[ 37.066821] random: cc1: uninitialized urandom read (8 bytes read) [ 37.620882] IPVS: ftp: loaded support on port[0] = 21 [ 38.748207] can: request_module (can-proto-0) failed. [ 38.757297] can: request_module (can-proto-0) failed. [ 38.912187] audit: type=1400 audit(1583057152.518:37): avc: denied { create } for pid=6772 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 38.937690] audit: type=1400 audit(1583057152.548:38): avc: denied { create } for pid=6772 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 38.961873] audit: type=1400 audit(1583057152.548:39): avc: denied { create } for pid=6772 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 39.245510] random: sshd: uninitialized urandom read (32 bytes read) [ 39.978284] random: sshd: uninitialized urandom read (32 bytes read) [ 40.188650] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.243' (ECDSA) to the list of known hosts. 2020/03/01 10:06:00 parsed 1 programs 2020/03/01 10:06:00 executed programs: 0 [ 47.033611] audit: type=1400 audit(1583057160.638:40): avc: denied { map } for pid=6845 comm="syz-execprog" path="/root/syzkaller-shm572491830" dev="sda1" ino=16511 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 47.300851] IPVS: ftp: loaded support on port[0] = 21 [ 48.196335] IPVS: ftp: loaded support on port[0] = 21 [ 48.238653] chnl_net:caif_netlink_parms(): no params data found [ 48.279356] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.286307] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.293517] device bridge_slave_0 entered promiscuous mode [ 48.300985] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.307386] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.314339] device bridge_slave_1 entered promiscuous mode [ 48.322065] IPVS: ftp: loaded support on port[0] = 21 [ 48.341169] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.351232] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.386228] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.393514] team0: Port device team_slave_0 added [ 48.410081] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.417240] team0: Port device team_slave_1 added [ 48.422346] chnl_net:caif_netlink_parms(): no params data found [ 48.432134] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.451594] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.479932] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.486486] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.493578] device bridge_slave_0 entered promiscuous mode [ 48.501581] IPVS: ftp: loaded support on port[0] = 21 [ 48.516126] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.522613] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.529435] device bridge_slave_1 entered promiscuous mode [ 48.571863] device hsr_slave_0 entered promiscuous mode [ 48.630288] device hsr_slave_1 entered promiscuous mode [ 48.700685] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 48.709414] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 48.761980] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.771212] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.778867] chnl_net:caif_netlink_parms(): no params data found [ 48.809194] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.817040] team0: Port device team_slave_0 added [ 48.824794] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.831921] team0: Port device team_slave_1 added [ 48.837586] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.853644] IPVS: ftp: loaded support on port[0] = 21 [ 48.861809] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.868263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.875316] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.881723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.889816] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.903349] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.910658] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.918368] device bridge_slave_0 entered promiscuous mode [ 48.937738] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.944325] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.951495] device bridge_slave_1 entered promiscuous mode [ 48.969578] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.980744] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.032618] device hsr_slave_0 entered promiscuous mode [ 49.070571] device hsr_slave_1 entered promiscuous mode [ 49.126953] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.136060] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.161365] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.168529] team0: Port device team_slave_0 added [ 49.201633] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.202781] IPVS: ftp: loaded support on port[0] = 21 [ 49.208790] team0: Port device team_slave_1 added [ 49.221175] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.228675] chnl_net:caif_netlink_parms(): no params data found [ 49.251012] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.289520] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.296102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.302756] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.309367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.317767] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.324676] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.331907] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.338459] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.422786] device hsr_slave_0 entered promiscuous mode [ 49.460317] device hsr_slave_1 entered promiscuous mode [ 49.500537] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.516451] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.546342] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.553063] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.559919] device bridge_slave_0 entered promiscuous mode [ 49.566927] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.573570] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.580654] device bridge_slave_1 entered promiscuous mode [ 49.601034] chnl_net:caif_netlink_parms(): no params data found [ 49.610399] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.619573] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.635229] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.666583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.674568] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.685406] team0: Port device team_slave_0 added [ 49.692771] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.701557] team0: Port device team_slave_1 added [ 49.734342] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.742110] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.777136] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.783581] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.791074] device bridge_slave_0 entered promiscuous mode [ 49.797842] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.843230] device hsr_slave_0 entered promiscuous mode [ 49.900368] device hsr_slave_1 entered promiscuous mode [ 49.945957] chnl_net:caif_netlink_parms(): no params data found [ 49.954410] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.961023] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.967881] device bridge_slave_1 entered promiscuous mode [ 49.979809] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.987021] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.006119] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.019960] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.037077] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.046980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.054704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.063093] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.071881] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.077970] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.100779] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.107768] team0: Port device team_slave_0 added [ 50.130996] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.139566] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.146800] team0: Port device team_slave_1 added [ 50.152251] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.161424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.167664] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.174356] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.181492] device bridge_slave_0 entered promiscuous mode [ 50.189120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.197148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.204982] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.211360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.219634] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.228077] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.248013] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.254483] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.262909] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.269755] device bridge_slave_1 entered promiscuous mode [ 50.276336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.284634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.292245] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.298613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.308619] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.363252] device hsr_slave_0 entered promiscuous mode [ 50.410291] device hsr_slave_1 entered promiscuous mode [ 50.480749] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.487709] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.503281] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.510107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.517721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.524577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.534093] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.547881] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.559592] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.567672] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.574392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.584669] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 50.594931] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.615398] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.624722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.632287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.639937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.647825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.655784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.663470] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.669899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.677855] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.688413] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 50.697404] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.705847] team0: Port device team_slave_0 added [ 50.713248] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.724349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.733385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.742351] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.749674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.757715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.765870] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.772338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.779605] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.787512] team0: Port device team_slave_1 added [ 50.792962] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.802118] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.809110] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.820572] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 50.828653] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.843400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.850511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.857267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.865005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.874391] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.883674] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 50.891931] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.898009] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.910670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.919810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.928225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.942960] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.952105] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 50.958140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.003948] device hsr_slave_0 entered promiscuous mode [ 51.040362] device hsr_slave_1 entered promiscuous mode [ 51.080759] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.087914] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.098750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.107884] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.129944] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 51.138129] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.148294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.156267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.164485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.172252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.179828] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.186247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.193419] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.200986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.209780] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.219715] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.231469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.239116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.246815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.254791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.263269] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.269642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.278076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.287429] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.296028] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.309192] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.316134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.324630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.332183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.341607] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.350511] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.359513] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.365811] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.377317] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.385067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.394143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.401123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.408549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.421529] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.429683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.438649] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.458555] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.465594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.475606] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.483224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.492885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.500760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.508298] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.514706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.521595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.529145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.537520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.544648] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.554124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.565788] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 51.574929] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.588784] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.598818] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.609413] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.617940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.625771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.633589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.641354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.648731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.656399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.664002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.671952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.679475] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.685857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.696996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.709286] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.715744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.730477] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.739010] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.749583] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.756364] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.764986] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.782680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.790348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.799631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.807736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.815512] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.821904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.823077] hrtimer: interrupt took 35142 ns [ 51.834104] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.844446] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.857429] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 51.864216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.872200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.879920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.889200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.897721] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.904131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.914200] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.930187] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.946412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.957192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.968308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.994140] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.006030] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.014906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.029661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.043899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.056044] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.075266] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.093209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.103294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.114783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.133236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.145426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.162160] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.179193] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.188855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.201215] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.208523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.221028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.228720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.241865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.256103] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.269349] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.278630] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.289821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.298026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.311628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.319319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.333482] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.339550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.352798] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.366936] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.373976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.386182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.397933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.409984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.425520] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.434493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.449723] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.456756] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.472591] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.496117] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.509356] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.526842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.539421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.551079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.572706] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.579219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.595358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.612168] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.619868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.649669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.667946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.680988] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.687367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.702229] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.720729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.737198] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.754213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.783023] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.792949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.807516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.817319] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.828908] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.836844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.854573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.870847] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.879963] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.892783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.904447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.914437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.929424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.948065] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.964810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 2020/03/01 10:06:06 executed programs: 6 [ 53.017215] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.033087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.252598] oom_reaper: reaped process 6903 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 63.983312] init invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 63.995800] init cpuset=/ mems_allowed=0-1 [ 64.000523] CPU: 0 PID: 1 Comm: init Not tainted 4.14.172-syzkaller #0 [ 64.007178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.016528] Call Trace: [ 64.019223] dump_stack+0xf7/0x13b [ 64.022762] dump_header+0x160/0x63f [ 64.026476] ? _raw_spin_unlock_irqrestore+0xbb/0xd0 [ 64.031566] ? ___ratelimit+0x243/0x519 [ 64.035533] ? do_raw_spin_unlock+0x16a/0x250 [ 64.040029] oom_kill_process.cold.24+0xb/0xa1a [ 64.044695] ? out_of_memory+0x7f9/0x1030 [ 64.048831] ? lock_downgrade+0x7f0/0x7f0 [ 64.053050] out_of_memory+0x2b0/0x1030 [ 64.057092] ? oom_killer_disable+0x1a0/0x1a0 [ 64.061579] ? __alloc_pages_slowpath+0xb69/0x2650 [ 64.066610] __alloc_pages_slowpath+0x1ef3/0x2650 [ 64.071448] ? warn_alloc+0x100/0x100 [ 64.075287] ? get_page_from_freelist+0x1046/0x23b0 [ 64.080336] ? __might_sleep+0x93/0xb0 [ 64.084212] __alloc_pages_nodemask+0x60d/0x770 [ 64.088881] ? __alloc_pages_slowpath+0x2650/0x2650 [ 64.093894] alloc_pages_current+0xd6/0x1b0 [ 64.098204] __page_cache_alloc+0x1da/0x330 [ 64.104688] filemap_fault+0xbad/0x1700 [ 64.108674] ? __lock_page_or_retry+0x820/0x820 [ 64.113337] ? lock_acquire+0x173/0x400 [ 64.117293] ? ext4_filemap_fault+0x75/0xb0 [ 64.121603] ext4_filemap_fault+0x7d/0xb0 [ 64.125747] __do_fault+0xf3/0x340 [ 64.129281] __handle_mm_fault+0x21eb/0x3870 [ 64.133675] ? vm_insert_mixed_mkwrite+0x10/0x10 [ 64.138425] ? find_held_lock+0x36/0x1d0 [ 64.142484] handle_mm_fault+0x234/0x6e0 [ 64.146540] ? find_vma+0xe2/0x150 [ 64.150081] __do_page_fault+0x44d/0xb00 [ 64.154302] ? vmalloc_fault+0xc90/0xc90 [ 64.158412] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 64.163772] ? page_fault+0x2f/0x50 [ 64.167391] do_page_fault+0x64/0x3fb [ 64.171185] ? page_fault+0x2f/0x50 [ 64.174815] page_fault+0x45/0x50 [ 64.178257] RIP: 0033:0x7f171d5a3dd3 [ 64.181954] RSP: 002b:00007ffd44203978 EFLAGS: 00010246 [ 64.187297] RAX: 0000000000000000 RBX: 00007ffd44203b20 RCX: 00007f171d5a3dd3 [ 64.194633] RDX: 0000000000000000 RSI: 00007ffd44203cd0 RDI: 000000000000000b [ 64.201893] RBP: 00007ffd44203cd0 R08: 00007ffd44203d50 R09: 0000000000000001 [ 64.209147] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 64.216409] R13: 00007ffd442040b0 R14: 0000000000000000 R15: 0000000000000000 [ 64.224524] Mem-Info: [ 64.226944] active_anon:6019 inactive_anon:181 isolated_anon:0 [ 64.226944] active_file:4782 inactive_file:4699 isolated_file:0 [ 64.226944] unevictable:0 dirty:9461 writeback:0 unstable:0 [ 64.226944] slab_reclaimable:10834 slab_unreclaimable:101460 [ 64.226944] mapped:2 shmem:242 pagetables:410 bounce:0 [ 64.226944] free:13765 free_pcp:59 free_cma:0 [ 64.260102] Node 0 active_anon:24000kB inactive_anon:700kB active_file:18912kB inactive_file:18904kB unevictable:0kB isolated(anon):0kB isolated(file):252kB mapped:80kB dirty:37840kB writeback:0kB shmem:944kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 64.288249] Node 1 active_anon:76kB inactive_anon:24kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 64.314273] Node 0 DMA free:10408kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 64.340585] lowmem_reserve[]: 0 2578 2578 2578 [ 64.345206] Node 0 DMA32 free:17936kB min:36452kB low:45564kB high:54676kB active_anon:24000kB inactive_anon:700kB active_file:18948kB inactive_file:19028kB unevictable:0kB writepending:37840kB present:3129332kB managed:2642588kB mlocked:0kB kernel_stack:6848kB pagetables:1640kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 64.375144] lowmem_reserve[]: 0 0 0 0 [ 64.378998] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 64.404577] lowmem_reserve[]: 0 0 0 0 [ 64.408577] Node 1 Normal free:26716kB min:53436kB low:66792kB high:80148kB active_anon:76kB inactive_anon:24kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3932160kB managed:3870204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 64.436236] lowmem_reserve[]: 0 0 0 0 [ 64.440099] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10408kB [ 64.452786] Node 0 DMA32: 712*4kB (UME) 662*8kB (UME) 266*16kB (UME) 61*32kB (UME) 40*64kB (UME) 8*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17936kB [ 64.467578] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 64.479694] Node 1 Normal: 17*4kB (ME) 15*8kB (M) 14*16kB (ME) 4*32kB (ME) 5*64kB (UME) 2*128kB (UE) 2*256kB (UM) 3*512kB (UME) 1*1024kB (E) 5*2048kB (UME) 3*4096kB (M) = 26716kB [ 64.481775] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 64.495971] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 64.516047] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 64.524746] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 64.537690] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 64.546408] 9737 total pagecache pages [ 64.551359] 0 pages in swap cache [ 64.554885] Swap cache stats: add 0, delete 0, find 0/0 [ 64.560302] Free swap = 0kB [ 64.563360] Total swap = 0kB [ 64.566368] 1965979 pages RAM [ 64.569532] 0 pages HighMem/MovableOnly [ 64.573534] 333804 pages reserved [ 64.577022] 0 pages cma reserved [ 64.580419] Out of memory: Kill process 6845 (syz-execprog) score 1 or sacrifice child [ 64.588861] Killed process 6859 (syz-executor.2) total-vm:37636kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 64.610513] oom_reaper: reaped process 6859 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 65.110318] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 65.111281] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 65.116924] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 65.123483] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 65.129995] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 65.136518] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 65.143071] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 65.149662] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 65.156185] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 67.066626] rsyslogd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 67.079134] rsyslogd cpuset=/ mems_allowed=0-1 [ 67.083790] CPU: 0 PID: 6626 Comm: rsyslogd Not tainted 4.14.172-syzkaller #0 [ 67.091069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.100420] Call Trace: [ 67.102994] dump_stack+0xf7/0x13b [ 67.106576] dump_header+0x160/0x63f [ 67.110281] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 67.115417] ? ___ratelimit+0x243/0x519 [ 67.119384] ? do_raw_spin_unlock+0x16a/0x250 [ 67.123868] oom_kill_process.cold.24+0xb/0xa1a [ 67.128579] ? out_of_memory+0x7f9/0x1030 [ 67.132714] ? lock_downgrade+0x7f0/0x7f0 [ 67.136860] out_of_memory+0x2b0/0x1030 [ 67.140881] ? oom_killer_disable+0x1a0/0x1a0 [ 67.145359] ? __alloc_pages_slowpath+0xb69/0x2650 [ 67.150336] __alloc_pages_slowpath+0x1ef3/0x2650 [ 67.155276] ? warn_alloc+0x100/0x100 [ 67.159068] ? get_page_from_freelist+0x1046/0x23b0 [ 67.164256] ? __might_sleep+0x93/0xb0 [ 67.168162] __alloc_pages_nodemask+0x60d/0x770 [ 67.172845] ? __alloc_pages_slowpath+0x2650/0x2650 [ 67.177860] alloc_pages_current+0xd6/0x1b0 [ 67.182231] __page_cache_alloc+0x1da/0x330 [ 67.186536] filemap_fault+0xbad/0x1700 [ 67.190503] ? __lock_page_or_retry+0x820/0x820 [ 67.195209] ? lock_acquire+0x173/0x400 [ 67.199177] ? ext4_filemap_fault+0x75/0xb0 [ 67.203517] ext4_filemap_fault+0x7d/0xb0 [ 67.207659] __do_fault+0xf3/0x340 [ 67.211191] __handle_mm_fault+0x21eb/0x3870 [ 67.215589] ? vm_insert_mixed_mkwrite+0x10/0x10 [ 67.220337] ? find_held_lock+0x36/0x1d0 [ 67.224516] handle_mm_fault+0x234/0x6e0 [ 67.228565] ? find_vma+0xe2/0x150 [ 67.232095] __do_page_fault+0x44d/0xb00 [ 67.236144] ? SyS_read+0x1c5/0x250 [ 67.239766] ? vmalloc_fault+0xc90/0xc90 [ 67.243870] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 67.249330] ? page_fault+0x2f/0x50 [ 67.252951] do_page_fault+0x64/0x3fb [ 67.256734] ? page_fault+0x2f/0x50 [ 67.260372] page_fault+0x45/0x50 [ 67.263845] RIP: 0033:0x7f9b521301fd [ 67.267533] RSP: 002b:00007f9b4f6cfe30 EFLAGS: 00010293 [ 67.272901] RAX: 0000000000000072 RBX: 0000000001ad3650 RCX: 00007f9b521301fd [ 67.280155] RDX: 0000000000000fff RSI: 00007f9b50f045a0 RDI: 0000000000000004 [ 67.287414] RBP: 0000000000000000 R08: 0000000001abe260 R09: 0000000004000001 [ 67.294667] R10: 0000000000000001 R11: 0000000000000293 R12: 000000000065e420 [ 67.301925] R13: 00007f9b4f6d09c0 R14: 00007f9b52775040 R15: 0000000000000003 [ 67.320998] Mem-Info: [ 67.323457] active_anon:5984 inactive_anon:181 isolated_anon:0 [ 67.323457] active_file:4792 inactive_file:4677 isolated_file:64 [ 67.323457] unevictable:0 dirty:9461 writeback:0 unstable:0 [ 67.323457] slab_reclaimable:10832 slab_unreclaimable:101432 [ 67.323457] mapped:2 shmem:242 pagetables:399 bounce:0 [ 67.323457] free:13798 free_pcp:57 free_cma:0 [ 67.395341] Node 0 active_anon:23872kB inactive_anon:700kB active_file:18856kB inactive_file:18960kB unevictable:0kB isolated(anon):0kB isolated(file):256kB mapped:8kB dirty:37840kB writeback:0kB shmem:944kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 67.425541] Node 1 active_anon:64kB inactive_anon:24kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 67.452351] Node 0 DMA free:10408kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 67.478523] lowmem_reserve[]: 0 2578 2578 2578 [ 67.483124] Node 0 DMA32 free:18064kB min:36452kB low:45564kB high:54676kB active_anon:23872kB inactive_anon:700kB active_file:18976kB inactive_file:18972kB unevictable:0kB writepending:37840kB present:3129332kB managed:2642588kB mlocked:0kB kernel_stack:6816kB pagetables:1596kB bounce:0kB free_pcp:224kB local_pcp:128kB free_cma:0kB [ 67.512830] lowmem_reserve[]: 0 0 0 0 [ 67.516649] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 67.541955] lowmem_reserve[]: 0 0 0 0 [ 67.545786] Node 1 Normal free:26720kB min:53436kB low:66792kB high:80148kB active_anon:64kB inactive_anon:24kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 67.573309] lowmem_reserve[]: 0 0 0 0 [ 67.577125] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10408kB [ 67.590441] Node 0 DMA32: 712*4kB (UME) 666*8kB (UME) 268*16kB (UME) 63*32kB (UME) 40*64kB (UME) 8*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18064kB [ 67.627000] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 67.637864] Node 1 Normal: 16*4kB (ME) 16*8kB (UM) 14*16kB (UME) 6*32kB (UME) 4*64kB (ME) 2*128kB (UE) 2*256kB (UM) 3*512kB (UME) 1*1024kB (E) 5*2048kB (UME) 3*4096kB (M) = 26720kB [ 67.654416] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 67.663304] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 67.671949] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 67.680841] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 67.689426] 9736 total pagecache pages [ 67.693400] 0 pages in swap cache [ 67.696841] Swap cache stats: add 0, delete 0, find 0/0 [ 67.702213] Free swap = 0kB [ 67.705225] Total swap = 0kB [ 67.708225] 1965979 pages RAM [ 67.711342] 0 pages HighMem/MovableOnly [ 67.715298] 333804 pages reserved [ 67.718726] 0 pages cma reserved [ 67.722418] Out of memory: Kill process 6845 (syz-execprog) score 1 or sacrifice child [ 67.730556] Killed process 6870 (syz-executor.3) total-vm:37636kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 68.096740] syz-executor.2 invoked oom-killer: gfp_mask=0x14142c0(GFP_KERNEL|__GFP_NOWARN|__GFP_COMP|__GFP_NOMEMALLOC), nodemask=(null), order=1, oom_score_adj=0 [ 68.112645] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 68.118447] CPU: 0 PID: 6864 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 68.126341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.135785] Call Trace: [ 68.138406] dump_stack+0xf7/0x13b [ 68.142082] dump_header+0x160/0x63f [ 68.145805] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 68.150909] ? ___ratelimit+0x243/0x519 [ 68.154876] ? do_raw_spin_unlock+0x16a/0x250 [ 68.159380] oom_kill_process.cold.24+0xb/0xa1a [ 68.164049] ? out_of_memory+0x7f9/0x1030 [ 68.168197] ? lock_downgrade+0x7f0/0x7f0 [ 68.172343] out_of_memory+0x2b0/0x1030 [ 68.176329] ? oom_killer_disable+0x1a0/0x1a0 [ 68.180822] ? __alloc_pages_slowpath+0xb69/0x2650 [ 68.185754] __alloc_pages_slowpath+0x1ef3/0x2650 [ 68.190602] ? warn_alloc+0x100/0x100 [ 68.194406] ? get_page_from_freelist+0x1046/0x23b0 [ 68.199470] ? __might_sleep+0x93/0xb0 [ 68.203341] __alloc_pages_nodemask+0x60d/0x770 [ 68.208004] ? __alloc_pages_slowpath+0x2650/0x2650 [ 68.213018] ? cache_grow_begin+0x331/0x3f0 [ 68.217456] cache_grow_begin+0x80/0x3f0 [ 68.221552] fallback_alloc+0x203/0x2c0 [ 68.225571] ____cache_alloc_node+0x1c7/0x1e0 [ 68.230067] kmem_cache_alloc_node_trace+0xe7/0x780 [ 68.235085] __kmalloc_node_track_caller+0x3c/0x70 [ 68.240013] __kmalloc_reserve.isra.36+0x2c/0xc0 [ 68.244759] __alloc_skb+0xc1/0x500 [ 68.248380] ? skb_trim+0x160/0x160 [ 68.251999] ? if_nlmsg_size+0x2d9/0x6f0 [ 68.256061] rtmsg_ifinfo_build_skb+0x68/0x120 [ 68.260733] rtmsg_ifinfo_event.part.27+0x16/0xb0 [ 68.265712] rtmsg_ifinfo+0x4a/0x70 [ 68.269388] dev_close_many+0x287/0x610 [ 68.273444] ? find_held_lock+0x36/0x1d0 [ 68.277513] ? list_netdevice+0x4b0/0x4b0 [ 68.281643] ? __queue_work+0x3c8/0xe40 [ 68.285647] ? lock_downgrade+0x7f0/0x7f0 [ 68.289830] rollback_registered_many+0x32e/0xb20 [ 68.295263] ? wake_up_process+0x10/0x20 [ 68.299302] ? netdev_info+0xe0/0xe0 [ 68.302997] ? __queue_work+0x3c8/0xe40 [ 68.306947] ? find_held_lock+0x36/0x1d0 [ 68.310984] ? mark_held_locks+0xc7/0x130 [ 68.315110] ? queue_delayed_work_on+0xb0/0x180 [ 68.319755] rollback_registered+0xd4/0x180 [ 68.324053] ? rollback_registered_many+0xb20/0xb20 [ 68.329061] ? linkwatch_schedule_work+0xc7/0xf0 [ 68.333795] unregister_netdevice_queue+0x17e/0x200 [ 68.338805] __tun_detach+0x9ab/0xcf0 [ 68.342583] ? fsnotify+0x1160/0x1160 [ 68.346375] tun_chr_close+0x40/0x60 [ 68.350066] __fput+0x232/0x750 [ 68.353323] ____fput+0x9/0x10 [ 68.356513] task_work_run+0xe5/0x170 [ 68.360306] do_exit+0x94b/0x2c00 [ 68.363735] ? trace_hardirqs_off+0x10/0x10 [ 68.368031] ? lock_downgrade+0x7f0/0x7f0 [ 68.372170] ? mm_update_next_owner+0x630/0x630 [ 68.376835] ? find_held_lock+0x36/0x1d0 [ 68.380886] ? get_signal+0x2ad/0x1b30 [ 68.384765] ? lock_downgrade+0x7f0/0x7f0 [ 68.388920] do_group_exit+0xf4/0x2f0 [ 68.392709] get_signal+0x2fe/0x1b30 [ 68.396476] ? __vfs_read+0x410/0x840 [ 68.400278] do_signal+0x7f/0x19a0 [ 68.403800] ? setup_sigcontext+0x7d0/0x7d0 [ 68.408119] ? rw_verify_area+0xb8/0x2b0 [ 68.412215] ? lock_downgrade+0x7f0/0x7f0 [ 68.416382] ? vfs_read+0xf5/0x300 [ 68.419917] ? _raw_spin_unlock_irq+0x60/0x80 [ 68.424406] ? exit_to_usermode_loop+0x3a/0x1b0 [ 68.429058] exit_to_usermode_loop+0x114/0x1b0 [ 68.433623] do_syscall_64+0x416/0x5b0 [ 68.437549] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 68.442426] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 68.447607] RIP: 0033:0x412f30 [ 68.450786] RSP: 002b:00007ffc008ffa48 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 68.458618] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 0000000000412f30 [ 68.465882] RDX: 0000000000000038 RSI: 0000000000758040 RDI: 00000000000000f9 [ 68.473213] RBP: 0000000000000012 R08: 00000000000003b8 R09: 0000000000004000 [ 68.480471] R10: 0000000000711660 R11: 0000000000000246 R12: 0000000000000000 [ 68.487732] R13: 00007ffc008ffa80 R14: 000000000000d5f0 R15: 00007ffc008ffa90 [ 68.506073] Mem-Info: [ 68.508542] active_anon:5949 inactive_anon:181 isolated_anon:0 [ 68.508542] active_file:4731 inactive_file:4726 isolated_file:32 [ 68.508542] unevictable:0 dirty:9461 writeback:0 unstable:0 [ 68.508542] slab_reclaimable:10832 slab_unreclaimable:101431 [ 68.508542] mapped:2 shmem:242 pagetables:388 bounce:0 [ 68.508542] free:13806 free_pcp:112 free_cma:0 [ 68.576524] Node 0 active_anon:23744kB inactive_anon:700kB active_file:18844kB inactive_file:18804kB unevictable:0kB isolated(anon):0kB isolated(file):384kB mapped:8kB dirty:37840kB writeback:0kB shmem:944kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 68.608628] Node 1 active_anon:52kB inactive_anon:24kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 68.635444] Node 0 DMA free:10408kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 68.661611] lowmem_reserve[]: 0 2578 2578 2578 [ 68.666293] Node 0 DMA32 free:18096kB min:36452kB low:45564kB high:54676kB active_anon:23744kB inactive_anon:700kB active_file:19068kB inactive_file:18892kB unevictable:0kB writepending:37840kB present:3129332kB managed:2642588kB mlocked:0kB kernel_stack:6784kB pagetables:1552kB bounce:0kB free_pcp:432kB local_pcp:128kB free_cma:0kB [ 68.696068] lowmem_reserve[]: 0 0 0 0 [ 68.699886] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 68.725194] lowmem_reserve[]: 0 0 0 0 [ 68.729023] Node 1 Normal free:26720kB min:53436kB low:66792kB high:80148kB active_anon:52kB inactive_anon:24kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3932160kB managed:3870204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 68.756596] lowmem_reserve[]: 0 0 0 0 [ 68.761087] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10408kB [ 68.801049] Node 0 DMA32: 712*4kB (UME) 666*8kB (UME) 268*16kB (UME) 64*32kB (UME) 40*64kB (UME) 8*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18096kB [ 68.815952] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 68.826694] Node 1 Normal: 16*4kB (ME) 16*8kB (UM) 14*16kB (UME) 6*32kB (UME) 4*64kB (ME) 2*128kB (UE) 2*256kB (UM) 3*512kB (UME) 1*1024kB (E) 5*2048kB (UME) 3*4096kB (M) = 26720kB [ 68.843056] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 68.851907] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 68.860497] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 68.869323] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 68.877939] 9736 total pagecache pages [ 68.881871] 0 pages in swap cache [ 68.885456] Swap cache stats: add 0, delete 0, find 0/0 [ 68.891503] Free swap = 0kB [ 68.894519] Total swap = 0kB [ 68.897530] 1965979 pages RAM [ 68.900673] 0 pages HighMem/MovableOnly [ 68.904653] 333804 pages reserved [ 68.908100] 0 pages cma reserved [ 68.911494] Out of memory: Kill process 6845 (syz-execprog) score 1 or sacrifice child [ 68.919938] Killed process 6874 (syz-executor.1) total-vm:37636kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 68.953524] oom_reaper: reaped process 6874 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 69.049171] syz-executor.0 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 69.065978] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 69.072065] CPU: 1 PID: 6903 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 69.079894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.089248] Call Trace: [ 69.091838] dump_stack+0xf7/0x13b [ 69.095441] dump_header+0x160/0x63f [ 69.099154] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 69.104246] ? ___ratelimit+0x243/0x519 [ 69.108210] ? do_raw_spin_unlock+0x16a/0x250 [ 69.112695] oom_kill_process.cold.24+0xb/0xa1a [ 69.117384] ? out_of_memory+0x7f9/0x1030 [ 69.121528] ? lock_downgrade+0x7f0/0x7f0 [ 69.125697] out_of_memory+0x2b0/0x1030 [ 69.129745] ? oom_killer_disable+0x1a0/0x1a0 [ 69.134229] ? __alloc_pages_slowpath+0xb69/0x2650 [ 69.139153] __alloc_pages_slowpath+0x1ef3/0x2650 [ 69.144006] ? warn_alloc+0x100/0x100 [ 69.147811] ? get_page_from_freelist+0x1046/0x23b0 [ 69.152842] ? __might_sleep+0x93/0xb0 [ 69.156727] __alloc_pages_nodemask+0x60d/0x770 [ 69.161405] ? __alloc_pages_slowpath+0x2650/0x2650 [ 69.166437] alloc_pages_current+0xd6/0x1b0 [ 69.170859] __vmalloc_node_range+0x338/0x620 [ 69.175354] vmalloc_user+0x40/0x100 [ 69.179067] ? vb2_vmalloc_alloc+0xaf/0x230 [ 69.183389] vb2_vmalloc_alloc+0xaf/0x230 [ 69.187533] __vb2_queue_alloc+0x414/0xfd0 [ 69.191779] vb2_core_create_bufs+0x2c3/0x660 [ 69.196270] ? __save_stack_trace+0x7e/0xd0 [ 69.200595] ? __vb2_queue_alloc+0xfd0/0xfd0 [ 69.205015] ? __lock_acquire+0x6a4/0x4500 [ 69.209254] ? video_usercopy+0x34e/0xd20 [ 69.213398] ? video_ioctl2+0x10/0x20 [ 69.217190] ? v4l2_ioctl+0x1a2/0x300 [ 69.220988] ? do_vfs_ioctl+0x180/0xfb0 [ 69.225012] vb2_create_bufs+0x2cc/0x7d0 [ 69.229058] ? vb2_thread_start.cold.36+0x1c/0x1c [ 69.233939] ? trace_hardirqs_off+0x10/0x10 [ 69.238258] v4l2_m2m_ioctl_create_bufs+0x91/0xb0 [ 69.243088] v4l_create_bufs+0x105/0x1d0 [ 69.247179] __video_do_ioctl+0x893/0x920 [ 69.251312] ? __might_fault+0xf1/0x1b0 [ 69.255279] ? video_ioctl2+0x20/0x20 [ 69.259071] ? video_ioctl2+0x20/0x20 [ 69.262987] ? kasan_check_write+0x14/0x20 [ 69.267200] ? video_ioctl2+0x20/0x20 [ 69.271082] video_usercopy+0x26a/0xd20 [ 69.275061] ? mutex_lock_io_nested+0x1380/0x1380 [ 69.279902] ? v4l_g_priority+0x90/0x90 [ 69.283864] video_ioctl2+0x10/0x20 [ 69.287471] v4l2_ioctl+0x1a2/0x300 [ 69.291086] do_vfs_ioctl+0x180/0xfb0 [ 69.294876] ? __fget+0x1ad/0x2f0 [ 69.298309] ? ioctl_preallocate+0x1a0/0x1a0 [ 69.302697] ? __fget+0x1ca/0x2f0 [ 69.306132] ? security_file_ioctl+0x6a/0xa0 [ 69.310537] ? SyS_clock_settime+0x1a0/0x1a0 [ 69.314933] ? security_file_ioctl+0x6a/0xa0 [ 69.319333] SyS_ioctl+0x74/0x80 [ 69.322689] ? do_vfs_ioctl+0xfb0/0xfb0 [ 69.326676] do_syscall_64+0x1c7/0x5b0 [ 69.330568] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 69.335423] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 69.340614] RIP: 0033:0x4592c9 [ 69.343908] RSP: 002b:00007f6da1cdcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.351612] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004592c9 [ 69.358877] RDX: 00000000200001c0 RSI: 00000000c100565c RDI: 0000000000000004 [ 69.366140] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 69.373404] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6da1cdd6d4 [ 69.380662] R13: 00000000004c4241 R14: 00000000004d7ee0 R15: 00000000ffffffff [ 69.388204] Mem-Info: [ 69.390649] active_anon:5915 inactive_anon:181 isolated_anon:0 [ 69.390649] active_file:4767 inactive_file:4666 isolated_file:96 [ 69.390649] unevictable:0 dirty:9461 writeback:0 unstable:0 [ 69.390649] slab_reclaimable:10832 slab_unreclaimable:101002 [ 69.390649] mapped:0 shmem:242 pagetables:377 bounce:0 [ 69.390649] free:14396 free_pcp:0 free_cma:0 [ 69.423805] Node 0 active_anon:23608kB inactive_anon:700kB active_file:19336kB inactive_file:18736kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:37840kB writeback:0kB shmem:944kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 69.451939] Node 1 active_anon:52kB inactive_anon:24kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 69.481503] Node 0 DMA free:10408kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 69.507651] lowmem_reserve[]: 0 2578 2578 2578 [ 69.512438] Node 0 DMA32 free:20456kB min:36452kB low:45564kB high:54676kB active_anon:23608kB inactive_anon:700kB active_file:19156kB inactive_file:18908kB unevictable:0kB writepending:37840kB present:3129332kB managed:2642588kB mlocked:0kB kernel_stack:6752kB pagetables:1508kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 69.542091] lowmem_reserve[]: 0 0 0 0 [ 69.545906] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 69.571267] lowmem_reserve[]: 0 0 0 0 [ 69.575081] Node 1 Normal free:26720kB min:53436kB low:66792kB high:80148kB active_anon:52kB inactive_anon:24kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 69.605899] lowmem_reserve[]: 0 0 0 0 [ 69.609740] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10408kB [ 69.622333] Node 0 DMA32: 772*4kB (UME) 871*8kB (UME) 287*16kB (UME) 65*32kB (UME) 40*64kB (UME) 8*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20312kB [ 69.637097] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 69.647867] Node 1 Normal: 15*4kB (ME) 16*8kB (UM) 13*16kB (UME) 5*32kB (UME) 5*64kB (ME) 2*128kB (UE) 2*256kB (UM) 3*512kB (UME) 1*1024kB (E) 5*2048kB (UME) 3*4096kB (M) = 26732kB [ 69.664246] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 69.673156] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 69.681770] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 69.690640] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 69.699214] 9736 total pagecache pages [ 69.703142] 0 pages in swap cache [ 69.706593] Swap cache stats: add 0, delete 0, find 0/0 [ 69.712007] Free swap = 0kB [ 69.715018] Total swap = 0kB [ 69.718031] 1965979 pages RAM [ 69.735582] 0 pages HighMem/MovableOnly [ 69.739586] 333804 pages reserved [ 69.743083] 0 pages cma reserved [ 69.746444] Out of memory: Kill process 6845 (syz-execprog) score 1 or sacrifice child [ 69.754985] Killed process 6869 (syz-executor.4) total-vm:37636kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 69.765813] oom_reaper: reaped process 6869 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 69.775943] syz-executor.0: vmalloc: allocation failure, allocated 1355354112 of 1512972288 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 69.790165] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 69.795686] CPU: 1 PID: 6903 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 69.803479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.812833] Call Trace: [ 69.815422] dump_stack+0xf7/0x13b [ 69.818957] warn_alloc.cold.114+0xa2/0x1be [ 69.823270] ? zone_watermark_ok_safe+0x260/0x260 [ 69.828106] ? __alloc_pages_slowpath+0x2650/0x2650 [ 69.833126] __vmalloc_node_range+0x39f/0x620 [ 69.837622] vmalloc_user+0x40/0x100 [ 69.841331] ? vb2_vmalloc_alloc+0xaf/0x230 [ 69.845633] vb2_vmalloc_alloc+0xaf/0x230 [ 69.849763] __vb2_queue_alloc+0x414/0xfd0 [ 69.853985] vb2_core_create_bufs+0x2c3/0x660 [ 69.858458] ? __save_stack_trace+0x7e/0xd0 [ 69.862756] ? __vb2_queue_alloc+0xfd0/0xfd0 [ 69.867148] ? __lock_acquire+0x6a4/0x4500 [ 69.871364] ? video_usercopy+0x34e/0xd20 [ 69.875488] ? video_ioctl2+0x10/0x20 [ 69.879263] ? v4l2_ioctl+0x1a2/0x300 [ 69.883041] ? do_vfs_ioctl+0x180/0xfb0 [ 69.887001] vb2_create_bufs+0x2cc/0x7d0 [ 69.891044] ? vb2_thread_start.cold.36+0x1c/0x1c [ 69.895864] ? trace_hardirqs_off+0x10/0x10 [ 69.900180] v4l2_m2m_ioctl_create_bufs+0x91/0xb0 [ 69.905001] v4l_create_bufs+0x105/0x1d0 [ 69.909040] __video_do_ioctl+0x893/0x920 [ 69.913166] ? __might_fault+0xf1/0x1b0 [ 69.917138] ? video_ioctl2+0x20/0x20 [ 69.920919] ? video_ioctl2+0x20/0x20 [ 69.924696] ? kasan_check_write+0x14/0x20 [ 69.928906] ? video_ioctl2+0x20/0x20 [ 69.932682] video_usercopy+0x26a/0xd20 [ 69.936636] ? mutex_lock_io_nested+0x1380/0x1380 [ 69.941459] ? v4l_g_priority+0x90/0x90 [ 69.945433] video_ioctl2+0x10/0x20 [ 69.949043] v4l2_ioctl+0x1a2/0x300 [ 69.952657] do_vfs_ioctl+0x180/0xfb0 [ 69.956454] ? __fget+0x1ad/0x2f0 [ 69.959910] ? ioctl_preallocate+0x1a0/0x1a0 [ 69.964307] ? __fget+0x1ca/0x2f0 [ 69.967769] ? security_file_ioctl+0x6a/0xa0 [ 69.972195] ? SyS_clock_settime+0x1a0/0x1a0 [ 69.976590] ? security_file_ioctl+0x6a/0xa0 [ 69.980984] SyS_ioctl+0x74/0x80 [ 69.984340] ? do_vfs_ioctl+0xfb0/0xfb0 [ 69.988316] do_syscall_64+0x1c7/0x5b0 [ 69.992180] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 69.997178] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 70.002363] RIP: 0033:0x4592c9 [ 70.005534] RSP: 002b:00007f6da1cdcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.013220] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004592c9 [ 70.020470] RDX: 00000000200001c0 RSI: 00000000c100565c RDI: 0000000000000004 [ 70.027731] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 70.034979] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6da1cdd6d4 [ 70.042231] R13: 00000000004c4241 R14: 00000000004d7ee0 R15: 00000000ffffffff [ 70.068321] Mem-Info: [ 70.080072] active_anon:5887 inactive_anon:181 isolated_anon:0 [ 70.080072] active_file:4725 inactive_file:4748 isolated_file:0 [ 70.080072] unevictable:0 dirty:9461 writeback:0 unstable:0 [ 70.080072] slab_reclaimable:10820 slab_unreclaimable:100980 [ 70.080072] mapped:25 shmem:242 pagetables:371 bounce:0 [ 70.080072] free:14399 free_pcp:90 free_cma:0 [ 70.123554] Node 0 active_anon:23496kB inactive_anon:700kB active_file:19056kB inactive_file:18920kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:100kB dirty:37840kB writeback:0kB shmem:944kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 70.151568] Node 1 active_anon:52kB inactive_anon:24kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 70.177532] Node 0 DMA free:10408kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 70.203698] lowmem_reserve[]: 0 2578 2578 2578 [ 70.208294] Node 0 DMA32 free:20456kB min:36452kB low:45564kB high:54676kB active_anon:23496kB inactive_anon:700kB active_file:19016kB inactive_file:18876kB unevictable:0kB writepending:37840kB present:3129332kB managed:2642588kB mlocked:0kB kernel_stack:6720kB pagetables:1484kB bounce:0kB free_pcp:368kB local_pcp:100kB free_cma:0kB [ 70.245417] lowmem_reserve[]: 0 0 0 0 [ 70.249264] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 70.274632] lowmem_reserve[]: 0 0 0 0 [ 70.278446] Node 1 Normal free:26732kB min:53436kB low:66792kB high:80148kB active_anon:52kB inactive_anon:24kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3932160kB managed:3870204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 70.306303] lowmem_reserve[]: 0 0 0 0 [ 70.314179] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10408kB [ 70.327146] Node 0 DMA32: 772*4kB (UME) 881*8kB (UME) 289*16kB (UME) 66*32kB (UME) 40*64kB (UME) 8*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20456kB [ 70.345908] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 70.356984] Node 1 Normal: 15*4kB (ME) 16*8kB (UM) 13*16kB (UME) 5*32kB (UME) 5*64kB (ME) 2*128kB (UE) 2*256kB (UM) 3*512kB (UME) 1*1024kB (E) 5*2048kB (UME) 3*4096kB (M) = 26732kB [ 70.377564] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 70.386524] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 70.395230] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 70.404151] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 70.413093] 9736 total pagecache pages [ 70.417014] 0 pages in swap cache [ 70.420516] Swap cache stats: add 0, delete 0, find 0/0 [ 70.425861] Free swap = 0kB [ 70.428853] Total swap = 0kB [ 70.431877] 1965979 pages RAM [ 70.434965] 0 pages HighMem/MovableOnly [ 70.439615] 333804 pages reserved [ 70.443073] 0 pages cma reserved [ 71.295946] kasan: CONFIG_KASAN_INLINE enabled [ 71.300953] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 71.308572] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 71.314833] Modules linked in: [ 71.318006] CPU: 1 PID: 6903 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0 [ 71.326120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.335538] task: ffff888093090240 task.stack: ffff8880982f0000 [ 71.341626] RIP: 0010:vb2_vmalloc_put_userptr+0x69/0x1e0 [ 71.347052] RSP: 0018:ffff8880982f79f0 EFLAGS: 00010202 [ 71.352402] RAX: dffffc0000000000 RBX: ffffc90005eb2000 RCX: ffffffff8423b2e0 [ 71.359651] RDX: 0000000000000001 RSI: ffffed10142bad4a RDI: 0000000000000009 [ 71.366899] RBP: ffff8880982f7a18 R08: ffff8880797faa80 R09: 1ffffffff0de57dc [ 71.374157] R10: ffff8880982f7aa8 R11: ffff888093090240 R12: ffff8880797faa80 [ 71.381402] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880797faa88 [ 71.388647] FS: 00007f6da1cdd700(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 71.396846] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.402700] CR2: 00000000200001c0 CR3: 00000000a58dc000 CR4: 00000000001406e0 [ 71.409959] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.417259] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.424514] Call Trace: [ 71.427086] __vb2_queue_free+0x337/0x770 [ 71.431222] ? __vb2_queue_cancel+0x22f/0x870 [ 71.435834] vb2_core_queue_release+0x57/0x70 [ 71.440310] vb2_queue_release+0x9/0x10 [ 71.444261] v4l2_m2m_ctx_release+0x22/0x30 [ 71.448561] vim2m_release+0xcd/0x120 [ 71.452337] v4l2_release+0xeb/0x1a0 [ 71.456026] __fput+0x232/0x750 [ 71.459383] ? _raw_spin_unlock_irq+0x27/0x80 [ 71.463944] ____fput+0x9/0x10 [ 71.467137] task_work_run+0xe5/0x170 [ 71.470918] get_signal+0x148c/0x1b30 [ 71.474698] ? do_raw_spin_unlock+0x16a/0x250 [ 71.479272] ? __mutex_unlock_slowpath+0x29b/0x7e0 [ 71.484218] ? wait_for_completion+0x440/0x440 [ 71.488789] do_signal+0x7f/0x19a0 [ 71.492322] ? mutex_unlock+0xd/0x10 [ 71.496016] ? v4l2_ioctl+0x1b0/0x300 [ 71.499792] ? setup_sigcontext+0x7d0/0x7d0 [ 71.504122] ? do_vfs_ioctl+0x180/0xfb0 [ 71.508159] ? __fget+0x1ad/0x2f0 [ 71.511625] ? ioctl_preallocate+0x1a0/0x1a0 [ 71.516010] ? __fget+0x1ca/0x2f0 [ 71.519444] ? exit_to_usermode_loop+0x3a/0x1b0 [ 71.524089] exit_to_usermode_loop+0x114/0x1b0 [ 71.529428] do_syscall_64+0x416/0x5b0 [ 71.533287] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 71.538115] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 71.543277] RIP: 0033:0x4592c9 [ 71.546439] RSP: 002b:00007f6da1cdcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.554407] RAX: fffffffffffffff2 RBX: 0000000000000003 RCX: 00000000004592c9 [ 71.561701] RDX: 00000000200001c0 RSI: 00000000c100565c RDI: 0000000000000004 [ 71.568951] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 71.576197] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6da1cdd6d4 [ 71.583441] R13: 00000000004c4241 R14: 00000000004d7ee0 R15: 00000000ffffffff [ 71.590700] Code: 4c 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 76 01 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 6c 24 08 49 8d 7d 09 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 07 01 00 [ 71.609840] RIP: vb2_vmalloc_put_userptr+0x69/0x1e0 RSP: ffff8880982f79f0 [ 71.617045] ---[ end trace e1f11b215510ce45 ]--- [ 71.621851] Kernel panic - not syncing: Fatal exception [ 71.628507] Kernel Offset: disabled [ 71.632133] Rebooting in 86400 seconds..