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1953.231122] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1953.247022] device veth0_vlan entered promiscuous mode [ 1953.257898] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1953.265496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1953.279429] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1953.296389] device veth1_vlan entered promiscuous mode [ 1953.302843] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1953.316100] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1953.327949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1953.336058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1953.348855] device veth0_macvtap entered promiscuous mode [ 1953.355876] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1953.371917] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1953.400271] device veth1_macvtap entered promiscuous mode [ 1953.411363] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1953.478721] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1953.490901] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1953.538073] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1953.547609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1953.558745] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1953.566861] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1953.577663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1953.586128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1953.604161] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1953.612156] device veth0_macvtap entered promiscuous mode [ 1953.621978] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1953.630721] chnl_net:caif_netlink_parms(): no params data found [ 1953.651954] device veth1_macvtap entered promiscuous mode [ 1953.662323] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1953.678248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1953.688399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1953.701456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1953.712033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1953.726184] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1953.735374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1953.746163] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1953.763761] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1953.771421] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1953.784998] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1953.792821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1953.806789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1953.819001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1953.829411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1953.841661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1953.853663] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1953.860560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1953.873663] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1953.890435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1953.903799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1953.920476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1953.933100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1953.948213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1953.962851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1953.975416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1953.986032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1953.998891] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1954.006844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1954.016876] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1954.030024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1954.042028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1954.052192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1954.061613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1954.077156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1954.091280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1954.104620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1954.117167] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1954.125394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1954.132045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1954.142424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1954.237163] bridge0: port 1(bridge_slave_0) entered blocking state [ 1954.249907] bridge0: port 1(bridge_slave_0) entered disabled state [ 1954.265061] device bridge_slave_0 entered promiscuous mode [ 1954.272926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1954.281028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1954.293743] device bridge_slave_1 entered promiscuous mode [ 1954.334239] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1954.350740] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1954.398286] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1954.412122] team0: Port device team_slave_0 added [ 1954.420757] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1954.439708] team0: Port device team_slave_1 added 23:23:45 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x3ca26104, 0x0, 0x9, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x9, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:23:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x2c, 0xc, 0xdc000000, &(0x7f0000000000)) accept4(r0, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80, 0x80000) [ 1954.495778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1954.521820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1954.551897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1954.582070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1954.597679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1954.630513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1954.643753] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1954.651270] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1954.745238] device hsr_slave_0 entered promiscuous mode [ 1954.751254] device hsr_slave_1 entered promiscuous mode [ 1954.758567] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1954.767128] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1954.813579] Bluetooth: hci1 command 0x040f tx timeout [ 1954.818870] Bluetooth: hci0 command 0x040f tx timeout 23:23:45 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0x0, 0x3f, 0x397, 0x4, 0x1, 0x7}) 23:23:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r0, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80, 0x80000) [ 1954.932745] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1954.985311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1954.998079] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1955.014232] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1955.025807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 23:23:45 executing program 4: accept4(0xffffffffffffffff, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80, 0x80000) [ 1955.033315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1955.043015] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1955.052706] 8021q: adding VLAN 0 to HW filter on device team0 [ 1955.059365] Bluetooth: hci2 command 0x0409 tx timeout [ 1955.077309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1955.094676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1955.112180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1955.120601] bridge0: port 1(bridge_slave_0) entered blocking state [ 1955.127034] bridge0: port 1(bridge_slave_0) entered forwarding state 23:23:46 executing program 4: accept4(0xffffffffffffffff, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80, 0x80000) 23:23:46 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0xfff, 0x800, 0x0, 'queue1\x00', 0x1a}) 23:23:46 executing program 5: getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, 0x0, &(0x7f0000000200)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x81, 0x4, 0x6, @local, @local, 0x20, 0x80, 0x3, 0xac21}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x40, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3f}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) pipe2$9p(&(0x7f0000000500), 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020027bd7000fbdbdf2506000000080006000400000054000380060007004e240000080003000000000005000800010000000600040040000000060007004e22000005000800050000000600040005000000060007004e2100000600040007000000060007004e2300000c00028008000300020000007cf36926f9928662aa2b0cac4f1d791c36f5dd5f48a5"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb65f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000002}, 0x4040) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x5) [ 1955.146520] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1955.166290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1955.178081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 23:23:46 executing program 4: accept4(0xffffffffffffffff, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80, 0x80000) 23:23:46 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x51}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) write$sndseq(r0, 0x0, 0x0) [ 1955.200392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1955.221581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1955.228020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1955.267005] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1955.287383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1955.302283] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1955.312651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1955.328186] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1955.338703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1955.350022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1955.360020] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1955.371657] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1955.381878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1955.393211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1955.403779] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1955.412946] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1955.423988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1955.432769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1955.443599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1955.451150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1955.465469] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1955.471596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1955.506145] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1955.514246] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1955.520494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1955.532530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1955.549717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1955.630956] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1955.647079] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1955.658130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1955.667395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1955.722505] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1955.730168] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1955.742407] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1955.758955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1955.770211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1955.778204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1955.796039] device veth0_vlan entered promiscuous mode [ 1955.818216] device veth1_vlan entered promiscuous mode [ 1955.838909] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1955.849022] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1955.861954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1955.870619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1955.884040] device veth0_macvtap entered promiscuous mode [ 1955.890320] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1955.903514] device veth1_macvtap entered promiscuous mode [ 1955.909925] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1955.922722] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1955.938016] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1955.948161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1955.961210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1955.970878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1955.984121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1955.995875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1956.007204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1956.019529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1956.030973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1956.043862] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1956.050932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1956.060983] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1956.068889] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1956.079642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1956.087760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1956.100910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1956.111397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1956.124558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1956.136054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1956.146722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1956.158794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1956.169343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1956.181736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1956.195948] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1956.202850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1956.211254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1956.222148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1956.895119] Bluetooth: hci0 command 0x0419 tx timeout [ 1956.900493] Bluetooth: hci1 command 0x0419 tx timeout [ 1956.987162] IPVS: ftp: loaded support on port[0] = 21 [ 1957.143224] Bluetooth: hci2 command 0x041b tx timeout [ 1957.270143] oom_reaper: reaped process 18261 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1957.357542] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 1957.375964] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1957.381200] CPU: 0 PID: 18901 Comm: syz-executor.1 Not tainted 4.14.214-syzkaller #0 [ 1957.389077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1957.398430] Call Trace: [ 1957.401024] dump_stack+0x1b2/0x283 [ 1957.404653] dump_header+0x178/0x82f [ 1957.408365] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1957.413477] ? ___ratelimit+0x2cd/0x522 [ 1957.417457] oom_kill_process.cold+0x10/0xb18 [ 1957.421961] out_of_memory+0xe3e/0x1190 [ 1957.426024] ? oom_killer_disable+0x1c0/0x1c0 [ 1957.430545] ? mutex_trylock+0x152/0x1a0 [ 1957.434610] __alloc_pages_nodemask+0x23e1/0x2720 [ 1957.435033] syz-executor.0: vmalloc: allocation failure, allocated 538341376 of 1073745920 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 1957.439457] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1957.439463] (null) [ 1957.452744] alloc_pages_current+0x155/0x260 [ 1957.452758] filemap_fault+0xea3/0x1980 [ 1957.457605] syz-executor.0 cpuset= [ 1957.459744] ext4_filemap_fault+0x84/0xb0 [ 1957.464146] / [ 1957.468090] __do_fault+0xfa/0x380 [ 1957.471606] mems_allowed=0-1 [ 1957.475739] __handle_mm_fault+0x2497/0x4620 [ 1957.475749] ? vm_insert_page+0x7c0/0x7c0 [ 1957.475756] ? free_object+0xe4/0x240 [ 1957.475775] handle_mm_fault+0x391/0x860 [ 1957.500511] __do_page_fault+0x549/0xad0 [ 1957.504560] ? spurious_fault+0x640/0x640 [ 1957.508692] ? do_page_fault+0x60/0x4f2 [ 1957.512648] ? page_fault+0x2f/0x50 [ 1957.516282] page_fault+0x45/0x50 [ 1957.519722] RIP: 119ca00:0x3e8 [ 1957.522896] RSP: 1dde0a:0000000000000001 EFLAGS: 0119ca00 [ 1957.522914] CPU: 1 PID: 18261 Comm: syz-executor.0 Not tainted 4.14.214-syzkaller #0 [ 1957.527334] Mem-Info: [ 1957.528448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1957.536531] active_anon:17022 inactive_anon:31110 isolated_anon:0 [ 1957.536531] active_file:24 inactive_file:1 isolated_file:0 [ 1957.536531] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1957.536531] slab_reclaimable:12365 slab_unreclaimable:112098 [ 1957.536531] mapped:52685 shmem:31510 pagetables:790 bounce:0 [ 1957.536531] free:13930 free_pcp:60 free_cma:0 [ 1957.538815] Call Trace: [ 1957.551757] Node 0 active_anon:67340kB inactive_anon:124400kB active_file:20kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175924kB dirty:0kB writeback:0kB shmem:125984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1957.581248] dump_stack+0x1b2/0x283 [ 1957.581260] warn_alloc.cold+0x96/0x1cc [ 1957.581269] ? zone_watermark_ok_safe+0x220/0x220 [ 1957.581290] __vmalloc_area_node+0x48a/0x680 [ 1957.581305] ? __vmalloc_node_range+0x150/0x150 [ 1957.581314] ? __get_vm_area_node+0x27d/0x340 [ 1957.581325] __vmalloc_node_range+0xbe/0x150 [ 1957.581336] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1957.581343] vmalloc_user+0x47/0xa0 [ 1957.581351] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1957.581362] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1957.581371] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1957.581382] __vb2_queue_alloc+0x47a/0xd90 [ 1957.581399] vb2_core_create_bufs+0x279/0x5a0 [ 1957.581408] ? __vb2_queue_free+0x7a0/0x7a0 [ 1957.581423] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1957.581432] ? trace_hardirqs_on+0x10/0x10 [ 1957.581443] vb2_create_bufs+0x2e1/0x5b0 [ 1957.581453] ? vb2_thread_start.cold+0x24/0x24 [ 1957.581459] ? trace_hardirqs_on+0x10/0x10 [ 1957.581473] v4l_create_bufs+0xa4/0x150 [ 1957.581483] __video_do_ioctl+0x65b/0x6a0 [ 1957.581495] ? video_ioctl2+0x30/0x30 [ 1957.581507] ? __might_fault+0x177/0x1b0 [ 1957.581518] video_usercopy+0xf5/0xe90 [ 1957.587714] Node 1 active_anon:748kB inactive_anon:40kB active_file:76kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:56kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1957.611933] ? video_ioctl2+0x30/0x30 [ 1957.611943] ? v4l_g_ctrl+0x390/0x390 [ 1957.611951] ? lock_acquire+0x170/0x3f0 [ 1957.611959] ? trace_hardirqs_on+0x10/0x10 [ 1957.611968] ? trace_hardirqs_on+0x10/0x10 [ 1957.611977] ? futex_exit_release+0x220/0x220 [ 1957.611989] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1957.612000] ? __might_fault+0x104/0x1b0 [ 1957.612011] v4l2_ioctl+0x1bb/0x2f0 [ 1957.619534] Node 0 [ 1957.619592] ? v4l2_open+0x2f0/0x2f0 [ 1957.624480] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1957.628827] do_vfs_ioctl+0x75a/0xff0 [ 1957.636971] lowmem_reserve[]: [ 1957.637958] ? ioctl_preallocate+0x1a0/0x1a0 [ 1957.642352] 0 [ 1957.647698] ? lock_downgrade+0x740/0x740 [ 1957.647711] ? __fget+0x225/0x360 [ 1957.647721] ? do_vfs_ioctl+0xff0/0xff0 [ 1957.647730] ? security_file_ioctl+0x83/0xb0 [ 1957.647740] SyS_ioctl+0x7f/0xb0 [ 1957.647747] ? do_vfs_ioctl+0xff0/0xff0 [ 1957.647758] do_syscall_64+0x1d5/0x640 [ 1957.651361] 2717 [ 1957.655677] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1957.655685] RIP: 0033:0x45e219 [ 1957.655690] RSP: 002b:00007f1ac3343c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1957.655700] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1957.655705] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1957.655710] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1957.655715] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1957.655719] R13: 00007ffc3c007fbf R14: 00007f1ac33449c0 R15: 000000000119bf8c [ 1957.672601] Mem-Info: [ 1957.677510] 2718 [ 1957.682973] active_anon:17022 inactive_anon:31110 isolated_anon:0 [ 1957.682973] active_file:24 inactive_file:1 isolated_file:0 [ 1957.682973] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1957.682973] slab_reclaimable:12365 slab_unreclaimable:112098 [ 1957.682973] mapped:52685 shmem:31510 pagetables:790 bounce:0 [ 1957.682973] free:13930 free_pcp:59 free_cma:0 [ 1957.683881] 2718 [ 1957.688108] Node 0 active_anon:67340kB inactive_anon:124400kB active_file:20kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175924kB dirty:0kB writeback:0kB shmem:125984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1957.692136] 2718 [ 1957.707472] Node 1 active_anon:748kB inactive_anon:40kB active_file:76kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:56kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1957.712721] Node 0 [ 1957.720465] Node 0 [ 1957.721084] DMA32 free:18092kB min:36200kB low:45248kB high:54296kB active_anon:67420kB inactive_anon:124396kB active_file:128kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2792kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 1957.757594] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1957.763095] lowmem_reserve[]: [ 1957.770049] lowmem_reserve[]: [ 1957.772541] 0 [ 1957.782862] 0 [ 1957.787206] 0 [ 1957.795637] 2717 [ 1957.819524] 0 [ 1957.821541] 2718 [ 1957.824604] 0 0 [ 1957.824614] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1957.824631] lowmem_reserve[]: 0 0 0 0 0 [ 1957.824655] Node 1 Normal free:26676kB min:53696kB low:67120kB high:80544kB active_anon:748kB inactive_anon:40kB active_file:76kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:368kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1957.824671] lowmem_reserve[]: 0 0 0 0 0 [ 1957.841005] 2718 [ 1957.852199] 2718 [ 1957.856610] Node 0 [ 1957.866122] DMA: [ 1957.869262] Node 0 [ 1957.878800] 2*4kB [ 1957.895970] DMA32 free:18092kB min:36200kB low:45248kB high:54296kB active_anon:67420kB inactive_anon:124396kB active_file:128kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2792kB bounce:0kB free_pcp:112kB local_pcp:112kB free_cma:0kB [ 1957.900917] (UM) [ 1957.914641] lowmem_reserve[]: [ 1957.921557] 2*8kB [ 1957.961358] 0 [ 1957.991815] (UM) [ 1958.019669] 0 [ 1958.051373] 1*16kB [ 1958.076182] 0 [ 1958.086807] (M) [ 1958.090136] 0 [ 1958.090427] 1*32kB [ 1958.122164] 0 [ 1958.150324] (M) [ 1958.196491] 2*64kB [ 1958.211655] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1958.215445] (UM) [ 1958.218288] lowmem_reserve[]: [ 1958.219541] 2*128kB [ 1958.221501] 0 [ 1958.223828] (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 2*2048kB (M) 1*4096kB (M) = 10952kB [ 1958.223867] Node 0 DMA32: [ 1958.262567] 0 [ 1958.269530] 1065*4kB (UME) 606*8kB (UME) 243*16kB (UME) 68*32kB (UME) 15*64kB (UME) 7*128kB (UM) 6*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18564kB [ 1958.273251] 0 [ 1958.289358] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1958.299262] 0 0 [ 1958.302754] Node 1 Normal: 112*4kB (M) 85*8kB (UM) 70*16kB (UME) 53*32kB (UM) 39*64kB (M) 25*128kB (UM) 14*256kB (UME) 7*512kB (UME) 2*1024kB (UE) 2*2048kB (M) 1*4096kB (M) = 27048kB [ 1958.306891] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1958.306896] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1958.306901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1958.306906] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1958.306910] 31543 total pagecache pages [ 1958.306918] 0 pages in swap cache [ 1958.306923] Swap cache stats: add 0, delete 0, find 0/0 [ 1958.306926] Free swap = 0kB [ 1958.306928] Total swap = 0kB [ 1958.306934] 2097051 pages RAM [ 1958.306936] 0 pages HighMem/MovableOnly [ 1958.306939] 363840 pages reserved [ 1958.306942] 0 pages cma reserved [ 1958.306950] Out of memory (oom_kill_allocating_task): Kill process 18901 (syz-executor.1) score 0 or sacrifice child [ 1958.336772] Node 1 [ 1958.343325] Killed process 18901 (syz-executor.1) total-vm:93484kB, anon-rss:104kB, file-rss:33756kB, shmem-rss:0kB [ 1958.364072] Normal free:27048kB min:53696kB low:67120kB high:80544kB active_anon:744kB inactive_anon:40kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:368kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1958.383549] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1958.396124] lowmem_reserve[]: [ 1958.403850] (null) [ 1958.416567] 0 [ 1958.456654] , order=0, oom_score_adj=0 [ 1958.463918] in:imklog cpuset=/ mems_allowed=0-1 [ 1958.468250] 0 0 [ 1958.468596] CPU: 0 PID: 18131 Comm: in:imklog Not tainted 4.14.214-syzkaller #0 [ 1958.468602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1958.470564] 0 [ 1958.477990] Call Trace: [ 1958.478003] dump_stack+0x1b2/0x283 [ 1958.478015] dump_header+0x178/0x82f [ 1958.478025] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1958.478044] ? ___ratelimit+0x2cd/0x522 [ 1958.478054] oom_kill_process.cold+0x10/0xb18 [ 1958.478068] out_of_memory+0xe3e/0x1190 [ 1958.487417] 0 [ 1958.489196] ? oom_killer_disable+0x1c0/0x1c0 [ 1958.495362] ? mutex_trylock+0x152/0x1a0 [ 1958.495373] __alloc_pages_nodemask+0x23e1/0x2720 [ 1958.495393] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1958.499079] Node 0 [ 1958.504180] alloc_pages_current+0x155/0x260 [ 1958.504190] filemap_fault+0xea3/0x1980 [ 1958.508142] DMA: [ 1958.512631] ext4_filemap_fault+0x84/0xb0 [ 1958.516599] 2*4kB [ 1958.518374] __do_fault+0xfa/0x380 [ 1958.522845] (UM) [ 1958.526939] __handle_mm_fault+0x2497/0x4620 [ 1958.526949] ? vm_insert_page+0x7c0/0x7c0 [ 1958.526959] ? lock_downgrade+0x740/0x740 [ 1958.531954] 2*8kB [ 1958.536791] handle_mm_fault+0x391/0x860 [ 1958.536804] __do_page_fault+0x549/0xad0 [ 1958.539018] (UM) [ 1958.543414] ? spurious_fault+0x640/0x640 [ 1958.543423] ? do_page_fault+0x60/0x4f2 [ 1958.543431] ? page_fault+0x2f/0x50 [ 1958.547382] 1*16kB [ 1958.549429] page_fault+0x45/0x50 [ 1958.553606] (M) [ 1958.555733] RIP: ffffffff:0x1f9f [ 1958.559248] 1*32kB [ 1958.561291] RSP: 60d8b78b:0000000000000000 EFLAGS: 7fb7fa12d308 [ 1958.563376] Mem-Info: [ 1958.577871] (M) [ 1958.580839] active_anon:17016 inactive_anon:31110 isolated_anon:0 [ 1958.580839] active_file:16 inactive_file:17 isolated_file:0 [ 1958.580839] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1958.580839] slab_reclaimable:12365 slab_unreclaimable:112098 [ 1958.580839] mapped:52671 shmem:31510 pagetables:752 bounce:0 [ 1958.580839] free:14204 free_pcp:36 free_cma:0 [ 1958.591319] 2*64kB [ 1958.596758] Node 0 active_anon:67320kB inactive_anon:124400kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175868kB dirty:0kB writeback:0kB shmem:125984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1958.604137] (UM) [ 1958.604348] Node 1 active_anon:744kB inactive_anon:40kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:56kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1958.606233] 2*128kB [ 1958.609579] Node 0 [ 1958.611797] (UM) [ 1958.619725] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1958.631933] 1*256kB [ 1958.657400] lowmem_reserve[]: [ 1958.671352] (M) [ 1958.687425] 0 [ 1958.687681] 2*512kB [ 1958.716013] 2717 [ 1958.728114] (UM) [ 1958.748711] 2718 2718 2718 [ 1958.767125] 1*1024kB (M) 2*2048kB (M) 1*4096kB (M) = 10952kB [ 1958.767715] Node 0 DMA32 free:18616kB min:36200kB low:45248kB high:54296kB active_anon:67320kB inactive_anon:124396kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2788kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 1958.782558] Node 0 [ 1958.803890] lowmem_reserve[]: 0 0 0 0 0 [ 1958.810104] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1958.813414] DMA32: 1069*4kB (UME) 620*8kB (UME) 243*16kB (UME) 67*32kB (UME) 15*64kB (UME) 7*128kB (UM) 6*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18660kB [ 1958.837477] lowmem_reserve[]: 0 0 0 0 0 [ 1958.856521] Node 1 Normal free:27248kB min:53696kB low:67120kB high:80544kB active_anon:744kB inactive_anon:40kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:220kB bounce:0kB free_pcp:140kB local_pcp:140kB free_cma:0kB [ 1958.863538] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1958.886757] lowmem_reserve[]: 0 0 0 0 0 [ 1958.900091] Node 0 DMA: 2*4kB (UM) 2*8kB (UM) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 2*2048kB (M) 1*4096kB (M) = 10952kB [ 1958.908455] Node 1 Normal: 103*4kB (M) 80*8kB (M) 68*16kB (UME) 55*32kB (UM) 39*64kB (M) 24*128kB (M) 14*256kB (ME) 6*512kB (ME) 1*1024kB (E) 3*2048kB (UM) 1*4096kB (M) = 27388kB [ 1958.917019] Node 0 DMA32: 1069*4kB (UME) 620*8kB (UME) 243*16kB (UME) 67*32kB (UME) 15*64kB (UME) 7*128kB (UM) 6*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18660kB [ 1958.942848] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1958.948572] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1958.967033] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1958.968365] Node 1 [ 1958.975759] Bluetooth: hci4 command 0x0409 tx timeout [ 1958.985759] Normal: 103*4kB (M) 80*8kB (M) 68*16kB (UME) 55*32kB (UM) 39*64kB (M) 24*128kB (M) 14*256kB (ME) 6*512kB (ME) 1*1024kB (E) 3*2048kB (UM) 1*4096kB (M) = 27388kB [ 1958.986318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1959.001521] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1959.001527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1959.001532] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1959.001538] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1959.001541] 31543 total pagecache pages [ 1959.001550] 0 pages in swap cache [ 1959.001554] Swap cache stats: add 0, delete 0, find 0/0 [ 1959.001558] Free swap = 0kB [ 1959.001561] Total swap = 0kB [ 1959.001567] 2097051 pages RAM [ 1959.001570] 0 pages HighMem/MovableOnly [ 1959.001573] 363840 pages reserved [ 1959.001576] 0 pages cma reserved [ 1959.001582] Out of memory (oom_kill_allocating_task): Kill process 18131 (in:imklog) score 0 or sacrifice child [ 1959.001624] Killed process 18129 (rsyslogd) total-vm:254332kB, anon-rss:680kB, file-rss:0kB, shmem-rss:0kB [ 1959.021877] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1959.031001] oom_reaper: reaped process 18129 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1959.041759] 31543 total pagecache pages [ 1959.062771] kworker/u4:3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask= [ 1959.067932] 0 pages in swap cache [ 1959.091489] (null) [ 1959.102152] Swap cache stats: add 0, delete 0, find 0/0 [ 1959.117720] , order=3, oom_score_adj=0 [ 1959.128131] Free swap = 0kB [ 1959.140701] kworker/u4:3 cpuset= [ 1959.146882] Total swap = 0kB [ 1959.150445] / [ 1959.152075] 2097051 pages RAM [ 1959.152078] 0 pages HighMem/MovableOnly [ 1959.152081] 363840 pages reserved [ 1959.152083] 0 pages cma reserved [ 1959.180545] mems_allowed=0-1 [ 1959.183740] CPU: 0 PID: 291 Comm: kworker/u4:3 Not tainted 4.14.214-syzkaller #0 [ 1959.191263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1959.200618] Workqueue: events_unbound call_usermodehelper_exec_work [ 1959.207014] Call Trace: [ 1959.209601] dump_stack+0x1b2/0x283 [ 1959.213229] dump_header+0x178/0x82f [ 1959.216943] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1959.222037] ? ___ratelimit+0x2cd/0x522 [ 1959.226008] oom_kill_process.cold+0x10/0xb18 [ 1959.230500] ? lock_downgrade+0x740/0x740 [ 1959.234644] out_of_memory+0x2dc/0x1190 [ 1959.238619] ? oom_killer_disable+0x1c0/0x1c0 [ 1959.243109] ? mutex_trylock+0x152/0x1a0 [ 1959.247254] __alloc_pages_nodemask+0x23e1/0x2720 [ 1959.252099] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1959.256933] ? fs_reclaim_release+0xd0/0x110 [ 1959.261343] ? kmem_cache_alloc_node+0x38b/0x410 [ 1959.266094] copy_process.part.0+0x265/0x71c0 [ 1959.270594] ? __lock_acquire+0x5fc/0x3f20 [ 1959.274826] ? debug_object_activate+0x292/0x490 [ 1959.279576] ? static_obj+0x50/0x50 [ 1959.283194] ? lock_acquire+0x170/0x3f0 [ 1959.287169] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1959.292717] ? __cleanup_sighand+0x40/0x40 [ 1959.296948] ? mod_timer+0x4e7/0xf70 [ 1959.300655] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1959.306197] _do_fork+0x184/0xc80 [ 1959.309642] ? fork_idle+0x270/0x270 [ 1959.313449] ? lock_downgrade+0x740/0x740 [ 1959.317580] ? process_one_work+0x6c4/0x14a0 [ 1959.321996] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1959.327424] kernel_thread+0x2f/0x40 [ 1959.331119] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1959.336380] ? call_usermodehelper+0x80/0x80 [ 1959.340771] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1959.346205] process_one_work+0x793/0x14a0 [ 1959.350422] ? work_busy+0x320/0x320 [ 1959.354112] ? worker_thread+0x158/0xff0 [ 1959.358152] ? _raw_spin_unlock_irq+0x24/0x80 [ 1959.362626] worker_thread+0x5cc/0xff0 [ 1959.366495] ? rescuer_thread+0xc80/0xc80 [ 1959.370619] kthread+0x30d/0x420 [ 1959.373961] ? kthread_create_on_node+0xd0/0xd0 [ 1959.378607] ret_from_fork+0x24/0x30 [ 1959.392935] Bluetooth: hci2 command 0x040f tx timeout [ 1959.399564] Mem-Info: [ 1959.401988] active_anon:16789 inactive_anon:31110 isolated_anon:0 [ 1959.401988] active_file:42 inactive_file:0 isolated_file:0 [ 1959.401988] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1959.401988] slab_reclaimable:12365 slab_unreclaimable:112098 [ 1959.401988] mapped:52671 shmem:31510 pagetables:724 bounce:0 [ 1959.401988] free:19150 free_pcp:214 free_cma:0 [ 1959.456396] Node 0 active_anon:66504kB inactive_anon:124400kB active_file:156kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175868kB dirty:0kB writeback:0kB shmem:125984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1959.530147] Node 1 active_anon:652kB inactive_anon:40kB active_file:312kB inactive_file:6012kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38816kB dirty:0kB writeback:0kB shmem:56kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1959.580607] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1959.662337] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1959.678075] Node 0 DMA32 free:26000kB min:36200kB low:45248kB high:54296kB active_anon:66504kB inactive_anon:124396kB active_file:56kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7040kB pagetables:2640kB bounce:0kB free_pcp:244kB local_pcp:184kB free_cma:0kB [ 1959.726414] chnl_net:caif_netlink_parms(): no params data found [ 1959.749362] lowmem_reserve[]: 0 0 0 0 0 [ 1959.753794] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1959.781719] lowmem_reserve[]: 0 0 0 0 0 [ 1959.785888] Node 1 Normal free:384500kB min:53696kB low:67120kB high:80544kB active_anon:652kB inactive_anon:40kB active_file:312kB inactive_file:9112kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:256kB bounce:0kB free_pcp:712kB local_pcp:92kB free_cma:0kB [ 1959.816509] lowmem_reserve[]: 0 0 0 0 0 [ 1959.820520] Node 0 DMA: 2*4kB (UM) 4*8kB (UM) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 2*2048kB (M) 1*4096kB (M) = 11016kB [ 1959.836254] Node 0 DMA32: 1172*4kB (UME) 1663*8kB (UMEH) 615*16kB (UMEH) 133*32kB (UMEH) 45*64kB (UMEH) 16*128kB (UMH) 10*256kB (UMH) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 40600kB [ 1959.854118] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1959.864913] Node 1 Normal: 21*4kB (U) 58*8kB (UM) 47*16kB (UE) 34*32kB (UM) 30*64kB (UM) 15*128kB (U) 62*256kB (UME) 58*512kB (UME) 47*1024kB (UE) 35*2048kB (UM) 68*4096kB (UM) = 450132kB [ 1959.881985] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1959.890904] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1959.913093] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1959.929052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1959.938494] 34148 total pagecache pages [ 1959.942477] 0 pages in swap cache [ 1959.949994] Swap cache stats: add 0, delete 0, find 0/0 [ 1959.956521] Free swap = 0kB [ 1959.959545] Total swap = 0kB [ 1959.962552] 2097051 pages RAM [ 1959.966561] 0 pages HighMem/MovableOnly [ 1959.970530] 363840 pages reserved [ 1959.974699] 0 pages cma reserved [ 1959.978064] Out of memory: Kill process 7978 (syz-fuzzer) score 7 or sacrifice child [ 1959.987428] Killed process 18536 (syz-executor.1) total-vm:85024kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 1960.062497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1960.075277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1960.086787] device bridge_slave_0 entered promiscuous mode [ 1960.101157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1960.110716] bridge0: port 2(bridge_slave_1) entered disabled state [ 1960.120552] device bridge_slave_1 entered promiscuous mode [ 1960.180888] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1960.207052] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1960.251780] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1960.261809] team0: Port device team_slave_0 added [ 1960.290689] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1960.300407] team0: Port device team_slave_1 added [ 1960.336335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1960.342600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1960.371996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1960.391237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1960.397601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1960.428382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1960.439415] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1960.455305] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1960.491247] device hsr_slave_0 entered promiscuous mode [ 1960.497508] device hsr_slave_1 entered promiscuous mode [ 1960.512404] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1960.521204] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1960.684000] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1960.731974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1960.751736] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1960.765495] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1960.771821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1960.782603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1960.794328] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1960.800397] 8021q: adding VLAN 0 to HW filter on device team0 [ 1960.814032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1960.820734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1960.840585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1960.847693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1960.861058] device bridge_slave_1 left promiscuous mode [ 1960.867487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1960.879136] device bridge_slave_0 left promiscuous mode [ 1960.885276] bridge0: port 1(bridge_slave_0) entered disabled state [ 1960.900825] device veth1_macvtap left promiscuous mode [ 1960.906397] device veth0_macvtap left promiscuous mode [ 1960.911711] device veth1_vlan left promiscuous mode [ 1960.922117] device veth0_vlan left promiscuous mode [ 1961.050981] device hsr_slave_1 left promiscuous mode [ 1961.061073] Bluetooth: hci4 command 0x041b tx timeout [ 1961.071581] device hsr_slave_0 left promiscuous mode [ 1961.091723] team0 (unregistering): Port device team_slave_1 removed [ 1961.107157] team0 (unregistering): Port device team_slave_0 removed [ 1961.121344] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1961.139211] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1961.179693] bond0 (unregistering): Released all slaves [ 1961.195227] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1961.206707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1961.217590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1961.229676] bridge0: port 1(bridge_slave_0) entered blocking state [ 1961.236083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1961.249489] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1961.257999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1961.269277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1961.277752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1961.290169] bridge0: port 2(bridge_slave_1) entered blocking state [ 1961.296679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1961.311898] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1961.325474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1961.337318] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1961.345843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1961.356394] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1961.364874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1961.372611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1961.393232] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1961.401665] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1961.422942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1961.430687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1961.449448] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1961.466537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1961.483821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1961.493491] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1961.500259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1961.524495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1961.534029] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1961.540046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1961.587341] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1961.595286] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1961.601510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1961.626016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1961.637492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1961.910985] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1961.945668] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1961.952718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1961.974813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1962.100052] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1962.107549] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1962.123769] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1962.145985] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1962.152590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1962.163363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1962.170907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1962.193621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1962.202119] device veth0_vlan entered promiscuous mode [ 1962.216908] device veth1_vlan entered promiscuous mode [ 1962.233244] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1962.257925] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1962.286856] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1962.301340] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1962.309281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1962.321839] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1962.329819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1962.343229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1962.375441] device veth0_macvtap entered promiscuous mode [ 1962.381540] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1962.391230] device veth1_macvtap entered promiscuous mode [ 1962.401352] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1962.410663] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1962.426536] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1962.438987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1962.450038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1962.462980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1962.472686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1962.485221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1962.498206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1962.510225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1962.522445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1962.536546] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1962.543652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1962.551712] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1962.563607] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1962.570838] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1962.582955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1962.603602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1962.620097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1962.629877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1962.643335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1962.652449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1962.666177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1962.676095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1962.689055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1962.700514] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1962.710756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1962.722895] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1962.743396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1963.133051] Bluetooth: hci4 command 0x040f tx timeout 23:23:55 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') write$sndseq(r0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x200200) 23:23:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x9}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x9, 0x0, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:23:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)=0x4f) 23:23:55 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80, 0x80000) 23:23:55 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x3ca26104, 0x0, 0x9, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x9, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:23:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:23:55 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80, 0x80000) 23:23:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000000)={0x101, 0x1, 0x5, {0x59, 0x3}, 0x6, 0xffffffff}) 23:23:55 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000040)={0x4, 0x1000, 0x0, 'queue0\x00', 0x8001}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) fanotify_init(0x8, 0x1800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000480)={0x7ff, 0x3, 0x1, 'queue0\x00', 0xfff}) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000100)={0x7ff, 0xffff, 0x1, 'queue0\x00', 0x401}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.current\x00', 0x0, 0x0) write$sndseq(r2, &(0x7f00000002c0)=[{0x8, 0x3, 0x4, 0x81, @tick=0x3, {}, {0x40, 0x3}, @connect={{0x9, 0x8}, {0x64, 0x3f}}}, {0x1, 0x7, 0x7, 0xc, @tick=0x3, {0x0, 0x7f}, {0x1f, 0x8}, @control={0xff, 0x80, 0x3}}, {0x5, 0x8, 0x5, 0x7f, @tick=0xfdd2, {0x81, 0x9}, {0x1, 0x5}, @raw32={[0x7, 0x7fff, 0x1e16]}}, {0x1, 0xa2, 0x4, 0x2b, @tick=0x1, {0xff, 0x9}, {}, @ext={0x9, &(0x7f0000000200)="98de65bf8a28e108d6"}}, {0x2, 0x20, 0x51, 0x2, @time={0x0, 0x7}, {0x2, 0x40}, {0x2f, 0xae}, @raw32={[0x5, 0x5, 0x1]}}, {0x7, 0x7, 0x3, 0x2, @time={0x2, 0x9}, {0x6, 0x5}, {0x40, 0xc9}, @queue={0x20, {0xffffffff, 0xc8a0}}}, {0x0, 0x5, 0x4, 0x3f, @time={0x2, 0x800}, {0x0, 0x3}, {0x40, 0x8}, @ext={0x68, &(0x7f0000000240)="5bea4a9a59b96c4271433078a1c6c8480890ae3349e3cf0b44d6d0bb74e2551fdf3d1b1c7d347cd876f6cd0b327bca376ce3eabcf45a24011aa5fd704b5412c0bc70506d8d358ef76899614225fbde5a85e15c823eec8f8a2064356217eb2977f1066b8d27ed6971"}}, {0x0, 0xff, 0x0, 0x8, @time={0x3ff, 0x842}, {}, {0x7f, 0x68}, @queue={0x0, {0xffff8001, 0x3}}}, {0x4d, 0xf7, 0x3, 0x20, @tick=0x3, {0x1, 0xfb}, {0x5, 0x9}, @control={0x80, 0x29b18367, 0x1}}], 0xfc) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x80000000, 0x7fff, 0x0, 'queue1\x00', 0x1}) 23:23:55 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80, 0x80000) 23:23:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r0, 0x0, &(0x7f00000000c0), 0x80000) 23:23:55 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/seq\x00', 0x101800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000200)={0x4, 0xfffffffb, 0x5}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000100)={{0x9, 0x9}, 'port1\x00', 0x6, 0x20401, 0x5, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x4, 0x3f}) write$sndseq(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000040)={{0x8, 0x7f}, 'port1\x00', 0x8, 0x2a70b54082fbb064, 0x8, 0x7, 0x2, 0x6, 0xc, 0x0, 0x2, 0x6}) 23:23:55 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=""/228, &(0x7f0000000100)=0xe4) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) connect$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x3, @private=0xa010101}}, 0x1e) socketpair(0x0, 0x80800, 0x5, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_int(r1, 0x6, 0x1, 0x0, &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) [ 1965.222710] Bluetooth: hci4 command 0x0419 tx timeout [ 1966.839259] IPVS: ftp: loaded support on port[0] = 21 [ 1967.078849] chnl_net:caif_netlink_parms(): no params data found [ 1967.171116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1967.178423] bridge0: port 1(bridge_slave_0) entered disabled state [ 1967.189539] device bridge_slave_0 entered promiscuous mode [ 1967.197326] bridge0: port 2(bridge_slave_1) entered blocking state [ 1967.207364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1967.215444] device bridge_slave_1 entered promiscuous mode [ 1967.250760] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1967.260223] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1967.294789] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1967.302320] team0: Port device team_slave_0 added [ 1967.311790] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1967.319362] team0: Port device team_slave_1 added [ 1967.351380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1967.358016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1967.388607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1967.400556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1967.410688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1967.439978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1967.451277] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1967.463200] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1967.500665] device hsr_slave_0 entered promiscuous mode [ 1967.506997] device hsr_slave_1 entered promiscuous mode [ 1967.517418] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1967.525657] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1967.653948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1967.660316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1967.666979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1967.673384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1967.727089] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1967.735153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1967.747205] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1967.758149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1967.767778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1967.777884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1967.790670] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1967.799506] 8021q: adding VLAN 0 to HW filter on device team0 [ 1967.811646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1967.822141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1967.828654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1967.858634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1967.867058] bridge0: port 2(bridge_slave_1) entered blocking state [ 1967.873485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1967.889843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1967.898626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1967.919449] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1967.930089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1967.938345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1967.950997] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1967.957784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1967.977659] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1967.989180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1967.999234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1968.015375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1968.026749] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1968.125153] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1968.139355] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1968.147925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1968.160350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1968.211505] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1968.223906] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1968.230723] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1968.245033] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1968.251767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1968.265758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1968.278079] device veth0_vlan entered promiscuous mode [ 1968.286788] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1968.297733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1968.309056] device veth1_vlan entered promiscuous mode [ 1968.319389] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1968.330605] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1968.349289] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1968.364212] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1968.371282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1968.382189] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1968.390767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1968.401772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1968.413310] device veth0_macvtap entered promiscuous mode [ 1968.419608] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1968.434325] device veth1_macvtap entered promiscuous mode [ 1968.440727] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1968.456293] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1968.469958] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1968.479728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1968.494467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.506247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1968.517402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.529492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1968.540759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.553710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1968.565868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.576979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1968.589410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.601506] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1968.611559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1968.619904] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1968.630208] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1968.638959] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1968.649503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1968.660826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1968.675517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.685752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1968.698758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.709589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1968.723350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.737865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1968.748856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.761172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1968.771864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.786230] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1968.794426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1968.801280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1968.815187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1968.893055] Bluetooth: hci2 command 0x0409 tx timeout [ 1969.249186] oom_reaper: reaped process 19164 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1969.280085] syz-executor.2 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1969.295891] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1969.301012] CPU: 1 PID: 19164 Comm: syz-executor.2 Not tainted 4.14.214-syzkaller #0 [ 1969.308883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1969.318229] Call Trace: [ 1969.320803] dump_stack+0x1b2/0x283 [ 1969.324410] dump_header+0x178/0x82f [ 1969.328106] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1969.333304] ? ___ratelimit+0x2cd/0x522 [ 1969.337256] oom_kill_process.cold+0x10/0xb18 [ 1969.341730] out_of_memory+0xe3e/0x1190 [ 1969.345686] ? oom_killer_disable+0x1c0/0x1c0 [ 1969.350166] ? mutex_trylock+0x152/0x1a0 [ 1969.354207] __alloc_pages_nodemask+0x23e1/0x2720 [ 1969.359035] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1969.363855] ? check_preemption_disabled+0x35/0x240 [ 1969.368904] alloc_pages_current+0x155/0x260 [ 1969.373292] __vmalloc_area_node+0x40a/0x680 [ 1969.377683] ? __vmalloc_node_range+0x150/0x150 [ 1969.382328] ? __get_vm_area_node+0x27d/0x340 [ 1969.386802] __vmalloc_node_range+0xbe/0x150 [ 1969.391192] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1969.396530] vmalloc_user+0x47/0xa0 [ 1969.400135] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1969.404434] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1969.409774] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1969.414027] __vb2_queue_alloc+0x47a/0xd90 [ 1969.418244] vb2_core_create_bufs+0x279/0x5a0 [ 1969.422717] ? __vb2_queue_free+0x7a0/0x7a0 [ 1969.427022] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1969.432393] ? trace_hardirqs_on+0x10/0x10 [ 1969.436610] vb2_create_bufs+0x2e1/0x5b0 [ 1969.440650] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 1969.445730] ? vb2_thread_start.cold+0x24/0x24 [ 1969.450285] ? trace_hardirqs_on+0x10/0x10 [ 1969.454500] v4l_create_bufs+0xa4/0x150 [ 1969.458451] __video_do_ioctl+0x65b/0x6a0 [ 1969.462579] ? video_ioctl2+0x30/0x30 [ 1969.466360] ? __might_fault+0x177/0x1b0 [ 1969.470500] video_usercopy+0xf5/0xe90 [ 1969.474366] ? video_ioctl2+0x30/0x30 [ 1969.478153] ? v4l_g_ctrl+0x390/0x390 [ 1969.482038] ? lock_acquire+0x170/0x3f0 [ 1969.485988] ? trace_hardirqs_on+0x10/0x10 [ 1969.490202] ? trace_hardirqs_on+0x10/0x10 [ 1969.494412] ? futex_exit_release+0x220/0x220 [ 1969.498883] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1969.503963] ? __might_fault+0x104/0x1b0 [ 1969.508024] v4l2_ioctl+0x1bb/0x2f0 [ 1969.511626] ? v4l2_open+0x2f0/0x2f0 [ 1969.515315] do_vfs_ioctl+0x75a/0xff0 [ 1969.519125] ? ioctl_preallocate+0x1a0/0x1a0 [ 1969.523509] ? lock_downgrade+0x740/0x740 [ 1969.527651] ? __fget+0x225/0x360 [ 1969.531080] ? do_vfs_ioctl+0xff0/0xff0 [ 1969.535034] ? security_file_ioctl+0x83/0xb0 [ 1969.539419] SyS_ioctl+0x7f/0xb0 [ 1969.542760] ? do_vfs_ioctl+0xff0/0xff0 [ 1969.546709] do_syscall_64+0x1d5/0x640 [ 1969.550593] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1969.555759] RIP: 0033:0x45e219 [ 1969.558923] RSP: 002b:00007f28fa2b0c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1969.566606] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1969.573859] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1969.581118] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1969.588379] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1969.595627] R13: 00007fff51e6ab7f R14: 00007f28fa2b19c0 R15: 000000000119bf8c [ 1969.606951] Mem-Info: [ 1969.609380] active_anon:17045 inactive_anon:31109 isolated_anon:0 [ 1969.609380] active_file:17 inactive_file:17 isolated_file:0 [ 1969.609380] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1969.609380] slab_reclaimable:12340 slab_unreclaimable:115639 [ 1969.609380] mapped:52739 shmem:31510 pagetables:763 bounce:0 [ 1969.609380] free:13802 free_pcp:86 free_cma:0 [ 1969.647355] Node 0 active_anon:67020kB inactive_anon:124412kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141324kB dirty:0kB writeback:0kB shmem:125996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1969.677460] Node 1 active_anon:1160kB inactive_anon:24kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69632kB dirty:0kB writeback:0kB shmem:44kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1969.706061] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1969.732482] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1969.737525] Node 0 DMA32 free:17792kB min:36200kB low:45248kB high:54296kB active_anon:67020kB inactive_anon:124408kB active_file:124kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7104kB pagetables:2548kB bounce:0kB free_pcp:224kB local_pcp:104kB free_cma:0kB [ 1969.766757] lowmem_reserve[]: 0 0 0 0 0 [ 1969.770884] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1969.796632] lowmem_reserve[]: 0 0 0 0 0 [ 1969.800614] Node 1 Normal free:26448kB min:53696kB low:67120kB high:80544kB active_anon:1160kB inactive_anon:24kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:504kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1969.828871] lowmem_reserve[]: 0 0 0 0 0 [ 1969.832883] Node 0 DMA: 2*4kB (UM) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 2*2048kB (M) 1*4096kB (M) = 10968kB [ 1969.848109] Node 0 DMA32: 1068*4kB (ME) 598*8kB (UME) 232*16kB (ME) 81*32kB (ME) 24*64kB (UME) 7*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17792kB [ 1969.862633] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1969.873396] Node 1 Normal: 106*4kB (UM) 81*8kB (M) 68*16kB (ME) 51*32kB (UM) 44*64kB (UM) 25*128kB (UM) 11*256kB (ME) 7*512kB (UME) 2*1024kB (UE) 2*2048kB (M) 1*4096kB (M) = 26448kB [ 1969.889860] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1969.898716] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1969.907337] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1969.916266] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1969.924873] 31544 total pagecache pages [ 1969.928833] 0 pages in swap cache [ 1969.932257] Swap cache stats: add 0, delete 0, find 0/0 [ 1969.938105] Free swap = 0kB [ 1969.941109] Total swap = 0kB [ 1969.944159] 2097051 pages RAM [ 1969.947252] 0 pages HighMem/MovableOnly [ 1969.951232] 363840 pages reserved [ 1969.954707] 0 pages cma reserved [ 1969.958059] Out of memory (oom_kill_allocating_task): Kill process 19164 (syz-executor.2) score 0 or sacrifice child [ 1969.968765] Killed process 19164 (syz-executor.2) total-vm:93348kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1969.978911] syz-executor.2: vmalloc: allocation failure, allocated 525320192 of 1073745920 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1969.984243] modprobe invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1969.996930] syz-executor.2 cpuset= [ 1970.004334] (null) [ 1970.006503] / [ 1970.009999] , order=0, oom_score_adj=0 [ 1970.012127] mems_allowed=0-1 [ 1970.021801] modprobe cpuset=/ mems_allowed=0-1 [ 1970.022874] CPU: 0 PID: 19164 Comm: syz-executor.2 Not tainted 4.14.214-syzkaller #0 [ 1970.042949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1970.052298] Call Trace: [ 1970.054876] dump_stack+0x1b2/0x283 [ 1970.058499] warn_alloc.cold+0x96/0x1cc [ 1970.062475] ? zone_watermark_ok_safe+0x220/0x220 [ 1970.067321] __vmalloc_area_node+0x48a/0x680 [ 1970.071714] ? __vmalloc_node_range+0x150/0x150 [ 1970.076370] ? __get_vm_area_node+0x27d/0x340 [ 1970.080855] __vmalloc_node_range+0xbe/0x150 [ 1970.085248] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1970.090604] vmalloc_user+0x47/0xa0 [ 1970.094244] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1970.098562] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1970.104016] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1970.108153] __vb2_queue_alloc+0x47a/0xd90 [ 1970.112403] vb2_core_create_bufs+0x279/0x5a0 [ 1970.116895] ? __vb2_queue_free+0x7a0/0x7a0 [ 1970.121213] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1970.126563] ? trace_hardirqs_on+0x10/0x10 [ 1970.130784] vb2_create_bufs+0x2e1/0x5b0 [ 1970.134838] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 1970.139929] ? vb2_thread_start.cold+0x24/0x24 [ 1970.144497] ? trace_hardirqs_on+0x10/0x10 [ 1970.148724] v4l_create_bufs+0xa4/0x150 [ 1970.152691] __video_do_ioctl+0x65b/0x6a0 [ 1970.156838] ? video_ioctl2+0x30/0x30 [ 1970.160631] ? __might_fault+0x177/0x1b0 [ 1970.164678] video_usercopy+0xf5/0xe90 [ 1970.168547] ? video_ioctl2+0x30/0x30 [ 1970.172328] ? v4l_g_ctrl+0x390/0x390 [ 1970.176126] ? lock_acquire+0x170/0x3f0 [ 1970.180093] ? trace_hardirqs_on+0x10/0x10 [ 1970.184319] ? trace_hardirqs_on+0x10/0x10 [ 1970.188545] ? futex_exit_release+0x220/0x220 [ 1970.193026] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1970.198120] ? __might_fault+0x104/0x1b0 [ 1970.202184] v4l2_ioctl+0x1bb/0x2f0 [ 1970.205795] ? v4l2_open+0x2f0/0x2f0 [ 1970.209492] do_vfs_ioctl+0x75a/0xff0 [ 1970.213281] ? ioctl_preallocate+0x1a0/0x1a0 [ 1970.217678] ? lock_downgrade+0x740/0x740 [ 1970.221815] ? __fget+0x225/0x360 [ 1970.225250] ? do_vfs_ioctl+0xff0/0xff0 [ 1970.229203] ? security_file_ioctl+0x83/0xb0 [ 1970.233598] SyS_ioctl+0x7f/0xb0 [ 1970.236958] ? do_vfs_ioctl+0xff0/0xff0 [ 1970.240922] do_syscall_64+0x1d5/0x640 [ 1970.244794] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1970.249964] RIP: 0033:0x45e219 [ 1970.253140] RSP: 002b:00007f28fa2b0c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1970.260838] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1970.268087] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1970.275346] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1970.282620] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1970.289912] R13: 00007fff51e6ab7f R14: 00007f28fa2b19c0 R15: 000000000119bf8c [ 1970.300031] Mem-Info: [ 1970.302504] active_anon:17045 inactive_anon:31109 isolated_anon:0 [ 1970.302504] active_file:17 inactive_file:17 isolated_file:0 [ 1970.302504] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1970.302504] slab_reclaimable:12340 slab_unreclaimable:115614 [ 1970.302504] mapped:52739 shmem:31510 pagetables:763 bounce:0 [ 1970.302504] free:13828 free_pcp:89 free_cma:0 [ 1970.309266] CPU: 1 PID: 19434 Comm: modprobe Not tainted 4.14.214-syzkaller #0 [ 1970.335803] Node 0 active_anon:67020kB inactive_anon:124412kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141324kB dirty:0kB writeback:0kB shmem:125996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1970.343085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1970.343089] Call Trace: [ 1970.343106] dump_stack+0x1b2/0x283 [ 1970.343119] dump_header+0x178/0x82f [ 1970.370883] Node 1 active_anon:1160kB inactive_anon:24kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69632kB dirty:0kB writeback:0kB shmem:44kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1970.380190] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1970.380198] ? ___ratelimit+0x2cd/0x522 [ 1970.380209] oom_kill_process.cold+0x10/0xb18 [ 1970.382779] Node 0 [ 1970.386380] out_of_memory+0xe3e/0x1190 [ 1970.390073] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1970.416594] ? oom_killer_disable+0x1c0/0x1c0 [ 1970.416601] ? mutex_trylock+0x152/0x1a0 [ 1970.416613] __alloc_pages_nodemask+0x23e1/0x2720 [ 1970.421686] lowmem_reserve[]: [ 1970.425651] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1970.425674] alloc_pages_current+0x155/0x260 [ 1970.430128] 0 [ 1970.432373] filemap_fault+0xea3/0x1980 [ 1970.432389] ext4_filemap_fault+0x84/0xb0 [ 1970.436338] 2717 [ 1970.461905] __do_fault+0xfa/0x380 [ 1970.461914] __handle_mm_fault+0x2497/0x4620 [ 1970.461924] ? vm_insert_page+0x7c0/0x7c0 [ 1970.466405] 2718 [ 1970.470438] ? free_uid+0x24d/0x330 [ 1970.475262] 2718 [ 1970.478345] handle_mm_fault+0x391/0x860 [ 1970.483164] 2718 [ 1970.487544] __do_page_fault+0x549/0xad0 [ 1970.493277] ? spurious_fault+0x640/0x640 [ 1970.493285] ? do_page_fault+0x60/0x4f2 [ 1970.493294] ? page_fault+0x2f/0x50 [ 1970.497428] Node 0 [ 1970.499484] page_fault+0x45/0x50 [ 1970.503023] DMA32 free:17792kB min:36200kB low:45248kB high:54296kB active_anon:67020kB inactive_anon:124408kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7104kB pagetables:2548kB bounce:0kB free_pcp:228kB local_pcp:116kB free_cma:0kB [ 1970.507382] RIP: 33fe:0x3c06 [ 1970.511500] lowmem_reserve[]: [ 1970.513535] RSP: 155b5c81:00007ffe947ca520 EFLAGS: 7f1075f61808 [ 1970.524497] Mem-Info: [ 1970.527303] 0 [ 1970.529640] active_anon:17045 inactive_anon:31109 isolated_anon:0 [ 1970.529640] active_file:17 inactive_file:17 isolated_file:0 [ 1970.529640] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1970.529640] slab_reclaimable:12340 slab_unreclaimable:115614 [ 1970.529640] mapped:52739 shmem:31510 pagetables:763 bounce:0 [ 1970.529640] free:13828 free_pcp:87 free_cma:0 [ 1970.533786] 0 0 0 0 [ 1970.533801] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1970.533819] lowmem_reserve[]: 0 0 0 0 0 [ 1970.533839] Node 1 Normal free:26552kB min:53696kB low:67120kB high:80544kB active_anon:1160kB inactive_anon:24kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:504kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 1970.533857] lowmem_reserve[]: 0 0 0 0 0 [ 1970.533874] Node 0 DMA: 2*4kB (UM) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 2*2048kB (M) 1*4096kB (M) = 10968kB [ 1970.533950] Node 0 DMA32: 1068*4kB (ME) 599*8kB (UME) 232*16kB (ME) 81*32kB (ME) 24*64kB (UME) 7*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17800kB [ 1970.534015] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1970.534062] Node 1 Normal: 106*4kB (UM) 92*8kB (UM) 72*16kB (UME) 51*32kB (UM) 44*64kB (UM) [ 1970.546980] Node 0 active_anon:67020kB inactive_anon:124412kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141324kB dirty:0kB writeback:0kB shmem:125996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1970.549161] 25*128kB [ 1970.585269] Node 1 active_anon:1160kB inactive_anon:24kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69632kB dirty:0kB writeback:0kB shmem:44kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1970.589964] (UM) [ 1970.590616] Node 0 [ 1970.592424] 11*256kB (ME) 7*512kB (UME) 2*1024kB (UE) 2*2048kB (M) 1*4096kB (M) = 26600kB [ 1970.592471] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1970.637825] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1970.655761] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1970.671440] lowmem_reserve[]: [ 1970.690209] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1970.699538] 0 [ 1970.709370] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1970.728862] 2717 [ 1970.734559] 31544 total pagecache pages [ 1970.741935] 2718 [ 1970.776026] 0 pages in swap cache [ 1970.800599] 2718 [ 1970.800755] Swap cache stats: add 0, delete 0, find 0/0 [ 1970.809185] 2718 [ 1970.826646] Free swap = 0kB [ 1970.861006] Total swap = 0kB [ 1970.867593] Node 0 [ 1970.883274] 2097051 pages RAM [ 1970.889476] DMA32 free:17792kB min:36200kB low:45248kB high:54296kB active_anon:67020kB inactive_anon:124408kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7104kB pagetables:2548kB bounce:0kB free_pcp:220kB local_pcp:104kB free_cma:0kB [ 1970.900620] 0 pages HighMem/MovableOnly [ 1970.907356] lowmem_reserve[]: [ 1970.908949] 363840 pages reserved [ 1970.940032] 0 0 0 0 0 [ 1970.947934] 0 pages cma reserved [ 1970.949361] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1970.982373] Bluetooth: hci2 command 0x041b tx timeout [ 1970.994187] lowmem_reserve[]: 0 0 0 0 0 [ 1970.998187] Node 1 Normal free:27104kB min:53696kB low:67120kB high:80544kB active_anon:1160kB inactive_anon:24kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:504kB bounce:0kB free_pcp:184kB local_pcp:180kB free_cma:0kB [ 1971.030630] lowmem_reserve[]: 0 0 0 0 0 [ 1971.034667] Node 0 DMA: 2*4kB (UM) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 2*2048kB (M) 1*4096kB (M) = 10968kB [ 1971.054061] Node 0 DMA32: 1068*4kB (ME) 599*8kB (UME) 232*16kB (ME) 81*32kB (ME) 24*64kB (UME) 7*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17800kB [ 1971.071251] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1971.085922] Node 1 Normal: 106*4kB (UM) 147*8kB (UM) 76*16kB (UME) 51*32kB (UM) 44*64kB (UM) 25*128kB (UM) 11*256kB (ME) 7*512kB (UME) 2*1024kB (UE) 2*2048kB (M) 1*4096kB (M) = 27104kB [ 1971.106527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1971.120284] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1971.137084] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1971.149465] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1971.166086] 31544 total pagecache pages [ 1971.170072] 0 pages in swap cache [ 1971.176193] Swap cache stats: add 0, delete 0, find 0/0 [ 1971.181752] Free swap = 0kB [ 1971.188172] Total swap = 0kB [ 1971.191195] 2097051 pages RAM [ 1971.196030] 0 pages HighMem/MovableOnly [ 1971.200356] 363840 pages reserved [ 1971.207587] 0 pages cma reserved [ 1971.211762] Out of memory (oom_kill_allocating_task): Kill process 19434 (modprobe) score 0 or sacrifice child [ 1971.226980] Killed process 19434 (modprobe) total-vm:472kB, anon-rss:4kB, file-rss:0kB, shmem-rss:0kB [ 1973.052511] Bluetooth: hci2 command 0x040f tx timeout 23:24:05 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='comm\x00') r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0) write$sndseq(r2, 0x0, 0x0) 23:24:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x3ca26104, 0x0, 0x9, 0x10000000}, 0x0, 0x0, &(0x7f00000000c0)={{0x9, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:24:05 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x0, 0x6, 0xfffffff9}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:24:05 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="011cf775", @ANYRES16=0x0, @ANYBLOB="000028bd7000ffdbdf25010000000500070002000000050022000000000014002000fe800000000000000000000000000014080018007f00000108000c00040000000c000f000800000000000000060002000100000005000d000100000008001900ac14144306000e0001000000"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x20008884) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/mice\x00', 0x400) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x40, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0xa0a01, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000480)) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3f}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, r5, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c173c68", @ANYRES16=r5, @ANYBLOB="000427bd7000ffdbdf250c000000080005005fb60000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000002}, 0x4040) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r5, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x10040810) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f00000004c0)={0x5, 0x17, 0xffffffff, 0x0, r7}) getsockopt$inet6_tcp_int(r6, 0x6, 0x10, 0x0, &(0x7f0000000200)) 23:24:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x9}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x9, 0x0, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:24:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x80000) 23:24:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x0) 23:24:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sockstat\x00') openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r5, 0x109}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x104, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x800) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r6, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x25}}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000880) 23:24:05 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x3ca26104, 0x0, 0x9, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x9, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:24:05 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x1e5200) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x9, 0x30fa}) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x74500, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, 0x0) sendmsg$nl_crypto(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@del={0xe8, 0x11, 0x1, 0x70bd27, 0x25dfdbfe, {{'drbg_pr_hmac_sha384\x00'}, [], [], 0x2000, 0x2000}, [{0x8, 0x1, 0xf6f3}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4048000}, 0x20000004) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x101100) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r6, 0x109}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r6, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x55}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008015}, 0x8800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000100)={0x0, 0x101, 0xd, 0x8000, 0x25, 0x3}) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, 0x0) sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7383}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1e}]}]}, 0x54}}, 0x4000) write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000001c0)={0x50, 0x9, 0xc278}) 23:24:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x28, 0xa, 0x7) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) 23:24:05 executing program 3: socket$nl_crypto(0x10, 0x3, 0x15) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x9, 0x7ff, 0x0, 'queue0\x00', 0x9}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = getpid() syz_open_procfs(r1, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='net/mcfilter6\x00') socket$nl_xfrm(0x10, 0x3, 0x6) write$sndseq(r0, 0x0, 0x0) 23:24:05 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x440600, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x10, 0x0, &(0x7f0000000000)) [ 1975.132222] Bluetooth: hci2 command 0x0419 tx timeout 23:24:06 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x3ca26104, 0x0, 0x9, 0x10000000}, 0x0, 0x0, &(0x7f00000000c0)={{0x9, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) [ 1978.550883] oom_reaper: reaped process 19452 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1978.583152] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1978.596454] systemd-journal cpuset=/ mems_allowed=0-1 [ 1978.601662] CPU: 1 PID: 18125 Comm: systemd-journal Not tainted 4.14.214-syzkaller #0 [ 1978.609622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1978.618967] Call Trace: [ 1978.621553] dump_stack+0x1b2/0x283 [ 1978.625181] dump_header+0x178/0x82f [ 1978.628890] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1978.633990] ? ___ratelimit+0x2cd/0x522 [ 1978.637959] oom_kill_process.cold+0x10/0xb18 [ 1978.642459] out_of_memory+0xe3e/0x1190 [ 1978.646428] ? oom_killer_disable+0x1c0/0x1c0 [ 1978.650908] ? mutex_trylock+0x152/0x1a0 [ 1978.654962] __alloc_pages_nodemask+0x23e1/0x2720 [ 1978.659800] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1978.663858] syz-executor.1: vmalloc: allocation failure, allocated 526311424 of 1073745920 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1978.664639] alloc_pages_current+0x155/0x260 [ 1978.664650] filemap_fault+0xea3/0x1980 [ 1978.683789] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1978.686785] ext4_filemap_fault+0x84/0xb0 [ 1978.686796] __do_fault+0xfa/0x380 [ 1978.699517] __handle_mm_fault+0x2497/0x4620 [ 1978.703914] ? ep_poll+0x1ab/0xa50 [ 1978.707438] ? vm_insert_page+0x7c0/0x7c0 [ 1978.711571] handle_mm_fault+0x391/0x860 [ 1978.715616] __do_page_fault+0x549/0xad0 [ 1978.719657] ? spurious_fault+0x640/0x640 [ 1978.723790] ? do_page_fault+0x60/0x4f2 [ 1978.727748] ? page_fault+0x2f/0x50 [ 1978.731354] page_fault+0x45/0x50 [ 1978.734786] RIP: 0001:0xffffffffffffffff [ 1978.738822] RSP: 7b0731e0:00007ffeca714790 EFLAGS: 7ffeca7145a0 [ 1978.738841] CPU: 0 PID: 19452 Comm: syz-executor.1 Not tainted 4.14.214-syzkaller #0 [ 1978.739502] Mem-Info: [ 1978.744893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1978.744896] Call Trace: [ 1978.744909] dump_stack+0x1b2/0x283 [ 1978.744922] warn_alloc.cold+0x96/0x1cc [ 1978.744934] ? zone_watermark_ok_safe+0x220/0x220 [ 1978.752814] active_anon:16994 inactive_anon:31108 isolated_anon:0 [ 1978.752814] active_file:10 inactive_file:25 isolated_file:0 [ 1978.752814] unevictable:0 dirty:10 writeback:0 unstable:0 [ 1978.752814] slab_reclaimable:12344 slab_unreclaimable:114895 [ 1978.752814] mapped:52773 shmem:31509 pagetables:739 bounce:0 [ 1978.752814] free:13936 free_pcp:489 free_cma:0 [ 1978.755194] __vmalloc_area_node+0x48a/0x680 [ 1978.764555] Node 0 active_anon:67212kB inactive_anon:124408kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141460kB dirty:24kB writeback:0kB shmem:125992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1978.767102] ? __vmalloc_node_range+0x150/0x150 [ 1978.770707] Node 1 active_anon:764kB inactive_anon:24kB active_file:8kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69632kB dirty:16kB writeback:0kB shmem:44kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1978.774653] ? __get_vm_area_node+0x27d/0x340 [ 1978.774665] __vmalloc_node_range+0xbe/0x150 [ 1978.774679] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1978.779497] Node 0 [ 1978.812788] vmalloc_user+0x47/0xa0 [ 1978.812799] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1978.812807] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1978.812828] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1978.817214] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1978.845118] __vb2_queue_alloc+0x47a/0xd90 [ 1978.845139] vb2_core_create_bufs+0x279/0x5a0 [ 1978.849780] lowmem_reserve[]: [ 1978.876303] ? __vb2_queue_free+0x7a0/0x7a0 [ 1978.876319] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1978.876330] ? trace_hardirqs_on+0x10/0x10 [ 1978.880816] 0 [ 1978.885204] vb2_create_bufs+0x2e1/0x5b0 [ 1978.885216] ? vb2_thread_start.cold+0x24/0x24 [ 1978.885224] ? trace_hardirqs_on+0x10/0x10 [ 1978.890561] 2717 [ 1978.892786] v4l_create_bufs+0xa4/0x150 [ 1978.892800] __video_do_ioctl+0x65b/0x6a0 [ 1978.896395] 2718 2718 [ 1978.900722] ? video_ioctl2+0x30/0x30 [ 1978.906072] 2718 [ 1978.910186] ? __might_fault+0x177/0x1b0 [ 1978.939876] video_usercopy+0xf5/0xe90 [ 1978.944355] Node 0 [ 1978.947446] ? video_ioctl2+0x30/0x30 [ 1978.951747] DMA32 free:18012kB min:36200kB low:45248kB high:54296kB active_anon:67296kB inactive_anon:124404kB active_file:64kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7104kB pagetables:2536kB bounce:0kB free_pcp:1104kB local_pcp:448kB free_cma:0kB [ 1978.957080] ? v4l_g_ctrl+0x390/0x390 [ 1978.957088] ? lock_acquire+0x170/0x3f0 [ 1978.957097] ? trace_hardirqs_on+0x10/0x10 [ 1978.961414] lowmem_reserve[]: [ 1978.963197] ? trace_hardirqs_on+0x10/0x10 [ 1978.963208] ? futex_exit_release+0x220/0x220 [ 1978.963219] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1978.967253] 0 [ 1978.971831] ? __might_fault+0x104/0x1b0 [ 1978.976054] 0 [ 1978.978086] v4l2_ioctl+0x1bb/0x2f0 [ 1978.982042] 0 [ 1978.986158] ? v4l2_open+0x2f0/0x2f0 [ 1978.988627] 0 [ 1978.992411] do_vfs_ioctl+0x75a/0xff0 [ 1978.992422] ? ioctl_preallocate+0x1a0/0x1a0 [ 1978.992431] ? lock_downgrade+0x740/0x740 [ 1978.994468] 0 [ 1978.998511] ? __fget+0x225/0x360 [ 1979.005229] ? do_vfs_ioctl+0xff0/0xff0 [ 1979.009008] Node 0 [ 1979.037355] ? security_file_ioctl+0x83/0xb0 [ 1979.037366] SyS_ioctl+0x7f/0xb0 [ 1979.037375] ? do_vfs_ioctl+0xff0/0xff0 [ 1979.041259] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1979.045212] do_syscall_64+0x1d5/0x640 [ 1979.045228] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1979.045236] RIP: 0033:0x45e219 [ 1979.049456] lowmem_reserve[]: [ 1979.052538] RSP: 002b:00007f49fc585c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1979.052547] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1979.052553] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1979.052560] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1979.056769] 0 [ 1979.061242] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1979.066493] 0 [ 1979.068101] R13: 00007ffe51cae14f R14: 00007f49fc5869c0 R15: 000000000119bf8c [ 1979.072150] 0 [ 1979.086932] Mem-Info: [ 1979.091705] 0 [ 1979.097061] active_anon:16990 inactive_anon:31108 isolated_anon:0 [ 1979.097061] active_file:13 inactive_file:12 isolated_file:0 [ 1979.097061] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1979.097061] slab_reclaimable:12344 slab_unreclaimable:114861 [ 1979.097061] mapped:52765 shmem:31509 pagetables:738 bounce:0 [ 1979.097061] free:14056 free_pcp:490 free_cma:0 [ 1979.097451] 0 [ 1979.099252] Node 0 active_anon:67192kB inactive_anon:124408kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141428kB dirty:0kB writeback:0kB shmem:125992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1979.110113] Node 1 active_anon:768kB inactive_anon:24kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69632kB dirty:0kB writeback:0kB shmem:44kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1979.113495] Node 1 Normal free:26768kB min:53696kB low:67120kB high:80544kB active_anon:768kB inactive_anon:24kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:420kB bounce:0kB free_pcp:852kB local_pcp:732kB free_cma:0kB [ 1979.113523] lowmem_reserve[]: 0 0 0 0 [ 1979.120509] Node 0 [ 1979.120832] 0 [ 1979.153832] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1979.158004] lowmem_reserve[]: [ 1979.161114] Node 0 [ 1979.175783] 0 [ 1979.177910] DMA: [ 1979.186167] 2717 [ 1979.190661] 1*4kB [ 1979.196610] 2718 [ 1979.200899] (M) [ 1979.201536] 2718 [ 1979.209539] 2*8kB [ 1979.219322] 2718 [ 1979.250845] (UM) [ 1979.306446] 2*16kB [ 1979.340211] Node 0 [ 1979.341947] (UM) [ 1979.373444] DMA32 free:18492kB min:36200kB low:45248kB high:54296kB active_anon:67192kB inactive_anon:124404kB active_file:44kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7104kB pagetables:2532kB bounce:0kB free_pcp:1108kB local_pcp:656kB free_cma:0kB [ 1979.376761] 1*32kB [ 1979.377500] lowmem_reserve[]: [ 1979.379627] (M) [ 1979.381670] 0 [ 1979.383659] 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 2*2048kB (M) 1*4096kB (M) = 10964kB [ 1979.383703] Node 0 DMA32: 1011*4kB [ 1979.390921] 0 [ 1979.392037] (ME) 603*8kB (UME) 260*16kB (UME) 91*32kB (UME) 28*64kB (UME) 6*128kB (UM) 0*256kB [ 1979.395930] 0 [ 1979.396504] 0*512kB [ 1979.398545] 0 [ 1979.428880] 0*1024kB [ 1979.435604] 0 [ 1979.436386] 0*2048kB [ 1979.452406] 0*4096kB [ 1979.465741] Node 0 [ 1979.470053] = 18500kB [ 1979.470680] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1979.473080] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB [ 1979.476599] lowmem_reserve[]: [ 1979.477718] 0*4096kB = 0kB [ 1979.480119] 0 [ 1979.509109] Node 1 [ 1979.519650] 0 [ 1979.520509] Normal: [ 1979.522319] 0 0 0 [ 1979.522332] Node 1 [ 1979.528101] 126*4kB [ 1979.528653] Normal free:26768kB min:53696kB low:67120kB high:80544kB active_anon:768kB inactive_anon:24kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:420kB bounce:0kB free_pcp:852kB local_pcp:120kB free_cma:0kB [ 1979.530761] (UM) [ 1979.538072] lowmem_reserve[]: [ 1979.562987] 103*8kB (M) 86*16kB (ME) 50*32kB (UM) 33*64kB (M) 23*128kB (M) 12*256kB (UME) 6*512kB (ME) 1*1024kB (E) 3*2048kB (UM) 1*4096kB (M) = 26768kB [ 1979.574002] 0 [ 1979.582017] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1979.582024] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1979.582029] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1979.582034] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1979.582038] 31534 total pagecache pages [ 1979.582047] 0 pages in swap cache [ 1979.582051] Swap cache stats: add 0, delete 0, find 0/0 [ 1979.582054] Free swap = 0kB [ 1979.582057] Total swap = 0kB [ 1979.582063] 2097051 pages RAM [ 1979.582069] 0 pages HighMem/MovableOnly [ 1979.588950] 0 [ 1979.592701] 363840 pages reserved [ 1979.592705] 0 pages cma reserved [ 1979.592712] Out of memory (oom_kill_allocating_task): Kill process 18125 (systemd-journal) score 0 or sacrifice child [ 1979.592740] Killed process 18125 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:2060kB [ 1979.602498] kworker/u4:3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask= [ 1979.614156] 0 [ 1979.637499] (null) [ 1979.641238] 0 [ 1979.652640] , order=3, oom_score_adj=0 [ 1979.656937] 0 [ 1979.670953] kworker/u4:3 cpuset= [ 1979.691198] / [ 1979.697794] Node 0 DMA: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 2*2048kB (M) 1*4096kB (M) = 10964kB [ 1979.704943] mems_allowed=0-1 [ 1979.719165] CPU: 1 PID: 291 Comm: kworker/u4:3 Not tainted 4.14.214-syzkaller #0 [ 1979.719767] Node 0 [ 1979.726683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1979.726697] Workqueue: events_unbound call_usermodehelper_exec_work [ 1979.726703] Call Trace: [ 1979.726715] dump_stack+0x1b2/0x283 [ 1979.726726] dump_header+0x178/0x82f [ 1979.728936] DMA32: [ 1979.738272] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1979.738281] ? ___ratelimit+0x2cd/0x522 [ 1979.738292] oom_kill_process.cold+0x10/0xb18 [ 1979.738301] ? lock_downgrade+0x740/0x740 [ 1979.738313] out_of_memory+0x2dc/0x1190 [ 1979.738329] ? oom_killer_disable+0x1c0/0x1c0 [ 1979.748313] 1150*4kB [ 1979.750922] ? mutex_trylock+0x152/0x1a0 [ 1979.754642] (UME) [ 1979.756826] __alloc_pages_nodemask+0x23e1/0x2720 [ 1979.765500] 656*8kB [ 1979.765881] ? ____cache_alloc_node+0xf4/0x1d0 [ 1979.770342] (UME) [ 1979.774473] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1979.774482] ? do_raw_spin_unlock+0x164/0x220 [ 1979.774491] ? _raw_spin_unlock+0x29/0x40 [ 1979.774499] ? ____cache_alloc_node+0xf4/0x1d0 [ 1979.774514] ? kmem_cache_alloc_node+0x38b/0x410 [ 1979.778457] 265*16kB [ 1979.783800] copy_process.part.0+0x265/0x71c0 [ 1979.783812] ? __lock_acquire+0x5fc/0x3f20 [ 1979.783823] ? static_obj+0x50/0x50 [ 1979.783830] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1979.783843] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1979.783850] ? __cleanup_sighand+0x40/0x40 [ 1979.783859] ? mark_held_locks+0xa6/0xf0 [ 1979.783870] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1979.789851] (UME) [ 1979.790298] _do_fork+0x184/0xc80 [ 1979.792457] 96*32kB [ 1979.797250] ? fork_idle+0x270/0x270 [ 1979.799543] (UME) [ 1979.804101] ? lock_downgrade+0x740/0x740 [ 1979.804114] ? process_one_work+0x6c4/0x14a0 [ 1979.804126] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1979.804134] kernel_thread+0x2f/0x40 [ 1979.804144] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1979.804153] ? call_usermodehelper+0x80/0x80 [ 1979.804160] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1979.804168] process_one_work+0x793/0x14a0 [ 1979.804181] ? work_busy+0x320/0x320 [ 1979.804188] ? worker_thread+0x158/0xff0 [ 1979.809978] 28*64kB [ 1979.811145] ? _raw_spin_unlock_irq+0x24/0x80 [ 1979.815657] (UME) [ 1979.819742] worker_thread+0x5cc/0xff0 [ 1979.827896] 8*128kB [ 1979.829037] ? rescuer_thread+0xc80/0xc80 [ 1979.831435] (UM) [ 1979.835998] kthread+0x30d/0x420 [ 1979.836006] ? kthread_create_on_node+0xd0/0xd0 [ 1979.836016] ret_from_fork+0x24/0x30 [ 1979.843832] Mem-Info: [ 1979.847455] 0*256kB [ 1979.848978] active_anon:16890 inactive_anon:31108 isolated_anon:0 [ 1979.848978] active_file:13 inactive_file:12 isolated_file:0 [ 1979.848978] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1979.848978] slab_reclaimable:12344 slab_unreclaimable:114861 [ 1979.848978] mapped:52240 shmem:31509 pagetables:738 bounce:0 [ 1979.848978] free:14631 free_pcp:31 free_cma:0 [ 1979.854814] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19976kB [ 1979.854833] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1979.854881] Node 1 Normal: 84*4kB (UM) 71*8kB (UM) 62*16kB (UME) 48*32kB (UM) 40*64kB (UM) 24*128kB (UM) 13*256kB (UME) 8*512kB (ME) 1*1024kB (E) 3*2048kB (UM) 1*4096kB (M) = 27752kB [ 1979.854960] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1979.854966] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1979.854972] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1979.854978] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1979.854982] 31534 total pagecache pages [ 1979.854992] 0 pages in swap cache [ 1979.854997] Swap cache stats: add 0, delete 0, find 0/0 [ 1979.855000] Free swap = 0kB [ 1979.855003] Total swap = 0kB [ 1979.855009] 2097051 pages RAM [ 1979.855013] 0 pages HighMem/MovableOnly [ 1979.855016] 363840 pages reserved [ 1979.855018] 0 pages cma reserved [ 1980.100651] Node 0 active_anon:66824kB inactive_anon:124404kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139268kB dirty:0kB writeback:0kB shmem:125992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1980.128698] Node 1 active_anon:668kB inactive_anon:24kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69632kB dirty:0kB writeback:0kB shmem:44kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1980.155124] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1980.181452] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1980.186533] Node 0 DMA32 free:19976kB min:36200kB low:45248kB high:54296kB active_anon:66824kB inactive_anon:124400kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7104kB pagetables:2484kB bounce:0kB free_pcp:64kB local_pcp:52kB free_cma:0kB [ 1980.215386] lowmem_reserve[]: 0 0 0 0 0 [ 1980.219382] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1980.246226] lowmem_reserve[]: 0 0 0 0 0 [ 1980.250346] Node 1 Normal free:110280kB min:53696kB low:67120kB high:80544kB active_anon:668kB inactive_anon:24kB active_file:8kB inactive_file:308kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:372kB bounce:0kB free_pcp:692kB local_pcp:72kB free_cma:0kB [ 1980.279380] lowmem_reserve[]: 0 0 0 0 0 [ 1980.283516] Node 0 DMA: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 2*2048kB (M) 1*4096kB (M) = 10964kB [ 1980.299450] Node 0 DMA32: 1150*4kB (UME) 656*8kB (UME) 265*16kB (UME) 95*32kB (UME) 28*64kB (UME) 8*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19944kB [ 1980.315302] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1980.326547] Node 1 Normal: 5*4kB (UM) 3*8kB (U) 5*16kB (UME) 49*32kB (UM) 41*64kB (UM) 25*128kB (UM) 14*256kB (UME) 9*512kB (UME) 2*1024kB (UE) 4*2048kB (UM) 48*4096kB (UM) = 222556kB [ 1980.343649] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1980.353165] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1980.362330] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1980.371327] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1980.380640] 32163 total pagecache pages [ 1980.385281] 0 pages in swap cache [ 1980.389403] Swap cache stats: add 0, delete 0, find 0/0 [ 1980.395297] Free swap = 0kB [ 1980.398797] Total swap = 0kB [ 1980.402361] 2097051 pages RAM [ 1980.405503] 0 pages HighMem/MovableOnly [ 1980.409586] 363840 pages reserved [ 1980.413095] 0 pages cma reserved [ 1980.416496] Out of memory: Kill process 7978 (syz-fuzzer) score 7 or sacrifice child [ 1980.425480] Killed process 18134 (syz-executor.4) total-vm:85024kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 1980.460471] oom_reaper: reaped process 18134 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1980.610225] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1980.625783] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1980.667817] systemd[1]: Stopped Journal Service. [ 1980.695409] systemd[1]: Starting Journal Service... [ 1980.721609] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1980.935723] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1980.949246] systemd-journald[19526]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1981.034425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1981.041180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1981.076010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1981.095802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1981.117824] device bridge_slave_1 left promiscuous mode [ 1981.123522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1981.142879] device bridge_slave_0 left promiscuous mode [ 1981.148389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1981.197913] device veth1_macvtap left promiscuous mode [ 1981.203409] device veth0_macvtap left promiscuous mode [ 1981.208838] device veth1_vlan left promiscuous mode [ 1981.216974] systemd[1]: Started Journal Service. [ 1981.225090] device veth0_vlan left promiscuous mode [ 1981.337712] device hsr_slave_1 left promiscuous mode [ 1981.348062] device hsr_slave_0 left promiscuous mode [ 1981.365889] team0 (unregistering): Port device team_slave_1 removed [ 1981.376031] team0 (unregistering): Port device team_slave_0 removed [ 1981.387149] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1981.397980] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1981.431222] bond0 (unregistering): Released all slaves 23:24:14 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x0, 0x6, 0xfffffff9}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:24:14 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000140)) 23:24:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) 23:24:14 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x3ca26104, 0x0, 0x9, 0x10000000}, 0x0, 0x0, &(0x7f00000000c0)={{0x9, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:24:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x9}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x9, 0x0, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:24:14 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x3ca26104, 0x0, 0x9, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x9, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:24:15 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f0000000040)) 23:24:15 executing program 3: r0 = getpid() syz_open_procfs(r0, 0x0) r1 = getpid() syz_open_procfs(r1, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x1, @loopback}}, 0x1e) r2 = syz_open_procfs(r1, &(0x7f0000000040)='oom_score\x00') write$sndseq(r2, 0x0, 0x0) 23:24:15 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) write$sndseq(r0, 0x0, 0x0) 23:24:15 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, &(0x7f0000000040)=0xfffffffffffffe3b) socket$l2tp(0x2, 0x2, 0x73) 23:24:15 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x100, 0x0) write$sndseq(r0, 0x0, 0x0) 23:24:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x95}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040040}, 0x4) 23:24:15 executing program 3: getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) getpeername$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipmr_newroute={0x80, 0x18, 0x8, 0x70bd2a, 0x25dfdbfc, {0x80, 0x80, 0x14, 0x7f, 0xfe, 0x0, 0xff, 0xa}, [@RTA_METRICS={0x40, 0x8, 0x0, 0x1, "6b441462c3f7bf87470819dae6fcf90d06b72c33f430ef26493c99f8408fee913e64b9422e04f0d859b15e3980edd55cfdafed4de4a5dd0dad4bdd0b"}, @RTA_MULTIPATH={0xc, 0x9, {0xfc00, 0x1, 0x8, r0}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_SRC={0x8, 0x2, @remote}, @RTA_DST={0x8, 0x1, @local}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') write$sndseq(r3, &(0x7f0000000040), 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400000, 0x0) write$sndseq(r3, 0x0, 0x0) [ 1986.928914] IPVS: ftp: loaded support on port[0] = 21 [ 1987.149425] chnl_net:caif_netlink_parms(): no params data found [ 1987.346538] bridge0: port 1(bridge_slave_0) entered blocking state [ 1987.356726] bridge0: port 1(bridge_slave_0) entered disabled state [ 1987.365733] device bridge_slave_0 entered promiscuous mode [ 1987.379273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1987.386229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1987.398510] device bridge_slave_1 entered promiscuous mode [ 1987.429951] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1987.443945] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1987.478534] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1987.486139] team0: Port device team_slave_0 added [ 1987.492948] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1987.500241] team0: Port device team_slave_1 added [ 1987.534408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1987.540679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1987.570834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1987.583432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1987.589687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1987.622131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1987.636587] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1987.645125] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1987.681899] device hsr_slave_0 entered promiscuous mode [ 1987.687947] device hsr_slave_1 entered promiscuous mode [ 1987.698723] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1987.706664] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1987.835850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1987.842278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1987.848915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1987.855314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1987.908816] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1987.915117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1987.929285] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1987.939819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1987.952674] bridge0: port 1(bridge_slave_0) entered disabled state [ 1987.959459] bridge0: port 2(bridge_slave_1) entered disabled state [ 1987.975916] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1987.986312] 8021q: adding VLAN 0 to HW filter on device team0 [ 1987.996886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1988.009377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1988.015792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1988.057261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1988.065779] bridge0: port 2(bridge_slave_1) entered blocking state [ 1988.072187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1988.083591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1988.094765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1988.110123] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1988.122952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1988.135792] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1988.144186] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1988.155879] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1988.164336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1988.176924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1988.196055] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1988.204397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1988.218675] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1988.226766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1988.237339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1988.254350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1988.343158] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1988.359668] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1988.366956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1988.380428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1988.433915] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1988.446140] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1988.455629] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1988.470961] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1988.478455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1988.490747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1988.502057] device veth0_vlan entered promiscuous mode [ 1988.516904] device veth1_vlan entered promiscuous mode [ 1988.523682] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1988.530320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1988.542703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1988.549732] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1988.564081] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1988.583825] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1988.632093] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1988.639245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1988.651982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1988.659692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1988.677383] device veth0_macvtap entered promiscuous mode [ 1988.716920] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1988.756100] device veth1_macvtap entered promiscuous mode [ 1988.772097] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1988.797633] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1988.816381] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1988.837091] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1988.856348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1988.875309] systemd-journal cpuset=/ mems_allowed=0-1 [ 1988.881084] CPU: 1 PID: 19526 Comm: systemd-journal Not tainted 4.14.214-syzkaller #0 [ 1988.889161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1988.898496] Call Trace: [ 1988.901064] dump_stack+0x1b2/0x283 [ 1988.904674] dump_header+0x178/0x82f [ 1988.908368] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1988.914517] ? ___ratelimit+0x2cd/0x522 [ 1988.918485] oom_kill_process.cold+0x10/0xb18 [ 1988.923083] out_of_memory+0xe3e/0x1190 [ 1988.927045] ? oom_killer_disable+0x1c0/0x1c0 [ 1988.931518] ? mutex_trylock+0x152/0x1a0 [ 1988.935559] __alloc_pages_nodemask+0x23e1/0x2720 [ 1988.940385] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1988.945220] ? cache_grow_begin+0x41/0x630 [ 1988.949435] cache_grow_begin+0x91/0x630 [ 1988.953479] ? cache_grow_begin+0x91/0x630 [ 1988.957691] fallback_alloc+0x207/0x2c0 [ 1988.961651] kmem_cache_alloc+0x1e5/0x3c0 [ 1988.965776] getname_flags+0xc8/0x550 [ 1988.969555] user_path_at_empty+0x2a/0x50 [ 1988.973684] SyS_faccessat+0x21b/0x680 [ 1988.977556] ? SyS_fallocate+0x80/0x80 [ 1988.981421] ? do_syscall_64+0x4c/0x640 [ 1988.985373] ? SyS_faccessat+0x680/0x680 [ 1988.989411] do_syscall_64+0x1d5/0x640 [ 1988.993278] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1988.998456] RIP: 0033:0x7eff78b479c7 [ 1989.002153] RSP: 002b:00007ffd7d9c5b88 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1989.009835] RAX: ffffffffffffffda RBX: 00007ffd7d9c8bb0 RCX: 00007eff78b479c7 [ 1989.017092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000056406a7fc9a3 [ 1989.024352] RBP: 00007ffd7d9c5cd0 R08: 000056406a7f23e5 R09: 0000000000000018 [ 1989.031600] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1989.038848] R13: 0000000000000000 R14: 000056406b403d60 R15: 00007ffd7d9c61c0 [ 1989.048367] Bluetooth: hci1 command 0x0409 tx timeout [ 1989.055091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1989.064625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1989.074356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1989.084016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1989.094065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1989.103301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1989.113341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1989.122558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1989.132824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1989.143511] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1989.150645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1989.157813] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1989.168817] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1989.190203] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1989.210249] Mem-Info: [ 1989.211918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1989.212872] active_anon:17621 inactive_anon:33141 isolated_anon:0 [ 1989.212872] active_file:37 inactive_file:16 isolated_file:0 [ 1989.212872] unevictable:0 dirty:9 writeback:0 unstable:0 [ 1989.212872] slab_reclaimable:12465 slab_unreclaimable:117471 [ 1989.212872] mapped:52599 shmem:33558 pagetables:760 bounce:0 [ 1989.212872] free:25146 free_pcp:171 free_cma:0 [ 1989.253781] Node 0 active_anon:69216kB inactive_anon:132532kB active_file:124kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:105908kB dirty:32kB writeback:0kB shmem:134172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1989.282166] Node 1 active_anon:1268kB inactive_anon:32kB active_file:20kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104448kB dirty:4kB writeback:0kB shmem:60kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1989.309166] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1989.335645] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1989.340709] Node 0 DMA32 free:36340kB min:36200kB low:45248kB high:54296kB active_anon:67168kB inactive_anon:132528kB active_file:380kB inactive_file:408kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7072kB pagetables:2392kB bounce:0kB free_pcp:440kB local_pcp:0kB free_cma:0kB [ 1989.369872] lowmem_reserve[]: 0 0 0 0 0 [ 1989.373916] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1989.399490] lowmem_reserve[]: 0 0 0 0 0 [ 1989.403517] Node 1 Normal free:53516kB min:53696kB low:67120kB high:80544kB active_anon:1268kB inactive_anon:32kB active_file:20kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:648kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1989.431772] lowmem_reserve[]: 0 0 0 0 0 [ 1989.435738] Node 0 DMA: 3*4kB (UM) 2*8kB (UM) 2*16kB (UM) 4*32kB (UM) 22*64kB (UM) 6*128kB (UM) 2*256kB (UM) 2*512kB (UM) 1*1024kB (M) 1*2048kB (M) 1*4096kB (M) = 11068kB [ 1989.451197] Node 0 DMA32: 1076*4kB (ME) 662*8kB (UME) 297*16kB (UME) 134*32kB (ME) 48*64kB (UME) 26*128kB (M) 17*256kB (M) 5*512kB (UM) 4*1024kB (M) 0*2048kB 0*4096kB = 36048kB [ 1989.467776] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1989.478557] Node 1 Normal: 81*4kB (UM) 78*8kB (UM) 64*16kB (UME) 51*32kB (M) 28*64kB (UM) 24*128kB (UM) 12*256kB (ME) 8*512kB (ME) 1*1024kB (E) 2*2048kB (M) 8*4096kB (UM) = 53524kB [ 1989.494921] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1989.503834] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1989.512520] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1989.521406] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1989.529969] 33597 total pagecache pages [ 1989.534157] 0 pages in swap cache [ 1989.537589] Swap cache stats: add 0, delete 0, find 0/0 [ 1989.542986] Free swap = 0kB [ 1989.545997] Total swap = 0kB [ 1989.549058] 2097051 pages RAM [ 1989.552205] 0 pages HighMem/MovableOnly [ 1989.556164] 363840 pages reserved [ 1989.559709] 0 pages cma reserved [ 1989.563099] Out of memory (oom_kill_allocating_task): Kill process 19526 (systemd-journal) score 0 or sacrifice child [ 1989.574206] Killed process 19526 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1296kB [ 1989.602180] rs:main Q:Reg invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1989.624179] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1989.629230] CPU: 0 PID: 19081 Comm: rs:main Q:Reg Not tainted 4.14.214-syzkaller #0 [ 1989.637013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1989.646349] Call Trace: [ 1989.649056] dump_stack+0x1b2/0x283 [ 1989.652664] dump_header+0x178/0x82f [ 1989.656354] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1989.661434] ? ___ratelimit+0x2cd/0x522 [ 1989.665384] oom_kill_process.cold+0x10/0xb18 [ 1989.669856] out_of_memory+0xe3e/0x1190 [ 1989.673807] ? oom_killer_disable+0x1c0/0x1c0 [ 1989.678276] ? mutex_trylock+0x152/0x1a0 [ 1989.682315] __alloc_pages_nodemask+0x23e1/0x2720 [ 1989.687137] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1989.692183] alloc_pages_current+0x155/0x260 [ 1989.696569] filemap_fault+0xea3/0x1980 [ 1989.700520] ext4_filemap_fault+0x84/0xb0 [ 1989.704643] __do_fault+0xfa/0x380 [ 1989.708255] __handle_mm_fault+0x2497/0x4620 [ 1989.712656] ? vm_insert_page+0x7c0/0x7c0 [ 1989.716789] ? lock_downgrade+0x740/0x740 [ 1989.720935] ? vfs_write+0x35d/0x4d0 [ 1989.724629] handle_mm_fault+0x391/0x860 [ 1989.728666] __do_page_fault+0x549/0xad0 [ 1989.732702] ? spurious_fault+0x640/0x640 [ 1989.736825] ? do_page_fault+0x60/0x4f2 [ 1989.740775] ? page_fault+0x2f/0x50 [ 1989.744377] page_fault+0x45/0x50 [ 1989.747804] RIP: 1eb385b0:0x55703a3e93a0 [ 1989.751836] RSP: 14024890:0000000000000000 EFLAGS: 7f8714024610 [ 1989.756013] Mem-Info: [ 1989.776321] active_anon:17521 inactive_anon:33141 isolated_anon:0 [ 1989.776321] active_file:20 inactive_file:9 isolated_file:0 [ 1989.776321] unevictable:0 dirty:9 writeback:0 unstable:0 [ 1989.776321] slab_reclaimable:12465 slab_unreclaimable:117313 [ 1989.776321] mapped:52204 shmem:33558 pagetables:760 bounce:0 [ 1989.776321] free:25058 free_pcp:0 free_cma:0 [ 1989.818397] Node 0 active_anon:68748kB inactive_anon:132528kB active_file:40kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104456kB dirty:4kB writeback:0kB shmem:134172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1989.850101] Node 1 active_anon:1268kB inactive_anon:32kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104448kB dirty:0kB writeback:0kB shmem:60kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1989.885950] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1989.916421] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1989.921505] Node 0 DMA32 free:35988kB min:36200kB low:45248kB high:54296kB active_anon:66700kB inactive_anon:132524kB active_file:56kB inactive_file:36kB unevictable:0kB writepending:4kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7040kB pagetables:2296kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1989.950848] lowmem_reserve[]: 0 0 0 0 0 [ 1989.954954] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1989.980552] lowmem_reserve[]: 0 0 0 0 0 [ 1989.984720] Node 1 Normal free:53524kB min:53696kB low:67120kB high:80544kB active_anon:1268kB inactive_anon:32kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:648kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1990.012908] lowmem_reserve[]: 0 0 0 0 0 [ 1990.016891] Node 0 DMA: 3*4kB (UM) 2*8kB (UM) 2*16kB (UM) 4*32kB (UM) 22*64kB (UM) 6*128kB (UM) 2*256kB (UM) 2*512kB (UM) 1*1024kB (M) 1*2048kB (M) 1*4096kB (M) = 11068kB [ 1990.032340] Node 0 DMA32: 1067*4kB (UME) 659*8kB (UME) 295*16kB (UME) 144*32kB (UME) 47*64kB (UME) 27*128kB (UM) 18*256kB (M) 4*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 36084kB [ 1990.048850] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1990.059593] Node 1 Normal: 81*4kB (UM) 79*8kB (UM) 64*16kB (UME) 51*32kB (M) 28*64kB (UM) 24*128kB (UM) 12*256kB (ME) 8*512kB (ME) 1*1024kB (E) 2*2048kB (M) 8*4096kB (UM) = 53532kB [ 1990.076052] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1990.084923] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1990.094262] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1990.103144] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1990.111758] 33591 total pagecache pages [ 1990.115726] 0 pages in swap cache [ 1990.119161] Swap cache stats: add 0, delete 0, find 0/0 [ 1990.124624] Free swap = 0kB [ 1990.127628] Total swap = 0kB [ 1990.130629] 2097051 pages RAM [ 1990.133776] 0 pages HighMem/MovableOnly [ 1990.137733] 363840 pages reserved [ 1990.141155] 0 pages cma reserved [ 1990.144665] Out of memory (oom_kill_allocating_task): Kill process 19081 (rs:main Q:Reg) score 0 or sacrifice child [ 1990.155342] Killed process 19018 (rsyslogd) total-vm:254332kB, anon-rss:820kB, file-rss:0kB, shmem-rss:0kB [ 1990.166580] oom_reaper: reaped process 19018 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1990.198744] kworker/u4:3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1990.218624] kworker/u4:3 cpuset=/ mems_allowed=0-1 [ 1990.223649] CPU: 0 PID: 291 Comm: kworker/u4:3 Not tainted 4.14.214-syzkaller #0 [ 1990.231176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1990.240578] Workqueue: events_unbound call_usermodehelper_exec_work [ 1990.246961] Call Trace: [ 1990.249527] dump_stack+0x1b2/0x283 [ 1990.253151] dump_header+0x178/0x82f [ 1990.256926] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1990.262004] ? ___ratelimit+0x2cd/0x522 [ 1990.265955] oom_kill_process.cold+0x10/0xb18 [ 1990.270447] ? lock_downgrade+0x740/0x740 [ 1990.274574] out_of_memory+0x2dc/0x1190 [ 1990.278526] ? oom_killer_disable+0x1c0/0x1c0 [ 1990.282995] ? mutex_trylock+0x152/0x1a0 [ 1990.287050] __alloc_pages_nodemask+0x23e1/0x2720 [ 1990.291883] ? deref_stack_reg+0x124/0x1a0 [ 1990.296105] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1990.300928] ? fs_reclaim_release+0xd0/0x110 [ 1990.305321] ? kmem_cache_alloc_node+0x38b/0x410 [ 1990.310130] copy_process.part.0+0x265/0x71c0 [ 1990.314619] ? __lock_acquire+0x5fc/0x3f20 [ 1990.318928] ? debug_object_activate+0x292/0x490 [ 1990.323664] ? trace_hardirqs_on+0x10/0x10 [ 1990.327876] ? static_obj+0x50/0x50 [ 1990.331525] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1990.336949] ? __cleanup_sighand+0x40/0x40 [ 1990.341158] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1990.346584] _do_fork+0x184/0xc80 [ 1990.350014] ? fork_idle+0x270/0x270 [ 1990.353794] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1990.358870] ? process_one_work+0x6c4/0x14a0 [ 1990.363253] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1990.368677] kernel_thread+0x2f/0x40 [ 1990.372371] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1990.377668] ? call_usermodehelper+0x80/0x80 [ 1990.382070] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1990.387496] process_one_work+0x793/0x14a0 [ 1990.391708] ? work_busy+0x320/0x320 [ 1990.395395] ? worker_thread+0x158/0xff0 [ 1990.399432] ? _raw_spin_unlock_irq+0x24/0x80 [ 1990.404007] worker_thread+0x5cc/0xff0 [ 1990.407869] ? rescuer_thread+0xc80/0xc80 [ 1990.411990] kthread+0x30d/0x420 [ 1990.415330] ? kthread_create_on_node+0xd0/0xd0 [ 1990.419977] ret_from_fork+0x24/0x30 [ 1990.426470] Mem-Info: [ 1990.428904] active_anon:17279 inactive_anon:33140 isolated_anon:0 [ 1990.428904] active_file:38 inactive_file:0 isolated_file:0 [ 1990.428904] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1990.428904] slab_reclaimable:12465 slab_unreclaimable:117299 [ 1990.428904] mapped:52250 shmem:33558 pagetables:736 bounce:0 [ 1990.428904] free:25138 free_pcp:0 free_cma:0 [ 1990.461976] Node 0 active_anon:67848kB inactive_anon:132528kB active_file:132kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104552kB dirty:4kB writeback:0kB shmem:134172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1990.491045] Node 1 active_anon:1268kB inactive_anon:32kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104448kB dirty:0kB writeback:0kB shmem:60kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1990.518807] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1990.545244] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1990.550260] Node 0 DMA32 free:35960kB min:36200kB low:45248kB high:54296kB active_anon:65800kB inactive_anon:132524kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:4kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7008kB pagetables:2296kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1990.579117] lowmem_reserve[]: 0 0 0 0 0 [ 1990.583143] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1990.608718] lowmem_reserve[]: 0 0 0 0 0 [ 1990.612756] Node 1 Normal free:53524kB min:53696kB low:67120kB high:80544kB active_anon:1268kB inactive_anon:32kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:648kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1990.640948] lowmem_reserve[]: 0 0 0 0 0 [ 1990.644971] Node 0 DMA: 3*4kB (UM) 2*8kB (UM) 2*16kB (UM) 4*32kB (UM) 22*64kB (UM) 6*128kB (UM) 2*256kB (UM) 2*512kB (UM) 1*1024kB (M) 1*2048kB (M) 1*4096kB (M) = 11068kB [ 1990.660503] Node 0 DMA32: 1133*4kB (UME) 654*8kB (UME) 313*16kB (UME) 141*32kB (ME) 53*64kB (UME) 26*128kB (M) 18*256kB (M) 3*512kB (M) 4*1024kB (UM) 0*2048kB 0*4096kB = 36244kB [ 1990.676571] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1990.687288] Node 1 Normal: 77*4kB (UM) 76*8kB (UM) 60*16kB (UME) 49*32kB (M) 24*64kB (UM) 20*128kB (UM) 12*256kB (ME) 6*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 8*4096kB (UM) = 53620kB [ 1990.703738] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1990.712586] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1990.721152] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1990.730007] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1990.739129] 33590 total pagecache pages [ 1990.743195] 0 pages in swap cache [ 1990.746639] Swap cache stats: add 0, delete 0, find 0/0 [ 1990.752033] Free swap = 0kB [ 1990.755041] Total swap = 0kB [ 1990.758045] 2097051 pages RAM [ 1990.761122] 0 pages HighMem/MovableOnly [ 1990.765188] 363840 pages reserved [ 1990.768615] 0 pages cma reserved [ 1990.772052] Out of memory: Kill process 19528 (syz-executor.1) score 1005 or sacrifice child [ 1990.780628] Killed process 19529 (syz-executor.1) total-vm:93348kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 1990.816063] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1990.846360] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1990.860541] CPU: 1 PID: 19584 Comm: syz-executor.4 Not tainted 4.14.214-syzkaller #0 [ 1990.868437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1990.877798] Call Trace: [ 1990.880389] dump_stack+0x1b2/0x283 [ 1990.884013] dump_header+0x178/0x82f [ 1990.887718] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1990.892822] ? ___ratelimit+0x2cd/0x522 [ 1990.896790] oom_kill_process.cold+0x10/0xb18 [ 1990.901278] out_of_memory+0xe3e/0x1190 [ 1990.905240] ? oom_killer_disable+0x1c0/0x1c0 [ 1990.909732] ? mutex_trylock+0x152/0x1a0 [ 1990.913262] syz-executor.1: vmalloc: allocation failure, allocated 508661760 of 1073745920 bytes [ 1990.913781] __alloc_pages_nodemask+0x23e1/0x2720 [ 1990.913799] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1990.922862] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 1990.927652] alloc_pages_current+0x155/0x260 [ 1990.934344] (null) [ 1990.938414] filemap_fault+0xea3/0x1980 [ 1990.942830] syz-executor.1 cpuset= [ 1990.944935] ext4_filemap_fault+0x84/0xb0 [ 1990.948872] / [ 1990.952407] __do_fault+0xfa/0x380 [ 1990.958379] mems_allowed=0-1 [ 1990.961741] __handle_mm_fault+0x2497/0x4620 [ 1990.961751] ? vm_insert_page+0x7c0/0x7c0 [ 1990.961761] ? lock_downgrade+0x740/0x740 [ 1990.961777] handle_mm_fault+0x391/0x860 [ 1990.981515] __do_page_fault+0x549/0xad0 [ 1990.985558] ? spurious_fault+0x640/0x640 [ 1990.989683] ? do_page_fault+0x60/0x4f2 [ 1990.993765] ? page_fault+0x2f/0x50 [ 1990.997380] page_fault+0x45/0x50 [ 1991.000812] RIP: 0000:0x3 [ 1991.003551] RSP: 0000:0000000000000000 EFLAGS: 00000000 [ 1991.003570] CPU: 0 PID: 19529 Comm: syz-executor.1 Not tainted 4.14.214-syzkaller #0 [ 1991.014503] Mem-Info: [ 1991.016815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1991.019214] active_anon:17252 inactive_anon:33140 isolated_anon:0 [ 1991.019214] active_file:16 inactive_file:16 isolated_file:0 [ 1991.019214] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1991.019214] slab_reclaimable:12465 slab_unreclaimable:117273 [ 1991.019214] mapped:52225 shmem:33558 pagetables:706 bounce:0 [ 1991.019214] free:14017 free_pcp:62 free_cma:0 [ 1991.028554] Call Trace: [ 1991.028571] dump_stack+0x1b2/0x283 [ 1991.028584] warn_alloc.cold+0x96/0x1cc [ 1991.028601] ? zone_watermark_ok_safe+0x220/0x220 [ 1991.061749] Node 0 active_anon:67824kB inactive_anon:132528kB active_file:44kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104452kB dirty:4kB writeback:0kB shmem:134172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1991.064301] __vmalloc_area_node+0x48a/0x680 [ 1991.064314] ? __vmalloc_node_range+0x150/0x150 [ 1991.064323] ? __get_vm_area_node+0x27d/0x340 [ 1991.064336] __vmalloc_node_range+0xbe/0x150 [ 1991.068027] Node 1 active_anon:1184kB inactive_anon:32kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104448kB dirty:0kB writeback:0kB shmem:60kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1991.071893] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1991.071901] vmalloc_user+0x47/0xa0 [ 1991.071910] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 1991.076724] Node 0 [ 1991.104680] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1991.104689] vb2_vmalloc_alloc+0xa6/0x2d0 [ 1991.104699] __vb2_queue_alloc+0x47a/0xd90 [ 1991.109108] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1991.113757] vb2_core_create_bufs+0x279/0x5a0 [ 1991.113767] ? __vb2_queue_free+0x7a0/0x7a0 [ 1991.118321] lowmem_reserve[]: [ 1991.122732] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1991.122744] ? trace_hardirqs_on+0x10/0x10 [ 1991.149709] 0 [ 1991.155042] vb2_create_bufs+0x2e1/0x5b0 [ 1991.155057] ? vb2_thread_start.cold+0x24/0x24 [ 1991.158652] 2717 [ 1991.162967] ? trace_hardirqs_on+0x10/0x10 [ 1991.162985] v4l_create_bufs+0xa4/0x150 [ 1991.162997] __video_do_ioctl+0x65b/0x6a0 [ 1991.163010] ? video_ioctl2+0x30/0x30 [ 1991.165228] 2718 [ 1991.170582] ? __might_fault+0x177/0x1b0 [ 1991.174725] 2718 [ 1991.178924] video_usercopy+0xf5/0xe90 [ 1991.204694] 2718 [ 1991.209153] ? video_ioctl2+0x30/0x30 [ 1991.216548] ? v4l_g_ctrl+0x390/0x390 [ 1991.221898] Node 0 [ 1991.226098] ? lock_acquire+0x170/0x3f0 [ 1991.227883] DMA32 free:18264kB min:36200kB low:45248kB high:54296kB active_anon:65776kB inactive_anon:132524kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:4kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:6912kB pagetables:2176kB bounce:0kB free_pcp:128kB local_pcp:8kB free_cma:0kB [ 1991.231914] ? trace_hardirqs_on+0x10/0x10 [ 1991.231924] ? trace_hardirqs_on+0x10/0x10 [ 1991.231934] ? futex_exit_release+0x220/0x220 [ 1991.236483] lowmem_reserve[]: [ 1991.238530] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1991.242747] 0 [ 1991.246689] ? __might_fault+0x104/0x1b0 [ 1991.250817] 0 [ 1991.254614] v4l2_ioctl+0x1bb/0x2f0 [ 1991.254624] ? v4l2_open+0x2f0/0x2f0 [ 1991.254635] do_vfs_ioctl+0x75a/0xff0 [ 1991.254646] ? ioctl_preallocate+0x1a0/0x1a0 [ 1991.256685] 0 [ 1991.260726] ? lock_downgrade+0x740/0x740 [ 1991.260740] ? __fget+0x225/0x360 [ 1991.262795] 0 [ 1991.266653] ? do_vfs_ioctl+0xff0/0xff0 [ 1991.268684] 0 [ 1991.272462] ? security_file_ioctl+0x83/0xb0 [ 1991.272472] SyS_ioctl+0x7f/0xb0 [ 1991.272480] ? do_vfs_ioctl+0xff0/0xff0 [ 1991.272490] do_syscall_64+0x1d5/0x640 [ 1991.278481] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1991.282436] Node 0 [ 1991.310778] RIP: 0033:0x45e219 [ 1991.310783] RSP: 002b:00007f49fc585c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1991.310794] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1991.315138] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1991.319329] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 1991.323949] lowmem_reserve[]: [ 1991.327015] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1991.327023] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1991.332122] 0 [ 1991.333890] R13: 00007ffe51cae14f R14: 00007f49fc5869c0 R15: 000000000119bf8c [ 1991.337935] 0 [ 1991.353318] Mem-Info: [ 1991.364584] Bluetooth: hci1 command 0x041b tx timeout [ 1991.367834] active_anon:17252 inactive_anon:33140 isolated_anon:0 [ 1991.367834] active_file:16 inactive_file:16 isolated_file:0 [ 1991.367834] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1991.367834] slab_reclaimable:12465 slab_unreclaimable:117273 [ 1991.367834] mapped:52225 shmem:33558 pagetables:706 bounce:0 [ 1991.367834] free:14017 free_pcp:62 free_cma:0 [ 1991.371958] 0 [ 1991.375496] Node 0 active_anon:67824kB inactive_anon:132528kB active_file:44kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104452kB dirty:4kB writeback:0kB shmem:134172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1991.378381] 0 [ 1991.380509] Node 1 active_anon:1184kB inactive_anon:32kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104448kB dirty:0kB writeback:0kB shmem:60kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1991.397473] 0 [ 1991.400301] Node 0 [ 1991.415201] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1991.451506] Node 1 [ 1991.459003] lowmem_reserve[]: [ 1991.477256] Normal free:26836kB min:53696kB low:67120kB high:80544kB active_anon:1184kB inactive_anon:32kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:648kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1991.479709] 0 [ 1991.490073] lowmem_reserve[]: [ 1991.518226] 2717 [ 1991.530646] 0 [ 1991.552551] 2718 [ 1991.584190] 0 [ 1991.610400] 2718 [ 1991.618556] 0 [ 1991.648236] 2718 [ 1991.653739] 0 [ 1991.656914] 0 [ 1991.658691] Node 0 [ 1991.660490] DMA32 free:18264kB min:36200kB low:45248kB high:54296kB active_anon:65776kB inactive_anon:132524kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:4kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:6912kB pagetables:2176kB bounce:0kB free_pcp:124kB local_pcp:116kB free_cma:0kB [ 1991.664704] Node 0 DMA: 2*4kB (UM) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 22*64kB (UM) 6*128kB (UM) 2*256kB (UM) 2*512kB (UM) 1*1024kB (M) 1*2048kB (M) 1*4096kB (M) = 10968kB [ 1991.701753] lowmem_reserve[]: [ 1991.719958] Node 0 DMA32: 1044*4kB (UME) 601*8kB (UME) 265*16kB (UME) 82*32kB (ME) 16*64kB (ME) 5*128kB (UM) 3*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18280kB [ 1991.723254] 0 [ 1991.738190] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1991.748658] 0 0 0 0 [ 1991.753044] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1991.756003] Node 1 Normal: 75*4kB (M) 63*8kB (M) 59*16kB (ME) 51*32kB (UM) 23*64kB (M) 20*128kB (UM) 12*256kB (ME) 6*512kB (ME) 3*1024kB (ME) 3*2048kB (UM) 1*4096kB (M) = 26868kB [ 1991.788457] lowmem_reserve[]: [ 1991.808786] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1991.812103] 0 0 0 0 0 [ 1991.820771] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1991.830249] Node 1 [ 1991.834140] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1991.837616] Normal free:26836kB min:53696kB low:67120kB high:80544kB active_anon:1184kB inactive_anon:32kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:648kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1991.845228] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1991.845232] 33590 total pagecache pages [ 1991.845241] 0 pages in swap cache [ 1991.845246] Swap cache stats: add 0, delete 0, find 0/0 [ 1991.845249] Free swap = 0kB [ 1991.845252] Total swap = 0kB [ 1991.845258] 2097051 pages RAM [ 1991.845261] 0 pages HighMem/MovableOnly [ 1991.845264] 363840 pages reserved [ 1991.845267] 0 pages cma reserved [ 1991.845274] Out of memory (oom_kill_allocating_task): Kill process 19584 (syz-executor.4) score 0 or sacrifice child [ 1991.845295] Killed process 19584 (syz-executor.4) total-vm:93220kB, anon-rss:80kB, file-rss:33864kB, shmem-rss:0kB [ 1991.937358] lowmem_reserve[]: 0 0 0 0 0 [ 1991.945273] Node 0 DMA: 1*4kB (U) 3*8kB (UME) 2*16kB (ME) 1*32kB (E) 19*64kB (UE) 6*128kB (UE) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 12060kB [ 1991.960719] Node 0 DMA32: 1051*4kB (UME) 614*8kB (UME) 277*16kB (UME) 91*32kB (UME) 20*64kB (UME) 6*128kB (UM) 3*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19276kB [ 1991.976886] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1991.987779] Node 1 Normal: 75*4kB (M) 64*8kB (UM) 60*16kB (UME) 50*32kB (UM) 23*64kB (M) 19*128kB (M) 13*256kB (UME) 6*512kB (ME) 3*1024kB (ME) 3*2048kB (UM) 1*4096kB (M) = 26988kB [ 1992.004342] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1992.014134] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1992.024951] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1992.034060] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1992.042724] 33992 total pagecache pages [ 1992.046704] oom_reaper: reaped process 19529 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1992.056811] 0 pages in swap cache [ 1992.060271] Swap cache stats: add 0, delete 0, find 0/0 [ 1992.065691] Free swap = 0kB [ 1992.068707] Total swap = 0kB [ 1992.071773] 2097051 pages RAM [ 1992.074870] 0 pages HighMem/MovableOnly [ 1992.078844] 363840 pages reserved [ 1992.082360] 0 pages cma reserved [ 1992.455087] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1992.479621] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1992.499691] systemd[1]: Stopped Journal Service. [ 1992.518355] systemd[1]: Starting Journal Service... [ 1992.609340] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1992.646820] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1992.658698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1992.678727] systemd[1]: Stopped System Logging Service. [ 1992.690265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1992.710806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1992.722958] systemd[1]: Starting System Logging Service... [ 1992.742262] device bridge_slave_1 left promiscuous mode [ 1992.748368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1992.766593] device bridge_slave_0 left promiscuous mode [ 1992.782091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1992.807652] device veth1_macvtap left promiscuous mode [ 1992.826354] device veth0_macvtap left promiscuous mode [ 1992.836065] device veth1_vlan left promiscuous mode [ 1992.847352] device veth0_vlan left promiscuous mode [ 1992.990219] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1993.020966] systemd-journald[19814]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1993.129327] device hsr_slave_1 left promiscuous mode [ 1993.156091] device hsr_slave_0 left promiscuous mode [ 1993.174850] team0 (unregistering): Port device team_slave_1 removed [ 1993.198636] team0 (unregistering): Port device team_slave_0 removed [ 1993.219836] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1993.245551] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1993.259393] systemd[1]: Started Journal Service. [ 1993.295208] bond0 (unregistering): Released all slaves [ 1995.397037] IPVS: ftp: loaded support on port[0] = 21 [ 1995.599811] chnl_net:caif_netlink_parms(): no params data found [ 1995.712015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1995.718492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1995.727994] device bridge_slave_0 entered promiscuous mode [ 1995.737476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1995.744656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1995.752665] device bridge_slave_1 entered promiscuous mode [ 1995.780901] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1995.793988] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1995.822944] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1995.830629] team0: Port device team_slave_0 added [ 1995.841387] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1995.848734] team0: Port device team_slave_1 added [ 1995.883592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1995.889879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1995.920704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1995.932888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1995.939147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1995.969770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1995.981505] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1995.989257] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1996.022816] device hsr_slave_0 entered promiscuous mode [ 1996.029037] device hsr_slave_1 entered promiscuous mode [ 1996.040175] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1996.048447] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1996.157033] bridge0: port 2(bridge_slave_1) entered blocking state [ 1996.163462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1996.170116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1996.176541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1996.228931] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1996.235864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1996.249679] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1996.265198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1996.273733] bridge0: port 1(bridge_slave_0) entered disabled state [ 1996.280615] bridge0: port 2(bridge_slave_1) entered disabled state [ 1996.296166] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1996.305572] 8021q: adding VLAN 0 to HW filter on device team0 [ 1996.317590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1996.329379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1996.335931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1996.358100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1996.370213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1996.376658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1996.400923] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1996.418273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1996.429266] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1996.440929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1996.449876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1996.463035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1996.470745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1996.489038] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1996.499445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1996.509684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1996.525644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1996.536856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1996.545426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1996.562629] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 23:24:27 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt6_stats\x00') write$sndseq(r0, 0x0, 0x0) 23:24:27 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x0, 0x6, 0xfffffff9}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:24:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x51}, 0x80) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x1) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000180)=""/98, &(0x7f0000000240)=0x62) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x10, 0x0, &(0x7f0000000200)) 23:24:27 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x9}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x9, 0x6, 0x0, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) [ 1996.644399] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1996.654963] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1996.662126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1996.670192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1996.697147] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1996.704883] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1996.711917] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1996.724504] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1996.731415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1996.742839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1996.754306] device veth0_vlan entered promiscuous mode [ 1996.762510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1996.773155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1996.793197] device veth1_vlan entered promiscuous mode [ 1996.799276] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1996.817627] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1996.837166] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1996.855276] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1996.865147] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1996.876618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1996.888260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1996.897078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1996.912811] device veth0_macvtap entered promiscuous mode [ 1996.919088] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1996.933219] device veth1_macvtap entered promiscuous mode [ 1996.939680] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1996.954570] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1996.968749] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1996.985423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1996.995495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.008792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1997.018840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.031925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1997.044270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.055051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1997.067881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.078646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1997.092668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.105144] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1997.114369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1997.123982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1997.134082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.143382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1997.153312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.162713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1997.173847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.183538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1997.193457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.202770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1997.212996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.223635] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1997.230695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1997.237547] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1997.245474] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1997.253601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1997.264612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1997.274270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1997.287030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1997.451474] Bluetooth: hci1 command 0x0409 tx timeout 23:24:29 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x3ca26104, 0x0, 0x9, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x9, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:24:29 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x3ca26104, 0x0, 0x9, 0x10000000}, 0x0, 0x40000000, 0x0, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:24:29 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x460040, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) write$sndseq(r1, 0x0, 0xb5) 23:24:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x20000, 0x0) 23:24:29 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x9}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x9, 0x6, 0x0, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:24:29 executing program 3: ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000040)={0x400, 0x6, 0x1, 0x7, 0x8, 0xba4}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000080)={{0x0, 0x5}, {0x5, 0x9}, 0xff}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.events\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DEBUG={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) write$sndseq(r0, 0x0, 0x0) 23:24:29 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x40000) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000000c0)={0x4, 0x1, 'client1\x00', 0x4, "bb2d79709a34f1a6", "21f3784a5c665c6a4484917b5d3db37801f5f893c525f4d140cfa0e5b9f100", 0xf12, 0xc01b}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000300)={{0x0, 0x6}, {0x8, 0x2}, 0x1, 0x7, 0x3}) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, 0x0) accept4$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0}, &(0x7f00000003c0)=0x14, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001c7d7e48a4377a2d7ddbdf2500", @ANYRES32=r4, @ANYBLOB='\x00'/12], 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000240)={{0xff}, 'port1\x00', 0x45, 0x40420, 0x40, 0x8, 0x1c70d2bf, 0xfc, 0x1, 0x0, 0x1, 0x3e}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) accept4(r5, &(0x7f0000000000)=@caif=@rfm, &(0x7f0000000180)=0x80, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x22) getsockopt$inet6_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000000200)) 23:24:29 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='comm\x00') write$sndseq(r1, 0x0, 0x0) 23:24:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x42502, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) [ 1999.540937] Bluetooth: hci1 command 0x041b tx timeout [ 2001.294630] oom_reaper: reaped process 20044 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2001.314957] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2001.330077] in:imklog cpuset=/ mems_allowed=0-1 [ 2001.334799] CPU: 1 PID: 19819 Comm: in:imklog Not tainted 4.14.214-syzkaller #0 [ 2001.340791] syz-executor.1: [ 2001.342225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2001.342234] vmalloc: allocation failure, allocated 499462144 of 1073745920 bytes [ 2001.345224] Call Trace: [ 2001.357900] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 2001.362090] dump_stack+0x1b2/0x283 [ 2001.362102] dump_header+0x178/0x82f [ 2001.362114] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2001.364674] (null) [ 2001.370643] ? ___ratelimit+0x2cd/0x522 [ 2001.377559] syz-executor.1 cpuset= [ 2001.377940] oom_kill_process.cold+0x10/0xb18 [ 2001.383057] / [ 2001.385154] out_of_memory+0xe3e/0x1190 [ 2001.389117] mems_allowed=0-1 [ 2001.392640] ? oom_killer_disable+0x1c0/0x1c0 [ 2001.392650] ? mutex_trylock+0x152/0x1a0 [ 2001.392660] __alloc_pages_nodemask+0x23e1/0x2720 [ 2001.392680] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2001.392704] alloc_pages_current+0x155/0x260 [ 2001.392717] filemap_fault+0xea3/0x1980 [ 2001.432466] ext4_filemap_fault+0x84/0xb0 [ 2001.436604] __do_fault+0xfa/0x380 [ 2001.440125] __handle_mm_fault+0x2497/0x4620 [ 2001.444511] ? vm_insert_page+0x7c0/0x7c0 [ 2001.448640] ? lock_downgrade+0x740/0x740 [ 2001.452785] handle_mm_fault+0x391/0x860 [ 2001.456830] __do_page_fault+0x549/0xad0 [ 2001.460878] ? spurious_fault+0x640/0x640 [ 2001.465015] ? do_page_fault+0x60/0x4f2 [ 2001.468967] ? page_fault+0x2f/0x50 [ 2001.472580] page_fault+0x45/0x50 [ 2001.476018] RIP: 1fa0:0x1f9f [ 2001.479014] RSP: 0000:000055ee6e2e29d0 EFLAGS: 7f41917f2da0 [ 2001.479035] CPU: 0 PID: 20044 Comm: syz-executor.1 Not tainted 4.14.214-syzkaller #0 [ 2001.481921] Mem-Info: [ 2001.484747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2001.492650] active_anon:16935 inactive_anon:35173 isolated_anon:0 [ 2001.492650] active_file:16 inactive_file:16 isolated_file:0 [ 2001.492650] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2001.492650] slab_reclaimable:12596 slab_unreclaimable:117569 [ 2001.492650] mapped:52607 shmem:35605 pagetables:736 bounce:0 [ 2001.492650] free:13868 free_pcp:240 free_cma:0 [ 2001.495090] Call Trace: [ 2001.504474] Node 0 active_anon:67072kB inactive_anon:140652kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140796kB dirty:0kB writeback:0kB shmem:142360kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2001.537903] dump_stack+0x1b2/0x283 [ 2001.537916] warn_alloc.cold+0x96/0x1cc [ 2001.537926] ? zone_watermark_ok_safe+0x220/0x220 [ 2001.540496] Node 1 active_anon:668kB inactive_anon:40kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69632kB dirty:0kB writeback:0kB shmem:60kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2001.568448] __vmalloc_area_node+0x48a/0x680 [ 2001.568463] ? __vmalloc_node_range+0x150/0x150 [ 2001.572080] Node 0 [ 2001.576026] ? __get_vm_area_node+0x27d/0x340 [ 2001.580864] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2001.607281] __vmalloc_node_range+0xbe/0x150 [ 2001.607295] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2001.607303] vmalloc_user+0x47/0xa0 [ 2001.611703] lowmem_reserve[]: [ 2001.616340] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2001.618547] 0 [ 2001.623024] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2001.623033] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2001.623046] __vb2_queue_alloc+0x47a/0xd90 [ 2001.648542] 2717 [ 2001.652931] vb2_core_create_bufs+0x279/0x5a0 [ 2001.652941] ? __vb2_queue_free+0x7a0/0x7a0 [ 2001.658275] 2718 [ 2001.661891] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2001.661900] ? trace_hardirqs_on+0x10/0x10 [ 2001.661910] vb2_create_bufs+0x2e1/0x5b0 [ 2001.664986] 2718 [ 2001.669288] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 2001.671080] 2718 [ 2001.676406] ? vb2_thread_start.cold+0x24/0x24 [ 2001.684741] ? trace_hardirqs_on+0x10/0x10 [ 2001.684756] v4l_create_bufs+0xa4/0x150 [ 2001.684768] __video_do_ioctl+0x65b/0x6a0 [ 2001.686823] Node 0 [ 2001.691305] ? video_ioctl2+0x30/0x30 [ 2001.691318] ? __might_fault+0x177/0x1b0 [ 2001.691330] video_usercopy+0xf5/0xe90 [ 2001.695635] DMA32 free:17900kB min:36200kB low:45248kB high:54296kB active_anon:67072kB inactive_anon:140648kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7104kB pagetables:2576kB bounce:0kB free_pcp:828kB local_pcp:708kB free_cma:0kB [ 2001.697672] ? video_ioctl2+0x30/0x30 [ 2001.703027] lowmem_reserve[]: [ 2001.707231] ? v4l_g_ctrl+0x390/0x390 [ 2001.711299] 0 [ 2001.713327] ? lock_acquire+0x170/0x3f0 [ 2001.718401] 0 [ 2001.720533] ? trace_hardirqs_on+0x10/0x10 [ 2001.725104] 0 [ 2001.729412] ? trace_hardirqs_on+0x10/0x10 [ 2001.733375] 0 [ 2001.737491] ? futex_exit_release+0x220/0x220 [ 2001.739703] 0 [ 2001.743485] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2001.743497] ? __might_fault+0x104/0x1b0 [ 2001.743508] v4l2_ioctl+0x1bb/0x2f0 [ 2001.751405] ? v4l2_open+0x2f0/0x2f0 [ 2001.751415] do_vfs_ioctl+0x75a/0xff0 [ 2001.751431] ? ioctl_preallocate+0x1a0/0x1a0 [ 2001.779798] Node 0 [ 2001.783561] ? lock_downgrade+0x740/0x740 [ 2001.783575] ? __fget+0x225/0x360 [ 2001.783585] ? do_vfs_ioctl+0xff0/0xff0 [ 2001.786672] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2001.790445] ? security_file_ioctl+0x83/0xb0 [ 2001.792238] lowmem_reserve[]: [ 2001.796179] SyS_ioctl+0x7f/0xb0 [ 2001.797952] 0 [ 2001.802167] ? do_vfs_ioctl+0xff0/0xff0 [ 2001.802177] do_syscall_64+0x1d5/0x640 [ 2001.802191] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2001.802199] RIP: 0033:0x45e219 [ 2001.803974] 0 [ 2001.808183] RSP: 002b:00007f49fc585c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2001.809965] 0 [ 2001.814436] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2001.814441] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 2001.814446] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2001.814452] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2001.814458] R13: 00007ffe51cae14f R14: 00007f49fc5869c0 R15: 000000000119bf8c [ 2001.820333] Mem-Info: [ 2001.824191] Bluetooth: hci1 command 0x040f tx timeout [ 2001.825456] active_anon:16935 inactive_anon:35173 isolated_anon:0 [ 2001.825456] active_file:16 inactive_file:16 isolated_file:0 [ 2001.825456] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2001.825456] slab_reclaimable:12596 slab_unreclaimable:117569 [ 2001.825456] mapped:52607 shmem:35605 pagetables:736 bounce:0 [ 2001.825456] free:13868 free_pcp:240 free_cma:0 [ 2001.839335] 0 [ 2001.841122] Node 0 active_anon:67072kB inactive_anon:140652kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140796kB dirty:0kB writeback:0kB shmem:142360kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2001.845161] 0 [ 2001.847465] Node 1 active_anon:668kB inactive_anon:40kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69632kB dirty:0kB writeback:0kB shmem:60kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2001.879942] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2001.889669] Node 1 [ 2001.890921] lowmem_reserve[]: [ 2001.892692] Normal free:26604kB min:53696kB low:67120kB high:80544kB active_anon:668kB inactive_anon:40kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:368kB bounce:0kB free_pcp:132kB local_pcp:12kB free_cma:0kB [ 2001.896636] 0 [ 2001.900504] lowmem_reserve[]: [ 2001.905762] 2717 2718 2718 2718 [ 2001.905777] Node 0 DMA32 free:17900kB min:36200kB low:45248kB high:54296kB active_anon:67072kB inactive_anon:140648kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7104kB pagetables:2576kB bounce:0kB free_pcp:824kB local_pcp:120kB free_cma:0kB [ 2001.905797] lowmem_reserve[]: 0 0 0 0 0 [ 2001.905815] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2001.905830] lowmem_reserve[]: 0 0 0 0 0 [ 2001.905846] Node 1 Normal free:26604kB min:53696kB low:67120kB high:80544kB active_anon:668kB inactive_anon:40kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:368kB bounce:0kB free_pcp:132kB local_pcp:120kB free_cma:0kB [ 2001.905862] lowmem_reserve[]: 0 0 0 0 0 [ 2001.905880] Node 0 DMA: 2*4kB (UM) 2*8kB (UM) 2*16kB (UM) 3*32kB [ 2001.914260] 0 [ 2001.918655] (UME) [ 2001.920387] 0 [ 2001.927680] 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) [ 2001.941782] 0 [ 2001.942881] 3*512kB [ 2001.949582] 0 [ 2001.956882] (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10968kB [ 2001.956903] Node 0 DMA32: 853*4kB (MEH) 561*8kB (UMEH) 264*16kB (UMEH) 85*32kB (UMEH) 30*64kB (UMEH) 5*128kB (UH) [ 2001.964589] 0 [ 2001.998086] 2*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17916kB [ 2001.998110] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB [ 2002.028399] 0*4096kB [ 2002.029518] Node 0 [ 2002.055954] = 0kB [ 2002.055958] Node 1 Normal: 107*4kB (UM) 92*8kB (M) 66*16kB (M) 54*32kB (M) 24*64kB (ME) 19*128kB (ME) 9*256kB (M) 8*512kB (UME) 4*1024kB (UME) 2*2048kB (M) 1*4096kB (M) = 26604kB [ 2002.056041] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2002.056048] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2002.056054] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2002.056060] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2002.056063] 35637 total pagecache pages [ 2002.056071] 0 pages in swap cache [ 2002.056075] Swap cache stats: add 0, delete 0, find 0/0 [ 2002.056078] Free swap = 0kB [ 2002.056081] Total swap = 0kB [ 2002.056087] 2097051 pages RAM [ 2002.056090] 0 pages HighMem/MovableOnly [ 2002.056093] 363840 pages reserved [ 2002.056096] 0 pages cma reserved [ 2002.370388] DMA: 2*4kB (UM) 2*8kB (UM) 2*16kB (UM) 3*32kB (UME) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10968kB [ 2002.385540] Node 0 DMA32: 853*4kB (MEH) 561*8kB (UMEH) 264*16kB (UMEH) 85*32kB (UMEH) 30*64kB (UMEH) 5*128kB (UH) 2*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17916kB [ 2002.401166] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2002.412314] Node 1 Normal: 74*4kB (UM) 94*8kB (UM) 69*16kB (UM) 57*32kB (UM) 25*64kB (UME) 21*128kB (UME) 10*256kB (UM) 9*512kB (UME) 4*1024kB (UME) 3*2048kB (UM) 16*4096kB (UM) = 91208kB [ 2002.429622] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2002.438509] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2002.447434] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2002.456579] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2002.465472] 35822 total pagecache pages [ 2002.469637] 0 pages in swap cache [ 2002.473655] Swap cache stats: add 0, delete 0, find 0/0 [ 2002.479249] Free swap = 0kB [ 2002.482424] Total swap = 0kB [ 2002.485441] 2097051 pages RAM [ 2002.488622] 0 pages HighMem/MovableOnly [ 2002.493520] 363840 pages reserved [ 2002.497023] 0 pages cma reserved [ 2002.500441] Out of memory (oom_kill_allocating_task): Kill process 19819 (in:imklog) score 0 or sacrifice child [ 2002.510931] Killed process 19817 (rsyslogd) total-vm:254332kB, anon-rss:732kB, file-rss:4kB, shmem-rss:0kB [ 2002.522852] oom_reaper: reaped process 19817 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2003.850560] Bluetooth: hci1 command 0x0419 tx timeout 23:24:37 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x0, 0x6, 0xfffffff9, 0x2}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:24:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000000)={0x7ff, 0x0, {0x3, 0x0, 0x1000, 0x2}, 0x1}) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) 23:24:37 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x3ca26104, 0x0, 0x9, 0x10000000}, 0x0, 0x40000000, 0x0, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:24:37 executing program 3: openat$mice(0xffffffffffffff9c, &(0x7f0000000280)='/dev/input/mice\x00', 0x10880) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x11c, 0x0, 0xb00, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1000}, 0x1) write$sndseq(r0, 0x0, 0x0) 23:24:37 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x9}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x9, 0x6, 0x0, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:24:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sockstat\x00') openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r5, 0x109}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x104, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x800) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r6, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x25}}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000880) 23:24:37 executing program 5: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000000)={0x0, 0x4, 0x4, {0x0, 0x9}, 0x6e9}) 23:24:37 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='comm\x00') perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x8, 0x4, 0x1, 0x78, 0x0, 0x9, 0x12000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000040), 0x9}, 0x8004, 0xfffffffffffff001, 0x17, 0x4, 0x5, 0x9, 0x3f}, r0, 0x6, r1, 0x3) write$sndseq(r1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 23:24:37 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x0, 0x6, 0xfffffff9}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:24:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) 23:24:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000d0) r3 = socket(0x4, 0xa, 0x7) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000000)={0x8000}, 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8000) 23:24:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') write$sndseq(r0, 0x0, 0x0) 23:24:37 executing program 3: accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000140)=""/220, &(0x7f0000000240)=0xdc) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080c0}, 0x50) socketpair(0x15, 0x4, 0x3, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000087}, 0x40040) write$sndseq(r0, 0x0, 0x0) [ 2010.472847] oom_reaper: reaped process 20135 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2010.982424] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2010.999800] systemd-journal cpuset=/ mems_allowed=0-1 [ 2011.005017] CPU: 0 PID: 19814 Comm: systemd-journal Not tainted 4.14.214-syzkaller #0 [ 2011.012963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2011.022294] Call Trace: [ 2011.024889] dump_stack+0x1b2/0x283 [ 2011.028495] dump_header+0x178/0x82f [ 2011.032189] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2011.037268] ? ___ratelimit+0x2cd/0x522 [ 2011.041311] oom_kill_process.cold+0x10/0xb18 [ 2011.045798] out_of_memory+0xe3e/0x1190 [ 2011.049794] ? oom_killer_disable+0x1c0/0x1c0 [ 2011.054265] ? mutex_trylock+0x152/0x1a0 [ 2011.058381] __alloc_pages_nodemask+0x23e1/0x2720 [ 2011.063210] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2011.068040] alloc_pages_current+0x155/0x260 [ 2011.072487] filemap_fault+0xea3/0x1980 [ 2011.076442] ext4_filemap_fault+0x84/0xb0 [ 2011.080566] __do_fault+0xfa/0x380 [ 2011.084082] __handle_mm_fault+0x2497/0x4620 [ 2011.088470] ? ep_poll+0x1ab/0xa50 [ 2011.091983] ? vm_insert_page+0x7c0/0x7c0 [ 2011.096135] handle_mm_fault+0x391/0x860 [ 2011.100178] __do_page_fault+0x549/0xad0 [ 2011.104221] ? spurious_fault+0x640/0x640 [ 2011.108386] ? do_page_fault+0x60/0x4f2 [ 2011.112352] ? page_fault+0x2f/0x50 [ 2011.115952] page_fault+0x45/0x50 [ 2011.119377] RIP: 0001:0xffffffffffffffff [ 2011.123409] RSP: ea7461e0:00007fff543a63a0 EFLAGS: 7fff543a61b0 [ 2011.124525] Mem-Info: [ 2011.133035] active_anon:16947 inactive_anon:35173 isolated_anon:0 [ 2011.133035] active_file:10 inactive_file:16 isolated_file:0 [ 2011.133035] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2011.133035] slab_reclaimable:12663 slab_unreclaimable:119250 [ 2011.133035] mapped:52627 shmem:35605 pagetables:735 bounce:0 [ 2011.133035] free:13867 free_pcp:0 free_cma:0 [ 2011.168354] Node 0 active_anon:67356kB inactive_anon:140672kB active_file:36kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140876kB dirty:0kB writeback:0kB shmem:142380kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2011.194114] syz-executor.1: vmalloc: allocation failure, allocated 493260800 of 1073745920 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2011.197891] Node 1 active_anon:432kB inactive_anon:20kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69632kB dirty:0kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2011.225149] syz-executor.1 cpuset= [ 2011.240020] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2011.244641] / [ 2011.271936] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2011.277277] mems_allowed=0-1 [ 2011.278665] Node 0 [ 2011.281814] CPU: 1 PID: 20135 Comm: syz-executor.1 Not tainted 4.14.214-syzkaller #0 [ 2011.281820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2011.284072] DMA32 free:18100kB min:36200kB low:45248kB high:54296kB active_anon:67356kB inactive_anon:140668kB active_file:24kB inactive_file:72kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7104kB pagetables:2572kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2011.291895] Call Trace: [ 2011.291913] dump_stack+0x1b2/0x283 [ 2011.291927] warn_alloc.cold+0x96/0x1cc [ 2011.291936] ? zone_watermark_ok_safe+0x220/0x220 [ 2011.291957] __vmalloc_area_node+0x48a/0x680 [ 2011.291971] ? __vmalloc_node_range+0x150/0x150 [ 2011.291979] ? __get_vm_area_node+0x27d/0x340 [ 2011.291989] __vmalloc_node_range+0xbe/0x150 [ 2011.292000] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2011.292007] vmalloc_user+0x47/0xa0 [ 2011.292016] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2011.292025] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2011.292033] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2011.292043] __vb2_queue_alloc+0x47a/0xd90 [ 2011.292063] vb2_core_create_bufs+0x279/0x5a0 [ 2011.292073] ? __vb2_queue_free+0x7a0/0x7a0 [ 2011.292088] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2011.292098] ? trace_hardirqs_on+0x10/0x10 [ 2011.292109] vb2_create_bufs+0x2e1/0x5b0 [ 2011.292122] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 2011.292131] ? vb2_thread_start.cold+0x24/0x24 [ 2011.292138] ? trace_hardirqs_on+0x10/0x10 [ 2011.292153] v4l_create_bufs+0xa4/0x150 [ 2011.303350] lowmem_reserve[]: [ 2011.329522] __video_do_ioctl+0x65b/0x6a0 [ 2011.329535] ? video_ioctl2+0x30/0x30 [ 2011.329549] ? __might_fault+0x177/0x1b0 [ 2011.329559] video_usercopy+0xf5/0xe90 [ 2011.329576] ? video_ioctl2+0x30/0x30 [ 2011.329585] ? v4l_g_ctrl+0x390/0x390 [ 2011.329593] ? lock_acquire+0x170/0x3f0 [ 2011.329601] ? trace_hardirqs_on+0x10/0x10 [ 2011.329610] ? trace_hardirqs_on+0x10/0x10 [ 2011.329619] ? futex_exit_release+0x220/0x220 [ 2011.329629] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2011.329641] ? __might_fault+0x104/0x1b0 [ 2011.334102] 0 [ 2011.335825] v4l2_ioctl+0x1bb/0x2f0 [ 2011.339818] 0 [ 2011.344620] ? v4l2_open+0x2f0/0x2f0 [ 2011.349003] 0 [ 2011.353657] do_vfs_ioctl+0x75a/0xff0 [ 2011.353669] ? ioctl_preallocate+0x1a0/0x1a0 [ 2011.353677] ? lock_downgrade+0x740/0x740 [ 2011.353690] ? __fget+0x225/0x360 [ 2011.353700] ? do_vfs_ioctl+0xff0/0xff0 [ 2011.353710] ? security_file_ioctl+0x83/0xb0 [ 2011.353720] SyS_ioctl+0x7f/0xb0 [ 2011.359952] 0 [ 2011.362581] ? do_vfs_ioctl+0xff0/0xff0 [ 2011.367913] 0 [ 2011.371544] do_syscall_64+0x1d5/0x640 [ 2011.371561] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2011.371569] RIP: 0033:0x45e219 [ 2011.371574] RSP: 002b:00007f49fc585c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2011.371583] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2011.371590] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 2011.376157] Node 0 [ 2011.381225] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2011.381229] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2011.381234] R13: 00007ffe51cae14f R14: 00007f49fc5869c0 R15: 000000000119bf8c [ 2011.389972] Mem-Info: [ 2011.395898] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2011.398412] active_anon:16947 inactive_anon:35173 isolated_anon:0 [ 2011.398412] active_file:7 inactive_file:19 isolated_file:0 [ 2011.398412] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2011.398412] slab_reclaimable:12663 slab_unreclaimable:119250 [ 2011.398412] mapped:52627 shmem:35605 pagetables:735 bounce:0 [ 2011.398412] free:13839 free_pcp:30 free_cma:0 [ 2011.405649] lowmem_reserve[]: [ 2011.413817] Node 0 active_anon:67356kB inactive_anon:140672kB active_file:28kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140876kB dirty:0kB writeback:0kB shmem:142380kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2011.418519] 0 [ 2011.424229] Node 1 active_anon:432kB inactive_anon:20kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69632kB dirty:0kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2011.428712] 0 [ 2011.433189] Node 0 [ 2011.433360] 0 [ 2011.437503] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2011.444827] 0 [ 2011.447585] lowmem_reserve[]: [ 2011.449280] 0 [ 2011.456199] 0 [ 2011.463052] 2717 [ 2011.468608] Node 1 [ 2011.469354] 2718 [ 2011.473878] Normal free:26412kB min:53696kB low:67120kB high:80544kB active_anon:432kB inactive_anon:20kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:368kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2011.473880] lowmem_reserve[]: 0 0 0 [ 2011.481209] 2718 [ 2011.486459] 0 [ 2011.488501] 2718 [ 2011.490308] 0 [ 2011.490315] Node 0 DMA: 4*4kB (UME) 5*8kB (UME) 4*16kB (UME) 1*32kB (U) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) [ 2011.499616] 2*1024kB [ 2011.504041] Node 0 DMA32 free:17976kB min:36200kB low:45248kB high:54296kB active_anon:67356kB inactive_anon:140668kB active_file:24kB inactive_file:72kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7104kB pagetables:2572kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2011.504061] lowmem_reserve[]: 0 0 0 0 0 [ 2011.511763] (ME) [ 2011.520731] Node 0 [ 2011.523493] 3*2048kB [ 2011.525288] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2011.529226] (ME) [ 2011.534347] lowmem_reserve[]: [ 2011.538487] 0*4096kB [ 2011.542353] 0 [ 2011.543345] = 10968kB [ 2011.554362] 0 [ 2011.561313] Node 0 [ 2011.567370] 0 [ 2011.567845] DMA32: [ 2011.575114] 0 0 [ 2011.575124] Node 1 Normal free:26412kB min:53696kB low:67120kB high:80544kB active_anon:432kB inactive_anon:20kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:368kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2011.575146] lowmem_reserve[]: [ 2011.585048] 742*4kB [ 2011.595166] 0 [ 2011.620707] (ME) [ 2011.656917] 0 [ 2011.685000] 574*8kB [ 2011.716953] 0 [ 2011.744776] (UME) [ 2011.750762] 0 [ 2011.751824] 279*16kB [ 2011.754043] 0 [ 2011.756083] (UME) [ 2011.791351] 92*32kB [ 2011.792934] Node 0 [ 2011.794717] (UME) [ 2011.806277] DMA: 4*4kB (UME) 5*8kB (UME) 4*16kB [ 2011.811745] 27*64kB [ 2011.843127] (UME) [ 2011.847266] (UME) [ 2011.848385] 1*32kB [ 2011.877505] 6*128kB [ 2011.886153] (U) [ 2011.886345] (UM) [ 2011.888115] 3*64kB (UME) [ 2011.893962] 2*256kB [ 2011.896187] 3*128kB [ 2011.896382] (U) [ 2011.929387] (UME) [ 2011.934038] 0*512kB [ 2011.935357] 2*256kB [ 2011.943718] 0*1024kB 0*2048kB 0*4096kB = 17976kB [ 2011.943737] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2011.943782] Node 1 Normal: 77*4kB (M) 69*8kB (M) 63*16kB (UM) 55*32kB (UM) 26*64kB (ME) 17*128kB (ME) 10*256kB (M) 6*512kB (ME) 5*1024kB (UME) 2*2048kB (M) 1*4096kB (M) = 26412kB [ 2011.943861] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2011.943869] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2011.951989] (ME) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10968kB [ 2011.952019] Node 0 DMA32: 742*4kB (ME) 583*8kB (UME) [ 2011.957291] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2011.958285] 281*16kB [ 2011.960578] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2011.960583] 35631 total pagecache pages [ 2011.960591] 0 pages in swap cache [ 2011.960596] Swap cache stats: add 0, delete 0, find 0/0 [ 2011.960599] Free swap = 0kB [ 2011.960602] Total swap = 0kB [ 2011.960609] 2097051 pages RAM [ 2011.960614] 0 pages HighMem/MovableOnly [ 2011.967777] (UME) [ 2011.973242] 363840 pages reserved [ 2011.974087] 95*32kB [ 2011.976301] 0 pages cma reserved [ 2011.978601] (UME) [ 2011.980620] Out of memory (oom_kill_allocating_task): Kill process 19814 (systemd-journal) score 0 or sacrifice child [ 2011.980648] Killed process 19814 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1592kB [ 2011.987774] 29*64kB [ 2011.994241] oom_reaper: reaped process 19814 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1592kB [ 2011.996508] (UME) [ 2012.003790] kworker/u4:9 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask= [ 2012.019946] Bluetooth: hci5 command 0x0406 tx timeout [ 2012.037562] (null) [ 2012.039320] 8*128kB [ 2012.047890] , order=3, oom_score_adj=0 [ 2012.047895] kworker/u4:9 cpuset=/ mems_allowed=0-1 [ 2012.047914] CPU: 0 PID: 16069 Comm: kworker/u4:9 Not tainted 4.14.214-syzkaller #0 [ 2012.047919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2012.047935] Workqueue: events_unbound call_usermodehelper_exec_work [ 2012.047940] Call Trace: [ 2012.047953] dump_stack+0x1b2/0x283 [ 2012.047964] dump_header+0x178/0x82f [ 2012.047976] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2012.072666] (UM) [ 2012.080262] ? ___ratelimit+0x2cd/0x522 [ 2012.080274] oom_kill_process.cold+0x10/0xb18 [ 2012.080286] ? lock_downgrade+0x740/0x740 [ 2012.084273] 2*256kB [ 2012.088954] out_of_memory+0x2dc/0x1190 [ 2012.094306] (U) [ 2012.097293] ? oom_killer_disable+0x1c0/0x1c0 [ 2012.100292] 0*512kB [ 2012.103366] ? mutex_trylock+0x152/0x1a0 [ 2012.107308] 0*1024kB [ 2012.109458] __alloc_pages_nodemask+0x23e1/0x2720 [ 2012.112894] 0*2048kB [ 2012.115195] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2012.118537] 0*4096kB [ 2012.120665] ? fs_reclaim_release+0xd0/0x110 [ 2012.120690] ? kmem_cache_alloc_node+0x38b/0x410 [ 2012.131411] = 18560kB [ 2012.141972] copy_process.part.0+0x265/0x71c0 [ 2012.141984] ? __lock_acquire+0x5fc/0x3f20 [ 2012.141993] ? trace_hardirqs_on+0x10/0x10 [ 2012.142005] ? debug_object_activate+0x292/0x490 [ 2012.144316] Node 0 [ 2012.154624] ? trace_hardirqs_on+0x10/0x10 [ 2012.154631] ? static_obj+0x50/0x50 [ 2012.154642] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2012.154652] ? __cleanup_sighand+0x40/0x40 [ 2012.154666] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2012.156794] Normal: [ 2012.166604] _do_fork+0x184/0xc80 [ 2012.166616] ? fork_idle+0x270/0x270 [ 2012.166630] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2012.166643] ? process_one_work+0x6c4/0x14a0 [ 2012.171839] 0*4kB [ 2012.173954] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2012.176246] 0*8kB [ 2012.180201] kernel_thread+0x2f/0x40 [ 2012.180211] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 2012.180220] ? call_usermodehelper+0x80/0x80 [ 2012.185132] 0*16kB [ 2012.192819] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2012.192828] process_one_work+0x793/0x14a0 [ 2012.192840] ? work_busy+0x320/0x320 [ 2012.202187] 0*32kB [ 2012.208573] ? worker_thread+0x158/0xff0 [ 2012.208583] ? _raw_spin_unlock_irq+0x24/0x80 [ 2012.211169] 0*64kB [ 2012.214782] worker_thread+0x5cc/0xff0 [ 2012.218465] 0*128kB [ 2012.223561] ? rescuer_thread+0xc80/0xc80 [ 2012.223570] kthread+0x30d/0x420 [ 2012.223578] ? kthread_create_on_node+0xd0/0xd0 [ 2012.225614] 0*256kB [ 2012.229573] ret_from_fork+0x24/0x30 [ 2012.233511] Mem-Info: [ 2012.234060] 0*512kB [ 2012.238197] active_anon:16847 inactive_anon:35173 isolated_anon:0 [ 2012.238197] active_file:12 inactive_file:14 isolated_file:0 [ 2012.238197] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2012.238197] slab_reclaimable:12663 slab_unreclaimable:119103 [ 2012.238197] mapped:52227 shmem:35605 pagetables:735 bounce:0 [ 2012.238197] free:14098 free_pcp:0 free_cma:0 [ 2012.246743] 0*1024kB [ 2012.246970] Node 0 active_anon:66956kB inactive_anon:140672kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139276kB dirty:0kB writeback:0kB shmem:142380kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2012.257494] 0*2048kB [ 2012.262537] Node 1 active_anon:432kB inactive_anon:20kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69632kB dirty:0kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2012.270459] 0*4096kB [ 2012.273163] Node 0 [ 2012.274793] = 0kB [ 2012.279185] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2012.288944] Node 1 [ 2012.295971] lowmem_reserve[]: [ 2012.299279] Normal: [ 2012.304232] 0 2717 2718 2718 2718 [ 2012.311623] 77*4kB [ 2012.319463] Node 0 [ 2012.322687] (M) [ 2012.324134] DMA32 free:19012kB min:36200kB low:45248kB high:54296kB active_anon:66956kB inactive_anon:140668kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7104kB pagetables:2572kB bounce:0kB free_pcp:112kB local_pcp:112kB free_cma:0kB [ 2012.332188] 69*8kB [ 2012.339979] lowmem_reserve[]: [ 2012.346967] (M) [ 2012.348607] 0 [ 2012.353132] 63*16kB [ 2012.358648] 0 [ 2012.364951] (UM) [ 2012.368586] 0 [ 2012.376381] 57*32kB [ 2012.381518] 0 [ 2012.386501] (UM) [ 2012.387432] 0 [ 2012.389670] 26*64kB (ME) 17*128kB (ME) 10*256kB (M) 6*512kB [ 2012.398195] (ME) [ 2012.402130] Node 0 [ 2012.411163] 5*1024kB [ 2012.416021] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2012.418855] (UME) [ 2012.422788] lowmem_reserve[]: [ 2012.431345] 2*2048kB [ 2012.466210] 0 [ 2012.494807] (M) [ 2012.503895] 0 [ 2012.524293] 1*4096kB [ 2012.533126] 0 [ 2012.556117] (M) [ 2012.565145] 0 [ 2012.565627] = 26476kB [ 2012.567848] 0 [ 2012.571830] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2012.605712] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2012.610879] Node 1 [ 2012.611947] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2012.613737] Normal free:26412kB min:53696kB low:67120kB high:80544kB active_anon:432kB inactive_anon:20kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:368kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2012.615772] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2012.617579] lowmem_reserve[]: [ 2012.625023] 35631 total pagecache pages [ 2012.628883] 0 [ 2012.631425] 0 pages in swap cache [ 2012.635309] 0 [ 2012.635686] Swap cache stats: add 0, delete 0, find 0/0 [ 2012.638068] 0 0 [ 2012.668519] Free swap = 0kB [ 2012.674621] 0 [ 2012.677387] Total swap = 0kB [ 2012.686891] 2097051 pages RAM [ 2012.687221] Node 0 [ 2012.690160] 0 pages HighMem/MovableOnly [ 2012.690164] 363840 pages reserved [ 2012.690167] 0 pages cma reserved [ 2012.807883] DMA: 4*4kB (UME) 5*8kB (UME) 4*16kB (UME) 1*32kB (U) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10968kB [ 2012.826643] Node 0 DMA32: 775*4kB (UME) 614*8kB (UME) 290*16kB (UME) 97*32kB (UME) 29*64kB (UME) 8*128kB (UM) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19148kB [ 2012.845442] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2012.856245] Node 1 Normal: 77*4kB (M) 69*8kB (M) 63*16kB (UM) 57*32kB (UM) 26*64kB (ME) 17*128kB (ME) 10*256kB (M) 6*512kB (ME) 5*1024kB (UME) 2*2048kB (M) 1*4096kB (M) = 26476kB [ 2012.876177] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2012.885083] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2012.897448] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2012.906327] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2012.918622] 35631 total pagecache pages [ 2012.922639] 0 pages in swap cache [ 2012.926084] Swap cache stats: add 0, delete 0, find 0/0 [ 2012.935256] Free swap = 0kB [ 2012.938274] Total swap = 0kB [ 2012.941326] 2097051 pages RAM [ 2012.944429] 0 pages HighMem/MovableOnly [ 2012.948398] 363840 pages reserved [ 2012.957667] 0 pages cma reserved [ 2012.961075] Out of memory: Kill process 7978 (syz-fuzzer) score 7 or sacrifice child [ 2012.969012] Killed process 16233 (syz-executor.0) total-vm:85024kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 2013.186133] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2013.204225] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2013.224982] systemd[1]: Stopped Journal Service. [ 2013.244761] systemd[1]: Starting Journal Service... [ 2013.283114] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 2013.518248] systemd-journald[20188]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2013.546293] systemd[1]: Started Load/Save RF Kill Switch Status. [ 2013.561945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2013.568710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2013.591812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2013.598738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2013.608854] systemd-journald[20188]: /dev/kmsg buffer overrun, some messages lost. [ 2013.635347] device bridge_slave_1 left promiscuous mode [ 2013.641112] bridge0: port 2(bridge_slave_1) entered disabled state [ 2013.648676] device bridge_slave_0 left promiscuous mode [ 2013.673963] bridge0: port 1(bridge_slave_0) entered disabled state [ 2013.694424] device veth1_macvtap left promiscuous mode [ 2013.699832] device veth0_macvtap left promiscuous mode [ 2013.705157] device veth1_vlan left promiscuous mode [ 2013.729841] device veth0_vlan left promiscuous mode [ 2013.899387] systemd[1]: Started Journal Service. [ 2013.917487] device hsr_slave_1 left promiscuous mode [ 2013.926243] device hsr_slave_0 left promiscuous mode [ 2013.949229] team0 (unregistering): Port device team_slave_1 removed [ 2013.964903] team0 (unregistering): Port device team_slave_0 removed [ 2013.977252] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2013.994154] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2014.038637] bond0 (unregistering): Released all slaves 23:24:47 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') write$sndseq(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000080)={0x7, 0x2, {0x2, 0x3, 0x93, 0x0, 0x4}, 0x7f}) 23:24:47 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x3ca26104, 0x0, 0x9, 0x10000000}, 0x0, 0x40000000, 0x0, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:24:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000300)) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd0, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x16}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xd}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x29}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff07}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x40201, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000002c0)) 23:24:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x9}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x9, 0x6, 0xfffffff9}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:24:47 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x0, 0x6, 0xfffffff9, 0x2}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:24:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='io.stat\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf25020000004800028006000f00008000000800080006000000080008002877000014000100ff020000000000000000000000000001060002004e2400000800050009000000060002004e23000014000280060002004e22000008000700060000001400028008000800407d00000800030001000000080005000000000008000600ff0f00001400028006000f000e0000000800030000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0x7, 0x95, 0x7, 0x8, @loopback, @remote, 0x7800, 0x7, 0x23df, 0x2}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x20, @private2, @mcast2, 0x700, 0x81, 0x568, 0x42}}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, 0x0) bind$pptp(r4, &(0x7f0000000640)={0x18, 0x2, {0x2, @loopback}}, 0x1e) write$sndseq(r4, 0x0, 0x17) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/mice\x00', 0x1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r6, 0x2f, 0x0, 0x1, 0x8, 0x49, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, [], 0xa}, 0x8, 0x80, 0x5, 0x44e}}) 23:24:48 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @sdr={0x3132564e, 0x6}}) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:24:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='io.stat\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf25020000004800028006000f00008000000800080006000000080008002877000014000100ff020000000000000000000000000001060002004e2400000800050009000000060002004e23000014000280060002004e22000008000700060000001400028008000800407d00000800030001000000080005000000000008000600ff0f00001400028006000f000e0000000800030000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0x7, 0x95, 0x7, 0x8, @loopback, @remote, 0x7800, 0x7, 0x23df, 0x2}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x20, @private2, @mcast2, 0x700, 0x81, 0x568, 0x42}}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, 0x0) bind$pptp(r4, &(0x7f0000000640)={0x18, 0x2, {0x2, @loopback}}, 0x1e) write$sndseq(r4, 0x0, 0x17) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/mice\x00', 0x1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r6, 0x2f, 0x0, 0x1, 0x8, 0x49, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, [], 0xa}, 0x8, 0x80, 0x5, 0x44e}}) 23:24:48 executing program 3: r0 = getpid() r1 = getpid() syz_open_procfs(r1, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='fd/3\x00') r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0x52, 0x0, 0x7, 0x2, 0x0, 0x2, 0x0, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x5}, 0x10008, 0x7, 0xffffffff, 0x0, 0x2, 0x5, 0x2}, r2, 0xc, r3, 0x1) write$sndseq(r2, 0x0, 0x0) 23:24:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/input/mice\x00', 0x1) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000000)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x800) accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14, 0x80000) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r5, 0x5411, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000540)) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r6, 0x5411, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="85100000030000008510000002000000183b000005000000000000000000000045b882dc95135259cb7d3686f6cae9e3d073a4800c8ef60f4652e1ec946f2342a1f9b899a34a10e5e46c6c3cc16fad6ad9194b79343ad356aeb2a349af5106dcb6d0330ca11833db271eacd38be5d3eb1604e71245a92f5ba966e32234d7e7979de195d2e4b1ab1d46229c63d05c86da838ad533ac930029064f235e6cd670c120f8b6d0e39578780c35dca8dfd129ddd322b8f10e86083ad52a66437a6e7eec465a91af4a52fd9e11fd7845d1b8d8249719b2e2"], &(0x7f0000000200)='GPL\x00', 0x7f, 0x5f, &(0x7f0000000240)=""/95, 0x41000, 0x0, [], r4, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x7, 0x3, 0x7f}, 0x10, 0xffffffffffffffff, r6}, 0x78) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x3f, 0x9, 0x4a, @dev={0xfe, 0x80, [], 0x23}, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x20, 0x80000001, 0xffff}}) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000580), 0xc, &(0x7f0000000900)={&(0x7f0000000600)=ANY=[@ANYBLOB="f40100001800000425bd7000fbdbde25fc010000000000000000000000000000fe8000000000552500000000000000bb4e24c20de342a4426c64055a0656711430ec00054e2200040a00802000000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d333000000fe8000000000000000000000000000bb010000000000000059000000000000000800000000000000001000000000000002000000000000000100008000000000000000000000c19b0700000000000000ff03000000000000080000000000000009000000000000001f00000000000000000000009c000000001000002bbd7000ff3400000a000404800000000000000002000000000000000c001c00", @ANYRES64=r7, @ANYBLOB="010000002400090008000000000000000300000000000000070000000000000008000000000000008c00120061757468656e6328626c616b6532732d3232342d67656e657269632c6b7728736d342d636529290000000000000000000000000000000000000000000000000000020000a00000007124218708ee9265217952fbb42d8e3a9e698f1b1e310f44a27b9bcac4fcb90402c8e3d7ced5868a8549c6fb1690c048ee1ba37bc45589ac44bb7ddd2d264f3908000b000600000008001d004000000008000c000700000028001a000a010100000000000000000000000000000000000000000000000000000000010a000107"], 0x1f4}, 0x1, 0x0, 0x0, 0x40004}, 0x1) 23:24:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='io.stat\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf25020000004800028006000f00008000000800080006000000080008002877000014000100ff020000000000000000000000000001060002004e2400000800050009000000060002004e23000014000280060002004e22000008000700060000001400028008000800407d00000800030001000000080005000000000008000600ff0f00001400028006000f000e0000000800030000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0x7, 0x95, 0x7, 0x8, @loopback, @remote, 0x7800, 0x7, 0x23df, 0x2}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x20, @private2, @mcast2, 0x700, 0x81, 0x568, 0x42}}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, 0x0) bind$pptp(r4, &(0x7f0000000640)={0x18, 0x2, {0x2, @loopback}}, 0x1e) write$sndseq(r4, 0x0, 0x17) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/mice\x00', 0x1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r6, 0x2f, 0x0, 0x1, 0x8, 0x49, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, [], 0xa}, 0x8, 0x80, 0x5, 0x44e}}) 23:24:48 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/anycast6\x00') write$sndseq(r1, 0x0, 0x0) 23:24:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='io.stat\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf25020000004800028006000f00008000000800080006000000080008002877000014000100ff020000000000000000000000000001060002004e2400000800050009000000060002004e23000014000280060002004e22000008000700060000001400028008000800407d00000800030001000000080005000000000008000600ff0f00001400028006000f000e0000000800030000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0x7, 0x95, 0x7, 0x8, @loopback, @remote, 0x7800, 0x7, 0x23df, 0x2}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x20, @private2, @mcast2, 0x700, 0x81, 0x568, 0x42}}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, 0x0) bind$pptp(r4, &(0x7f0000000640)={0x18, 0x2, {0x2, @loopback}}, 0x1e) write$sndseq(r4, 0x0, 0x17) openat$mice(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/mice\x00', 0x1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@dev, @in6=@initdev}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) 23:24:48 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') write$sndseq(r0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x10003) 23:24:48 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) write$sndseq(r1, 0x0, 0x0) 23:24:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='io.stat\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf25020000004800028006000f00008000000800080006000000080008002877000014000100ff020000000000000000000000000001060002004e2400000800050009000000060002004e23000014000280060002004e22000008000700060000001400028008000800407d00000800030001000000080005000000000008000600ff0f00001400028006000f000e0000000800030000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0x7, 0x95, 0x7, 0x8, @loopback, @remote, 0x7800, 0x7, 0x23df, 0x2}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x20, @private2, @mcast2, 0x700, 0x81, 0x568, 0x42}}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, 0x0) bind$pptp(r4, &(0x7f0000000640)={0x18, 0x2, {0x2, @loopback}}, 0x1e) write$sndseq(r4, 0x0, 0x17) openat$mice(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/mice\x00', 0x1) [ 2019.716000] IPVS: ftp: loaded support on port[0] = 21 [ 2019.924242] chnl_net:caif_netlink_parms(): no params data found [ 2020.086720] bridge0: port 1(bridge_slave_0) entered blocking state [ 2020.097077] bridge0: port 1(bridge_slave_0) entered disabled state [ 2020.107201] device bridge_slave_0 entered promiscuous mode [ 2020.117903] bridge0: port 2(bridge_slave_1) entered blocking state [ 2020.125158] bridge0: port 2(bridge_slave_1) entered disabled state [ 2020.135918] device bridge_slave_1 entered promiscuous mode [ 2020.174786] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2020.185067] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2020.218695] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2020.227153] team0: Port device team_slave_0 added [ 2020.236446] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2020.244782] team0: Port device team_slave_1 added [ 2020.275929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2020.283097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2020.312048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2020.323868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2020.333829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2020.362838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2020.373828] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2020.385135] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2020.424521] device hsr_slave_0 entered promiscuous mode [ 2020.430482] device hsr_slave_1 entered promiscuous mode [ 2020.436727] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2020.447790] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2020.576316] bridge0: port 2(bridge_slave_1) entered blocking state [ 2020.582740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2020.589412] bridge0: port 1(bridge_slave_0) entered blocking state [ 2020.595779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2020.637352] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2020.643755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2020.653560] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2020.663293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2020.671349] bridge0: port 1(bridge_slave_0) entered disabled state [ 2020.678184] bridge0: port 2(bridge_slave_1) entered disabled state [ 2020.689139] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2020.695234] 8021q: adding VLAN 0 to HW filter on device team0 [ 2020.705749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2020.713964] bridge0: port 1(bridge_slave_0) entered blocking state [ 2020.720488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2020.740762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2020.748465] bridge0: port 2(bridge_slave_1) entered blocking state [ 2020.754889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2020.764736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2020.781286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2020.790581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2020.798341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2020.810866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2020.822199] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2020.828324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2020.836928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2020.857101] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2020.870278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2020.876991] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2020.896147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2020.904952] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2020.994125] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2021.006491] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2021.016229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2021.026685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2021.080729] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2021.087952] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2021.100308] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2021.114315] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2021.121681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2021.129955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2021.139903] device veth0_vlan entered promiscuous mode [ 2021.149134] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2021.156157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2021.165296] device veth1_vlan entered promiscuous mode [ 2021.171839] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2021.184770] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2021.198349] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2021.214184] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2021.223478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2021.233146] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2021.244557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2021.254661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2021.266935] device veth0_macvtap entered promiscuous mode [ 2021.274640] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2021.285028] device veth1_macvtap entered promiscuous mode [ 2021.291947] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2021.302576] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2021.313550] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2021.323609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2021.333855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2021.343793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2021.354008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2021.363622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2021.373844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2021.383410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2021.394764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2021.404373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2021.414764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2021.426488] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2021.434328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2021.441648] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2021.450608] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2021.457879] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2021.466555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2021.477842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2021.488568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2021.502465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2021.512247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2021.526283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2021.536897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2021.550266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2021.561805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2021.572706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2021.584578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2021.597123] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2021.606170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2021.615634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2021.631894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2021.769390] Bluetooth: hci3 command 0x0409 tx timeout [ 2022.183467] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 2022.199900] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2022.205044] CPU: 1 PID: 20489 Comm: syz-executor.0 Not tainted 4.14.214-syzkaller #0 [ 2022.212912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2022.222253] Call Trace: [ 2022.224836] dump_stack+0x1b2/0x283 [ 2022.228481] dump_header+0x178/0x82f [ 2022.232196] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2022.237295] ? ___ratelimit+0x2cd/0x522 [ 2022.241271] oom_kill_process.cold+0x10/0xb18 [ 2022.245767] out_of_memory+0xe3e/0x1190 [ 2022.249743] ? oom_killer_disable+0x1c0/0x1c0 [ 2022.254238] ? mutex_trylock+0x152/0x1a0 [ 2022.258298] __alloc_pages_nodemask+0x23e1/0x2720 [ 2022.263147] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2022.268003] alloc_pages_current+0x155/0x260 [ 2022.272411] filemap_fault+0xea3/0x1980 [ 2022.276386] ext4_filemap_fault+0x84/0xb0 [ 2022.280528] __do_fault+0xfa/0x380 [ 2022.284064] __handle_mm_fault+0x2497/0x4620 [ 2022.288468] ? vm_insert_page+0x7c0/0x7c0 [ 2022.292611] ? free_object+0xe4/0x240 [ 2022.296417] handle_mm_fault+0x391/0x860 [ 2022.300486] __do_page_fault+0x549/0xad0 [ 2022.304544] ? spurious_fault+0x640/0x640 [ 2022.308683] ? do_page_fault+0x60/0x4f2 [ 2022.312650] ? page_fault+0x2f/0x50 [ 2022.316269] page_fault+0x45/0x50 [ 2022.319712] RIP: 119ca00:0x3e8 [ 2022.322897] RSP: 1edd65:0000000000000001 EFLAGS: 0119ca00 [ 2022.326116] Mem-Info: [ 2022.335523] active_anon:17689 inactive_anon:37206 isolated_anon:0 [ 2022.335523] active_file:13 inactive_file:14 isolated_file:0 [ 2022.335523] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2022.335523] slab_reclaimable:12761 slab_unreclaimable:119125 [ 2022.335523] mapped:52598 shmem:37654 pagetables:789 bounce:0 [ 2022.335523] free:25210 free_pcp:60 free_cma:0 [ 2022.418910] Node 0 active_anon:69484kB inactive_anon:148788kB active_file:36kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:105948kB dirty:0kB writeback:0kB shmem:150552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2022.468458] Node 1 active_anon:1272kB inactive_anon:36kB active_file:36kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104448kB dirty:0kB writeback:0kB shmem:64kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2022.495987] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:4kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2022.522466] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2022.527507] Node 0 DMA32 free:36144kB min:36200kB low:45248kB high:54296kB active_anon:67436kB inactive_anon:148784kB active_file:72kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2396kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2022.556427] lowmem_reserve[]: 0 0 0 0 0 [ 2022.560523] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2022.586363] lowmem_reserve[]: 0 0 0 0 0 [ 2022.590415] Node 1 Normal free:53648kB min:53696kB low:67120kB high:80544kB active_anon:1272kB inactive_anon:36kB active_file:0kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:760kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2022.618852] lowmem_reserve[]: 0 0 0 0 0 [ 2022.622855] Node 0 DMA: 4*4kB (UME) 3*8kB (ME) 5*16kB (UME) 2*32kB (U) 16*64kB (UME) 11*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 11064kB [ 2022.638714] Node 0 DMA32: 785*4kB (ME) 643*8kB (ME) 347*16kB (UME) 141*32kB (ME) 64*64kB (UME) 35*128kB (UM) 15*256kB (UM) 6*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 35884kB [ 2022.675524] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2022.690966] Node 1 Normal: 98*4kB (UME) 77*8kB (UME) 68*16kB (UM) 53*32kB (ME) 11*64kB (M) 16*128kB (ME) 10*256kB (M) 7*512kB (UME) 4*1024kB (ME) 2*2048kB (M) 8*4096kB (UM) = 53648kB [ 2022.707748] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2022.718945] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2022.727529] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2022.737622] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2022.746253] 37681 total pagecache pages [ 2022.750305] 0 pages in swap cache [ 2022.753742] Swap cache stats: add 0, delete 0, find 0/0 [ 2022.759127] Free swap = 0kB [ 2022.762135] Total swap = 0kB [ 2022.765144] 2097051 pages RAM [ 2022.768226] 0 pages HighMem/MovableOnly [ 2022.772363] 363840 pages reserved [ 2022.775799] 0 pages cma reserved [ 2022.779201] Out of memory (oom_kill_allocating_task): Kill process 20489 (syz-executor.0) score 0 or sacrifice child [ 2022.789947] Killed process 20489 (syz-executor.0) total-vm:93484kB, anon-rss:100kB, file-rss:33748kB, shmem-rss:0kB [ 2022.807353] oom_reaper: reaped process 20489 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2022.921693] oom_reaper: reaped process 20193 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2022.967025] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2022.980507] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2022.985633] CPU: 1 PID: 20250 Comm: syz-executor.0 Not tainted 4.14.214-syzkaller #0 [ 2022.993505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2023.002860] Call Trace: [ 2023.005455] dump_stack+0x1b2/0x283 [ 2023.009090] dump_header+0x178/0x82f [ 2023.012797] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2023.017895] ? ___ratelimit+0x2cd/0x522 [ 2023.021868] oom_kill_process.cold+0x10/0xb18 [ 2023.026370] out_of_memory+0xe3e/0x1190 [ 2023.030342] ? oom_killer_disable+0x1c0/0x1c0 [ 2023.034828] ? mutex_trylock+0x152/0x1a0 [ 2023.038886] __alloc_pages_nodemask+0x23e1/0x2720 [ 2023.043737] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2023.048587] alloc_pages_current+0x155/0x260 [ 2023.052997] filemap_fault+0xea3/0x1980 [ 2023.056975] ext4_filemap_fault+0x84/0xb0 [ 2023.061119] __do_fault+0xfa/0x380 [ 2023.064653] __handle_mm_fault+0x2497/0x4620 [ 2023.069057] ? vm_insert_page+0x7c0/0x7c0 [ 2023.073195] ? lock_downgrade+0x740/0x740 [ 2023.077351] handle_mm_fault+0x391/0x860 [ 2023.081405] __do_page_fault+0x549/0xad0 [ 2023.085449] ? spurious_fault+0x640/0x640 [ 2023.089701] ? do_page_fault+0x60/0x4f2 [ 2023.093684] ? page_fault+0x2f/0x50 [ 2023.095284] syz-executor.1: [ 2023.097298] page_fault+0x45/0x50 [ 2023.097302] vmalloc: allocation failure, allocated 484540416 of 1073745920 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 2023.100308] RIP: 0001:0x32 [ 2023.100312] RSP: 0bb8:00000000001eda59 EFLAGS: 00000003 [ 2023.104887] Mem-Info: [ 2023.121372] (null) [ 2023.129488] active_anon:17130 inactive_anon:37206 isolated_anon:0 [ 2023.129488] active_file:37 inactive_file:12 isolated_file:0 [ 2023.129488] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2023.129488] slab_reclaimable:12761 slab_unreclaimable:118805 [ 2023.129488] mapped:52597 shmem:37654 pagetables:761 bounce:0 [ 2023.129488] free:13901 free_pcp:62 free_cma:0 [ 2023.130553] syz-executor.1 cpuset= [ 2023.168954] Node 0 active_anon:67304kB inactive_anon:148788kB active_file:112kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:105944kB dirty:0kB writeback:0kB shmem:150552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2023.169350] / [ 2023.172519] Node 1 active_anon:1216kB inactive_anon:36kB active_file:36kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104444kB dirty:0kB writeback:0kB shmem:64kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2023.206145] mems_allowed=0-1 [ 2023.235374] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2023.240194] CPU: 0 PID: 20193 Comm: syz-executor.1 Not tainted 4.14.214-syzkaller #0 [ 2023.261824] lowmem_reserve[]: [ 2023.269641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2023.269644] Call Trace: [ 2023.269660] dump_stack+0x1b2/0x283 [ 2023.269674] warn_alloc.cold+0x96/0x1cc [ 2023.272750] 0 [ 2023.282087] ? zone_watermark_ok_safe+0x220/0x220 [ 2023.282109] __vmalloc_area_node+0x48a/0x680 [ 2023.284676] 2717 [ 2023.288376] ? __vmalloc_node_range+0x150/0x150 [ 2023.292333] 2718 [ 2023.294111] ? __get_vm_area_node+0x27d/0x340 [ 2023.298935] 2718 [ 2023.303932] __vmalloc_node_range+0xbe/0x150 [ 2023.305978] 2718 [ 2023.310647] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2023.310655] vmalloc_user+0x47/0xa0 [ 2023.310664] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2023.310678] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2023.317206] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2023.319282] Node 0 [ 2023.323635] __vb2_queue_alloc+0x47a/0xd90 [ 2023.325680] DMA32 free:18032kB min:36200kB low:45248kB high:54296kB active_anon:67384kB inactive_anon:148784kB active_file:40kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7104kB pagetables:2396kB bounce:0kB free_pcp:128kB local_pcp:8kB free_cma:0kB [ 2023.331024] vb2_core_create_bufs+0x279/0x5a0 [ 2023.331035] ? __vb2_queue_free+0x7a0/0x7a0 [ 2023.334631] lowmem_reserve[]: [ 2023.338942] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2023.338953] ? trace_hardirqs_on+0x10/0x10 [ 2023.344383] 0 [ 2023.348514] vb2_create_bufs+0x2e1/0x5b0 [ 2023.348526] ? vb2_thread_start.cold+0x24/0x24 [ 2023.348534] ? trace_hardirqs_on+0x10/0x10 [ 2023.350744] 0 [ 2023.354964] v4l_create_bufs+0xa4/0x150 [ 2023.383137] 0 [ 2023.387601] __video_do_ioctl+0x65b/0x6a0 [ 2023.391917] 0 [ 2023.394999] ? video_ioctl2+0x30/0x30 [ 2023.400357] 0 [ 2023.404566] ? __might_fault+0x177/0x1b0 [ 2023.410378] video_usercopy+0xf5/0xe90 [ 2023.410390] ? video_ioctl2+0x30/0x30 [ 2023.414946] Node 0 [ 2023.419162] ? v4l_g_ctrl+0x390/0x390 [ 2023.419172] ? trace_hardirqs_on+0x10/0x10 [ 2023.419181] ? trace_hardirqs_on+0x10/0x10 [ 2023.420966] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2023.424915] ? __free_pages_ok+0x539/0xeb0 [ 2023.426687] lowmem_reserve[]: [ 2023.430838] ? futex_exit_release+0x220/0x220 [ 2023.430847] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2023.430858] ? __might_fault+0x104/0x1b0 [ 2023.432629] 0 [ 2023.436411] v4l2_ioctl+0x1bb/0x2f0 [ 2023.438198] 0 [ 2023.442238] ? v4l2_open+0x2f0/0x2f0 [ 2023.442248] do_vfs_ioctl+0x75a/0xff0 [ 2023.442260] ? ioctl_preallocate+0x1a0/0x1a0 [ 2023.446114] 0 [ 2023.449898] ? lock_downgrade+0x740/0x740 [ 2023.449911] ? __fget+0x225/0x360 [ 2023.449920] ? do_vfs_ioctl+0xff0/0xff0 [ 2023.452160] 0 [ 2023.455946] ? security_file_ioctl+0x83/0xb0 [ 2023.460164] 0 [ 2023.464372] SyS_ioctl+0x7f/0xb0 [ 2023.493455] ? do_vfs_ioctl+0xff0/0xff0 [ 2023.496535] Node 1 [ 2023.501028] do_syscall_64+0x1d5/0x640 [ 2023.501045] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2023.506039] Normal free:26912kB min:53696kB low:67120kB high:80544kB active_anon:1216kB inactive_anon:36kB active_file:36kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:648kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2023.510069] RIP: 0033:0x45e219 [ 2023.510074] RSP: 002b:00007f49fc585c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2023.510083] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2023.510089] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 2023.511868] lowmem_reserve[]: [ 2023.515471] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2023.517246] 0 [ 2023.520934] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2023.520940] R13: 00007ffe51cae14f R14: 00007f49fc5869c0 R15: 000000000119bf8c [ 2023.530551] Mem-Info: [ 2023.537441] 0 [ 2023.544472] active_anon:17130 inactive_anon:37206 isolated_anon:0 [ 2023.544472] active_file:37 inactive_file:12 isolated_file:0 [ 2023.544472] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2023.544472] slab_reclaimable:12761 slab_unreclaimable:118805 [ 2023.544472] mapped:52597 shmem:37654 pagetables:761 bounce:0 [ 2023.544472] free:13975 free_pcp:62 free_cma:0 [ 2023.544871] 0 0 [ 2023.551323] Node 0 active_anon:67304kB inactive_anon:148788kB active_file:112kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:105944kB dirty:0kB writeback:0kB shmem:150552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2023.557762] 0 [ 2023.563705] Node 1 active_anon:1216kB inactive_anon:36kB active_file:36kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104444kB dirty:0kB writeback:0kB shmem:64kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2023.571576] Node 0 [ 2023.601198] Node 0 [ 2023.609281] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2023.626318] DMA: [ 2023.626553] lowmem_reserve[]: [ 2023.639571] 3*4kB [ 2023.642949] 0 [ 2023.657119] (ME) [ 2023.695420] 2717 [ 2023.728624] 4*8kB [ 2023.746283] 2718 [ 2023.755469] (UME) [ 2023.781025] 2718 [ 2023.789036] 4*16kB [ 2023.791033] 2718 [ 2023.792007] (UME) [ 2023.796175] 1*32kB [ 2023.798214] Node 0 [ 2023.807485] (U) [ 2023.808505] DMA32 free:18032kB min:36200kB low:45248kB high:54296kB active_anon:67384kB inactive_anon:148784kB active_file:40kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7104kB pagetables:2396kB bounce:0kB free_pcp:128kB local_pcp:120kB free_cma:0kB [ 2023.809786] 3*64kB [ 2023.811677] lowmem_reserve[]: 0 0 0 0 0 [ 2023.847613] (UME) [ 2023.850109] Bluetooth: hci3 command 0x041b tx timeout [ 2023.852130] Node 0 [ 2023.852877] 3*128kB [ 2023.857563] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2023.866760] (UME) [ 2023.891219] lowmem_reserve[]: 0 0 0 0 0 [ 2023.895215] 2*256kB [ 2023.897360] Node 1 [ 2023.897362] (ME) 3*512kB [ 2023.900289] Normal free:26912kB min:53696kB low:67120kB high:80544kB active_anon:1216kB inactive_anon:36kB active_file:36kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:648kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2023.901966] (UME) [ 2023.904687] lowmem_reserve[]: 0 [ 2023.940472] 2*1024kB [ 2023.940475] 0 0 [ 2023.943754] (ME) [ 2023.946146] 0 [ 2023.948096] 3*2048kB [ 2023.950226] 0 [ 2023.950232] Node 0 DMA: 3*4kB (ME) 4*8kB (UME) 4*16kB (UME) 1*32kB (U) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10956kB [ 2023.958337] (ME) [ 2023.971782] Node 0 DMA32: 743*4kB (UME) 744*8kB (UME) 347*16kB (UME) 87*32kB (UME) 33*64kB (UME) 9*128kB (M) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 21548kB [ 2023.984055] 0*4096kB = 10956kB [ 2023.988941] Node 0 [ 2023.992095] Node 0 [ 2023.992102] Normal: [ 2023.994326] DMA32: [ 2023.996544] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2024.009911] 743*4kB (UME) 744*8kB (UME) 347*16kB (UME) 87*32kB (UME) 33*64kB (UME) 9*128kB (M) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 21548kB [ 2024.011085] Node 1 Normal: 98*4kB (ME) 79*8kB (ME) 68*16kB (UM) 53*32kB (UME) 13*64kB (UM) 16*128kB (ME) 11*256kB (UM) 6*512kB (ME) 4*1024kB (ME) 3*2048kB (UM) 1*4096kB (M) = 26912kB [ 2024.035648] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB [ 2024.041054] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2024.041062] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2024.048232] 0*512kB [ 2024.057116] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2024.057123] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2024.057127] 37681 total pagecache pages [ 2024.057136] 0 pages in swap cache [ 2024.057140] Swap cache stats: add 0, delete 0, find 0/0 [ 2024.057144] Free swap = 0kB [ 2024.057147] Total swap = 0kB [ 2024.057154] 2097051 pages RAM [ 2024.057157] 0 pages HighMem/MovableOnly [ 2024.057161] 363840 pages reserved [ 2024.057163] 0 pages cma reserved [ 2024.124812] 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2024.130254] Node 1 Normal: 98*4kB (ME) 79*8kB (ME) 68*16kB (UM) 53*32kB (UME) 13*64kB (UM) 16*128kB (ME) 11*256kB (UM) 6*512kB (ME) 4*1024kB (ME) 3*2048kB (UM) 1*4096kB (M) = 26912kB [ 2024.153061] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2024.163417] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2024.177933] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2024.188269] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2024.201537] 37681 total pagecache pages [ 2024.205610] 0 pages in swap cache [ 2024.210449] Swap cache stats: add 0, delete 0, find 0/0 [ 2024.215808] Free swap = 0kB [ 2024.223699] Total swap = 0kB [ 2024.226718] 2097051 pages RAM [ 2024.231044] 0 pages HighMem/MovableOnly [ 2024.235008] 363840 pages reserved [ 2024.243073] 0 pages cma reserved [ 2024.246451] Out of memory (oom_kill_allocating_task): Kill process 20250 (syz-executor.0) score 0 or sacrifice child [ 2024.260085] Killed process 20250 (syz-executor.0) total-vm:93220kB, anon-rss:100kB, file-rss:34684kB, shmem-rss:0kB [ 2024.287629] oom_reaper: reaped process 20250 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2024.309254] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 2024.326558] systemd-udevd cpuset=/ mems_allowed=0-1 [ 2024.331963] CPU: 0 PID: 4627 Comm: systemd-udevd Not tainted 4.14.214-syzkaller #0 [ 2024.339675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2024.349024] Call Trace: [ 2024.351604] dump_stack+0x1b2/0x283 [ 2024.355216] dump_header+0x178/0x82f [ 2024.358917] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2024.364000] ? ___ratelimit+0x2cd/0x522 [ 2024.367956] oom_kill_process.cold+0x10/0xb18 [ 2024.372466] ? lock_downgrade+0x740/0x740 [ 2024.376605] out_of_memory+0x2dc/0x1190 [ 2024.380561] ? oom_killer_disable+0x1c0/0x1c0 [ 2024.385037] ? mutex_trylock+0x152/0x1a0 [ 2024.389082] __alloc_pages_nodemask+0x23e1/0x2720 [ 2024.393918] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2024.398750] alloc_pages_current+0x155/0x260 [ 2024.403139] filemap_fault+0xea3/0x1980 [ 2024.407111] ext4_filemap_fault+0x84/0xb0 [ 2024.411238] __do_fault+0xfa/0x380 [ 2024.414781] __handle_mm_fault+0x2497/0x4620 [ 2024.419169] ? ep_poll+0x1ab/0xa50 [ 2024.422684] ? vm_insert_page+0x7c0/0x7c0 [ 2024.426820] handle_mm_fault+0x391/0x860 [ 2024.430880] __do_page_fault+0x549/0xad0 [ 2024.434922] ? spurious_fault+0x640/0x640 [ 2024.439047] ? do_page_fault+0x60/0x4f2 [ 2024.443011] ? page_fault+0x2f/0x50 [ 2024.446614] page_fault+0x45/0x50 [ 2024.450047] RIP: 0001:0xffffffffffffffff [ 2024.454119] RSP: 36a9a690:00007fffd3c73af0 EFLAGS: 7fffd3c73980 [ 2024.463468] Mem-Info: [ 2024.476685] active_anon:17124 inactive_anon:37206 isolated_anon:0 [ 2024.476685] active_file:38 inactive_file:0 isolated_file:0 [ 2024.476685] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2024.476685] slab_reclaimable:12761 slab_unreclaimable:117986 [ 2024.476685] mapped:52598 shmem:37654 pagetables:723 bounce:0 [ 2024.476685] free:15242 free_pcp:311 free_cma:0 [ 2024.514151] Node 0 active_anon:67284kB inactive_anon:148788kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:105944kB dirty:0kB writeback:0kB shmem:150552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2024.546220] Node 1 active_anon:1212kB inactive_anon:36kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104448kB dirty:0kB writeback:0kB shmem:64kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2024.578921] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2024.607764] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2024.613701] Node 0 DMA32 free:22128kB min:36200kB low:45248kB high:54296kB active_anon:67284kB inactive_anon:148784kB active_file:132kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7104kB pagetables:2392kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2024.645690] lowmem_reserve[]: 0 0 0 0 0 [ 2024.655317] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2024.686166] lowmem_reserve[]: 0 0 0 0 0 [ 2024.691076] Node 1 Normal free:131656kB min:53696kB low:67120kB high:80544kB active_anon:1212kB inactive_anon:36kB active_file:520kB inactive_file:1436kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:500kB bounce:0kB free_pcp:708kB local_pcp:60kB free_cma:0kB [ 2024.766888] lowmem_reserve[]: 0 0 0 0 0 [ 2024.771156] Node 0 DMA: 3*4kB (ME) 4*8kB (UME) 4*16kB (UME) 1*32kB (U) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10956kB [ 2024.786980] Node 0 DMA32: 759*4kB (UME) 972*8kB (UME) 358*16kB (UME) 86*32kB (UME) 33*64kB (UME) 10*128kB (UM) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 23708kB [ 2024.803213] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2024.814552] Node 1 Normal: 258*4kB (UE) 324*8kB (UE) 1128*16kB (U) 543*32kB (UME) 85*64kB (UM) 36*128kB (UE) 27*256kB (UM) 28*512kB (UME) 11*1024kB (UME) 3*2048kB (UM) 52*4096kB (UM) = 300744kB [ 2024.832585] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2024.842277] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2024.851403] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 23:24:55 executing program 3: perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20400, 0x0) write$sndseq(r0, 0x0, 0x0) [ 2024.860916] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2024.869657] 39845 total pagecache pages [ 2024.873721] 0 pages in swap cache [ 2024.877164] Swap cache stats: add 0, delete 0, find 0/0 [ 2024.883173] Free swap = 0kB [ 2024.886696] Total swap = 0kB [ 2024.890438] 2097051 pages RAM [ 2024.894190] 0 pages HighMem/MovableOnly [ 2024.898165] 363840 pages reserved [ 2024.901689] 0 pages cma reserved [ 2024.905562] Out of memory: Kill process 7978 (syz-fuzzer) score 7 or sacrifice child [ 2024.914171] Killed process 18879 (syz-executor.2) total-vm:85024kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 2024.947117] oom_reaper: reaped process 18879 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2025.181513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2025.192098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2025.201310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2025.208026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2025.222388] device bridge_slave_1 left promiscuous mode [ 2025.227920] bridge0: port 2(bridge_slave_1) entered disabled state [ 2025.237608] device bridge_slave_0 left promiscuous mode [ 2025.246101] bridge0: port 1(bridge_slave_0) entered disabled state [ 2025.257334] device veth1_macvtap left promiscuous mode [ 2025.266144] device veth0_macvtap left promiscuous mode [ 2025.273369] device veth1_vlan left promiscuous mode [ 2025.281414] device veth0_vlan left promiscuous mode [ 2025.402262] device hsr_slave_1 left promiscuous mode [ 2025.414655] device hsr_slave_0 left promiscuous mode [ 2025.434076] team0 (unregistering): Port device team_slave_1 removed [ 2025.444441] team0 (unregistering): Port device team_slave_0 removed [ 2025.461727] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2025.477349] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2025.513886] bond0 (unregistering): Released all slaves [ 2026.890972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2026.897720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2026.911194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2026.917919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2026.928029] device bridge_slave_1 left promiscuous mode [ 2026.936204] bridge0: port 2(bridge_slave_1) entered disabled state [ 2026.945432] device bridge_slave_0 left promiscuous mode [ 2026.953363] bridge0: port 1(bridge_slave_0) entered disabled state [ 2026.964352] device veth1_macvtap left promiscuous mode [ 2026.972644] device veth0_macvtap left promiscuous mode [ 2026.977991] device veth1_vlan left promiscuous mode [ 2026.985126] device veth0_vlan left promiscuous mode [ 2027.094561] device hsr_slave_1 left promiscuous mode [ 2027.106398] device hsr_slave_0 left promiscuous mode [ 2027.127998] team0 (unregistering): Port device team_slave_1 removed [ 2027.143680] team0 (unregistering): Port device team_slave_0 removed [ 2027.154433] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2027.170225] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2027.206239] bond0 (unregistering): Released all slaves 23:24:59 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x0, 0x6, 0xfffffff9, 0x2}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:24:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0x40, 0x8, 0x8, 0x8, @empty, @loopback, 0x7800, 0x8000, 0x0, 0x907}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_mr_cache\x00') r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='cgroup.controllers\x00', 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', r3, 0x4, 0x4, 0x3, 0x9, 0x20, @local, @remote, 0x7, 0x20, 0x1, 0x5}}) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) 23:24:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='io.stat\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf25020000004800028006000f00008000000800080006000000080008002877000014000100ff020000000000000000000000000001060002004e2400000800050009000000060002004e23000014000280060002004e22000008000700060000001400028008000800407d00000800030001000000080005000000000008000600ff0f00001400028006000f000e0000000800030000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0x7, 0x95, 0x7, 0x8, @loopback, @remote, 0x7800, 0x7, 0x23df, 0x2}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x20, @private2, @mcast2, 0x700, 0x81, 0x568, 0x42}}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, 0x0) bind$pptp(r4, &(0x7f0000000640)={0x18, 0x2, {0x2, @loopback}}, 0x1e) write$sndseq(r4, 0x0, 0x17) 23:24:59 executing program 3: r0 = getpid() syz_open_procfs(r0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='comm\x00') write$sndseq(r1, 0x0, 0x0) 23:24:59 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x9}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x9, 0x6, 0xfffffff9}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:24:59 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x3ca26104, 0x0, 0x9, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x0, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:24:59 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000040)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x440000) write$sndseq(r1, 0x0, 0x12) socket$nl_route(0x10, 0x3, 0x0) 23:24:59 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_getvlan={0x50, 0x72, 0x200, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x4) write$sndseq(r0, 0x0, 0x0) 23:24:59 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x100, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) 23:24:59 executing program 3: perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x70, 0x81, 0xf3, 0x7, 0x7, 0x0, 0x401, 0x60, 0xf, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0xaac30209ef198ca8, @perf_bp={&(0x7f0000000000), 0x15}, 0x0, 0x7ff, 0x4, 0x3, 0x3c31, 0x3, 0x3f}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xc) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rfcomm\x00') write$sndseq(r0, 0x0, 0x0) 23:24:59 executing program 5: pselect6(0x40, &(0x7f0000000000)={0x9, 0x6, 0x0, 0x6, 0x4, 0x10001, 0xff, 0x6}, &(0x7f0000000040)={0xff, 0x5, 0xfffffffffffffffe, 0x80000001, 0xff, 0x3, 0xbdc0000000000000, 0x9}, &(0x7f0000000080)={0x6, 0xb7f, 0x0, 0xe528, 0x5, 0x40, 0x1000, 0x84c}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) 23:24:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='io.stat\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf25020000004800028006000f00008000000800080006000000080008002877000014000100ff020000000000000000000000000001060002004e2400000800050009000000060002004e23000014000280060002004e22000008000700060000001400028008000800407d00000800030001000000080005000000000008000600ff0f00001400028006000f000e0000000800030000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0x7, 0x95, 0x7, 0x8, @loopback, @remote, 0x7800, 0x7, 0x23df, 0x2}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x20, @private2, @mcast2, 0x700, 0x81, 0x568, 0x42}}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, 0x0) bind$pptp(r4, &(0x7f0000000640)={0x18, 0x2, {0x2, @loopback}}, 0x1e) 23:25:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='io.stat\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf25020000004800028006000f00008000000800080006000000080008002877000014000100ff020000000000000000000000000001060002004e2400000800050009000000060002004e23000014000280060002004e22000008000700060000001400028008000800407d00000800030001000000080005000000000008000600ff0f00001400028006000f000e0000000800030000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0x7, 0x95, 0x7, 0x8, @loopback, @remote, 0x7800, 0x7, 0x23df, 0x2}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x20, @private2, @mcast2, 0x700, 0x81, 0x568, 0x42}}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, 0x0) [ 2031.653165] IPVS: ftp: loaded support on port[0] = 21 [ 2031.800588] IPVS: ftp: loaded support on port[0] = 21 [ 2031.981541] chnl_net:caif_netlink_parms(): no params data found [ 2032.150465] chnl_net:caif_netlink_parms(): no params data found [ 2032.223273] bridge0: port 1(bridge_slave_0) entered blocking state [ 2032.234521] bridge0: port 1(bridge_slave_0) entered disabled state [ 2032.245439] device bridge_slave_0 entered promiscuous mode [ 2032.255032] bridge0: port 2(bridge_slave_1) entered blocking state [ 2032.261856] bridge0: port 2(bridge_slave_1) entered disabled state [ 2032.270106] device bridge_slave_1 entered promiscuous mode [ 2032.304886] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2032.314487] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2032.369818] bridge0: port 1(bridge_slave_0) entered blocking state [ 2032.376303] bridge0: port 1(bridge_slave_0) entered disabled state [ 2032.388515] device bridge_slave_0 entered promiscuous mode [ 2032.395504] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2032.407267] team0: Port device team_slave_0 added [ 2032.412719] bridge0: port 2(bridge_slave_1) entered blocking state [ 2032.423218] bridge0: port 2(bridge_slave_1) entered disabled state [ 2032.430654] device bridge_slave_1 entered promiscuous mode [ 2032.437149] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2032.448535] team0: Port device team_slave_1 added [ 2032.498424] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2032.512268] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2032.520766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2032.527002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2032.556104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2032.590257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2032.596521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2032.626130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2032.636972] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2032.648483] team0: Port device team_slave_0 added [ 2032.653772] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2032.665862] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2032.673521] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2032.684844] team0: Port device team_slave_1 added [ 2032.741216] device hsr_slave_0 entered promiscuous mode [ 2032.748145] device hsr_slave_1 entered promiscuous mode [ 2032.754530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2032.765299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2032.794362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2032.805502] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2032.817084] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2032.824755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2032.831333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2032.856885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2032.878316] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2032.885699] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2032.959801] device hsr_slave_0 entered promiscuous mode [ 2032.966159] device hsr_slave_1 entered promiscuous mode [ 2032.994068] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2033.015731] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2033.106262] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2033.193871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2033.226074] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2033.236528] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2033.253299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2033.264653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2033.279801] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2033.293625] 8021q: adding VLAN 0 to HW filter on device team0 [ 2033.306023] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2033.321066] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2033.332819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2033.342474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2033.354597] bridge0: port 1(bridge_slave_0) entered blocking state [ 2033.361013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2033.380210] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2033.396290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2033.403594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2033.416214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2033.425360] bridge0: port 2(bridge_slave_1) entered blocking state [ 2033.431786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2033.449742] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2033.468167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2033.480527] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2033.496719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2033.504257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2033.515323] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2033.536717] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2033.558538] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2033.568295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2033.580221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2033.608797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2033.616594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2033.640490] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2033.659244] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2033.666298] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2033.687503] Bluetooth: hci4 command 0x0409 tx timeout [ 2033.687569] Bluetooth: hci3 command 0x0409 tx timeout [ 2033.728659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2033.743515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2033.755503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2033.770517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2033.930986] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2033.944072] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2033.949248] CPU: 0 PID: 20557 Comm: syz-executor.0 Not tainted 4.14.214-syzkaller #0 [ 2033.957115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2033.966448] Call Trace: [ 2033.969124] dump_stack+0x1b2/0x283 [ 2033.972730] dump_header+0x178/0x82f [ 2033.976418] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2033.981499] ? ___ratelimit+0x2cd/0x522 [ 2033.985464] oom_kill_process.cold+0x10/0xb18 [ 2033.989952] out_of_memory+0xe3e/0x1190 [ 2033.993905] ? oom_killer_disable+0x1c0/0x1c0 [ 2033.998376] ? mutex_trylock+0x152/0x1a0 [ 2034.002419] __alloc_pages_nodemask+0x23e1/0x2720 [ 2034.007244] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2034.012090] alloc_pages_current+0x155/0x260 [ 2034.016494] filemap_fault+0xea3/0x1980 [ 2034.020449] ext4_filemap_fault+0x84/0xb0 [ 2034.024592] __do_fault+0xfa/0x380 [ 2034.028110] __handle_mm_fault+0x2497/0x4620 [ 2034.032499] ? vm_insert_page+0x7c0/0x7c0 [ 2034.036629] ? task_work_run+0xfd/0x190 [ 2034.040584] handle_mm_fault+0x391/0x860 [ 2034.044640] __do_page_fault+0x549/0xad0 [ 2034.048686] ? spurious_fault+0x640/0x640 [ 2034.052810] ? do_page_fault+0x60/0x4f2 [ 2034.056759] ? page_fault+0x2f/0x50 [ 2034.060376] page_fault+0x45/0x50 [ 2034.063806] RIP: 0000:0x3 [ 2034.066538] RSP: 4d13bb:00007ffd9f0d06b0 EFLAGS: 00000000 [ 2034.066870] Mem-Info: [ 2034.074883] active_anon:17565 inactive_anon:37205 isolated_anon:0 [ 2034.074883] active_file:14 inactive_file:6 isolated_file:0 [ 2034.074883] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2034.074883] slab_reclaimable:12666 slab_unreclaimable:117515 [ 2034.074883] mapped:52642 shmem:37654 pagetables:759 bounce:0 [ 2034.074883] free:25204 free_pcp:0 free_cma:0 [ 2034.108882] Node 0 active_anon:68900kB inactive_anon:148780kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:107236kB dirty:0kB writeback:0kB shmem:150544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2034.136862] Node 1 active_anon:1360kB inactive_anon:40kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:103332kB dirty:0kB writeback:0kB shmem:72kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2034.163510] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2034.190003] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2034.195043] Node 0 DMA32 free:36156kB min:36200kB low:45248kB high:54296kB active_anon:66852kB inactive_anon:148776kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7072kB pagetables:2396kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2034.272841] lowmem_reserve[]: 0 0 0 0 0 [ 2034.276918] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2034.302489] lowmem_reserve[]: 0 0 0 0 0 [ 2034.306497] Node 1 Normal free:53100kB min:53696kB low:67120kB high:80544kB active_anon:1360kB inactive_anon:40kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:640kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2034.340056] lowmem_reserve[]: 0 0 0 0 0 [ 2034.344854] Node 0 DMA: 3*4kB (UME) 2*8kB (ME) 3*16kB (UME) 1*32kB (M) 15*64kB (UME) 12*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 11052kB [ 2034.410670] Node 0 DMA32: 803*4kB (UME) 600*8kB (UME) 295*16kB (UME) 104*32kB (UME) 28*64kB (UME) 15*128kB (UM) 8*256kB (UM) 20*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 36156kB [ 2034.451601] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2034.497404] Node 1 Normal: 95*4kB (ME) 77*8kB (UME) 63*16kB (M) 62*32kB (UME) 37*64kB (M) 19*128kB (ME) 11*256kB (M) 7*512kB (ME) 1*1024kB (E) 2*2048kB (M) 8*4096kB (UM) = 53076kB [ 2034.553355] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2034.594854] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2034.642418] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2034.685219] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2034.717911] 37686 total pagecache pages [ 2034.721936] 0 pages in swap cache [ 2034.725379] Swap cache stats: add 0, delete 0, find 0/0 [ 2034.764640] Free swap = 0kB [ 2034.778543] Total swap = 0kB [ 2034.781663] 2097051 pages RAM [ 2034.784754] 0 pages HighMem/MovableOnly [ 2034.815351] 363840 pages reserved [ 2034.818978] 0 pages cma reserved [ 2034.822336] Out of memory (oom_kill_allocating_task): Kill process 20557 (syz-executor.0) score 0 or sacrifice child [ 2034.884073] Killed process 20557 (syz-executor.0) total-vm:93220kB, anon-rss:76kB, file-rss:33496kB, shmem-rss:0kB [ 2034.941245] oom_reaper: reaped process 20557 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2034.955282] kworker/u4:0 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2035.021965] kworker/u4:0 cpuset=/ mems_allowed=0-1 [ 2035.026963] CPU: 0 PID: 31080 Comm: kworker/u4:0 Not tainted 4.14.214-syzkaller #0 [ 2035.034658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2035.044011] Workqueue: events_unbound call_usermodehelper_exec_work [ 2035.050409] Call Trace: [ 2035.052989] dump_stack+0x1b2/0x283 [ 2035.056610] dump_header+0x178/0x82f [ 2035.060320] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2035.065415] ? ___ratelimit+0x2cd/0x522 [ 2035.069387] oom_kill_process.cold+0x10/0xb18 [ 2035.073873] ? lock_downgrade+0x740/0x740 [ 2035.078018] out_of_memory+0x2dc/0x1190 [ 2035.081994] ? oom_killer_disable+0x1c0/0x1c0 [ 2035.086478] ? mutex_trylock+0x152/0x1a0 [ 2035.090531] __alloc_pages_nodemask+0x23e1/0x2720 [ 2035.095371] ? deref_stack_reg+0x124/0x1a0 [ 2035.099605] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2035.104446] ? fs_reclaim_release+0xd0/0x110 [ 2035.108861] ? kmem_cache_alloc_node+0x38b/0x410 [ 2035.113612] copy_process.part.0+0x265/0x71c0 [ 2035.118098] ? __lock_acquire+0x5fc/0x3f20 [ 2035.122328] ? debug_object_activate+0x292/0x490 [ 2035.127076] ? trace_hardirqs_on+0x10/0x10 [ 2035.131302] ? static_obj+0x50/0x50 [ 2035.134924] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2035.140365] ? __cleanup_sighand+0x40/0x40 [ 2035.144607] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2035.150054] _do_fork+0x184/0xc80 [ 2035.153508] ? fork_idle+0x270/0x270 [ 2035.157341] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2035.162439] ? process_one_work+0x6c4/0x14a0 [ 2035.166846] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2035.172395] kernel_thread+0x2f/0x40 [ 2035.176093] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 2035.181353] ? call_usermodehelper+0x80/0x80 [ 2035.185740] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2035.191167] process_one_work+0x793/0x14a0 [ 2035.195379] ? work_busy+0x320/0x320 [ 2035.199110] ? worker_thread+0x158/0xff0 [ 2035.203150] ? _raw_spin_unlock_irq+0x24/0x80 [ 2035.207622] worker_thread+0x5cc/0xff0 [ 2035.211487] ? rescuer_thread+0xc80/0xc80 [ 2035.215609] kthread+0x30d/0x420 [ 2035.218952] ? kthread_create_on_node+0xd0/0xd0 [ 2035.223631] ret_from_fork+0x24/0x30 [ 2035.239148] Mem-Info: [ 2035.241588] active_anon:17552 inactive_anon:37205 isolated_anon:0 [ 2035.241588] active_file:18 inactive_file:10 isolated_file:0 [ 2035.241588] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2035.241588] slab_reclaimable:12664 slab_unreclaimable:117515 [ 2035.241588] mapped:52643 shmem:37654 pagetables:735 bounce:0 [ 2035.241588] free:25114 free_pcp:30 free_cma:0 [ 2035.276964] Node 0 active_anon:68900kB inactive_anon:148780kB active_file:36kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:107236kB dirty:0kB writeback:0kB shmem:150544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2035.307037] Node 1 active_anon:1308kB inactive_anon:40kB active_file:36kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:103336kB dirty:0kB writeback:0kB shmem:72kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2035.340100] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2035.384399] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2035.389634] Node 0 DMA32 free:36156kB min:36200kB low:45248kB high:54296kB active_anon:66852kB inactive_anon:148776kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7072kB pagetables:2396kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 2035.479163] lowmem_reserve[]: 0 0 0 0 0 [ 2035.483177] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2035.518973] lowmem_reserve[]: 0 0 0 0 0 [ 2035.523007] Node 1 Normal free:53280kB min:53696kB low:67120kB high:80544kB active_anon:1308kB inactive_anon:40kB active_file:76kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:544kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2035.572249] lowmem_reserve[]: 0 0 0 0 0 [ 2035.576271] Node 0 DMA: 3*4kB (UME) 2*8kB (ME) 3*16kB (UME) 1*32kB (M) 15*64kB (UME) 12*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 11052kB [ 2035.701086] Node 0 DMA32: 803*4kB (ME) 600*8kB (UME) 294*16kB (ME) 104*32kB (UME) 28*64kB (UME) 15*128kB (UM) 8*256kB (UM) 20*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 36140kB [ 2035.719386] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2035.730185] Node 1 Normal: 96*4kB (ME) 78*8kB (ME) 65*16kB (M) 63*32kB (UME) 37*64kB (M) 20*128kB (UME) 11*256kB (M) 7*512kB (ME) 1*1024kB (E) 2*2048kB (M) 8*4096kB (UM) = 53280kB [ 2035.748466] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2035.759797] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2035.769102] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2035.777884] Bluetooth: hci4 command 0x041b tx timeout [ 2035.777983] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2035.791712] 37714 total pagecache pages [ 2035.795672] 0 pages in swap cache [ 2035.799204] Swap cache stats: add 0, delete 0, find 0/0 [ 2035.804583] Free swap = 0kB [ 2035.807673] Total swap = 0kB [ 2035.810706] 2097051 pages RAM [ 2035.813810] 0 pages HighMem/MovableOnly [ 2035.817796] 363840 pages reserved [ 2035.821239] 0 pages cma reserved [ 2035.824596] Out of memory: Kill process 20517 (syz-executor.1) score 1005 or sacrifice child [ 2035.833198] Killed process 20518 (syz-executor.1) total-vm:93348kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 2035.864721] oom_reaper: reaped process 20518 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2036.000306] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 2036.027096] systemd-udevd cpuset=/ mems_allowed=0-1 [ 2036.034082] CPU: 0 PID: 4627 Comm: systemd-udevd Not tainted 4.14.214-syzkaller #0 [ 2036.041864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2036.051208] Call Trace: [ 2036.053789] dump_stack+0x1b2/0x283 [ 2036.057411] dump_header+0x178/0x82f [ 2036.061129] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2036.066225] ? ___ratelimit+0x2cd/0x522 [ 2036.070189] oom_kill_process.cold+0x10/0xb18 [ 2036.074662] ? lock_downgrade+0x740/0x740 [ 2036.078787] out_of_memory+0x2dc/0x1190 [ 2036.082978] ? oom_killer_disable+0x1c0/0x1c0 [ 2036.087551] ? mutex_trylock+0x152/0x1a0 [ 2036.091589] __alloc_pages_nodemask+0x23e1/0x2720 [ 2036.096435] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2036.101264] alloc_pages_current+0x155/0x260 [ 2036.105652] filemap_fault+0xea3/0x1980 [ 2036.109607] ext4_filemap_fault+0x84/0xb0 [ 2036.113736] __do_fault+0xfa/0x380 [ 2036.117253] __handle_mm_fault+0x2497/0x4620 [ 2036.121641] ? trace_hardirqs_on+0x10/0x10 [ 2036.125853] ? vm_insert_page+0x7c0/0x7c0 [ 2036.130002] ? lock_downgrade+0x740/0x740 [ 2036.134135] handle_mm_fault+0x391/0x860 [ 2036.138177] __do_page_fault+0x549/0xad0 [ 2036.142219] ? spurious_fault+0x640/0x640 [ 2036.146356] ? do_page_fault+0x60/0x4f2 [ 2036.150331] ? page_fault+0x2f/0x50 [ 2036.153936] page_fault+0x45/0x50 [ 2036.157367] RIP: 36a9a6b0:0x556036a9a690 [ 2036.161402] RSP: 36a94700:0000000000000000 EFLAGS: 556036a9acb0 [ 2036.163680] Mem-Info: [ 2036.177761] syz-executor.1: vmalloc: allocation failure, allocated 493563904 of 1073745920 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2036.199360] active_anon:17014 inactive_anon:37205 isolated_anon:0 [ 2036.199360] active_file:14 inactive_file:14 isolated_file:0 [ 2036.199360] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2036.199360] slab_reclaimable:12650 slab_unreclaimable:116952 [ 2036.199360] mapped:52643 shmem:37654 pagetables:734 bounce:0 [ 2036.199360] free:14000 free_pcp:0 free_cma:0 [ 2036.201311] syz-executor.1 cpuset= [ 2036.238694] Node 0 active_anon:66752kB inactive_anon:148780kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:107236kB dirty:0kB writeback:0kB shmem:150544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2036.244134] / [ 2036.276871] Node 1 active_anon:1304kB inactive_anon:40kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:103336kB dirty:0kB writeback:0kB shmem:72kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2036.284046] mems_allowed=0-1 [ 2036.312891] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2036.317849] CPU: 0 PID: 20518 Comm: syz-executor.1 Not tainted 4.14.214-syzkaller #0 [ 2036.339816] lowmem_reserve[]: [ 2036.347021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2036.347028] 0 [ 2036.350105] Call Trace: [ 2036.350122] dump_stack+0x1b2/0x283 [ 2036.350135] warn_alloc.cold+0x96/0x1cc [ 2036.350145] ? zone_watermark_ok_safe+0x220/0x220 [ 2036.359491] 2717 [ 2036.361291] __vmalloc_area_node+0x48a/0x680 [ 2036.363835] 2718 [ 2036.367458] ? __vmalloc_node_range+0x150/0x150 [ 2036.367466] ? __get_vm_area_node+0x27d/0x340 [ 2036.367479] __vmalloc_node_range+0xbe/0x150 [ 2036.371440] 2718 [ 2036.376265] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2036.378312] 2718 [ 2036.382683] vmalloc_user+0x47/0xa0 [ 2036.389368] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2036.389377] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2036.389384] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2036.389394] __vb2_queue_alloc+0x47a/0xd90 [ 2036.393861] Node 0 [ 2036.398265] vb2_core_create_bufs+0x279/0x5a0 [ 2036.398275] ? __vb2_queue_free+0x7a0/0x7a0 [ 2036.400320] DMA32 free:18184kB min:36200kB low:45248kB high:54296kB active_anon:66752kB inactive_anon:148776kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7072kB pagetables:2392kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2036.405672] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2036.407719] lowmem_reserve[]: [ 2036.411312] ? trace_hardirqs_on+0x10/0x10 [ 2036.415605] 0 [ 2036.420950] vb2_create_bufs+0x2e1/0x5b0 [ 2036.420962] ? vb2_thread_start.cold+0x24/0x24 [ 2036.420970] ? trace_hardirqs_on+0x10/0x10 [ 2036.425087] 0 [ 2036.429309] v4l_create_bufs+0xa4/0x150 [ 2036.429320] __video_do_ioctl+0x65b/0x6a0 [ 2036.431530] 0 [ 2036.436036] ? video_ioctl2+0x30/0x30 [ 2036.440336] 0 [ 2036.468323] ? __might_fault+0x177/0x1b0 [ 2036.468337] video_usercopy+0xf5/0xe90 [ 2036.473674] 0 [ 2036.476873] ? video_ioctl2+0x30/0x30 [ 2036.482950] ? v4l_g_ctrl+0x390/0x390 [ 2036.486991] Node 0 [ 2036.491551] ? lock_acquire+0x170/0x3f0 [ 2036.491560] ? trace_hardirqs_on+0x10/0x10 [ 2036.491569] ? trace_hardirqs_on+0x10/0x10 [ 2036.495782] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2036.497559] ? futex_exit_release+0x220/0x220 [ 2036.497569] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2036.497579] ? __might_fault+0x104/0x1b0 [ 2036.501521] lowmem_reserve[]: [ 2036.505653] v4l2_ioctl+0x1bb/0x2f0 [ 2036.507441] 0 [ 2036.511210] ? v4l2_open+0x2f0/0x2f0 [ 2036.512983] 0 [ 2036.517028] do_vfs_ioctl+0x75a/0xff0 [ 2036.520896] 0 [ 2036.522671] ? ioctl_preallocate+0x1a0/0x1a0 [ 2036.526437] 0 [ 2036.530212] ? lock_downgrade+0x740/0x740 [ 2036.530224] ? __fget+0x225/0x360 [ 2036.530233] ? do_vfs_ioctl+0xff0/0xff0 [ 2036.532450] 0 [ 2036.536407] ? security_file_ioctl+0x83/0xb0 [ 2036.544831] SyS_ioctl+0x7f/0xb0 [ 2036.569712] Node 1 [ 2036.574174] ? do_vfs_ioctl+0xff0/0xff0 [ 2036.579269] Normal free:26840kB min:53696kB low:67120kB high:80544kB active_anon:1304kB inactive_anon:40kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:544kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2036.583292] do_syscall_64+0x1d5/0x640 [ 2036.586370] lowmem_reserve[]: [ 2036.589982] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2036.589993] RIP: 0033:0x45e219 [ 2036.591768] 0 [ 2036.595459] RSP: 002b:00007f49fc585c68 EFLAGS: 00000246 [ 2036.597247] 0 [ 2036.601009] ORIG_RAX: 0000000000000010 [ 2036.602786] 0 [ 2036.607170] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2036.607175] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 2036.607180] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2036.607185] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2036.607191] R13: 00007ffe51cae14f R14: 00007f49fc5869c0 R15: 000000000119bf8c [ 2036.608969] 0 [ 2036.622225] Mem-Info: [ 2036.635116] 0 [ 2036.645334] active_anon:17014 inactive_anon:37205 isolated_anon:0 [ 2036.645334] active_file:39 inactive_file:0 isolated_file:0 [ 2036.645334] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2036.645334] slab_reclaimable:12650 slab_unreclaimable:116952 [ 2036.645334] mapped:52643 shmem:37654 pagetables:734 bounce:0 [ 2036.645334] free:14000 free_pcp:0 free_cma:0 [ 2036.685123] Node 0 active_anon:66752kB inactive_anon:148780kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:107236kB dirty:0kB writeback:0kB shmem:150544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2036.693904] Node 0 [ 2036.702080] Node 1 active_anon:1304kB inactive_anon:40kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:103336kB dirty:0kB writeback:0kB shmem:72kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2036.702085] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2036.702103] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2036.702122] Node 0 DMA32 free:18184kB min:36200kB low:45248kB high:54296kB active_anon:66752kB inactive_anon:148776kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7072kB pagetables:2392kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2036.702141] lowmem_reserve[]: 0 0 0 0 0 [ 2036.702159] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2036.702176] lowmem_reserve[]: 0 0 0 0 0 [ 2036.702194] Node 1 Normal free:26840kB min:53696kB low:67120kB high:80544kB active_anon:1304kB inactive_anon:40kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:544kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2036.702212] lowmem_reserve[]: 0 0 0 0 0 [ 2036.702230] Node 0 DMA: 2*4kB (ME) 3*8kB (UME) 2*16kB (ME) 1*32kB (M) 2*64kB (ME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) [ 2036.716280] DMA: [ 2036.724978] 2*1024kB [ 2036.731566] 2*4kB [ 2036.733371] (ME) [ 2036.735733] (ME) [ 2036.747416] 3*2048kB [ 2036.778316] 3*8kB [ 2036.806904] (ME) [ 2036.836017] (UME) [ 2036.863757] 0*4096kB [ 2036.890034] 2*16kB [ 2036.905318] = 10976kB [ 2036.919703] (ME) [ 2036.936598] Node 0 [ 2036.951511] 1*32kB [ 2036.970572] DMA32: [ 2036.981874] (M) [ 2036.984180] 812*4kB [ 2036.984663] 2*64kB [ 2036.987049] (UME) [ 2036.994291] (ME) [ 2036.998928] 605*8kB [ 2037.005558] 2*128kB [ 2037.006977] (UME) [ 2037.014181] (ME) [ 2037.020731] 281*16kB (ME) 82*32kB (ME) 16*64kB (ME) 5*128kB (UM) 3*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18152kB [ 2037.023389] 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10976kB [ 2037.036573] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2037.053921] Node 0 [ 2037.070322] Node 1 Normal: 95*4kB (ME) 80*8kB (UME) 64*16kB (M) 63*32kB (UME) 37*64kB (M) 20*128kB (UME) 12*256kB (UM) 7*512kB (ME) 1*1024kB (E) 3*2048kB (UM) 1*4096kB (M) = 26908kB [ 2037.075780] DMA32: 812*4kB (UME) 605*8kB (UME) 281*16kB (ME) 82*32kB (ME) 16*64kB (ME) 5*128kB (UM) 3*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18152kB [ 2037.098905] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2037.118358] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2037.130861] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2037.138164] Node 1 Normal: 95*4kB (ME) 80*8kB (UME) 64*16kB (M) 63*32kB (UME) 37*64kB (M) 20*128kB (UME) 12*256kB (UM) 7*512kB (ME) 1*1024kB (E) 3*2048kB (UM) 1*4096kB (M) = 26908kB [ 2037.145403] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2037.163408] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2037.173735] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2037.180857] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2037.184006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2037.198631] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2037.206254] 37682 total pagecache pages [ 2037.212819] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2037.213093] 0 pages in swap cache [ 2037.223168] 37682 total pagecache pages [ 2037.226289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2037.234053] 0 pages in swap cache [ 2037.240822] Swap cache stats: add 0, delete 0, find 0/0 [ 2037.244132] Swap cache stats: add 0, delete 0, find 0/0 [ 2037.246174] Free swap = 0kB [ 2037.253357] Free swap = 0kB [ 2037.260217] Total swap = 0kB [ 2037.263418] 2097051 pages RAM [ 2037.266336] device bridge_slave_1 left promiscuous mode [ 2037.266513] 0 pages HighMem/MovableOnly [ 2037.273807] bridge0: port 2(bridge_slave_1) entered disabled state [ 2037.279399] 363840 pages reserved [ 2037.285732] 0 pages cma reserved [ 2037.295179] Total swap = 0kB [ 2037.297021] Out of memory: Kill process 7978 (syz-fuzzer) score 7 or sacrifice child [ 2037.302444] 2097051 pages RAM [ 2037.306332] Killed process 20555 (syz-executor.2) total-vm:85024kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 2037.314172] 0 pages HighMem/MovableOnly [ 2037.330913] device bridge_slave_0 left promiscuous mode [ 2037.331089] 363840 pages reserved [ 2037.336450] bridge0: port 1(bridge_slave_0) entered disabled state [ 2037.339842] 0 pages cma reserved [ 2037.369145] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2037.396547] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2037.406028] CPU: 1 PID: 20556 Comm: syz-executor.2 Not tainted 4.14.214-syzkaller #0 [ 2037.414050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2037.423401] Call Trace: [ 2037.425989] dump_stack+0x1b2/0x283 [ 2037.429614] dump_header+0x178/0x82f [ 2037.433331] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2037.438445] ? ___ratelimit+0x2cd/0x522 [ 2037.442419] oom_kill_process.cold+0x10/0xb18 [ 2037.446920] out_of_memory+0xe3e/0x1190 [ 2037.450897] ? oom_killer_disable+0x1c0/0x1c0 [ 2037.455392] ? mutex_trylock+0x152/0x1a0 [ 2037.459449] __alloc_pages_nodemask+0x23e1/0x2720 [ 2037.464301] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2037.469157] alloc_pages_current+0x155/0x260 [ 2037.473566] filemap_fault+0xea3/0x1980 [ 2037.477550] ext4_filemap_fault+0x84/0xb0 [ 2037.481696] __do_fault+0xfa/0x380 [ 2037.485352] __handle_mm_fault+0x2497/0x4620 [ 2037.489759] ? vm_insert_page+0x7c0/0x7c0 [ 2037.493904] ? task_work_run+0xfd/0x190 [ 2037.497885] handle_mm_fault+0x391/0x860 [ 2037.501943] __do_page_fault+0x549/0xad0 [ 2037.506005] ? spurious_fault+0x640/0x640 [ 2037.510146] ? do_page_fault+0x60/0x4f2 [ 2037.514117] ? page_fault+0x2f/0x50 [ 2037.517739] page_fault+0x45/0x50 [ 2037.521181] RIP: 0006:0x7ffd4950fdb0 [ 2037.524890] RSP: 49510190:00000000004c363b EFLAGS: 00000003 [ 2037.541545] Mem-Info: [ 2037.565065] active_anon:17014 inactive_anon:37205 isolated_anon:0 [ 2037.565065] active_file:39 inactive_file:0 isolated_file:0 [ 2037.565065] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2037.565065] slab_reclaimable:12650 slab_unreclaimable:116952 [ 2037.565065] mapped:52643 shmem:37654 pagetables:734 bounce:0 [ 2037.565065] free:14005 free_pcp:8 free_cma:0 [ 2037.613463] Node 0 active_anon:66752kB inactive_anon:148780kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:107236kB dirty:0kB writeback:0kB shmem:150544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2037.659226] Node 1 active_anon:1304kB inactive_anon:40kB active_file:16kB inactive_file:3016kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:105036kB dirty:0kB writeback:0kB shmem:72kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2037.690226] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2037.741389] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2037.746540] Node 0 DMA32 free:19296kB min:36200kB low:45248kB high:54296kB active_anon:66752kB inactive_anon:148776kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7072kB pagetables:2392kB bounce:0kB free_pcp:64kB local_pcp:64kB free_cma:0kB [ 2037.820809] lowmem_reserve[]: 0 0 0 0 0 [ 2037.824879] device hsr_slave_1 left promiscuous mode [ 2037.830384] device hsr_slave_0 left promiscuous mode [ 2037.849940] team0 (unregistering): Port device team_slave_1 removed [ 2037.857591] Bluetooth: hci4 command 0x040f tx timeout [ 2037.868665] team0 (unregistering): Port device team_slave_0 removed [ 2037.883587] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2037.909189] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2037.916654] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2037.975316] bond0 (unregistering): Released all slaves [ 2037.979487] lowmem_reserve[]: 0 0 0 0 0 [ 2038.003370] Node 1 Normal free:456924kB min:53696kB low:67120kB high:80544kB active_anon:1280kB inactive_anon:32kB active_file:1792kB inactive_file:7968kB unevictable:0kB writepending:140kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:464kB bounce:0kB free_pcp:1128kB local_pcp:400kB free_cma:0kB [ 2038.039719] lowmem_reserve[]: 0 0 0 0 0 [ 2038.043867] Node 0 DMA: 2*4kB (ME) 4*8kB (UME) 4*16kB (UME) 2*32kB (UM) 15*64kB (UME) 12*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 13160kB [ 2038.064768] Node 0 DMA32: 820*4kB (UME) 1877*8kB (UME) 527*16kB (UME) 130*32kB (UME) 38*64kB (UME) 17*128kB (UM) 12*256kB (UM) 48*512kB (UM) 4*1024kB (U) 0*2048kB 0*4096kB = 67240kB [ 2038.086827] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2038.105002] Node 1 Normal: 183*4kB (UME) 141*8kB (UE) 119*16kB (U) 348*32kB (UE) 645*64kB (U) 141*128kB (UME) 110*256kB (UM) 67*512kB (UME) 39*1024kB (UE) 33*2048kB (UM) 59*4096kB (UM) = 485876kB [ 2038.127621] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2038.136552] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2038.148382] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2038.161846] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2038.174271] 40785 total pagecache pages [ 2038.183468] 0 pages in swap cache [ 2038.192096] Swap cache stats: add 0, delete 0, find 0/0 [ 2038.201657] Free swap = 0kB [ 2038.205737] Total swap = 0kB [ 2038.215519] 2097051 pages RAM [ 2038.221157] 0 pages HighMem/MovableOnly [ 2038.225127] 363840 pages reserved [ 2038.230615] 0 pages cma reserved [ 2038.234029] Out of memory (oom_kill_allocating_task): Kill process 20556 (syz-executor.2) score 0 or sacrifice child [ 2038.256916] Killed process 20556 (syz-executor.2) total-vm:93220kB, anon-rss:92kB, file-rss:34132kB, shmem-rss:0kB [ 2038.293735] oom_reaper: reaped process 20555 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2038.320918] oom_reaper: reaped process 20556 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2039.549221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2039.566884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2039.587400] device bridge_slave_1 left promiscuous mode [ 2039.593018] bridge0: port 2(bridge_slave_1) entered disabled state [ 2039.620789] device bridge_slave_0 left promiscuous mode [ 2039.626327] bridge0: port 1(bridge_slave_0) entered disabled state [ 2039.713109] device hsr_slave_1 left promiscuous mode [ 2039.720994] device hsr_slave_0 left promiscuous mode [ 2039.738331] team0 (unregistering): Port device team_slave_1 removed [ 2039.752322] team0 (unregistering): Port device team_slave_0 removed [ 2039.762825] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2039.784011] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2039.819219] bond0 (unregistering): Released all slaves [ 2040.819446] IPVS: ftp: loaded support on port[0] = 21 [ 2040.906779] IPVS: ftp: loaded support on port[0] = 21 [ 2041.097117] chnl_net:caif_netlink_parms(): no params data found [ 2041.219013] chnl_net:caif_netlink_parms(): no params data found [ 2041.547824] bridge0: port 1(bridge_slave_0) entered blocking state [ 2041.554287] bridge0: port 1(bridge_slave_0) entered disabled state [ 2041.567596] device bridge_slave_0 entered promiscuous mode [ 2041.574240] bridge0: port 1(bridge_slave_0) entered blocking state [ 2041.585753] bridge0: port 1(bridge_slave_0) entered disabled state [ 2041.593951] device bridge_slave_0 entered promiscuous mode [ 2041.604982] bridge0: port 2(bridge_slave_1) entered blocking state [ 2041.612292] bridge0: port 2(bridge_slave_1) entered disabled state [ 2041.623828] device bridge_slave_1 entered promiscuous mode [ 2041.631169] bridge0: port 2(bridge_slave_1) entered blocking state [ 2041.637623] bridge0: port 2(bridge_slave_1) entered disabled state [ 2041.644826] device bridge_slave_1 entered promiscuous mode [ 2041.685411] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2041.694758] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2041.707919] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2041.727052] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2041.751168] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2041.759308] team0: Port device team_slave_0 added [ 2041.773290] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2041.781414] team0: Port device team_slave_0 added [ 2041.787029] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2041.795479] team0: Port device team_slave_1 added [ 2041.810425] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2041.818230] team0: Port device team_slave_1 added [ 2041.833183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2041.839987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2041.866541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2041.894180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2041.901042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2041.929012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2041.940711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2041.947682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2041.973496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2041.984458] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2041.992740] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2042.000897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2042.007656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2042.033349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2042.059807] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2042.069011] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2042.087808] device hsr_slave_0 entered promiscuous mode [ 2042.094150] device hsr_slave_1 entered promiscuous mode [ 2042.111595] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2042.122896] device hsr_slave_0 entered promiscuous mode [ 2042.129462] device hsr_slave_1 entered promiscuous mode [ 2042.135408] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2042.150823] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2042.158445] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2042.345642] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2042.354758] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 23:25:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x0, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x0, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:25:13 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x141000) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3ebe}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x10, 0x0, &(0x7f0000000200)) 23:25:13 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r3, 0x109}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x45000b}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x40) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x41) [ 2042.402063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2042.412199] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2042.422385] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2042.433800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2042.443926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2042.461753] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2042.469724] 8021q: adding VLAN 0 to HW filter on device team0 [ 2042.481908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2042.505850] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2042.516404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2042.526392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2042.535662] bridge0: port 1(bridge_slave_0) entered blocking state [ 2042.542087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2042.556308] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2042.565930] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2042.574702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2042.583389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2042.591983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2042.604483] bridge0: port 2(bridge_slave_1) entered blocking state [ 2042.610909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2042.621476] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2042.631089] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2042.639423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2042.652907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2042.660006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2042.678503] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2042.684590] 8021q: adding VLAN 0 to HW filter on device team0 [ 2042.700654] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2042.711713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2042.724323] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2042.737174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2042.745337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2042.758062] bridge0: port 1(bridge_slave_0) entered blocking state [ 2042.764441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2042.778185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2042.787163] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2042.797775] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2042.805540] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2042.812583] Bluetooth: hci3 command 0x0409 tx timeout [ 2042.812624] Bluetooth: hci4 command 0x0409 tx timeout [ 2042.827203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2042.835322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2042.847370] bridge0: port 2(bridge_slave_1) entered blocking state [ 2042.853766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2042.864254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2042.873206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2042.884424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2042.897880] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2042.911686] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2042.921452] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2042.932839] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2042.940784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2042.952627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2042.961142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2042.974975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2042.984002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2042.998046] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2043.006352] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2043.016584] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2043.024038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2043.035553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2043.043834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2043.055202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2043.067271] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2043.080740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2043.091145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2043.102695] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2043.113594] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2043.122692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2043.134059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2043.143755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2043.153479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2043.165494] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2043.173741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2043.184741] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2043.193573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2043.215678] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2043.245437] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2043.253682] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2043.264125] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2043.272227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2043.283902] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2043.295756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2043.307982] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2043.315302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2043.335844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2043.477933] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2043.498311] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2043.505426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2043.521316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2043.559737] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2043.575578] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2043.592818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2043.604355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2043.646134] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2043.654503] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2043.663443] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2043.676051] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2043.683846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2043.692619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2043.702982] device veth0_vlan entered promiscuous mode [ 2043.713749] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2043.722120] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2043.729506] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2043.735846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2043.743843] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2043.757833] device veth1_vlan entered promiscuous mode [ 2043.763866] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2043.777744] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2043.786296] device veth0_vlan entered promiscuous mode [ 2043.797374] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2043.805041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2043.816343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2043.828358] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2043.840503] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2043.848237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2043.855210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2043.867320] device veth1_vlan entered promiscuous mode [ 2043.873112] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2043.888174] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2043.898346] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2043.910255] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2043.917991] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2043.925264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2043.934106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2043.942396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2043.955439] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2043.965371] device veth0_macvtap entered promiscuous mode [ 2043.972931] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2043.985061] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2043.993353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2044.001543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2044.012070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2044.022200] device veth1_macvtap entered promiscuous mode [ 2044.029862] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2044.038027] device veth0_macvtap entered promiscuous mode [ 2044.044299] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2044.057812] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2044.069138] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2044.079306] device veth1_macvtap entered promiscuous mode [ 2044.085594] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2044.097935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2044.108292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2044.118071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2044.127903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2044.137091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2044.146875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2044.156073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2044.165854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2044.177404] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2044.184380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2044.194560] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2044.202565] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2044.210387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2044.218022] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2044.225161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2044.233093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2044.243044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2044.254838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2044.264335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2044.274622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2044.284444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2044.294470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2044.304034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2044.313928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2044.324671] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2044.332033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2044.341328] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2044.349346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2044.357585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2044.374768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2044.385017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2044.394937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2044.405248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2044.414889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2044.428544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2044.439048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2044.451328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2044.461781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2044.474024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2044.486139] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2044.496197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2044.520689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2044.529701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2044.545959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2044.561613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2044.571140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2044.583602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2044.597132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2044.610307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2044.620224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2044.633256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2044.643218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2044.657796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2044.670532] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2044.679537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2044.693917] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2044.709578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2044.886834] Bluetooth: hci4 command 0x041b tx timeout [ 2044.894858] Bluetooth: hci3 command 0x041b tx timeout 23:25:16 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x9}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x9, 0x6, 0xfffffff9}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:25:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='io.stat\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf25020000004800028006000f00008000000800080006000000080008002877000014000100ff020000000000000000000000000001060002004e2400000800050009000000060002004e23000014000280060002004e22000008000700060000001400028008000800407d00000800030001000000080005000000000008000600ff0f00001400028006000f000e0000000800030000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0x7, 0x95, 0x7, 0x8, @loopback, @remote, 0x7800, 0x7, 0x23df, 0x2}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x20, @private2, @mcast2, 0x700, 0x81, 0x568, 0x42}}) openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) 23:25:16 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) write$sndseq(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00032cbd7000fcdbdf250200000008000a0001000000060003000000000014001f00fe8000000000000000000000000000aa0600030001000000050013000900000008001900e0000001060003000000000006000200000000000500120000000000"], 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x20008040) 23:25:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) 23:25:16 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x3ca26104, 0x0, 0x9, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x0, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:25:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x6) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) 23:25:16 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x4000, 0x4, {0x77359400}, {0x1, 0x8, 0xff, 0x4, 0x3, 0x4, "fd28ebd3"}, 0x8, 0x3, @userptr=0x4, 0x6, 0x0, r1}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x800, 0x0) write$sndseq(r0, 0x0, 0x0) 23:25:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='io.stat\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf25020000004800028006000f00008000000800080006000000080008002877000014000100ff020000000000000000000000000001060002004e2400000800050009000000060002004e23000014000280060002004e22000008000700060000001400028008000800407d00000800030001000000080005000000000008000600ff0f00001400028006000f000e0000000800030000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0x7, 0x95, 0x7, 0x8, @loopback, @remote, 0x7800, 0x7, 0x23df, 0x2}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x20, @private2, @mcast2, 0x700, 0x81, 0x568, 0x42}}) 23:25:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x17, 0x0, &(0x7f0000000200)) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x248500, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) 23:25:16 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000040)={0x8c, 0x1, 'client0\x00', 0x1, "7adc7332bc6cc423", "f65d027d8cd5faa07453d6e6cb9486eedc041bc7bb10e044c61c88173435f5ac", 0x9, 0xd2}) write$sndseq(r0, 0x0, 0x0) [ 2046.966233] Bluetooth: hci3 command 0x040f tx timeout [ 2046.971820] Bluetooth: hci4 command 0x040f tx timeout [ 2047.691060] oom_reaper: reaped process 21370 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2047.724167] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2047.739510] systemd-journal cpuset=/ mems_allowed=0-1 [ 2047.744716] CPU: 0 PID: 20188 Comm: systemd-journal Not tainted 4.14.214-syzkaller #0 [ 2047.752760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2047.762395] Call Trace: [ 2047.764970] dump_stack+0x1b2/0x283 [ 2047.766164] syz-executor.1: vmalloc: allocation failure, allocated 498696192 of 1073745920 bytes [ 2047.768584] dump_header+0x178/0x82f [ 2047.768596] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2047.783026] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 2047.783284] ? ___ratelimit+0x2cd/0x522 [ 2047.788891] (null) [ 2047.794318] oom_kill_process.cold+0x10/0xb18 [ 2047.801639] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2047.804892] out_of_memory+0xe3e/0x1190 [ 2047.804905] ? oom_killer_disable+0x1c0/0x1c0 [ 2047.818440] ? mutex_trylock+0x152/0x1a0 [ 2047.822487] __alloc_pages_nodemask+0x23e1/0x2720 [ 2047.827318] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2047.832147] alloc_pages_current+0x155/0x260 [ 2047.836539] filemap_fault+0xea3/0x1980 [ 2047.840502] ext4_filemap_fault+0x84/0xb0 [ 2047.844629] __do_fault+0xfa/0x380 [ 2047.848149] __handle_mm_fault+0x2497/0x4620 [ 2047.852622] ? ep_poll+0x1ab/0xa50 [ 2047.856144] ? vm_insert_page+0x7c0/0x7c0 [ 2047.860283] handle_mm_fault+0x391/0x860 [ 2047.864324] __do_page_fault+0x549/0xad0 [ 2047.868365] ? spurious_fault+0x640/0x640 [ 2047.872491] ? do_page_fault+0x60/0x4f2 [ 2047.876536] ? page_fault+0x2f/0x50 [ 2047.880163] page_fault+0x45/0x50 [ 2047.883597] RIP: 0001:0xffffffffffffffff [ 2047.887633] RSP: be78a1e0:00007ffee531ea60 EFLAGS: 7ffee531e870 [ 2047.887652] CPU: 1 PID: 21370 Comm: syz-executor.1 Not tainted 4.14.214-syzkaller #0 [ 2047.890130] Mem-Info: [ 2047.893704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2047.901619] active_anon:17357 inactive_anon:37205 isolated_anon:0 [ 2047.901619] active_file:22 inactive_file:35 isolated_file:0 [ 2047.901619] unevictable:0 dirty:7 writeback:0 unstable:0 [ 2047.901619] slab_reclaimable:12381 slab_unreclaimable:115271 [ 2047.901619] mapped:52739 shmem:37653 pagetables:739 bounce:0 [ 2047.901619] free:13686 free_pcp:591 free_cma:0 [ 2047.903969] Call Trace: [ 2047.913326] Node 0 active_anon:68612kB inactive_anon:148784kB active_file:48kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176088kB dirty:0kB writeback:0kB shmem:150560kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2047.946522] dump_stack+0x1b2/0x283 [ 2047.946536] warn_alloc.cold+0x96/0x1cc [ 2047.949111] Node 1 active_anon:816kB inactive_anon:36kB active_file:40kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34868kB dirty:28kB writeback:0kB shmem:52kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2047.976841] ? zone_watermark_ok_safe+0x220/0x220 [ 2047.976863] __vmalloc_area_node+0x48a/0x680 [ 2047.987942] Node 0 [ 2048.011084] ? __vmalloc_node_range+0x150/0x150 [ 2048.011094] ? __get_vm_area_node+0x27d/0x340 [ 2048.011105] __vmalloc_node_range+0xbe/0x150 [ 2048.015937] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:1664kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2048.020329] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2048.020336] vmalloc_user+0x47/0xa0 [ 2048.020344] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2048.020354] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2048.022562] lowmem_reserve[]: [ 2048.027209] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2048.027220] __vb2_queue_alloc+0x47a/0xd90 [ 2048.027239] vb2_core_create_bufs+0x279/0x5a0 [ 2048.031706] 0 [ 2048.036096] ? __vb2_queue_free+0x7a0/0x7a0 [ 2048.036110] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2048.036122] ? trace_hardirqs_on+0x10/0x10 [ 2048.061872] 2717 [ 2048.067209] vb2_create_bufs+0x2e1/0x5b0 [ 2048.067224] ? vb2_thread_start.cold+0x24/0x24 [ 2048.070821] 2718 [ 2048.075128] ? trace_hardirqs_on+0x10/0x10 [ 2048.080472] 2718 [ 2048.083564] v4l_create_bufs+0xa4/0x150 [ 2048.087713] 2718 [ 2048.091911] __video_do_ioctl+0x65b/0x6a0 [ 2048.098169] ? video_ioctl2+0x30/0x30 [ 2048.102464] Node 0 [ 2048.107823] ? __might_fault+0x177/0x1b0 [ 2048.107838] video_usercopy+0xf5/0xe90 [ 2048.107850] ? video_ioctl2+0x30/0x30 [ 2048.112073] DMA32 free:17488kB min:36200kB low:45248kB high:54296kB active_anon:66748kB inactive_anon:148780kB active_file:40kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:2772kB bounce:0kB free_pcp:1400kB local_pcp:688kB free_cma:0kB [ 2048.114114] ? v4l_g_ctrl+0x390/0x390 [ 2048.118166] lowmem_reserve[]: [ 2048.122711] ? lock_acquire+0x170/0x3f0 [ 2048.124746] 0 [ 2048.128961] ? trace_hardirqs_on+0x10/0x10 [ 2048.128971] ? trace_hardirqs_on+0x10/0x10 [ 2048.128984] ? futex_exit_release+0x220/0x220 [ 2048.131018] 0 [ 2048.134977] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2048.137025] 0 [ 2048.141143] ? __might_fault+0x104/0x1b0 [ 2048.144913] 0 [ 2048.147135] v4l2_ioctl+0x1bb/0x2f0 [ 2048.147143] ? v4l2_open+0x2f0/0x2f0 [ 2048.147153] do_vfs_ioctl+0x75a/0xff0 [ 2048.151197] 0 [ 2048.155073] ? ioctl_preallocate+0x1a0/0x1a0 [ 2048.187498] ? lock_downgrade+0x740/0x740 [ 2048.187512] ? __fget+0x225/0x360 [ 2048.187530] ? do_vfs_ioctl+0xff0/0xff0 [ 2048.187542] ? security_file_ioctl+0x83/0xb0 [ 2048.191327] Node 0 [ 2048.194420] SyS_ioctl+0x7f/0xb0 [ 2048.198395] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2048.200156] ? do_vfs_ioctl+0xff0/0xff0 [ 2048.204364] lowmem_reserve[]: [ 2048.208581] do_syscall_64+0x1d5/0x640 [ 2048.208600] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2048.213060] 0 0 [ 2048.214845] RIP: 0033:0x45e219 [ 2048.219931] 0 [ 2048.221698] RSP: 002b:00007f49fc585c68 EFLAGS: 00000246 [ 2048.225729] 0 [ 2048.227504] ORIG_RAX: 0000000000000010 [ 2048.227510] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2048.227515] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 2048.227520] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2048.227526] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2048.231122] 0 [ 2048.234823] R13: 00007ffe51cae14f R14: 00007f49fc5869c0 R15: 000000000119bf8c [ 2048.245081] Mem-Info: [ 2048.255894] Node 1 [ 2048.266621] active_anon:17359 inactive_anon:37205 isolated_anon:0 [ 2048.266621] active_file:13 inactive_file:13 isolated_file:0 [ 2048.266621] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2048.266621] slab_reclaimable:12381 slab_unreclaimable:115251 [ 2048.266621] mapped:52720 shmem:37653 pagetables:739 bounce:0 [ 2048.266621] free:13779 free_pcp:591 free_cma:0 [ 2048.296901] Normal free:26428kB min:53696kB low:67120kB high:80544kB active_anon:844kB inactive_anon:36kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:184kB bounce:0kB free_pcp:964kB local_pcp:636kB free_cma:0kB [ 2048.301724] Node 0 active_anon:68592kB inactive_anon:148784kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176064kB dirty:0kB writeback:0kB shmem:150560kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2048.302308] lowmem_reserve[]: [ 2048.307513] Node 1 active_anon:844kB inactive_anon:36kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:52kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2048.307518] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:1664kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2048.307535] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2048.307552] Node 0 DMA32 free:17736kB min:36200kB low:45248kB high:54296kB active_anon:66928kB inactive_anon:148780kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:2772kB bounce:0kB free_pcp:1400kB local_pcp:712kB free_cma:0kB [ 2048.307569] lowmem_reserve[]: 0 0 0 0 0 [ 2048.307587] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2048.307605] lowmem_reserve[]: 0 0 0 0 0 [ 2048.307624] Node 1 Normal free:26428kB min:53696kB low:67120kB high:80544kB active_anon:844kB inactive_anon:36kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:184kB bounce:0kB free_pcp:964kB local_pcp:328kB free_cma:0kB [ 2048.307643] lowmem_reserve[]: 0 0 0 0 0 [ 2048.307662] Node 0 DMA: 2*4kB (ME) 2*8kB (ME) 3*16kB (UME) 2*32kB (UM) [ 2048.315106] 0 [ 2048.323275] 7*64kB [ 2048.325834] 0 [ 2048.333383] (UME) 13*128kB (UME) 4*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 10952kB [ 2048.333427] Node 0 DMA32: 1024*4kB (ME) [ 2048.346875] 0 [ 2048.351852] 613*8kB [ 2048.355848] 0 [ 2048.357689] (UME) [ 2048.367815] 0 [ 2048.375225] 260*16kB [ 2048.437907] (ME) [ 2048.462755] Node 0 [ 2048.494830] 97*32kB [ 2048.519428] DMA: [ 2048.526497] (ME) [ 2048.553688] 2*4kB [ 2048.559051] 15*64kB [ 2048.584079] (ME) [ 2048.617085] (UME) [ 2048.626415] 2*8kB [ 2048.629997] 2*128kB [ 2048.641971] (ME) [ 2048.644295] (M) [ 2048.647312] 3*16kB [ 2048.651708] 1*256kB [ 2048.652343] (UME) [ 2048.654734] (U) [ 2048.660481] 2*32kB [ 2048.663642] 0*512kB [ 2048.665576] (UM) [ 2048.671034] 0*1024kB [ 2048.672085] 7*64kB [ 2048.674211] 0*2048kB [ 2048.679917] (UME) [ 2048.682572] 0*4096kB [ 2048.682687] 13*128kB [ 2048.684900] = 17736kB [ 2048.687315] (UME) [ 2048.692664] Node 0 [ 2048.693573] 4*256kB [ 2048.695872] Normal: [ 2048.701533] (UME) [ 2048.704024] 0*4kB [ 2048.704959] 3*512kB [ 2048.711123] 0*8kB [ 2048.711890] (UME) [ 2048.714282] 0*16kB [ 2048.719947] 2*1024kB [ 2048.720961] 0*32kB [ 2048.723262] (ME) [ 2048.725391] 0*64kB [ 2048.728507] 2*2048kB [ 2048.737906] 0*128kB [ 2048.742785] (ME) [ 2048.743418] 0*256kB [ 2048.745632] 0*4096kB [ 2048.751203] 0*512kB [ 2048.752391] = 10952kB [ 2048.754690] 0*1024kB [ 2048.760715] Node 0 [ 2048.763308] 0*2048kB [ 2048.764231] DMA32: 1024*4kB (ME) 613*8kB (UME) 260*16kB (ME) 97*32kB (ME) 15*64kB (UME) 2*128kB (M) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17736kB [ 2048.770276] 0*4096kB = 0kB [ 2048.787047] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2048.791861] Node 1 Normal: 161*4kB (ME) 139*8kB (UME) 98*16kB (UM) 87*32kB (UME) 44*64kB (M) 25*128kB (ME) 4*256kB (UM) 4*512kB (ME) 1*1024kB (E) 3*2048kB (UM) 1*4096kB (M) = 26460kB [ 2048.799562] Node 1 [ 2048.818162] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2048.821406] Normal: 161*4kB (ME) 139*8kB (UME) 98*16kB (UM) 87*32kB (UME) 44*64kB (M) 25*128kB (ME) 4*256kB (UM) 4*512kB (ME) 1*1024kB (E) 3*2048kB (UM) 1*4096kB (M) = 26460kB [ 2048.830410] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2048.848828] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2048.858889] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2048.866535] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2048.873207] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2048.885277] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2048.891310] 37679 total pagecache pages [ 2048.902237] 0 pages in swap cache [ 2048.905590] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2048.905677] Swap cache stats: add 0, delete 0, find 0/0 [ 2048.914274] 37679 total pagecache pages [ 2048.914283] 0 pages in swap cache [ 2048.914288] Swap cache stats: add 0, delete 0, find 0/0 [ 2048.914291] Free swap = 0kB [ 2048.914293] Total swap = 0kB [ 2048.914299] 2097051 pages RAM [ 2048.914304] 0 pages HighMem/MovableOnly [ 2048.921953] Free swap = 0kB [ 2048.929516] 363840 pages reserved [ 2048.932520] Total swap = 0kB [ 2048.935515] 0 pages cma reserved [ 2048.940331] 2097051 pages RAM [ 2048.944745] Out of memory (oom_kill_allocating_task): Kill process 20188 (systemd-journal) score 0 or sacrifice child [ 2048.945732] 0 pages HighMem/MovableOnly [ 2048.952342] Killed process 20188 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:4kB, shmem-rss:1856kB [ 2048.955192] 363840 pages reserved [ 2048.962701] oom_reaper: reaped process 20188 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1856kB [ 2048.974269] 0 pages cma reserved [ 2048.990403] kworker/u4:2 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2049.025610] kworker/u4:2 cpuset=/ mems_allowed=0-1 [ 2049.035358] CPU: 0 PID: 35 Comm: kworker/u4:2 Not tainted 4.14.214-syzkaller #0 [ 2049.042803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2049.052269] Workqueue: events_unbound call_usermodehelper_exec_work [ 2049.058668] Call Trace: [ 2049.061249] dump_stack+0x1b2/0x283 [ 2049.070543] dump_header+0x178/0x82f [ 2049.074254] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2049.079350] ? ___ratelimit+0x2cd/0x522 [ 2049.083318] oom_kill_process.cold+0x10/0xb18 [ 2049.087808] ? lock_downgrade+0x740/0x740 [ 2049.091952] out_of_memory+0x2dc/0x1190 [ 2049.095928] ? oom_killer_disable+0x1c0/0x1c0 [ 2049.100418] ? mutex_trylock+0x152/0x1a0 [ 2049.104472] __alloc_pages_nodemask+0x23e1/0x2720 [ 2049.109318] ? batadv_bla_send_claim+0x287/0xba0 [ 2049.114069] ? batadv_bla_periodic_work+0x56d/0xa80 [ 2049.119089] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2049.123927] ? fs_reclaim_release+0xd0/0x110 [ 2049.128347] ? kmem_cache_alloc_node+0x38b/0x410 [ 2049.133110] copy_process.part.0+0x265/0x71c0 [ 2049.137611] ? __lock_acquire+0x5fc/0x3f20 [ 2049.141844] ? debug_object_activate+0x292/0x490 [ 2049.146593] ? trace_hardirqs_on+0x10/0x10 [ 2049.150821] ? static_obj+0x50/0x50 [ 2049.154445] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2049.159895] ? __cleanup_sighand+0x40/0x40 [ 2049.164133] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2049.169578] _do_fork+0x184/0xc80 [ 2049.173029] ? fork_idle+0x270/0x270 [ 2049.176739] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2049.181834] ? process_one_work+0x6c4/0x14a0 [ 2049.186244] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2049.191689] kernel_thread+0x2f/0x40 [ 2049.195399] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 2049.200672] ? call_usermodehelper+0x80/0x80 [ 2049.205076] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2049.210518] process_one_work+0x793/0x14a0 [ 2049.214734] ? work_busy+0x320/0x320 [ 2049.218424] ? worker_thread+0x158/0xff0 [ 2049.222561] ? _raw_spin_unlock_irq+0x24/0x80 [ 2049.227138] worker_thread+0x5cc/0xff0 [ 2049.231102] ? rescuer_thread+0xc80/0xc80 [ 2049.235230] kthread+0x30d/0x420 [ 2049.238587] ? kthread_create_on_node+0xd0/0xd0 [ 2049.243235] ret_from_fork+0x24/0x30 [ 2049.252124] Bluetooth: hci4 command 0x0419 tx timeout [ 2049.261852] Bluetooth: hci3 command 0x0419 tx timeout [ 2049.271033] Mem-Info: [ 2049.273478] active_anon:17259 inactive_anon:37205 isolated_anon:0 [ 2049.273478] active_file:13 inactive_file:13 isolated_file:0 [ 2049.273478] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2049.273478] slab_reclaimable:12381 slab_unreclaimable:114757 [ 2049.273478] mapped:52245 shmem:37653 pagetables:739 bounce:0 [ 2049.273478] free:23024 free_pcp:185 free_cma:0 [ 2049.308119] Node 0 active_anon:68192kB inactive_anon:148784kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174164kB dirty:0kB writeback:0kB shmem:150560kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2049.336707] Node 1 active_anon:844kB inactive_anon:36kB active_file:16kB inactive_file:1116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35316kB dirty:0kB writeback:0kB shmem:52kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2049.363656] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:1664kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2049.391421] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2049.396696] Node 0 DMA32 free:21512kB min:36200kB low:45248kB high:54296kB active_anon:66528kB inactive_anon:148780kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2772kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2049.426118] lowmem_reserve[]: 0 0 0 0 0 [ 2049.430121] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2049.456582] lowmem_reserve[]: 0 0 0 0 0 [ 2049.460597] Node 1 Normal free:329372kB min:53696kB low:67120kB high:80544kB active_anon:844kB inactive_anon:36kB active_file:16kB inactive_file:3116kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:184kB bounce:0kB free_pcp:716kB local_pcp:52kB free_cma:0kB [ 2049.489246] lowmem_reserve[]: 0 0 0 0 0 [ 2049.493239] Node 0 DMA: 2*4kB (ME) 2*8kB (ME) 3*16kB (UME) 2*32kB (UM) 7*64kB (UME) 13*128kB (UME) 4*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 10952kB [ 2049.509210] Node 0 DMA32: 1027*4kB (UME) 862*8kB (UME) 305*16kB (UME) 113*32kB (UME) 24*64kB (UME) 2*128kB (M) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 21548kB [ 2049.524779] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2049.536912] Node 1 Normal: 11*4kB (UME) 15*8kB (UME) 8*16kB (U) 18*32kB (UME) 50*64kB (UM) 33*128kB (UME) 8*256kB (UM) 6*512kB (UME) 2*1024kB (UE) 40*2048kB (UM) 81*4096kB (UM) = 429156kB [ 2049.554687] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2049.564279] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2049.573875] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2049.578444] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2049.582787] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2049.598917] 38863 total pagecache pages [ 2049.602914] 0 pages in swap cache [ 2049.606831] Swap cache stats: add 0, delete 0, find 0/0 [ 2049.610194] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2049.612318] Free swap = 0kB [ 2049.624527] Total swap = 0kB [ 2049.627614] 2097051 pages RAM [ 2049.630800] 0 pages HighMem/MovableOnly [ 2049.634763] 363840 pages reserved [ 2049.638308] 0 pages cma reserved [ 2049.638310] systemd[1]: Stopped Journal Service. [ 2049.646606] Out of memory: Kill process 7978 (syz-fuzzer) score 7 or sacrifice child [ 2049.654542] Killed process 20970 (syz-executor.0) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 2049.670956] systemd[1]: Starting Journal Service... [ 2049.693127] oom_reaper: reaped process 20970 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2049.745793] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 2050.063183] systemd[1]: Started Load/Save RF Kill Switch Status. [ 2050.077050] systemd-journald[21515]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2050.269014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2050.290733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2050.309631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2050.335613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2050.337833] systemd[1]: Started Journal Service. [ 2050.354714] device bridge_slave_1 left promiscuous mode [ 2050.361447] bridge0: port 2(bridge_slave_1) entered disabled state [ 2050.369200] device bridge_slave_0 left promiscuous mode [ 2050.374735] bridge0: port 1(bridge_slave_0) entered disabled state [ 2050.385008] device veth1_macvtap left promiscuous mode [ 2050.390578] device veth0_macvtap left promiscuous mode [ 2050.396349] device veth1_vlan left promiscuous mode [ 2050.401398] device veth0_vlan left promiscuous mode [ 2050.515216] device hsr_slave_1 left promiscuous mode [ 2050.527341] device hsr_slave_0 left promiscuous mode [ 2050.544522] team0 (unregistering): Port device team_slave_1 removed [ 2050.554706] team0 (unregistering): Port device team_slave_0 removed [ 2050.567194] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2050.580191] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2050.613476] bond0 (unregistering): Released all slaves 23:25:24 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x9}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x9, 0x6, 0xfffffff9, 0x2}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:25:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='io.stat\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf25020000004800028006000f00008000000800080006000000080008002877000014000100ff020000000000000000000000000001060002004e2400000800050009000000060002004e23000014000280060002004e22000008000700060000001400028008000800407d00000800030001000000080005000000000008000600ff0f00001400028006000f000e0000000800030000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0x7, 0x95, 0x7, 0x8, @loopback, @remote, 0x7800, 0x7, 0x23df, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x20, @private2, @mcast2, 0x700, 0x81, 0x568, 0x42}}) 23:25:24 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x0, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x0, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:25:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00'}) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) 23:25:24 executing program 3: bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') write$sndseq(r0, 0x0, 0x0) 23:25:24 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x3ca26104, 0x0, 0x9, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x0, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:25:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='io.stat\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf25020000004800028006000f00008000000800080006000000080008002877000014000100ff020000000000000000000000000001060002004e2400000800050009000000060002004e23000014000280060002004e22000008000700060000001400028008000800407d00000800030001000000080005000000000008000600ff0f00001400028006000f000e0000000800030000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0x7, 0x95, 0x7, 0x8, @loopback, @remote, 0x7800, 0x7, 0x23df, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x20, @private2, @mcast2, 0x700, 0x81, 0x568, 0x42}}) 23:25:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='io.stat\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf25020000004800028006000f00008000000800080006000000080008002877000014000100ff020000000000000000000000000001060002004e2400000800050009000000060002004e23000014000280060002004e22000008000700060000001400028008000800407d00000800030001000000080005000000000008000600ff0f00001400028006000f000e0000000800030000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0x7, 0x95, 0x7, 0x8, @loopback, @remote, 0x7800, 0x7, 0x23df, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x20, @private2, @mcast2, 0x700, 0x81, 0x568, 0x42}}) 23:25:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x101000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) 23:25:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='io.stat\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf25020000004800028006000f00008000000800080006000000080008002877000014000100ff020000000000000000000000000001060002004e2400000800050009000000060002004e23000014000280060002004e22000008000700060000001400028008000800407d00000800030001000000080005000000000008000600ff0f00001400028006000f000e0000000800030000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x20, @private2, @mcast2, 0x700, 0x81, 0x568, 0x42}}) 23:25:24 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_triestat\x00') r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x100, 0x0) write$sndseq(r1, 0x0, 0x56) 23:25:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='io.stat\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf25020000004800028006000f00008000000800080006000000080008002877000014000100ff020000000000000000000000000001060002004e2400000800050009000000060002004e23000014000280060002004e22000008000700060000001400028008000800407d00000800030001000000080005000000000008000600ff0f00001400028006000f000e0000000800030000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x20, @private2, @mcast2, 0x700, 0x81, 0x568, 0x42}}) 23:25:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x24004004) [ 2055.912728] IPVS: ftp: loaded support on port[0] = 21 [ 2056.101887] chnl_net:caif_netlink_parms(): no params data found [ 2056.252894] bridge0: port 1(bridge_slave_0) entered blocking state [ 2056.260264] bridge0: port 1(bridge_slave_0) entered disabled state [ 2056.271752] device bridge_slave_0 entered promiscuous mode [ 2056.280280] bridge0: port 2(bridge_slave_1) entered blocking state [ 2056.290537] bridge0: port 2(bridge_slave_1) entered disabled state [ 2056.298430] device bridge_slave_1 entered promiscuous mode [ 2056.328632] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2056.342078] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2056.372391] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2056.383560] team0: Port device team_slave_0 added [ 2056.389638] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2056.400887] team0: Port device team_slave_1 added [ 2056.429931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2056.436495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2056.466270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2056.480953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2056.488084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2056.517378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2056.529737] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2056.540551] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2056.580274] device hsr_slave_0 entered promiscuous mode [ 2056.589841] device hsr_slave_1 entered promiscuous mode [ 2056.596345] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2056.603600] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2056.733937] bridge0: port 2(bridge_slave_1) entered blocking state [ 2056.740497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2056.747164] bridge0: port 1(bridge_slave_0) entered blocking state [ 2056.753610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2056.800961] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2056.811251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2056.820744] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2056.834686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2056.842461] bridge0: port 1(bridge_slave_0) entered disabled state [ 2056.853210] bridge0: port 2(bridge_slave_1) entered disabled state [ 2056.863855] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2056.874511] 8021q: adding VLAN 0 to HW filter on device team0 [ 2056.884727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2056.897162] bridge0: port 1(bridge_slave_0) entered blocking state [ 2056.903527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2056.931283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2056.939545] bridge0: port 2(bridge_slave_1) entered blocking state [ 2056.945960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2056.958967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2056.977089] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2056.984638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2056.993150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2057.004203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2057.015526] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2057.021742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2057.041913] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2057.061200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2057.071799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2057.080185] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2057.097465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2057.192885] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2057.204062] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2057.217183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2057.230672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2057.281281] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2057.294115] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2057.307529] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2057.318491] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2057.325445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2057.332899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2057.347955] device veth0_vlan entered promiscuous mode [ 2057.361103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2057.369285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2057.383545] device veth1_vlan entered promiscuous mode [ 2057.391355] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2057.406308] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2057.423389] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2057.434305] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2057.446137] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2057.453778] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2057.467642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2057.478201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2057.490612] device veth0_macvtap entered promiscuous mode [ 2057.500796] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2057.513319] device veth1_macvtap entered promiscuous mode [ 2057.522108] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2057.538275] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2057.550738] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2057.562811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2057.577206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2057.588406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2057.600895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2057.619076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2057.629602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2057.643232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2057.653671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2057.666998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2057.678273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2057.693036] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2057.702210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2057.712916] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2057.722845] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2057.733016] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2057.742969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2057.756871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2057.774587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2057.784674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2057.798613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2057.807791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2057.821928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2057.831729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2057.845656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2057.854769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2057.869037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2057.879713] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2057.891312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2057.899395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2057.915971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2057.946173] Bluetooth: hci4 command 0x0409 tx timeout [ 2058.212585] oom_reaper: reaped process 21530 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2058.229386] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2058.242147] in:imklog cpuset=/ mems_allowed=0-1 [ 2058.248454] CPU: 1 PID: 20127 Comm: in:imklog Not tainted 4.14.214-syzkaller #0 [ 2058.255911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2058.265256] Call Trace: [ 2058.267849] dump_stack+0x1b2/0x283 [ 2058.271467] dump_header+0x178/0x82f [ 2058.275167] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2058.280255] ? ___ratelimit+0x2cd/0x522 [ 2058.284205] oom_kill_process.cold+0x10/0xb18 [ 2058.288694] out_of_memory+0xe3e/0x1190 [ 2058.290424] syz-executor.1: vmalloc: allocation failure, allocated 497844224 of 1073745920 bytes [ 2058.292674] ? oom_killer_disable+0x1c0/0x1c0 [ 2058.292684] ? mutex_trylock+0x152/0x1a0 [ 2058.303306] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 2058.306064] __alloc_pages_nodemask+0x23e1/0x2720 [ 2058.306085] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2058.306111] alloc_pages_current+0x155/0x260 [ 2058.306121] filemap_fault+0xea3/0x1980 [ 2058.306136] ext4_filemap_fault+0x84/0xb0 [ 2058.306148] __do_fault+0xfa/0x380 [ 2058.317130] (null) [ 2058.320976] __handle_mm_fault+0x2497/0x4620 [ 2058.329381] syz-executor.1 cpuset= [ 2058.330208] ? vm_insert_page+0x7c0/0x7c0 [ 2058.334154] / [ 2058.338284] ? lock_downgrade+0x740/0x740 [ 2058.348837] mems_allowed=0-1 [ 2058.351839] handle_mm_fault+0x391/0x860 [ 2058.369090] __do_page_fault+0x549/0xad0 [ 2058.373139] ? spurious_fault+0x640/0x640 [ 2058.377274] ? do_page_fault+0x60/0x4f2 [ 2058.381244] ? page_fault+0x2f/0x50 [ 2058.384969] page_fault+0x45/0x50 [ 2058.388414] RIP: 1fa0:0x1f9f [ 2058.391415] RSP: 0000:00005577787e79d0 EFLAGS: 7f9251e07da0 [ 2058.391434] CPU: 0 PID: 21530 Comm: syz-executor.1 Not tainted 4.14.214-syzkaller #0 [ 2058.395066] Mem-Info: [ 2058.397146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2058.405039] active_anon:17083 inactive_anon:39238 isolated_anon:0 [ 2058.405039] active_file:11 inactive_file:16 isolated_file:0 [ 2058.405039] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2058.405039] slab_reclaimable:12361 slab_unreclaimable:114049 [ 2058.405039] mapped:52611 shmem:39702 pagetables:764 bounce:0 [ 2058.405039] free:13848 free_pcp:113 free_cma:0 [ 2058.407396] Call Trace: [ 2058.416753] Node 0 active_anon:67188kB inactive_anon:156920kB active_file:36kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:152220kB dirty:0kB writeback:0kB shmem:158756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2058.449980] dump_stack+0x1b2/0x283 [ 2058.449995] warn_alloc.cold+0x96/0x1cc [ 2058.452560] Node 1 active_anon:1144kB inactive_anon:32kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58224kB dirty:0kB writeback:0kB shmem:52kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2058.480477] ? zone_watermark_ok_safe+0x220/0x220 [ 2058.480500] __vmalloc_area_node+0x48a/0x680 [ 2058.484096] Node 0 [ 2058.488056] ? __vmalloc_node_range+0x150/0x150 [ 2058.488064] ? __get_vm_area_node+0x27d/0x340 [ 2058.488076] __vmalloc_node_range+0xbe/0x150 [ 2058.514527] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2058.519333] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2058.519360] vmalloc_user+0x47/0xa0 [ 2058.523738] lowmem_reserve[]: [ 2058.525959] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2058.525968] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2058.525977] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2058.530614] 0 [ 2058.535089] __vb2_queue_alloc+0x47a/0xd90 [ 2058.535109] vb2_core_create_bufs+0x279/0x5a0 [ 2058.539591] 2717 [ 2058.565171] ? __vb2_queue_free+0x7a0/0x7a0 [ 2058.565186] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2058.565196] ? trace_hardirqs_on+0x10/0x10 [ 2058.570619] 2718 [ 2058.574226] vb2_create_bufs+0x2e1/0x5b0 [ 2058.577317] 2718 [ 2058.581607] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 2058.586969] 2718 [ 2058.591086] ? vb2_thread_start.cold+0x24/0x24 [ 2058.597072] ? trace_hardirqs_on+0x10/0x10 [ 2058.597087] v4l_create_bufs+0xa4/0x150 [ 2058.597098] __video_do_ioctl+0x65b/0x6a0 [ 2058.601564] Node 0 [ 2058.603610] ? video_ioctl2+0x30/0x30 [ 2058.607924] DMA32 free:17592kB min:36200kB low:45248kB high:54296kB active_anon:67188kB inactive_anon:156916kB active_file:0kB inactive_file:140kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2644kB bounce:0kB free_pcp:208kB local_pcp:104kB free_cma:0kB [ 2058.613246] ? __might_fault+0x177/0x1b0 [ 2058.617459] lowmem_reserve[]: [ 2058.619511] video_usercopy+0xf5/0xe90 [ 2058.623540] 0 [ 2058.625585] ? video_ioctl2+0x30/0x30 [ 2058.625595] ? v4l_g_ctrl+0x390/0x390 [ 2058.625604] ? lock_acquire+0x170/0x3f0 [ 2058.630675] 0 [ 2058.632717] ? trace_hardirqs_on+0x10/0x10 [ 2058.637329] 0 [ 2058.641530] ? trace_hardirqs_on+0x10/0x10 [ 2058.645511] 0 [ 2058.649615] ? futex_exit_release+0x220/0x220 [ 2058.651818] 0 [ 2058.655599] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2058.655610] ? __might_fault+0x104/0x1b0 [ 2058.655622] v4l2_ioctl+0x1bb/0x2f0 [ 2058.688122] ? v4l2_open+0x2f0/0x2f0 [ 2058.688133] do_vfs_ioctl+0x75a/0xff0 [ 2058.688145] ? ioctl_preallocate+0x1a0/0x1a0 [ 2058.691220] Node 0 [ 2058.695087] ? lock_downgrade+0x740/0x740 [ 2058.695100] ? __fget+0x225/0x360 [ 2058.695109] ? do_vfs_ioctl+0xff0/0xff0 [ 2058.696895] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2058.700668] ? security_file_ioctl+0x83/0xb0 [ 2058.704443] lowmem_reserve[]: 0 [ 2058.708436] SyS_ioctl+0x7f/0xb0 [ 2058.708446] ? do_vfs_ioctl+0xff0/0xff0 [ 2058.708456] do_syscall_64+0x1d5/0x640 [ 2058.708471] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2058.708480] RIP: 0033:0x45e219 [ 2058.710257] 0 [ 2058.714466] RSP: 002b:00007f49fc585c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2058.716269] 0 [ 2058.720465] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2058.720472] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 2058.722249] 0 [ 2058.726718] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2058.726724] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2058.726728] R13: 00007ffe51cae14f R14: 00007f49fc5869c0 R15: 000000000119bf8c [ 2058.735915] Mem-Info: [ 2058.754652] 0 [ 2058.759160] active_anon:17083 inactive_anon:39238 isolated_anon:0 [ 2058.759160] active_file:11 inactive_file:16 isolated_file:0 [ 2058.759160] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2058.759160] slab_reclaimable:12361 slab_unreclaimable:114049 [ 2058.759160] mapped:52611 shmem:39702 pagetables:764 bounce:0 [ 2058.759160] free:13848 free_pcp:104 free_cma:0 [ 2058.763133] Node 0 active_anon:67188kB inactive_anon:156920kB active_file:36kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:152220kB dirty:0kB writeback:0kB shmem:158756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2058.767483] Node 1 [ 2058.799253] Node 1 active_anon:1144kB inactive_anon:32kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58224kB dirty:0kB writeback:0kB shmem:52kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2058.800154] Normal free:26836kB min:53696kB low:67120kB high:80544kB active_anon:1144kB inactive_anon:32kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:412kB bounce:0kB free_pcp:244kB local_pcp:120kB free_cma:0kB [ 2058.803489] Node 0 [ 2058.810477] lowmem_reserve[]: [ 2058.811552] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2058.817953] 0 [ 2058.823555] lowmem_reserve[]: [ 2058.832199] 0 [ 2058.842171] 0 [ 2058.849290] 0 [ 2058.858621] 2717 [ 2058.862317] 0 [ 2058.869604] 2718 2718 2718 [ 2058.869617] Node 0 DMA32 free:17592kB min:36200kB low:45248kB high:54296kB active_anon:67188kB inactive_anon:156916kB active_file:0kB inactive_file:140kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2644kB bounce:0kB free_pcp:168kB local_pcp:104kB free_cma:0kB [ 2058.869637] lowmem_reserve[]: 0 0 0 0 0 [ 2058.869652] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2058.869667] lowmem_reserve[]: 0 0 0 0 0 [ 2058.869685] Node 1 Normal free:26836kB min:53696kB low:67120kB high:80544kB active_anon:1144kB inactive_anon:32kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:412kB bounce:0kB free_pcp:244kB local_pcp:124kB free_cma:0kB [ 2058.869704] lowmem_reserve[]: 0 0 0 0 0 [ 2058.869725] Node 0 DMA: 3*4kB (UME) 3*8kB [ 2058.875423] 0 [ 2058.910844] (UME) [ 2058.968090] 3*16kB [ 2058.994716] Node 0 [ 2059.011415] (UME) [ 2059.022897] DMA: [ 2059.035093] 2*32kB [ 2059.035535] 3*4kB [ 2059.037017] (UM) [ 2059.039912] (UME) [ 2059.076711] 3*64kB [ 2059.105724] 3*8kB [ 2059.138544] (UME) [ 2059.146249] (UME) [ 2059.150216] 3*128kB [ 2059.150411] 3*16kB [ 2059.152453] (UME) [ 2059.154668] (UME) [ 2059.162110] 2*256kB [ 2059.166595] 2*32kB [ 2059.169726] (ME) [ 2059.169862] (UM) [ 2059.172165] 3*512kB (UME) [ 2059.174385] 3*64kB [ 2059.181881] 2*1024kB [ 2059.184976] (UME) [ 2059.187175] (ME) [ 2059.187396] 3*128kB [ 2059.190217] 3*2048kB [ 2059.192431] (UME) [ 2059.194821] (ME) [ 2059.200099] 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10964kB [ 2059.212183] 0*4096kB [ 2059.218116] Node 0 DMA32: 990*4kB (ME) 620*8kB (UME) 267*16kB (UME) 56*32kB (ME) 19*64kB (UME) 7*128kB (M) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17608kB [ 2059.223091] = 10964kB [ 2059.236024] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2059.248361] Node 0 DMA32: 990*4kB (ME) 620*8kB (UME) 267*16kB (UME) 56*32kB (ME) 19*64kB (UME) 7*128kB [ 2059.248726] Node 1 Normal: 93*4kB (ME) 100*8kB (UME) 88*16kB (UM) 66*32kB (UME) 46*64kB (M) 30*128kB (UME) 6*256kB (M) 5*512kB (ME) 1*1024kB (E) 3*2048kB (UM) 1*4096kB (M) = 26836kB [ 2059.264184] (M) [ 2059.275072] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2059.275079] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2059.275084] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2059.275088] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2059.275092] 39736 total pagecache pages [ 2059.275100] 0 pages in swap cache [ 2059.275104] Swap cache stats: add 0, delete 0, find 0/0 [ 2059.275108] Free swap = 0kB [ 2059.275110] Total swap = 0kB [ 2059.275133] 2097051 pages RAM [ 2059.287410] 2*256kB [ 2059.294922] 0 pages HighMem/MovableOnly [ 2059.312182] (UM) [ 2059.318482] 363840 pages reserved [ 2059.320603] 0*512kB [ 2059.324848] 0 pages cma reserved [ 2059.336923] 0*1024kB [ 2059.342707] Out of memory (oom_kill_allocating_task): Kill process 20127 (in:imklog) score 0 or sacrifice child [ 2059.342815] 0*2048kB [ 2059.347684] Killed process 20125 (rsyslogd) total-vm:254332kB, anon-rss:756kB, file-rss:0kB, shmem-rss:0kB [ 2059.353947] 0*4096kB [ 2059.366880] modprobe invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2059.393424] = 17608kB [ 2059.405358] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2059.407650] modprobe cpuset= [ 2059.418136] Node 1 Normal: 89*4kB (ME) 90*8kB (UME) 81*16kB (UM) 62*32kB (UME) 48*64kB (UM) 30*128kB (UME) 8*256kB (M) 5*512kB (ME) 1*1024kB (E) 3*2048kB (UM) 1*4096kB (M) = 27140kB [ 2059.422737] / [ 2059.441953] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2059.446977] mems_allowed=0-1 [ 2059.452580] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2059.464805] CPU: 1 PID: 21796 Comm: modprobe Not tainted 4.14.214-syzkaller #0 [ 2059.466733] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2059.472165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2059.482457] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2059.490416] Call Trace: [ 2059.490434] dump_stack+0x1b2/0x283 [ 2059.490446] dump_header+0x178/0x82f [ 2059.490456] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2059.490464] ? ___ratelimit+0x2cd/0x522 [ 2059.490473] oom_kill_process.cold+0x10/0xb18 [ 2059.490487] out_of_memory+0xe3e/0x1190 [ 2059.502636] 39739 total pagecache pages [ 2059.505243] ? oom_killer_disable+0x1c0/0x1c0 [ 2059.505252] ? mutex_trylock+0x152/0x1a0 [ 2059.505271] __alloc_pages_nodemask+0x23e1/0x2720 [ 2059.508960] 0 pages in swap cache [ 2059.514050] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2059.521513] Swap cache stats: add 0, delete 0, find 0/0 [ 2059.522492] alloc_pages_current+0x155/0x260 [ 2059.526462] Free swap = 0kB [ 2059.530388] filemap_fault+0xea3/0x1980 [ 2059.534852] Total swap = 0kB [ 2059.538899] ext4_filemap_fault+0x84/0xb0 [ 2059.538909] __do_fault+0xfa/0x380 [ 2059.538916] __handle_mm_fault+0x2497/0x4620 [ 2059.538927] ? vm_insert_page+0x7c0/0x7c0 [ 2059.538934] ? __fd_install+0x227/0x5c0 [ 2059.538944] ? putname+0xcd/0x110 [ 2059.546848] 2097051 pages RAM [ 2059.547207] handle_mm_fault+0x391/0x860 [ 2059.552013] 0 pages HighMem/MovableOnly [ 2059.557360] __do_page_fault+0x549/0xad0 [ 2059.557372] ? spurious_fault+0x640/0x640 [ 2059.557380] ? do_page_fault+0x60/0x4f2 [ 2059.557390] ? page_fault+0x2f/0x50 [ 2059.557401] page_fault+0x45/0x50 [ 2059.562365] 363840 pages reserved [ 2059.564780] RIP: 0001:0x7f982719e040 [ 2059.570525] 0 pages cma reserved [ 2059.571739] RSP: 54b6c81:ffffffffffffffff EFLAGS: 7f982719f0a0 [ 2059.647693] Mem-Info: [ 2059.664038] active_anon:16847 inactive_anon:39238 isolated_anon:0 [ 2059.664038] active_file:34 inactive_file:0 isolated_file:0 [ 2059.664038] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2059.664038] slab_reclaimable:12347 slab_unreclaimable:113931 [ 2059.664038] mapped:52593 shmem:39702 pagetables:734 bounce:0 [ 2059.664038] free:14319 free_pcp:37 free_cma:0 [ 2059.707523] Node 0 active_anon:66328kB inactive_anon:156920kB active_file:132kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:152148kB dirty:0kB writeback:0kB shmem:158756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2059.745397] Node 1 active_anon:1060kB inactive_anon:32kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58224kB dirty:0kB writeback:0kB shmem:52kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2059.792795] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2059.828842] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2059.833907] Node 0 DMA32 free:19316kB min:36200kB low:45248kB high:54296kB active_anon:66328kB inactive_anon:156916kB active_file:64kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2524kB bounce:0kB free_pcp:260kB local_pcp:136kB free_cma:0kB [ 2059.869982] lowmem_reserve[]: 0 0 0 0 0 [ 2059.874368] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2059.905750] lowmem_reserve[]: 0 0 0 0 0 [ 2059.910637] Node 1 Normal free:174520kB min:53696kB low:67120kB high:80544kB active_anon:1060kB inactive_anon:32kB active_file:104kB inactive_file:1104kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:412kB bounce:0kB free_pcp:908kB local_pcp:216kB free_cma:0kB [ 2059.946443] lowmem_reserve[]: 0 0 0 0 0 [ 2059.951727] Node 0 DMA: 3*4kB (UME) 3*8kB (UME) 3*16kB (UME) 2*32kB (UM) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10964kB [ 2059.973114] Node 0 DMA32: 1023*4kB (UME) 709*8kB (UME) 293*16kB (UME) 67*32kB (UME) 20*64kB (UME) 7*128kB (M) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19284kB [ 2059.993636] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2060.005182] Node 1 Normal: 5*4kB (UE) 30*8kB (UE) 11*16kB (UM) 41*32kB (UME) 53*64kB (UM) 35*128kB (UME) 10*256kB (UM) 10*512kB (UME) 2*1024kB (UE) 28*2048kB (UM) 66*4096kB (UM) = 347028kB [ 2060.023521] Bluetooth: hci4 command 0x041b tx timeout [ 2060.034475] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2060.044431] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2060.057462] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2060.069623] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2060.098760] 40968 total pagecache pages [ 2060.102817] 0 pages in swap cache [ 2060.108075] Swap cache stats: add 0, delete 0, find 0/0 [ 2060.114010] Free swap = 0kB [ 2060.121177] Total swap = 0kB [ 2060.124217] 2097051 pages RAM [ 2060.129353] 0 pages HighMem/MovableOnly [ 2060.133335] 363840 pages reserved [ 2060.139995] 0 pages cma reserved [ 2060.143364] Out of memory (oom_kill_allocating_task): Kill process 21796 (modprobe) score 0 or sacrifice child [ 2060.154728] Killed process 21796 (modprobe) total-vm:456kB, anon-rss:4kB, file-rss:0kB, shmem-rss:0kB [ 2060.167650] oom_reaper: reaped process 21796 (modprobe), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2062.084874] Bluetooth: hci4 command 0x040f tx timeout 23:25:34 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x9}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x9, 0x6, 0xfffffff9, 0x2}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:25:34 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='io.stat\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf25020000004800028006000f00008000000800080006000000080008002877000014000100ff020000000000000000000000000001060002004e2400000800050009000000060002004e23000014000280060002004e22000008000700060000001400028008000800407d00000800030001000000080005000000000008000600ff0f00001400028006000f000e0000000800030000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x20, @private2, @mcast2, 0x700, 0x81, 0x568, 0x42}}) 23:25:34 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x3ca26104, 0x0, 0x9, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x9, 0x0, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:25:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, 0x0) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fcdbdf250c00000005002a00010000aa9aecd0c15df821d9d3f3b100", @ANYRES32=r6, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x91}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x80) r8 = syz_open_dev$cec(&(0x7f0000000340)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_EXPBUF(r8, 0xc0405610, &(0x7f0000000380)={0x1, 0x7, 0x200, 0x800, r7}) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1000}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x2c}}, 0x20000001) 23:25:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x0, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x0, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:25:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite\x00') write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000080)={{0x3f, 0x1}, 'port0\x00', 0x41, 0x1102a, 0x3f85, 0x1, 0x5, 0x5, 0x2, 0x0, 0x6, 0x2}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000180)={0x80, 0x101, 0x0, 'queue0\x00', 0xb88f}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') openat$cgroup_int(r2, &(0x7f0000000140)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsa\x00', 0x208000, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000003c0)={0x200, 0x0, 0x2, "1a0590368956fea503014f4cd4f9702707e88676a0d300b509bb1feafc5c6525", 0x35315258}) 23:25:34 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='io.stat\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf25020000004800028006000f00008000000800080006000000080008002877000014000100ff020000000000000000000000000001060002004e2400000800050009000000060002004e23000014000280060002004e22000008000700060000001400028008000800407d00000800030001000000080005000000000008000600ff0f00001400028006000f000e0000000800030000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x20, @private2, @mcast2, 0x700, 0x81, 0x568, 0x42}}) 23:25:34 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='io.stat\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf25020000004800028006000f00008000000800080006000000080008002877000014000100ff020000000000000000000000000001060002004e2400000800050009000000060002004e23000014000280060002004e22000008000700060000001400028008000800407d00000800030001000000080005000000000008000600ff0f00001400028006000f000e0000000800030000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x20, @private2, @mcast2, 0x700, 0x81, 0x568, 0x42}}) 23:25:34 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='io.stat\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x20, @private2, @mcast2, 0x700, 0x81, 0x568, 0x42}}) 23:25:34 executing program 3: ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000040)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') write$sndseq(r0, 0x0, 0x0) 23:25:34 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="c01c3500", @ANYRES16=0x0, @ANYBLOB="100026bd7000fcdbdf25030000001c000280080005000000000005000d0001000000080003000300000008000400090000003400028005000d0001000000080009000100000005000d000100000008000400ff0f0000080008000200000008000700710f000008000400040000000800040009000000140001800600010002000000080005000100000030000180080009007e00000014000300fe880000000000000000000000000001060004004e23000008000b0073697000"], 0xc0}, 0x1, 0x0, 0x0, 0x8043}, 0x8000) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000300)) 23:25:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00c30000000500070002000200"], 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x81) 23:25:34 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x20, @private2, @mcast2, 0x700, 0x81, 0x568, 0x42}}) 23:25:34 executing program 3: write$sndseq(0xffffffffffffffff, 0x0, 0x0) [ 2064.164509] Bluetooth: hci4 command 0x0419 tx timeout [ 2067.396276] oom_reaper: reaped process 21830 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2067.421427] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2067.437592] systemd-journal cpuset=/ mems_allowed=0-1 [ 2067.442798] CPU: 1 PID: 21515 Comm: systemd-journal Not tainted 4.14.214-syzkaller #0 [ 2067.450797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2067.460128] Call Trace: [ 2067.462813] dump_stack+0x1b2/0x283 [ 2067.466430] dump_header+0x178/0x82f [ 2067.470131] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2067.475213] ? ___ratelimit+0x2cd/0x522 [ 2067.479166] oom_kill_process.cold+0x10/0xb18 [ 2067.483642] out_of_memory+0xe3e/0x1190 [ 2067.487596] ? oom_killer_disable+0x1c0/0x1c0 [ 2067.492064] ? mutex_trylock+0x152/0x1a0 [ 2067.496100] __alloc_pages_nodemask+0x23e1/0x2720 [ 2067.500922] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2067.505757] alloc_pages_current+0x155/0x260 [ 2067.510167] filemap_fault+0xea3/0x1980 [ 2067.514130] ext4_filemap_fault+0x84/0xb0 [ 2067.518276] __do_fault+0xfa/0x380 [ 2067.521791] __handle_mm_fault+0x2497/0x4620 [ 2067.526195] ? ep_poll+0x1ab/0xa50 [ 2067.529709] ? vm_insert_page+0x7c0/0x7c0 [ 2067.533944] handle_mm_fault+0x391/0x860 [ 2067.537982] __do_page_fault+0x549/0xad0 [ 2067.542021] ? spurious_fault+0x640/0x640 [ 2067.546144] ? do_page_fault+0x60/0x4f2 [ 2067.550096] ? page_fault+0x2f/0x50 [ 2067.553713] page_fault+0x45/0x50 [ 2067.557164] RIP: 0001:0xffffffffffffffff [ 2067.561198] RSP: 7f94e1e0:00007ffddffc8b70 EFLAGS: 7ffddffc8980 [ 2067.562008] Mem-Info: [ 2067.570514] active_anon:17025 inactive_anon:39237 isolated_anon:0 [ 2067.570514] active_file:14 inactive_file:12 isolated_file:0 [ 2067.570514] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2067.570514] slab_reclaimable:12359 slab_unreclaimable:116820 [ 2067.570514] mapped:52625 shmem:39701 pagetables:738 bounce:0 [ 2067.570514] free:13828 free_pcp:87 free_cma:0 [ 2067.570671] syz-executor.0: [ 2067.603829] Node 0 active_anon:67740kB inactive_anon:156924kB active_file:52kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:152276kB dirty:0kB writeback:0kB shmem:158760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2067.603842] Node 1 active_anon:360kB inactive_anon:24kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58224kB dirty:0kB writeback:0kB shmem:44kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2067.603846] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2067.603863] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2067.611924] vmalloc: allocation failure, allocated 487256064 of 1073745920 bytes [ 2067.634696] Node 0 DMA32 free:17812kB min:36200kB low:45248kB high:54296kB active_anon:67740kB inactive_anon:156920kB active_file:52kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2628kB bounce:0kB free_pcp:228kB local_pcp:108kB free_cma:0kB [ 2067.634714] lowmem_reserve[]: 0 0 0 0 0 [ 2067.634732] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2067.634750] lowmem_reserve[]: [ 2067.666180] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 2067.687822] 0 [ 2067.695893] (null) [ 2067.699918] 0 [ 2067.734151] syz-executor.0 cpuset= [ 2067.758812] 0 [ 2067.761861] / [ 2067.768138] 0 [ 2067.771500] mems_allowed=0-1 [ 2067.775256] 0 [ 2067.777088] CPU: 0 PID: 21830 Comm: syz-executor.0 Not tainted 4.14.214-syzkaller #0 [ 2067.780634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2067.782413] Node 1 [ 2067.785491] Call Trace: [ 2067.785509] dump_stack+0x1b2/0x283 [ 2067.785522] warn_alloc.cold+0x96/0x1cc [ 2067.785531] ? zone_watermark_ok_safe+0x220/0x220 [ 2067.785554] __vmalloc_area_node+0x48a/0x680 [ 2067.785568] ? __vmalloc_node_range+0x150/0x150 [ 2067.789609] Normal free:26536kB min:53696kB low:67120kB high:80544kB active_anon:360kB inactive_anon:24kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:324kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2067.795204] ? __get_vm_area_node+0x27d/0x340 [ 2067.795216] __vmalloc_node_range+0xbe/0x150 [ 2067.795229] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2067.795236] vmalloc_user+0x47/0xa0 [ 2067.795245] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2067.795254] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2067.795261] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2067.795274] __vb2_queue_alloc+0x47a/0xd90 [ 2067.807937] lowmem_reserve[]: [ 2067.809434] vb2_core_create_bufs+0x279/0x5a0 [ 2067.813023] 0 [ 2067.816976] ? __vb2_queue_free+0x7a0/0x7a0 [ 2067.816990] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2067.817000] ? trace_hardirqs_on+0x10/0x10 [ 2067.817010] vb2_create_bufs+0x2e1/0x5b0 [ 2067.817022] ? vb2_thread_start.cold+0x24/0x24 [ 2067.817028] ? trace_hardirqs_on+0x10/0x10 [ 2067.817043] v4l_create_bufs+0xa4/0x150 [ 2067.817054] __video_do_ioctl+0x65b/0x6a0 [ 2067.822362] 0 [ 2067.826265] ? video_ioctl2+0x30/0x30 [ 2067.826279] ? __might_fault+0x177/0x1b0 [ 2067.826290] video_usercopy+0xf5/0xe90 [ 2067.826300] ? video_ioctl2+0x30/0x30 [ 2067.826310] ? v4l_g_ctrl+0x390/0x390 [ 2067.826317] ? lock_acquire+0x170/0x3f0 [ 2067.826327] ? trace_hardirqs_on+0x10/0x10 [ 2067.834102] 0 [ 2067.858368] ? trace_hardirqs_on+0x10/0x10 [ 2067.858379] ? futex_exit_release+0x220/0x220 [ 2067.858389] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2067.858399] ? __might_fault+0x104/0x1b0 [ 2067.858410] v4l2_ioctl+0x1bb/0x2f0 [ 2067.858418] ? v4l2_open+0x2f0/0x2f0 [ 2067.858429] do_vfs_ioctl+0x75a/0xff0 [ 2067.858440] ? ioctl_preallocate+0x1a0/0x1a0 [ 2067.858447] ? lock_downgrade+0x740/0x740 [ 2067.858459] ? __fget+0x225/0x360 [ 2067.866990] 0 [ 2067.867324] ? do_vfs_ioctl+0xff0/0xff0 [ 2067.872657] 0 [ 2067.876265] ? security_file_ioctl+0x83/0xb0 [ 2067.876276] SyS_ioctl+0x7f/0xb0 [ 2067.876284] ? do_vfs_ioctl+0xff0/0xff0 [ 2067.876294] do_syscall_64+0x1d5/0x640 [ 2067.876312] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2067.876320] RIP: 0033:0x45e219 [ 2067.885977] RSP: 002b:00007fea2bdd6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2067.885987] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2067.885991] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 2067.885997] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2067.886001] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2067.886007] R13: 00007ffc4168215f R14: 00007fea2bdd79c0 R15: 000000000119bf8c [ 2067.890580] Mem-Info: [ 2067.895080] Node 0 [ 2067.897618] active_anon:17025 inactive_anon:39237 isolated_anon:0 [ 2067.897618] active_file:14 inactive_file:12 isolated_file:0 [ 2067.897618] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2067.897618] slab_reclaimable:12359 slab_unreclaimable:116820 [ 2067.897618] mapped:52625 shmem:39701 pagetables:738 bounce:0 [ 2067.897618] free:13828 free_pcp:87 free_cma:0 [ 2067.902098] DMA: [ 2067.903890] Node 0 active_anon:67740kB inactive_anon:156924kB active_file:52kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:152276kB dirty:0kB writeback:0kB shmem:158760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2067.908208] 3*4kB (UME) 3*8kB (UME) 3*16kB (UME) 2*32kB (UM) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB [ 2067.917545] Node 1 active_anon:360kB inactive_anon:24kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58224kB dirty:0kB writeback:0kB shmem:44kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2067.917854] (UME) [ 2067.922417] Node 0 [ 2067.926684] 2*1024kB [ 2067.934234] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2067.934742] (ME) [ 2067.938932] lowmem_reserve[]: [ 2067.940710] 3*2048kB (ME) [ 2067.948110] 0 [ 2067.950825] 0*4096kB [ 2067.952460] 2717 [ 2067.956282] = 10964kB [ 2067.956286] Node 0 DMA32: [ 2067.960071] 2718 [ 2067.965910] 1035*4kB [ 2067.971761] 2718 [ 2067.974620] (UME) [ 2067.985921] 2718 [ 2067.990019] 635*8kB [ 2067.995589] (UME) 304*16kB (UME) 71*32kB (UME) 22*64kB (UME) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17892kB [ 2067.995634] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB [ 2068.004736] Node 0 [ 2068.009925] 0*256kB [ 2068.011602] DMA32 free:17892kB min:36200kB low:45248kB high:54296kB active_anon:67740kB inactive_anon:156920kB active_file:52kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2628kB bounce:0kB free_pcp:228kB local_pcp:120kB free_cma:0kB [ 2068.013369] 0*512kB [ 2068.022429] lowmem_reserve[]: [ 2068.025819] 0*1024kB [ 2068.027090] 0 [ 2068.031016] 0*2048kB [ 2068.034895] 0 0 0 0 [ 2068.034910] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2068.034927] lowmem_reserve[]: [ 2068.041657] 0*4096kB [ 2068.043353] 0 [ 2068.052839] = 0kB [ 2068.063546] 0 [ 2068.069491] Node 1 [ 2068.073226] 0 [ 2068.081072] Normal: [ 2068.089761] 0 [ 2068.102984] 82*4kB [ 2068.127896] 0 [ 2068.135272] (UME) [ 2068.173718] 74*8kB [ 2068.194182] Node 1 [ 2068.201300] (UME) [ 2068.230107] Normal free:26536kB min:53696kB low:67120kB high:80544kB active_anon:360kB inactive_anon:24kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:324kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2068.236779] 63*16kB [ 2068.237026] lowmem_reserve[]: [ 2068.239067] (M) [ 2068.241455] 0 [ 2068.244361] 55*32kB (UME) [ 2068.251440] 0 [ 2068.252991] 45*64kB [ 2068.255081] 0 0 0 [ 2068.255092] Node 0 DMA: 3*4kB (UME) 3*8kB (UME) 3*16kB (UME) 2*32kB (UM) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10964kB [ 2068.255161] Node 0 DMA32: 1035*4kB (UME) 635*8kB (UME) 304*16kB [ 2068.260972] (UM) [ 2068.274056] (UME) [ 2068.278911] 26*128kB [ 2068.279986] 71*32kB [ 2068.310482] (ME) [ 2068.317613] (UME) [ 2068.318131] 13*256kB [ 2068.320526] 22*64kB [ 2068.322827] (M) [ 2068.355132] (UME) [ 2068.357428] 6*512kB [ 2068.357714] 1*128kB [ 2068.359502] (ME) [ 2068.361716] (U) [ 2068.363497] 2*1024kB [ 2068.372528] 0*256kB [ 2068.375761] (UE) [ 2068.376032] 0*512kB [ 2068.378215] 2*2048kB [ 2068.380342] 0*1024kB [ 2068.409959] (M) [ 2068.410225] 0*2048kB [ 2068.413318] 1*4096kB [ 2068.422063] 0*4096kB [ 2068.425807] (M) [ 2068.426188] = 17892kB [ 2068.441818] = 26536kB [ 2068.441826] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2068.441832] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2068.441837] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2068.441841] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2068.441845] 39727 total pagecache pages [ 2068.441854] 0 pages in swap cache [ 2068.441858] Swap cache stats: add 0, delete 0, find 0/0 [ 2068.441861] Free swap = 0kB [ 2068.441867] Total swap = 0kB [ 2068.454984] Node 0 [ 2068.458741] 2097051 pages RAM [ 2068.458998] Normal: [ 2068.461128] 0 pages HighMem/MovableOnly [ 2068.463514] 0*4kB [ 2068.465853] 363840 pages reserved [ 2068.465857] 0 pages cma reserved [ 2068.465864] Out of memory (oom_kill_allocating_task): Kill process 21515 (systemd-journal) score 0 or sacrifice child [ 2068.465891] Killed process 21515 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1592kB [ 2068.466617] oom_reaper: reaped process 21515 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1592kB [ 2068.473099] 0*8kB [ 2068.479835] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2068.481062] 0*16kB [ 2068.483360] (null) [ 2068.491595] 0*32kB [ 2068.492754] , order=0, oom_score_adj=0 [ 2068.494671] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2068.497092] systemd-journal: [ 2068.499573] Node 1 [ 2068.501961] page allocation failure: order:0 [ 2068.503911] Normal: [ 2068.508092] syz-fuzzer cpuset= [ 2068.513786] 82*4kB [ 2068.517752] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2068.531299] (UME) [ 2068.537364] / [ 2068.543705] 74*8kB [ 2068.547737] mems_allowed=0-1 [ 2068.547748] CPU: 1 PID: 7982 Comm: syz-fuzzer Not tainted 4.14.214-syzkaller #0 [ 2068.547754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2068.555748] (UME) [ 2068.556528] Call Trace: [ 2068.559632] 63*16kB [ 2068.562669] dump_stack+0x1b2/0x283 [ 2068.565334] (M) [ 2068.567967] dump_header+0x178/0x82f [ 2068.570260] 55*32kB [ 2068.574217] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2068.574226] ? ___ratelimit+0x2cd/0x522 [ 2068.574236] oom_kill_process.cold+0x10/0xb18 [ 2068.576516] (UME) [ 2068.579955] out_of_memory+0xe3e/0x1190 [ 2068.583287] 45*64kB [ 2068.594015] ? oom_killer_disable+0x1c0/0x1c0 [ 2068.594023] ? mutex_trylock+0x152/0x1a0 [ 2068.594034] __alloc_pages_nodemask+0x23e1/0x2720 [ 2068.604690] (UM) [ 2068.614980] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2068.615003] alloc_pages_current+0x155/0x260 [ 2068.617114] 26*128kB [ 2068.626802] filemap_fault+0xea3/0x1980 [ 2068.626818] ext4_filemap_fault+0x84/0xb0 [ 2068.629026] (ME) [ 2068.631192] __do_fault+0xfa/0x380 [ 2068.633401] 13*256kB [ 2068.637353] __handle_mm_fault+0x2497/0x4620 [ 2068.637363] ? vm_insert_page+0x7c0/0x7c0 [ 2068.637383] handle_mm_fault+0x391/0x860 [ 2068.644473] (M) [ 2068.647726] __do_page_fault+0x549/0xad0 [ 2068.649932] 6*512kB [ 2068.654322] ? spurious_fault+0x640/0x640 [ 2068.654330] ? do_page_fault+0x60/0x4f2 [ 2068.654339] ? page_fault+0x2f/0x50 [ 2068.656656] (ME) [ 2068.659939] page_fault+0x45/0x50 [ 2068.662166] 2*1024kB [ 2068.669067] RIP: ac480:0x1e1d1168fe6 [ 2068.669071] RSP: 03e7:000000c0000b9e40 EFLAGS: 00000003 [ 2068.671539] (null) [ 2068.673136] (UE) [ 2068.675394] systemd-journal cpuset=/ mems_allowed=0-1 [ 2068.675413] CPU: 1 PID: 21515 Comm: systemd-journal Not tainted 4.14.214-syzkaller #0 [ 2068.675418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2068.675421] Call Trace: [ 2068.675435] dump_stack+0x1b2/0x283 [ 2068.675446] warn_alloc.cold+0x96/0x1cc [ 2068.675454] ? zone_watermark_ok_safe+0x220/0x220 [ 2068.675463] ? usleep_range+0x130/0x130 [ 2068.675472] ? try_to_free_pages+0x23f/0x6e0 [ 2068.675492] ? _find_next_bit+0xdb/0x100 [ 2068.675501] ? run_timer_softirq+0x5a0/0x5a0 [ 2068.675512] __alloc_pages_nodemask+0x2127/0x2720 [ 2068.675529] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2068.675551] alloc_pages_current+0x155/0x260 [ 2068.675561] filemap_fault+0xea3/0x1980 [ 2068.675577] ext4_filemap_fault+0x84/0xb0 [ 2068.675587] __do_fault+0xfa/0x380 [ 2068.675595] __handle_mm_fault+0x2497/0x4620 [ 2068.675603] ? ep_poll+0x1ab/0xa50 [ 2068.675609] ? vm_insert_page+0x7c0/0x7c0 [ 2068.675629] handle_mm_fault+0x391/0x860 [ 2068.675641] __do_page_fault+0x549/0xad0 [ 2068.675652] ? spurious_fault+0x640/0x640 [ 2068.675659] ? do_page_fault+0x60/0x4f2 [ 2068.675667] ? page_fault+0x2f/0x50 [ 2068.675674] page_fault+0x45/0x50 [ 2068.675679] RIP: 0001:0xffffffffffffffff [ 2068.675686] RSP: 7f94e1e0:00007ffddffc8b70 EFLAGS: 7ffddffc8980 [ 2068.685850] 2*2048kB [ 2068.688067] Mem-Info: [ 2068.701596] (M) [ 2068.702710] active_anon:16925 inactive_anon:39237 isolated_anon:0 [ 2068.702710] active_file:14 inactive_file:12 isolated_file:0 [ 2068.702710] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2068.702710] slab_reclaimable:12359 slab_unreclaimable:116820 [ 2068.702710] mapped:52625 shmem:39701 pagetables:738 bounce:0 [ 2068.702710] free:13848 free_pcp:205 free_cma:0 [ 2068.706321] 1*4096kB (M) = 26536kB [ 2068.706335] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2068.706341] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2068.706346] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2068.706353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2068.710168] Node 0 active_anon:67340kB inactive_anon:156924kB active_file:52kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:152276kB dirty:0kB writeback:0kB shmem:158760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2068.712016] 39727 total pagecache pages [ 2068.714353] Node 1 active_anon:360kB inactive_anon:24kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58224kB dirty:0kB writeback:0kB shmem:44kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2068.714356] Node 0 [ 2068.721250] 0 pages in swap cache [ 2068.723467] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2068.727979] Swap cache stats: add 0, delete 0, find 0/0 [ 2068.727983] Free swap = 0kB [ 2068.727986] Total swap = 0kB [ 2068.727992] 2097051 pages RAM [ 2068.727995] 0 pages HighMem/MovableOnly [ 2068.727997] 363840 pages reserved [ 2068.728000] 0 pages cma reserved [ 2069.158283] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2069.163323] Node 0 DMA32 free:17992kB min:36200kB low:45248kB high:54296kB active_anon:67268kB inactive_anon:156920kB active_file:48kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2628kB bounce:0kB free_pcp:1208kB local_pcp:588kB free_cma:0kB [ 2069.192501] lowmem_reserve[]: 0 0 0 0 0 [ 2069.196533] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2069.222405] lowmem_reserve[]: 0 0 0 0 0 [ 2069.226444] Node 1 Normal free:420312kB min:53696kB low:67120kB high:80544kB active_anon:460kB inactive_anon:24kB active_file:0kB inactive_file:2304kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:324kB bounce:0kB free_pcp:728kB local_pcp:0kB free_cma:0kB [ 2069.255202] lowmem_reserve[]: 0 0 0 0 0 [ 2069.259465] Node 0 DMA: 2*4kB (ME) 4*8kB (UME) 4*16kB (UME) 2*32kB (UM) 15*64kB (UME) 12*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 13160kB [ 2069.275578] Node 0 DMA32: 1201*4kB (UME) 971*8kB (UME) 380*16kB (UME) 112*32kB (UME) 43*64kB (UME) 15*128kB (UM) 4*256kB (U) 69*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 64284kB [ 2069.292569] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2069.303603] Node 1 Normal: 7*4kB (UME) 10*8kB (UME) 8*16kB (UM) 42*32kB (UME) 49*64kB (UM) 30*128kB (UME) 16*256kB (UM) 10*512kB (UME) 2*1024kB (UE) 7*2048kB (UM) 102*4096kB (UM) = 451948kB [ 2069.320885] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2069.329777] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2069.338483] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2069.347371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2069.356146] 40504 total pagecache pages [ 2069.360116] 0 pages in swap cache [ 2069.363561] Swap cache stats: add 0, delete 0, find 0/0 [ 2069.368994] Free swap = 0kB [ 2069.372030] Total swap = 0kB [ 2069.375111] 2097051 pages RAM [ 2069.378204] 0 pages HighMem/MovableOnly [ 2069.382176] 363840 pages reserved [ 2069.385808] 0 pages cma reserved [ 2069.389176] Out of memory (oom_kill_allocating_task): Kill process 7982 (syz-fuzzer) score 0 or sacrifice child [ 2069.399749] Killed process 20972 (syz-executor.2) total-vm:85024kB, anon-rss:64kB, file-rss:4kB, shmem-rss:0kB [ 2069.495117] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2069.505919] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2069.547345] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 2069.573541] systemd[1]: Stopped Journal Service. [ 2069.596802] systemd[1]: Starting Journal Service... [ 2069.665784] systemd[1]: Started Load/Save RF Kill Switch Status. [ 2069.699797] systemd-journald[21892]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2069.926444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2069.933274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2069.956207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2069.962936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2069.986937] systemd[1]: Started Journal Service. [ 2070.001891] device bridge_slave_1 left promiscuous mode [ 2070.009361] bridge0: port 2(bridge_slave_1) entered disabled state [ 2070.020958] device bridge_slave_0 left promiscuous mode [ 2070.027159] bridge0: port 1(bridge_slave_0) entered disabled state [ 2070.040509] device veth1_macvtap left promiscuous mode [ 2070.045953] device veth0_macvtap left promiscuous mode [ 2070.051270] device veth1_vlan left promiscuous mode [ 2070.060330] device veth0_vlan left promiscuous mode [ 2070.218092] device hsr_slave_1 left promiscuous mode [ 2070.228846] device hsr_slave_0 left promiscuous mode [ 2070.250115] team0 (unregistering): Port device team_slave_1 removed [ 2070.265173] team0 (unregistering): Port device team_slave_0 removed [ 2070.279408] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2070.292780] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2070.338321] bond0 (unregistering): Released all slaves 23:25:43 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0xffc00000, 0x5, 0x80, 0x101, 0x493f31dc, 0x3}) 23:25:43 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x210000) socketpair(0x2c, 0x80000, 0x7, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$userio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/userio\x00', 0x200, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000000), &(0x7f0000000540)=0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x80000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r5, 0x1af3db62214ede13}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c084}, 0x4000000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x98, r5, 0x300, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20040081}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) getsockopt$inet6_tcp_int(r2, 0x6, 0x9, &(0x7f0000000180), &(0x7f0000000580)=0x4) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000007c0)={0x44, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x41}}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x2404c010) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000200)) 23:25:43 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x3ca26104, 0x0, 0x9, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x9, 0x0, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:25:43 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x0, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x0, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:25:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x9}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x9, 0x6, 0xfffffff9, 0x2}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:25:43 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x20, @private2, @mcast2, 0x700, 0x81, 0x568, 0x42}}) 23:25:44 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x20, @private2, @mcast2, 0x700, 0x81, 0x568, 0x42}}) 23:25:44 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffe, 0x20, @private2, @mcast2, 0x700, 0x81, 0x568, 0x42}}) 23:25:44 executing program 3: r0 = getpid() syz_open_procfs(r0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='comm\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r3, 0x109}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r3, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0xc4810) write$sndseq(r1, 0x0, 0x0) 23:25:44 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) 23:25:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000000)={'gretap0\x00', r2, 0x8, 0x80, 0x7, 0x101, {{0x4a, 0x4, 0x2, 0x6, 0x128, 0x66, 0x0, 0x0, 0x29, 0x0, @broadcast, @empty, {[@timestamp={0x44, 0x10, 0x9, 0x0, 0xf, [0x2, 0x7, 0x2]}, @timestamp={0x44, 0x14, 0x96, 0x0, 0x5, [0xffff8001, 0x7ff, 0x7f, 0x0]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x12, "4cf9146bb33e9c1a3e5fe5644ec9668c"}, {0x1, 0x2}, {0x1, 0x2}]}, @timestamp={0x44, 0x20, 0x60, 0x0, 0xc, [0x80, 0x3f, 0x53c, 0xde, 0x19400, 0xd75, 0x3]}, @timestamp_addr={0x44, 0x14, 0x23, 0x1, 0x1, [{@broadcast, 0x401}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3d62}]}, @timestamp_prespec={0x44, 0x3c, 0x36, 0x3, 0x7, [{@rand_addr=0x64010102, 0x7}, {@loopback, 0xff}, {@broadcast, 0x9}, {@multicast2, 0x3}, {@broadcast}, {@empty}, {@local}]}, @ssrr={0x89, 0xb, 0x32, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @cipso={0x86, 0x56, 0xffffffffffffffff, [{0x5, 0x12, "47232649f70102f63548b72cb6771f80"}, {0x6, 0xa, "dfbc14ba0d05ecab"}, {0x0, 0xb, "aff3f390eb763e57e0"}, {0x6, 0x11, "8d814a7cd957d3fed9aa32dce0d3b2"}, {0x7, 0xf, "37801d8dd33ec247c632c068b7"}, {0x6, 0x9, "487be05bb860c3"}]}]}}}}}) accept4$packet(r1, 0x0, &(0x7f00000001c0), 0x80800) 23:25:44 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0xc0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000080)={{0x7, 0x2}, 'port1\x00', 0x41, 0x81000, 0x640bdbf8, 0x6, 0x20, 0x2, 0x7, 0x0, 0x2, 0x6}) write$sndseq(r0, 0x0, 0x0) 23:25:44 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) 23:25:44 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/icmp6\x00') write$sndseq(r0, 0x0, 0x0) [ 2073.445878] Bluetooth: hci0 command 0x0406 tx timeout 23:25:44 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x0, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x0, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:25:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) [ 2075.730715] IPVS: ftp: loaded support on port[0] = 21 [ 2075.936403] chnl_net:caif_netlink_parms(): no params data found [ 2076.083079] bridge0: port 1(bridge_slave_0) entered blocking state [ 2076.090994] bridge0: port 1(bridge_slave_0) entered disabled state [ 2076.101674] device bridge_slave_0 entered promiscuous mode [ 2076.110236] bridge0: port 2(bridge_slave_1) entered blocking state [ 2076.120125] bridge0: port 2(bridge_slave_1) entered disabled state [ 2076.128347] device bridge_slave_1 entered promiscuous mode [ 2076.161585] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2076.171772] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2076.205717] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2076.216690] team0: Port device team_slave_0 added [ 2076.222463] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2076.230740] team0: Port device team_slave_1 added [ 2076.264895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2076.271161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2076.300997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2076.313126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2076.323158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2076.352871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2076.364396] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2076.372054] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2076.400614] device hsr_slave_0 entered promiscuous mode [ 2076.407026] device hsr_slave_1 entered promiscuous mode [ 2076.413221] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2076.420751] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2076.541224] bridge0: port 2(bridge_slave_1) entered blocking state [ 2076.547668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2076.554365] bridge0: port 1(bridge_slave_0) entered blocking state [ 2076.560728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2076.613028] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2076.619485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2076.634156] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2076.648101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2076.655676] bridge0: port 1(bridge_slave_0) entered disabled state [ 2076.662519] bridge0: port 2(bridge_slave_1) entered disabled state [ 2076.678289] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2076.687639] 8021q: adding VLAN 0 to HW filter on device team0 [ 2076.699624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2076.711200] bridge0: port 1(bridge_slave_0) entered blocking state [ 2076.717635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2076.740263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2076.751622] bridge0: port 2(bridge_slave_1) entered blocking state [ 2076.758043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2076.787661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2076.795739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2076.807843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2076.816436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2076.829426] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2076.836080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2076.843332] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2076.861442] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2076.877075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2076.886015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2076.900849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2076.912804] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2077.009812] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2077.020775] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2077.032496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2077.043129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2077.095760] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2077.104146] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2077.111014] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2077.122961] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2077.130939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2077.140634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2077.151394] device veth0_vlan entered promiscuous mode [ 2077.162839] device veth1_vlan entered promiscuous mode [ 2077.170090] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2077.177593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2077.185662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2077.192631] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2077.208320] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2077.222100] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2077.232902] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2077.240669] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2077.249650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2077.259050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2077.272615] device veth0_macvtap entered promiscuous mode [ 2077.281587] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2077.295872] device veth1_macvtap entered promiscuous mode [ 2077.302227] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2077.317506] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2077.330785] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2077.341554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2077.356018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2077.366948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2077.380103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2077.391172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2077.405883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2077.416239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2077.430318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2077.441621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2077.462979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2077.478267] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2077.485737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2077.492563] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2077.505250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2077.512652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2077.525154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2077.535058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2077.550935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2077.561278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2077.575269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2077.585636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2077.598330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2077.608765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2077.621265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2077.631620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2077.645038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2077.656744] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2077.666220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2077.673035] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2077.683081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2077.763354] Bluetooth: hci3 command 0x0409 tx timeout [ 2078.137239] oom_reaper: reaped process 21902 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2078.175387] modprobe invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2078.192805] modprobe cpuset=/ mems_allowed=0-1 [ 2078.197622] CPU: 1 PID: 22187 Comm: modprobe Not tainted 4.14.214-syzkaller #0 [ 2078.204973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2078.214315] Call Trace: [ 2078.216903] dump_stack+0x1b2/0x283 [ 2078.220529] dump_header+0x178/0x82f [ 2078.221518] syz-executor.0: [ 2078.224249] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2078.224258] ? ___ratelimit+0x2cd/0x522 [ 2078.224268] oom_kill_process.cold+0x10/0xb18 [ 2078.227272] vmalloc: allocation failure, allocated 469782528 of 1073745920 bytes [ 2078.232360] out_of_memory+0xe3e/0x1190 [ 2078.236341] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 2078.240803] ? oom_killer_disable+0x1c0/0x1c0 [ 2078.248319] (null) [ 2078.252277] ? mutex_trylock+0x152/0x1a0 [ 2078.258232] syz-executor.0 cpuset= [ 2078.262695] __alloc_pages_nodemask+0x23e1/0x2720 [ 2078.264832] / [ 2078.268870] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2078.272374] mems_allowed=0-1 [ 2078.277211] alloc_pages_current+0x155/0x260 [ 2078.277220] filemap_fault+0xea3/0x1980 [ 2078.295273] ext4_filemap_fault+0x84/0xb0 [ 2078.299421] __do_fault+0xfa/0x380 [ 2078.302947] __handle_mm_fault+0x2497/0x4620 [ 2078.307342] ? vm_insert_page+0x7c0/0x7c0 [ 2078.311484] handle_mm_fault+0x391/0x860 [ 2078.315551] __do_page_fault+0x549/0xad0 [ 2078.319598] ? spurious_fault+0x640/0x640 [ 2078.323740] ? do_page_fault+0x60/0x4f2 [ 2078.327698] ? page_fault+0x2f/0x50 [ 2078.331306] page_fault+0x45/0x50 [ 2078.334755] RIP: 0000:0x5616350aa000 [ 2078.338451] RSP: 350ac160:00007fff11ec5c90 EFLAGS: 7fc093ed7170 [ 2078.338472] CPU: 0 PID: 21902 Comm: syz-executor.0 Not tainted 4.14.214-syzkaller #0 [ 2078.352415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2078.353023] Mem-Info: [ 2078.361782] Call Trace: [ 2078.361799] dump_stack+0x1b2/0x283 [ 2078.361811] warn_alloc.cold+0x96/0x1cc [ 2078.361821] ? zone_watermark_ok_safe+0x220/0x220 [ 2078.361842] __vmalloc_area_node+0x48a/0x680 [ 2078.361854] ? __vmalloc_node_range+0x150/0x150 [ 2078.361862] ? __get_vm_area_node+0x27d/0x340 [ 2078.361874] __vmalloc_node_range+0xbe/0x150 [ 2078.361887] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2078.361895] vmalloc_user+0x47/0xa0 [ 2078.371301] active_anon:17197 inactive_anon:41269 isolated_anon:0 [ 2078.371301] active_file:18 inactive_file:13 isolated_file:0 [ 2078.371301] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2078.371301] slab_reclaimable:12405 slab_unreclaimable:118703 [ 2078.371301] mapped:52600 shmem:41750 pagetables:766 bounce:0 [ 2078.371301] free:13931 free_pcp:62 free_cma:0 [ 2078.374425] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2078.374433] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2078.374441] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2078.374450] __vb2_queue_alloc+0x47a/0xd90 [ 2078.374468] vb2_core_create_bufs+0x279/0x5a0 [ 2078.374477] ? __vb2_queue_free+0x7a0/0x7a0 [ 2078.379308] Node 0 active_anon:67700kB inactive_anon:165040kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117360kB dirty:0kB writeback:0kB shmem:166936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2078.383693] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2078.383703] ? trace_hardirqs_on+0x10/0x10 [ 2078.383713] vb2_create_bufs+0x2e1/0x5b0 [ 2078.383725] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 2078.383735] ? vb2_thread_start.cold+0x24/0x24 [ 2078.383742] ? trace_hardirqs_on+0x10/0x10 [ 2078.383758] v4l_create_bufs+0xa4/0x150 [ 2078.383769] __video_do_ioctl+0x65b/0x6a0 [ 2078.395246] Node 1 active_anon:1088kB inactive_anon:36kB active_file:28kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:93040kB dirty:0kB writeback:0kB shmem:64kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2078.397407] ? video_ioctl2+0x30/0x30 [ 2078.402821] Node 0 [ 2078.406430] ? __might_fault+0x177/0x1b0 [ 2078.406442] video_usercopy+0xf5/0xe90 [ 2078.406451] ? video_ioctl2+0x30/0x30 [ 2078.406460] ? v4l_g_ctrl+0x390/0x390 [ 2078.406468] ? lock_acquire+0x170/0x3f0 [ 2078.406476] ? trace_hardirqs_on+0x10/0x10 [ 2078.406485] ? trace_hardirqs_on+0x10/0x10 [ 2078.406494] ? futex_exit_release+0x220/0x220 [ 2078.406505] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2078.406519] ? __might_fault+0x104/0x1b0 [ 2078.406529] v4l2_ioctl+0x1bb/0x2f0 [ 2078.406546] ? v4l2_open+0x2f0/0x2f0 [ 2078.445964] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2078.449323] do_vfs_ioctl+0x75a/0xff0 [ 2078.453505] lowmem_reserve[]: [ 2078.457663] ? ioctl_preallocate+0x1a0/0x1a0 [ 2078.462126] 0 [ 2078.466425] ? lock_downgrade+0x740/0x740 [ 2078.466438] ? __fget+0x225/0x360 [ 2078.466448] ? do_vfs_ioctl+0xff0/0xff0 [ 2078.466459] ? security_file_ioctl+0x83/0xb0 [ 2078.466470] SyS_ioctl+0x7f/0xb0 [ 2078.466478] ? do_vfs_ioctl+0xff0/0xff0 [ 2078.466489] do_syscall_64+0x1d5/0x640 [ 2078.466511] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2078.502496] 2717 [ 2078.503905] RIP: 0033:0x45e219 [ 2078.503910] RSP: 002b:00007fea2bdd6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2078.503918] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2078.503923] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 2078.503928] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2078.503932] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2078.503937] R13: 00007ffc4168215f R14: 00007fea2bdd79c0 R15: 000000000119bf8c [ 2078.515281] warn_alloc_show_mem: 1 callbacks suppressed [ 2078.515284] Mem-Info: [ 2078.525069] 2718 [ 2078.527272] active_anon:17197 inactive_anon:41269 isolated_anon:0 [ 2078.527272] active_file:18 inactive_file:13 isolated_file:0 [ 2078.527272] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2078.527272] slab_reclaimable:12405 slab_unreclaimable:118703 [ 2078.527272] mapped:52600 shmem:41750 pagetables:766 bounce:0 [ 2078.527272] free:13931 free_pcp:60 free_cma:0 [ 2078.530228] 2718 2718 [ 2078.560079] Node 0 active_anon:67700kB inactive_anon:165040kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117360kB dirty:0kB writeback:0kB shmem:166936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2078.571980] Node 1 active_anon:1088kB inactive_anon:36kB active_file:28kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:93040kB dirty:0kB writeback:0kB shmem:64kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2078.575075] Node 0 [ 2078.581745] Node 0 [ 2078.582458] DMA32 free:17928kB min:36200kB low:45248kB high:54296kB active_anon:67700kB inactive_anon:165036kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2460kB bounce:0kB free_pcp:120kB local_pcp:8kB free_cma:0kB [ 2078.586703] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2078.586706] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2078.586727] Node 0 DMA32 free:17928kB min:36200kB low:45248kB high:54296kB active_anon:67700kB inactive_anon:165036kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2460kB bounce:0kB free_pcp:120kB local_pcp:112kB free_cma:0kB [ 2078.598040] lowmem_reserve[]: [ 2078.603057] lowmem_reserve[]: [ 2078.604754] 0 [ 2078.608242] 0 [ 2078.611931] 0 [ 2078.640516] 0 [ 2078.649122] 0 [ 2078.650761] 0 [ 2078.658166] 0 [ 2078.658548] 0 [ 2078.662483] 0 [ 2078.666930] 0 [ 2078.666937] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2078.666955] lowmem_reserve[]: 0 0 0 0 0 [ 2078.666974] Node 1 Normal free:26840kB min:53696kB low:67120kB high:80544kB active_anon:1088kB inactive_anon:36kB active_file:28kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:604kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2078.666990] lowmem_reserve[]: 0 0 0 0 0 [ 2078.667006] Node 0 DMA: 3*4kB (UME) 2*8kB (ME) 3*16kB (UME) 2*32kB (UM) [ 2078.681512] 3*64kB [ 2078.684510] Node 0 [ 2078.686556] (UME) [ 2078.689739] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2078.700817] 3*128kB [ 2078.711840] lowmem_reserve[]: [ 2078.712133] (UME) [ 2078.719431] 0 0 0 0 0 [ 2078.719449] Node 1 Normal free:26840kB min:53696kB low:67120kB high:80544kB active_anon:1088kB inactive_anon:36kB active_file:28kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:604kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2078.719467] lowmem_reserve[]: [ 2078.730287] 2*256kB [ 2078.746867] 0 [ 2078.781154] (ME) [ 2078.818134] 0 [ 2078.838245] 3*512kB [ 2078.846811] 0 [ 2078.871032] (UME) [ 2078.902498] 0 [ 2078.930700] 2*1024kB [ 2078.940831] 0 [ 2078.940924] (ME) [ 2078.948119] 3*2048kB [ 2078.948984] Node 0 [ 2078.950216] (ME) [ 2078.952022] DMA: [ 2078.981382] 0*4096kB [ 2078.989068] 3*4kB [ 2079.013352] = 10956kB [ 2079.021587] (UME) [ 2079.026998] Node 0 [ 2079.027818] 2*8kB [ 2079.061982] DMA32: [ 2079.067089] (ME) [ 2079.098587] 998*4kB [ 2079.102908] 3*16kB [ 2079.106886] (ME) [ 2079.106956] (UME) [ 2079.109084] 651*8kB [ 2079.110863] 2*32kB [ 2079.118349] (UME) [ 2079.122966] (UM) [ 2079.126864] 309*16kB [ 2079.129565] 3*64kB [ 2079.130609] (UME) [ 2079.136605] (UME) [ 2079.142523] 66*32kB [ 2079.143902] 3*128kB (UME) [ 2079.147995] (UME) [ 2079.148427] 2*256kB [ 2079.150468] 13*64kB [ 2079.152597] (ME) [ 2079.160285] (UME) [ 2079.165651] 3*512kB [ 2079.168262] 3*128kB [ 2079.168593] (UME) [ 2079.170720] (UM) [ 2079.173103] 2*1024kB [ 2079.175888] 2*256kB [ 2079.178013] (ME) [ 2079.180312] (U) [ 2079.182612] 3*2048kB [ 2079.191536] 0*512kB [ 2079.197145] (ME) [ 2079.198106] 0*1024kB [ 2079.200408] 0*4096kB [ 2079.202448] 0*2048kB [ 2079.204690] = 10956kB [ 2079.213805] 0*4096kB = 17984kB [ 2079.213814] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2079.213857] Node 1 Normal: 94*4kB (ME) 78*8kB (ME) 71*16kB (M) 24*32kB (UME) 44*64kB (M) 27*128kB (UME) 13*256kB (M) 6*512kB (ME) 1*1024kB (E) 3*2048kB (UM) 1*4096kB (M) = 26840kB [ 2079.213927] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2079.213933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2079.213939] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2079.213945] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2079.213948] 41781 total pagecache pages [ 2079.213956] 0 pages in swap cache [ 2079.213960] Swap cache stats: add 0, delete 0, find 0/0 [ 2079.213963] Free swap = 0kB [ 2079.213966] Total swap = 0kB [ 2079.213971] 2097051 pages RAM [ 2079.213974] 0 pages HighMem/MovableOnly [ 2079.213977] 363840 pages reserved [ 2079.213979] 0 pages cma reserved [ 2079.320980] Node 0 DMA32: 998*4kB (ME) 651*8kB (UME) 309*16kB (UME) 66*32kB (UME) 13*64kB (UME) 3*128kB (UM) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17984kB [ 2079.336096] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2079.347357] Node 1 Normal: 94*4kB (ME) 78*8kB (ME) 71*16kB (M) 24*32kB (UME) 44*64kB (M) 27*128kB (UME) 13*256kB (M) 6*512kB (ME) 1*1024kB (E) 3*2048kB (UM) 1*4096kB (M) = 26840kB [ 2079.364779] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2079.373679] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2079.382252] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2079.391186] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2079.399910] 41781 total pagecache pages [ 2079.404237] 0 pages in swap cache [ 2079.407682] Swap cache stats: add 0, delete 0, find 0/0 [ 2079.413134] Free swap = 0kB [ 2079.416142] Total swap = 0kB [ 2079.419147] 2097051 pages RAM [ 2079.422237] 0 pages HighMem/MovableOnly [ 2079.426280] 363840 pages reserved [ 2079.429723] 0 pages cma reserved [ 2079.433160] Out of memory (oom_kill_allocating_task): Kill process 22187 (modprobe) score 0 or sacrifice child [ 2079.444358] Killed process 22187 (modprobe) total-vm:4188kB, anon-rss:36kB, file-rss:0kB, shmem-rss:0kB [ 2079.454285] oom_reaper: reaped process 22187 (modprobe), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2079.486461] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2079.501448] systemd-journal cpuset=/ mems_allowed=0-1 [ 2079.506710] CPU: 1 PID: 21892 Comm: systemd-journal Not tainted 4.14.214-syzkaller #0 [ 2079.514665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2079.524084] Call Trace: [ 2079.526656] dump_stack+0x1b2/0x283 [ 2079.530265] dump_header+0x178/0x82f [ 2079.533957] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2079.539037] ? ___ratelimit+0x2cd/0x522 [ 2079.542991] oom_kill_process.cold+0x10/0xb18 [ 2079.547493] out_of_memory+0xe3e/0x1190 [ 2079.551470] ? oom_killer_disable+0x1c0/0x1c0 [ 2079.555944] ? mutex_trylock+0x152/0x1a0 [ 2079.559990] __alloc_pages_nodemask+0x23e1/0x2720 [ 2079.564822] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2079.569653] alloc_pages_current+0x155/0x260 [ 2079.574040] filemap_fault+0xea3/0x1980 [ 2079.577996] ext4_filemap_fault+0x84/0xb0 [ 2079.582146] __do_fault+0xfa/0x380 [ 2079.585666] __handle_mm_fault+0x2497/0x4620 [ 2079.590052] ? ep_poll+0x1ab/0xa50 [ 2079.593581] ? vm_insert_page+0x7c0/0x7c0 [ 2079.597715] handle_mm_fault+0x391/0x860 [ 2079.601843] __do_page_fault+0x549/0xad0 [ 2079.605886] ? spurious_fault+0x640/0x640 [ 2079.610015] ? do_page_fault+0x60/0x4f2 [ 2079.613969] ? page_fault+0x2f/0x50 [ 2079.617584] page_fault+0x45/0x50 [ 2079.621017] RIP: 0001:0xffffffffffffffff [ 2079.625053] RSP: 8eb191e0:00007ffe5ac9a340 EFLAGS: 7ffe5ac9a150 [ 2079.631716] modprobe: page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 2079.652354] Mem-Info: [ 2079.655730] active_anon:17197 inactive_anon:41269 isolated_anon:0 [ 2079.655730] active_file:16 inactive_file:65 isolated_file:0 [ 2079.655730] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2079.655730] slab_reclaimable:12405 slab_unreclaimable:118703 [ 2079.655730] mapped:52600 shmem:41750 pagetables:766 bounce:0 [ 2079.655730] free:21519 free_pcp:207 free_cma:0 [ 2079.691799] modprobe cpuset=/ mems_allowed=0-1 [ 2079.696878] CPU: 1 PID: 22187 Comm: modprobe Not tainted 4.14.214-syzkaller #0 [ 2079.704236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2079.713578] Call Trace: [ 2079.716161] dump_stack+0x1b2/0x283 [ 2079.719786] warn_alloc.cold+0x96/0x1cc [ 2079.723770] ? zone_watermark_ok_safe+0x220/0x220 [ 2079.728608] ? usleep_range+0x130/0x130 [ 2079.732578] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2079.737680] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2079.742778] ? run_timer_softirq+0x5a0/0x5a0 [ 2079.747190] __alloc_pages_nodemask+0x2127/0x2720 [ 2079.752043] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2079.756900] alloc_pages_current+0x155/0x260 [ 2079.761309] filemap_fault+0xea3/0x1980 [ 2079.765291] ext4_filemap_fault+0x84/0xb0 [ 2079.769433] __do_fault+0xfa/0x380 [ 2079.772967] __handle_mm_fault+0x2497/0x4620 [ 2079.777374] ? vm_insert_page+0x7c0/0x7c0 [ 2079.781524] handle_mm_fault+0x391/0x860 [ 2079.785579] __do_page_fault+0x549/0xad0 [ 2079.789643] ? spurious_fault+0x640/0x640 [ 2079.793787] ? do_page_fault+0x60/0x4f2 [ 2079.797756] ? page_fault+0x2f/0x50 [ 2079.801475] page_fault+0x45/0x50 [ 2079.804920] RIP: 0000:0x5616350aa000 [ 2079.808618] RSP: 350ac160:00007fff11ec5c90 EFLAGS: 7fc093ed7170 [ 2079.810649] Node 0 active_anon:67700kB inactive_anon:165040kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117360kB dirty:0kB writeback:0kB shmem:166936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2079.845669] Node 1 active_anon:1088kB inactive_anon:36kB active_file:20kB inactive_file:1116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:93640kB dirty:0kB writeback:0kB shmem:64kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2079.856822] Bluetooth: hci3 command 0x041b tx timeout [ 2079.873571] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2079.905565] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2079.911137] Node 0 DMA32 free:71352kB min:36200kB low:45248kB high:54296kB active_anon:67700kB inactive_anon:165036kB active_file:44kB inactive_file:244kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2460kB bounce:0kB free_pcp:716kB local_pcp:28kB free_cma:0kB [ 2079.942765] lowmem_reserve[]: 0 0 0 0 0 [ 2079.946299] Mem-Info: [ 2079.947601] Node 0 [ 2079.949181] active_anon:17181 inactive_anon:41269 isolated_anon:0 [ 2079.949181] active_file:16 inactive_file:622 isolated_file:0 [ 2079.949181] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2079.949181] slab_reclaimable:12397 slab_unreclaimable:118320 [ 2079.949181] mapped:52936 shmem:41750 pagetables:767 bounce:0 [ 2079.949181] free:128639 free_pcp:364 free_cma:0 [ 2079.949193] Node 0 active_anon:67672kB inactive_anon:165040kB active_file:44kB inactive_file:832kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117676kB dirty:0kB writeback:0kB shmem:166936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2079.949206] Node 1 active_anon:1052kB inactive_anon:36kB active_file:20kB inactive_file:1656kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:94068kB dirty:0kB writeback:0kB shmem:64kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2079.949209] Node 0 DMA free:13112kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2079.949226] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2079.949244] Node 0 DMA32 free:70860kB min:36200kB low:45248kB high:54296kB active_anon:67672kB inactive_anon:165036kB active_file:44kB inactive_file:832kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2464kB bounce:0kB free_pcp:764kB local_pcp:684kB free_cma:0kB [ 2079.949261] lowmem_reserve[]: 0 0 0 0 0 [ 2079.949278] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2079.952210] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2079.988273] lowmem_reserve[]: [ 2080.013142] lowmem_reserve[]: [ 2080.082944] 0 [ 2080.103356] 0 [ 2080.138158] 0 [ 2080.157952] 0 0 0 0 [ 2080.173125] Node 1 Normal free:430584kB min:53696kB low:67120kB high:80544kB active_anon:1052kB inactive_anon:36kB active_file:20kB inactive_file:1656kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:604kB bounce:0kB free_pcp:692kB local_pcp:8kB free_cma:0kB [ 2080.192916] 0 0 0 [ 2080.202645] lowmem_reserve[]: 0 0 0 0 0 [ 2080.210360] Node 0 DMA: 2*4kB (ME) 4*8kB (UME) 3*16kB (UME) 1*32kB (M) 15*64kB (UME) 12*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 13112kB [ 2080.213010] Node 1 [ 2080.227101] Node 0 DMA32: 532*4kB (UME) 1492*8kB (UME) 460*16kB (UME) 165*32kB (UME) 67*64kB (UME) 28*128kB (UM) 24*256kB (U) 55*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 68880kB [ 2080.242920] Normal free:430584kB min:53696kB low:67120kB high:80544kB active_anon:1052kB inactive_anon:36kB active_file:20kB inactive_file:1656kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:604kB bounce:0kB free_pcp:692kB local_pcp:684kB free_cma:0kB [ 2080.247100] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2080.285799] Node 1 Normal: 28*4kB (UE) 225*8kB (UE) 202*16kB (UM) 185*32kB (UME) 203*64kB (UM) 102*128kB (UME) 61*256kB (UM) 46*512kB (UME) 18*1024kB (UE) 6*2048kB (UM) 79*4096kB (UM) = 430584kB [ 2080.304143] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2080.313634] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2080.316651] lowmem_reserve[]: 0 0 0 0 0 [ 2080.323011] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2080.336015] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2080.345101] 43059 total pagecache pages [ 2080.346342] Node 0 DMA: 2*4kB (ME) 4*8kB (UME) 3*16kB (UME) 1*32kB (M) 15*64kB (UME) 12*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 13112kB [ 2080.349595] 0 pages in swap cache [ 2080.373670] Swap cache stats: add 0, delete 0, find 0/0 [ 2080.379656] Free swap = 0kB [ 2080.382791] Node 0 DMA32: 439*4kB (UE) 1399*8kB (UME) 460*16kB (UME) 165*32kB (UME) 67*64kB (UME) 28*128kB (UM) 24*256kB (U) 55*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 67764kB [ 2080.386646] Total swap = 0kB [ 2080.401783] 2097051 pages RAM [ 2080.409157] 0 pages HighMem/MovableOnly [ 2080.412939] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB [ 2080.413340] 363840 pages reserved [ 2080.413397] 0*2048kB [ 2080.422177] 0 pages cma reserved [ 2080.435678] Out of memory (oom_kill_allocating_task): Kill process 21892 (systemd-journal) score 0 or sacrifice child [ 2080.442907] 0*4096kB = 0kB [ 2080.448563] Killed process 21892 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1296kB [ 2080.449304] Node 1 [ 2080.465176] oom_reaper: reaped process 21892 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1296kB [ 2080.472887] Normal: 28*4kB (UE) 225*8kB (UE) 202*16kB (UM) 185*32kB (UME) 203*64kB (UM) 102*128kB (UME) 61*256kB (UM) 46*512kB (UME) 18*1024kB (UE) 6*2048kB (UM) 79*4096kB (UM) = 430584kB [ 2080.495400] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2080.504590] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2080.513208] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2080.522042] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2080.530789] 43466 total pagecache pages [ 2080.534820] 0 pages in swap cache [ 2080.538264] Swap cache stats: add 0, delete 0, find 0/0 [ 2080.543801] Free swap = 0kB [ 2080.546822] Total swap = 0kB [ 2080.549836] 2097051 pages RAM [ 2080.553076] 0 pages HighMem/MovableOnly [ 2080.557040] 363840 pages reserved [ 2080.560482] 0 pages cma reserved [ 2080.564044] modprobe invoked oom-killer: gfp_mask=0x0(), nodemask=(null), order=0, oom_score_adj=0 [ 2080.573284] modprobe cpuset=/ mems_allowed=0-1 [ 2080.577874] CPU: 0 PID: 22187 Comm: modprobe Not tainted 4.14.214-syzkaller #0 [ 2080.585222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2080.594566] Call Trace: [ 2080.597149] dump_stack+0x1b2/0x283 [ 2080.600774] dump_header+0x178/0x82f [ 2080.604486] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2080.609586] ? ___ratelimit+0x2cd/0x522 [ 2080.613558] oom_kill_process.cold+0x10/0xb18 [ 2080.618064] out_of_memory+0xe3e/0x1190 [ 2080.622254] ? pagefault_out_of_memory+0xaa/0xc9 [ 2080.627004] ? oom_killer_disable+0x1c0/0x1c0 [ 2080.631493] ? mutex_trylock+0x152/0x1a0 [ 2080.635550] ? pagefault_out_of_memory+0xaa/0xc9 [ 2080.640300] pagefault_out_of_memory+0xbb/0xc9 [ 2080.644878] ? out_of_memory+0x1190/0x1190 [ 2080.649107] ? lock_downgrade+0x740/0x740 [ 2080.653338] mm_fault_error+0xad/0x2c0 [ 2080.657221] __do_page_fault+0x93c/0xad0 [ 2080.661275] ? spurious_fault+0x640/0x640 [ 2080.665414] ? do_page_fault+0x60/0x4f2 [ 2080.669382] ? page_fault+0x2f/0x50 [ 2080.673006] page_fault+0x45/0x50 [ 2080.676448] RIP: 0000:0x5616350aa000 [ 2080.680236] RSP: 350ac160:00007fff11ec5c90 EFLAGS: 7fc093ed7170 [ 2080.683459] Mem-Info: [ 2080.691937] active_anon:17056 inactive_anon:41269 isolated_anon:0 [ 2080.691937] active_file:66 inactive_file:1997 isolated_file:0 [ 2080.691937] unevictable:0 dirty:25 writeback:0 unstable:0 [ 2080.691937] slab_reclaimable:12397 slab_unreclaimable:118320 [ 2080.691937] mapped:53611 shmem:41750 pagetables:767 bounce:0 [ 2080.691937] free:214079 free_pcp:529 free_cma:0 [ 2080.725755] Node 0 active_anon:67172kB inactive_anon:165040kB active_file:244kB inactive_file:6532kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120276kB dirty:100kB writeback:0kB shmem:166936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2080.756898] Node 1 active_anon:1052kB inactive_anon:36kB active_file:20kB inactive_file:1656kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:94268kB dirty:0kB writeback:0kB shmem:64kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2080.784189] Node 0 DMA free:13112kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2080.811055] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2080.816816] Node 0 DMA32 free:581644kB min:36200kB low:45248kB high:54296kB active_anon:67172kB inactive_anon:165036kB active_file:344kB inactive_file:7132kB unevictable:0kB writepending:148kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2464kB bounce:0kB free_pcp:1240kB local_pcp:612kB free_cma:0kB [ 2080.847082] lowmem_reserve[]: 0 0 0 0 0 [ 2080.851432] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2080.871919] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2080.878167] lowmem_reserve[]: 0 0 0 0 0 [ 2080.889347] Node 1 Normal free:430616kB min:53696kB low:67120kB high:80544kB active_anon:620kB inactive_anon:36kB active_file:24kB inactive_file:1652kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:512kB bounce:0kB free_pcp:1132kB local_pcp:684kB free_cma:0kB [ 2080.918830] lowmem_reserve[]: 0 0 0 0 0 [ 2080.922973] Node 0 DMA: 2*4kB (ME) 4*8kB (UME) 3*16kB (UME) 1*32kB (M) 15*64kB (UME) 12*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 13112kB [ 2080.926801] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2080.938926] Node 0 DMA32: 1555*4kB (UME) 12937*8kB (UME) 12255*16kB (UME) 9960*32kB (UME) 115*64kB (UME) 31*128kB (UM) 24*256kB (UM) 55*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 670148kB [ 2080.965308] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2080.980059] Node 1 Normal: 28*4kB (UE) 225*8kB (UE) 202*16kB (UM) 186*32kB (UME) 203*64kB (UM) 102*128kB (UME) 61*256kB (UM) 46*512kB (UME) 18*1024kB (UE) 6*2048kB (UM) 79*4096kB (UM) = 430616kB [ 2080.998328] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2081.010004] systemd[1]: Stopped Journal Service. [ 2081.028835] systemd[1]: Starting Journal Service... [ 2081.033917] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2081.042483] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2081.056056] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2081.064688] 44783 total pagecache pages [ 2081.068658] 0 pages in swap cache [ 2081.072238] Swap cache stats: add 0, delete 0, find 0/0 [ 2081.077713] Free swap = 0kB [ 2081.080832] Total swap = 0kB [ 2081.083881] 2097051 pages RAM [ 2081.086971] 0 pages HighMem/MovableOnly [ 2081.090931] 363840 pages reserved [ 2081.094750] 0 pages cma reserved [ 2081.098122] Out of memory (oom_kill_allocating_task): Kill process 22187 (modprobe) score 0 or sacrifice child [ 2081.108378] Killed process 22187 (modprobe) total-vm:4188kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2081.251747] systemd-journald[22190]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2081.616504] systemd[1]: Started Journal Service. [ 2081.922968] Bluetooth: hci3 command 0x040f tx timeout 23:25:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) 23:25:54 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x9}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x9, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x0, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:25:54 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x3ca26104, 0x0, 0x9, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x9, 0x0, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:25:54 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)={0xbd, 0x7, 0x4, 0x221c, 0x5, {0x0, 0xea60}, {0x4, 0xc, 0xe8, 0xff, 0x2, 0x40, "7526bb03"}, 0x4, 0x1, @fd=r2, 0x9}) write$sndseq(r0, 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000040)={0x7ff, 0x5, 0x0, 'queue1\x00', 0xeaf9}) 23:25:54 executing program 5: nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.swap.current\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000180)={0x2, 0x3, 0x8d, 0x8, 0xff, 0x1, 0x2}, &(0x7f00000001c0)={0x8, 0xb72c, 0x7fffffff, 0x10000, 0x1, 0x7fff, 0x9a, 0x5}, &(0x7f0000000240)={0x7, 0x4, 0x400, 0x6, 0x2, 0x0, 0x0, 0x400}, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x3f]}, 0x8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100021bd7000fcdbdf25100000000500350002000000050035000500000087d6fe2f83ad157effa369633a2eb5c5296ad56858f4184aef6be24d5daa7deb7ee73d8dd807a485541e4429e02a5da4e238732a19e882e61a7a23a9700736bd233896dc8ff624207717a3099db7d4fce852e2d2ec414263b307215a6808216547a0f4cb1d6efd12884087f77c4cb1e7622d483e5f0a0c144104fcda2a1316a5213a0c3578f7b1fe19d328d634b60f53c6b751b7612021a8eff8fd446fa6d4bc1a49ef7400228860fdda51"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24008080) 23:25:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x0, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x0, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:25:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) 23:25:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) 23:25:54 executing program 3: write$sndseq(0xffffffffffffffff, 0x0, 0x0) 23:25:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x101000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) 23:25:54 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x0, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x0, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:25:54 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/icmp\x00') write$sndseq(r0, 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) write$sndseq(r1, &(0x7f0000001240)=[{0x81, 0x3, 0x9, 0x1, @time={0x9, 0x8}, {0x3, 0x6}, {0x54, 0x9}, @ext={0x99, &(0x7f0000000100)="0ba1b5c48cfce2de18e31d69b560452c9d481898192c4e4bec3c38b0e22ff91684fe0b11259b35d3335ee536047a71e4d13870db2dfbeb2142ac2366c5e2c36cb310e19129ec7eb3de07dc5c26a708bb7fcaef07f24df7f9e6c512151c54be8633a57641438e523b37244e5cff5963f2c80c0adaa2b67f3bec6288bc6747d8c5186690ebfa9434a16f0b0ba8170fd338e5c84532bb0cf6b116"}}, {0x1f, 0x0, 0x1a, 0x13, @time={0x0, 0x4}, {}, {0x0, 0x6}, @quote={{0x0, 0x6f}, 0x5, &(0x7f00000011c0)={0x43, 0x1, 0x1, 0x6, @tick=0x7, {0xff}, {0x40, 0x5}, @ext={0x1000, &(0x7f00000001c0)="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"}}}}, {0x0, 0x70, 0xaa, 0x9, @tick=0x2ac, {0x7, 0x3}, {0x80, 0x40}, @result={0x9, 0x6}}, {0x7f, 0x9f, 0x3, 0x4, @tick=0x8000000, {0x1, 0x20}, {0x7, 0x7f}, @note={0x40, 0x40, 0x6, 0x7f, 0x5}}, {0x2d, 0x2, 0x9, 0x49, @time={0xfffffffa, 0x1}, {0xe, 0x5}, {0x7, 0x1}, @ext={0x15, &(0x7f0000001200)="a950a7a8bc46a84d5030e73350c6d7a703cd1c770a"}}, {0x7, 0x6e, 0xe0, 0x5, @time={0x1, 0x401}, {0x7, 0x19}, {0x3f, 0xd3}, @raw8={"63a4e5232503c911935ee825"}}, {0x20, 0x20, 0x8d, 0x5, @time={0xffffff9b, 0x9}, {0x20, 0x3}, {0x1, 0x5}, @raw8={"91bc122d23ebcec66295ea2a"}}], 0xc4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000040)={0xdc1e, 0x7f, 0x100}) [ 2084.002791] Bluetooth: hci3 command 0x0419 tx timeout 23:25:54 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = getpid() syz_open_procfs(r1, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='projid_map\x00') write$sndseq(r0, 0x0, 0x0) 23:25:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x9}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x9, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x0, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:25:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x0, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x0, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) [ 2088.024396] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2088.037095] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2088.041862] CPU: 1 PID: 7979 Comm: syz-fuzzer Not tainted 4.14.214-syzkaller #0 [ 2088.049296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2088.058626] Call Trace: [ 2088.061191] dump_stack+0x1b2/0x283 [ 2088.064808] dump_header+0x178/0x82f [ 2088.068501] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2088.073580] ? ___ratelimit+0x2cd/0x522 [ 2088.077530] oom_kill_process.cold+0x10/0xb18 [ 2088.082043] out_of_memory+0xe3e/0x1190 [ 2088.086047] ? oom_killer_disable+0x1c0/0x1c0 [ 2088.090528] ? mutex_trylock+0x152/0x1a0 [ 2088.094577] __alloc_pages_nodemask+0x23e1/0x2720 [ 2088.099407] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2088.104370] alloc_pages_current+0x155/0x260 [ 2088.108758] filemap_fault+0xea3/0x1980 [ 2088.112715] ext4_filemap_fault+0x84/0xb0 [ 2088.116857] __do_fault+0xfa/0x380 [ 2088.120377] __handle_mm_fault+0x2497/0x4620 [ 2088.124767] ? vm_insert_page+0x7c0/0x7c0 [ 2088.128895] ? lock_downgrade+0x740/0x740 [ 2088.133029] handle_mm_fault+0x391/0x860 [ 2088.137072] __do_page_fault+0x549/0xad0 [ 2088.141115] ? spurious_fault+0x640/0x640 [ 2088.145256] ? do_page_fault+0x60/0x4f2 [ 2088.149232] ? page_fault+0x2f/0x50 [ 2088.152840] page_fault+0x45/0x50 [ 2088.156273] RIP: 0000:0xb358f8 [ 2088.159443] RSP: 2bece98a:000000c00003dec8 EFLAGS: 00438920 [ 2088.160731] Mem-Info: [ 2088.172931] active_anon:17687 inactive_anon:43300 isolated_anon:0 [ 2088.172931] active_file:24 inactive_file:0 isolated_file:0 [ 2088.172931] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2088.172931] slab_reclaimable:12467 slab_unreclaimable:121825 [ 2088.172931] mapped:52590 shmem:43797 pagetables:740 bounce:0 [ 2088.172931] free:25210 free_pcp:0 free_cma:0 [ 2088.239916] Node 0 active_anon:70328kB inactive_anon:173164kB active_file:4kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117316kB dirty:0kB writeback:0kB shmem:175124kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2088.275293] Node 1 active_anon:420kB inactive_anon:36kB active_file:0kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:93044kB dirty:0kB writeback:0kB shmem:64kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2088.302621] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2088.329197] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2088.334276] Node 0 DMA32 free:36096kB min:36200kB low:45248kB high:54296kB active_anon:68280kB inactive_anon:173160kB active_file:16kB inactive_file:196kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2468kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2088.363229] lowmem_reserve[]: 0 0 0 0 0 [ 2088.367224] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2088.392803] lowmem_reserve[]: 0 0 0 0 0 [ 2088.396795] Node 1 Normal free:53680kB min:53696kB low:67120kB high:80544kB active_anon:420kB inactive_anon:36kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:492kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2088.425205] lowmem_reserve[]: 0 0 0 0 0 [ 2088.429209] Node 0 DMA: 2*4kB (ME) 2*8kB (ME) 2*16kB (ME) 2*32kB (UM) 15*64kB (UME) 12*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 11064kB [ 2088.445560] Node 0 DMA32: 1001*4kB (ME) 730*8kB (UME) 375*16kB (UME) 111*32kB (UME) 37*64kB (ME) 13*128kB (M) 7*256kB (M) 22*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36484kB [ 2088.461229] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2088.471991] Node 1 Normal: 86*4kB (UME) 80*8kB (ME) 77*16kB (UM) 35*32kB (ME) 43*64kB (UM) 26*128kB (UME) 13*256kB (M) 8*512kB (UME) 2*1024kB (UE) 3*2048kB (UM) 7*4096kB (UM) = 53704kB [ 2088.488771] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2088.497676] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2088.516713] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2088.532747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2088.541328] 43843 total pagecache pages [ 2088.549948] 0 pages in swap cache [ 2088.553439] Swap cache stats: add 0, delete 0, find 0/0 [ 2088.558790] Free swap = 0kB [ 2088.561880] Total swap = 0kB [ 2088.572890] 2097051 pages RAM [ 2088.575993] 0 pages HighMem/MovableOnly [ 2088.579959] 363840 pages reserved [ 2088.602113] 0 pages cma reserved [ 2088.605488] Out of memory (oom_kill_allocating_task): Kill process 7979 (syz-fuzzer) score 0 or sacrifice child [ 2088.621630] Killed process 21954 (syz-executor.2) total-vm:85024kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 2088.717458] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2088.735109] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2088.739901] CPU: 1 PID: 7979 Comm: syz-fuzzer Not tainted 4.14.214-syzkaller #0 [ 2088.747348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2088.756702] Call Trace: [ 2088.759286] dump_stack+0x1b2/0x283 [ 2088.762908] dump_header+0x178/0x82f [ 2088.766619] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2088.771709] ? ___ratelimit+0x2cd/0x522 [ 2088.775675] oom_kill_process.cold+0x10/0xb18 [ 2088.780258] out_of_memory+0xe3e/0x1190 [ 2088.784231] ? oom_killer_disable+0x1c0/0x1c0 [ 2088.788720] ? mutex_trylock+0x152/0x1a0 [ 2088.792767] __alloc_pages_nodemask+0x23e1/0x2720 [ 2088.797589] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2088.802424] alloc_pages_current+0x155/0x260 [ 2088.806837] filemap_fault+0xea3/0x1980 [ 2088.810794] ext4_filemap_fault+0x84/0xb0 [ 2088.814917] __do_fault+0xfa/0x380 [ 2088.818431] __handle_mm_fault+0x2497/0x4620 [ 2088.822816] ? vm_insert_page+0x7c0/0x7c0 [ 2088.826940] ? lock_downgrade+0x740/0x740 [ 2088.831068] handle_mm_fault+0x391/0x860 [ 2088.835241] __do_page_fault+0x549/0xad0 [ 2088.839279] ? spurious_fault+0x640/0x640 [ 2088.843404] ? do_page_fault+0x60/0x4f2 [ 2088.847353] ? page_fault+0x2f/0x50 [ 2088.850954] page_fault+0x45/0x50 [ 2088.854382] RIP: 0000:0xb358f8 [ 2088.857547] RSP: 2bece98a:000000c00003dec8 EFLAGS: 00438920 [ 2088.862823] Mem-Info: [ 2088.870945] active_anon:17660 inactive_anon:43300 isolated_anon:0 [ 2088.870945] active_file:32 inactive_file:17 isolated_file:0 [ 2088.870945] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2088.870945] slab_reclaimable:12467 slab_unreclaimable:121825 [ 2088.870945] mapped:52590 shmem:43797 pagetables:691 bounce:0 [ 2088.870945] free:25201 free_pcp:0 free_cma:0 [ 2088.908173] Node 0 active_anon:70236kB inactive_anon:173164kB active_file:140kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117320kB dirty:0kB writeback:0kB shmem:175124kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2088.936380] Node 1 active_anon:404kB inactive_anon:36kB active_file:116kB inactive_file:268kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:93164kB dirty:0kB writeback:0kB shmem:64kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2088.965244] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2088.992264] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2088.997299] Node 0 DMA32 free:35900kB min:36200kB low:45248kB high:54296kB active_anon:68188kB inactive_anon:173160kB active_file:48kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7104kB pagetables:2444kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB [ 2089.026228] lowmem_reserve[]: 0 0 0 0 0 [ 2089.030239] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2089.055851] lowmem_reserve[]: 0 0 0 0 0 [ 2089.059954] Node 1 Normal free:53296kB min:53696kB low:67120kB high:80544kB active_anon:404kB inactive_anon:36kB active_file:32kB inactive_file:128kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:320kB bounce:0kB free_pcp:88kB local_pcp:0kB free_cma:0kB [ 2089.088751] lowmem_reserve[]: 0 0 0 0 0 [ 2089.092803] Node 0 DMA: 2*4kB (ME) 2*8kB (ME) 2*16kB (ME) 2*32kB (UM) 15*64kB (UME) 12*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 11064kB [ 2089.108544] Node 0 DMA32: 1017*4kB (UME) 737*8kB (UME) 378*16kB (UME) 110*32kB (UME) 38*64kB (UME) 13*128kB (M) 8*256kB (UM) 20*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 35916kB [ 2089.124817] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2089.135520] Node 1 Normal: 64*4kB (ME) 75*8kB (ME) 73*16kB (UM) 40*32kB (UME) 42*64kB (M) 25*128kB (ME) 14*256kB (UM) 7*512kB (ME) 2*1024kB (UE) 3*2048kB (UM) 7*4096kB (UM) = 53224kB [ 2089.152002] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2089.160868] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2089.169470] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2089.178327] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2089.186938] 43823 total pagecache pages [ 2089.191372] 0 pages in swap cache [ 2089.194870] Swap cache stats: add 0, delete 0, find 0/0 [ 2089.200216] Free swap = 0kB [ 2089.205414] Total swap = 0kB [ 2089.208422] 2097051 pages RAM [ 2089.211499] 0 pages HighMem/MovableOnly [ 2089.215475] 363840 pages reserved [ 2089.218902] 0 pages cma reserved [ 2089.224350] Out of memory (oom_kill_allocating_task): Kill process 7979 (syz-fuzzer) score 0 or sacrifice child [ 2089.234668] Killed process 19207 (syz-executor.1) total-vm:85024kB, anon-rss:64kB, file-rss:4kB, shmem-rss:0kB [ 2089.257037] oom_reaper: reaped process 19207 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2089.274186] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2089.292922] systemd-journal cpuset=/ mems_allowed=0-1 [ 2089.298161] CPU: 0 PID: 22190 Comm: systemd-journal Not tainted 4.14.214-syzkaller #0 [ 2089.306230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2089.315677] Call Trace: [ 2089.318257] dump_stack+0x1b2/0x283 [ 2089.321917] dump_header+0x178/0x82f [ 2089.325624] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2089.330846] ? ___ratelimit+0x2cd/0x522 [ 2089.334815] oom_kill_process.cold+0x10/0xb18 [ 2089.339305] out_of_memory+0xe3e/0x1190 [ 2089.343260] ? oom_killer_disable+0x1c0/0x1c0 [ 2089.347735] ? mutex_trylock+0x152/0x1a0 [ 2089.351779] __alloc_pages_nodemask+0x23e1/0x2720 [ 2089.356631] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2089.361475] alloc_pages_current+0x155/0x260 [ 2089.365889] filemap_fault+0xea3/0x1980 [ 2089.369844] ext4_filemap_fault+0x84/0xb0 [ 2089.374064] __do_fault+0xfa/0x380 [ 2089.377589] __handle_mm_fault+0x2497/0x4620 [ 2089.381976] ? ep_poll+0x1ab/0xa50 [ 2089.385494] ? vm_insert_page+0x7c0/0x7c0 [ 2089.389627] handle_mm_fault+0x391/0x860 [ 2089.393689] __do_page_fault+0x549/0xad0 [ 2089.397746] ? spurious_fault+0x640/0x640 [ 2089.401887] ? do_page_fault+0x60/0x4f2 [ 2089.405880] ? page_fault+0x2f/0x50 [ 2089.409482] page_fault+0x45/0x50 [ 2089.412916] RIP: 0001:0x1 [ 2089.415655] RSP: 49b511e0:00007ffce3433a50 EFLAGS: 7ffce3433860 [ 2089.423593] Mem-Info: [ 2089.432275] active_anon:17624 inactive_anon:43300 isolated_anon:0 [ 2089.432275] active_file:163 inactive_file:835 isolated_file:0 [ 2089.432275] unevictable:0 dirty:19 writeback:0 unstable:0 [ 2089.432275] slab_reclaimable:12463 slab_unreclaimable:121655 [ 2089.432275] mapped:44518 shmem:43797 pagetables:642 bounce:0 [ 2089.432275] free:25315 free_pcp:3 free_cma:0 [ 2089.482418] Node 0 active_anon:70100kB inactive_anon:173164kB active_file:48kB inactive_file:136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117316kB dirty:8kB writeback:0kB shmem:175124kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2089.510983] Node 1 active_anon:396kB inactive_anon:36kB active_file:252kB inactive_file:288kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58556kB dirty:68kB writeback:0kB shmem:64kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2089.538226] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2089.564924] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2089.569973] Node 0 DMA32 free:36064kB min:36200kB low:45248kB high:54296kB active_anon:68052kB inactive_anon:173160kB active_file:132kB inactive_file:200kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7072kB pagetables:2420kB bounce:0kB free_pcp:400kB local_pcp:232kB free_cma:0kB [ 2089.599249] lowmem_reserve[]: 0 0 0 0 0 [ 2089.603298] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2089.628920] lowmem_reserve[]: 0 0 0 0 0 [ 2089.633009] Node 1 Normal free:53268kB min:53696kB low:67120kB high:80544kB active_anon:396kB inactive_anon:36kB active_file:1220kB inactive_file:1568kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:148kB bounce:0kB free_pcp:504kB local_pcp:80kB free_cma:0kB [ 2089.661905] lowmem_reserve[]: 0 0 0 0 0 [ 2089.665978] Node 0 DMA: 2*4kB (ME) 2*8kB (ME) 2*16kB (ME) 2*32kB (UM) 15*64kB (UME) 12*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 11064kB [ 2089.681784] Node 0 DMA32: 926*4kB (UME) 747*8kB (UME) 395*16kB (UME) 115*32kB (UME) 39*64kB (UME) 13*128kB (M) 8*256kB (UM) 20*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36128kB [ 2089.709898] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2089.731273] Node 1 Normal: 90*4kB (UME) 87*8kB (UME) 79*16kB (UM) 78*32kB (UME) 36*64kB (UM) 28*128kB (UME) 14*256kB (UM) 8*512kB (ME) 2*1024kB (UE) 3*2048kB (UM) 7*4096kB (UM) = 55248kB [ 2089.760148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2089.769526] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2089.789567] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2089.801870] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2089.812655] 44005 total pagecache pages [ 2089.817029] 0 pages in swap cache [ 2089.820855] Swap cache stats: add 0, delete 0, find 0/0 [ 2089.850316] Free swap = 0kB [ 2089.853406] Total swap = 0kB [ 2089.859043] 2097051 pages RAM [ 2089.866391] 0 pages HighMem/MovableOnly [ 2089.870366] 363840 pages reserved [ 2089.875181] 0 pages cma reserved [ 2089.878549] Out of memory (oom_kill_allocating_task): Kill process 22190 (systemd-journal) score 0 or sacrifice child [ 2089.895040] Killed process 22190 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1296kB [ 2090.113409] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2090.140162] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2090.172596] CPU: 1 PID: 7998 Comm: syz-fuzzer Not tainted 4.14.214-syzkaller #0 [ 2090.180067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2090.189418] Call Trace: [ 2090.192002] dump_stack+0x1b2/0x283 [ 2090.195627] dump_header+0x178/0x82f [ 2090.199334] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2090.204428] ? ___ratelimit+0x2cd/0x522 [ 2090.208397] oom_kill_process.cold+0x10/0xb18 [ 2090.212889] out_of_memory+0xe3e/0x1190 [ 2090.216859] ? oom_killer_disable+0x1c0/0x1c0 [ 2090.221342] ? mutex_trylock+0x152/0x1a0 [ 2090.225394] __alloc_pages_nodemask+0x23e1/0x2720 [ 2090.230238] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2090.235087] alloc_pages_current+0x155/0x260 [ 2090.239493] filemap_fault+0xea3/0x1980 [ 2090.243470] ext4_filemap_fault+0x84/0xb0 [ 2090.247607] __do_fault+0xfa/0x380 [ 2090.251138] __handle_mm_fault+0x2497/0x4620 [ 2090.255538] ? vm_insert_page+0x7c0/0x7c0 [ 2090.259689] handle_mm_fault+0x391/0x860 [ 2090.263745] __do_page_fault+0x549/0xad0 [ 2090.267801] ? spurious_fault+0x640/0x640 [ 2090.271949] ? do_page_fault+0x60/0x4f2 [ 2090.275914] ? page_fault+0x2f/0x50 [ 2090.279528] page_fault+0x45/0x50 [ 2090.282969] RIP: ad800:0x1e6b4c921e6 [ 2090.286683] RSP: 0140:000000c000623e30 EFLAGS: 00000003 [ 2090.286858] Mem-Info: [ 2090.294687] active_anon:17510 inactive_anon:43299 isolated_anon:0 [ 2090.294687] active_file:46 inactive_file:20 isolated_file:0 [ 2090.294687] unevictable:0 dirty:3 writeback:0 unstable:0 [ 2090.294687] slab_reclaimable:12472 slab_unreclaimable:121115 [ 2090.294687] mapped:43521 shmem:43797 pagetables:617 bounce:0 [ 2090.294687] free:25027 free_pcp:1 free_cma:0 [ 2090.328562] Node 0 active_anon:69636kB inactive_anon:173160kB active_file:152kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115860kB dirty:4kB writeback:0kB shmem:175124kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2090.356756] Node 1 active_anon:404kB inactive_anon:36kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58224kB dirty:8kB writeback:0kB shmem:64kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2090.383391] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2090.409902] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2090.415012] Node 0 DMA32 free:35628kB min:36200kB low:45248kB high:54296kB active_anon:67588kB inactive_anon:173156kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7072kB pagetables:2320kB bounce:0kB free_pcp:20kB local_pcp:0kB free_cma:0kB [ 2090.552432] lowmem_reserve[]: 0 0 0 0 0 [ 2090.553553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2090.556466] Node 0 [ 2090.597293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2090.623259] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2090.677768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2090.717740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2090.737120] device bridge_slave_1 left promiscuous mode [ 2090.740832] lowmem_reserve[]: 0 0 0 0 0 [ 2090.746574] Node 1 Normal free:53416kB min:53696kB low:67120kB high:80544kB active_anon:404kB inactive_anon:36kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2090.803585] bridge0: port 2(bridge_slave_1) entered disabled state [ 2090.838004] device bridge_slave_0 left promiscuous mode [ 2090.868426] bridge0: port 1(bridge_slave_0) entered disabled state [ 2090.897087] lowmem_reserve[]: 0 0 0 0 0 [ 2090.901748] Node 0 DMA: 2*4kB (ME) 2*8kB (ME) 2*16kB (ME) 2*32kB (UM) 15*64kB (UME) 12*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 11064kB [ 2090.918275] Node 0 DMA32: 875*4kB (UME) 733*8kB (UME) 381*16kB (ME) 116*32kB (ME) 39*64kB (ME) 13*128kB (UM) 5*256kB (M) 20*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 35876kB [ 2090.934354] device veth1_macvtap left promiscuous mode [ 2090.934378] device veth0_macvtap left promiscuous mode [ 2090.939931] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2090.948427] device veth1_vlan left promiscuous mode [ 2090.956875] Node 1 Normal: 16*4kB (UME) 75*8kB (UM) 72*16kB (UME) 37*32kB (UM) 39*64kB (UM) 28*128kB (UME) 14*256kB (UM) 8*512kB (ME) 2*1024kB (UE) 3*2048kB (UM) 7*4096kB (UM) = 53624kB [ 2090.961449] device veth0_vlan left promiscuous mode [ 2090.978680] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2090.993426] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2091.002052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2091.010878] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2091.020162] 43954 total pagecache pages [ 2091.024190] 0 pages in swap cache [ 2091.027632] Swap cache stats: add 0, delete 0, find 0/0 [ 2091.033107] Free swap = 0kB [ 2091.036116] Total swap = 0kB [ 2091.039123] 2097051 pages RAM [ 2091.042322] 0 pages HighMem/MovableOnly [ 2091.046281] 363840 pages reserved [ 2091.049717] 0 pages cma reserved [ 2091.053120] Out of memory (oom_kill_allocating_task): Kill process 7998 (syz-fuzzer) score 0 or sacrifice child [ 2091.063556] Killed process 15442 (syz-executor.3) total-vm:85024kB, anon-rss:64kB, file-rss:4kB, shmem-rss:0kB [ 2091.081283] oom_reaper: reaped process 15442 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2091.350264] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2091.404194] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2091.408976] CPU: 1 PID: 7998 Comm: syz-fuzzer Not tainted 4.14.214-syzkaller #0 [ 2091.416413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2091.425846] Call Trace: [ 2091.428427] dump_stack+0x1b2/0x283 [ 2091.432046] dump_header+0x178/0x82f [ 2091.435752] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2091.440847] ? ___ratelimit+0x2cd/0x522 [ 2091.444816] oom_kill_process.cold+0x10/0xb18 [ 2091.449311] out_of_memory+0xe3e/0x1190 [ 2091.453282] ? oom_killer_disable+0x1c0/0x1c0 [ 2091.457765] ? mutex_trylock+0x152/0x1a0 [ 2091.461818] __alloc_pages_nodemask+0x23e1/0x2720 [ 2091.466664] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2091.471513] alloc_pages_current+0x155/0x260 [ 2091.475913] filemap_fault+0xea3/0x1980 [ 2091.479895] ext4_filemap_fault+0x84/0xb0 [ 2091.484035] __do_fault+0xfa/0x380 [ 2091.487565] __handle_mm_fault+0x2497/0x4620 [ 2091.491967] ? vm_insert_page+0x7c0/0x7c0 [ 2091.496117] handle_mm_fault+0x391/0x860 [ 2091.500170] __do_page_fault+0x549/0xad0 [ 2091.504230] ? spurious_fault+0x640/0x640 [ 2091.508548] ? do_page_fault+0x60/0x4f2 [ 2091.512511] ? page_fault+0x2f/0x50 [ 2091.516746] page_fault+0x45/0x50 [ 2091.520189] RIP: ad800:0x1e6b4c921e6 [ 2091.523917] RSP: 0140:000000c000623e30 EFLAGS: 00000003 [ 2091.568316] Mem-Info: [ 2091.611998] active_anon:17623 inactive_anon:43295 isolated_anon:0 [ 2091.611998] active_file:13 inactive_file:0 isolated_file:0 [ 2091.611998] unevictable:0 dirty:0 writeback:4 unstable:0 [ 2091.611998] slab_reclaimable:12473 slab_unreclaimable:121066 [ 2091.611998] mapped:34818 shmem:43793 pagetables:592 bounce:0 [ 2091.611998] free:25041 free_pcp:1 free_cma:0 [ 2091.692070] Node 0 active_anon:70088kB inactive_anon:173156kB active_file:48kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:81048kB dirty:0kB writeback:16kB shmem:175120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2091.741844] Node 1 active_anon:404kB inactive_anon:24kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58224kB dirty:0kB writeback:0kB shmem:52kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2091.858881] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2091.977101] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2092.005279] Node 0 DMA32 free:36092kB min:36200kB low:45248kB high:54296kB active_anon:68124kB inactive_anon:173156kB active_file:164kB inactive_file:84kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2460kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2092.148897] lowmem_reserve[]: 0 0 0 0 0 [ 2092.187187] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2092.255195] lowmem_reserve[]: 0 0 0 0 0 [ 2092.259225] Node 1 Normal free:53436kB min:53696kB low:67120kB high:80544kB active_anon:400kB inactive_anon:20kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2092.287266] lowmem_reserve[]: 0 0 0 0 0 [ 2092.291265] Node 0 DMA: 1*4kB (E) 1*8kB (E) 1*16kB (E) 1*32kB (U) 14*64kB (UE) 11*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 11068kB [ 2092.307095] Node 0 DMA32: 784*4kB (UME) 727*8kB (UME) 396*16kB (UME) 121*32kB (UME) 45*64kB (UME) 14*128kB (UM) 6*256kB (UM) 19*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 36120kB [ 2092.323488] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2092.334249] Node 1 Normal: 71*4kB (ME) 68*8kB (M) 66*16kB (UME) 37*32kB (M) 37*64kB (UM) 27*128kB (UME) 12*256kB (UM) 9*512kB (ME) 2*1024kB (UE) 3*2048kB (UM) 7*4096kB (UM) = 53436kB [ 2092.350808] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2092.368361] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2092.443020] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2092.488896] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2092.524324] 43831 total pagecache pages [ 2092.528324] 0 pages in swap cache [ 2092.541614] Swap cache stats: add 0, delete 0, find 0/0 [ 2092.547150] Free swap = 0kB [ 2092.550168] Total swap = 0kB [ 2092.584414] 2097051 pages RAM [ 2092.587543] 0 pages HighMem/MovableOnly [ 2092.591506] 363840 pages reserved [ 2092.643833] 0 pages cma reserved [ 2092.647226] Out of memory (oom_kill_allocating_task): Kill process 7998 (syz-fuzzer) score 0 or sacrifice child [ 2092.704753] Killed process 18133 (syz-executor.5) total-vm:85024kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 2092.766350] oom_reaper: reaped process 18133 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2092.809320] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2092.868303] systemd-udevd cpuset=/ mems_allowed=0-1 [ 2092.886493] CPU: 1 PID: 22280 Comm: systemd-udevd Not tainted 4.14.214-syzkaller #0 [ 2092.894312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2092.903664] Call Trace: [ 2092.906258] dump_stack+0x1b2/0x283 [ 2092.909889] dump_header+0x178/0x82f [ 2092.913588] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2092.918670] ? ___ratelimit+0x2cd/0x522 [ 2092.922624] oom_kill_process.cold+0x10/0xb18 [ 2092.927098] out_of_memory+0xe3e/0x1190 [ 2092.931049] ? oom_killer_disable+0x1c0/0x1c0 [ 2092.935519] ? mutex_trylock+0x152/0x1a0 [ 2092.939557] __alloc_pages_nodemask+0x23e1/0x2720 [ 2092.944381] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2092.949209] alloc_pages_current+0x155/0x260 [ 2092.953595] filemap_fault+0xea3/0x1980 [ 2092.957549] ext4_filemap_fault+0x84/0xb0 [ 2092.961677] __do_fault+0xfa/0x380 [ 2092.965200] __handle_mm_fault+0x2497/0x4620 [ 2092.969585] ? vm_insert_page+0x7c0/0x7c0 [ 2092.973738] ? lock_acquire+0x170/0x3f0 [ 2092.977687] ? task_work_run+0xfd/0x190 [ 2092.981638] handle_mm_fault+0x391/0x860 [ 2092.985679] __do_page_fault+0x549/0xad0 [ 2092.989717] ? spurious_fault+0x640/0x640 [ 2092.993862] ? do_page_fault+0x60/0x4f2 [ 2092.997814] ? page_fault+0x2f/0x50 [ 2093.001416] page_fault+0x45/0x50 [ 2093.004862] RIP: 35e74d02:0x556036a9761c [ 2093.008914] RSP: 36a97612:0000556036a94840 EFLAGS: 7fffd3c732b0 [ 2093.010561] Mem-Info: [ 2093.023149] active_anon:17604 inactive_anon:43294 isolated_anon:0 [ 2093.023149] active_file:223 inactive_file:295 isolated_file:8 [ 2093.023149] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2093.023149] slab_reclaimable:12475 slab_unreclaimable:120588 [ 2093.023149] mapped:26545 shmem:43791 pagetables:603 bounce:0 [ 2093.023149] free:25253 free_pcp:198 free_cma:0 [ 2093.059341] Node 0 active_anon:70048kB inactive_anon:173156kB active_file:396kB inactive_file:620kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46556kB dirty:0kB writeback:0kB shmem:175120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2093.088918] Node 1 active_anon:368kB inactive_anon:20kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58224kB dirty:0kB writeback:0kB shmem:44kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2093.125827] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2093.162429] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2093.167499] Node 0 DMA32 free:36168kB min:36200kB low:45248kB high:54296kB active_anon:68004kB inactive_anon:173156kB active_file:236kB inactive_file:524kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2268kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2093.220540] lowmem_reserve[]: 0 0 0 0 0 [ 2093.224634] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2093.367246] lowmem_reserve[]: 0 0 0 0 0 [ 2093.371284] Node 1 Normal free:53476kB min:53696kB low:67120kB high:80544kB active_anon:368kB inactive_anon:20kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:144kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2093.599805] lowmem_reserve[]: 0 0 0 0 0 [ 2093.628156] Node 0 DMA: 1*4kB (E) 2*8kB (UE) 1*16kB (E) 1*32kB (U) 14*64kB (UE) 11*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 11076kB [ 2093.643646] Node 0 DMA32: 722*4kB (UME) 727*8kB (UME) 395*16kB (UME) 126*32kB (UME) 49*64kB (UME) 16*128kB (UM) 5*256kB (M) 20*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 36784kB [ 2093.659942] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2093.670901] Node 1 Normal: 66*4kB (UME) 60*8kB (M) 58*16kB (UME) 33*32kB (M) 33*64kB (UM) 26*128kB (UME) 11*256kB (UM) 11*512kB (ME) 2*1024kB (UE) 3*2048kB (UM) 7*4096kB (UM) = 53480kB [ 2093.687888] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2093.696909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2093.706420] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2093.715669] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2093.724509] 43966 total pagecache pages [ 2093.728660] 0 pages in swap cache [ 2093.732388] Swap cache stats: add 0, delete 0, find 0/0 [ 2093.738020] Free swap = 0kB [ 2093.741120] Total swap = 0kB [ 2093.744391] 2097051 pages RAM [ 2093.747687] 0 pages HighMem/MovableOnly [ 2093.751860] 363840 pages reserved [ 2093.755311] 0 pages cma reserved [ 2093.758669] Out of memory (oom_kill_allocating_task): Kill process 22280 (systemd-udevd) score 0 or sacrifice child [ 2093.770179] Killed process 22280 (systemd-udevd) total-vm:45488kB, anon-rss:2632kB, file-rss:0kB, shmem-rss:0kB [ 2093.781370] oom_reaper: reaped process 22280 (systemd-udevd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2093.950126] oom_reaper: reaped process 22211 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2094.090948] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2094.110093] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2094.115271] CPU: 1 PID: 18136 Comm: syz-executor.5 Not tainted 4.14.214-syzkaller #0 [ 2094.123142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2094.132507] Call Trace: [ 2094.135104] dump_stack+0x1b2/0x283 [ 2094.138734] dump_header+0x178/0x82f [ 2094.142450] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2094.147549] ? ___ratelimit+0x2cd/0x522 [ 2094.151517] oom_kill_process.cold+0x10/0xb18 [ 2094.156022] ? lock_downgrade+0x740/0x740 [ 2094.160174] out_of_memory+0x2dc/0x1190 [ 2094.164152] ? oom_killer_disable+0x1c0/0x1c0 [ 2094.168637] ? mutex_trylock+0x152/0x1a0 [ 2094.172683] __alloc_pages_nodemask+0x23e1/0x2720 [ 2094.177510] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2094.182337] ? cache_grow_begin+0x41/0x630 [ 2094.186547] cache_grow_begin+0x91/0x630 [ 2094.190582] ? cache_grow_begin+0x91/0x630 [ 2094.194920] fallback_alloc+0x207/0x2c0 [ 2094.198872] kmem_cache_alloc_trace+0x1f1/0x3d0 [ 2094.203518] ? dev_uevent_filter+0xd0/0xd0 [ 2094.207728] kobject_uevent_env+0x20c/0xf40 [ 2094.212026] ? wait_for_completion_io+0x10/0x10 [ 2094.216668] ? is_acpi_device_node+0x5b/0x70 [ 2094.221052] device_del+0x642/0xa80 [ 2094.224657] ? __device_links_no_driver+0x1b0/0x1b0 [ 2094.229651] ? hci_sock_dev_event+0x82/0x5f0 [ 2094.234037] rfkill_unregister+0xcc/0x2b0 [ 2094.238286] hci_unregister_dev+0x266/0x8c0 [ 2094.242601] ? fcntl_setlk+0xdb0/0xdb0 [ 2094.246464] ? vhci_close_dev+0x50/0x50 [ 2094.250411] vhci_release+0x70/0xe0 [ 2094.254123] __fput+0x25f/0x7a0 [ 2094.257380] task_work_run+0x11f/0x190 [ 2094.261359] do_exit+0xa44/0x2850 [ 2094.264790] ? mm_update_next_owner+0x5b0/0x5b0 [ 2094.269431] ? get_signal+0x323/0x1ca0 [ 2094.273306] ? lock_acquire+0x170/0x3f0 [ 2094.277258] ? lock_downgrade+0x740/0x740 [ 2094.281382] do_group_exit+0x100/0x2e0 [ 2094.285250] get_signal+0x38d/0x1ca0 [ 2094.288944] do_signal+0x7c/0x1550 [ 2094.292464] ? __vfs_read+0xec/0x620 [ 2094.296160] ? vfs_copy_file_range+0x9b0/0x9b0 [ 2094.300768] ? setup_sigcontext+0x820/0x820 [ 2094.305069] ? rw_verify_area+0xe1/0x2a0 [ 2094.309108] ? vfs_read+0x104/0x340 [ 2094.312712] ? exit_to_usermode_loop+0x41/0x200 [ 2094.317376] exit_to_usermode_loop+0x160/0x200 [ 2094.321942] do_syscall_64+0x4a3/0x640 [ 2094.325811] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2094.330978] RIP: 0033:0x417b11 [ 2094.334144] RSP: 002b:00007ffcdd4a08a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 2094.341828] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 0000000000417b11 [ 2094.349074] RDX: 0000000000000050 RSI: 0000000001198080 RDI: 00000000000000f9 [ 2094.356321] RBP: 00000000001fcfef R08: 00000000000003b8 R09: 0000000000004000 [ 2094.363565] R10: 000000000074c640 R11: 0000000000000293 R12: 0000000000000076 [ 2094.370809] R13: 0000000000000000 R14: 0000000000000032 R15: 00000000001fcca2 [ 2094.387088] Mem-Info: [ 2094.389514] active_anon:17023 inactive_anon:43294 isolated_anon:0 [ 2094.389514] active_file:5 inactive_file:28 isolated_file:0 [ 2094.389514] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2094.389514] slab_reclaimable:12477 slab_unreclaimable:120634 [ 2094.389514] mapped:17432 shmem:43791 pagetables:584 bounce:0 [ 2094.389514] free:13819 free_pcp:60 free_cma:0 [ 2094.399140] syz-executor.2: [ 2094.430595] Node 0 active_anon:67724kB inactive_anon:173156kB active_file:80kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46304kB dirty:0kB writeback:0kB shmem:175120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2094.439733] vmalloc: allocation failure, allocated 516288512 of 1073745920 bytes [ 2094.469333] Node 1 active_anon:368kB inactive_anon:20kB active_file:0kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23424kB dirty:0kB writeback:0kB shmem:44kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2094.477860] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 2094.511483] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2094.519916] (null) [ 2094.551882] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2094.556917] Node 0 DMA32 free:17492kB min:36200kB low:45248kB high:54296kB active_anon:67848kB inactive_anon:173156kB active_file:44kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7104kB pagetables:2192kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 2094.562316] syz-executor.2 cpuset= [ 2094.597803] lowmem_reserve[]: [ 2094.599403] / [ 2094.601340] 0 [ 2094.608153] mems_allowed=0-1 [ 2094.609878] 0 [ 2094.609951] CPU: 0 PID: 22211 Comm: syz-executor.2 Not tainted 4.14.214-syzkaller #0 [ 2094.619796] 0 [ 2094.622700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2094.622704] Call Trace: [ 2094.622726] dump_stack+0x1b2/0x283 [ 2094.622741] warn_alloc.cold+0x96/0x1cc [ 2094.622750] ? zone_watermark_ok_safe+0x220/0x220 [ 2094.622772] __vmalloc_area_node+0x48a/0x680 [ 2094.627950] 0 [ 2094.633890] ? __vmalloc_node_range+0x150/0x150 [ 2094.633900] ? __get_vm_area_node+0x27d/0x340 [ 2094.633913] __vmalloc_node_range+0xbe/0x150 [ 2094.633927] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2094.633934] vmalloc_user+0x47/0xa0 [ 2094.633943] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2094.646978] 0 [ 2094.648886] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2094.659702] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2094.670787] Node 0 [ 2094.673904] __vb2_queue_alloc+0x47a/0xd90 [ 2094.673925] vb2_core_create_bufs+0x279/0x5a0 [ 2094.673935] ? __vb2_queue_free+0x7a0/0x7a0 [ 2094.673949] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2094.673959] ? trace_hardirqs_on+0x10/0x10 [ 2094.680981] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2094.681864] vb2_create_bufs+0x2e1/0x5b0 [ 2094.681877] ? vb2_thread_start.cold+0x24/0x24 [ 2094.681885] ? trace_hardirqs_on+0x10/0x10 [ 2094.681901] v4l_create_bufs+0xa4/0x150 [ 2094.681912] __video_do_ioctl+0x65b/0x6a0 [ 2094.681924] ? video_ioctl2+0x30/0x30 [ 2094.690341] lowmem_reserve[]: [ 2094.693180] ? __might_fault+0x177/0x1b0 [ 2094.693193] video_usercopy+0xf5/0xe90 [ 2094.693204] ? video_ioctl2+0x30/0x30 [ 2094.693213] ? v4l_g_ctrl+0x390/0x390 [ 2094.693226] ? lock_acquire+0x170/0x3f0 [ 2094.698854] 0 [ 2094.699657] ? trace_hardirqs_on+0x10/0x10 [ 2094.710757] 0 [ 2094.713787] ? trace_hardirqs_on+0x10/0x10 [ 2094.713798] ? futex_exit_release+0x220/0x220 [ 2094.713809] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2094.713821] ? __might_fault+0x104/0x1b0 [ 2094.713834] v4l2_ioctl+0x1bb/0x2f0 [ 2094.728114] 0 [ 2094.743043] ? v4l2_open+0x2f0/0x2f0 [ 2094.743055] do_vfs_ioctl+0x75a/0xff0 [ 2094.743066] ? ioctl_preallocate+0x1a0/0x1a0 [ 2094.743075] ? lock_downgrade+0x740/0x740 [ 2094.743087] ? __fget+0x225/0x360 [ 2094.743097] ? do_vfs_ioctl+0xff0/0xff0 [ 2094.743109] ? security_file_ioctl+0x83/0xb0 [ 2094.743119] SyS_ioctl+0x7f/0xb0 [ 2094.743126] ? do_vfs_ioctl+0xff0/0xff0 [ 2094.743136] do_syscall_64+0x1d5/0x640 [ 2094.743151] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2094.757311] 0 [ 2094.759924] RIP: 0033:0x45e219 [ 2094.765811] 0 [ 2094.767825] RSP: 002b:00007f482afd3c68 EFLAGS: 00000246 [ 2094.774938] ORIG_RAX: 0000000000000010 [ 2094.774944] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2094.774949] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 2094.774953] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2094.774958] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2094.774963] R13: 00007ffea49f4d7f R14: 00007f482afd49c0 R15: 000000000119bf8c [ 2094.795233] Mem-Info: [ 2094.802379] Node 1 [ 2094.816121] active_anon:17023 inactive_anon:43294 isolated_anon:0 [ 2094.816121] active_file:0 inactive_file:25 isolated_file:0 [ 2094.816121] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2094.816121] slab_reclaimable:12477 slab_unreclaimable:120634 [ 2094.816121] mapped:17432 shmem:43791 pagetables:584 bounce:0 [ 2094.816121] free:13819 free_pcp:58 free_cma:0 [ 2094.819588] Normal free:26820kB min:53696kB low:67120kB high:80544kB active_anon:368kB inactive_anon:20kB active_file:0kB inactive_file:64kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:144kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2094.819819] Node 0 active_anon:67724kB inactive_anon:173156kB active_file:56kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46304kB dirty:0kB writeback:0kB shmem:175120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2094.823387] lowmem_reserve[]: [ 2094.838071] Node 1 active_anon:368kB inactive_anon:20kB active_file:0kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23424kB dirty:0kB writeback:0kB shmem:44kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2094.844906] 0 [ 2094.855064] Node 0 [ 2094.858313] 0 [ 2094.860744] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2094.869313] 0 [ 2094.887143] lowmem_reserve[]: [ 2094.894477] 0 [ 2094.907633] 0 [ 2094.914923] 0 [ 2094.930084] 2717 [ 2095.000883] 2718 [ 2095.016960] Node 0 [ 2095.046585] 2718 [ 2095.065739] DMA: [ 2095.078274] 2718 [ 2095.096829] 2*4kB (UM) 3*8kB (UME) 2*16kB (ME) 1*32kB (M) 2*64kB (ME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10976kB [ 2095.122284] Node 0 DMA32 free:17556kB min:36200kB low:45248kB high:54296kB active_anon:67696kB inactive_anon:173156kB active_file:28kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7104kB pagetables:2188kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2095.129730] Node 0 [ 2095.159439] lowmem_reserve[]: 0 0 0 0 0 [ 2095.165806] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2095.167794] DMA32: [ 2095.203360] lowmem_reserve[]: [ 2095.204930] 761*4kB [ 2095.205616] 0 [ 2095.208719] (UME) [ 2095.211016] 0 0 0 0 [ 2095.226965] 658*8kB [ 2095.229135] Node 1 [ 2095.229137] (ME) 328*16kB [ 2095.236981] Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:364kB inactive_anon:20kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:144kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2095.245952] (ME) 71*32kB (ME) 21*64kB (UME) 3*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17556kB [ 2095.283904] lowmem_reserve[]: 0 0 0 0 0 [ 2095.288736] Node 0 [ 2095.289380] Node 0 [ 2095.289386] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2095.307555] DMA: 2*4kB (UM) 3*8kB (UME) 2*16kB (ME) 1*32kB (M) 2*64kB (ME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10976kB [ 2095.311361] Node 1 Normal: 66*4kB (UME) 60*8kB (M) 58*16kB (UME) 34*32kB (UM) 32*64kB (M) 26*128kB (UME) 11*256kB (UM) 11*512kB (ME) 2*1024kB (UE) 2*2048kB (M) 1*4096kB (M) = 26824kB [ 2095.339459] Node 0 [ 2095.356157] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2095.363909] DMA32: 761*4kB (UME) 658*8kB (ME) 328*16kB (ME) 71*32kB (ME) 21*64kB (UME) 3*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17556kB [ 2095.368918] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2095.401508] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2095.404525] Node 0 [ 2095.410458] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2095.410464] Normal: [ 2095.421045] 43824 total pagecache pages [ 2095.428400] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2095.429491] 0 pages in swap cache [ 2095.453505] Swap cache stats: add 0, delete 0, find 0/0 [ 2095.458871] Free swap = 0kB [ 2095.459817] Node 1 [ 2095.469658] Total swap = 0kB [ 2095.469683] Normal: [ 2095.475303] 2097051 pages RAM [ 2095.480083] 66*4kB [ 2095.480699] 0 pages HighMem/MovableOnly [ 2095.480704] (UME) [ 2095.490714] 363840 pages reserved [ 2095.494267] 60*8kB (M) 58*16kB (UME) 34*32kB (UM) 32*64kB (M) 26*128kB (UME) 11*256kB (UM) 11*512kB (ME) 2*1024kB (UE) 2*2048kB (M) 1*4096kB (M) = 26824kB [ 2095.499828] 0 pages cma reserved [ 2095.525762] Out of memory: Kill process 7978 (syz-fuzzer) score 7 or sacrifice child [ 2095.527028] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2095.539179] Killed process 19821 (syz-executor.4) total-vm:85024kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 2095.554530] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2095.568157] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2095.579037] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2095.589678] systemd-cgroups invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2095.607242] 43824 total pagecache pages [ 2095.611340] 0 pages in swap cache [ 2095.615687] systemd-cgroups cpuset=/ mems_allowed=0-1 [ 2095.620426] Swap cache stats: add 0, delete 0, find 0/0 [ 2095.620934] CPU: 0 PID: 22273 Comm: systemd-cgroups Not tainted 4.14.214-syzkaller #0 [ 2095.631203] Free swap = 0kB [ 2095.634219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2095.634223] Call Trace: [ 2095.634239] dump_stack+0x1b2/0x283 [ 2095.634252] dump_header+0x178/0x82f [ 2095.634263] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2095.634270] ? ___ratelimit+0x2cd/0x522 [ 2095.634280] oom_kill_process.cold+0x10/0xb18 [ 2095.647572] Total swap = 0kB [ 2095.649197] out_of_memory+0xe3e/0x1190 [ 2095.654565] 2097051 pages RAM [ 2095.656495] ? oom_killer_disable+0x1c0/0x1c0 [ 2095.669827] 0 pages HighMem/MovableOnly [ 2095.669999] ? mutex_trylock+0x152/0x1a0 [ 2095.674725] 363840 pages reserved [ 2095.676976] __alloc_pages_nodemask+0x23e1/0x2720 [ 2095.680050] 0 pages cma reserved [ 2095.684622] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2095.684645] alloc_pages_current+0x155/0x260 [ 2095.684655] filemap_fault+0xea3/0x1980 [ 2095.684672] ext4_filemap_fault+0x84/0xb0 [ 2095.684683] __do_fault+0xfa/0x380 [ 2095.684692] __handle_mm_fault+0x2497/0x4620 [ 2095.684702] ? vm_insert_page+0x7c0/0x7c0 [ 2095.684713] ? vm_mmap_pgoff+0x168/0x1a0 [ 2095.737794] ? vm_mmap_pgoff+0xcb/0x1a0 [ 2095.741780] handle_mm_fault+0x391/0x860 [ 2095.745849] __do_page_fault+0x549/0xad0 [ 2095.750022] ? spurious_fault+0x640/0x640 [ 2095.754167] ? do_page_fault+0x60/0x4f2 [ 2095.758133] ? page_fault+0x2f/0x50 [ 2095.761771] page_fault+0x45/0x50 [ 2095.765216] RIP: 77924170: (null) [ 2095.769438] RSP: 67776e10:00007ffc0b2dde70 EFLAGS: 46300a08de4 [ 2095.784830] Mem-Info: [ 2095.806864] active_anon:17015 inactive_anon:43294 isolated_anon:0 [ 2095.806864] active_file:33 inactive_file:11 isolated_file:0 [ 2095.806864] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2095.806864] slab_reclaimable:12479 slab_unreclaimable:120630 [ 2095.806864] mapped:17409 shmem:43791 pagetables:583 bounce:0 [ 2095.806864] free:13847 free_pcp:57 free_cma:0 [ 2095.858747] Node 0 active_anon:67696kB inactive_anon:173156kB active_file:188kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46228kB dirty:0kB writeback:0kB shmem:175120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2095.900390] Node 1 active_anon:364kB inactive_anon:20kB active_file:36kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23408kB dirty:0kB writeback:0kB shmem:44kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2095.940730] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:24kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2095.980916] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2095.989847] Node 0 DMA32 free:18008kB min:36200kB low:45248kB high:54296kB active_anon:67696kB inactive_anon:173156kB active_file:40kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7104kB pagetables:2188kB bounce:0kB free_pcp:180kB local_pcp:108kB free_cma:0kB [ 2096.034209] lowmem_reserve[]: 0 0 0 0 0 [ 2096.038226] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2096.077037] lowmem_reserve[]: 0 0 0 0 0 [ 2096.081053] Node 1 Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:364kB inactive_anon:20kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:144kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2096.124618] lowmem_reserve[]: 0 0 0 0 0 [ 2096.128637] Node 0 DMA: 2*4kB (UM) 3*8kB (UME) 2*16kB (ME) 1*32kB (M) 2*64kB (ME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10976kB [ 2096.154600] Node 0 DMA32: 762*4kB (UME) 662*8kB (UME) 330*16kB (UME) 72*32kB (UME) 23*64kB (UME) 5*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18040kB [ 2096.205348] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2096.235047] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2096.235712] Node 1 [ 2096.244512] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2096.252834] Normal: 10*4kB (UM) 3*8kB (UME) 2*16kB (UM) 11*32kB (UME) 18*64kB (UME) 13*128kB (UM) 20*256kB (UM) 15*512kB (UME) 8*1024kB (UE) 7*2048kB (UM) 16*4096kB (UM) = 104128kB [ 2096.260895] systemd[1]: Stopped Journal Service. [ 2096.301821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2096.307513] systemd[1]: Starting Journal Service... [ 2096.323856] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2096.337968] device hsr_slave_1 left promiscuous mode [ 2096.351414] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2096.360324] device hsr_slave_0 left promiscuous mode [ 2096.367143] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 2096.370470] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2096.391782] 46229 total pagecache pages [ 2096.401119] team0 (unregistering): Port device team_slave_1 removed [ 2096.401208] 0 pages in swap cache [ 2096.420474] team0 (unregistering): Port device team_slave_0 removed [ 2096.422592] Swap cache stats: add 0, delete 0, find 0/0 [ 2096.437406] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2096.449598] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2096.451442] Free swap = 0kB [ 2096.460318] Total swap = 0kB [ 2096.464190] 2097051 pages RAM [ 2096.467303] 0 pages HighMem/MovableOnly [ 2096.471274] 363840 pages reserved [ 2096.475090] 0 pages cma reserved [ 2096.478479] Out of memory (oom_kill_allocating_task): Kill process 22273 (systemd-cgroups) score 0 or sacrifice child [ 2096.490586] Killed process 22273 (systemd-cgroups) total-vm:2496kB, anon-rss:36kB, file-rss:0kB, shmem-rss:0kB [ 2096.509623] oom_reaper: reaped process 19821 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2096.516019] bond0 (unregistering): Released all slaves [ 2096.770524] systemd[1]: Started Load/Save RF Kill Switch Status. [ 2096.787029] systemd-journald[22286]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2097.455913] systemd[1]: Started Journal Service. [ 2098.873942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2098.880680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2098.890266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2098.897433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2098.906900] device bridge_slave_1 left promiscuous mode [ 2098.913043] bridge0: port 2(bridge_slave_1) entered disabled state [ 2098.920347] device bridge_slave_0 left promiscuous mode [ 2098.926575] bridge0: port 1(bridge_slave_0) entered disabled state [ 2098.936210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2098.943565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2098.952284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2098.959125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2098.968187] device bridge_slave_1 left promiscuous mode [ 2098.974487] bridge0: port 2(bridge_slave_1) entered disabled state [ 2098.982383] device bridge_slave_0 left promiscuous mode [ 2098.987875] bridge0: port 1(bridge_slave_0) entered disabled state [ 2098.997791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2099.005187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2099.014433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2099.021679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2099.029743] device bridge_slave_1 left promiscuous mode [ 2099.036500] bridge0: port 2(bridge_slave_1) entered disabled state [ 2099.044400] device bridge_slave_0 left promiscuous mode [ 2099.049906] bridge0: port 1(bridge_slave_0) entered disabled state [ 2099.062366] device veth1_macvtap left promiscuous mode [ 2099.067671] device veth0_macvtap left promiscuous mode [ 2099.073876] device veth1_vlan left promiscuous mode [ 2099.078933] device veth0_vlan left promiscuous mode [ 2099.086073] device veth1_macvtap left promiscuous mode [ 2099.092114] device veth0_macvtap left promiscuous mode [ 2099.097437] device veth1_vlan left promiscuous mode [ 2099.103266] device veth0_vlan left promiscuous mode [ 2099.108684] device veth1_macvtap left promiscuous mode [ 2099.114950] device veth0_macvtap left promiscuous mode [ 2099.120387] device veth1_vlan left promiscuous mode [ 2099.126463] device veth0_vlan left promiscuous mode [ 2099.365776] device hsr_slave_1 left promiscuous mode [ 2099.376718] device hsr_slave_0 left promiscuous mode [ 2099.398005] team0 (unregistering): Port device team_slave_1 removed [ 2099.412995] team0 (unregistering): Port device team_slave_0 removed [ 2099.426671] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2099.444792] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2099.485593] bond0 (unregistering): Released all slaves [ 2099.538841] device hsr_slave_1 left promiscuous mode [ 2099.550084] device hsr_slave_0 left promiscuous mode [ 2099.571869] team0 (unregistering): Port device team_slave_1 removed [ 2099.586785] team0 (unregistering): Port device team_slave_0 removed [ 2099.596961] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2099.616238] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2099.656323] bond0 (unregistering): Released all slaves [ 2099.715022] device hsr_slave_1 left promiscuous mode [ 2099.726941] device hsr_slave_0 left promiscuous mode [ 2099.746272] team0 (unregistering): Port device team_slave_1 removed [ 2099.756764] team0 (unregistering): Port device team_slave_0 removed [ 2099.770998] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2099.786700] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2099.827270] bond0 (unregistering): Released all slaves 23:26:11 executing program 3: write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000040)={0x5e5, 0x1000, 0x1, 'queue0\x00', 0x3}) 23:26:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x0, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x0, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:26:11 executing program 4: nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.swap.current\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000180)={0x2, 0x3, 0x8d, 0x8, 0xff, 0x1, 0x2}, &(0x7f00000001c0)={0x8, 0xb72c, 0x7fffffff, 0x10000, 0x1, 0x7fff, 0x9a, 0x5}, &(0x7f0000000240)={0x7, 0x4, 0x400, 0x6, 0x2, 0x0, 0x0, 0x400}, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x3f]}, 0x8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100021bd7000fcdbdf25100000000500350002000000050035000500000087d6fe2f83ad157effa369633a2eb5c5296ad56858f4184aef6be24d5daa7deb7ee73d8dd807a485541e4429e02a5da4e238732a19e882e61a7a23a9700736bd233896dc8ff624207717a3099db7d4fce852e2d2ec414263b307215a6808216547a0f4cb1d6efd12884087f77c4cb1e7622d483e5f0a0c144104fcda2a1316a5213a0c3578f7b1fe19d328d634b60f53c6b751b7612021a8eff8fd446fa6d4bc1a49ef7400228860fdda51"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24008080) 23:26:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) r1 = accept4(r0, &(0x7f0000000180)=@in={0x2, 0x0, @remote}, &(0x7f0000000240)=0x80, 0x800) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000280)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000300)={0x2, @vbi={0xdfe, 0x3f, 0x0, 0x30364d54, [0xe8, 0xfffffe00], [0xffffffff, 0xffff], 0x1}}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x410000) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r5, 0x5411, 0x0) r6 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x2c}, 0x1, 0x0, 0x0, 0x15}, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xfffffd56, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES16=r2, @ANYBLOB="79392abd7000fddbdf250300400014001f00fc0000000000000000000000000000000c000f000008ab27992ec32ca75fd779480000000000001400200000000000000000000000ffffac14143e0800110001000000080011000100000006001d0016", @ANYRES16=r4], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28891) 23:26:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x9}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x9, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x0, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:26:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x3ca26104, 0x0, 0x9, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x9, 0x0, 0x0, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) [ 2101.274893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2101.281815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2101.290070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2101.300132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2101.338929] device bridge_slave_1 left promiscuous mode [ 2101.357316] bridge0: port 2(bridge_slave_1) entered disabled state [ 2101.386743] device bridge_slave_0 left promiscuous mode [ 2101.399086] bridge0: port 1(bridge_slave_0) entered disabled state [ 2101.420570] device veth1_macvtap left promiscuous mode [ 2101.428994] device veth0_macvtap left promiscuous mode [ 2101.435566] device veth1_vlan left promiscuous mode [ 2101.440738] device veth0_vlan left promiscuous mode [ 2101.559631] device hsr_slave_1 left promiscuous mode [ 2101.572539] device hsr_slave_0 left promiscuous mode [ 2101.592152] team0 (unregistering): Port device team_slave_1 removed [ 2101.604186] team0 (unregistering): Port device team_slave_0 removed [ 2101.616318] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2101.628791] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2101.665297] bond0 (unregistering): Released all slaves [ 2103.759253] IPVS: ftp: loaded support on port[0] = 21 [ 2103.883521] IPVS: ftp: loaded support on port[0] = 21 [ 2104.003648] chnl_net:caif_netlink_parms(): no params data found [ 2104.032667] IPVS: ftp: loaded support on port[0] = 21 [ 2104.137006] chnl_net:caif_netlink_parms(): no params data found [ 2104.191431] IPVS: ftp: loaded support on port[0] = 21 [ 2104.358765] IPVS: ftp: loaded support on port[0] = 21 [ 2104.366358] chnl_net:caif_netlink_parms(): no params data found [ 2104.432846] bridge0: port 1(bridge_slave_0) entered blocking state [ 2104.439239] bridge0: port 1(bridge_slave_0) entered disabled state [ 2104.450416] device bridge_slave_0 entered promiscuous mode [ 2104.485968] bridge0: port 2(bridge_slave_1) entered blocking state [ 2104.493469] bridge0: port 2(bridge_slave_1) entered disabled state [ 2104.503916] device bridge_slave_1 entered promiscuous mode [ 2104.644242] chnl_net:caif_netlink_parms(): no params data found [ 2104.654941] bridge0: port 1(bridge_slave_0) entered blocking state [ 2104.661807] bridge0: port 1(bridge_slave_0) entered disabled state [ 2104.669022] device bridge_slave_0 entered promiscuous mode [ 2104.688091] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2104.706637] bridge0: port 2(bridge_slave_1) entered blocking state [ 2104.713946] bridge0: port 2(bridge_slave_1) entered disabled state [ 2104.723204] device bridge_slave_1 entered promiscuous mode [ 2104.734451] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2104.895484] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2104.903115] team0: Port device team_slave_0 added [ 2104.909644] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2104.920006] bridge0: port 1(bridge_slave_0) entered blocking state [ 2104.927462] bridge0: port 1(bridge_slave_0) entered disabled state [ 2104.935551] device bridge_slave_0 entered promiscuous mode [ 2104.946674] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2104.955097] team0: Port device team_slave_1 added [ 2104.961844] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2104.969513] chnl_net:caif_netlink_parms(): no params data found [ 2104.984059] bridge0: port 2(bridge_slave_1) entered blocking state [ 2104.990430] bridge0: port 2(bridge_slave_1) entered disabled state [ 2104.999231] device bridge_slave_1 entered promiscuous mode [ 2105.069734] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2105.077688] team0: Port device team_slave_0 added [ 2105.093466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2105.101697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2105.128212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2105.149030] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2105.161511] team0: Port device team_slave_1 added [ 2105.167712] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2105.184920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2105.195365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2105.225735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2105.236430] bridge0: port 1(bridge_slave_0) entered blocking state [ 2105.243346] bridge0: port 1(bridge_slave_0) entered disabled state [ 2105.251722] device bridge_slave_0 entered promiscuous mode [ 2105.268399] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2105.276907] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2105.290311] bridge0: port 2(bridge_slave_1) entered blocking state [ 2105.297773] bridge0: port 2(bridge_slave_1) entered disabled state [ 2105.309334] device bridge_slave_1 entered promiscuous mode [ 2105.338569] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2105.359667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2105.369815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2105.400196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2105.450044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2105.461700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2105.491963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2105.505628] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2105.515406] team0: Port device team_slave_0 added [ 2105.530571] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2105.538406] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2105.552504] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2105.560977] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2105.568261] team0: Port device team_slave_1 added [ 2105.582189] device hsr_slave_0 entered promiscuous mode [ 2105.588506] device hsr_slave_1 entered promiscuous mode [ 2105.604504] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2105.646368] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2105.696136] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2105.725025] device hsr_slave_0 entered promiscuous mode [ 2105.732298] device hsr_slave_1 entered promiscuous mode [ 2105.738655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2105.749180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2105.779103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2105.780589] Bluetooth: hci2 command 0x0409 tx timeout [ 2105.796651] bridge0: port 1(bridge_slave_0) entered blocking state [ 2105.807585] Bluetooth: hci0 command 0x0409 tx timeout [ 2105.808181] bridge0: port 1(bridge_slave_0) entered disabled state [ 2105.820600] Bluetooth: hci3 command 0x0409 tx timeout [ 2105.824700] device bridge_slave_0 entered promiscuous mode [ 2105.825850] Bluetooth: hci5 command 0x0409 tx timeout [ 2105.832738] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2105.843404] Bluetooth: hci1 command 0x0409 tx timeout [ 2105.854455] team0: Port device team_slave_0 added [ 2105.859691] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2105.869085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2105.878015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2105.906947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2105.917690] bridge0: port 2(bridge_slave_1) entered blocking state [ 2105.925192] bridge0: port 2(bridge_slave_1) entered disabled state [ 2105.937371] device bridge_slave_1 entered promiscuous mode [ 2105.944525] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2105.955676] team0: Port device team_slave_1 added [ 2105.961349] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2105.968298] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2106.027196] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2106.084798] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2106.094040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2106.100292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2106.130938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2106.142849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2106.149087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2106.174663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2106.218349] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2106.227180] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2106.239517] device hsr_slave_0 entered promiscuous mode [ 2106.246370] device hsr_slave_1 entered promiscuous mode [ 2106.269794] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2106.290726] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2106.325600] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2106.334202] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2106.342876] team0: Port device team_slave_0 added [ 2106.382627] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2106.389978] team0: Port device team_slave_1 added [ 2106.400360] device hsr_slave_0 entered promiscuous mode [ 2106.407360] device hsr_slave_1 entered promiscuous mode [ 2106.436179] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2106.472644] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2106.492710] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2106.516151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2106.523020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2106.557420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2106.602664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2106.608935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2106.676478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2106.699259] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2106.716301] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2106.933356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2106.939751] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2106.988277] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2107.001530] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2107.006448] CPU: 1 PID: 7979 Comm: syz-fuzzer Not tainted 4.14.214-syzkaller #0 [ 2107.013927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2107.023864] Call Trace: [ 2107.026445] dump_stack+0x1b2/0x283 [ 2107.030049] dump_header+0x178/0x82f [ 2107.033765] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2107.038843] ? ___ratelimit+0x2cd/0x522 [ 2107.042796] oom_kill_process.cold+0x10/0xb18 [ 2107.047371] out_of_memory+0xe3e/0x1190 [ 2107.051321] ? oom_killer_disable+0x1c0/0x1c0 [ 2107.055792] ? mutex_trylock+0x152/0x1a0 [ 2107.059841] __alloc_pages_nodemask+0x23e1/0x2720 [ 2107.064675] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2107.069498] alloc_pages_current+0x155/0x260 [ 2107.073884] filemap_fault+0xea3/0x1980 [ 2107.077850] ext4_filemap_fault+0x84/0xb0 [ 2107.081974] __do_fault+0xfa/0x380 [ 2107.085489] __handle_mm_fault+0x2497/0x4620 [ 2107.089889] ? vm_insert_page+0x7c0/0x7c0 [ 2107.094020] ? lock_downgrade+0x740/0x740 [ 2107.098151] handle_mm_fault+0x391/0x860 [ 2107.102204] __do_page_fault+0x549/0xad0 [ 2107.106347] ? spurious_fault+0x640/0x640 [ 2107.110476] ? do_page_fault+0x60/0x4f2 [ 2107.114697] ? page_fault+0x2f/0x50 [ 2107.118298] page_fault+0x45/0x50 [ 2107.121728] RIP: 0000:0xb358f8 [ 2107.124893] RSP: 3b976afe:000000c00003dec8 EFLAGS: 00438920 [ 2107.128225] Mem-Info: [ 2107.136591] active_anon:17608 inactive_anon:45332 isolated_anon:0 [ 2107.136591] active_file:128 inactive_file:92 isolated_file:32 [ 2107.136591] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2107.136591] slab_reclaimable:12421 slab_unreclaimable:113931 [ 2107.136591] mapped:52785 shmem:45846 pagetables:764 bounce:0 [ 2107.136591] free:25129 free_pcp:208 free_cma:0 [ 2107.170192] Node 0 active_anon:69536kB inactive_anon:181272kB active_file:496kB inactive_file:356kB unevictable:0kB isolated(anon):0kB isolated(file):112kB mapped:187832kB dirty:0kB writeback:0kB shmem:183288kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2107.198379] Node 1 active_anon:896kB inactive_anon:56kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23408kB dirty:0kB writeback:0kB shmem:96kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2107.225102] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2107.256157] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2107.269546] Node 0 DMA32 free:35792kB min:36200kB low:45248kB high:54296kB active_anon:67488kB inactive_anon:181268kB active_file:220kB inactive_file:464kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2860kB bounce:0kB free_pcp:352kB local_pcp:12kB free_cma:0kB [ 2107.300964] lowmem_reserve[]: 0 0 0 0 0 [ 2107.304989] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2107.330713] lowmem_reserve[]: 0 0 0 0 0 [ 2107.334701] Node 1 Normal free:53580kB min:53696kB low:67120kB high:80544kB active_anon:896kB inactive_anon:56kB active_file:24kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:640kB pagetables:196kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2107.362689] lowmem_reserve[]: 0 0 0 0 0 [ 2107.366797] Node 0 DMA: 3*4kB (UME) 4*8kB (UME) 4*16kB (UME) 6*32kB (UM) 16*64kB (UME) 10*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 11052kB [ 2107.383352] Node 0 DMA32: 497*4kB (UME) 443*8kB (ME) 223*16kB (ME) 83*32kB (ME) 49*64kB (UME) 24*128kB (UMH) 16*256kB (MH) 10*512kB (UM) 9*1024kB (UM) 0*2048kB 0*4096kB = 36396kB [ 2107.399516] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2107.410216] Node 1 Normal: 85*4kB (UME) 73*8kB (UME) 61*16kB (UME) 61*32kB (UME) 41*64kB (UME) 24*128kB (UM) 12*256kB (ME) 6*512kB (M) 1*1024kB (E) 2*2048kB (M) 8*4096kB (UM) = 53580kB [ 2107.426866] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2107.435827] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2107.444674] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2107.453542] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2107.462185] 45875 total pagecache pages [ 2107.466155] 0 pages in swap cache [ 2107.469587] Swap cache stats: add 0, delete 0, find 0/0 [ 2107.474960] Free swap = 0kB [ 2107.477951] Total swap = 0kB [ 2107.480998] 2097051 pages RAM [ 2107.484088] 0 pages HighMem/MovableOnly [ 2107.488046] 363840 pages reserved [ 2107.491521] 0 pages cma reserved [ 2107.494874] Out of memory (oom_kill_allocating_task): Kill process 7979 (syz-fuzzer) score 0 or sacrifice child [ 2107.505187] Killed process 22314 (syz-executor.4) total-vm:85024kB, anon-rss:72kB, file-rss:4kB, shmem-rss:0kB [ 2107.533160] oom_reaper: reaped process 22314 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2107.571767] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2107.608706] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2107.621675] CPU: 0 PID: 22310 Comm: syz-fuzzer Not tainted 4.14.214-syzkaller #0 [ 2107.629214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2107.638561] Call Trace: [ 2107.641149] dump_stack+0x1b2/0x283 [ 2107.644772] dump_header+0x178/0x82f [ 2107.648477] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2107.653572] ? ___ratelimit+0x2cd/0x522 [ 2107.657540] oom_kill_process.cold+0x10/0xb18 [ 2107.662035] out_of_memory+0xe3e/0x1190 [ 2107.666007] ? oom_killer_disable+0x1c0/0x1c0 [ 2107.670496] ? mutex_trylock+0x152/0x1a0 [ 2107.674548] __alloc_pages_nodemask+0x23e1/0x2720 [ 2107.679394] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2107.684244] alloc_pages_current+0x155/0x260 [ 2107.688650] filemap_fault+0xea3/0x1980 [ 2107.692623] ext4_filemap_fault+0x84/0xb0 [ 2107.696765] __do_fault+0xfa/0x380 [ 2107.700305] __handle_mm_fault+0x2497/0x4620 [ 2107.704709] ? vm_insert_page+0x7c0/0x7c0 [ 2107.708865] handle_mm_fault+0x391/0x860 [ 2107.712925] __do_page_fault+0x549/0xad0 [ 2107.717070] ? spurious_fault+0x640/0x640 [ 2107.721211] ? do_page_fault+0x60/0x4f2 [ 2107.725180] ? page_fault+0x2f/0x50 [ 2107.728793] page_fault+0x45/0x50 [ 2107.732228] RIP: be4300:0xc0011748a0 [ 2107.734360] syz-executor.0: [ 2107.735922] RSP: 919500:000000c0009afde0 EFLAGS: 00000003 [ 2107.735930] vmalloc: allocation failure, allocated 470614016 of 1073745920 bytes [ 2107.748635] Mem-Info: [ 2107.755739] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2107.759699] active_anon:17608 inactive_anon:45332 isolated_anon:0 [ 2107.759699] active_file:23 inactive_file:15 isolated_file:0 [ 2107.759699] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2107.759699] slab_reclaimable:12422 slab_unreclaimable:113931 [ 2107.759699] mapped:52645 shmem:45846 pagetables:764 bounce:0 [ 2107.759699] free:13889 free_pcp:102 free_cma:0 [ 2107.769714] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2107.812014] Node 0 active_anon:69536kB inactive_anon:181272kB active_file:52kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:187172kB dirty:0kB writeback:0kB shmem:183288kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2107.812986] CPU: 1 PID: 22312 Comm: syz-executor.0 Not tainted 4.14.214-syzkaller #0 [ 2107.842034] Node 1 active_anon:896kB inactive_anon:56kB active_file:40kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23408kB dirty:0kB writeback:0kB shmem:96kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2107.848670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2107.875142] Node 0 [ 2107.884457] Call Trace: [ 2107.884476] dump_stack+0x1b2/0x283 [ 2107.884489] warn_alloc.cold+0x96/0x1cc [ 2107.886710] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2107.889265] ? zone_watermark_ok_safe+0x220/0x220 [ 2107.892874] lowmem_reserve[]: [ 2107.896827] __vmalloc_area_node+0x48a/0x680 [ 2107.922565] 0 [ 2107.927375] ? __vmalloc_node_range+0x150/0x150 [ 2107.930460] 2717 [ 2107.934837] ? __get_vm_area_node+0x27d/0x340 [ 2107.936606] 2718 [ 2107.941276] __vmalloc_node_range+0xbe/0x150 [ 2107.941291] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2107.943324] 2718 [ 2107.947797] vmalloc_user+0x47/0xa0 [ 2107.949831] 2718 [ 2107.954238] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2107.954246] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2107.954254] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2107.954264] __vb2_queue_alloc+0x47a/0xd90 [ 2107.961648] vb2_core_create_bufs+0x279/0x5a0 [ 2107.961658] ? __vb2_queue_free+0x7a0/0x7a0 [ 2107.965256] Node 0 [ 2107.967651] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2107.971963] DMA32 free:17792kB min:36200kB low:45248kB high:54296kB active_anon:67488kB inactive_anon:181268kB active_file:56kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2860kB bounce:0kB free_pcp:288kB local_pcp:124kB free_cma:0kB [ 2107.977281] ? trace_hardirqs_on+0x10/0x10 [ 2107.981407] lowmem_reserve[]: [ 2107.985610] vb2_create_bufs+0x2e1/0x5b0 [ 2107.990161] 0 [ 2107.994464] ? vb2_thread_start.cold+0x24/0x24 [ 2107.994472] ? trace_hardirqs_on+0x10/0x10 [ 2107.994486] v4l_create_bufs+0xa4/0x150 [ 2107.996688] 0 [ 2108.002031] __video_do_ioctl+0x65b/0x6a0 [ 2108.002047] ? video_ioctl2+0x30/0x30 [ 2108.030397] 0 [ 2108.034615] ? __might_fault+0x177/0x1b0 [ 2108.037686] 0 [ 2108.041728] video_usercopy+0xf5/0xe90 [ 2108.041743] ? video_ioctl2+0x30/0x30 [ 2108.041753] ? v4l_g_ctrl+0x390/0x390 [ 2108.043524] 0 [ 2108.048084] ? lock_acquire+0x170/0x3f0 [ 2108.056251] ? trace_hardirqs_on+0x10/0x10 [ 2108.058023] Node 0 [ 2108.062147] ? trace_hardirqs_on+0x10/0x10 [ 2108.062157] ? futex_exit_release+0x220/0x220 [ 2108.062167] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2108.065944] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2108.067721] ? __might_fault+0x104/0x1b0 [ 2108.071764] lowmem_reserve[]: [ 2108.073536] v4l2_ioctl+0x1bb/0x2f0 [ 2108.077403] 0 [ 2108.081179] ? v4l2_open+0x2f0/0x2f0 [ 2108.081190] do_vfs_ioctl+0x75a/0xff0 [ 2108.081201] ? ioctl_preallocate+0x1a0/0x1a0 [ 2108.084989] 0 [ 2108.086771] ? lock_downgrade+0x740/0x740 [ 2108.090729] 0 [ 2108.094937] ? __fget+0x225/0x360 [ 2108.097150] 0 [ 2108.101362] ? do_vfs_ioctl+0xff0/0xff0 [ 2108.101371] ? security_file_ioctl+0x83/0xb0 [ 2108.101382] SyS_ioctl+0x7f/0xb0 [ 2108.105844] 0 [ 2108.110922] ? do_vfs_ioctl+0xff0/0xff0 [ 2108.110933] do_syscall_64+0x1d5/0x640 [ 2108.110948] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2108.139846] RIP: 0033:0x45e219 [ 2108.142948] Node 1 [ 2108.146539] RSP: 002b:00007fea2bdd6c68 EFLAGS: 00000246 [ 2108.148322] Normal free:26796kB min:53696kB low:67120kB high:80544kB active_anon:896kB inactive_anon:56kB active_file:40kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:640kB pagetables:196kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2108.152004] ORIG_RAX: 0000000000000010 [ 2108.152010] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2108.152016] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 2108.152021] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2108.152027] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2108.155797] lowmem_reserve[]: [ 2108.160208] R13: 00007ffc4168215f R14: 00007fea2bdd79c0 R15: 000000000119bf8c [ 2108.161996] 0 [ 2108.170354] Bluetooth: hci3 command 0x041b tx timeout [ 2108.193346] 0 [ 2108.194780] Bluetooth: hci0 command 0x041b tx timeout [ 2108.199857] 0 [ 2108.203120] Bluetooth: hci2 command 0x041b tx timeout [ 2108.223393] 0 [ 2108.238573] Bluetooth: hci1 command 0x041b tx timeout [ 2108.261518] 0 [ 2108.264591] Bluetooth: hci5 command 0x041b tx timeout [ 2108.293671] Mem-Info: [ 2108.305058] Node 0 [ 2108.305153] active_anon:17598 inactive_anon:45332 isolated_anon:0 [ 2108.305153] active_file:17 inactive_file:17 isolated_file:0 [ 2108.305153] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2108.305153] slab_reclaimable:12397 slab_unreclaimable:113931 [ 2108.305153] mapped:52635 shmem:45846 pagetables:740 bounce:0 [ 2108.305153] free:13979 free_pcp:138 free_cma:0 [ 2108.322786] DMA: [ 2108.326285] Node 0 active_anon:69496kB inactive_anon:181272kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:187132kB dirty:0kB writeback:0kB shmem:183288kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2108.378902] 2*4kB [ 2108.390365] Node 1 active_anon:896kB inactive_anon:56kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23408kB dirty:0kB writeback:0kB shmem:96kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2108.402646] (ME) [ 2108.429908] Node 0 [ 2108.431267] 4*8kB [ 2108.432658] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2108.434206] (UME) [ 2108.436331] lowmem_reserve[]: [ 2108.474157] 3*16kB [ 2108.474406] 0 [ 2108.477260] (UME) [ 2108.479476] 2717 2718 2718 2718 [ 2108.488919] 4*32kB (UM) 16*64kB (UME) 10*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 10968kB [ 2108.496749] Node 0 DMA32 free:18152kB min:36200kB low:45248kB high:54296kB active_anon:67448kB inactive_anon:181268kB active_file:16kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2764kB bounce:0kB free_pcp:432kB local_pcp:312kB free_cma:0kB [ 2108.518791] Node 0 [ 2108.556715] lowmem_reserve[]: [ 2108.558063] DMA32: [ 2108.558959] 0 [ 2108.565816] 488*4kB (ME) 427*8kB (UME) 206*16kB (UME) 61*32kB (ME) 26*64kB (ME) 16*128kB (UM) 11*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18168kB [ 2108.569042] 0 0 0 0 [ 2108.594068] Node 0 [ 2108.594600] Node 0 [ 2108.594603] Normal: 0*4kB [ 2108.596832] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2108.599038] 0*8kB [ 2108.609017] lowmem_reserve[]: [ 2108.630698] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2108.642418] 0 0 0 0 0 [ 2108.644939] Node 1 Normal free:26796kB min:53696kB low:67120kB high:80544kB active_anon:896kB inactive_anon:56kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:640kB pagetables:196kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2108.647527] Node 1 [ 2108.684336] lowmem_reserve[]: [ 2108.685388] Normal: [ 2108.686583] 0 [ 2108.689781] 83*4kB [ 2108.698016] 0 [ 2108.699791] (ME) [ 2108.704234] 0 0 0 [ 2108.707697] 72*8kB [ 2108.708457] Node 0 [ 2108.708459] (UME) 60*16kB [ 2108.716586] DMA: [ 2108.718789] (ME) [ 2108.719428] 2*4kB [ 2108.727244] 60*32kB [ 2108.727564] (ME) [ 2108.729394] (UME) [ 2108.737580] 4*8kB [ 2108.739599] 40*64kB [ 2108.739721] (UME) [ 2108.741872] (UME) 24*128kB (UM) 12*256kB (ME) 6*512kB (M) 1*1024kB (E) 3*2048kB (UM) 1*4096kB (M) = 26828kB [ 2108.747742] 3*16kB (UME) 4*32kB (UM) 16*64kB (UME) 10*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 0*4096kB = 10968kB [ 2108.768354] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2108.788115] Node 0 DMA32: 488*4kB (ME) 427*8kB (UME) 206*16kB (UME) 61*32kB (ME) 26*64kB (ME) 16*128kB (UM) 11*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18168kB [ 2108.798663] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2108.817258] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2108.823669] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2108.838738] Node 1 Normal: 83*4kB (ME) 72*8kB (UME) 60*16kB (ME) 60*32kB (UME) 40*64kB (UME) 24*128kB (UM) 12*256kB (ME) 6*512kB (M) 1*1024kB (E) 3*2048kB (UM) 1*4096kB (M) = 26828kB [ 2108.847560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2108.865985] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2108.874630] 45880 total pagecache pages [ 2108.878426] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2108.878875] 0 pages in swap cache [ 2108.899177] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2108.902970] Swap cache stats: add 0, delete 0, find 0/0 [ 2108.909805] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2108.924079] Free swap = 0kB [ 2108.927096] Total swap = 0kB [ 2108.930102] 2097051 pages RAM [ 2108.932705] 45880 total pagecache pages [ 2108.937170] 0 pages in swap cache [ 2108.942153] 0 pages HighMem/MovableOnly [ 2108.946124] 363840 pages reserved [ 2108.948273] Swap cache stats: add 0, delete 0, find 0/0 [ 2108.949563] 0 pages cma reserved [ 2108.968472] Free swap = 0kB [ 2108.969083] Out of memory (oom_kill_allocating_task): Kill process 22310 (syz-fuzzer) score 0 or sacrifice child [ 2108.975026] Total swap = 0kB [ 2108.981953] Killed process 22315 (syz-executor.1) total-vm:85024kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 2108.997349] 2097051 pages RAM [ 2109.004580] 0 pages HighMem/MovableOnly [ 2109.008580] 363840 pages reserved [ 2109.018893] 0 pages cma reserved [ 2109.059943] oom_reaper: reaped process 22312 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2109.314771] device hsr_slave_0 entered promiscuous mode [ 2109.346460] device hsr_slave_1 entered promiscuous mode [ 2109.377679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2109.396651] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2109.412331] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2109.430843] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2109.452710] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2109.511352] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2109.541330] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2109.547418] 8021q: adding VLAN 0 to HW filter on device team0 [ 2109.557301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2109.565524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2109.582592] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2109.609550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2109.622624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2109.644578] bridge0: port 1(bridge_slave_0) entered blocking state [ 2109.650972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2109.692775] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2109.705160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2109.712608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2109.724503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2109.733143] bridge0: port 2(bridge_slave_1) entered blocking state [ 2109.739498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2109.755829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2109.774061] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2109.787850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2109.806918] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2109.816583] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2109.837351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2109.851311] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2109.859854] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2109.871999] 8021q: adding VLAN 0 to HW filter on device team0 [ 2109.892804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2109.899977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2109.912277] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2109.927263] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2109.947782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2109.956558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2109.969217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2109.978606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2109.990699] bridge0: port 1(bridge_slave_0) entered blocking state [ 2109.997066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2110.013388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2110.025539] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2110.040279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2110.047322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2110.061100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2110.068833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2110.083556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2110.094317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2110.104271] bridge0: port 2(bridge_slave_1) entered blocking state [ 2110.110668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2110.124978] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2110.145662] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2110.155040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2110.166604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2110.176521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2110.195051] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2110.206983] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2110.223876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2110.236099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2110.240208] Bluetooth: hci3 command 0x040f tx timeout [ 2110.247120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2110.267125] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2110.277493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2110.287678] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2110.300774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2110.308512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2110.320105] Bluetooth: hci5 command 0x040f tx timeout [ 2110.322684] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2110.325419] Bluetooth: hci1 command 0x040f tx timeout [ 2110.336840] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2110.347760] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2110.355785] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2110.366937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2110.376086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2110.391340] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2110.407064] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2110.415556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2110.428407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2110.437328] device bridge_slave_1 left promiscuous mode [ 2110.447178] bridge0: port 2(bridge_slave_1) entered disabled state [ 2110.455199] device bridge_slave_0 left promiscuous mode [ 2110.464996] bridge0: port 1(bridge_slave_0) entered disabled state [ 2110.513026] device hsr_slave_1 left promiscuous mode [ 2110.525271] device hsr_slave_0 left promiscuous mode [ 2110.539885] team0 (unregistering): Port device team_slave_1 removed [ 2110.555358] team0 (unregistering): Port device team_slave_0 removed [ 2110.567391] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2110.583645] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2110.619046] bond0 (unregistering): Released all slaves [ 2110.639383] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2110.653008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2110.664622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2110.674854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2110.688791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2110.697346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2110.709795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2110.719112] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2110.726906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2110.744925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2110.776137] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2110.821139] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2110.829267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2110.840532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2110.873108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2110.911209] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2110.943202] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2110.952379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2110.972301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2110.979512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2110.996395] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2111.010437] 8021q: adding VLAN 0 to HW filter on device team0 [ 2111.034001] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2111.045907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2111.055587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2111.073551] bridge0: port 1(bridge_slave_0) entered blocking state [ 2111.079920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2111.110606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2111.119684] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2111.122901] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2111.125067] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2111.127211] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2111.129290] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2111.152027] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2111.154241] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2111.174695] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2111.174703] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2111.175424] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2111.206153] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2111.207415] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2111.220516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2111.249614] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2111.352301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2111.372355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2111.392288] bridge0: port 2(bridge_slave_1) entered blocking state [ 2111.398647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2111.421729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2111.443606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2111.462610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2111.481805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2111.501987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2111.523591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2111.541945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2111.561666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2111.581830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2111.601754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2111.621679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2111.628350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2111.653701] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2111.670903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2111.692592] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2111.701789] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2111.709073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2111.722596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2111.749138] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2111.756784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2111.768740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2111.882765] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2111.896080] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2111.903970] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2111.915543] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2111.924466] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2111.932040] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2111.941290] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2111.969974] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2111.980696] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2111.988158] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2112.057935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2112.071179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2112.079087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2112.141823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2112.149398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2112.162372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2112.170806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2112.177738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2112.184742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2112.192015] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2112.201410] device veth0_vlan entered promiscuous mode [ 2112.212971] device veth0_vlan entered promiscuous mode [ 2112.241361] device veth1_vlan entered promiscuous mode [ 2112.267636] device veth1_vlan entered promiscuous mode [ 2112.285063] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2112.312565] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2112.320773] Bluetooth: hci3 command 0x0419 tx timeout [ 2112.322426] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2112.351113] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2112.357997] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2112.373322] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2112.389769] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2112.397555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2112.406368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2112.408850] Bluetooth: hci1 command 0x0419 tx timeout [ 2112.414490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2112.422818] Bluetooth: hci5 command 0x0419 tx timeout [ 2112.427201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2112.442599] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2112.453212] device veth0_macvtap entered promiscuous mode [ 2112.454891] IPVS: ftp: loaded support on port[0] = 21 [ 2112.459398] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2112.474590] device veth0_macvtap entered promiscuous mode [ 2112.481721] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2112.488441] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2112.496284] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2112.503803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2112.511786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2112.520162] device veth0_vlan entered promiscuous mode [ 2112.527275] device veth1_macvtap entered promiscuous mode [ 2112.537076] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2112.549116] device veth1_macvtap entered promiscuous mode [ 2112.559975] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2112.567163] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2112.578455] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2112.585936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2112.596382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2112.609816] device veth1_vlan entered promiscuous mode [ 2112.619546] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2112.628555] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2112.638900] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2112.659311] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2112.668447] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2112.681844] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2112.703248] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2112.712402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2112.724343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2112.735733] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2112.743423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2112.756121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2112.767081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2112.776527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2112.787015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2112.797976] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2112.806058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2112.815529] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2112.823411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2112.834285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2112.842154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2112.853382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2112.861718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2112.869509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2112.881475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2112.889179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2112.951058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2112.963478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2112.978928] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2112.986225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2113.001699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2113.012232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2113.022203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2113.032536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2113.043641] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2113.050894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2113.061281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2113.069027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2113.078452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2113.086906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2113.100883] device veth0_macvtap entered promiscuous mode [ 2113.132615] IPVS: ftp: loaded support on port[0] = 21 [ 2113.164959] device veth1_macvtap entered promiscuous mode [ 2113.224213] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2113.299663] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2113.356488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2113.374988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2113.384260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2113.399007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2113.409210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2113.420299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2113.432254] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2113.439228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2113.458335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2113.467084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2113.493279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2113.505951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2113.516867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2113.533310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2113.542496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2113.556235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2113.567531] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2113.578501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2113.586510] chnl_net:caif_netlink_parms(): no params data found [ 2113.607302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2113.619256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2113.931845] chnl_net:caif_netlink_parms(): no params data found [ 2113.951895] bridge0: port 1(bridge_slave_0) entered blocking state [ 2113.971060] bridge0: port 1(bridge_slave_0) entered disabled state [ 2113.978337] device bridge_slave_0 entered promiscuous mode [ 2114.024362] bridge0: port 2(bridge_slave_1) entered blocking state [ 2114.031233] bridge0: port 2(bridge_slave_1) entered disabled state [ 2114.050937] device bridge_slave_1 entered promiscuous mode [ 2114.080286] Bluetooth: hci2 command 0x0409 tx timeout [ 2114.086175] Bluetooth: hci0 command 0x0409 tx timeout [ 2114.106215] bond0: Enslaving bond_slave_0 as an active interface with an up link 23:26:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="9f100000", @ANYRES16=0x0, @ANYBLOB="00022a070000fccd54b14a0eddf5dbdf25070000000500300008"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) [ 2114.125159] bond0: Enslaving bond_slave_1 as an active interface with an up link 23:26:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) [ 2114.168489] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2114.183522] team0: Port device team_slave_0 added [ 2114.201104] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2114.223072] team0: Port device team_slave_1 added 23:26:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000080)={0x400, 0x9, 0x36, &(0x7f0000000040)="724310a68b4642748ac4e8a53881ac26550f914def323650d6b542480ca22b97eeeb97935dbbe6fb5fbd231aac37ee5f67dfb56b553b"}) 23:26:25 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x42001, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000040)) [ 2114.313813] bridge0: port 1(bridge_slave_0) entered blocking state [ 2114.321543] bridge0: port 1(bridge_slave_0) entered disabled state [ 2114.338920] device bridge_slave_0 entered promiscuous mode [ 2114.355210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2114.364045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2114.400937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 23:26:25 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') write$sndseq(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getaddr={0x14, 0x16, 0x300, 0x70bd25, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000000) [ 2114.412059] bridge0: port 2(bridge_slave_1) entered blocking state [ 2114.418424] bridge0: port 2(bridge_slave_1) entered disabled state [ 2114.430256] device bridge_slave_1 entered promiscuous mode [ 2114.442183] batman_adv: batadv0: Removing interface: batadv_slave_0 23:26:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x10801) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) [ 2114.460349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2114.486743] device bridge_slave_1 left promiscuous mode [ 2114.494956] bridge0: port 2(bridge_slave_1) entered disabled state [ 2114.507972] device bridge_slave_0 left promiscuous mode [ 2114.521505] bridge0: port 1(bridge_slave_0) entered disabled state [ 2114.571219] device hsr_slave_1 left promiscuous mode [ 2114.596856] device hsr_slave_0 left promiscuous mode [ 2114.612143] team0 (unregistering): Port device team_slave_1 removed [ 2114.622375] team0 (unregistering): Port device team_slave_0 removed [ 2114.632818] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2114.643809] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2114.674837] bond0 (unregistering): Released all slaves [ 2114.686883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2114.695444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2114.722193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2114.749838] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2114.771713] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2114.781219] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2114.793303] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2114.861806] device hsr_slave_0 entered promiscuous mode [ 2114.880909] device hsr_slave_1 entered promiscuous mode [ 2114.897635] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2114.910454] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2114.917830] team0: Port device team_slave_0 added [ 2114.930459] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2114.955380] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2114.970641] team0: Port device team_slave_1 added [ 2115.029885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2115.036140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2115.099648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2115.151253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2115.157527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2115.213889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2115.260460] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2115.285166] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2115.362283] device hsr_slave_0 entered promiscuous mode [ 2115.380332] device hsr_slave_1 entered promiscuous mode [ 2115.402876] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2115.420257] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2115.448550] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2115.633493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2115.653029] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2115.672848] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2115.695737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2115.710677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2115.720041] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2115.726097] 8021q: adding VLAN 0 to HW filter on device team0 [ 2115.754718] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2115.772424] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2115.780195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2115.788020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2115.800140] bridge0: port 1(bridge_slave_0) entered blocking state [ 2115.806570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2115.842532] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2115.850188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2115.857263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2115.880566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2115.888227] bridge0: port 2(bridge_slave_1) entered blocking state [ 2115.894639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2115.905527] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2115.923849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2115.953654] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2115.974214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2115.994256] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2116.006460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2116.016297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2116.031930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2116.040499] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2116.052254] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2116.059604] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2116.066609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2116.094316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2116.114220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2116.122238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2116.136433] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2116.145104] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2116.153275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2116.160949] Bluetooth: hci0 command 0x041b tx timeout [ 2116.160972] Bluetooth: hci2 command 0x041b tx timeout [ 2116.190114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2116.200833] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2116.211021] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2116.217213] 8021q: adding VLAN 0 to HW filter on device team0 [ 2116.231622] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2116.237693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2116.254470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2116.262166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2116.271682] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2116.296329] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2116.324246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2116.343959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2116.364278] bridge0: port 1(bridge_slave_0) entered blocking state [ 2116.370695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2116.387697] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2116.396106] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2116.409771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2116.417005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2116.429766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2116.437447] bridge0: port 2(bridge_slave_1) entered blocking state [ 2116.443856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2116.456969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2116.464579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2116.478157] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2116.489003] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2116.505607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2116.513891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2116.525811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2116.546338] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2116.554503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2116.567370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2116.585594] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2116.593192] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2116.605577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2116.622700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2116.636802] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2116.645913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2116.662648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2116.675496] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2116.684211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2116.692934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2116.703450] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2116.710121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2116.725953] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2116.734200] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2116.741952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2116.748653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2116.761833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2116.775422] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2116.785571] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2116.793091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2116.803554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2116.837549] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2116.845723] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2116.852932] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2116.863707] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2116.872372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2116.880379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2116.890817] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2116.898507] device veth0_vlan entered promiscuous mode [ 2116.907696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2116.915085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2116.924144] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2116.932811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2116.944585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2116.955563] device veth1_vlan entered promiscuous mode [ 2116.963208] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2116.974315] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2116.988040] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2116.998511] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2117.006035] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2117.013740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2117.021263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2117.028936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2117.038840] device veth0_macvtap entered promiscuous mode [ 2117.045827] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2117.055521] device veth1_macvtap entered promiscuous mode [ 2117.062940] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2117.071154] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2117.078901] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2117.090799] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2117.100876] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2117.112019] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2117.121167] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2117.128097] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2117.136444] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2117.143975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2117.152106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2117.161332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2117.168216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2117.177989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2117.188085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.198125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2117.208654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.218053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2117.227914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.237169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2117.246934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.257039] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2117.264104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2117.271713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2117.282028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2117.292241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2117.302613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.311927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2117.321789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.330984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2117.340742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.349908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2117.359994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.370499] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2117.377376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2117.385012] device veth0_vlan entered promiscuous mode [ 2117.392078] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2117.399890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2117.417240] device veth1_vlan entered promiscuous mode [ 2117.436220] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2117.448163] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2117.457294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2117.465327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2117.475011] device veth0_macvtap entered promiscuous mode [ 2117.481812] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2117.490943] device veth1_macvtap entered promiscuous mode [ 2117.497257] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2117.507393] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2117.518022] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2117.528981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2117.539172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.548604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2117.558878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.568064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2117.577820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.586979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2117.596734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.606192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2117.615972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.626244] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2117.633732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2117.641764] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2117.649107] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2117.657626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2117.665447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2117.675343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2117.686798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.701875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2117.712356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.721876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2117.731652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.740838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2117.750836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.760809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2117.770592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.780978] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2117.787875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2117.796165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2117.804324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2118.239582] Bluetooth: hci2 command 0x040f tx timeout [ 2118.246346] Bluetooth: hci0 command 0x040f tx timeout 23:26:29 executing program 4: nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.swap.current\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000180)={0x2, 0x3, 0x8d, 0x8, 0xff, 0x1, 0x2}, &(0x7f00000001c0)={0x8, 0xb72c, 0x7fffffff, 0x10000, 0x1, 0x7fff, 0x9a, 0x5}, &(0x7f0000000240)={0x7, 0x4, 0x400, 0x6, 0x2, 0x0, 0x0, 0x400}, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x3f]}, 0x8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100021bd7000fcdbdf25100000000500350002000000050035000500000087d6fe2f83ad157effa369633a2eb5c5296ad56858f4184aef6be24d5daa7deb7ee73d8dd807a485541e4429e02a5da4e238732a19e882e61a7a23a9700736bd233896dc8ff624207717a3099db7d4fce852e2d2ec414263b307215a6808216547a0f4cb1d6efd12884087f77c4cb1e7622d483e5f0a0c144104fcda2a1316a5213a0c3578f7b1fe19d328d634b60f53c6b751b7612021a8eff8fd446fa6d4bc1a49ef7400228860fdda51"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24008080) 23:26:29 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x288000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/nf_conntrack_expect\x00') write$sndseq(r0, 0x0, 0x0) [ 2120.319569] Bluetooth: hci0 command 0x0419 tx timeout [ 2120.324974] Bluetooth: hci2 command 0x0419 tx timeout [ 2121.982551] oom_reaper: reaped process 23940 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2122.001143] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2122.022772] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2122.027562] CPU: 0 PID: 7979 Comm: syz-fuzzer Not tainted 4.14.214-syzkaller #0 [ 2122.034998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2122.044347] Call Trace: [ 2122.046932] dump_stack+0x1b2/0x283 [ 2122.050556] dump_header+0x178/0x82f [ 2122.054264] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2122.059445] ? ___ratelimit+0x2cd/0x522 [ 2122.063412] oom_kill_process.cold+0x10/0xb18 [ 2122.067897] out_of_memory+0xe3e/0x1190 [ 2122.071849] ? oom_killer_disable+0x1c0/0x1c0 [ 2122.076324] ? mutex_trylock+0x152/0x1a0 [ 2122.080360] __alloc_pages_nodemask+0x23e1/0x2720 [ 2122.085184] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2122.090010] alloc_pages_current+0x155/0x260 [ 2122.094393] filemap_fault+0xea3/0x1980 [ 2122.098430] ext4_filemap_fault+0x84/0xb0 [ 2122.102552] __do_fault+0xfa/0x380 [ 2122.106066] __handle_mm_fault+0x2497/0x4620 [ 2122.110465] ? vm_insert_page+0x7c0/0x7c0 [ 2122.114601] ? lock_downgrade+0x740/0x740 [ 2122.118740] handle_mm_fault+0x391/0x860 [ 2122.122778] __do_page_fault+0x549/0xad0 [ 2122.126813] ? spurious_fault+0x640/0x640 [ 2122.130949] ? do_page_fault+0x60/0x4f2 [ 2122.134898] ? page_fault+0x2f/0x50 [ 2122.138497] page_fault+0x45/0x50 [ 2122.141925] RIP: 0000:0xb358f8 [ 2122.145087] RSP: 3b977f43:000000c00003dec8 EFLAGS: 00438920 [ 2122.147348] Mem-Info: [ 2122.153177] syz-executor.1: vmalloc: allocation failure, allocated 481828864 of 1073745920 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2122.153210] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2122.153231] CPU: 0 PID: 23940 Comm: syz-executor.1 Not tainted 4.14.214-syzkaller #0 [ 2122.153236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2122.153238] Call Trace: [ 2122.153252] dump_stack+0x1b2/0x283 [ 2122.153266] warn_alloc.cold+0x96/0x1cc [ 2122.153274] ? zone_watermark_ok_safe+0x220/0x220 [ 2122.153298] __vmalloc_area_node+0x48a/0x680 [ 2122.153311] ? __vmalloc_node_range+0x150/0x150 [ 2122.153320] ? __get_vm_area_node+0x27d/0x340 [ 2122.153331] __vmalloc_node_range+0xbe/0x150 [ 2122.153344] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2122.153351] vmalloc_user+0x47/0xa0 [ 2122.153358] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2122.153365] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2122.153372] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2122.153384] __vb2_queue_alloc+0x47a/0xd90 [ 2122.153401] vb2_core_create_bufs+0x279/0x5a0 [ 2122.153410] ? __vb2_queue_free+0x7a0/0x7a0 [ 2122.153423] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2122.153432] ? trace_hardirqs_on+0x10/0x10 [ 2122.153441] vb2_create_bufs+0x2e1/0x5b0 [ 2122.153454] ? vb2_thread_start.cold+0x24/0x24 [ 2122.153462] ? trace_hardirqs_on+0x10/0x10 [ 2122.153478] v4l_create_bufs+0xa4/0x150 [ 2122.153490] __video_do_ioctl+0x65b/0x6a0 [ 2122.153505] ? video_ioctl2+0x30/0x30 [ 2122.153518] ? __might_fault+0x177/0x1b0 [ 2122.153529] video_usercopy+0xf5/0xe90 [ 2122.153538] ? video_ioctl2+0x30/0x30 [ 2122.153548] ? v4l_g_ctrl+0x390/0x390 [ 2122.153556] ? lock_acquire+0x170/0x3f0 [ 2122.153564] ? trace_hardirqs_on+0x10/0x10 [ 2122.153574] ? trace_hardirqs_on+0x10/0x10 [ 2122.153584] ? futex_exit_release+0x220/0x220 [ 2122.153592] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2122.153602] ? __might_fault+0x104/0x1b0 [ 2122.153612] v4l2_ioctl+0x1bb/0x2f0 [ 2122.153619] ? v4l2_open+0x2f0/0x2f0 [ 2122.153629] do_vfs_ioctl+0x75a/0xff0 [ 2122.153640] ? ioctl_preallocate+0x1a0/0x1a0 [ 2122.153648] ? lock_downgrade+0x740/0x740 [ 2122.153661] ? __fget+0x225/0x360 [ 2122.153670] ? do_vfs_ioctl+0xff0/0xff0 [ 2122.153681] ? security_file_ioctl+0x83/0xb0 [ 2122.153691] SyS_ioctl+0x7f/0xb0 [ 2122.153699] ? do_vfs_ioctl+0xff0/0xff0 [ 2122.153710] do_syscall_64+0x1d5/0x640 [ 2122.153725] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2122.153732] RIP: 0033:0x45e219 [ 2122.153737] RSP: 002b:00007f95d4583c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2122.153746] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2122.153754] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 2122.163816] active_anon:17013 inactive_anon:45333 isolated_anon:0 [ 2122.163816] active_file:13 inactive_file:12 isolated_file:0 [ 2122.163816] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2122.163816] slab_reclaimable:12101 slab_unreclaimable:111884 [ 2122.163816] mapped:52725 shmem:45845 pagetables:741 bounce:0 [ 2122.163816] free:14070 free_pcp:252 free_cma:0 [ 2122.169920] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2122.169925] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2122.169930] R13: 00007ffc70f4222f R14: 00007f95d45849c0 R15: 000000000119bf8c [ 2122.172351] Mem-Info: [ 2122.175080] Node 0 active_anon:67624kB inactive_anon:181288kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:187492kB dirty:0kB writeback:0kB shmem:183312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2122.183001] active_anon:17013 inactive_anon:45333 isolated_anon:0 [ 2122.183001] active_file:13 inactive_file:12 isolated_file:0 [ 2122.183001] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2122.183001] slab_reclaimable:12101 slab_unreclaimable:111884 [ 2122.183001] mapped:52725 shmem:45845 pagetables:741 bounce:0 [ 2122.183001] free:14070 free_pcp:251 free_cma:0 [ 2122.183016] Node 0 active_anon:67624kB inactive_anon:181288kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:187492kB dirty:0kB writeback:0kB shmem:183312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2122.183030] Node 1 active_anon:428kB inactive_anon:44kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23408kB dirty:0kB writeback:0kB shmem:68kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2122.183033] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2122.183052] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2122.183071] Node 0 DMA32 free:18524kB min:36200kB low:45248kB high:54296kB active_anon:67624kB inactive_anon:181288kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2820kB bounce:0kB free_pcp:880kB local_pcp:116kB free_cma:0kB [ 2122.183091] lowmem_reserve[]: 0 0 0 0 0 [ 2122.183109] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2122.183124] lowmem_reserve[]: 0 0 0 0 0 [ 2122.183141] Node 1 Normal free:26800kB min:53696kB low:67120kB high:80544kB active_anon:428kB inactive_anon:44kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:144kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2122.183159] lowmem_reserve[]: 0 0 0 0 0 [ 2122.183179] Node 0 DMA: 1*4kB (E) 1*8kB (U) 0*16kB 0*32kB 1*64kB (E) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10956kB [ 2122.183257] Node 0 DMA32: 809*4kB (MEH) 508*8kB (UME) 269*16kB (UMEH) 70*32kB (UME) 23*64kB (UME) 9*128kB (UMH) 8*256kB (UMH) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18516kB [ 2122.183320] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2122.183365] Node 1 Normal: 34*4kB (UME) 53*8kB (ME) 44*16kB (ME) 40*32kB (UME) 31*64kB (UME) 20*128kB (UM) 15*256kB [ 2122.201016] Node 1 active_anon:428kB inactive_anon:44kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23408kB dirty:0kB writeback:0kB shmem:68kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2122.204796] (ME) [ 2122.207821] Node 0 [ 2122.212327] 9*512kB (UM) 3*1024kB [ 2122.218966] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2122.223313] (UME) [ 2122.227231] lowmem_reserve[]: [ 2122.231256] 2*2048kB (M) 1*4096kB (M) = 26800kB [ 2122.231276] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2122.231282] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2122.231288] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2122.231294] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2122.231298] 45870 total pagecache pages [ 2122.231305] 0 pages in swap cache [ 2122.231309] Swap cache stats: add 0, delete 0, find 0/0 [ 2122.231312] Free swap = 0kB [ 2122.231315] Total swap = 0kB [ 2122.231321] 2097051 pages RAM [ 2122.231324] 0 pages HighMem/MovableOnly [ 2122.231327] 363840 pages reserved [ 2122.231329] 0 pages cma reserved [ 2122.906998] 0 2717 2718 2718 2718 [ 2122.919070] Node 0 DMA32 free:76120kB min:36200kB low:45248kB high:54296kB active_anon:67624kB inactive_anon:181288kB active_file:36kB inactive_file:640kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2820kB bounce:0kB free_pcp:1236kB local_pcp:600kB free_cma:0kB [ 2122.977459] lowmem_reserve[]: 0 0 0 0 0 [ 2122.982201] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2123.008752] lowmem_reserve[]: 0 0 0 0 0 [ 2123.014646] Node 1 Normal free:436992kB min:53696kB low:67120kB high:80544kB active_anon:428kB inactive_anon:44kB active_file:20kB inactive_file:3172kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:144kB bounce:0kB free_pcp:824kB local_pcp:120kB free_cma:0kB [ 2123.046611] lowmem_reserve[]: 0 0 0 0 0 [ 2123.051697] Node 0 DMA: 1*4kB (E) 0*8kB 1*16kB (U) 0*32kB 1*64kB (E) 5*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 11476kB [ 2123.066952] Node 0 DMA32: 948*4kB (UME) 644*8kB (UMEH) 469*16kB (UMEH) 153*32kB (UME) 87*64kB (UMEH) 34*128kB (UMH) 42*256kB (UMH) 41*512kB (UH) 13*1024kB (U) 0*2048kB 0*4096kB = 76320kB [ 2123.084613] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2123.096142] Node 1 Normal: 8*4kB (UE) 8*8kB (UE) 10*16kB (UE) 6*32kB (UE) 23*64kB (UME) 23*128kB (UM) 18*256kB (UME) 11*512kB (UM) 4*1024kB (UME) 38*2048kB (UM) 83*4096kB (UM) = 436992kB [ 2123.113783] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2123.123811] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2123.133110] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2123.142674] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2123.151958] 46828 total pagecache pages [ 2123.155942] 0 pages in swap cache [ 2123.160408] Swap cache stats: add 0, delete 0, find 0/0 [ 2123.165770] Free swap = 0kB [ 2123.168779] Total swap = 0kB [ 2123.173579] 2097051 pages RAM [ 2123.176686] 0 pages HighMem/MovableOnly [ 2123.181619] 363840 pages reserved [ 2123.185069] 0 pages cma reserved [ 2123.188424] Out of memory (oom_kill_allocating_task): Kill process 7979 (syz-fuzzer) score 0 or sacrifice child [ 2123.200106] Killed process 23297 (syz-executor.4) total-vm:85024kB, anon-rss:72kB, file-rss:4kB, shmem-rss:0kB [ 2123.218097] oom_reaper: reaped process 23297 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2123.721717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2123.728437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2123.742626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2123.751961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2123.765755] device bridge_slave_1 left promiscuous mode [ 2123.774408] bridge0: port 2(bridge_slave_1) entered disabled state [ 2123.786087] device bridge_slave_0 left promiscuous mode [ 2123.795874] bridge0: port 1(bridge_slave_0) entered disabled state [ 2123.808257] device veth1_macvtap left promiscuous mode [ 2123.816808] device veth0_macvtap left promiscuous mode [ 2123.825989] device veth1_vlan left promiscuous mode [ 2123.836554] device veth0_vlan left promiscuous mode [ 2123.987594] device hsr_slave_1 left promiscuous mode [ 2123.998121] device hsr_slave_0 left promiscuous mode [ 2124.021904] team0 (unregistering): Port device team_slave_1 removed [ 2124.033950] team0 (unregistering): Port device team_slave_0 removed [ 2124.045429] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2124.061237] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2124.105608] bond0 (unregistering): Released all slaves 23:26:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x109}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r1, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4050}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x9ba3a6b656e2342d, 0x0, &(0x7f0000000200)) 23:26:37 executing program 4: nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.swap.current\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000180)={0x2, 0x3, 0x8d, 0x8, 0xff, 0x1, 0x2}, &(0x7f00000001c0)={0x8, 0xb72c, 0x7fffffff, 0x10000, 0x1, 0x7fff, 0x9a, 0x5}, &(0x7f0000000240)={0x7, 0x4, 0x400, 0x6, 0x2, 0x0, 0x0, 0x400}, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x3f]}, 0x8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100021bd7000fcdbdf25100000000500350002000000050035000500000087d6fe2f83ad157effa369633a2eb5c5296ad56858f4184aef6be24d5daa7deb7ee73d8dd807a485541e4429e02a5da4e238732a19e882e61a7a23a9700736bd233896dc8ff624207717a3099db7d4fce852e2d2ec414263b307215a6808216547a0f4cb1d6efd12884087f77c4cb1e7622d483e5f0a0c144104fcda2a1316a5213a0c3578f7b1fe19d328d634b60f53c6b751b7612021a8eff8fd446fa6d4bc1a49ef7400228860fdda51"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24008080) 23:26:37 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x3ca26104, 0x0, 0x9, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x9, 0x0, 0x0, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:26:37 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x9}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x9, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x0, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:26:37 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x0, 0x6, 0xfffffff9, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x0, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) 23:26:37 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') write$sndseq(r0, 0x0, 0x0) 23:26:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000200)) 23:26:37 executing program 3: socket$nl_crypto(0x10, 0x3, 0x15) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') write$sndseq(r0, 0x0, 0x0) 23:26:37 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') write$sndseq(r0, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="042800000000000500370001000000080032000200000008000600", @ANYRES32=0x0, @ANYBLOB="08003b000600000008003a0001010000"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x8000) 23:26:37 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x7, 0x5, 0x88}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000300)={{0x7f, 0x7}, 'port0\x00', 0x12, 0xc, 0x3, 0x81, 0x9, 0x800, 0x3, 0x0, 0x5, 0x1}) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0x8, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x4, 0x1, 0x1, 0xf6, 0x9, 0x5, "4d8f7be3"}, 0x1cd55806, 0x0, @fd=0xffffffffffffffff, 0x101}) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000180)) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000240)={{0x7, 0x6}, 'port1\x00', 0x0, 0x4, 0xffffffff, 0xad, 0xcc, 0x0, 0x37400000, 0x0, 0x1, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)={0x0, 0x4, 0x4, 0x1, 0x1, {}, {0x2, 0x2, 0x80, 0x7f, 0x7f, 0x1, 'fw;*'}, 0x40000, 0x4, @fd=r2, 0xffff}) getsockopt$inet6_tcp_int(r1, 0x6, 0x10, 0x0, &(0x7f0000000200)) 23:26:37 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='gid_map\x00') write$sndseq(r0, 0x0, 0x0) 23:26:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000000)) 23:26:38 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x1, @win={{0x3ca26104, 0x0, 0x9, 0x10000000}, 0x0, 0x40000000, &(0x7f00000000c0)={{0x9, 0x0, 0x0, 0x2}, &(0x7f0000000080)={{0x2, 0x1000, 0x3ff, 0xfffffff9}, &(0x7f0000000040)={{0x6, 0xff, 0x1f, 0x8}}}}, 0x7fffffff, &(0x7f0000000100)="438da3aaed0a86e48f8762c2ab241f05d0aabcaa5d7e997def7987b8f50b494336a131770c18bd198bc0e47e231e82fa7b95fe0e830eecb8512d029cd5a4f62e875c6b"}}, 0x16c}) [ 2129.397646] IPVS: ftp: loaded support on port[0] = 21 [ 2129.605889] chnl_net:caif_netlink_parms(): no params data found [ 2129.747670] bridge0: port 1(bridge_slave_0) entered blocking state [ 2129.757385] bridge0: port 1(bridge_slave_0) entered disabled state [ 2129.765886] device bridge_slave_0 entered promiscuous mode [ 2129.776514] bridge0: port 2(bridge_slave_1) entered blocking state [ 2129.784562] bridge0: port 2(bridge_slave_1) entered disabled state [ 2129.795201] device bridge_slave_1 entered promiscuous mode [ 2129.826984] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2129.840937] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2129.873359] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2129.881615] team0: Port device team_slave_0 added [ 2129.887279] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2129.900198] team0: Port device team_slave_1 added [ 2129.931757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2129.938018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2129.967906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2129.983499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2129.989922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2130.019364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2130.032655] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2130.041823] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2130.078037] device hsr_slave_0 entered promiscuous mode [ 2130.085481] device hsr_slave_1 entered promiscuous mode [ 2130.094994] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2130.103998] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2130.236289] bridge0: port 2(bridge_slave_1) entered blocking state [ 2130.242848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2130.249548] bridge0: port 1(bridge_slave_0) entered blocking state [ 2130.255933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2130.315256] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2130.324064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2130.335692] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2130.348024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2130.357854] bridge0: port 1(bridge_slave_0) entered disabled state [ 2130.367287] bridge0: port 2(bridge_slave_1) entered disabled state [ 2130.379570] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2130.385636] 8021q: adding VLAN 0 to HW filter on device team0 [ 2130.400644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2130.412490] bridge0: port 1(bridge_slave_0) entered blocking state [ 2130.418878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2130.439636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2130.447583] bridge0: port 2(bridge_slave_1) entered blocking state [ 2130.453986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2130.463353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2130.486251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2130.496977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2130.505035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2130.517047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2130.526509] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2130.536634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2130.556393] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2130.563525] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2130.579368] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2130.592988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2130.600731] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2130.610233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2130.682061] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2130.693202] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2130.701962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2130.713871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2130.756838] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2130.764747] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2130.773840] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2130.786050] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2130.794802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2130.805168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2130.816208] device veth0_vlan entered promiscuous mode [ 2130.826396] device veth1_vlan entered promiscuous mode [ 2130.833333] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2130.840366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2130.847296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2130.855061] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2130.864935] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2130.882480] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2130.892540] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2130.900617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2130.907821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2130.916445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2130.926989] device veth0_macvtap entered promiscuous mode [ 2130.934152] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2130.943761] device veth1_macvtap entered promiscuous mode [ 2130.950222] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2130.959697] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2130.970428] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2130.980137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2130.990425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.000507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2131.010702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.020105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2131.030124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.039504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2131.049674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.059214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2131.069159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.079854] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2131.086826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2131.094017] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2131.101914] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2131.109516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2131.117296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2131.127044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2131.138049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.148040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2131.158491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.167601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2131.177745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.187198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2131.197297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.207044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2131.217032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.227715] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2131.235304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2131.242598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2131.251413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2131.438581] Bluetooth: hci0 command 0x0409 tx timeout [ 2131.750117] modprobe invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2131.770276] modprobe cpuset=/ mems_allowed=0-1 [ 2131.774895] CPU: 1 PID: 24242 Comm: modprobe Not tainted 4.14.214-syzkaller #0 [ 2131.782249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2131.791626] Call Trace: [ 2131.794190] dump_stack+0x1b2/0x283 [ 2131.797793] dump_header+0x178/0x82f [ 2131.801483] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2131.806600] ? ___ratelimit+0x2cd/0x522 [ 2131.810552] oom_kill_process.cold+0x10/0xb18 [ 2131.815023] out_of_memory+0xe3e/0x1190 [ 2131.818974] ? oom_killer_disable+0x1c0/0x1c0 [ 2131.823442] ? mutex_trylock+0x152/0x1a0 [ 2131.827479] __alloc_pages_nodemask+0x23e1/0x2720 [ 2131.832300] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2131.837125] alloc_pages_current+0x155/0x260 [ 2131.841508] filemap_fault+0xea3/0x1980 [ 2131.845462] ext4_filemap_fault+0x84/0xb0 [ 2131.849586] __do_fault+0xfa/0x380 [ 2131.853100] __handle_mm_fault+0x2497/0x4620 [ 2131.857497] ? vm_insert_page+0x7c0/0x7c0 [ 2131.861632] handle_mm_fault+0x391/0x860 [ 2131.865674] __do_page_fault+0x549/0xad0 [ 2131.869715] ? spurious_fault+0x640/0x640 [ 2131.873929] ? do_page_fault+0x60/0x4f2 [ 2131.877968] ? page_fault+0x2f/0x50 [ 2131.881572] page_fault+0x45/0x50 [ 2131.885010] RIP: 0000:0x55d614446000 [ 2131.888695] RSP: 14448160:00007ffd733f5de0 EFLAGS: 7fdc4d1c6170 [ 2131.890909] Mem-Info: [ 2131.899505] active_anon:17701 inactive_anon:45333 isolated_anon:0 [ 2131.899505] active_file:22 inactive_file:3 isolated_file:0 [ 2131.899505] unevictable:0 dirty:4 writeback:0 unstable:0 [ 2131.899505] slab_reclaimable:12165 slab_unreclaimable:113934 [ 2131.899505] mapped:52769 shmem:45846 pagetables:797 bounce:0 [ 2131.899505] free:25102 free_pcp:0 free_cma:0 [ 2131.934105] Node 0 active_anon:69664kB inactive_anon:181272kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:152804kB dirty:0kB writeback:0kB shmem:183292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2131.962602] Node 1 active_anon:1144kB inactive_anon:60kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58224kB dirty:0kB writeback:0kB shmem:92kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2131.989451] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2132.017171] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2132.024343] Node 0 DMA32 free:35772kB min:36200kB low:45248kB high:54296kB active_anon:67616kB inactive_anon:181272kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2760kB bounce:0kB free_pcp:236kB local_pcp:236kB free_cma:0kB [ 2132.055748] lowmem_reserve[]: 0 0 0 0 0 [ 2132.059792] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2132.085432] lowmem_reserve[]: 0 0 0 0 0 [ 2132.089493] Node 1 Normal free:53428kB min:53696kB low:67120kB high:80544kB active_anon:1144kB inactive_anon:60kB active_file:28kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:640kB pagetables:428kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2132.117730] lowmem_reserve[]: 0 0 0 0 0 [ 2132.121765] Node 0 DMA: 68*4kB (UE) 19*8kB (U) 17*16kB (U) 6*32kB (U) 5*64kB (UE) 9*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 11064kB [ 2132.137139] Node 0 DMA32: 771*4kB (MEH) 568*8kB (MEH) 284*16kB (UMEH) 123*32kB (UMEH) 69*64kB (MEH) 29*128kB (MH) 16*256kB (MH) 5*512kB (MH) 5*1024kB (UM) 0*2048kB 0*4096kB = 36012kB [ 2132.153829] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2132.164594] Node 1 Normal: 77*4kB (ME) 62*8kB (UME) 53*16kB (UME) 42*32kB (ME) 22*64kB (UME) 15*128kB (UM) 16*256kB (UME) 8*512kB (M) 2*1024kB (ME) 2*2048kB (M) 8*4096kB (UM) = 53428kB [ 2132.181343] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2132.190237] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2132.198875] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2132.207696] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2132.216313] 45875 total pagecache pages [ 2132.220319] 0 pages in swap cache [ 2132.223788] Swap cache stats: add 0, delete 0, find 0/0 [ 2132.229163] Free swap = 0kB [ 2132.232168] Total swap = 0kB [ 2132.235172] 2097051 pages RAM [ 2132.238391] 0 pages HighMem/MovableOnly [ 2132.242351] 363840 pages reserved [ 2132.245788] 0 pages cma reserved [ 2132.249198] Out of memory (oom_kill_allocating_task): Kill process 24242 (modprobe) score 0 or sacrifice child [ 2132.259400] Killed process 24242 (modprobe) total-vm:4188kB, anon-rss:36kB, file-rss:0kB, shmem-rss:0kB [ 2132.269893] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2132.288284] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2132.293069] CPU: 1 PID: 22310 Comm: syz-fuzzer Not tainted 4.14.214-syzkaller #0 [ 2132.300594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2132.309937] Call Trace: [ 2132.312510] dump_stack+0x1b2/0x283 [ 2132.316120] dump_header+0x178/0x82f [ 2132.319810] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2132.324886] ? ___ratelimit+0x2cd/0x522 [ 2132.328838] oom_kill_process.cold+0x10/0xb18 [ 2132.333312] out_of_memory+0xe3e/0x1190 [ 2132.337263] ? oom_killer_disable+0x1c0/0x1c0 [ 2132.341732] ? mutex_trylock+0x152/0x1a0 [ 2132.345769] __alloc_pages_nodemask+0x23e1/0x2720 [ 2132.350593] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2132.355419] alloc_pages_current+0x155/0x260 [ 2132.359803] filemap_fault+0xea3/0x1980 [ 2132.363756] ext4_filemap_fault+0x84/0xb0 [ 2132.367877] __do_fault+0xfa/0x380 [ 2132.371391] __handle_mm_fault+0x2497/0x4620 [ 2132.375783] ? vm_insert_page+0x7c0/0x7c0 [ 2132.379910] handle_mm_fault+0x391/0x860 [ 2132.383958] __do_page_fault+0x549/0xad0 [ 2132.387998] ? spurious_fault+0x640/0x640 [ 2132.392126] ? do_page_fault+0x60/0x4f2 [ 2132.396107] ? page_fault+0x2f/0x50 [ 2132.399726] page_fault+0x45/0x50 [ 2132.403155] RIP: be4300:0x1f07c2e45e6 [ 2132.406938] RSP: 03e7:000000c0009afe40 EFLAGS: 00000003 [ 2132.417063] Mem-Info: [ 2132.425200] active_anon:17686 inactive_anon:45333 isolated_anon:0 [ 2132.425200] active_file:17 inactive_file:15 isolated_file:0 [ 2132.425200] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2132.425200] slab_reclaimable:12165 slab_unreclaimable:113942 [ 2132.425200] mapped:52757 shmem:45846 pagetables:791 bounce:0 [ 2132.425200] free:25148 free_pcp:12 free_cma:0 [ 2132.458437] Node 0 active_anon:69600kB inactive_anon:181272kB active_file:44kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:152804kB dirty:0kB writeback:0kB shmem:183292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2132.487682] Node 1 active_anon:1144kB inactive_anon:60kB active_file:28kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58224kB dirty:0kB writeback:0kB shmem:92kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2132.520856] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2132.551542] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2132.556579] Node 0 DMA32 free:36108kB min:36200kB low:45248kB high:54296kB active_anon:67552kB inactive_anon:181272kB active_file:88kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2736kB bounce:0kB free_pcp:48kB local_pcp:48kB free_cma:0kB [ 2132.587532] lowmem_reserve[]: 0 0 0 0 0 [ 2132.591687] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2132.617381] lowmem_reserve[]: 0 0 0 0 0 [ 2132.621420] Node 1 Normal free:53428kB min:53696kB low:67120kB high:80544kB active_anon:1144kB inactive_anon:60kB active_file:0kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:640kB pagetables:428kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2132.649530] lowmem_reserve[]: 0 0 0 0 0 [ 2132.653520] Node 0 DMA: 68*4kB (UE) 19*8kB (U) 17*16kB (U) 6*32kB (U) 5*64kB (UE) 9*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 11064kB [ 2132.668942] Node 0 DMA32: 775*4kB (UMEH) 564*8kB (UMEH) 279*16kB (MEH) 123*32kB (UMEH) 72*64kB (MEH) 29*128kB (MH) 16*256kB (MH) 5*512kB (MH) 5*1024kB (UM) 0*2048kB 0*4096kB = 36108kB [ 2132.685536] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2132.696272] Node 1 Normal: 77*4kB (ME) 62*8kB (UME) 53*16kB (UME) 42*32kB (ME) 22*64kB (UME) 15*128kB (UM) 16*256kB (UME) 8*512kB (M) 2*1024kB (ME) 2*2048kB (M) 8*4096kB (UM) = 53428kB [ 2132.712978] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2132.721877] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2132.730575] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2132.739442] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2132.748043] 45877 total pagecache pages [ 2132.752011] 0 pages in swap cache [ 2132.755446] Swap cache stats: add 0, delete 0, find 0/0 [ 2132.761053] Free swap = 0kB [ 2132.764053] Total swap = 0kB [ 2132.767045] 2097051 pages RAM [ 2132.770171] 0 pages HighMem/MovableOnly [ 2132.774133] 363840 pages reserved [ 2132.777564] 0 pages cma reserved [ 2132.780975] Out of memory (oom_kill_allocating_task): Kill process 22310 (syz-fuzzer) score 0 or sacrifice child [ 2132.791382] Killed process 22317 (syz-executor.2) total-vm:85024kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 2132.815132] oom_reaper: reaped process 22317 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2132.832125] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2132.846977] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2132.851808] CPU: 0 PID: 7981 Comm: syz-fuzzer Not tainted 4.14.214-syzkaller #0 [ 2132.859243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2132.868578] Call Trace: [ 2132.871165] dump_stack+0x1b2/0x283 [ 2132.874774] dump_header+0x178/0x82f [ 2132.878483] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2132.883562] ? ___ratelimit+0x2cd/0x522 [ 2132.887517] oom_kill_process.cold+0x10/0xb18 [ 2132.891995] out_of_memory+0xe3e/0x1190 [ 2132.895950] ? oom_killer_disable+0x1c0/0x1c0 [ 2132.900422] ? mutex_trylock+0x152/0x1a0 [ 2132.904461] __alloc_pages_nodemask+0x23e1/0x2720 [ 2132.909298] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2132.914127] alloc_pages_current+0x155/0x260 [ 2132.918512] filemap_fault+0xea3/0x1980 [ 2132.922471] ext4_filemap_fault+0x84/0xb0 [ 2132.926593] __do_fault+0xfa/0x380 [ 2132.930110] __handle_mm_fault+0x2497/0x4620 [ 2132.934497] ? vm_insert_page+0x7c0/0x7c0 [ 2132.938632] handle_mm_fault+0x391/0x860 [ 2132.942672] __do_page_fault+0x549/0xad0 [ 2132.946712] ? spurious_fault+0x640/0x640 [ 2132.950848] ? do_page_fault+0x60/0x4f2 [ 2132.954797] ? page_fault+0x2f/0x50 [ 2132.958400] page_fault+0x45/0x50 [ 2132.961827] RIP: 0f00:0xc004cb3da0 [ 2132.965337] RSP: 2e700:000000c000039de0 EFLAGS: 00000003 [ 2132.974156] Mem-Info: [ 2133.022325] active_anon:17650 inactive_anon:45333 isolated_anon:0 [ 2133.022325] active_file:263 inactive_file:226 isolated_file:32 [ 2133.022325] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2133.022325] slab_reclaimable:12165 slab_unreclaimable:113862 [ 2133.022325] mapped:44428 shmem:45846 pagetables:765 bounce:0 [ 2133.022325] free:25658 free_pcp:135 free_cma:0 [ 2133.060565] Node 0 active_anon:69456kB inactive_anon:181272kB active_file:1232kB inactive_file:1288kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:119788kB dirty:0kB writeback:0kB shmem:183292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2133.093252] Node 1 active_anon:1144kB inactive_anon:60kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58224kB dirty:0kB writeback:0kB shmem:92kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2133.124448] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2133.161963] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2133.177741] Node 0 DMA32 free:37168kB min:36200kB low:45248kB high:54296kB active_anon:67408kB inactive_anon:181272kB active_file:1088kB inactive_file:1416kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2632kB bounce:0kB free_pcp:620kB local_pcp:620kB free_cma:0kB [ 2133.212587] lowmem_reserve[]: 0 0 0 0 0 [ 2133.216614] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2133.242600] lowmem_reserve[]: 0 0 0 0 0 [ 2133.246595] Node 1 Normal free:53636kB min:53696kB low:67120kB high:80544kB active_anon:1144kB inactive_anon:60kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:640kB pagetables:428kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2133.277821] lowmem_reserve[]: 0 0 0 0 0 [ 2133.296425] Node 0 DMA: 68*4kB (UE) 20*8kB (U) 17*16kB (U) 6*32kB (U) 5*64kB (UE) 9*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 11072kB [ 2133.345096] Node 0 DMA32: 532*4kB (MEH) 450*8kB (UMEH) 209*16kB (UMEH) 103*32kB (UMEH) 71*64kB (MEH) 33*128kB (UMH) 32*256kB (UMH) 5*512kB (MH) 5*1024kB (UM) 0*2048kB 0*4096kB = 37008kB [ 2133.365253] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2133.376635] Node 1 Normal: 76*4kB (UME) 67*8kB (UME) 65*16kB (UME) 44*32kB (UME) 22*64kB (UME) 15*128kB (UM) 16*256kB (UME) 8*512kB (M) 2*1024kB (ME) 2*2048kB (M) 8*4096kB (UM) = 53720kB [ 2133.394426] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2133.410624] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2133.422854] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2133.432404] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2133.446700] 46715 total pagecache pages [ 2133.452406] 0 pages in swap cache [ 2133.458278] Swap cache stats: add 0, delete 0, find 0/0 [ 2133.475081] Free swap = 0kB [ 2133.496022] Total swap = 0kB [ 2133.514373] 2097051 pages RAM [ 2133.518164] Bluetooth: hci0 command 0x041b tx timeout [ 2133.539300] 0 pages HighMem/MovableOnly [ 2133.554509] 363840 pages reserved [ 2133.561241] 0 pages cma reserved [ 2133.572411] Out of memory (oom_kill_allocating_task): Kill process 7981 (syz-fuzzer) score 0 or sacrifice child [ 2133.583593] Killed process 23296 (syz-executor.1) total-vm:85024kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 2133.615750] oom_reaper: reaped process 23296 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2133.810387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2133.817215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2133.824980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2133.831851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2133.839530] device bridge_slave_1 left promiscuous mode [ 2133.845083] bridge0: port 2(bridge_slave_1) entered disabled state [ 2133.854332] device bridge_slave_0 left promiscuous mode [ 2133.865799] bridge0: port 1(bridge_slave_0) entered disabled state [ 2133.909098] device veth1_macvtap left promiscuous mode [ 2133.914418] device veth0_macvtap left promiscuous mode [ 2133.954677] device veth1_vlan left promiscuous mode [ 2133.977989] device veth0_vlan left promiscuous mode [ 2134.033421] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2134.099098] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2134.104071] CPU: 1 PID: 7981 Comm: syz-fuzzer Not tainted 4.14.214-syzkaller #0 [ 2134.111615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2134.121179] Call Trace: [ 2134.123767] dump_stack+0x1b2/0x283 [ 2134.127403] dump_header+0x178/0x82f [ 2134.131112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2134.136294] ? ___ratelimit+0x2cd/0x522 [ 2134.140263] oom_kill_process.cold+0x10/0xb18 [ 2134.144760] out_of_memory+0xe3e/0x1190 [ 2134.148731] ? oom_killer_disable+0x1c0/0x1c0 [ 2134.153218] ? mutex_trylock+0x152/0x1a0 [ 2134.157269] __alloc_pages_nodemask+0x23e1/0x2720 [ 2134.162113] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2134.166963] alloc_pages_current+0x155/0x260 [ 2134.171361] filemap_fault+0xea3/0x1980 [ 2134.175339] ext4_filemap_fault+0x84/0xb0 [ 2134.179483] __do_fault+0xfa/0x380 [ 2134.183015] __handle_mm_fault+0x2497/0x4620 [ 2134.187417] ? vm_insert_page+0x7c0/0x7c0 [ 2134.191553] ? __might_fault+0x177/0x1b0 [ 2134.195613] handle_mm_fault+0x391/0x860 [ 2134.199662] __do_page_fault+0x549/0xad0 [ 2134.203701] ? spurious_fault+0x640/0x640 [ 2134.207824] ? do_page_fault+0x60/0x4f2 [ 2134.211778] ? page_fault+0x2f/0x50 [ 2134.215424] page_fault+0x45/0x50 [ 2134.218853] RIP: 0f00:0xc004cb3da0 [ 2134.222493] RSP: 1e800:000000c000039f28 EFLAGS: 00000003 [ 2134.270743] Mem-Info: [ 2134.304483] active_anon:17619 inactive_anon:45333 isolated_anon:0 [ 2134.304483] active_file:47 inactive_file:0 isolated_file:25 [ 2134.304483] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2134.304483] slab_reclaimable:12179 slab_unreclaimable:113364 [ 2134.304483] mapped:44089 shmem:45846 pagetables:692 bounce:0 [ 2134.304483] free:25070 free_pcp:59 free_cma:0 [ 2134.339095] Node 0 active_anon:69340kB inactive_anon:181272kB active_file:72kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:118052kB dirty:0kB writeback:0kB shmem:183292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2134.368013] Node 1 active_anon:1140kB inactive_anon:60kB active_file:84kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58304kB dirty:0kB writeback:0kB shmem:92kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2134.401814] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2134.428925] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2134.433982] Node 0 DMA32 free:36308kB min:36200kB low:45248kB high:54296kB active_anon:67292kB inactive_anon:181272kB active_file:236kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7072kB pagetables:2344kB bounce:0kB free_pcp:232kB local_pcp:36kB free_cma:0kB [ 2134.463025] lowmem_reserve[]: 0 0 0 0 0 [ 2134.466992] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2134.492946] lowmem_reserve[]: 0 0 0 0 0 [ 2134.496923] Node 1 Normal free:53588kB min:53696kB low:67120kB high:80544kB active_anon:1140kB inactive_anon:60kB active_file:84kB inactive_file:180kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:672kB pagetables:428kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2134.525578] lowmem_reserve[]: 0 0 0 0 0 [ 2134.529596] Node 0 DMA: 62*4kB (UE) 20*8kB (U) 18*16kB (U) 6*32kB (U) 5*64kB (UE) 9*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 11064kB [ 2134.545055] Node 0 DMA32: 679*4kB (UME) 550*8kB (ME) 278*16kB (ME) 113*32kB (UME) 70*64kB (ME) 35*128kB (UM) 18*256kB (UM) 5*512kB (UM) 5*1024kB (UM) 0*2048kB 0*4096kB = 36428kB [ 2134.561500] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2134.572435] Node 1 Normal: 76*4kB (ME) 59*8kB (ME) 72*16kB (UME) 49*32kB (UME) 22*64kB (UME) 15*128kB (UM) 16*256kB (UME) 8*512kB (M) 2*1024kB (ME) 2*2048kB (M) 8*4096kB (UM) = 53928kB [ 2134.589156] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2134.598065] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2134.606628] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2134.615525] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2134.624122] 45885 total pagecache pages [ 2134.628111] 0 pages in swap cache [ 2134.631545] Swap cache stats: add 0, delete 0, find 0/0 [ 2134.636986] Free swap = 0kB [ 2134.640264] Total swap = 0kB [ 2134.643273] 2097051 pages RAM [ 2134.646353] 0 pages HighMem/MovableOnly [ 2134.650689] 363840 pages reserved [ 2134.654118] 0 pages cma reserved [ 2134.657458] Out of memory (oom_kill_allocating_task): Kill process 7981 (syz-fuzzer) score 0 or sacrifice child [ 2134.667767] Killed process 22316 (syz-executor.5) total-vm:85024kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 2134.686135] oom_reaper: reaped process 22316 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2134.865814] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2134.879285] in:imklog cpuset=/ mems_allowed=0-1 [ 2134.883973] CPU: 0 PID: 21824 Comm: in:imklog Not tainted 4.14.214-syzkaller #0 [ 2134.891410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2134.900755] Call Trace: [ 2134.903336] dump_stack+0x1b2/0x283 [ 2134.906957] dump_header+0x178/0x82f [ 2134.910660] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2134.915751] ? ___ratelimit+0x2cd/0x522 [ 2134.919715] oom_kill_process.cold+0x10/0xb18 [ 2134.924226] out_of_memory+0xe3e/0x1190 [ 2134.928196] ? oom_killer_disable+0x1c0/0x1c0 [ 2134.932678] ? mutex_trylock+0x152/0x1a0 [ 2134.936729] __alloc_pages_nodemask+0x23e1/0x2720 [ 2134.941575] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2134.946424] alloc_pages_current+0x155/0x260 [ 2134.950830] filemap_fault+0xea3/0x1980 [ 2134.954801] ext4_filemap_fault+0x84/0xb0 [ 2134.958941] __do_fault+0xfa/0x380 [ 2134.962484] __handle_mm_fault+0x2497/0x4620 [ 2134.966885] ? vm_insert_page+0x7c0/0x7c0 [ 2134.971024] ? lock_downgrade+0x740/0x740 [ 2134.975173] handle_mm_fault+0x391/0x860 [ 2134.979227] __do_page_fault+0x549/0xad0 [ 2134.983283] ? spurious_fault+0x640/0x640 [ 2134.987422] ? do_page_fault+0x60/0x4f2 [ 2134.991492] ? page_fault+0x2f/0x50 [ 2134.995108] page_fault+0x45/0x50 [ 2134.998548] RIP: fffff7e7:0x1f9f [ 2135.001900] RSP: 808384a0:00007fd3808384ac EFLAGS: 7fd380838dc4 [ 2135.067036] Mem-Info: [ 2135.101856] active_anon:17587 inactive_anon:45333 isolated_anon:0 [ 2135.101856] active_file:22 inactive_file:0 isolated_file:16 [ 2135.101856] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2135.101856] slab_reclaimable:12177 slab_unreclaimable:112853 [ 2135.101856] mapped:35371 shmem:45846 pagetables:648 bounce:0 [ 2135.101856] free:25004 free_pcp:376 free_cma:0 [ 2135.136036] Node 0 active_anon:69208kB inactive_anon:181272kB active_file:60kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):64kB mapped:83148kB dirty:0kB writeback:0kB shmem:183292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2135.164352] Node 1 active_anon:1140kB inactive_anon:60kB active_file:60kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58288kB dirty:0kB writeback:0kB shmem:92kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2135.193802] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2135.220731] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2135.225799] Node 0 DMA32 free:36064kB min:36200kB low:45248kB high:54296kB active_anon:67160kB inactive_anon:181272kB active_file:60kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2164kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2135.225836] device hsr_slave_1 left promiscuous mode [ 2135.254753] lowmem_reserve[]: 0 0 0 0 0 [ 2135.254772] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2135.254787] lowmem_reserve[]: 0 0 0 0 0 [ 2135.254804] Node 1 Normal free:53584kB min:53696kB low:67120kB high:80544kB active_anon:1140kB inactive_anon:60kB active_file:68kB inactive_file:392kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:672kB pagetables:428kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 2135.254825] lowmem_reserve[]: 0 0 0 0 [ 2135.290046] device hsr_slave_0 left promiscuous mode [ 2135.293585] 0 [ 2135.332977] Node 0 DMA: 59*4kB (UE) 21*8kB (U) 19*16kB (U) 6*32kB (U) 5*64kB (UE) 9*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 11076kB [ 2135.348372] Node 0 DMA32: 726*4kB (UME) 541*8kB (ME) 278*16kB (ME) 114*32kB (ME) 72*64kB (ME) 32*128kB (M) 17*256kB (UM) 5*512kB (UM) 5*1024kB (UM) 0*2048kB 0*4096kB = 36064kB [ 2135.364665] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2135.375446] Node 1 Normal: 6*4kB (UME) 125*8kB (UME) 76*16kB (UME) 56*32kB (UME) 24*64kB (UME) 15*128kB (UM) 16*256kB (UME) 8*512kB (M) 2*1024kB (ME) 2*2048kB (M) 8*4096kB (UM) = 54592kB [ 2135.392328] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2135.392847] team0 (unregistering): Port device team_slave_1 removed [ 2135.401405] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2135.401412] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2135.416911] team0 (unregistering): Port device team_slave_0 removed [ 2135.425252] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2135.425257] 45876 total pagecache pages [ 2135.425266] 0 pages in swap cache [ 2135.425270] Swap cache stats: add 0, delete 0, find 0/0 [ 2135.425273] Free swap = 0kB [ 2135.425276] Total swap = 0kB [ 2135.425282] 2097051 pages RAM [ 2135.425285] 0 pages HighMem/MovableOnly [ 2135.425288] 363840 pages reserved [ 2135.425291] 0 pages cma reserved [ 2135.425297] Out of memory (oom_kill_allocating_task): Kill process 21824 (in:imklog) score 0 or sacrifice child [ 2135.425336] Killed process 21807 (rsyslogd) total-vm:254332kB, anon-rss:880kB, file-rss:0kB, shmem-rss:0kB [ 2135.426819] oom_reaper: reaped process 21807 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2135.473905] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2135.515765] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2135.540658] bond0 (unregistering): Released all slaves [ 2135.638748] Bluetooth: hci0 command 0x040f tx timeout [ 2136.137400] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2136.152920] systemd-journal cpuset=/ mems_allowed=0-1 [ 2136.158241] CPU: 0 PID: 22286 Comm: systemd-journal Not tainted 4.14.214-syzkaller #0 [ 2136.166285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2136.175633] Call Trace: [ 2136.178214] dump_stack+0x1b2/0x283 [ 2136.181837] dump_header+0x178/0x82f [ 2136.185542] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2136.190632] ? ___ratelimit+0x2cd/0x522 [ 2136.194596] oom_kill_process.cold+0x10/0xb18 [ 2136.199091] out_of_memory+0xe3e/0x1190 [ 2136.203060] ? oom_killer_disable+0x1c0/0x1c0 [ 2136.207546] ? mutex_trylock+0x152/0x1a0 [ 2136.211601] __alloc_pages_nodemask+0x23e1/0x2720 [ 2136.216451] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2136.221293] ? cache_grow_begin+0x41/0x630 [ 2136.225520] cache_grow_begin+0x91/0x630 [ 2136.229569] ? cache_grow_begin+0x91/0x630 [ 2136.233791] fallback_alloc+0x207/0x2c0 [ 2136.237862] kmem_cache_alloc+0x1e5/0x3c0 [ 2136.242009] getname_flags+0xc8/0x550 [ 2136.245798] SyS_mkdirat+0x83/0x270 [ 2136.249414] ? SyS_mknod+0x30/0x30 [ 2136.252941] ? do_syscall_64+0x4c/0x640 [ 2136.256897] ? SyS_mkdirat+0x270/0x270 [ 2136.260811] do_syscall_64+0x1d5/0x640 [ 2136.264691] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2136.269878] RIP: 0033:0x7fd6ff0d4687 [ 2136.273580] RSP: 002b:00007ffe8d69f7a8 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 2136.281277] RAX: ffffffffffffffda RBX: 00007ffe8d6a2810 RCX: 00007fd6ff0d4687 [ 2136.288535] RDX: 0000000000000000 RSI: 00000000000001ed RDI: 0000557ff9487d60 [ 2136.295803] RBP: 00007ffe8d69f7e0 R08: 0000557ff8b8b3e5 R09: 0000000000000018 [ 2136.303074] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 2136.310333] R13: 0000000000000001 R14: 0000557ff9487d60 R15: 00007ffe8d69fe20 [ 2136.723203] Mem-Info: [ 2136.725652] active_anon:17411 inactive_anon:45332 isolated_anon:0 [ 2136.725652] active_file:32 inactive_file:8 isolated_file:0 [ 2136.725652] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2136.725652] slab_reclaimable:12187 slab_unreclaimable:112263 [ 2136.725652] mapped:35373 shmem:45845 pagetables:668 bounce:0 [ 2136.725652] free:25101 free_pcp:1 free_cma:0 [ 2136.772603] Node 0 active_anon:68516kB inactive_anon:181272kB active_file:128kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83268kB dirty:0kB writeback:0kB shmem:183292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2136.810608] Node 1 active_anon:1128kB inactive_anon:56kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58224kB dirty:0kB writeback:0kB shmem:88kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2136.846842] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2136.927622] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2136.932687] Node 0 DMA32 free:36152kB min:36200kB low:45248kB high:54296kB active_anon:66540kB inactive_anon:181272kB active_file:60kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7008kB pagetables:2244kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2137.072420] lowmem_reserve[]: 0 0 0 0 0 [ 2137.076450] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2137.260021] lowmem_reserve[]: 0 0 0 0 0 [ 2137.264139] Node 1 Normal free:53228kB min:53696kB low:67120kB high:80544kB active_anon:1132kB inactive_anon:56kB active_file:4kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:640kB pagetables:428kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2137.475418] lowmem_reserve[]: 0 0 0 0 0 [ 2137.499830] Node 0 DMA: 59*4kB (UE) 21*8kB (U) 19*16kB (U) 6*32kB (U) 5*64kB (UE) 9*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 11076kB [ 2137.604896] Node 0 DMA32: 711*4kB (UME) 581*8kB (UME) 294*16kB (UME) 112*32kB (UME) 71*64kB (UME) 34*128kB (UM) 16*256kB (UM) 5*512kB (UM) 5*1024kB (UM) 0*2048kB 0*4096kB = 36452kB [ 2137.677572] Bluetooth: hci0 command 0x0419 tx timeout [ 2137.719873] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2137.800862] Node 1 Normal: 77*4kB (UME) 78*8kB (UME) 54*16kB (UME) 44*32kB (UME) 23*64kB (UME) 17*128kB (UM) 16*256kB (UME) 8*512kB (M) 2*1024kB (ME) 2*2048kB (M) 8*4096kB (UM) = 53956kB [ 2137.908863] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2138.010866] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2138.064775] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2138.117127] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2138.196452] 45917 total pagecache pages [ 2138.227531] 0 pages in swap cache [ 2138.231010] Swap cache stats: add 0, delete 0, find 0/0 [ 2138.236358] Free swap = 0kB [ 2138.264193] Total swap = 0kB [ 2138.267229] 2097051 pages RAM [ 2138.298497] 0 pages HighMem/MovableOnly [ 2138.302496] 363840 pages reserved [ 2138.305951] 0 pages cma reserved [ 2138.366167] Out of memory (oom_kill_allocating_task): Kill process 22286 (systemd-journal) score 0 or sacrifice child [ 2138.423894] Killed process 22286 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:2144kB [ 2138.482326] oom_reaper: reaped process 22286 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2144kB [ 2138.566124] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2138.638432] systemd-udevd cpuset=/ mems_allowed=0-1 [ 2138.643501] CPU: 0 PID: 24260 Comm: systemd-udevd Not tainted 4.14.214-syzkaller #0 [ 2138.651292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2138.660633] Call Trace: [ 2138.663216] dump_stack+0x1b2/0x283 [ 2138.666835] dump_header+0x178/0x82f [ 2138.670540] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2138.675632] ? ___ratelimit+0x2cd/0x522 [ 2138.679601] oom_kill_process.cold+0x10/0xb18 [ 2138.684093] out_of_memory+0xe3e/0x1190 [ 2138.688066] ? oom_killer_disable+0x1c0/0x1c0 [ 2138.692551] ? mutex_trylock+0x152/0x1a0 [ 2138.696611] __alloc_pages_nodemask+0x23e1/0x2720 [ 2138.701456] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2138.706303] alloc_pages_current+0x155/0x260 [ 2138.710702] filemap_fault+0xea3/0x1980 [ 2138.714673] ext4_filemap_fault+0x84/0xb0 [ 2138.718811] __do_fault+0xfa/0x380 [ 2138.722342] __handle_mm_fault+0x2497/0x4620 [ 2138.726740] ? vm_insert_page+0x7c0/0x7c0 [ 2138.730878] ? lock_acquire+0x170/0x3f0 [ 2138.734844] ? task_work_run+0xfd/0x190 [ 2138.738815] handle_mm_fault+0x391/0x860 [ 2138.742868] __do_page_fault+0x549/0xad0 [ 2138.746923] ? spurious_fault+0x640/0x640 [ 2138.751059] ? do_page_fault+0x60/0x4f2 [ 2138.755025] ? page_fault+0x2f/0x50 [ 2138.758640] page_fault+0x45/0x50 [ 2138.762086] RIP: d3c73320:0x3 [ 2138.765175] RSP: 36a85c70:00007fffd3c733d0 EFLAGS: 556036a9b1e0 [ 2138.853643] Mem-Info: [ 2138.864294] active_anon:17342 inactive_anon:45332 isolated_anon:0 [ 2138.864294] active_file:13 inactive_file:15 isolated_file:0 [ 2138.864294] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2138.864294] slab_reclaimable:12187 slab_unreclaimable:111768 [ 2138.864294] mapped:34830 shmem:45845 pagetables:631 bounce:0 [ 2138.864294] free:25230 free_pcp:218 free_cma:0 [ 2138.971581] Node 0 active_anon:68176kB inactive_anon:181268kB active_file:92kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):116kB mapped:81248kB dirty:0kB writeback:0kB shmem:183292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2139.008779] Node 1 active_anon:1120kB inactive_anon:56kB active_file:28kB inactive_file:136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58224kB dirty:0kB writeback:0kB shmem:88kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2139.039129] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2139.113220] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2139.119161] Node 0 DMA32 free:35992kB min:36200kB low:45248kB high:54296kB active_anon:66128kB inactive_anon:181268kB active_file:136kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7008kB pagetables:2144kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB [ 2139.151898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2139.152409] lowmem_reserve[]: 0 0 0 0 0 [ 2139.159205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2139.163184] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2139.163201] lowmem_reserve[]: 0 0 0 0 0 [ 2139.163219] Node 1 Normal free:54228kB min:53696kB low:67120kB high:80544kB active_anon:1124kB inactive_anon:56kB active_file:48kB inactive_file:552kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:608kB pagetables:428kB bounce:0kB free_pcp:136kB local_pcp:120kB free_cma:0kB [ 2139.163235] lowmem_reserve[]: 0 0 0 0 0 [ 2139.163252] Node 0 DMA: 59*4kB (UE) [ 2139.201044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2139.263640] 21*8kB (U) 19*16kB (U) 6*32kB (U) 5*64kB (UE) 9*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 11076kB [ 2139.276999] Node 0 DMA32: 780*4kB (UME) 577*8kB (UME) 297*16kB (UME) 111*32kB (ME) 71*64kB (UME) 33*128kB (UM) 17*256kB (UM) 4*512kB (M) 5*1024kB (UM) 0*2048kB 0*4096kB = 36328kB [ 2139.298389] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2139.366202] Node 1 Normal: 73*4kB (UME) 57*8kB (UME) 57*16kB (UME) 45*32kB (UME) 25*64kB (UME) 18*128kB (UM) 16*256kB (UME) 8*512kB (M) 2*1024kB (ME) 2*2048kB (M) 8*4096kB (UM) = 54108kB [ 2139.469117] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2139.493256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2139.531438] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2139.532914] device bridge_slave_1 left promiscuous mode [ 2139.541923] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2139.546610] bridge0: port 2(bridge_slave_1) entered disabled state [ 2139.555431] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2139.569280] 45884 total pagecache pages [ 2139.573301] 0 pages in swap cache [ 2139.573507] device bridge_slave_0 left promiscuous mode [ 2139.576743] Swap cache stats: add 0, delete 0, find 0/0 [ 2139.576747] Free swap = 0kB [ 2139.584012] bridge0: port 1(bridge_slave_0) entered disabled state [ 2139.587516] Total swap = 0kB [ 2139.599958] 2097051 pages RAM [ 2139.603056] 0 pages HighMem/MovableOnly [ 2139.607028] 363840 pages reserved [ 2139.610599] 0 pages cma reserved [ 2139.614061] Out of memory (oom_kill_allocating_task): Kill process 24260 (systemd-udevd) score 0 or sacrifice child [ 2139.614180] device veth1_macvtap left promiscuous mode [ 2139.624687] Killed process 24260 (systemd-udevd) total-vm:45488kB, anon-rss:2632kB, file-rss:0kB, shmem-rss:0kB [ 2139.632798] device veth0_macvtap left promiscuous mode [ 2139.641268] oom_reaper: reaped process 24260 (systemd-udevd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2139.645968] device veth1_vlan left promiscuous mode [ 2139.668155] systemd-cgroups invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 2139.686419] systemd-cgroups cpuset=/ mems_allowed=0-1 [ 2139.691796] CPU: 0 PID: 24261 Comm: systemd-cgroups Not tainted 4.14.214-syzkaller #0 [ 2139.699751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2139.709092] Call Trace: [ 2139.711672] dump_stack+0x1b2/0x283 [ 2139.715388] dump_header+0x178/0x82f [ 2139.717867] device veth0_vlan left promiscuous mode [ 2139.719090] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2139.729172] ? ___ratelimit+0x2cd/0x522 [ 2139.733140] oom_kill_process.cold+0x10/0xb18 [ 2139.737636] out_of_memory+0xe3e/0x1190 [ 2139.741606] ? oom_killer_disable+0x1c0/0x1c0 [ 2139.746093] ? mutex_trylock+0x152/0x1a0 [ 2139.750150] __alloc_pages_nodemask+0x23e1/0x2720 [ 2139.754994] ? _find_next_bit+0xdb/0x100 [ 2139.759044] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2139.763886] ? lock_acquire+0x170/0x3f0 [ 2139.767857] ? do_raw_spin_unlock+0x164/0x220 [ 2139.772344] alloc_pages_current+0x155/0x260 [ 2139.776748] __pmd_alloc+0x37/0x3f0 [ 2139.780372] move_page_tables+0xf00/0x17d0 [ 2139.784606] ? vmacache_update+0xbb/0x130 [ 2139.788752] shift_arg_pages+0x17c/0x3e0 [ 2139.792802] ? put_arg_page+0x1c0/0x1c0 [ 2139.796769] ? change_protection+0xa0/0xa0 [ 2139.800993] ? lock_downgrade+0x740/0x740 [ 2139.805126] ? lock_acquire+0x170/0x3f0 [ 2139.809087] ? setup_arg_pages+0x242/0x6f0 [ 2139.813317] setup_arg_pages+0x584/0x6f0 [ 2139.817370] ? shift_arg_pages+0x3e0/0x3e0 [ 2139.821161] syz-executor.0: vmalloc: allocation failure, allocated 556044288 of 1073745920 bytes [ 2139.821592] ? get_random_u64+0xd4/0x1c0 [ 2139.821604] load_elf_binary+0xa01/0x4750 [ 2139.837113] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 2139.838697] ? elf_core_dump+0x4460/0x4460 [ 2139.838712] search_binary_handler.part.0+0xd5/0x640 [ 2139.838721] do_execveat_common+0x1099/0x1f30 [ 2139.838732] ? copy_strings_kernel+0x110/0x110 [ 2139.838743] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2139.838748] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2139.838755] do_execve+0x33/0x50 [ 2139.838765] call_usermodehelper_exec_async+0x2ed/0x510 [ 2139.838772] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2139.838782] ret_from_fork+0x24/0x30 [ 2139.845237] Mem-Info: [ 2139.864464] (null) [ 2139.876010] active_anon:17293 inactive_anon:45331 isolated_anon:0 [ 2139.876010] active_file:11 inactive_file:11 isolated_file:0 [ 2139.876010] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2139.876010] slab_reclaimable:12188 slab_unreclaimable:111349 [ 2139.876010] mapped:34817 shmem:45845 pagetables:624 bounce:0 [ 2139.876010] free:13720 free_pcp:125 free_cma:0 [ 2139.890847] syz-executor.0 cpuset= [ 2139.899197] Node 0 active_anon:68056kB inactive_anon:181268kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:81044kB dirty:0kB writeback:0kB shmem:183292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2139.942477] / [ 2139.971825] Node 1 active_anon:1116kB inactive_anon:56kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58224kB dirty:0kB writeback:0kB shmem:88kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2139.974731] mems_allowed=0-1 [ 2140.008918] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2140.014065] CPU: 1 PID: 23968 Comm: syz-executor.0 Not tainted 4.14.214-syzkaller #0 [ 2140.035347] lowmem_reserve[]: [ 2140.043181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2140.043185] Call Trace: [ 2140.043201] dump_stack+0x1b2/0x283 [ 2140.043216] warn_alloc.cold+0x96/0x1cc [ 2140.046288] 0 [ 2140.055727] ? zone_watermark_ok_safe+0x220/0x220 [ 2140.055750] __vmalloc_area_node+0x48a/0x680 [ 2140.058337] 2717 [ 2140.061943] ? __vmalloc_node_range+0x150/0x150 [ 2140.065878] 2718 [ 2140.067660] ? __get_vm_area_node+0x27d/0x340 [ 2140.067671] __vmalloc_node_range+0xbe/0x150 [ 2140.067685] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2140.072491] 2718 [ 2140.076877] vmalloc_user+0x47/0xa0 [ 2140.078922] 2718 [ 2140.083559] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2140.090062] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2140.090071] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2140.090082] __vb2_queue_alloc+0x47a/0xd90 [ 2140.094458] Node 0 [ 2140.099809] vb2_core_create_bufs+0x279/0x5a0 [ 2140.099819] ? __vb2_queue_free+0x7a0/0x7a0 [ 2140.101861] DMA32 free:17976kB min:36200kB low:45248kB high:54296kB active_anon:66008kB inactive_anon:181268kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7008kB pagetables:2068kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2140.105461] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2140.107501] lowmem_reserve[]: [ 2140.111790] ? trace_hardirqs_on+0x10/0x10 [ 2140.117219] 0 [ 2140.121345] vb2_create_bufs+0x2e1/0x5b0 [ 2140.121360] ? vb2_thread_start.cold+0x24/0x24 [ 2140.125652] 0 [ 2140.127867] ? trace_hardirqs_on+0x10/0x10 [ 2140.127885] v4l_create_bufs+0xa4/0x150 [ 2140.132357] 0 [ 2140.136672] __video_do_ioctl+0x65b/0x6a0 [ 2140.164982] 0 [ 2140.170290] ? video_ioctl2+0x30/0x30 [ 2140.170304] ? __might_fault+0x177/0x1b0 [ 2140.173382] 0 [ 2140.177598] video_usercopy+0xf5/0xe90 [ 2140.177606] ? video_ioctl2+0x30/0x30 [ 2140.177616] ? v4l_g_ctrl+0x390/0x390 [ 2140.183425] ? lock_acquire+0x170/0x3f0 [ 2140.190691] Node 0 [ 2140.192470] ? trace_hardirqs_on+0x10/0x10 [ 2140.196678] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2140.200621] ? trace_hardirqs_on+0x10/0x10 [ 2140.200632] ? futex_exit_release+0x220/0x220 [ 2140.200642] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2140.202412] lowmem_reserve[]: [ 2140.206539] ? __might_fault+0x104/0x1b0 [ 2140.208324] 0 [ 2140.212095] v4l2_ioctl+0x1bb/0x2f0 [ 2140.216122] 0 [ 2140.217915] ? v4l2_open+0x2f0/0x2f0 [ 2140.217926] do_vfs_ioctl+0x75a/0xff0 [ 2140.217938] ? ioctl_preallocate+0x1a0/0x1a0 [ 2140.221902] 0 [ 2140.225692] ? lock_downgrade+0x740/0x740 [ 2140.229475] 0 [ 2140.233436] ? __fget+0x225/0x360 [ 2140.235639] 0 [ 2140.239872] ? do_vfs_ioctl+0xff0/0xff0 [ 2140.239882] ? security_file_ioctl+0x83/0xb0 [ 2140.239892] SyS_ioctl+0x7f/0xb0 [ 2140.268982] ? do_vfs_ioctl+0xff0/0xff0 [ 2140.268996] do_syscall_64+0x1d5/0x640 [ 2140.273461] Node 1 [ 2140.278546] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2140.278555] RIP: 0033:0x45e219 [ 2140.281641] Normal free:26324kB min:53696kB low:67120kB high:80544kB active_anon:1116kB inactive_anon:56kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:608kB pagetables:428kB bounce:0kB free_pcp:380kB local_pcp:0kB free_cma:0kB [ 2140.285664] RSP: 002b:00007fea2bdd6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2140.287607] lowmem_reserve[]: [ 2140.291200] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2140.292977] 0 [ 2140.296667] RDX: 0000000020000180 RSI: 00000000c100565c RDI: 0000000000000003 [ 2140.296674] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2140.300480] 0 [ 2140.304898] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2140.304906] R13: 00007ffc4168215f R14: 00007fea2bdd79c0 R15: 000000000119bf8c [ 2140.306774] 0 [ 2140.321907] Mem-Info: [ 2140.331818] 0 [ 2140.343849] active_anon:17293 inactive_anon:45331 isolated_anon:0 [ 2140.343849] active_file:36 inactive_file:0 isolated_file:0 [ 2140.343849] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2140.343849] slab_reclaimable:12188 slab_unreclaimable:111349 [ 2140.343849] mapped:34817 shmem:45845 pagetables:624 bounce:0 [ 2140.343849] free:13816 free_pcp:125 free_cma:0 [ 2140.349183] 0 [ 2140.386058] Node 0 active_anon:68056kB inactive_anon:181268kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:81044kB dirty:0kB writeback:0kB shmem:183292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2140.394479] Node 1 active_anon:1116kB inactive_anon:56kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58224kB dirty:0kB writeback:0kB shmem:88kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2140.396212] Node 0 [ 2140.413367] Node 0 [ 2140.427509] DMA: [ 2140.439305] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2140.473989] 31*4kB [ 2140.506397] lowmem_reserve[]: [ 2140.531727] (UE) [ 2140.566596] 0 [ 2140.568973] 21*8kB (U) 19*16kB (U) 6*32kB (U) 5*64kB (UE) 9*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10964kB [ 2140.572610] 2717 2718 2718 2718 [ 2140.595638] Node 0 DMA32: [ 2140.599292] Node 0 [ 2140.599295] 714*4kB (ME) [ 2140.602157] DMA32 free:17976kB min:36200kB low:45248kB high:54296kB active_anon:66008kB inactive_anon:181268kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7008kB pagetables:2068kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2140.604364] 500*8kB [ 2140.607094] lowmem_reserve[]: 0 0 0 0 0 [ 2140.651355] (UME) [ 2140.652159] Node 0 [ 2140.652166] 239*16kB [ 2140.654300] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2140.656508] (UME) [ 2140.665549] lowmem_reserve[]: [ 2140.694682] 86*32kB [ 2140.700029] 0 [ 2140.700979] (UME) [ 2140.702351] 0 [ 2140.704137] 37*64kB (UME) [ 2140.706268] 0 [ 2140.715416] 15*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17976kB [ 2140.721665] 0 [ 2140.725038] Node 0 [ 2140.725044] 0 [ 2140.726827] Normal: [ 2140.736950] Node 1 Normal free:26324kB min:53696kB low:67120kB high:80544kB active_anon:1116kB inactive_anon:56kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:608kB pagetables:428kB bounce:0kB free_pcp:380kB local_pcp:380kB free_cma:0kB [ 2140.741256] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2140.780668] Node 1 Normal: 9*4kB (ME) 56*8kB (ME) 49*16kB (ME) 41*32kB (ME) 21*64kB (UME) 17*128kB (UM) 15*256kB (ME) 8*512kB (M) 2*1024kB (ME) [ 2140.780749] lowmem_reserve[]: [ 2140.780757] 3*2048kB (UM) 1*4096kB (M) = 26324kB [ 2140.807660] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2140.812371] 0 [ 2140.816491] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2140.816494] 0 0 [ 2140.821672] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2140.839429] 0 0 [ 2140.841410] Node 0 DMA: 31*4kB (UE) 21*8kB (U) 19*16kB (U) 6*32kB (U) 5*64kB (UE) 9*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10964kB [ 2140.843020] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2140.871314] 45867 total pagecache pages [ 2140.871676] Node 0 DMA32: [ 2140.875280] 0 pages in swap cache [ 2140.875287] 715*4kB [ 2140.878206] Swap cache stats: add 0, delete 0, find 0/0 [ 2140.878209] Free swap = 0kB [ 2140.878212] Total swap = 0kB [ 2140.878218] 2097051 pages RAM [ 2140.878221] 0 pages HighMem/MovableOnly [ 2140.878224] 363840 pages reserved [ 2140.878227] 0 pages cma reserved [ 2140.878233] Out of memory (oom_kill_allocating_task): Kill process 24261 (systemd-cgroups) score 0 or sacrifice child [ 2140.878252] Killed process 24261 (systemd-cgroups) total-vm:4kB, anon-rss:4kB, file-rss:0kB, shmem-rss:0kB [ 2140.896878] (UME) [ 2140.905304] systemd-cgroups: [ 2140.908910] systemd-rfkill invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2140.909436] page allocation failure: order:0 [ 2140.920872] 500*8kB [ 2140.945912] , mode:0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask= [ 2140.951404] (null), order=0, oom_score_adj=0 [ 2140.963328] systemd-rfkill cpuset=/ mems_allowed=0-1 [ 2140.966887] (null) [ 2140.970652] CPU: 1 PID: 24021 Comm: systemd-rfkill Not tainted 4.14.214-syzkaller #0 [ 2140.978579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2140.979206] systemd-cgroups cpuset= [ 2140.988004] Call Trace: [ 2140.988022] dump_stack+0x1b2/0x283 [ 2140.988033] dump_header+0x178/0x82f [ 2140.988044] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2140.991641] / [ 2140.994203] ? ___ratelimit+0x2cd/0x522 [ 2140.997829] mems_allowed=0-1 [ 2141.001507] oom_kill_process.cold+0x10/0xb18 [ 2141.019750] out_of_memory+0xe3e/0x1190 [ 2141.023708] ? oom_killer_disable+0x1c0/0x1c0 [ 2141.028203] ? mutex_trylock+0x152/0x1a0 [ 2141.032252] __alloc_pages_nodemask+0x23e1/0x2720 [ 2141.037076] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2141.041907] alloc_pages_current+0x155/0x260 [ 2141.046290] filemap_fault+0xea3/0x1980 [ 2141.050263] ext4_filemap_fault+0x84/0xb0 [ 2141.054387] __do_fault+0xfa/0x380 [ 2141.057904] __handle_mm_fault+0x2497/0x4620 [ 2141.062290] ? vm_insert_page+0x7c0/0x7c0 [ 2141.066412] ? compat_poll_select_copy_remaining+0x2c0/0x2c0 [ 2141.072189] ? ktime_get_ts64+0x261/0x3a0 [ 2141.076321] handle_mm_fault+0x391/0x860 [ 2141.080361] __do_page_fault+0x549/0xad0 [ 2141.084398] ? spurious_fault+0x640/0x640 [ 2141.088538] ? do_page_fault+0x60/0x4f2 [ 2141.092555] ? page_fault+0x2f/0x50 [ 2141.096162] page_fault+0x45/0x50 [ 2141.099593] RIP: e6f59580:0x1 [ 2141.102670] RSP: 48bcc040:00007ffee6f59588 EFLAGS: 0000000b [ 2141.102689] CPU: 0 PID: 24261 Comm: systemd-cgroups Not tainted 4.14.214-syzkaller #0 [ 2141.105191] (UME) [ 2141.108393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2141.108397] Call Trace: [ 2141.108412] dump_stack+0x1b2/0x283 [ 2141.108423] warn_alloc.cold+0x96/0x1cc [ 2141.108431] ? lock_downgrade+0x740/0x740 [ 2141.108440] ? zone_watermark_ok_safe+0x220/0x220 [ 2141.116474] 231*16kB [ 2141.118603] ? wake_up_q+0x82/0xd0 [ 2141.118615] ? wait_for_completion_io+0x10/0x10 [ 2141.118626] __alloc_pages_nodemask+0x2127/0x2720 [ 2141.118643] ? _find_next_bit+0xdb/0x100 [ 2141.118648] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2141.118658] ? lock_acquire+0x170/0x3f0 [ 2141.118669] ? do_raw_spin_unlock+0x164/0x220 [ 2141.118680] alloc_pages_current+0x155/0x260 [ 2141.118689] __pmd_alloc+0x37/0x3f0 [ 2141.118701] move_page_tables+0xf00/0x17d0 [ 2141.118716] ? vmacache_update+0xbb/0x130 [ 2141.118727] shift_arg_pages+0x17c/0x3e0 [ 2141.118737] ? put_arg_page+0x1c0/0x1c0 [ 2141.118745] ? change_protection+0xa0/0xa0 [ 2141.118752] ? lock_downgrade+0x740/0x740 [ 2141.118761] ? lock_acquire+0x170/0x3f0 [ 2141.118768] ? setup_arg_pages+0x242/0x6f0 [ 2141.118778] setup_arg_pages+0x584/0x6f0 [ 2141.118787] ? shift_arg_pages+0x3e0/0x3e0 [ 2141.118795] ? get_random_u64+0xd4/0x1c0 [ 2141.118805] load_elf_binary+0xa01/0x4750 [ 2141.118825] ? elf_core_dump+0x4460/0x4460 [ 2141.118839] search_binary_handler.part.0+0xd5/0x640 [ 2141.118850] do_execveat_common+0x1099/0x1f30 [ 2141.118862] ? copy_strings_kernel+0x110/0x110 [ 2141.118874] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2141.118883] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2141.118893] do_execve+0x33/0x50 [ 2141.118906] call_usermodehelper_exec_async+0x2ed/0x510 [ 2141.118915] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2141.118924] ret_from_fork+0x24/0x30 [ 2141.138296] Mem-Info: [ 2141.139137] (UME) [ 2141.142887] active_anon:17293 inactive_anon:45331 isolated_anon:0 [ 2141.142887] active_file:11 inactive_file:11 isolated_file:0 [ 2141.142887] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2141.142887] slab_reclaimable:12188 slab_unreclaimable:111324 [ 2141.142887] mapped:34817 shmem:45845 pagetables:624 bounce:0 [ 2141.142887] free:13935 free_pcp:0 free_cma:0 [ 2141.147746] 86*32kB (UME) 37*64kB (UME) 15*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17852kB [ 2141.147788] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB [ 2141.166305] Node 0 active_anon:68056kB inactive_anon:181268kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:81044kB dirty:0kB writeback:0kB shmem:183292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2141.178132] = 0kB [ 2141.198538] Node 1 active_anon:1116kB inactive_anon:56kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58224kB dirty:0kB writeback:0kB shmem:88kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2141.201318] Node 1 [ 2141.205269] Node 0 [ 2141.209505] Normal: 75*4kB (UME) 65*8kB (UME) 52*16kB (UME) 42*32kB (UME) 20*64kB (ME) 16*128kB (M) 16*256kB (UME) 8*512kB (M) 2*1024kB (ME) 3*2048kB (UM) 1*4096kB (M) = 26804kB [ 2141.209584] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2141.209590] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2141.209596] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2141.209603] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2141.209607] 45867 total pagecache pages [ 2141.209619] 0 pages in swap cache [ 2141.231289] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2141.234791] Swap cache stats: add 0, delete 0, find 0/0 [ 2141.252919] lowmem_reserve[]: [ 2141.256865] Free swap = 0kB [ 2141.274518] 0 [ 2141.276077] Total swap = 0kB [ 2141.291095] 2717 [ 2141.323007] 2097051 pages RAM [ 2141.323012] 0 pages HighMem/MovableOnly [ 2141.323016] 363840 pages reserved [ 2141.323019] 0 pages cma reserved [ 2141.523112] 2718 2718 2718 [ 2141.526046] Node 0 DMA32 free:18052kB min:36200kB low:45248kB high:54296kB active_anon:66008kB inactive_anon:181268kB active_file:44kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7008kB pagetables:2068kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2141.558459] lowmem_reserve[]: 0 0 0 0 0 [ 2141.562461] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2141.591850] lowmem_reserve[]: 0 0 0 0 0 [ 2141.595850] Node 1 Normal free:26724kB min:53696kB low:67120kB high:80544kB active_anon:1116kB inactive_anon:56kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:608kB pagetables:428kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2141.634715] lowmem_reserve[]: 0 0 0 0 0 [ 2141.641015] Node 0 DMA: 31*4kB (UE) 21*8kB (U) 19*16kB (U) 6*32kB (U) 5*64kB (UE) 9*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10964kB [ 2141.663843] Node 0 DMA32: 721*4kB (UME) 507*8kB (UME) 245*16kB (UME) 86*32kB (UME) 37*64kB (UME) 15*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18156kB [ 2141.688853] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2141.703097] Node 1 Normal: 13*4kB (UME) 64*8kB (UME) 52*16kB (UME) 43*32kB (UME) 22*64kB (UME) 17*128kB (UM) 17*256kB (UME) 9*512kB (UM) 3*1024kB (UME) 17*2048kB (UM) 1*4096kB (M) = 57300kB [ 2141.724509] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2141.734177] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2141.746522] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2141.756284] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2141.772198] 47162 total pagecache pages [ 2141.777054] 0 pages in swap cache [ 2141.783502] Swap cache stats: add 0, delete 0, find 0/0 [ 2141.802646] Free swap = 0kB [ 2141.806829] Total swap = 0kB [ 2141.813788] 2097051 pages RAM [ 2141.817220] 0 pages HighMem/MovableOnly [ 2141.821500] 363840 pages reserved [ 2141.825657] 0 pages cma reserved [ 2141.841197] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2141.849801] Out of memory (oom_kill_allocating_task): Kill process 24021 (systemd-rfkill) score 0 or sacrifice child [ 2141.862483] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2141.871749] Killed process 24021 (systemd-rfkill) total-vm:37800kB, anon-rss:428kB, file-rss:0kB, shmem-rss:0kB [ 2141.888463] systemd[1]: Stopped Journal Service. [ 2141.896986] oom_reaper: reaped process 23968 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2141.916848] memory commitment underflow [ 2141.916939] ------------[ cut here ]------------ [ 2141.921445] systemd[1]: Starting Journal Service... [ 2141.925859] WARNING: CPU: 1 PID: 24264 at mm/util.c:622 __vm_enough_memory.cold+0x18/0x59 [ 2141.939139] Kernel panic - not syncing: panic_on_warn set ... [ 2141.939139] [ 2141.946498] CPU: 1 PID: 24264 Comm: kworker/u4:1 Not tainted 4.14.214-syzkaller #0 [ 2141.954195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2141.961147] systemd[1]: systemd-rfkill.service: Main process exited, code=killed, status=9/KILL [ 2141.963661] Call Trace: [ 2141.975042] dump_stack+0x1b2/0x283 [ 2141.978784] panic+0x1f9/0x42d [ 2141.981968] ? add_taint.cold+0x16/0x16 [ 2141.985935] ? __vm_enough_memory.cold+0x18/0x59 [ 2141.990686] ? __vm_enough_memory.cold+0x18/0x59 [ 2141.991913] systemd[1]: systemd-rfkill.service: Unit entered failed state. [ 2141.995448] __warn.cold+0x20/0x4b [ 2142.005957] ? ist_end_non_atomic+0x10/0x10 [ 2142.010269] ? __vm_enough_memory.cold+0x18/0x59 [ 2142.015014] report_bug+0x208/0x249 [ 2142.017505] systemd[1]: systemd-rfkill.service: Failed with result 'signal'. [ 2142.018630] do_error_trap+0x195/0x2d0 [ 2142.025981] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 2142.029653] ? math_error+0x2d0/0x2d0 [ 2142.029666] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2142.029680] invalid_op+0x1b/0x40 [ 2142.029692] RIP: 0010:__vm_enough_memory.cold+0x18/0x59 [ 2142.055422] RSP: 0018:ffff888000087d70 EFLAGS: 00010286 [ 2142.059726] systemd[1]: Stopped System Logging Service. [ 2142.060789] RAX: 000000000000001b RBX: 0000000000000001 RCX: 0000000000000000 [ 2142.073495] RDX: 0000000000000000 RSI: ffff88804def2e30 RDI: ffffed1000010fa4 [ 2142.080769] RBP: 0000000000000001 R08: 000000000000001b R09: 0000000000000000 [ 2142.085135] systemd[1]: Starting System Logging Service... [ 2142.088026] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88809bf85340 [ 2142.088030] R13: ffffffff88feacc0 R14: ffffffffffdaa798 R15: 0000000000000d36 [ 2142.088055] insert_vm_struct+0x25e/0x300 [ 2142.088067] do_execveat_common+0xbf8/0x1f30 [ 2142.088078] ? copy_strings_kernel+0x110/0x110 [ 2142.121312] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2142.126763] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2142.131782] do_execve+0x33/0x50 [ 2142.135143] call_usermodehelper_exec_async+0x2ed/0x510 [ 2142.140504] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2142.145955] ret_from_fork+0x24/0x30 [ 2142.150700] Kernel Offset: disabled [ 2142.154415] Rebooting in 86400 seconds..