3503000006000f000700000008000600bf4100001400028006000e004e20000006000e004e210000b400018008000800000200000800080009000000060001000000000008000b0073697000060002006700000014000300e0000001000000000000000000dfff000800080000000000e053227a0afb2c7f05e79d2925aa4fc6f9856035d3d317e1c78832a3770d"], 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) 18:03:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4(r0, &(0x7f0000000000)=@qipcrtr, &(0x7f0000000080)=0x80, 0x800) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) r4 = accept(r1, &(0x7f0000000640)=@ipx, &(0x7f0000000540)=0x80) accept(r4, &(0x7f00000006c0)=@can, &(0x7f0000000740)=0x80) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={r2, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000400)={0x0, 0x80}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000500)={r5, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r3) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000780)={r2, @in={{0x2, 0x4e21, @remote}}}, 0x84) sendmsg$IPVS_CMD_SET_DEST(r3, 0x0, 0x8884) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00', r6) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000826bd7000fddbdf250c0000000c00028008000700000400fd8fedef09e1f15400"], 0x20}, 0x1, 0x0, 0x0, 0x20000841}, 0x8000) accept(r0, 0x0, 0x0) 18:03:16 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@name, &(0x7f0000000080)=0x80) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) 18:03:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) [ 998.250993] sctp: [Deprecated]: syz-executor.4 (pid 2818) Use of int in max_burst socket option. [ 998.250993] Use struct sctp_assoc_value instead 18:03:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r1, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000500)={r3, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r2) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000002a40)={0x0, 0x3}, &(0x7f0000002a80)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000002b40)={&(0x7f0000000900)=@in6={0xa, 0x4e23, 0x3f, @rand_addr=' \x01\x00', 0x4}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000002940)="4d5f358b32848725950d956505e67b8c7f9d4389306b1af59dc8", 0x1a}, {&(0x7f0000002980)="458b6d6b0f55a6177ba278af69defabf8e4308f7beb44c4460b8b5fd7e4ae3971643514cf2ac5a8c3556803a3645b4bec10013f0c64e4c2e4a7576607d3853d4a1aff177cbf285223937b9fbe9c3714795fa0eb38fe3f4", 0x57}], 0x4, &(0x7f0000002ac0)=[@prinfo={0x18, 0x84, 0x5, {0x20}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x8000, 0x8, 0x1fe000, r4}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @init={0x18, 0x84, 0x0, {0x8, 0x40, 0x7, 0x8001}}], 0x68, 0x80}, 0x80) sendmsg$IPVS_CMD_SET_DEST(r2, 0x0, 0x8884) r5 = accept(r0, &(0x7f00000005c0)=@x25={0x9, @remote}, &(0x7f0000000540)=0x80) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000640)=@assoc_value={r3, 0x2}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000006c0)={0x1, 0x2117, 0x4, 0xfffffff7, 0x2, 0x8, 0x5, 0xffff, r6}, &(0x7f0000000700)=0x20) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00', r0) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x41) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002b80)='IPVS\x00', r2) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xb8, r8, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4040011}, 0x1) 18:03:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) 18:03:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) r1 = accept(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={r2, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000500)={r4, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r3) sendmsg$IPVS_CMD_SET_DEST(r3, 0x0, 0x8884) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00', r1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, r5, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0x80, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x7, 0x5, 0x81, 0x1}, {0xffff, 0x0, 0x4, 0x75}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socket$kcm(0x29, 0x95a393ad8c5d32cf, 0x0) 18:03:16 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0xe, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) 18:03:16 executing program 2: getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r0, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000500)={r2, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r1) sendmsg$IPVS_CMD_SET_DEST(r1, 0x0, 0x8884) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, r3, 0xd1056ce89952ce05, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffff9cd9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf4f6}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20044804}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) 18:03:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept(r0, 0x0, 0x0) getsockname(r1, &(0x7f0000000000)=@sco={0x1f, @fixed}, &(0x7f0000000080)=0x80) 18:03:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x80, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000140)={0x3, 0xc0011030, &(0x7f00000000c0)="71d412f5c468f549376b2e8cb38a3370d4d07d31de32c3c986a0e2e63a57fecb67797ccd3ecf7aa5363db8a4e31f214f5551a6112ed997b0d784cdf6766d8b0e38803a983dab6eed40630c52bcb38297628d9b71296edbb1e626cdf1ca4c23b3fd779325f5cdb6f06f690d6d0086172d99479763e5ba234e9be8877b0060", &(0x7f0000000040)="ddf0049a4e4aa0a28f8d3fa91aea54cc6bf4b1bb374844e435112b1bc4a12bf4a5e9f201f36e773f97780fa614aed8c74314c971e6d703e17089", 0x7e, 0x3a}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) 18:03:16 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000002c0)={r3, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000500)={r5, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r4) sendmsg$IPVS_CMD_SET_DEST(r4, 0x0, 0x8884) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x1], 0x2, 0x80000}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, 0xffffffffffffffff, 0x8}, 0x10) [ 999.203575] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 999.223547] syz-executor.5: [ 999.223551] syz-executor.5: page allocation failure: order:4 [ 999.227919] page allocation failure: order:4 [ 999.233578] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 999.234490] syz-executor.3 cpuset= [ 999.249320] (null) [ 999.249464] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 999.260176] syz-executor.5 cpuset= [ 999.264338] / [ 999.268138] / [ 999.269213] syz-executor.5 cpuset= [ 999.272623] mems_allowed=0-1 [ 999.280114] mems_allowed=0-1 [ 999.281921] / mems_allowed=0-1 [ 999.288542] CPU: 0 PID: 2838 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 999.296340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 999.307171] Call Trace: [ 999.310809] dump_stack+0x1b2/0x281 [ 999.314611] warn_alloc.cold+0x96/0x1cc [ 999.318588] ? zone_watermark_ok_safe+0x220/0x220 [ 999.323444] __alloc_pages_nodemask+0x2127/0x2720 [ 999.328951] ? __schedule+0x893/0x1de0 [ 999.332862] ? lock_acquire+0x170/0x3f0 [ 999.337018] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 999.341861] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 999.347327] ? __mutex_unlock_slowpath+0x75/0x770 [ 999.352173] alloc_pages_current+0x155/0x260 [ 999.356582] ion_page_pool_alloc+0x118/0x1b0 [ 999.361001] ion_system_heap_allocate+0x133/0x8c0 [ 999.365876] ? ion_alloc+0x187/0x810 [ 999.369589] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 999.375047] ? ion_system_contig_heap_create+0x130/0x130 [ 999.380503] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 999.385530] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 999.390657] ion_alloc+0x204/0x810 [ 999.395255] ? ion_dma_buf_release+0x40/0x40 [ 999.399856] ? __might_fault+0x177/0x1b0 [ 999.403922] ion_ioctl+0xea/0x1f0 [ 999.407378] ? ion_query_heaps+0x360/0x360 [ 999.411614] ? ion_query_heaps+0x360/0x360 [ 999.415845] do_vfs_ioctl+0x75a/0xff0 [ 999.419644] ? ioctl_preallocate+0x1a0/0x1a0 [ 999.424046] ? lock_downgrade+0x740/0x740 [ 999.428193] ? __fget+0x225/0x360 [ 999.431736] ? do_vfs_ioctl+0xff0/0xff0 [ 999.435703] ? security_file_ioctl+0x83/0xb0 [ 999.440108] SyS_ioctl+0x7f/0xb0 [ 999.443470] ? do_vfs_ioctl+0xff0/0xff0 [ 999.447460] do_syscall_64+0x1d5/0x640 [ 999.451356] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 999.456548] RIP: 0033:0x465ef9 [ 999.459734] RSP: 002b:00007fd7ebad0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 999.467464] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 999.474746] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 999.482027] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 999.489382] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 999.496647] R13: 00007ffc90d553bf R14: 00007fd7ebad0300 R15: 0000000000022000 [ 999.504026] CPU: 1 PID: 2821 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 999.511853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 999.522524] Call Trace: [ 999.525649] dump_stack+0x1b2/0x281 [ 999.529642] warn_alloc.cold+0x96/0x1cc [ 999.533982] ? zone_watermark_ok_safe+0x220/0x220 [ 999.539002] __alloc_pages_nodemask+0x2127/0x2720 [ 999.543851] ? _raw_spin_unlock_irq+0x5a/0x80 [ 999.548982] ? finish_task_switch+0x178/0x610 [ 999.553488] ? finish_task_switch+0x14d/0x610 [ 999.558002] ? lock_acquire+0x170/0x3f0 [ 999.561985] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 999.566852] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 999.572318] ? __mutex_unlock_slowpath+0x75/0x770 [ 999.577262] ? alloc_pages_current+0x37/0x260 [ 999.581861] alloc_pages_current+0x155/0x260 [ 999.586285] ion_page_pool_alloc+0x118/0x1b0 [ 999.590718] ion_system_heap_allocate+0x133/0x8c0 [ 999.595570] ? ion_alloc+0x187/0x810 [ 999.599517] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 999.604991] ? ion_system_contig_heap_create+0x130/0x130 [ 999.611510] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 999.616762] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 999.621799] ion_alloc+0x204/0x810 [ 999.625651] ? ion_dma_buf_release+0x40/0x40 [ 999.630100] ? __might_fault+0x177/0x1b0 [ 999.634323] ion_ioctl+0xea/0x1f0 [ 999.637789] ? ion_query_heaps+0x360/0x360 [ 999.642184] ? ion_query_heaps+0x360/0x360 [ 999.646617] do_vfs_ioctl+0x75a/0xff0 [ 999.650997] ? ioctl_preallocate+0x1a0/0x1a0 [ 999.655438] ? lock_downgrade+0x740/0x740 [ 999.659714] ? __fget+0x225/0x360 [ 999.663660] ? do_vfs_ioctl+0xff0/0xff0 [ 999.667647] ? security_file_ioctl+0x83/0xb0 [ 999.672063] SyS_ioctl+0x7f/0xb0 [ 999.676737] ? do_vfs_ioctl+0xff0/0xff0 [ 999.680729] do_syscall_64+0x1d5/0x640 [ 999.684630] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 999.689821] RIP: 0033:0x465ef9 [ 999.693006] RSP: 002b:00007fe0299ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 999.700720] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 999.708003] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 999.715278] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 999.722548] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 999.730796] R13: 00007fffacd0f57f R14: 00007fe0299ac300 R15: 0000000000022000 [ 999.748010] CPU: 1 PID: 2846 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 999.755914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 999.765358] Call Trace: [ 999.767980] dump_stack+0x1b2/0x281 [ 999.771619] warn_alloc.cold+0x96/0x1cc [ 999.775603] ? zone_watermark_ok_safe+0x220/0x220 [ 999.780734] __alloc_pages_nodemask+0x2127/0x2720 [ 999.785602] ? lock_acquire+0x170/0x3f0 [ 999.789594] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 999.794455] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 999.799922] ? __mutex_unlock_slowpath+0x75/0x770 [ 999.804788] alloc_pages_current+0x155/0x260 [ 999.809214] ion_page_pool_alloc+0x118/0x1b0 [ 999.813634] ion_system_heap_allocate+0x133/0x8c0 [ 999.818581] ? ion_alloc+0x187/0x810 [ 999.822312] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 999.827861] ? ion_system_contig_heap_create+0x130/0x130 [ 999.833411] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 999.838438] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 999.843295] ion_alloc+0x204/0x810 [ 999.846849] ? ion_dma_buf_release+0x40/0x40 [ 999.850533] Mem-Info: [ 999.851350] ? __might_fault+0x177/0x1b0 [ 999.857924] ion_ioctl+0xea/0x1f0 [ 999.861387] ? ion_query_heaps+0x360/0x360 [ 999.862850] active_anon:16420 inactive_anon:20963 isolated_anon:0 [ 999.862850] active_file:2346 inactive_file:5684 isolated_file:0 [ 999.862850] unevictable:0 dirty:149 writeback:0 unstable:0 [ 999.862850] slab_reclaimable:12934 slab_unreclaimable:114832 [ 999.862850] mapped:58205 shmem:21270 pagetables:2597 bounce:0 [ 999.862850] free:386250 free_pcp:72 free_cma:0 [ 999.865623] ? ion_query_heaps+0x360/0x360 [ 999.865655] do_vfs_ioctl+0x75a/0xff0 [ 999.908159] ? ioctl_preallocate+0x1a0/0x1a0 [ 999.912576] ? lock_downgrade+0x740/0x740 [ 999.916735] ? __fget+0x225/0x360 [ 999.920196] ? do_vfs_ioctl+0xff0/0xff0 [ 999.924188] ? security_file_ioctl+0x83/0xb0 [ 999.928603] SyS_ioctl+0x7f/0xb0 [ 999.931996] ? do_vfs_ioctl+0xff0/0xff0 [ 999.935975] do_syscall_64+0x1d5/0x640 [ 999.939876] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 999.945075] RIP: 0033:0x465ef9 [ 999.948266] RSP: 002b:00007fd7ebaaf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 999.956067] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465ef9 [ 999.961414] Node 0 active_anon:65244kB inactive_anon:58472kB active_file:9292kB inactive_file:22036kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184628kB dirty:584kB writeback:0kB shmem:59508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 20480kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 999.963690] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 999.963696] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 999.963702] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 999.963713] R13: 00007ffc90d553bf R14: 00007fd7ebaaf300 R15: 0000000000022000 [ 1000.043706] Node 1 active_anon:436kB inactive_anon:25380kB active_file:92kB inactive_file:700kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48192kB dirty:12kB writeback:0kB shmem:25572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1000.116280] Node 0 DMA free:11112kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:460kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1000.167974] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1000.173208] Node 0 DMA32 free:564004kB min:36200kB low:45248kB high:54296kB active_anon:65248kB inactive_anon:58380kB active_file:8920kB inactive_file:22156kB unevictable:0kB writepending:628kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9856kB pagetables:10100kB bounce:0kB free_pcp:752kB local_pcp:644kB free_cma:0kB [ 1000.210881] Bluetooth: hci5 command 0x041b tx timeout [ 1000.216210] lowmem_reserve[]: 0 0 0 0 0 [ 1000.226492] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1000.226513] lowmem_reserve[]: 0 0 0 0 0 [ 1000.226530] Node 1 Normal free:1234836kB min:53696kB low:67120kB high:80544kB active_anon:436kB inactive_anon:25380kB active_file:92kB inactive_file:700kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:288kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1000.226552] lowmem_reserve[]: 0 0 0 0 0 [ 1000.226572] Node 0 DMA: 14*4kB (UME) 14*8kB (UME) 10*16kB (UME) 11*32kB (UME) 1*64kB (E) 5*128kB (UE) 2*256kB (ME) 4*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11112kB [ 1000.330501] Node 0 DMA32: 964*4kB (UME) 372*8kB (UME) 156*16kB (UE) 4994*32kB (UE) 3573*64kB (U) 13*128kB (U) 4*256kB (U) 0*512kB 10*1024kB (U) 0*2048kB 0*4096kB = 410736kB [ 1000.376452] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1000.391656] Node 1 Normal: 395*4kB (UM) 748*8kB (UM) 628*16kB (UM) 389*32kB (UME) 8665*64kB (UM) 2110*128kB (UM) 915*256kB (UM) 281*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 1234860kB [ 1000.442213] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1000.461463] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1000.474972] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1000.499736] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1000.518072] 28717 total pagecache pages [ 1000.527349] 0 pages in swap cache [ 1000.535371] Swap cache stats: add 0, delete 0, find 0/0 [ 1000.547053] Free swap = 0kB [ 1000.550476] Total swap = 0kB [ 1000.553585] 2097051 pages RAM [ 1000.558170] 0 pages HighMem/MovableOnly [ 1000.562221] 363840 pages reserved [ 1000.565746] 0 pages cma reserved [ 1001.843889] oom_reaper: reaped process 2846 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1001.901976] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1001.927528] in:imklog cpuset=/ mems_allowed=0-1 [ 1001.932384] CPU: 0 PID: 2494 Comm: in:imklog Not tainted 4.14.222-syzkaller #0 [ 1001.940454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1001.949812] Call Trace: [ 1001.952425] dump_stack+0x1b2/0x281 [ 1001.956075] dump_header+0x178/0x82f [ 1001.960167] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1001.965544] ? ___ratelimit+0x2cd/0x530 [ 1001.969603] oom_kill_process.cold+0x10/0xb18 [ 1001.974098] out_of_memory+0xe3e/0x1190 [ 1001.978070] ? oom_killer_disable+0x1c0/0x1c0 [ 1001.982559] ? mutex_trylock+0x152/0x1a0 [ 1001.986615] __alloc_pages_nodemask+0x23e1/0x2720 [ 1001.991465] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1001.996315] alloc_pages_current+0x155/0x260 [ 1002.000734] filemap_fault+0xea3/0x1980 [ 1002.004794] ext4_filemap_fault+0x84/0xb0 [ 1002.008956] __do_fault+0xfa/0x380 [ 1002.012511] __handle_mm_fault+0x2497/0x4620 [ 1002.016925] ? vm_insert_page+0x7c0/0x7c0 [ 1002.021069] ? lock_downgrade+0x740/0x740 [ 1002.025230] handle_mm_fault+0x391/0x860 [ 1002.029285] __do_page_fault+0x549/0xad0 [ 1002.033356] ? spurious_fault+0x640/0x640 [ 1002.037515] ? do_page_fault+0x60/0x500 [ 1002.041476] ? page_fault+0x2f/0x50 [ 1002.045094] page_fault+0x45/0x50 [ 1002.048554] RIP: 1fa0:0x1f9f [ 1002.051564] RSP: 0000:000055823b1c89d0 EFLAGS: 7f455cb15da0 [ 1002.054078] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1002.062933] syz-executor.5: [ 1002.079565] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1002.084222] page allocation failure: order:0 [ 1002.087801] CPU: 0 PID: 2846 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1002.087811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1002.092274] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1002.100023] Call Trace: [ 1002.100045] dump_stack+0x1b2/0x281 [ 1002.100058] warn_alloc.cold+0x96/0x1cc [ 1002.100070] ? zone_watermark_ok_safe+0x220/0x220 [ 1002.100079] ? usleep_range+0x130/0x130 [ 1002.100088] ? try_to_free_pages+0x23f/0x6e0 [ 1002.100097] ? _find_next_bit+0xdb/0x100 [ 1002.100107] ? run_timer_softirq+0x5a0/0x5a0 [ 1002.100126] __alloc_pages_nodemask+0x2127/0x2720 [ 1002.100144] ? lock_acquire+0x170/0x3f0 [ 1002.100161] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1002.100175] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1002.100190] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1002.100206] ? retint_kernel+0x2d/0x2d [ 1002.100220] alloc_pages_current+0x155/0x260 [ 1002.100233] ion_page_pool_alloc+0x118/0x1b0 [ 1002.100246] ion_system_heap_allocate+0x133/0x8c0 [ 1002.100257] ? ion_alloc+0x187/0x810 [ 1002.100267] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1002.100278] ? ion_system_contig_heap_create+0x130/0x130 [ 1002.100288] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1002.100297] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1002.100310] ion_alloc+0x204/0x810 [ 1002.100326] ? ion_dma_buf_release+0x40/0x40 [ 1002.100339] ? __might_fault+0x177/0x1b0 [ 1002.100353] ion_ioctl+0xea/0x1f0 [ 1002.100364] ? ion_query_heaps+0x360/0x360 [ 1002.100379] ? ion_query_heaps+0x360/0x360 [ 1002.100390] do_vfs_ioctl+0x75a/0xff0 [ 1002.100402] ? ioctl_preallocate+0x1a0/0x1a0 [ 1002.100411] ? lock_downgrade+0x740/0x740 [ 1002.100426] ? __fget+0x225/0x360 [ 1002.100436] ? do_vfs_ioctl+0xff0/0xff0 [ 1002.100448] ? security_file_ioctl+0x83/0xb0 [ 1002.100459] SyS_ioctl+0x7f/0xb0 [ 1002.100467] ? do_vfs_ioctl+0xff0/0xff0 [ 1002.100480] do_syscall_64+0x1d5/0x640 [ 1002.100496] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1002.100505] RIP: 0033:0x465ef9 [ 1002.100510] RSP: 002b:00007fd7ebaaf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1002.100522] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465ef9 [ 1002.100528] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1002.100534] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1002.100540] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1002.100546] R13: 00007ffc90d553bf R14: 00007fd7ebaaf300 R15: 0000000000022000 [ 1002.102822] warn_alloc_show_mem: 2 callbacks suppressed [ 1002.102826] Mem-Info: [ 1002.119197] (null) [ 1002.122557] active_anon:16734 inactive_anon:20962 isolated_anon:0 [ 1002.122557] active_file:13 inactive_file:12 isolated_file:0 [ 1002.122557] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1002.122557] slab_reclaimable:12921 slab_unreclaimable:114297 [ 1002.122557] mapped:53135 shmem:21269 pagetables:2575 bounce:0 [ 1002.122557] free:13567 free_pcp:106 free_cma:0 [ 1002.123992] syz-executor.5 cpuset= [ 1002.128597] Node 0 active_anon:66492kB inactive_anon:58468kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165072kB dirty:0kB writeback:0kB shmem:59504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 20480kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1002.137133] / [ 1002.143092] Node 1 active_anon:444kB inactive_anon:25380kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47468kB dirty:0kB writeback:0kB shmem:25572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1002.145399] mems_allowed=0-1 [ 1002.150352] Node 0 [ 1002.156426] CPU: 1 PID: 2838 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1002.158917] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1002.163629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1002.170492] lowmem_reserve[]: [ 1002.173661] Call Trace: [ 1002.173684] dump_stack+0x1b2/0x281 [ 1002.173699] warn_alloc.cold+0x96/0x1cc [ 1002.173712] ? zone_watermark_ok_safe+0x220/0x220 [ 1002.185731] 0 [ 1002.186382] ? usleep_range+0x130/0x130 [ 1002.186393] ? try_to_free_pages+0x23f/0x6e0 [ 1002.186402] ? _find_next_bit+0xdb/0x100 [ 1002.186412] ? run_timer_softirq+0x5a0/0x5a0 [ 1002.186428] __alloc_pages_nodemask+0x2127/0x2720 [ 1002.186447] ? lock_acquire+0x170/0x3f0 [ 1002.186462] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1002.186477] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1002.193958] 2717 [ 1002.195045] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1002.204609] 2718 [ 1002.205907] ? policy_node+0xb3/0x110 [ 1002.213798] 2718 [ 1002.215732] alloc_pages_current+0x155/0x260 [ 1002.223501] 2718 [ 1002.223708] ion_page_pool_alloc+0x118/0x1b0 [ 1002.231197] ion_system_heap_allocate+0x133/0x8c0 [ 1002.235410] Node 0 [ 1002.239640] ? ion_alloc+0x187/0x810 [ 1002.239650] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1002.239660] ? ion_system_contig_heap_create+0x130/0x130 [ 1002.239670] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1002.239681] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1002.239692] ion_alloc+0x204/0x810 [ 1002.239707] ? ion_dma_buf_release+0x40/0x40 [ 1002.239718] ? __might_fault+0x177/0x1b0 [ 1002.239731] ion_ioctl+0xea/0x1f0 [ 1002.249997] DMA32 free:17460kB min:36200kB low:45248kB high:54296kB active_anon:66492kB inactive_anon:58376kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9824kB pagetables:10012kB bounce:0kB free_pcp:264kB local_pcp:128kB free_cma:0kB [ 1002.252524] ? ion_query_heaps+0x360/0x360 [ 1002.255960] lowmem_reserve[]: [ 1002.259946] ? ion_query_heaps+0x360/0x360 [ 1002.259958] do_vfs_ioctl+0x75a/0xff0 [ 1002.259970] ? ioctl_preallocate+0x1a0/0x1a0 [ 1002.259978] ? lock_downgrade+0x740/0x740 [ 1002.259991] ? __fget+0x225/0x360 [ 1002.259999] ? do_vfs_ioctl+0xff0/0xff0 [ 1002.260010] ? security_file_ioctl+0x83/0xb0 [ 1002.260020] SyS_ioctl+0x7f/0xb0 [ 1002.260031] ? do_vfs_ioctl+0xff0/0xff0 [ 1002.264449] Mem-Info: [ 1002.267868] do_syscall_64+0x1d5/0x640 [ 1002.267891] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1002.267901] RIP: 0033:0x465ef9 [ 1002.267905] RSP: 002b:00007fd7ebad0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1002.267914] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1002.267919] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1002.267924] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1002.267930] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1002.267936] R13: 00007ffc90d553bf R14: 00007fd7ebad0300 R15: 0000000000022000 [ 1002.426424] 0 [ 1002.435796] Bluetooth: hci5 command 0x040f tx timeout [ 1002.466428] 0 [ 1002.477146] active_anon:16734 inactive_anon:20962 isolated_anon:0 [ 1002.477146] active_file:13 inactive_file:212 isolated_file:0 [ 1002.477146] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1002.477146] slab_reclaimable:12921 slab_unreclaimable:114297 [ 1002.477146] mapped:53235 shmem:21269 pagetables:2575 bounce:0 [ 1002.477146] free:76827 free_pcp:132 free_cma:0 [ 1002.529458] 0 [ 1002.532821] Node 0 active_anon:66492kB inactive_anon:58468kB active_file:48kB inactive_file:1748kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:166072kB dirty:0kB writeback:0kB shmem:59504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 20480kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1002.549555] 0 [ 1002.568397] Node 1 active_anon:444kB inactive_anon:25380kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47468kB dirty:0kB writeback:0kB shmem:25572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1002.592748] 0 [ 1002.636452] Node 0 [ 1002.886475] DMA free:11088kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1002.936439] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1002.941518] Node 0 DMA32 free:37472kB min:36200kB low:45248kB high:54296kB active_anon:66492kB inactive_anon:58376kB active_file:48kB inactive_file:2848kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9824kB pagetables:10012kB bounce:0kB free_pcp:1432kB local_pcp:688kB free_cma:0kB [ 1003.006485] lowmem_reserve[]: 0 0 0 0 0 [ 1003.010512] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1003.016451] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1003.076450] lowmem_reserve[]: 0 0 0 0 0 [ 1003.096483] Node 1 Normal free:136232kB min:53696kB low:67120kB high:80544kB active_anon:444kB inactive_anon:25380kB active_file:4kB inactive_file:488kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:288kB bounce:0kB free_pcp:1388kB local_pcp:728kB free_cma:0kB [ 1003.110101] lowmem_reserve[]: 0 0 0 0 0 [ 1003.139947] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1003.157529] Node 1 Normal free:133776kB min:53696kB low:67120kB high:80544kB active_anon:444kB inactive_anon:25380kB active_file:4kB inactive_file:488kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:288kB bounce:0kB free_pcp:152kB local_pcp:0kB free_cma:0kB [ 1003.167361] lowmem_reserve[]: [ 1003.192169] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1003.201257] CPU: 1 PID: 2838 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1003.202641] 0 [ 1003.209592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1003.209596] Call Trace: [ 1003.209615] dump_stack+0x1b2/0x281 [ 1003.209628] warn_alloc.cold+0x96/0x1cc [ 1003.209640] ? zone_watermark_ok_safe+0x220/0x220 [ 1003.209661] __alloc_pages_nodemask+0x2127/0x2720 [ 1003.209671] ? io_schedule_timeout+0x140/0x140 [ 1003.209680] ? retint_kernel+0x2d/0x2d [ 1003.209694] ? lock_acquire+0x170/0x3f0 [ 1003.209708] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1003.209724] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1003.226461] 0 [ 1003.229200] ? __mutex_unlock_slowpath+0x75/0x770 [ 1003.233681] 0 [ 1003.239406] alloc_pages_current+0x155/0x260 [ 1003.239423] ion_page_pool_alloc+0x118/0x1b0 [ 1003.239433] ion_system_heap_allocate+0x133/0x8c0 [ 1003.239445] ? _raw_spin_unlock+0x29/0x40 [ 1003.239454] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1003.239474] ? ion_system_contig_heap_create+0x130/0x130 [ 1003.266544] 0 [ 1003.269276] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1003.271064] 0 [ 1003.277017] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1003.277032] ion_alloc+0x27a/0x810 [ 1003.277047] ? ion_dma_buf_release+0x40/0x40 [ 1003.277059] ? __might_fault+0x177/0x1b0 [ 1003.277071] ion_ioctl+0xea/0x1f0 [ 1003.277084] ? ion_query_heaps+0x360/0x360 [ 1003.298200] ? ion_query_heaps+0x360/0x360 [ 1003.303295] Node 0 [ 1003.309022] do_vfs_ioctl+0x75a/0xff0 [ 1003.309035] ? ioctl_preallocate+0x1a0/0x1a0 [ 1003.309044] ? lock_downgrade+0x740/0x740 [ 1003.309057] ? __fget+0x225/0x360 [ 1003.309065] ? do_vfs_ioctl+0xff0/0xff0 [ 1003.309075] ? security_file_ioctl+0x83/0xb0 [ 1003.309085] SyS_ioctl+0x7f/0xb0 [ 1003.309095] ? do_vfs_ioctl+0xff0/0xff0 [ 1003.346450] DMA: [ 1003.347371] do_syscall_64+0x1d5/0x640 [ 1003.349593] 25*4kB [ 1003.353399] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1003.376454] lowmem_reserve[]: [ 1003.378711] RIP: 0033:0x465ef9 [ 1003.382667] 0 [ 1003.384721] RSP: 002b:00007fd7ebad0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1003.407555] (UME) [ 1003.413085] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1003.413094] 5*8kB [ 1003.415230] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1003.435829] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1003.436444] 0 [ 1003.443904] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1003.443914] R13: 00007ffc90d553bf R14: 00007fd7ebad0300 R15: 0000000000022000 [ 1003.445803] 0 [ 1003.470356] warn_alloc_show_mem: 1 callbacks suppressed [ 1003.470360] Mem-Info: [ 1003.481066] active_anon:16734 inactive_anon:20962 isolated_anon:0 [ 1003.481066] active_file:36 inactive_file:71 isolated_file:0 [ 1003.481066] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1003.481066] slab_reclaimable:12904 slab_unreclaimable:114599 [ 1003.481066] mapped:53277 shmem:21269 pagetables:2575 bounce:0 [ 1003.481066] free:25210 free_pcp:103 free_cma:0 [ 1003.487185] (UE) [ 1003.545039] 0 0 [ 1003.551410] Node 0 DMA: 25*4kB (UME) 5*8kB (UE) 11*16kB (UME) 11*32kB (UME) 2*64kB (ME) 2*128kB (UE) 3*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11036kB [ 1003.590536] 11*16kB (UME) 11*32kB (UME) 2*64kB (ME) 2*128kB (UE) 3*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11036kB [ 1003.592672] Node 0 DMA32: 2127*4kB (ME) 747*8kB (ME) 317*16kB (UME) 521*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36228kB [ 1003.628095] Node 0 active_anon:66492kB inactive_anon:58468kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165248kB dirty:0kB writeback:0kB shmem:59504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 20480kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1003.633541] Node 0 DMA32: 2127*4kB (ME) 747*8kB (ME) 317*16kB (UME) 521*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36228kB [ 1003.680620] Node 1 active_anon:444kB inactive_anon:25380kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47560kB dirty:0kB writeback:0kB shmem:25572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1003.686882] Node 0 [ 1003.722948] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1003.743132] Node 0 DMA free:11032kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1003.746514] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1003.787693] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1003.791074] Node 1 [ 1003.795929] Node 0 DMA32 free:35860kB min:36200kB low:45248kB high:54296kB active_anon:66492kB inactive_anon:58376kB active_file:80kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9824kB pagetables:10012kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1003.795951] lowmem_reserve[]: 0 0 0 0 0 [ 1003.795967] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1003.795985] lowmem_reserve[]: 0 [ 1003.807221] Normal: [ 1003.835332] Node 1 Normal: 22*4kB (M) 16*8kB (M) 11*16kB (M) 1650*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53192kB [ 1003.901969] 0 0 0 0 [ 1003.920600] Node 1 Normal free:53256kB min:53696kB low:67120kB high:80544kB active_anon:444kB inactive_anon:25380kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:288kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1003.937034] 22*4kB [ 1003.949034] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1003.985782] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1003.986056] lowmem_reserve[]: [ 1003.994769] (M) 16*8kB (M) 11*16kB (M) 1650*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53192kB [ 1003.998296] 0 [ 1004.017869] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1004.034836] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1004.047732] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1004.055742] 0 0 0 0 [ 1004.056472] 21294 total pagecache pages [ 1004.062738] 0 pages in swap cache [ 1004.066195] Swap cache stats: add 0, delete 0, find 0/0 [ 1004.066428] Node 0 DMA: 25*4kB (UME) 5*8kB (UE) 11*16kB (UME) 11*32kB (UME) 2*64kB (ME) 2*128kB (UE) 3*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11036kB [ 1004.072319] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1004.096336] Node 0 DMA32: 2065*4kB (ME) 753*8kB (UME) 317*16kB (UME) 521*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36028kB [ 1004.098706] Free swap = 0kB [ 1004.126501] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1004.135457] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1004.137059] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1004.152044] Total swap = 0kB [ 1004.170916] 2097051 pages RAM [ 1004.174082] 0 pages HighMem/MovableOnly [ 1004.178662] Node 1 Normal: 22*4kB (M) 17*8kB (UM) 12*16kB (UM) 1653*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53312kB [ 1004.182386] 21294 total pagecache pages [ 1004.199165] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1004.199173] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1004.199180] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1004.199186] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1004.199191] 21294 total pagecache pages [ 1004.199201] 0 pages in swap cache [ 1004.199206] Swap cache stats: add 0, delete 0, find 0/0 [ 1004.199216] Free swap = 0kB [ 1004.199219] Total swap = 0kB [ 1004.199226] 2097051 pages RAM [ 1004.199230] 0 pages HighMem/MovableOnly [ 1004.199237] 363840 pages reserved [ 1004.217434] 363840 pages reserved [ 1004.230459] 0 pages cma reserved [ 1004.243263] 0 pages cma reserved [ 1004.282077] 0 pages in swap cache [ 1004.285656] Swap cache stats: add 0, delete 0, find 0/0 [ 1004.291226] Free swap = 0kB [ 1004.294270] Total swap = 0kB [ 1004.301527] 2097051 pages RAM [ 1004.304647] 0 pages HighMem/MovableOnly [ 1004.308698] 363840 pages reserved [ 1004.312243] 0 pages cma reserved [ 1004.315615] Out of memory (oom_kill_allocating_task): Kill process 2494 (in:imklog) score 0 or sacrifice child [ 1004.330313] Killed process 2492 (rsyslogd) total-vm:254332kB, anon-rss:616kB, file-rss:0kB, shmem-rss:0kB [ 1004.342117] oom_reaper: reaped process 2492 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1004.526523] Bluetooth: hci5 command 0x0419 tx timeout [ 1005.015209] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1005.050363] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1005.055658] CPU: 0 PID: 2846 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1005.063475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1005.072836] Call Trace: [ 1005.075443] dump_stack+0x1b2/0x281 [ 1005.079085] warn_alloc.cold+0x96/0x1cc [ 1005.083071] ? zone_watermark_ok_safe+0x220/0x220 [ 1005.087937] __alloc_pages_nodemask+0x2127/0x2720 [ 1005.092795] ? lock_acquire+0x170/0x3f0 [ 1005.096780] ? lock_acquire+0x170/0x3f0 [ 1005.100772] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1005.105628] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1005.111089] ? __mutex_unlock_slowpath+0x75/0x770 [ 1005.115951] alloc_pages_current+0x155/0x260 [ 1005.120563] ion_page_pool_alloc+0x118/0x1b0 [ 1005.124979] ion_system_heap_allocate+0x133/0x8c0 [ 1005.130004] ? _raw_spin_unlock+0x29/0x40 [ 1005.134594] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1005.139530] ? ion_system_contig_heap_create+0x130/0x130 [ 1005.144997] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1005.150025] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1005.154914] ion_alloc+0x27a/0x810 [ 1005.158464] ? ion_dma_buf_release+0x40/0x40 [ 1005.162906] ? __might_fault+0x177/0x1b0 [ 1005.167088] ion_ioctl+0xea/0x1f0 [ 1005.170557] ? ion_query_heaps+0x360/0x360 [ 1005.174807] ? ion_query_heaps+0x360/0x360 [ 1005.179054] do_vfs_ioctl+0x75a/0xff0 [ 1005.182866] ? ioctl_preallocate+0x1a0/0x1a0 [ 1005.187282] ? lock_downgrade+0x740/0x740 [ 1005.191446] ? __fget+0x225/0x360 [ 1005.195250] ? do_vfs_ioctl+0xff0/0xff0 [ 1005.199319] ? security_file_ioctl+0x83/0xb0 [ 1005.203735] SyS_ioctl+0x7f/0xb0 [ 1005.207116] ? do_vfs_ioctl+0xff0/0xff0 [ 1005.211099] do_syscall_64+0x1d5/0x640 [ 1005.215000] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1005.220200] RIP: 0033:0x465ef9 [ 1005.223410] RSP: 002b:00007fd7ebaaf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1005.231126] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465ef9 [ 1005.239445] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1005.246738] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1005.254022] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1005.261420] R13: 00007ffc90d553bf R14: 00007fd7ebaaf300 R15: 0000000000022000 [ 1005.273964] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1005.295174] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1005.300116] CPU: 0 PID: 7967 Comm: syz-fuzzer Not tainted 4.14.222-syzkaller #0 [ 1005.307660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1005.317019] Call Trace: [ 1005.319618] dump_stack+0x1b2/0x281 [ 1005.323257] dump_header+0x178/0x82f [ 1005.327020] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1005.333444] ? ___ratelimit+0x2cd/0x530 [ 1005.337436] oom_kill_process.cold+0x10/0xb18 [ 1005.341949] out_of_memory+0xe3e/0x1190 [ 1005.345953] ? oom_killer_disable+0x1c0/0x1c0 [ 1005.350480] ? mutex_trylock+0x152/0x1a0 [ 1005.354556] __alloc_pages_nodemask+0x23e1/0x2720 [ 1005.359419] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1005.364284] alloc_pages_current+0x155/0x260 [ 1005.369509] filemap_fault+0xea3/0x1980 [ 1005.373497] ext4_filemap_fault+0x84/0xb0 [ 1005.377650] __do_fault+0xfa/0x380 [ 1005.381196] __handle_mm_fault+0x2497/0x4620 [ 1005.385609] ? vm_insert_page+0x7c0/0x7c0 [ 1005.389861] ? lock_downgrade+0x740/0x740 [ 1005.394167] handle_mm_fault+0x391/0x860 [ 1005.398259] __do_page_fault+0x549/0xad0 [ 1005.407363] ? spurious_fault+0x640/0x640 [ 1005.411524] ? do_page_fault+0x60/0x500 [ 1005.415509] ? page_fault+0x2f/0x50 [ 1005.419135] page_fault+0x45/0x50 [ 1005.422582] RIP: 0000:0x92fd48 [ 1005.425792] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1005.426772] Mem-Info: [ 1005.434844] active_anon:16527 inactive_anon:20962 isolated_anon:0 [ 1005.434844] active_file:26 inactive_file:53 isolated_file:0 [ 1005.434844] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1005.434844] slab_reclaimable:12885 slab_unreclaimable:115052 [ 1005.434844] mapped:53197 shmem:21269 pagetables:2556 bounce:0 [ 1005.434844] free:72710 free_pcp:134 free_cma:0 [ 1005.468529] Node 0 active_anon:65664kB inactive_anon:58468kB active_file:84kB inactive_file:300kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165296kB dirty:0kB writeback:0kB shmem:59504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 20480kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1005.496859] Node 1 active_anon:444kB inactive_anon:25380kB active_file:20kB inactive_file:312kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47592kB dirty:0kB writeback:0kB shmem:25572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1005.525447] Mem-Info: [ 1005.528548] active_anon:16527 inactive_anon:20962 isolated_anon:0 [ 1005.528548] active_file:26 inactive_file:253 isolated_file:0 [ 1005.528548] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1005.528548] slab_reclaimable:12885 slab_unreclaimable:115052 [ 1005.528548] mapped:53272 shmem:21269 pagetables:2556 bounce:0 [ 1005.528548] free:110042 free_pcp:131 free_cma:0 [ 1005.563982] Node 0 DMA free:11124kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1005.593385] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1005.598950] Node 0 DMA32 free:44968kB min:36200kB low:45248kB high:54296kB active_anon:65664kB inactive_anon:58376kB active_file:192kB inactive_file:384kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9728kB pagetables:9936kB bounce:0kB free_pcp:448kB local_pcp:244kB free_cma:0kB [ 1005.616441] Node 0 active_anon:65664kB inactive_anon:58468kB active_file:84kB inactive_file:300kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165296kB dirty:0kB writeback:0kB shmem:59504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 20480kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1005.628941] lowmem_reserve[]: 0 0 0 0 0 [ 1005.664231] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1005.691981] Node 1 active_anon:444kB inactive_anon:25380kB active_file:20kB inactive_file:1012kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48192kB dirty:0kB writeback:0kB shmem:25572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1005.723426] lowmem_reserve[]: 0 0 0 0 0 [ 1005.728068] Node 1 Normal free:578164kB min:53696kB low:67120kB high:80544kB active_anon:444kB inactive_anon:25380kB active_file:20kB inactive_file:1012kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:288kB bounce:0kB free_pcp:172kB local_pcp:24kB free_cma:0kB [ 1005.757728] Node 0 DMA free:11104kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:84kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1005.785178] lowmem_reserve[]: 0 0 0 0 0 [ 1005.790396] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 7*16kB (UME) 9*32kB (UE) 7*64kB (UME) 2*128kB (UE) 3*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11104kB [ 1005.807385] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1005.813299] Node 0 DMA32: 1950*4kB (UME) 1852*8kB (UME) 184*16kB (UME) 17*32kB (UME) 188*64kB (U) 273*128kB (U) 15*256kB (U) 6*512kB (U) 0*1024kB 1*2048kB (U) 0*4096kB = 82040kB [ 1005.830949] Node 0 DMA32 free:78160kB min:36200kB low:45248kB high:54296kB active_anon:65664kB inactive_anon:58376kB active_file:192kB inactive_file:384kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9728kB pagetables:9936kB bounce:0kB free_pcp:852kB local_pcp:168kB free_cma:0kB [ 1005.861321] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1005.872606] Node 1 Normal: 1*4kB (U) 0*8kB 1*16kB (M) 1*32kB (M) 5100*64kB (UM) 900*128kB (U) 638*256kB (UM) 125*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 668980kB [ 1005.888728] lowmem_reserve[]: 0 0 0 0 0 [ 1005.893500] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1005.921230] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1005.931102] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1005.941893] lowmem_reserve[]: 0 0 0 0 0 [ 1005.946800] Node 1 Normal free:668916kB min:53696kB low:67120kB high:80544kB active_anon:444kB inactive_anon:25380kB active_file:20kB inactive_file:1012kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:288kB bounce:0kB free_pcp:172kB local_pcp:24kB free_cma:0kB [ 1005.977077] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1005.986515] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1005.995244] 22084 total pagecache pages [ 1006.000570] 0 pages in swap cache [ 1006.004898] Swap cache stats: add 0, delete 0, find 0/0 [ 1006.010741] Free swap = 0kB [ 1006.014617] Total swap = 0kB [ 1006.022225] 2097051 pages RAM [ 1006.025912] lowmem_reserve[]: 0 0 0 0 0 [ 1006.030321] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 7*16kB (UME) 9*32kB (UE) 7*64kB (UME) 2*128kB (UE) 3*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11104kB [ 1006.036415] 0 pages HighMem/MovableOnly [ 1006.047133] Node 0 DMA32: 1591*4kB (UME) 790*8kB (UME) 1644*16kB (UME) 1366*32kB (UME) 156*64kB (U) 273*128kB (U) 15*256kB (U) 6*512kB (U) 0*1024kB 1*2048kB (U) 0*4096kB = 136588kB [ 1006.069157] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1006.080268] 363840 pages reserved [ 1006.080639] Node 1 [ 1006.083733] 0 pages cma reserved [ 1006.083742] Out of memory (oom_kill_allocating_task): Kill process 7967 (syz-fuzzer) score 0 or sacrifice child [ 1006.083812] Killed process 20922 (syz-executor.1) total-vm:84904kB, anon-rss:60kB, file-rss:4kB, shmem-rss:0kB [ 1006.205448] Normal: 1*4kB (U) 0*8kB 1*16kB (M) 1*32kB (M) 5100*64kB (UM) 900*128kB (U) 638*256kB (UM) 125*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 668980kB [ 1006.222286] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1006.231684] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1006.240659] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1006.252415] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1006.261214] 22384 total pagecache pages [ 1006.265900] 0 pages in swap cache [ 1006.273117] Swap cache stats: add 0, delete 0, find 0/0 [ 1006.286891] Free swap = 0kB [ 1006.289943] Total swap = 0kB [ 1006.292969] 2097051 pages RAM [ 1006.296070] 0 pages HighMem/MovableOnly [ 1006.316504] 363840 pages reserved [ 1006.319985] 0 pages cma reserved 18:03:25 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000", @ANYRES16=0x0, @ANYBLOB="02002cbd7000ffdbdf250b0000001800018008000b00736970000c00070002000000000000003400028005000d00000000000800050009000000060002004e2300000800050003000000060002004e2000000800030002000000080005000200000008000400020000001c000280080004003503000006000f000700000008000600bf4100001400028006000e004e20000006000e004e210000b400018008000800000200000800080009000000060001000000000008000b0073697000060002006700000014000300e0000001000000000000000000dfff000800080000000000e053227a0afb2c7f05e79d2925aa4fc6f9856035d3d317e1c78832a3770d"], 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) 18:03:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) accept(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r1, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000500)={r3, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r2) sendmsg$IPVS_CMD_SET_DEST(r2, 0x0, 0x8884) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) [ 1007.801981] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1007.872626] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1007.878258] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1007.878738] CPU: 1 PID: 2899 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1007.898555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1007.908006] Call Trace: [ 1007.910618] dump_stack+0x1b2/0x281 [ 1007.915249] warn_alloc.cold+0x96/0x1cc [ 1007.915677] in:imklog cpuset= [ 1007.919256] ? zone_watermark_ok_safe+0x220/0x220 [ 1007.919277] __alloc_pages_nodemask+0x2127/0x2720 [ 1007.919295] ? lock_acquire+0x170/0x3f0 [ 1007.919311] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1007.919328] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1007.919339] ? __mutex_unlock_slowpath+0x75/0x770 [ 1007.919349] ? retint_kernel+0x2d/0x2d [ 1007.919362] alloc_pages_current+0x155/0x260 [ 1007.929361] / [ 1007.932225] ion_page_pool_alloc+0x118/0x1b0 [ 1007.952746] mems_allowed=0-1 [ 1007.955248] ion_system_heap_allocate+0x133/0x8c0 [ 1007.955260] ? ion_alloc+0x187/0x810 [ 1007.955273] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1007.983392] ? ion_system_contig_heap_create+0x130/0x130 [ 1007.988939] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1007.993972] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1007.998821] ion_alloc+0x204/0x810 [ 1008.002375] ? ion_dma_buf_release+0x40/0x40 [ 1008.006794] ? __might_fault+0x177/0x1b0 [ 1008.010881] ion_ioctl+0xea/0x1f0 [ 1008.014337] ? ion_query_heaps+0x360/0x360 [ 1008.018589] ? ion_query_heaps+0x360/0x360 [ 1008.022827] do_vfs_ioctl+0x75a/0xff0 [ 1008.026628] ? ioctl_preallocate+0x1a0/0x1a0 [ 1008.031034] ? lock_downgrade+0x740/0x740 [ 1008.035214] ? __fget+0x225/0x360 [ 1008.038706] ? do_vfs_ioctl+0xff0/0xff0 [ 1008.042683] ? security_file_ioctl+0x83/0xb0 [ 1008.047098] SyS_ioctl+0x7f/0xb0 [ 1008.050482] ? do_vfs_ioctl+0xff0/0xff0 [ 1008.054469] do_syscall_64+0x1d5/0x640 [ 1008.058374] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1008.063568] RIP: 0033:0x465ef9 [ 1008.066785] RSP: 002b:00007fe0299ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1008.074492] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1008.081764] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1008.089028] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1008.097176] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1008.104444] R13: 00007fffacd0f57f R14: 00007fe0299ac300 R15: 0000000000022000 [ 1008.112958] CPU: 0 PID: 2886 Comm: in:imklog Not tainted 4.14.222-syzkaller #0 [ 1008.120338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1008.125760] Mem-Info: [ 1008.129705] Call Trace: [ 1008.129725] dump_stack+0x1b2/0x281 [ 1008.129736] dump_header+0x178/0x82f [ 1008.129746] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1008.129755] ? ___ratelimit+0x2cd/0x530 [ 1008.129767] oom_kill_process.cold+0x10/0xb18 [ 1008.132203] active_anon:16476 inactive_anon:20960 isolated_anon:0 [ 1008.132203] active_file:566 inactive_file:542 isolated_file:32 [ 1008.132203] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1008.132203] slab_reclaimable:12875 slab_unreclaimable:115886 [ 1008.132203] mapped:45555 shmem:21266 pagetables:2207 bounce:0 [ 1008.132203] free:14321 free_pcp:126 free_cma:0 [ 1008.134860] out_of_memory+0xe3e/0x1190 [ 1008.138536] Node 0 active_anon:64236kB inactive_anon:58452kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130456kB dirty:0kB writeback:0kB shmem:59484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 22528kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1008.142194] ? oom_killer_disable+0x1c0/0x1c0 [ 1008.147435] Node 1 active_anon:1668kB inactive_anon:25388kB active_file:2232kB inactive_file:2136kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:51764kB dirty:0kB writeback:0kB shmem:25580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1008.151333] ? mutex_trylock+0x152/0x1a0 [ 1008.155821] Node 0 [ 1008.191856] __alloc_pages_nodemask+0x23e1/0x2720 [ 1008.191878] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1008.191900] alloc_pages_current+0x155/0x260 [ 1008.191911] filemap_fault+0xea3/0x1980 [ 1008.191933] ext4_filemap_fault+0x84/0xb0 [ 1008.284611] __do_fault+0xfa/0x380 [ 1008.288200] __handle_mm_fault+0x2497/0x4620 [ 1008.292627] ? vm_insert_page+0x7c0/0x7c0 [ 1008.296785] ? lock_downgrade+0x740/0x740 [ 1008.300940] handle_mm_fault+0x391/0x860 [ 1008.305001] __do_page_fault+0x549/0xad0 [ 1008.309065] ? spurious_fault+0x640/0x640 [ 1008.313207] ? do_page_fault+0x60/0x500 [ 1008.317171] ? page_fault+0x2f/0x50 [ 1008.320816] page_fault+0x45/0x50 [ 1008.324261] RIP: 1fa0:0x1f9f [ 1008.327264] RSP: 0000:00005622c69a89d0 EFLAGS: 7f548c5b8da0 [ 1008.329972] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1008.368681] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1008.375236] Node 0 DMA32 free:18200kB min:36200kB low:45248kB high:54296kB active_anon:64236kB inactive_anon:58360kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9184kB pagetables:8412kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1008.408763] lowmem_reserve[]: 0 0 0 0 0 [ 1008.412799] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1008.443041] lowmem_reserve[]: 0 0 0 0 0 [ 1008.447983] Node 1 Normal free:29840kB min:53696kB low:67120kB high:80544kB active_anon:1668kB inactive_anon:25388kB active_file:580kB inactive_file:716kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:416kB bounce:0kB free_pcp:704kB local_pcp:40kB free_cma:0kB [ 1008.481041] lowmem_reserve[]: 0 0 0 0 0 [ 1008.485757] Node 0 DMA: 2*4kB (ME) 2*8kB (UE) 4*16kB (UME) 6*32kB (UME) 7*64kB (UME) 2*128kB (UE) 3*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10968kB [ 1008.507049] Mem-Info: [ 1008.508024] Node 0 DMA32: [ 1008.509503] active_anon:16476 inactive_anon:20960 isolated_anon:0 [ 1008.509503] active_file:57 inactive_file:24 isolated_file:16 [ 1008.509503] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1008.509503] slab_reclaimable:12875 slab_unreclaimable:115886 [ 1008.509503] mapped:44505 shmem:21266 pagetables:2207 bounce:0 [ 1008.509503] free:13824 free_pcp:125 free_cma:0 [ 1008.509519] Node 0 active_anon:64236kB inactive_anon:58452kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130456kB dirty:0kB writeback:0kB shmem:59484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 22528kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1008.512371] 1932*4kB [ 1008.546045] Node 1 active_anon:1668kB inactive_anon:25388kB active_file:196kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):64kB mapped:47564kB dirty:0kB writeback:0kB shmem:25580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1008.578850] (ME) [ 1008.604354] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1008.607907] 757*8kB (UME) 232*16kB (UME) 20*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18136kB [ 1008.646772] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1008.652280] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1008.656946] Node 0 DMA32 free:18092kB min:36200kB low:45248kB high:54296kB active_anon:64236kB inactive_anon:58360kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9184kB pagetables:8412kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1008.683684] Node 1 Normal: 49*4kB (UM) 40*8kB (UM) 30*16kB (UM) 22*32kB (UM) 27*64kB (UM) 5*128kB (M) 3*256kB (UM) 43*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26852kB [ 1008.709657] lowmem_reserve[]: 0 0 0 0 0 [ 1008.716303] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1008.721655] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1008.734101] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1008.757205] lowmem_reserve[]: 0 0 0 0 0 [ 1008.767362] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1008.769847] Node 1 Normal free:26232kB min:53696kB low:67120kB high:80544kB active_anon:1668kB inactive_anon:25388kB active_file:580kB inactive_file:212kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:416kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1008.783636] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1008.809438] lowmem_reserve[]: [ 1008.822487] 21335 total pagecache pages [ 1008.830145] 0 pages in swap cache [ 1008.833513] 0 [ 1008.833729] Swap cache stats: add 0, delete 0, find 0/0 [ 1008.833737] 0 [ 1008.835670] Free swap = 0kB [ 1008.842228] 0 0 0 [ 1008.847816] Total swap = 0kB [ 1008.849739] Node 0 DMA: [ 1008.853960] 2097051 pages RAM [ 1008.853966] 0 pages HighMem/MovableOnly [ 1008.856764] 2*4kB (ME) 2*8kB (UE) 4*16kB (UME) 6*32kB (UME) 7*64kB (UME) 2*128kB (UE) 3*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10968kB [ 1008.856831] Node 0 DMA32: 1934*4kB (ME) 757*8kB (ME) 232*16kB (UME) 20*32kB (UME) 0*64kB 0*128kB [ 1008.867285] 363840 pages reserved [ 1008.879757] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18144kB [ 1008.879781] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB [ 1008.896212] 0 pages cma reserved [ 1008.897260] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1008.923491] Node 1 Normal: 49*4kB (UM) 40*8kB (UM) 30*16kB (UM) 22*32kB (UM) 27*64kB (UM) 5*128kB (M) 3*256kB (UM) 43*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26852kB [ 1008.951278] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1008.969215] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1008.980393] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1008.990158] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1009.002160] 21335 total pagecache pages [ 1009.008280] 0 pages in swap cache [ 1009.012450] Swap cache stats: add 0, delete 0, find 0/0 [ 1009.018102] Free swap = 0kB [ 1009.021949] Total swap = 0kB [ 1009.025430] 2097051 pages RAM [ 1009.029756] 0 pages HighMem/MovableOnly [ 1009.035261] 363840 pages reserved [ 1009.039502] 0 pages cma reserved [ 1009.043180] Out of memory (oom_kill_allocating_task): Kill process 2886 (in:imklog) score 0 or sacrifice child [ 1009.054930] Killed process 2883 (rsyslogd) total-vm:254332kB, anon-rss:2712kB, file-rss:0kB, shmem-rss:0kB [ 1009.098000] oom_reaper: reaped process 2883 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1009.111126] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1009.132781] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1009.134142] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1009.139882] CPU: 0 PID: 2846 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1009.160009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1009.169810] (null) [ 1009.170999] Call Trace: [ 1009.171004] , order=0, oom_score_adj=1000 [ 1009.171012] syz-executor.3 cpuset= [ 1009.173906] dump_stack+0x1b2/0x281 [ 1009.176988] / [ 1009.182023] warn_alloc.cold+0x96/0x1cc [ 1009.185767] mems_allowed=0-1 [ 1009.191104] ? zone_watermark_ok_safe+0x220/0x220 [ 1009.191115] ? usleep_range+0x130/0x130 [ 1009.191123] ? try_to_free_pages+0x23f/0x6e0 [ 1009.191133] ? _find_next_bit+0xdb/0x100 [ 1009.191143] ? run_timer_softirq+0x5a0/0x5a0 [ 1009.191159] __alloc_pages_nodemask+0x2127/0x2720 [ 1009.236299] ? lock_acquire+0x170/0x3f0 [ 1009.241989] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1009.247627] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1009.254058] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1009.261229] alloc_pages_current+0x155/0x260 [ 1009.266202] ion_page_pool_alloc+0x118/0x1b0 [ 1009.273117] ion_system_heap_allocate+0x133/0x8c0 [ 1009.280044] ? _raw_spin_unlock+0x29/0x40 [ 1009.285571] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1009.291222] ? ion_system_contig_heap_create+0x130/0x130 [ 1009.298070] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1009.305017] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1009.311744] ion_alloc+0x27a/0x810 [ 1009.316095] ? ion_dma_buf_release+0x40/0x40 [ 1009.321079] ? __might_fault+0x177/0x1b0 [ 1009.325613] ion_ioctl+0xea/0x1f0 [ 1009.330585] ? ion_query_heaps+0x360/0x360 [ 1009.336452] ? ion_query_heaps+0x360/0x360 [ 1009.341279] do_vfs_ioctl+0x75a/0xff0 [ 1009.345712] ? ioctl_preallocate+0x1a0/0x1a0 [ 1009.351935] ? lock_downgrade+0x740/0x740 [ 1009.356711] ? __fget+0x225/0x360 [ 1009.360725] ? do_vfs_ioctl+0xff0/0xff0 [ 1009.366378] ? security_file_ioctl+0x83/0xb0 [ 1009.371301] SyS_ioctl+0x7f/0xb0 [ 1009.375115] ? do_vfs_ioctl+0xff0/0xff0 [ 1009.380678] do_syscall_64+0x1d5/0x640 [ 1009.385947] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1009.393489] RIP: 0033:0x465ef9 [ 1009.396956] RSP: 002b:00007fd7ebaaf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1009.406701] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465ef9 [ 1009.415073] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1009.425008] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1009.433928] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1009.443097] R13: 00007ffc90d553bf R14: 00007fd7ebaaf300 R15: 0000000000022000 [ 1009.452142] CPU: 1 PID: 2898 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1009.455148] Mem-Info: [ 1009.463847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1009.463852] Call Trace: [ 1009.463873] dump_stack+0x1b2/0x281 [ 1009.463884] dump_header+0x178/0x82f [ 1009.463894] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1009.463901] ? ___ratelimit+0x2cd/0x530 [ 1009.463911] oom_kill_process.cold+0x10/0xb18 [ 1009.463927] out_of_memory+0xe3e/0x1190 [ 1009.463938] ? oom_killer_disable+0x1c0/0x1c0 [ 1009.463945] ? mutex_trylock+0x152/0x1a0 [ 1009.463954] __alloc_pages_nodemask+0x23e1/0x2720 [ 1009.463974] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1009.463997] alloc_pages_current+0x155/0x260 [ 1009.464006] filemap_fault+0xea3/0x1980 [ 1009.464025] ext4_filemap_fault+0x84/0xb0 [ 1009.464035] __do_fault+0xfa/0x380 [ 1009.464047] ? pmd_devmap_trans_unstable+0x151/0x1b0 [ 1009.472203] active_anon:15723 inactive_anon:20960 isolated_anon:0 [ 1009.472203] active_file:17 inactive_file:16 isolated_file:0 [ 1009.472203] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1009.472203] slab_reclaimable:12875 slab_unreclaimable:115556 [ 1009.472203] mapped:44479 shmem:21266 pagetables:2170 bounce:0 [ 1009.472203] free:14915 free_pcp:0 free_cma:0 [ 1009.480482] __handle_mm_fault+0x2373/0x4620 [ 1009.480494] ? vm_insert_page+0x7c0/0x7c0 [ 1009.480502] ? nanosleep_copyout+0x100/0x100 [ 1009.480519] handle_mm_fault+0x391/0x860 [ 1009.480530] __do_page_fault+0x549/0xad0 [ 1009.480541] ? spurious_fault+0x640/0x640 [ 1009.480553] ? do_page_fault+0x60/0x500 [ 1009.484111] Node 0 active_anon:61824kB inactive_anon:58452kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130448kB dirty:0kB writeback:0kB shmem:59484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 22528kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1009.489778] ? page_fault+0x2f/0x50 [ 1009.489786] page_fault+0x45/0x50 [ 1009.489795] RIP: 03e7:0x56bf60 [ 1009.489799] RSP: 56bf60:0000000000000001 EFLAGS: 0056bf60 [ 1009.565108] Mem-Info: [ 1009.570198] Node 1 active_anon:1068kB inactive_anon:25388kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47468kB dirty:0kB writeback:0kB shmem:25580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1009.592294] active_anon:15723 inactive_anon:20960 isolated_anon:0 [ 1009.592294] active_file:17 inactive_file:16 isolated_file:0 [ 1009.592294] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1009.592294] slab_reclaimable:12875 slab_unreclaimable:115556 [ 1009.592294] mapped:44479 shmem:21266 pagetables:2170 bounce:0 [ 1009.592294] free:14915 free_pcp:0 free_cma:0 [ 1009.604711] Node 0 [ 1009.655629] Node 0 active_anon:61824kB inactive_anon:58452kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130448kB dirty:0kB writeback:0kB shmem:59484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 22528kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1009.673171] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1009.679300] Node 1 active_anon:1068kB inactive_anon:25388kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47468kB dirty:0kB writeback:0kB shmem:25580kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1009.697058] lowmem_reserve[]: [ 1009.733598] Node 0 [ 1009.742919] 0 [ 1009.785610] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1009.814550] 2717 [ 1009.860493] lowmem_reserve[]: [ 1009.886496] 2718 [ 1009.935239] 0 [ 1009.968613] 2718 2718 [ 1009.975832] Node 0 DMA32 free:21604kB min:36200kB low:45248kB high:54296kB active_anon:61824kB inactive_anon:58360kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9152kB pagetables:8264kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1009.988804] 2717 2718 2718 2718 [ 1010.019667] lowmem_reserve[]: 0 [ 1010.022544] Node 0 DMA32 free:21604kB min:36200kB low:45248kB high:54296kB active_anon:61824kB inactive_anon:58360kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9152kB pagetables:8264kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1010.026329] 0 0 0 0 [ 1010.074084] lowmem_reserve[]: 0 0 0 0 0 [ 1010.081025] Node 0 [ 1010.082507] Node 0 [ 1010.082527] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1010.082532] lowmem_reserve[]: [ 1010.085047] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1010.096018] 0 [ 1010.124157] lowmem_reserve[]: 0 0 0 0 0 [ 1010.171917] 0 [ 1010.176038] Node 1 [ 1010.176041] 0 0 [ 1010.184030] Normal free:27108kB min:53696kB low:67120kB high:80544kB active_anon:1036kB inactive_anon:25388kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:392kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1010.193476] 0 [ 1010.235402] Node 1 Normal free:27108kB min:53696kB low:67120kB high:80544kB active_anon:1036kB inactive_anon:25388kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:392kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1010.235952] lowmem_reserve[]: [ 1010.286877] lowmem_reserve[]: [ 1010.290531] 0 [ 1010.290995] 0 [ 1010.294841] 0 [ 1010.304449] 0 [ 1010.308552] 0 [ 1010.308995] 0 [ 1010.310382] 0 [ 1010.313022] 0 [ 1010.315732] 0 [ 1010.325028] 0 [ 1010.333923] Node 0 [ 1010.333926] Node 0 DMA: [ 1010.344319] DMA: [ 1010.345900] 2*4kB [ 1010.350030] 2*4kB (ME) 2*8kB (UE) 4*16kB (UME) 6*32kB (UME) 7*64kB (UME) 2*128kB (UE) 3*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10968kB [ 1010.355362] (ME) [ 1010.386045] Node 0 [ 1010.387750] 2*8kB [ 1010.388576] DMA32: [ 1010.391316] (UE) [ 1010.394060] 2010*4kB (UME) 937*8kB (UME) 239*16kB (UME) 23*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 22208kB [ 1010.410184] 4*16kB [ 1010.434856] Node 0 [ 1010.437880] (UME) [ 1010.438139] Normal: [ 1010.441352] 6*32kB (UME) [ 1010.444160] 0*4kB [ 1010.461146] 7*64kB [ 1010.461317] 0*8kB [ 1010.465190] (UME) [ 1010.470382] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1010.477073] 2*128kB (UE) 3*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10968kB [ 1010.494247] Node 1 Normal: 67*4kB (UM) 45*8kB (UM) 31*16kB (UM) 26*32kB (UM) 29*64kB (UM) 6*128kB (UM) 4*256kB (UM) 42*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 27108kB [ 1010.509091] Node 0 [ 1010.531932] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1010.537528] DMA32: 2010*4kB (UME) 937*8kB (UME) 239*16kB (UME) 23*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 22208kB [ 1010.553907] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1010.574747] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1010.584770] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1010.601937] Node 1 Normal: 67*4kB (UM) 45*8kB (UM) 31*16kB (UM) 26*32kB (UM) 29*64kB (UM) 6*128kB (UM) 4*256kB (UM) 42*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 27108kB [ 1010.611150] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1010.644156] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1010.646357] 21299 total pagecache pages [ 1010.673179] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1010.675986] 0 pages in swap cache [ 1010.686711] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1010.695914] Swap cache stats: add 0, delete 0, find 0/0 [ 1010.704580] Free swap = 0kB [ 1010.710496] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1010.717832] Total swap = 0kB [ 1010.735343] 2097051 pages RAM [ 1010.735585] 21299 total pagecache pages [ 1010.741368] 0 pages HighMem/MovableOnly [ 1010.746418] 0 pages in swap cache [ 1010.756073] Swap cache stats: add 0, delete 0, find 0/0 [ 1010.759413] 363840 pages reserved [ 1010.774883] 0 pages cma reserved [ 1010.777922] Free swap = 0kB [ 1010.783845] Total swap = 0kB [ 1010.794773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1010.800730] 2097051 pages RAM [ 1010.823622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1010.828535] 0 pages HighMem/MovableOnly [ 1010.870322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1010.899963] 363840 pages reserved [ 1010.909310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1010.942601] device bridge_slave_1 left promiscuous mode [ 1010.947344] 0 pages cma reserved [ 1010.951265] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.964816] Out of memory (oom_kill_allocating_task): Kill process 2898 (syz-executor.3) score 0 or sacrifice child [ 1011.008185] device bridge_slave_0 left promiscuous mode [ 1011.026789] Killed process 2898 (syz-executor.3) total-vm:93232kB, anon-rss:2152kB, file-rss:33616kB, shmem-rss:0kB [ 1011.042869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.073884] oom_reaper: reaped process 2898 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1011.129377] device veth1_macvtap left promiscuous mode [ 1011.135370] device veth0_macvtap left promiscuous mode [ 1011.172565] device veth1_vlan left promiscuous mode [ 1011.196547] device veth0_vlan left promiscuous mode [ 1011.489567] device hsr_slave_1 left promiscuous mode [ 1011.541307] device hsr_slave_0 left promiscuous mode 18:03:30 executing program 5: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) 18:03:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x101100, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000009c8e4af9f6f9391efbc668e4012080daebf6636616c3aa30e73e071474bd49d9d8928aba1700001ed12e0a", @ANYRES16=r3, @ANYBLOB="00012dbd7000fddbdf2501000000300003801400020074756e6c30000000000000000000000008000300010000000800030000000000060007004e2200000800060002000000080006008b000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40005) 18:03:30 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r0, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x7fffffff, 0x6, &(0x7f0000000480)=0x3}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000500)={r2, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r1) sendmsg$IPVS_CMD_SET_DEST(r1, 0x0, 0x8884) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x501a00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000100)={0x0, r4}, 0x10) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000080)=0x2) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={r2, 0x0, 0x6}, 0x8) [ 1011.582625] team0 (unregistering): Port device team_slave_1 removed 18:03:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r1, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000500)={r3, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r2) sendmsg$IPVS_CMD_SET_DEST(r2, 0x0, 0x8884) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xae46}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, [], 0x28}}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) [ 1011.622719] team0 (unregistering): Port device team_slave_0 removed 18:03:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00', 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x5, 0xffffffff, 0x400, 0x1000], 0x4, 0xc0000, 0x0, 0xffffffffffffffff}) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000880)='NET_DM\x00', r2) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x3408}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r4, 0x300}, 0x14}}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) [ 1011.663307] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1011.685249] bond0 (unregistering): Releasing backup interface bond_slave_0 18:03:30 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={r2, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000500)={r4, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r3) sendmsg$IPVS_CMD_SET_DEST(r3, 0x0, 0x8884) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000040)) 18:03:30 executing program 2: ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x1}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC, @ANYRES64=r0, @ANYRESHEX=r2, @ANYBLOB="51aa97cc4b89b48f4512debdc18fd818778918a184b5e9ef94d6e0f945ea1a6cfc8f188313ff9e1dc595d23fa1078b64680e4f683201c21d079c8afd25ff764f623a0744f8e679db3499ab86d13cc85b8cd3f41c9a4584f7469cddbb9212b47c83b2d7789d2f1696e1b08c46b168cc2c", @ANYRES64=r0], 0x1c}}, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x3, 'syz1\x00', @bcast, 0x81, 0x6, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 18:03:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f00000000c0)=""/220, &(0x7f0000000040)=0xdc) socketpair(0xa, 0x80000, 0x8, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000200)={0x0, 0x4, 0x400}, 0x8) 18:03:30 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6}) 18:03:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r1, 0x0, 0x0) ioctl$SIOCNRDECOBS(r1, 0x89e2) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="91ef2eacb17bfe9c61cbc9e69ff9d8f50fbb52a274766ead54aeef6df252985a3c01f9cd8ecc83b56341c8ed6c68d4097c3e7f9e29ca2ff4512adfad72334fa1898990532e89f7416a9e4cfeb6de619f7d055f79f1a53242501f5fb8dd92eb66c8a8e949b65bdbb95ea50145dbea82714a8966e72ed9b77626809e0e29c8c71e7e6af50326c8ca8ac38ad0e03a316d159bae44e31fd78068179ab6225dffe872771f57b156bcaafe5e45a30196c18f76bf381b71d5b69f5989c41d2b3540a0085fb8424f"], 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) [ 1011.859896] bond0 (unregistering): Released all slaves [ 1013.053998] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1013.071007] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1013.109892] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1013.117232] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1013.123354] CPU: 1 PID: 2564 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1013.132176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1013.142815] Call Trace: [ 1013.145898] dump_stack+0x1b2/0x281 [ 1013.154527] dump_header+0x178/0x82f [ 1013.160767] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1013.166457] ? ___ratelimit+0x2cd/0x530 [ 1013.171666] oom_kill_process.cold+0x10/0xb18 [ 1013.177115] out_of_memory+0xe3e/0x1190 [ 1013.181550] ? oom_killer_disable+0x1c0/0x1c0 [ 1013.186495] ? mutex_trylock+0x152/0x1a0 [ 1013.190668] __alloc_pages_nodemask+0x23e1/0x2720 [ 1013.196389] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1013.201701] alloc_pages_current+0x155/0x260 [ 1013.207952] filemap_fault+0xea3/0x1980 [ 1013.214182] ext4_filemap_fault+0x84/0xb0 [ 1013.219588] __do_fault+0xfa/0x380 [ 1013.223952] __handle_mm_fault+0x2497/0x4620 [ 1013.229464] ? vm_insert_page+0x7c0/0x7c0 [ 1013.233868] ? nanosleep_copyout+0x100/0x100 [ 1013.239242] handle_mm_fault+0x391/0x860 [ 1013.245242] __do_page_fault+0x549/0xad0 [ 1013.249857] ? spurious_fault+0x640/0x640 [ 1013.255855] ? do_page_fault+0x60/0x500 [ 1013.261124] ? page_fault+0x2f/0x50 [ 1013.265528] page_fault+0x45/0x50 [ 1013.269771] RIP: f7334:0x3 [ 1013.273434] RSP: 000d:00007ffc90d5567c EFLAGS: 00000032 [ 1013.301123] CPU: 1 PID: 2949 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1013.315166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1013.326243] Call Trace: [ 1013.329124] dump_stack+0x1b2/0x281 [ 1013.333652] warn_alloc.cold+0x96/0x1cc [ 1013.338020] ? zone_watermark_ok_safe+0x220/0x220 [ 1013.344484] __alloc_pages_nodemask+0x2127/0x2720 [ 1013.351369] ? __schedule+0x893/0x1de0 [ 1013.356552] ? lock_acquire+0x170/0x3f0 [ 1013.361652] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1013.367553] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1013.375221] ? __mutex_unlock_slowpath+0x75/0x770 [ 1013.383643] ? retint_kernel+0x2d/0x2d [ 1013.389071] alloc_pages_current+0x155/0x260 [ 1013.394477] ion_page_pool_alloc+0x118/0x1b0 [ 1013.400289] ion_system_heap_allocate+0x133/0x8c0 [ 1013.407101] ? ion_alloc+0x187/0x810 [ 1013.411493] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1013.418413] ? ion_system_contig_heap_create+0x130/0x130 [ 1013.427141] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1013.434751] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1013.442113] ion_alloc+0x204/0x810 [ 1013.447081] ? ion_dma_buf_release+0x40/0x40 [ 1013.453442] ? __might_fault+0x177/0x1b0 [ 1013.459738] ion_ioctl+0xea/0x1f0 [ 1013.464600] ? ion_query_heaps+0x360/0x360 [ 1013.473304] ? _raw_spin_unlock+0x29/0x40 [ 1013.479046] ? ion_query_heaps+0x360/0x360 [ 1013.484337] do_vfs_ioctl+0x75a/0xff0 [ 1013.488867] ? ioctl_preallocate+0x1a0/0x1a0 [ 1013.494625] ? lock_downgrade+0x740/0x740 [ 1013.501886] ? __fget+0x225/0x360 [ 1013.505921] ? do_vfs_ioctl+0xff0/0xff0 [ 1013.510759] ? security_file_ioctl+0x83/0xb0 [ 1013.516776] SyS_ioctl+0x7f/0xb0 [ 1013.521253] ? do_vfs_ioctl+0xff0/0xff0 [ 1013.528264] do_syscall_64+0x1d5/0x640 [ 1013.535285] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1013.541971] RIP: 0033:0x465ef9 [ 1013.545977] RSP: 002b:00007fd7eba8e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1013.556695] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000465ef9 [ 1013.565751] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1013.576295] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1013.587220] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1013.595909] R13: 00007ffc90d553bf R14: 00007fd7eba8e300 R15: 0000000000022000 [ 1013.617685] Mem-Info: [ 1013.621052] active_anon:16137 inactive_anon:20963 isolated_anon:12 [ 1013.621052] active_file:175 inactive_file:424 isolated_file:16 [ 1013.621052] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1013.621052] slab_reclaimable:13030 slab_unreclaimable:116168 [ 1013.621052] mapped:53677 shmem:21270 pagetables:2271 bounce:0 [ 1013.621052] free:42198 free_pcp:421 free_cma:0 [ 1013.699482] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1013.753923] Node 0 active_anon:62836kB inactive_anon:58452kB active_file:40kB inactive_file:2256kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:162856kB dirty:0kB writeback:0kB shmem:59484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 20480kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1013.756493] syz-executor.5 cpuset= [ 1013.826434] Node 1 active_anon:1312kB inactive_anon:25400kB active_file:160kB inactive_file:624kB unevictable:0kB isolated(anon):0kB isolated(file):64kB mapped:52352kB dirty:12kB writeback:0kB shmem:25596kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1013.876432] / mems_allowed=0-1 [ 1013.897111] CPU: 0 PID: 2910 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1013.908086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1013.920598] Call Trace: [ 1013.924595] dump_stack+0x1b2/0x281 [ 1013.929722] warn_alloc.cold+0x96/0x1cc [ 1013.934683] ? zone_watermark_ok_safe+0x220/0x220 [ 1013.936426] Node 0 DMA free:11120kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:92kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1013.942422] __alloc_pages_nodemask+0x2127/0x2720 [ 1013.942441] ? lock_acquire+0x170/0x3f0 [ 1013.986125] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1013.991378] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1013.997299] ? __mutex_unlock_slowpath+0x75/0x770 [ 1014.003995] alloc_pages_current+0x155/0x260 [ 1014.009336] ion_page_pool_alloc+0x118/0x1b0 [ 1014.015455] ion_system_heap_allocate+0x133/0x8c0 [ 1014.016428] lowmem_reserve[]: 0 [ 1014.022629] ? ion_alloc+0x187/0x810 [ 1014.022644] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1014.026176] 2717 [ 1014.032321] ? ion_system_contig_heap_create+0x130/0x130 [ 1014.032334] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1014.032345] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1014.032364] ion_alloc+0x204/0x810 [ 1014.032379] ? ion_dma_buf_release+0x40/0x40 [ 1014.032391] ? __might_fault+0x177/0x1b0 [ 1014.032403] ion_ioctl+0xea/0x1f0 [ 1014.039704] Mem-Info: [ 1014.041455] ? ion_query_heaps+0x360/0x360 [ 1014.047931] active_anon:16037 inactive_anon:20963 isolated_anon:12 [ 1014.047931] active_file:100 inactive_file:995 isolated_file:16 [ 1014.047931] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1014.047931] slab_reclaimable:13030 slab_unreclaimable:116424 [ 1014.047931] mapped:54127 shmem:21270 pagetables:2271 bounce:0 [ 1014.047931] free:75735 free_pcp:441 free_cma:0 [ 1014.053122] ? ion_query_heaps+0x360/0x360 [ 1014.076446] Node 0 active_anon:62836kB inactive_anon:58452kB active_file:240kB inactive_file:3356kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:164156kB dirty:0kB writeback:0kB shmem:59484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 20480kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1014.079290] do_vfs_ioctl+0x75a/0xff0 [ 1014.084969] Node 1 active_anon:1312kB inactive_anon:25400kB active_file:160kB inactive_file:624kB unevictable:0kB isolated(anon):0kB isolated(file):64kB mapped:52352kB dirty:12kB writeback:0kB shmem:25596kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1014.123967] ? ioctl_preallocate+0x1a0/0x1a0 [ 1014.123979] ? lock_downgrade+0x740/0x740 [ 1014.123991] ? __fget+0x225/0x360 [ 1014.123999] ? do_vfs_ioctl+0xff0/0xff0 [ 1014.124009] ? security_file_ioctl+0x83/0xb0 [ 1014.124018] SyS_ioctl+0x7f/0xb0 [ 1014.124026] ? do_vfs_ioctl+0xff0/0xff0 [ 1014.124040] do_syscall_64+0x1d5/0x640 [ 1014.129107] 2718 [ 1014.162997] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1014.163007] RIP: 0033:0x465ef9 [ 1014.163011] RSP: 002b:00007fd7ebad0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1014.163020] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1014.163025] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1014.163029] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1014.163034] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1014.163039] R13: 00007ffc90d553bf R14: 00007fd7ebad0300 R15: 0000000000022000 [ 1014.324818] Node 0 DMA free:11124kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1014.359535] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1014.365575] Node 0 DMA32 free:180844kB min:36200kB low:45248kB high:54296kB active_anon:62852kB inactive_anon:58360kB active_file:276kB inactive_file:4112kB unevictable:0kB writepending:24kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9280kB pagetables:8608kB bounce:0kB free_pcp:1416kB local_pcp:744kB free_cma:0kB [ 1014.410341] lowmem_reserve[]: 0 0 0 0 0 [ 1014.418214] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1014.459869] lowmem_reserve[]: 0 0 0 0 0 [ 1014.465607] Node 1 Normal free:109796kB min:53696kB low:67120kB high:80544kB active_anon:1312kB inactive_anon:25400kB active_file:232kB inactive_file:720kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:388kB bounce:0kB free_pcp:808kB local_pcp:628kB free_cma:0kB [ 1014.501745] 2718 2718 [ 1014.510129] Node 0 DMA32 free:211304kB min:36200kB low:45248kB high:54296kB active_anon:62852kB inactive_anon:58360kB active_file:276kB inactive_file:4112kB unevictable:0kB writepending:24kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9280kB pagetables:8608kB bounce:0kB free_pcp:1356kB local_pcp:736kB free_cma:0kB [ 1014.549005] lowmem_reserve[]: 0 0 0 0 0 [ 1014.553987] Node 0 DMA: 13*4kB (UME) 14*8kB (UME) 7*16kB (UME) 3*32kB (ME) 2*64kB (ME) 3*128kB (UE) 2*256kB (ME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11124kB [ 1014.574514] lowmem_reserve[]: 0 0 0 0 0 [ 1014.579678] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1014.608683] Node 0 DMA32: 776*4kB (UME) 616*8kB (UME) 525*16kB (UME) 2746*32kB (UME) 1605*64kB (U) 119*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 222256kB [ 1014.625843] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1014.637849] lowmem_reserve[]: 0 0 0 0 0 [ 1014.643471] Node 1 Normal free:125924kB min:53696kB low:67120kB high:80544kB active_anon:1312kB inactive_anon:25400kB active_file:232kB inactive_file:720kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:388kB bounce:0kB free_pcp:1304kB local_pcp:628kB free_cma:0kB [ 1014.674267] Node 1 Normal: 1450*4kB (UM) 1193*8kB (U) 1934*16kB (U) 2424*32kB (UM) 408*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 150096kB [ 1014.689692] Bluetooth: hci0 command 0x0409 tx timeout [ 1014.692401] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1014.706088] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1014.716080] lowmem_reserve[]: 0 0 0 0 0 [ 1014.720881] Node 0 DMA: 13*4kB (UME) 14*8kB (UME) 7*16kB (UME) 3*32kB (ME) 2*64kB (ME) 3*128kB (UE) 2*256kB (ME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11124kB [ 1014.738892] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1014.749349] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1014.759393] Node 0 DMA32: 776*4kB (UME) 616*8kB (UME) 224*16kB (UME) 1842*32kB (UME) 1605*64kB (U) 165*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 194400kB [ 1014.776486] 22633 total pagecache pages [ 1014.780482] 0 pages in swap cache [ 1014.783927] Swap cache stats: add 0, delete 0, find 0/0 [ 1014.791746] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1014.805033] Free swap = 0kB [ 1014.808911] Total swap = 0kB [ 1014.812556] 2097051 pages RAM [ 1014.815668] 0 pages HighMem/MovableOnly [ 1014.821634] Node 1 Normal: 2186*4kB (UM) 1936*8kB (U) 2672*16kB (U) 3136*32kB (UM) 552*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 202920kB [ 1014.840832] 363840 pages reserved [ 1014.844299] 0 pages cma reserved [ 1014.876513] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1014.897314] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1014.936924] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1014.953027] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1014.978982] IPVS: ftp: loaded support on port[0] = 21 [ 1014.996506] 22892 total pagecache pages [ 1015.000535] 0 pages in swap cache [ 1015.004004] Swap cache stats: add 0, delete 0, find 0/0 [ 1015.029713] Free swap = 0kB [ 1015.037140] Total swap = 0kB [ 1015.040203] 2097051 pages RAM [ 1015.044092] 0 pages HighMem/MovableOnly [ 1015.078194] 363840 pages reserved [ 1015.081680] 0 pages cma reserved [ 1015.085053] Out of memory (oom_kill_allocating_task): Kill process 2564 (syz-executor.5) score 0 or sacrifice child [ 1015.159950] Killed process 2910 (syz-executor.5) total-vm:93496kB, anon-rss:2200kB, file-rss:34820kB, shmem-rss:0kB [ 1015.253140] oom_reaper: reaped process 2910 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 18:03:33 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r1, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x1, 0xa8, 0x2, r3}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000005c0)={r5, 0x91, "d2ca095b4fbd10b7438f17b2b5b7f280b5c009edf69876704d1f61214a1f09f852a8ea771eeda36975c181f183ba409c4a12af51e0ba9fbc1074c31956b93f6aaa9468ed7f5eb1b8b34152ee56da307aa86c6484c78ccc82a12b44885273d0090e836e993db32aa9aa611d3ba9b80cbf0a776b964d3d19d309b383f8cd2a9274af440289a7a1ea86208be2449e6363f1ef"}, &(0x7f0000000200)=0x99) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000500)={r4, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r2) sendmsg$IPVS_CMD_SET_DEST(r2, 0x0, 0x8884) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f00000000c0)={0x74, 0x0, [0x1f, 0x100000000, 0x8, 0x2]}) [ 1016.766929] Bluetooth: hci0 command 0x041b tx timeout [ 1017.236263] chnl_net:caif_netlink_parms(): no params data found [ 1017.447509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.453961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.467766] device bridge_slave_0 entered promiscuous mode [ 1017.500691] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.522235] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.553258] device bridge_slave_1 entered promiscuous mode [ 1017.559378] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1017.586465] systemd-journal cpuset=/ mems_allowed=0-1 [ 1017.591790] CPU: 1 PID: 891 Comm: systemd-journal Not tainted 4.14.222-syzkaller #0 [ 1017.599584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1017.608942] Call Trace: [ 1017.611527] dump_stack+0x1b2/0x281 [ 1017.615151] dump_header+0x178/0x82f [ 1017.618859] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1017.623957] ? ___ratelimit+0x2cd/0x530 [ 1017.627926] oom_kill_process.cold+0x10/0xb18 [ 1017.632430] out_of_memory+0xe3e/0x1190 [ 1017.636400] ? oom_killer_disable+0x1c0/0x1c0 [ 1017.640913] ? mutex_trylock+0x152/0x1a0 [ 1017.644966] __alloc_pages_nodemask+0x23e1/0x2720 [ 1017.649814] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1017.654666] ? cache_grow_begin+0x41/0x630 [ 1017.658900] cache_grow_begin+0x91/0x630 [ 1017.662954] ? cache_grow_begin+0x91/0x630 [ 1017.667184] fallback_alloc+0x207/0x2c0 [ 1017.671155] kmem_cache_alloc+0x1e5/0x3c0 [ 1017.675310] getname_flags+0xc8/0x550 [ 1017.679106] user_path_at_empty+0x2a/0x50 [ 1017.683266] SyS_faccessat+0x21b/0x680 [ 1017.687159] ? SyS_fallocate+0x80/0x80 [ 1017.691037] ? do_syscall_64+0x4c/0x640 [ 1017.695013] ? SyS_faccessat+0x680/0x680 [ 1017.699064] do_syscall_64+0x1d5/0x640 [ 1017.702990] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1017.708185] RIP: 0033:0x7ff3ab1019c7 [ 1017.711921] RSP: 002b:00007ffde8811aa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1017.720003] RAX: ffffffffffffffda RBX: 00007ffde8814ad0 RCX: 00007ff3ab1019c7 [ 1017.727276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005612bf3469a3 [ 1017.734913] RBP: 00007ffde8811bf0 R08: 00005612bf33c3e5 R09: 0000000000000018 [ 1017.743054] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1017.750527] R13: 0000000000000000 R14: 00005612bf792300 R15: 00007ffde88120e0 [ 1017.769503] Mem-Info: [ 1017.773581] active_anon:15549 inactive_anon:20962 isolated_anon:0 [ 1017.773581] active_file:288 inactive_file:237 isolated_file:32 [ 1017.773581] unevictable:0 dirty:11 writeback:0 unstable:0 [ 1017.773581] slab_reclaimable:13022 slab_unreclaimable:115340 [ 1017.773581] mapped:53739 shmem:21270 pagetables:2223 bounce:0 [ 1017.773581] free:13912 free_pcp:180 free_cma:0 [ 1017.813945] Node 0 active_anon:60724kB inactive_anon:58452kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:161128kB dirty:8kB writeback:0kB shmem:59484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1017.847677] Node 1 active_anon:1472kB inactive_anon:25396kB active_file:524kB inactive_file:288kB unevictable:0kB isolated(anon):0kB isolated(file):112kB mapped:52628kB dirty:36kB writeback:0kB shmem:25596kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1017.880997] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1017.936090] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1017.941229] Node 0 DMA32 free:17940kB min:36200kB low:45248kB high:54296kB active_anon:60720kB inactive_anon:58360kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:8kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9280kB pagetables:8516kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1017.970810] lowmem_reserve[]: 0 0 0 0 0 [ 1017.974817] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1018.000638] lowmem_reserve[]: 0 0 0 0 0 [ 1018.004852] Node 1 Normal free:26668kB min:53696kB low:67120kB high:80544kB active_anon:1472kB inactive_anon:25396kB active_file:468kB inactive_file:112kB unevictable:0kB writepending:36kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:376kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1018.033910] lowmem_reserve[]: 0 0 0 0 0 [ 1018.038071] Node 0 DMA: 3*4kB (ME) 3*8kB (UME) 3*16kB (UME) 4*32kB (UME) 2*64kB (ME) 3*128kB (UE) 2*256kB (ME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10964kB [ 1018.054377] Node 0 DMA32: 1950*4kB (UME) 737*8kB (UME) 246*16kB (UME) 24*32kB (UME) 0*64kB 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18528kB [ 1018.068660] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1018.080300] Node 1 Normal: 23*4kB (M) 21*8kB (UM) 12*16kB (UM) 3*32kB (UM) 2*64kB (UM) 0*128kB 88*256kB (UM) 7*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26788kB [ 1018.086536] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1018.094951] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1018.110672] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1018.124584] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1018.135791] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1018.136427] CPU: 0 PID: 2949 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1018.152541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1018.156411] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1018.161926] Call Trace: [ 1018.170565] 21305 total pagecache pages [ 1018.173113] dump_stack+0x1b2/0x281 [ 1018.177122] 0 pages in swap cache [ 1018.180699] warn_alloc.cold+0x96/0x1cc [ 1018.184219] Swap cache stats: add 0, delete 0, find 0/0 [ 1018.188186] ? zone_watermark_ok_safe+0x220/0x220 [ 1018.188196] ? usleep_range+0x130/0x130 [ 1018.188204] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1018.188216] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1018.188227] ? run_timer_softirq+0x5a0/0x5a0 [ 1018.193763] Free swap = 0kB [ 1018.198609] __alloc_pages_nodemask+0x2127/0x2720 [ 1018.198627] ? lock_acquire+0x170/0x3f0 [ 1018.198642] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1018.203157] Total swap = 0kB [ 1018.208885] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1018.208901] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1018.208920] alloc_pages_current+0x155/0x260 [ 1018.208933] ion_page_pool_alloc+0x118/0x1b0 [ 1018.213970] 2097051 pages RAM [ 1018.218689] ion_system_heap_allocate+0x133/0x8c0 [ 1018.218700] ? ion_alloc+0x187/0x810 [ 1018.218710] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1018.218720] ? ion_system_contig_heap_create+0x130/0x130 [ 1018.218740] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1018.222026] 0 pages HighMem/MovableOnly [ 1018.227478] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1018.227493] ion_alloc+0x204/0x810 [ 1018.227508] ? ion_dma_buf_release+0x40/0x40 [ 1018.227519] ? __might_fault+0x177/0x1b0 [ 1018.231670] 363840 pages reserved [ 1018.236797] ion_ioctl+0xea/0x1f0 [ 1018.236809] ? ion_query_heaps+0x360/0x360 [ 1018.236822] ? _raw_spin_unlock+0x29/0x40 [ 1018.236833] ? ion_query_heaps+0x360/0x360 [ 1018.239840] 0 pages cma reserved [ 1018.246702] do_vfs_ioctl+0x75a/0xff0 [ 1018.246715] ? ioctl_preallocate+0x1a0/0x1a0 [ 1018.246725] ? lock_downgrade+0x740/0x740 [ 1018.246738] ? __fget+0x225/0x360 [ 1018.246749] ? do_vfs_ioctl+0xff0/0xff0 [ 1018.253951] Out of memory (oom_kill_allocating_task): Kill process 891 (systemd-journal) score 0 or sacrifice child [ 1018.258536] ? security_file_ioctl+0x83/0xb0 [ 1018.258547] SyS_ioctl+0x7f/0xb0 [ 1018.258556] ? do_vfs_ioctl+0xff0/0xff0 [ 1018.258568] do_syscall_64+0x1d5/0x640 [ 1018.258584] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1018.263653] Killed process 891 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:4036kB [ 1018.267054] RIP: 0033:0x465ef9 [ 1018.267059] RSP: 002b:00007fd7eba8e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1018.267069] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000465ef9 [ 1018.267073] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1018.267078] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1018.267083] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1018.267088] R13: 00007ffc90d553bf R14: 00007fd7eba8e300 R15: 0000000000022000 [ 1018.280323] warn_alloc_show_mem: 1 callbacks suppressed [ 1018.280327] Mem-Info: [ 1018.295985] oom_reaper: reaped process 891 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:4036kB [ 1018.305674] active_anon:15449 inactive_anon:20962 isolated_anon:0 [ 1018.305674] active_file:42 inactive_file:0 isolated_file:0 [ 1018.305674] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1018.305674] slab_reclaimable:13014 slab_unreclaimable:115322 [ 1018.305674] mapped:53241 shmem:21270 pagetables:2223 bounce:0 [ 1018.305674] free:14068 free_pcp:119 free_cma:0 [ 1018.325108] kworker/u4:2 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask= [ 1018.336609] Node 0 active_anon:60332kB inactive_anon:58452kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157132kB dirty:4kB writeback:0kB shmem:59484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1018.377533] (null) [ 1018.385631] Node 1 active_anon:1464kB inactive_anon:25396kB active_file:164kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51832kB dirty:0kB writeback:0kB shmem:25596kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1018.399816] , order=3, oom_score_adj=0 [ 1018.418948] Node 0 [ 1018.432936] kworker/u4:2 cpuset= [ 1018.445614] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1018.448564] / [ 1018.454313] lowmem_reserve[]: [ 1018.472547] mems_allowed=0-1 [ 1018.482583] 0 [ 1018.528552] CPU: 1 PID: 31496 Comm: kworker/u4:2 Not tainted 4.14.222-syzkaller #0 [ 1018.569376] 2717 [ 1018.587946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1018.587964] Workqueue: events_unbound call_usermodehelper_exec_work [ 1018.587969] Call Trace: [ 1018.587986] dump_stack+0x1b2/0x281 [ 1018.587997] dump_header+0x178/0x82f [ 1018.588006] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1018.588013] ? ___ratelimit+0x2cd/0x530 [ 1018.588022] oom_kill_process.cold+0x10/0xb18 [ 1018.588033] ? lock_downgrade+0x740/0x740 [ 1018.588047] out_of_memory+0x2dc/0x1190 [ 1018.588059] ? oom_killer_disable+0x1c0/0x1c0 [ 1018.588066] ? mutex_trylock+0x152/0x1a0 [ 1018.588075] __alloc_pages_nodemask+0x23e1/0x2720 [ 1018.588096] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1018.588107] ? fs_reclaim_release+0xd0/0x110 [ 1018.601936] 2718 [ 1018.623733] ? kmem_cache_alloc_node+0x38b/0x410 [ 1018.623744] copy_process.part.0+0x265/0x71c0 [ 1018.623758] ? __lock_acquire+0x5fc/0x3f20 [ 1018.623769] ? debug_object_activate+0x292/0x490 [ 1018.623777] ? static_obj+0x50/0x50 [ 1018.623789] ? lock_acquire+0x170/0x3f0 [ 1018.623801] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1018.623810] ? __cleanup_sighand+0x40/0x40 [ 1018.623817] ? mod_timer+0x4e7/0xf70 [ 1018.623826] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1018.623835] _do_fork+0x184/0xc80 [ 1018.623846] ? fork_idle+0x270/0x270 [ 1018.623853] ? lock_downgrade+0x740/0x740 [ 1018.623870] ? process_one_work+0x6c4/0x14a0 [ 1018.635655] 2718 [ 1018.644326] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1018.644335] kernel_thread+0x2f/0x40 [ 1018.644344] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1018.644352] ? call_usermodehelper+0x80/0x80 [ 1018.644360] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1018.644370] process_one_work+0x793/0x14a0 [ 1018.644382] ? work_busy+0x320/0x320 [ 1018.644389] ? worker_thread+0x158/0xff0 [ 1018.644401] ? _raw_spin_unlock_irq+0x24/0x80 [ 1018.656138] 2718 [ 1018.658606] worker_thread+0x5cc/0xff0 [ 1018.658623] ? rescuer_thread+0xc80/0xc80 [ 1018.658631] kthread+0x30d/0x420 [ 1018.658638] ? kthread_create_on_node+0xd0/0xd0 [ 1018.658647] ret_from_fork+0x24/0x30 [ 1018.665017] Mem-Info: [ 1018.675524] active_anon:15449 inactive_anon:20962 isolated_anon:0 [ 1018.675524] active_file:42 inactive_file:0 isolated_file:0 [ 1018.675524] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1018.675524] slab_reclaimable:13014 slab_unreclaimable:115322 [ 1018.675524] mapped:52241 shmem:21270 pagetables:2186 bounce:0 [ 1018.675524] free:14168 free_pcp:31 free_cma:0 [ 1018.684055] Node 0 [ 1018.691069] Node 0 active_anon:60332kB inactive_anon:58452kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157132kB dirty:4kB writeback:0kB shmem:59484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1018.702757] DMA32 free:18920kB min:36200kB low:45248kB high:54296kB active_anon:60328kB inactive_anon:58360kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9280kB pagetables:8368kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 1018.715587] Node 1 active_anon:1464kB inactive_anon:25396kB active_file:164kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51832kB dirty:0kB writeback:0kB shmem:25596kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1018.725180] lowmem_reserve[]: [ 1018.739527] Node 0 [ 1018.750730] 0 [ 1018.759121] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1018.760678] 0 [ 1018.764733] lowmem_reserve[]: [ 1018.778122] 0 [ 1018.791845] 0 [ 1018.793713] 0 [ 1018.807712] 2717 [ 1018.821125] 0 [ 1018.835610] 2718 [ 1018.848524] Bluetooth: hci0 command 0x040f tx timeout [ 1018.865244] 2718 [ 1018.930741] 2718 [ 1018.955989] Bluetooth: hci2 command 0x0406 tx timeout [ 1019.021829] Node 0 [ 1019.031737] Node 0 [ 1019.044529] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1019.048350] DMA32 free:19016kB min:36200kB low:45248kB high:54296kB active_anon:60256kB inactive_anon:58356kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9248kB pagetables:8416kB bounce:0kB free_pcp:208kB local_pcp:208kB free_cma:0kB [ 1019.086029] lowmem_reserve[]: [ 1019.110598] lowmem_reserve[]: 0 0 0 0 0 [ 1019.114390] 0 0 0 0 0 [ 1019.122392] Node 0 [ 1019.124743] Node 1 [ 1019.124763] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1019.135282] Normal free:26912kB min:53696kB low:67120kB high:80544kB active_anon:1464kB inactive_anon:25396kB active_file:56kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:376kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1019.159574] lowmem_reserve[]: 0 0 0 0 0 [ 1019.192165] Node 1 Normal free:26912kB min:53696kB low:67120kB high:80544kB active_anon:1464kB inactive_anon:25396kB active_file:56kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:376kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1019.204230] lowmem_reserve[]: [ 1019.223480] lowmem_reserve[]: 0 0 0 0 0 [ 1019.230891] Node 0 DMA: 3*4kB (ME) 3*8kB (UME) 3*16kB (UME) 4*32kB (UME) 2*64kB (ME) 3*128kB (UE) 2*256kB (ME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10964kB [ 1019.245348] 0 [ 1019.250285] Node 0 DMA32: 1960*4kB (UME) 781*8kB (UME) 251*16kB (UME) 26*32kB (UME) 0*64kB 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19064kB [ 1019.270399] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1019.275569] 0 [ 1019.281367] Node 1 Normal: 24*4kB (UM) 20*8kB (UM) 16*16kB (UM) 5*32kB (UM) 2*64kB (UM) 0*128kB 88*256kB (UM) 7*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26912kB [ 1019.281442] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1019.281447] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1019.281453] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1019.281464] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1019.299220] 0 [ 1019.312633] 21304 total pagecache pages [ 1019.329451] 0 [ 1019.341294] 0 pages in swap cache [ 1019.353697] Swap cache stats: add 0, delete 0, find 0/0 [ 1019.359125] Free swap = 0kB [ 1019.360736] 0 [ 1019.362160] Total swap = 0kB [ 1019.362169] Node 0 [ 1019.363970] 2097051 pages RAM [ 1019.371913] DMA: 3*4kB (ME) 3*8kB (UME) 3*16kB (UME) 4*32kB (UME) 2*64kB (ME) 3*128kB (UE) 2*256kB (ME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10964kB [ 1019.382889] 0 pages HighMem/MovableOnly [ 1019.398989] Node 0 DMA32: 1960*4kB (UME) 781*8kB (UME) 251*16kB (UME) 26*32kB (UME) 0*64kB 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19064kB [ 1019.402700] 363840 pages reserved [ 1019.424479] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1019.427826] 0 pages cma reserved [ 1019.446454] Node 1 Normal: 24*4kB (UM) 20*8kB (UM) 16*16kB (UM) 5*32kB (UM) 2*64kB (UM) 0*128kB 88*256kB (UM) 7*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26912kB [ 1019.450037] Out of memory: Kill process 16041 (syz-executor.3) score 1005 or sacrifice child [ 1019.471580] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1019.480144] Killed process 16041 (syz-executor.3) total-vm:93232kB, anon-rss:2192kB, file-rss:34628kB, shmem-rss:0kB [ 1019.502507] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1019.514068] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1019.527406] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1019.548745] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1019.561576] 21304 total pagecache pages [ 1019.565607] 0 pages in swap cache [ 1019.573459] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1019.582809] CPU: 0 PID: 7967 Comm: syz-fuzzer Not tainted 4.14.222-syzkaller #0 [ 1019.590874] Swap cache stats: add 0, delete 0, find 0/0 [ 1019.592810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1019.598206] Free swap = 0kB [ 1019.607509] Call Trace: [ 1019.607530] dump_stack+0x1b2/0x281 [ 1019.607543] dump_header+0x178/0x82f [ 1019.607556] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1019.610566] Total swap = 0kB [ 1019.613138] ? ___ratelimit+0x2cd/0x530 [ 1019.616790] 2097051 pages RAM [ 1019.620460] oom_kill_process.cold+0x10/0xb18 [ 1019.625544] 0 pages HighMem/MovableOnly [ 1019.628566] out_of_memory+0xe3e/0x1190 [ 1019.628578] ? oom_killer_disable+0x1c0/0x1c0 [ 1019.628586] ? mutex_trylock+0x152/0x1a0 [ 1019.628597] __alloc_pages_nodemask+0x23e1/0x2720 [ 1019.636410] 363840 pages reserved [ 1019.640159] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1019.644106] 0 pages cma reserved [ 1019.648086] alloc_pages_current+0x155/0x260 [ 1019.648099] filemap_fault+0xea3/0x1980 [ 1019.648116] ext4_filemap_fault+0x84/0xb0 [ 1019.686352] __do_fault+0xfa/0x380 [ 1019.689894] __handle_mm_fault+0x2497/0x4620 [ 1019.694322] ? vm_insert_page+0x7c0/0x7c0 [ 1019.698461] ? lock_downgrade+0x740/0x740 [ 1019.702613] handle_mm_fault+0x391/0x860 [ 1019.706669] __do_page_fault+0x549/0xad0 [ 1019.710726] ? spurious_fault+0x640/0x640 [ 1019.714866] ? do_page_fault+0x60/0x500 [ 1019.718832] ? page_fault+0x2f/0x50 [ 1019.722454] page_fault+0x45/0x50 [ 1019.726248] RIP: 0000:0x92fd48 [ 1019.729429] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1019.744506] Mem-Info: [ 1019.777704] active_anon:15431 inactive_anon:20961 isolated_anon:0 [ 1019.777704] active_file:35 inactive_file:980 isolated_file:0 [ 1019.777704] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1019.777704] slab_reclaimable:13014 slab_unreclaimable:115321 [ 1019.777704] mapped:52875 shmem:21270 pagetables:2198 bounce:0 [ 1019.777704] free:44537 free_pcp:119 free_cma:0 [ 1019.827192] Node 0 active_anon:60260kB inactive_anon:58448kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157068kB dirty:4kB writeback:0kB shmem:59484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1019.855768] Node 1 active_anon:1464kB inactive_anon:25396kB active_file:136kB inactive_file:4616kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55432kB dirty:0kB writeback:0kB shmem:25596kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1019.886242] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1019.918785] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1019.920895] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1019.948601] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1019.967143] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1020.006569] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1020.011734] Node 0 DMA32 free:70136kB min:36200kB low:45248kB high:54296kB active_anon:60356kB inactive_anon:58356kB active_file:204kB inactive_file:1004kB unevictable:0kB writepending:4kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9312kB pagetables:8416kB bounce:0kB free_pcp:1156kB local_pcp:652kB free_cma:0kB [ 1020.067902] systemd[1]: Stopped Journal Service. [ 1020.068122] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1020.093361] systemd[1]: Starting Journal Service... [ 1020.117246] team0: Port device team_slave_0 added [ 1020.136950] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1020.144486] team0: Port device team_slave_1 added [ 1020.149464] lowmem_reserve[]: 0 0 0 0 0 [ 1020.154422] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1020.233865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.250489] lowmem_reserve[]: 0 0 0 0 0 [ 1020.254523] Node 1 Normal free:394916kB min:53696kB low:67120kB high:80544kB active_anon:1104kB inactive_anon:25396kB active_file:2544kB inactive_file:3260kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:308kB bounce:0kB free_pcp:1392kB local_pcp:720kB free_cma:0kB [ 1020.286804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.326482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.338334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.344586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.369935] lowmem_reserve[]: 0 0 0 0 0 [ 1020.373982] Node 0 DMA: 26*4kB (UME) 4*8kB (UE) 3*16kB (ME) 4*32kB (UME) 4*64kB (UME) 3*128kB (UE) 2*256kB (ME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11192kB [ 1020.389848] Node 0 DMA32: 2010*4kB (UME) 1194*8kB (UME) 467*16kB (UME) 484*32kB (UME) 639*64kB (U) 51*128kB (U) 15*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 92328kB [ 1020.409891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.419760] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1020.437525] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1020.445120] Node 1 Normal: 4318*4kB (UM) 3104*8kB (U) 2023*16kB (UM) 2552*32kB (UME) 3221*64kB (UM) 364*128kB (UME) 202*256kB (UE) 15*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 468264kB [ 1020.466148] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1020.524057] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1020.571169] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1020.601501] device hsr_slave_0 entered promiscuous mode [ 1020.615921] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1020.632051] device hsr_slave_1 entered promiscuous mode [ 1020.647519] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1020.656452] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1020.657791] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1020.672126] 23352 total pagecache pages [ 1020.686475] 0 pages in swap cache [ 1020.689958] Swap cache stats: add 0, delete 0, find 0/0 [ 1020.695308] Free swap = 0kB [ 1020.720477] Total swap = 0kB [ 1020.728620] 2097051 pages RAM [ 1020.731746] 0 pages HighMem/MovableOnly [ 1020.735705] 363840 pages reserved [ 1020.769594] 0 pages cma reserved [ 1020.787065] Out of memory (oom_kill_allocating_task): Kill process 7967 (syz-fuzzer) score 0 or sacrifice child [ 1020.806718] Killed process 566 (syz-executor.4) total-vm:84904kB, anon-rss:64kB, file-rss:4kB, shmem-rss:0kB [ 1020.832918] oom_reaper: reaped process 16041 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1020.848212] systemd-journald[3113]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1020.910533] oom_reaper: reaped process 566 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1021.006727] Bluetooth: hci0 command 0x0419 tx timeout [ 1021.023478] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1021.041476] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1021.052725] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1021.079810] CPU: 1 PID: 2949 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1021.087643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1021.097003] Call Trace: [ 1021.099605] dump_stack+0x1b2/0x281 [ 1021.103252] warn_alloc.cold+0x96/0x1cc [ 1021.107239] ? zone_watermark_ok_safe+0x220/0x220 [ 1021.111251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1021.112190] __alloc_pages_nodemask+0x2127/0x2720 [ 1021.122905] ? lock_acquire+0x170/0x3f0 [ 1021.126907] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1021.131851] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1021.137309] ? __mutex_unlock_slowpath+0x75/0x770 [ 1021.139755] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1021.142159] alloc_pages_current+0x155/0x260 [ 1021.152633] ion_page_pool_alloc+0x118/0x1b0 [ 1021.157052] ion_system_heap_allocate+0x133/0x8c0 [ 1021.161916] ? _raw_spin_unlock+0x29/0x40 [ 1021.166159] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1021.171179] ? ion_system_contig_heap_create+0x130/0x130 [ 1021.176635] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1021.178584] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1021.181658] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1021.192544] ion_alloc+0x27a/0x810 [ 1021.196092] ? ion_dma_buf_release+0x40/0x40 [ 1021.200621] ? __might_fault+0x177/0x1b0 [ 1021.204687] ion_ioctl+0xea/0x1f0 [ 1021.206595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1021.208137] ? ion_query_heaps+0x360/0x360 [ 1021.215525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1021.218849] ? _raw_spin_unlock+0x29/0x40 [ 1021.218860] ? ion_query_heaps+0x360/0x360 [ 1021.218871] do_vfs_ioctl+0x75a/0xff0 [ 1021.218883] ? ioctl_preallocate+0x1a0/0x1a0 [ 1021.218892] ? lock_downgrade+0x740/0x740 [ 1021.218905] ? __fget+0x225/0x360 [ 1021.218914] ? do_vfs_ioctl+0xff0/0xff0 [ 1021.218924] ? security_file_ioctl+0x83/0xb0 [ 1021.218934] SyS_ioctl+0x7f/0xb0 [ 1021.218944] ? do_vfs_ioctl+0xff0/0xff0 [ 1021.239861] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1021.242086] do_syscall_64+0x1d5/0x640 [ 1021.246221] 8021q: adding VLAN 0 to HW filter on device team0 [ 1021.249672] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1021.249681] RIP: 0033:0x465ef9 [ 1021.249685] RSP: 002b:00007fd7eba8e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1021.249694] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000465ef9 [ 1021.249699] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1021.249705] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1021.249710] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1021.249715] R13: 00007ffc90d553bf R14: 00007fd7eba8e300 R15: 0000000000022000 [ 1021.390421] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1021.397616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1021.417606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1021.425329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.431835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.469256] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1021.479489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1021.487244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1021.495185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1021.526978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.533371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.549202] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1021.566805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1021.580926] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1021.598381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1021.609021] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1021.617076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1021.624864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1021.639402] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1021.649048] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1021.656094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1021.676921] Mem-Info: [ 1021.679371] active_anon:14877 inactive_anon:22993 isolated_anon:0 [ 1021.679371] active_file:1085 inactive_file:1628 isolated_file:0 [ 1021.679371] unevictable:0 dirty:10 writeback:0 unstable:0 [ 1021.679371] slab_reclaimable:13005 slab_unreclaimable:116110 [ 1021.679371] mapped:45488 shmem:23317 pagetables:2132 bounce:0 [ 1021.679371] free:257911 free_pcp:663 free_cma:0 [ 1021.710226] systemd[1]: Started Journal Service. [ 1021.714087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1021.726232] Node 0 active_anon:58640kB inactive_anon:66580kB active_file:1424kB inactive_file:3624kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125436kB dirty:16kB writeback:0kB shmem:67676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1021.728840] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1021.776511] Node 1 active_anon:868kB inactive_anon:25392kB active_file:2916kB inactive_file:2888kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:56516kB dirty:24kB writeback:0kB shmem:25592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1021.809212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1021.825682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1021.830390] Node 0 DMA free:11132kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1021.841836] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1021.884944] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1021.891869] Node 0 DMA32 free:483528kB min:36200kB low:45248kB high:54296kB active_anon:59040kB inactive_anon:66488kB active_file:1724kB inactive_file:3916kB unevictable:0kB writepending:164kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9312kB pagetables:8532kB bounce:0kB free_pcp:1128kB local_pcp:552kB free_cma:0kB [ 1021.933667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1021.935494] lowmem_reserve[]: 0 0 0 0 0 [ 1021.951390] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1021.952868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1021.984564] lowmem_reserve[]: 0 0 0 0 0 [ 1021.988873] Node 1 Normal free:593296kB min:53696kB low:67120kB high:80544kB active_anon:768kB inactive_anon:25392kB active_file:3316kB inactive_file:2372kB unevictable:0kB writepending:24kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:292kB bounce:0kB free_pcp:1364kB local_pcp:672kB free_cma:0kB [ 1022.003366] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1022.029679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1022.074683] lowmem_reserve[]: 0 0 0 0 0 [ 1022.080784] Node 0 DMA: 38*4kB (UME) 7*8kB (UE) 6*16kB (UME) 9*32kB (UME) 3*64kB (UME) 1*128kB (E) 2*256kB (ME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11152kB [ 1022.089091] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1022.101640] Node 0 DMA32: 13475*4kB (UE) 7405*8kB (UME) 10937*16kB (UME) 4542*32kB (UME) 829*64kB (UM) 147*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 505348kB [ 1022.104530] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1022.124132] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1022.137269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1022.141088] Node 1 Normal: 9127*4kB (UM) 7455*8kB (UM) 6621*16kB (U) 6990*32kB (U) 1266*64kB (U) 166*128kB (U) 255*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 593316kB [ 1022.143996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1022.165155] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1022.180746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1022.180934] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1022.196741] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1022.205849] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1022.215563] 26812 total pagecache pages [ 1022.220247] 0 pages in swap cache [ 1022.224572] Swap cache stats: add 0, delete 0, find 0/0 [ 1022.230482] Free swap = 0kB [ 1022.233604] Total swap = 0kB [ 1022.236864] 2097051 pages RAM [ 1022.241441] 0 pages HighMem/MovableOnly [ 1022.245652] 363840 pages reserved [ 1022.251209] 0 pages cma reserved [ 1022.414778] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1022.425785] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1022.435853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1022.447781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1022.565111] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1022.573288] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1022.588598] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1022.607451] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1022.615575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1022.628638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1022.641906] device veth0_vlan entered promiscuous mode [ 1022.653738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1022.665571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1022.679291] device veth1_vlan entered promiscuous mode [ 1022.685503] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1022.704331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1022.712367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.722697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1022.733300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1022.744260] device bridge_slave_1 left promiscuous mode [ 1022.752668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.761926] device bridge_slave_0 left promiscuous mode [ 1022.770314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.792206] device veth1_macvtap left promiscuous mode [ 1022.799000] device veth0_macvtap left promiscuous mode [ 1022.804337] device veth1_vlan left promiscuous mode [ 1022.817861] device veth0_vlan left promiscuous mode [ 1022.959368] device hsr_slave_1 left promiscuous mode [ 1022.977696] device hsr_slave_0 left promiscuous mode [ 1023.000103] team0 (unregistering): Port device team_slave_1 removed [ 1023.014976] team0 (unregistering): Port device team_slave_0 removed [ 1023.031217] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1023.043809] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1023.094824] bond0 (unregistering): Released all slaves [ 1023.117104] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1023.132409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1023.139902] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1023.157992] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1023.183548] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1023.194208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1023.204229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1023.218659] device veth0_macvtap entered promiscuous mode [ 1023.225060] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1023.256947] device veth1_macvtap entered promiscuous mode [ 1023.271932] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1023.290534] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1023.317598] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1023.346303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1023.360124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.369403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1023.382621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.392086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1023.406314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.415924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1023.429323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.439801] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1023.456594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1023.464293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1023.493832] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1023.501478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1023.530667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1023.552724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1023.563241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.596424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1023.606176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.646430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1023.656176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.716425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1023.745816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.766511] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1023.786527] systemd-journal cpuset=/ mems_allowed=0-1 [ 1023.792036] CPU: 1 PID: 3113 Comm: systemd-journal Not tainted 4.14.222-syzkaller #0 [ 1023.799997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1023.809351] Call Trace: [ 1023.811962] dump_stack+0x1b2/0x281 [ 1023.815581] dump_header+0x178/0x82f [ 1023.819283] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1023.824378] ? ___ratelimit+0x2cd/0x530 [ 1023.828347] oom_kill_process.cold+0x10/0xb18 [ 1023.833628] out_of_memory+0xe3e/0x1190 [ 1023.837619] ? oom_killer_disable+0x1c0/0x1c0 [ 1023.842804] ? mutex_trylock+0x152/0x1a0 [ 1023.846890] __alloc_pages_nodemask+0x23e1/0x2720 [ 1023.851742] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1023.856590] ? cache_grow_begin+0x41/0x630 [ 1023.860918] cache_grow_begin+0x91/0x630 [ 1023.864999] ? cache_grow_begin+0x91/0x630 [ 1023.869231] fallback_alloc+0x207/0x2c0 [ 1023.873203] kmem_cache_alloc+0x1e5/0x3c0 [ 1023.877346] getname_flags+0xc8/0x550 [ 1023.881159] user_path_at_empty+0x2a/0x50 [ 1023.885385] SyS_faccessat+0x21b/0x680 [ 1023.889273] ? SyS_fallocate+0x80/0x80 [ 1023.893150] ? do_syscall_64+0x4c/0x640 [ 1023.897130] ? SyS_faccessat+0x680/0x680 [ 1023.901189] do_syscall_64+0x1d5/0x640 [ 1023.905073] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1023.910346] RIP: 0033:0x7f94f5d169c7 [ 1023.914045] RSP: 002b:00007fff0f52b5b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1023.921744] RAX: ffffffffffffffda RBX: 00007fff0f52e4d0 RCX: 00007f94f5d169c7 [ 1023.929004] RDX: 00007f94f6787a00 RSI: 0000000000000000 RDI: 000055d1398bb9a3 [ 1023.936260] RBP: 00007fff0f52b5f0 R08: 0000000000000000 R09: 0000000000000000 [ 1023.943523] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1023.950787] R13: 0000000000000000 R14: 00007fff0f52e4d0 R15: 00007fff0f52bae0 [ 1023.977779] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1023.984695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1024.002423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1024.015809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1024.065387] Mem-Info: [ 1024.071377] active_anon:15033 inactive_anon:22992 isolated_anon:0 [ 1024.071377] active_file:14 inactive_file:22 isolated_file:0 [ 1024.071377] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1024.071377] slab_reclaimable:12914 slab_unreclaimable:114285 [ 1024.071377] mapped:43905 shmem:23314 pagetables:2154 bounce:0 [ 1024.071377] free:15202 free_pcp:0 free_cma:0 [ 1024.109853] Node 0 active_anon:59388kB inactive_anon:66576kB active_file:36kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123788kB dirty:0kB writeback:0kB shmem:67664kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1024.166787] Node 1 active_anon:744kB inactive_anon:25392kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51832kB dirty:0kB writeback:0kB shmem:25592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1024.179848] syz-executor.5: [ 1024.205369] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1024.224341] page allocation failure: order:0 [ 1024.248416] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1024.260862] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1024.265782] Node 0 DMA32 free:17800kB min:36200kB low:45248kB high:54296kB active_anon:59388kB inactive_anon:66484kB active_file:36kB inactive_file:72kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9184kB pagetables:8324kB bounce:0kB free_pcp:176kB local_pcp:60kB free_cma:0kB [ 1024.280596] syz-executor.5 cpuset= [ 1024.310323] lowmem_reserve[]: 0 0 0 0 0 [ 1024.322176] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1024.340594] / mems_allowed=0-1 [ 1024.351683] CPU: 0 PID: 2949 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1024.357085] lowmem_reserve[]: [ 1024.359474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1024.359483] 0 [ 1024.362590] Call Trace: [ 1024.372088] 0 [ 1024.373775] dump_stack+0x1b2/0x281 [ 1024.376323] 0 [ 1024.378114] warn_alloc.cold+0x96/0x1cc [ 1024.378125] ? zone_watermark_ok_safe+0x220/0x220 [ 1024.378135] ? usleep_range+0x130/0x130 [ 1024.378145] ? try_to_free_pages+0x23f/0x6e0 [ 1024.378155] ? _find_next_bit+0xdb/0x100 [ 1024.381763] 0 [ 1024.383548] ? run_timer_softirq+0x5a0/0x5a0 [ 1024.387553] 0 [ 1024.392364] __alloc_pages_nodemask+0x2127/0x2720 [ 1024.400833] ? lock_acquire+0x170/0x3f0 [ 1024.404857] Node 1 [ 1024.406655] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1024.406667] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1024.406684] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1024.406700] ? alloc_pages_current+0x123/0x260 [ 1024.411100] Normal free:26572kB min:53696kB low:67120kB high:80544kB active_anon:744kB inactive_anon:25392kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:292kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1024.412877] alloc_pages_current+0x155/0x260 [ 1024.417729] lowmem_reserve[]: [ 1024.421660] ion_page_pool_alloc+0x118/0x1b0 [ 1024.423864] 0 [ 1024.428700] ion_system_heap_allocate+0x133/0x8c0 [ 1024.428712] ? _raw_spin_unlock+0x29/0x40 [ 1024.428728] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1024.428740] ? ion_system_contig_heap_create+0x130/0x130 [ 1024.433337] 0 [ 1024.438781] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1024.438794] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1024.438807] ion_alloc+0x27a/0x810 [ 1024.438823] ? ion_dma_buf_release+0x40/0x40 [ 1024.443386] 0 [ 1024.471246] ? __might_fault+0x177/0x1b0 [ 1024.471262] ion_ioctl+0xea/0x1f0 [ 1024.471273] ? ion_query_heaps+0x360/0x360 [ 1024.471286] ? _raw_spin_unlock+0x29/0x40 [ 1024.471298] ? ion_query_heaps+0x360/0x360 [ 1024.475787] 0 [ 1024.478876] do_vfs_ioctl+0x75a/0xff0 [ 1024.478888] ? ioctl_preallocate+0x1a0/0x1a0 [ 1024.478897] ? lock_downgrade+0x740/0x740 [ 1024.478912] ? __fget+0x225/0x360 [ 1024.486405] 0 [ 1024.490047] ? do_vfs_ioctl+0xff0/0xff0 [ 1024.499096] ? security_file_ioctl+0x83/0xb0 [ 1024.499106] SyS_ioctl+0x7f/0xb0 [ 1024.499115] ? do_vfs_ioctl+0xff0/0xff0 [ 1024.499134] do_syscall_64+0x1d5/0x640 [ 1024.499152] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1024.504602] Node 0 [ 1024.506385] RIP: 0033:0x465ef9 [ 1024.506390] RSP: 002b:00007fd7eba8e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1024.506399] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000465ef9 [ 1024.506404] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1024.506409] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1024.506414] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1024.506423] R13: 00007ffc90d553bf R14: 00007fd7eba8e300 R15: 0000000000022000 [ 1024.511778] DMA: [ 1024.540792] Mem-Info: [ 1024.559498] 3*4kB [ 1024.578925] active_anon:15033 inactive_anon:22992 isolated_anon:0 [ 1024.578925] active_file:14 inactive_file:22 isolated_file:0 [ 1024.578925] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1024.578925] slab_reclaimable:12914 slab_unreclaimable:114285 [ 1024.578925] mapped:43905 shmem:23314 pagetables:2154 bounce:0 [ 1024.578925] free:13836 free_pcp:71 free_cma:0 [ 1024.588357] (UME) [ 1024.600508] Node 0 active_anon:59388kB inactive_anon:66576kB active_file:36kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123788kB dirty:0kB writeback:0kB shmem:67664kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1024.617344] 2*8kB [ 1024.649103] Node 1 active_anon:744kB inactive_anon:25392kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51832kB dirty:0kB writeback:0kB shmem:25592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1024.659008] (UE) 6*16kB (UME) 9*32kB (UME) 3*64kB (UME) 1*128kB (E) 2*256kB (ME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10972kB [ 1024.750650] Node 0 [ 1024.763157] Node 0 DMA32: 987*4kB (ME) 654*8kB (UME) 155*16kB (UME) 28*32kB (UME) 6*64kB (UM) 35*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17676kB [ 1024.786819] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1024.793551] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1024.799744] Node 1 Normal: 23*4kB (UM) 18*8kB (M) 8*16kB (M) 3*32kB (M) 2*64kB (M) 1*128kB (U) 101*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26572kB [ 1024.844680] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1024.858344] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1024.879640] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1024.888534] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1024.893665] Node 0 DMA32 free:19464kB min:36200kB low:45248kB high:54296kB active_anon:59388kB inactive_anon:66484kB active_file:36kB inactive_file:72kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9184kB pagetables:8324kB bounce:0kB free_pcp:180kB local_pcp:136kB free_cma:0kB [ 1024.895794] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1024.944920] 23350 total pagecache pages [ 1024.951563] 0 pages in swap cache [ 1024.955005] Swap cache stats: add 0, delete 0, find 0/0 [ 1024.958463] lowmem_reserve[]: 0 0 0 0 0 [ 1024.964369] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1024.969687] Free swap = 0kB [ 1025.005599] Total swap = 0kB [ 1025.010991] 2097051 pages RAM [ 1025.014100] 0 pages HighMem/MovableOnly [ 1025.028551] lowmem_reserve[]: 0 0 0 0 0 [ 1025.030291] 363840 pages reserved [ 1025.032597] Node 1 [ 1025.036134] 0 pages cma reserved [ 1025.036157] Normal free:26572kB min:53696kB low:67120kB high:80544kB active_anon:744kB inactive_anon:25392kB active_file:40kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:292kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1025.045887] Out of memory (oom_kill_allocating_task): Kill process 3113 (systemd-journal) score 0 or sacrifice child [ 1025.116437] lowmem_reserve[]: 0 0 0 0 0 [ 1025.120486] Node 0 DMA: 3*4kB (UME) 2*8kB (UE) 6*16kB (UME) 9*32kB (UME) 3*64kB (UME) 1*128kB (E) 2*256kB (ME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10972kB [ 1025.129327] Killed process 3113 (systemd-journal) total-vm:46096kB, anon-rss:460kB, file-rss:0kB, shmem-rss:1300kB [ 1025.160762] oom_reaper: reaped process 3113 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1300kB [ 1025.166718] Node 0 DMA32: 988*4kB (UME) 805*8kB (UME) 172*16kB (UME) 28*32kB (UME) 6*64kB (UM) 36*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19288kB [ 1025.186063] kworker/u4:3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1025.199517] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1025.210391] Node 1 Normal: 23*4kB (UM) 19*8kB (UM) 9*16kB (UM) 4*32kB (UM) 3*64kB (UM) 1*128kB (U) 101*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26692kB [ 1025.224363] kworker/u4:3 cpuset=/ mems_allowed=0-1 [ 1025.231604] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1025.240588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1025.242488] CPU: 1 PID: 234 Comm: kworker/u4:3 Not tainted 4.14.222-syzkaller #0 [ 1025.253740] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1025.257278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1025.257296] Workqueue: events_unbound call_usermodehelper_exec_work [ 1025.257301] Call Trace: [ 1025.257319] dump_stack+0x1b2/0x281 [ 1025.257331] dump_header+0x178/0x82f [ 1025.257340] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1025.257349] ? ___ratelimit+0x2cd/0x530 [ 1025.257363] oom_kill_process.cold+0x10/0xb18 [ 1025.266204] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1025.275567] ? lock_downgrade+0x740/0x740 [ 1025.275582] out_of_memory+0x2dc/0x1190 [ 1025.275593] ? oom_killer_disable+0x1c0/0x1c0 [ 1025.275602] ? mutex_trylock+0x152/0x1a0 [ 1025.275611] __alloc_pages_nodemask+0x23e1/0x2720 [ 1025.275623] ? deref_stack_reg+0x124/0x1a0 [ 1025.275637] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1025.275645] ? fs_reclaim_release+0xd0/0x110 [ 1025.275663] ? kmem_cache_alloc_node+0x38b/0x410 [ 1025.275676] copy_process.part.0+0x265/0x71c0 [ 1025.286285] 23345 total pagecache pages [ 1025.288295] ? __lock_acquire+0x5fc/0x3f20 [ 1025.288309] ? debug_object_activate+0x292/0x490 [ 1025.288316] ? trace_hardirqs_on+0x10/0x10 [ 1025.288323] ? static_obj+0x50/0x50 [ 1025.288336] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1025.288345] ? __cleanup_sighand+0x40/0x40 [ 1025.288358] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1025.292064] 0 pages in swap cache [ 1025.297161] _do_fork+0x184/0xc80 [ 1025.297173] ? fork_idle+0x270/0x270 [ 1025.297186] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1025.297196] ? process_one_work+0x6c4/0x14a0 [ 1025.297203] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1025.297210] kernel_thread+0x2f/0x40 [ 1025.297219] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1025.297227] ? call_usermodehelper+0x80/0x80 [ 1025.297235] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1025.297252] process_one_work+0x793/0x14a0 [ 1025.305452] Swap cache stats: add 0, delete 0, find 0/0 [ 1025.305735] ? work_busy+0x320/0x320 [ 1025.314383] Free swap = 0kB [ 1025.318437] ? worker_thread+0x158/0xff0 [ 1025.318449] ? _raw_spin_unlock_irq+0x24/0x80 [ 1025.318459] worker_thread+0x5cc/0xff0 [ 1025.318474] ? rescuer_thread+0xc80/0xc80 [ 1025.318482] kthread+0x30d/0x420 [ 1025.318489] ? kthread_create_on_node+0xd0/0xd0 [ 1025.318498] ret_from_fork+0x24/0x30 [ 1025.329495] Mem-Info: [ 1025.340436] Total swap = 0kB [ 1025.345751] active_anon:14933 inactive_anon:22992 isolated_anon:0 [ 1025.345751] active_file:42 inactive_file:14 isolated_file:0 [ 1025.345751] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1025.345751] slab_reclaimable:12911 slab_unreclaimable:113863 [ 1025.345751] mapped:43525 shmem:23314 pagetables:2154 bounce:0 [ 1025.345751] free:14271 free_pcp:28 free_cma:0 [ 1025.350665] 2097051 pages RAM [ 1025.354316] Node 0 active_anon:58988kB inactive_anon:66576kB active_file:144kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122268kB dirty:0kB writeback:0kB shmem:67664kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1025.355869] 0 pages HighMem/MovableOnly [ 1025.367176] Node 1 active_anon:744kB inactive_anon:25392kB active_file:24kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51832kB dirty:0kB writeback:0kB shmem:25592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1025.374770] 363840 pages reserved [ 1025.387569] Node 0 [ 1025.397339] 0 pages cma reserved [ 1025.408289] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1025.631721] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1025.638161] Node 0 DMA32 free:67836kB min:36200kB low:45248kB high:54296kB active_anon:59388kB inactive_anon:66484kB active_file:144kB inactive_file:5244kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9184kB pagetables:8324kB bounce:0kB free_pcp:348kB local_pcp:184kB free_cma:0kB [ 1025.669444] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1025.672114] lowmem_reserve[]: 0 0 0 0 0 [ 1025.681869] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1025.710892] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1025.714411] lowmem_reserve[]: 0 0 0 0 0 [ 1025.725860] Node 1 Normal free:409540kB min:53696kB low:67120kB high:80544kB active_anon:744kB inactive_anon:25392kB active_file:24kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:292kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1025.755240] systemd[1]: Stopped Journal Service. [ 1025.759576] lowmem_reserve[]: 0 0 0 0 0 [ 1025.764377] Node 0 DMA: 3*4kB (UME) 2*8kB (UE) 6*16kB (UME) 9*32kB (UME) 4*64kB (UME) 1*128kB (E) 2*256kB (ME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11036kB [ 1025.790050] Node 0 DMA32: 187*4kB (UME) 640*8kB (UME) 170*16kB (UME) 19*32kB (UE) 649*64kB (UM) 88*128kB (UM) 16*256kB (UM) 1*512kB (U) 0*1024kB 1*2048kB (U) 0*4096kB = 68652kB [ 1025.809992] systemd[1]: Starting Journal Service... [ 1025.810841] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1025.851591] Node 1 Normal: 23*4kB (UM) 19*8kB (UM) 9*16kB (UM) 4*32kB (UM) 5378*64kB (UM) 632*128kB (U) 370*256kB (UM) 17*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 529028kB [ 1025.873835] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1025.883928] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1025.897829] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1025.916521] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1025.925226] 25417 total pagecache pages [ 1025.951148] 0 pages in swap cache [ 1025.955632] Swap cache stats: add 0, delete 0, find 0/0 [ 1025.976109] Free swap = 0kB [ 1025.992392] Total swap = 0kB [ 1026.000398] 2097051 pages RAM [ 1026.004154] 0 pages HighMem/MovableOnly [ 1026.021120] 363840 pages reserved [ 1026.034111] 0 pages cma reserved [ 1026.039740] Out of memory: Kill process 16080 (syz-executor.3) score 1005 or sacrifice child [ 1026.066464] Killed process 16080 (syz-executor.3) total-vm:93232kB, anon-rss:2192kB, file-rss:34628kB, shmem-rss:0kB [ 1026.097385] systemd-journald[3195]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. 18:03:44 executing program 2: getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r0, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000500)={r2, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r1) sendmsg$IPVS_CMD_SET_DEST(r1, 0x0, 0x8884) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3, 0x8, 0x0], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r3, 0x12}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) 18:03:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r1, 0x0, 0x0) ioctl$SIOCNRDECOBS(r1, 0x89e2) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="91ef2eacb17bfe9c61cbc9e69ff9d8f50fbb52a274766ead54aeef6df252985a3c01f9cd8ecc83b56341c8ed6c68d4097c3e7f9e29ca2ff4512adfad72334fa1898990532e89f7416a9e4cfeb6de619f7d055f79f1a53242501f5fb8dd92eb66c8a8e949b65bdbb95ea50145dbea82714a8966e72ed9b77626809e0e29c8c71e7e6af50326c8ca8ac38ad0e03a316d159bae44e31fd78068179ab6225dffe872771f57b156bcaafe5e45a30196c18f76bf381b71d5b69f5989c41d2b3540a0085fb8424f"], 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) 18:03:44 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x2000, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x0, 0x5, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000080)=0x2) 18:03:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) accept(r0, 0x0, 0x0) 18:03:44 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x200001, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000021fcdfa0329e224bf2864514c2c1690134549021c5360c99a0e5f4c7db8f4c3d00000000bb00ffffff"]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x202040, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x4) 18:03:44 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000500)={r2, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x8884) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000002c0)={r3, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000100)={0x0, 0x8, 0x4992, &(0x7f00000000c0)=0x2}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000500)={r5, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r4) sendmsg$IPVS_CMD_SET_DEST(r4, 0x0, 0x8884) 18:03:44 executing program 1: socket$nl_route(0x10, 0x3, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80, 0x80000) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname(r0, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x80) socket$inet_sctp(0x2, 0x0, 0x84) accept(r1, 0x0, 0x0) [ 1026.512024] systemd[1]: Started Journal Service. 18:03:45 executing program 3: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) 18:03:45 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)=@in6={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, [], 0x41}, 0x1000}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000000c0)="003e35caf9c98e463c1161c0095be2811c74775ca96295edcd09723c7af6bfd73266140b3289", 0x26}, {&(0x7f0000000100)="c8f5bf03d80fbf7734ef5dc3ac62ec53fa95a73f72c7ab636595ec351d29e0cb156c18aaa05d39573822bf24b6a8cbb3eb022a3f9289fe503417d9ad5d523fdddc49562aaa5e8eb7f4bf15f9d01360bcd068fae4efe0c2a4eeec02f092e4fff95d417344e6e2b810e3a5431a1500562c7137a531ffe47a213c6277d4e0e83bcae76ddbf40fb7e39dc592f8480b557636f66cdb018c38d6633682b53ac5f2512e63b2d1a7dd165cd31aef41", 0xab}, {&(0x7f00000001c0)="5be3284c51b5c5eac6ed7349dbe64ebed4a3590c221e6fb7137ec8acd8dfeb1a39d75a0186c4352851c2832217389dbbd9cb0942d088fe57ec00d9b3754183dd651358c52d93e9c38b5931ba410b079de90f3277d57ce39df7fbd2e49ec2f49a8fb0f5d7998f345bda040205de4e583208f7b014a119697d9e2ea4e081ac02351f0d7915d3fa5565ffa6eacf0604654f31815363cbbf0a6d4bb5f33981d044f76a47f22f3e9356e6cd0cc848b7cf8ff82f3132a480da4c4acf5e907518f05efbf1ef6931d70d337d411d3f138c9f74", 0xcf}, {&(0x7f00000002c0)}], 0x4, &(0x7f0000000340)}, 0x40) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) 18:03:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00', r0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x898568df340055d8}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002abd7000fddbdf2504e80000060003000700000008001700", @ANYRES32, @ANYBLOB="050013152093c8007f000000"], 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0xc0c5) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa4, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x30}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xc}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xbb0d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8800}, 0x40080) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8048}, 0x0) 18:03:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r1, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000500)={r3, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r2) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000540)={r4, 0xf0}, &(0x7f00000005c0)=0x8) sendmsg$IPVS_CMD_SET_DEST(r2, 0x0, 0x8884) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000700), &(0x7f0000000740)=0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4048041}, 0x40) accept(r0, 0x0, 0x0) 18:03:45 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x6, 0x11}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x8001, 0x3e, 0x1, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x8000) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000180)=0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x41, "28f592ee8bd17e0ae7362fe45e22d39ead1593ee62b477276369c45d90dc0ada2d1a8b015a9eaff0e3b3353ca96ec01fa8b02617f6ec97b2b67feba79713cb5e58"}, &(0x7f0000000080)=0x49) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x3) 18:03:45 executing program 0: getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x800}, &(0x7f00000000c0)=0x8) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) 18:03:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r1, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000500)={r3, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r2) sendmsg$IPVS_CMD_SET_DEST(r2, 0x0, 0x8884) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2b}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000017) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000540)={r1, 0x7fff}, 0x8) 18:03:45 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={r2, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000500)={r4, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r3) sendmsg$IPVS_CMD_SET_DEST(r3, 0x0, 0x8884) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000040)={0x40, 0xf85}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) 18:03:45 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) accept(r0, 0x0, 0x0) [ 1029.368511] IPVS: ftp: loaded support on port[0] = 21 [ 1029.492944] chnl_net:caif_netlink_parms(): no params data found [ 1029.548191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.554737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.562450] device bridge_slave_0 entered promiscuous mode [ 1029.569822] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.576205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.583735] device bridge_slave_1 entered promiscuous mode [ 1029.605253] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1029.614392] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1029.634666] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1029.641892] team0: Port device team_slave_0 added [ 1029.648039] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1029.655674] team0: Port device team_slave_1 added [ 1029.672192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.678575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.703979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.715078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.721480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.747121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1029.758108] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1029.765556] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1029.787992] device hsr_slave_0 entered promiscuous mode [ 1029.793755] device hsr_slave_1 entered promiscuous mode [ 1029.801427] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1029.809288] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1029.881958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.888341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.894953] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.901386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.933372] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1029.940641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.951316] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1029.960950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1029.968294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.975185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.985319] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1029.991570] 8021q: adding VLAN 0 to HW filter on device team0 [ 1030.000225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1030.008004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.014397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.024170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1030.032376] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.038778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.055435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1030.063640] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1030.075271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1030.088977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1030.102027] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1030.112623] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1030.119131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1030.126228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1030.142271] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1030.150028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1030.157145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1030.167946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.223108] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1030.233152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1030.263326] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1030.272099] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1030.279551] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1030.291141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1030.299192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1030.306129] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1030.315203] device veth0_vlan entered promiscuous mode [ 1030.324538] device veth1_vlan entered promiscuous mode [ 1030.330761] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1030.339608] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1030.352823] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1030.362578] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1030.370725] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1030.378968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1030.389745] device veth0_macvtap entered promiscuous mode [ 1030.396022] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1030.405236] device veth1_macvtap entered promiscuous mode [ 1030.414879] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1030.424185] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1030.433023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1030.443049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.452491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1030.463138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.472325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1030.482187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.491605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1030.501371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.510886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1030.520766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.531768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1030.540721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1030.550824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.560239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1030.570052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.579411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1030.589183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.598457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1030.608265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.617467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1030.627387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.638352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1030.645387] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1030.653676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1030.663010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1030.672009] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 18:03:49 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={r2, 0x0, 0x99da}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x10000, 0x1f, 0xff, 0x10001], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0xe84, 0xfffffc01], 0x3, 0x80000}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000500)={r5, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r3) sendmsg$IPVS_CMD_SET_DEST(r3, 0x0, 0x8884) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x7, 0xc}) 18:03:49 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x5, 0x401, 0x10000, 0x0, 0x6}) 18:03:49 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) accept(r0, 0x0, 0x0) 18:03:49 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x3, @null, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000880)='NET_DM\x00', r3) socket$l2tp6(0xa, 0x2, 0x73) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4(r4, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000040)=0x80, 0x800) 18:03:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r1, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000500)={r3, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r2) sendmsg$IPVS_CMD_SET_DEST(r2, 0x0, 0x8884) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000005c0)={@initdev, 0x0}, &(0x7f0000000600)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000640)={@mcast2, 0x0}, &(0x7f0000000680)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000a80)={@rand_addr, 0x0}, &(0x7f0000000ac0)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000b00)={@mcast2, 0x0}, &(0x7f0000000b40)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001100)={&(0x7f0000000b80)={0x54c, r4, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x22}}, {0x8}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x5b}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7e5}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xf12a}}}]}}]}, 0x54c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 18:03:49 executing program 3: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) 18:03:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r1, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000500)={r3, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r2) sendmsg$IPVS_CMD_SET_DEST(r2, 0x0, 0x8884) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2b}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000017) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000540)={r1, 0x7fff}, 0x8) 18:03:49 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x3, @null, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000880)='NET_DM\x00', r3) socket$l2tp6(0xa, 0x2, 0x73) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4(r4, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000040)=0x80, 0x800) 18:03:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00', r0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x898568df340055d8}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002abd7000fddbdf2504e80000060003000700000008001700", @ANYRES32, @ANYBLOB="050013152093c8007f000000"], 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0xc0c5) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa4, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x30}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xc}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xbb0d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8800}, 0x40080) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8048}, 0x0) 18:03:49 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x3, @null, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000880)='NET_DM\x00', r3) socket$l2tp6(0xa, 0x2, 0x73) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4(r4, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000040)=0x80, 0x800) 18:03:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00', r0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x898568df340055d8}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002abd7000fddbdf2504e80000060003000700000008001700", @ANYRES32, @ANYBLOB="050013152093c8007f000000"], 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0xc0c5) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa4, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x30}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xc}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xbb0d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8800}, 0x40080) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8048}, 0x0) 18:03:49 executing program 2: socket$nl_route(0x10, 0x3, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80, 0x80000) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname(r0, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x80) socket$inet_sctp(0x2, 0x0, 0x84) accept(r1, 0x0, 0x0) 18:03:49 executing program 1: getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r0, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000500)={r2, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r1) sendmsg$IPVS_CMD_SET_DEST(r1, 0x0, 0x8884) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3, 0x8, 0x0], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r3, 0x12}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) [ 1031.407075] Bluetooth: hci2 command 0x0409 tx timeout [ 1032.254329] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1032.271862] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1032.277808] CPU: 1 PID: 3537 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1032.285719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1032.295073] Call Trace: [ 1032.297756] dump_stack+0x1b2/0x281 [ 1032.301392] warn_alloc.cold+0x96/0x1cc [ 1032.305472] ? zone_watermark_ok_safe+0x220/0x220 [ 1032.311319] __alloc_pages_nodemask+0x2127/0x2720 [ 1032.316625] ? io_schedule_timeout+0x140/0x140 [ 1032.322436] ? lock_acquire+0x170/0x3f0 [ 1032.327232] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1032.333709] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1032.339869] ? __mutex_unlock_slowpath+0x75/0x770 [ 1032.344822] ? retint_kernel+0x2d/0x2d [ 1032.348830] alloc_pages_current+0x155/0x260 [ 1032.353247] ion_page_pool_alloc+0x118/0x1b0 [ 1032.357672] ion_system_heap_allocate+0x133/0x8c0 [ 1032.362529] ? ion_alloc+0x187/0x810 [ 1032.366252] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1032.371709] ? ion_system_contig_heap_create+0x130/0x130 [ 1032.377260] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1032.382373] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1032.387504] ion_alloc+0x204/0x810 [ 1032.391052] ? ion_dma_buf_release+0x40/0x40 [ 1032.395479] ? __might_fault+0x177/0x1b0 [ 1032.399557] ion_ioctl+0xea/0x1f0 [ 1032.403044] ? ion_query_heaps+0x360/0x360 [ 1032.407395] ? ion_query_heaps+0x360/0x360 [ 1032.411653] do_vfs_ioctl+0x75a/0xff0 [ 1032.415455] ? ioctl_preallocate+0x1a0/0x1a0 [ 1032.419953] ? lock_downgrade+0x740/0x740 [ 1032.425258] ? __fget+0x225/0x360 [ 1032.428715] ? do_vfs_ioctl+0xff0/0xff0 [ 1032.432685] ? security_file_ioctl+0x83/0xb0 [ 1032.437096] SyS_ioctl+0x7f/0xb0 [ 1032.440455] ? do_vfs_ioctl+0xff0/0xff0 [ 1032.444429] do_syscall_64+0x1d5/0x640 [ 1032.448424] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1032.453608] RIP: 0033:0x465ef9 [ 1032.456809] RSP: 002b:00007fe0299ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1032.465649] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1032.472918] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1032.480183] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1032.487449] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1032.496034] R13: 00007fffacd0f57f R14: 00007fe0299ac300 R15: 0000000000022000 [ 1032.512958] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1032.533201] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1032.533278] Mem-Info: [ 1032.538398] CPU: 1 PID: 3548 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1032.538404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1032.538407] Call Trace: [ 1032.538425] dump_stack+0x1b2/0x281 [ 1032.538440] warn_alloc.cold+0x96/0x1cc [ 1032.538453] ? zone_watermark_ok_safe+0x220/0x220 [ 1032.541131] active_anon:16385 inactive_anon:25026 isolated_anon:0 [ 1032.541131] active_file:2525 inactive_file:4843 isolated_file:23 [ 1032.541131] unevictable:0 dirty:140 writeback:0 unstable:0 [ 1032.541131] slab_reclaimable:12864 slab_unreclaimable:116318 [ 1032.541131] mapped:57381 shmem:25366 pagetables:2201 bounce:0 [ 1032.541131] free:161679 free_pcp:112 free_cma:0 [ 1032.548689] __alloc_pages_nodemask+0x2127/0x2720 [ 1032.548717] ? lock_acquire+0x170/0x3f0 [ 1032.548733] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1032.548750] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1032.548761] ? __mutex_unlock_slowpath+0x75/0x770 [ 1032.548775] alloc_pages_current+0x155/0x260 [ 1032.548789] ion_page_pool_alloc+0x118/0x1b0 [ 1032.548799] ion_system_heap_allocate+0x133/0x8c0 [ 1032.548809] ? ion_alloc+0x187/0x810 [ 1032.548819] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1032.548831] ? ion_system_contig_heap_create+0x130/0x130 [ 1032.548842] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1032.548853] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1032.548865] ion_alloc+0x204/0x810 [ 1032.548880] ? ion_dma_buf_release+0x40/0x40 [ 1032.548893] ? __might_fault+0x177/0x1b0 [ 1032.548907] ion_ioctl+0xea/0x1f0 [ 1032.548917] ? ion_query_heaps+0x360/0x360 [ 1032.548931] ? ion_query_heaps+0x360/0x360 [ 1032.548945] do_vfs_ioctl+0x75a/0xff0 [ 1032.572253] Node 0 active_anon:64988kB inactive_anon:74716kB active_file:10092kB inactive_file:19360kB unevictable:0kB isolated(anon):0kB isolated(file):92kB mapped:177692kB dirty:552kB writeback:0kB shmem:75876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1032.573360] ? ioctl_preallocate+0x1a0/0x1a0 [ 1032.573372] ? lock_downgrade+0x740/0x740 [ 1032.573403] ? __fget+0x225/0x360 [ 1032.609035] Node 1 active_anon:552kB inactive_anon:25388kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51832kB dirty:8kB writeback:0kB shmem:25588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1032.612911] ? do_vfs_ioctl+0xff0/0xff0 [ 1032.612924] ? security_file_ioctl+0x83/0xb0 [ 1032.612935] SyS_ioctl+0x7f/0xb0 [ 1032.612943] ? do_vfs_ioctl+0xff0/0xff0 [ 1032.612957] do_syscall_64+0x1d5/0x640 [ 1032.621362] Node 0 [ 1032.621987] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1032.629568] DMA free:11096kB min:204kB low:252kB high:300kB active_anon:4096kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1032.632271] RIP: 0033:0x465ef9 [ 1032.632277] RSP: 002b:00007fd7ebaaf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1032.632288] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465ef9 [ 1032.632294] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1032.632300] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1032.632305] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1032.632315] R13: 00007ffc90d553bf R14: 00007fd7ebaaf300 R15: 0000000000022000 [ 1032.637453] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1032.880921] Node 0 DMA32 free:380496kB min:36200kB low:45248kB high:54296kB active_anon:60092kB inactive_anon:74624kB active_file:10092kB inactive_file:20160kB unevictable:0kB writepending:552kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9312kB pagetables:8512kB bounce:0kB free_pcp:900kB local_pcp:824kB free_cma:0kB [ 1032.911055] lowmem_reserve[]: 0 0 0 0 0 [ 1032.915491] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1032.942171] lowmem_reserve[]: 0 0 0 0 0 [ 1032.946257] Node 1 Normal free:82564kB min:53696kB low:67120kB high:80544kB active_anon:552kB inactive_anon:25388kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:292kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1032.975673] lowmem_reserve[]: 0 0 0 0 0 [ 1032.980014] Node 0 DMA: 6*4kB (UME) 10*8kB (UE) 11*16kB (UME) 8*32kB (UME) 9*64kB (UME) 4*128kB (UE) 3*256kB (UME) 3*512kB (UME) 5*1024kB (UME) 1*2048kB (E) 0*4096kB = 11096kB [ 1032.998217] Node 0 DMA32: 217*4kB (UE) 400*8kB (ME) 2980*16kB (UME) 7695*32kB (UME) 3*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 298180kB [ 1033.013167] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1033.025560] Node 1 Normal: 1219*4kB (UM) 1635*8kB (UM) 1502*16kB (UM) 1260*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 82308kB [ 1033.039892] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1033.049357] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1033.058547] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1033.067778] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1033.076824] 32522 total pagecache pages [ 1033.080863] 0 pages in swap cache [ 1033.084363] Swap cache stats: add 0, delete 0, find 0/0 [ 1033.090218] Free swap = 0kB [ 1033.093303] Total swap = 0kB [ 1033.096773] 2097051 pages RAM [ 1033.099951] 0 pages HighMem/MovableOnly [ 1033.103978] 363840 pages reserved [ 1033.107842] 0 pages cma reserved [ 1033.486419] Bluetooth: hci2 command 0x041b tx timeout [ 1033.691038] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1033.704117] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1033.709302] CPU: 0 PID: 2564 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1033.717093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1033.727425] Call Trace: [ 1033.730015] dump_stack+0x1b2/0x281 [ 1033.733639] dump_header+0x178/0x82f [ 1033.737346] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1033.742633] ? ___ratelimit+0x2cd/0x530 [ 1033.746600] oom_kill_process.cold+0x10/0xb18 [ 1033.751100] out_of_memory+0xe3e/0x1190 [ 1033.755075] ? oom_killer_disable+0x1c0/0x1c0 [ 1033.759589] ? mutex_trylock+0x152/0x1a0 [ 1033.763732] __alloc_pages_nodemask+0x23e1/0x2720 [ 1033.768579] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1033.773444] alloc_pages_current+0x155/0x260 [ 1033.777851] filemap_fault+0xea3/0x1980 [ 1033.782088] ext4_filemap_fault+0x84/0xb0 [ 1033.786233] __do_fault+0xfa/0x380 [ 1033.789765] __handle_mm_fault+0x2497/0x4620 [ 1033.794164] ? vm_insert_page+0x7c0/0x7c0 [ 1033.798305] ? nanosleep_copyout+0x100/0x100 [ 1033.802735] handle_mm_fault+0x391/0x860 [ 1033.806825] __do_page_fault+0x549/0xad0 [ 1033.811417] ? spurious_fault+0x640/0x640 [ 1033.815570] ? do_page_fault+0x60/0x500 [ 1033.819891] ? page_fault+0x2f/0x50 [ 1033.823505] page_fault+0x45/0x50 [ 1033.826953] RIP: fbe00:0x3 [ 1033.829788] RSP: 0017:00007ffc90d5567c EFLAGS: 00000032 [ 1033.830654] Mem-Info: [ 1033.838505] active_anon:15608 inactive_anon:25026 isolated_anon:0 [ 1033.838505] active_file:30 inactive_file:0 isolated_file:0 [ 1033.838505] unevictable:0 dirty:22 writeback:0 unstable:0 [ 1033.838505] slab_reclaimable:12864 slab_unreclaimable:116440 [ 1033.838505] mapped:52598 shmem:25366 pagetables:2175 bounce:0 [ 1033.838505] free:25160 free_pcp:0 free_cma:0 [ 1033.872473] Node 0 active_anon:61880kB inactive_anon:74716kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158560kB dirty:80kB writeback:0kB shmem:75876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1033.900368] Node 1 active_anon:552kB inactive_anon:25388kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51832kB dirty:8kB writeback:0kB shmem:25588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1033.927538] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1033.954147] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1033.959876] Node 0 DMA32 free:36036kB min:36200kB low:45248kB high:54296kB active_anon:59432kB inactive_anon:74624kB active_file:204kB inactive_file:324kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9280kB pagetables:8408kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1034.049006] lowmem_reserve[]: 0 0 0 0 0 [ 1034.058884] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1034.085417] lowmem_reserve[]: 0 0 0 0 0 [ 1034.090143] Node 1 Normal free:53400kB min:53696kB low:67120kB high:80544kB active_anon:552kB inactive_anon:25388kB active_file:4kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:292kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1034.118600] lowmem_reserve[]: 0 0 0 0 0 [ 1034.122603] Node 0 DMA: 3*4kB (UME) 2*8kB (UE) 4*16kB (UME) 3*32kB (ME) 2*64kB (ME) 2*128kB (UE) 3*256kB (UME) 3*512kB (UME) 4*1024kB (UME) 2*2048kB (ME) 0*4096kB = 11068kB [ 1034.146417] Node 0 DMA32: 1270*4kB (UME) 747*8kB (ME) 199*16kB (UME) 478*32kB (UME) 68*64kB (UM) 15*128kB (UM) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36320kB [ 1034.162682] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1034.173470] Node 1 Normal: 8*4kB (UM) 7*8kB (M) 812*16kB (UM) 1260*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53400kB [ 1034.187071] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1034.196007] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1034.241757] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1034.268119] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1034.277826] 25390 total pagecache pages [ 1034.281812] 0 pages in swap cache [ 1034.285253] Swap cache stats: add 0, delete 0, find 0/0 [ 1034.307189] Free swap = 0kB [ 1034.310238] Total swap = 0kB [ 1034.313485] 2097051 pages RAM [ 1034.332972] 0 pages HighMem/MovableOnly [ 1034.346044] 363840 pages reserved [ 1034.358077] 0 pages cma reserved [ 1034.361577] Out of memory (oom_kill_allocating_task): Kill process 2564 (syz-executor.5) score 0 or sacrifice child [ 1034.401093] Killed process 3548 (syz-executor.5) total-vm:93496kB, anon-rss:2200kB, file-rss:34820kB, shmem-rss:0kB [ 1034.424179] oom_reaper: reaped process 3548 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1034.508738] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1034.540674] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1034.545684] CPU: 1 PID: 7967 Comm: syz-fuzzer Not tainted 4.14.222-syzkaller #0 [ 1034.553157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1034.562693] Call Trace: [ 1034.565318] dump_stack+0x1b2/0x281 [ 1034.568962] dump_header+0x178/0x82f [ 1034.572678] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1034.577871] ? ___ratelimit+0x2cd/0x530 [ 1034.582198] oom_kill_process.cold+0x10/0xb18 [ 1034.586490] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1034.586709] out_of_memory+0xe3e/0x1190 [ 1034.586729] ? oom_killer_disable+0x1c0/0x1c0 [ 1034.604191] (null) [ 1034.606462] ? mutex_trylock+0x152/0x1a0 [ 1034.606474] __alloc_pages_nodemask+0x23e1/0x2720 [ 1034.606495] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1034.606517] alloc_pages_current+0x155/0x260 [ 1034.606528] filemap_fault+0xea3/0x1980 [ 1034.606546] ext4_filemap_fault+0x84/0xb0 [ 1034.606558] __do_fault+0xfa/0x380 [ 1034.606567] __handle_mm_fault+0x2497/0x4620 [ 1034.606577] ? vm_insert_page+0x7c0/0x7c0 [ 1034.606586] ? lock_downgrade+0x740/0x740 [ 1034.606605] handle_mm_fault+0x391/0x860 [ 1034.606616] __do_page_fault+0x549/0xad0 [ 1034.606628] ? spurious_fault+0x640/0x640 [ 1034.609360] syz-executor.5 cpuset= [ 1034.612836] ? do_page_fault+0x60/0x500 [ 1034.626435] / [ 1034.626934] ? page_fault+0x2f/0x50 [ 1034.631421] mems_allowed=0-1 [ 1034.635651] page_fault+0x45/0x50 [ 1034.684363] RIP: 0000:0x92fd48 [ 1034.687546] RSP: 2e000:000000c00003df00 EFLAGS: 0043b6a0 [ 1034.687572] CPU: 0 PID: 3548 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1034.698373] Mem-Info: [ 1034.700922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1034.703336] active_anon:15113 inactive_anon:25026 isolated_anon:0 [ 1034.703336] active_file:16 inactive_file:10 isolated_file:0 [ 1034.703336] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1034.703336] slab_reclaimable:12864 slab_unreclaimable:116448 [ 1034.703336] mapped:52621 shmem:25366 pagetables:2175 bounce:0 [ 1034.703336] free:13936 free_pcp:30 free_cma:0 [ 1034.712667] Call Trace: [ 1034.712692] dump_stack+0x1b2/0x281 [ 1034.712705] warn_alloc.cold+0x96/0x1cc [ 1034.712717] ? zone_watermark_ok_safe+0x220/0x220 [ 1034.712726] ? usleep_range+0x130/0x130 [ 1034.712735] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1034.712761] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1034.747196] Node 0 active_anon:59900kB inactive_anon:74716kB active_file:60kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158652kB dirty:0kB writeback:0kB shmem:75876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1034.749758] ? run_timer_softirq+0x5a0/0x5a0 [ 1034.753378] Node 1 active_anon:552kB inactive_anon:25388kB active_file:4kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51832kB dirty:0kB writeback:0kB shmem:25588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1034.757367] __alloc_pages_nodemask+0x2127/0x2720 [ 1034.757385] ? lock_acquire+0x170/0x3f0 [ 1034.757400] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1034.757413] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1034.762270] Node 0 [ 1034.766254] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1034.771477] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1034.776905] alloc_pages_current+0x155/0x260 [ 1034.776922] ion_page_pool_alloc+0x118/0x1b0 [ 1034.776935] ion_system_heap_allocate+0x133/0x8c0 [ 1034.805421] lowmem_reserve[]: [ 1034.809625] ? ion_alloc+0x187/0x810 [ 1034.809636] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1034.809648] ? ion_system_contig_heap_create+0x130/0x130 [ 1034.809661] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1034.836782] 0 [ 1034.841600] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1034.845630] 2717 [ 1034.850557] ion_alloc+0x204/0x810 [ 1034.850573] ? ion_dma_buf_release+0x40/0x40 [ 1034.850586] ? __might_fault+0x177/0x1b0 [ 1034.850598] ion_ioctl+0xea/0x1f0 [ 1034.855074] 2718 [ 1034.857303] ? ion_query_heaps+0x360/0x360 [ 1034.857316] ? ion_query_heaps+0x360/0x360 [ 1034.857326] do_vfs_ioctl+0x75a/0xff0 [ 1034.857340] ? ioctl_preallocate+0x1a0/0x1a0 [ 1034.862779] 2718 [ 1034.888462] ? lock_downgrade+0x740/0x740 [ 1034.888477] ? __fget+0x225/0x360 [ 1034.888486] ? do_vfs_ioctl+0xff0/0xff0 [ 1034.888500] ? security_file_ioctl+0x83/0xb0 [ 1034.888513] SyS_ioctl+0x7f/0xb0 [ 1034.892922] 2718 [ 1034.897338] ? do_vfs_ioctl+0xff0/0xff0 [ 1034.897350] do_syscall_64+0x1d5/0x640 [ 1034.897366] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1034.897378] RIP: 0033:0x465ef9 [ 1034.905315] RSP: 002b:00007fd7ebaaf188 EFLAGS: 00000246 [ 1034.909056] Node 0 [ 1034.914615] ORIG_RAX: 0000000000000010 [ 1034.914624] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465ef9 [ 1034.920123] DMA32 free:17928kB min:36200kB low:45248kB high:54296kB active_anon:59976kB inactive_anon:74624kB active_file:0kB inactive_file:84kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9280kB pagetables:8408kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1034.925070] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1034.926886] lowmem_reserve[]: [ 1034.931669] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1034.931677] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1034.933720] 0 [ 1034.937241] R13: 00007ffc90d553bf R14: 00007fd7ebaaf300 R15: 0000000000022000 [ 1034.944082] warn_alloc_show_mem: 1 callbacks suppressed [ 1034.944086] Mem-Info: [ 1034.945721] 0 [ 1034.949240] active_anon:15113 inactive_anon:25026 isolated_anon:0 [ 1034.949240] active_file:16 inactive_file:10 isolated_file:0 [ 1034.949240] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1034.949240] slab_reclaimable:12864 slab_unreclaimable:116448 [ 1034.949240] mapped:52621 shmem:25366 pagetables:2175 bounce:0 [ 1034.949240] free:13936 free_pcp:30 free_cma:0 [ 1034.949259] Node 0 active_anon:59900kB inactive_anon:74716kB active_file:60kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158652kB dirty:0kB writeback:0kB shmem:75876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1034.949277] Node 1 active_anon:552kB inactive_anon:25388kB active_file:4kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51832kB dirty:0kB writeback:0kB shmem:25588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1034.949280] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1034.949300] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1034.949317] Node 0 DMA32 free:17928kB min:36200kB low:45248kB high:54296kB active_anon:59976kB inactive_anon:74624kB active_file:108kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9280kB pagetables:8408kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1034.949338] lowmem_reserve[]: 0 0 0 0 0 [ 1034.949359] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1034.949378] lowmem_reserve[]: 0 0 0 0 0 [ 1034.949397] Node 1 Normal free:26840kB min:53696kB low:67120kB high:80544kB active_anon:552kB inactive_anon:25388kB active_file:4kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:292kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1034.949419] lowmem_reserve[]: 0 0 0 0 0 [ 1034.949435] Node 0 DMA: 3*4kB (UME) 1*8kB (E) 4*16kB (UME) 3*32kB (ME) 3*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10996kB [ 1034.949505] Node 0 DMA32: 1230*4kB (ME) 729*8kB (UME) 198*16kB (UME) 64*32kB (UME) 20*64kB (UM) 6*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18016kB [ 1034.949573] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1034.949623] Node 1 Normal: 5*4kB (UM) 7*8kB (M) 4*16kB (M) 835*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26860kB [ 1034.949692] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1034.949698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1034.949704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1034.949711] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1034.949715] 25389 total pagecache pages [ 1034.949725] 0 pages in swap cache [ 1034.949731] Swap cache stats: add 0, delete 0, find 0/0 [ 1034.949734] Free swap = 0kB [ 1034.949737] Total swap = 0kB [ 1034.949742] 2097051 pages RAM [ 1034.949746] 0 pages HighMem/MovableOnly [ 1034.949750] 363840 pages reserved [ 1034.949753] 0 pages cma reserved [ 1035.447886] 0 0 0 [ 1035.450066] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1035.478915] lowmem_reserve[]: 0 0 0 0 0 [ 1035.484362] Node 1 Normal free:70856kB min:53696kB low:67120kB high:80544kB active_anon:552kB inactive_anon:25388kB active_file:12kB inactive_file:2764kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:292kB bounce:0kB free_pcp:96kB local_pcp:0kB free_cma:0kB [ 1035.517762] lowmem_reserve[]: 0 0 0 0 0 [ 1035.522661] Node 0 DMA: 3*4kB (UME) 1*8kB (E) 4*16kB (UME) 3*32kB (ME) 3*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10996kB [ 1035.539675] Node 0 DMA32: 1741*4kB (UE) 2291*8kB (UME) 186*16kB (UME) 55*32kB (ME) 4347*64kB (UME) 397*128kB (UM) 111*256kB (U) 33*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 404364kB [ 1035.558599] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1035.570695] Bluetooth: hci2 command 0x040f tx timeout [ 1035.582360] Node 1 Normal: 2*4kB (U) 0*8kB 0*16kB 834*32kB (U) 438*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55112kB [ 1035.606572] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1035.615454] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1035.625054] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1035.635002] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1035.644214] 27366 total pagecache pages [ 1035.649109] 0 pages in swap cache [ 1035.652573] Swap cache stats: add 0, delete 0, find 0/0 [ 1035.676438] Free swap = 0kB [ 1035.679508] Total swap = 0kB [ 1035.682544] 2097051 pages RAM [ 1035.685654] 0 pages HighMem/MovableOnly [ 1035.691341] 363840 pages reserved [ 1035.694800] 0 pages cma reserved [ 1035.699157] Out of memory (oom_kill_allocating_task): Kill process 7967 (syz-fuzzer) score 0 or sacrifice child [ 1035.710220] Killed process 3288 (syz-executor.4) total-vm:84904kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 1035.743731] oom_reaper: reaped process 3288 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1035.790577] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1035.810726] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1035.816517] CPU: 0 PID: 3548 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1035.824353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1035.833798] Call Trace: [ 1035.836407] dump_stack+0x1b2/0x281 [ 1035.840032] warn_alloc.cold+0x96/0x1cc [ 1035.844017] ? zone_watermark_ok_safe+0x220/0x220 [ 1035.849048] __alloc_pages_nodemask+0x2127/0x2720 [ 1035.853888] ? _raw_spin_unlock_irq+0x24/0x80 [ 1035.858433] ? lock_acquire+0x170/0x3f0 [ 1035.862418] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1035.867268] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1035.873678] ? __mutex_unlock_slowpath+0x75/0x770 [ 1035.878550] alloc_pages_current+0x155/0x260 [ 1035.882984] ion_page_pool_alloc+0x118/0x1b0 [ 1035.887480] ion_system_heap_allocate+0x133/0x8c0 [ 1035.892338] ? _raw_spin_unlock+0x29/0x40 [ 1035.896575] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1035.901544] ? ion_system_contig_heap_create+0x130/0x130 [ 1035.907180] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1035.912196] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1035.917475] ion_alloc+0x27a/0x810 [ 1035.921027] ? ion_dma_buf_release+0x40/0x40 [ 1035.925440] ? __might_fault+0x177/0x1b0 [ 1035.929531] ion_ioctl+0xea/0x1f0 [ 1035.932981] ? ion_query_heaps+0x360/0x360 [ 1035.937217] ? ion_query_heaps+0x360/0x360 [ 1035.941453] do_vfs_ioctl+0x75a/0xff0 [ 1035.945253] ? ioctl_preallocate+0x1a0/0x1a0 [ 1035.949668] ? lock_downgrade+0x740/0x740 [ 1035.953909] ? __fget+0x225/0x360 [ 1035.957391] ? do_vfs_ioctl+0xff0/0xff0 [ 1035.961453] ? security_file_ioctl+0x83/0xb0 [ 1035.965865] SyS_ioctl+0x7f/0xb0 [ 1035.969321] ? do_vfs_ioctl+0xff0/0xff0 [ 1035.973297] do_syscall_64+0x1d5/0x640 [ 1035.977478] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1035.982669] RIP: 0033:0x465ef9 [ 1035.986047] RSP: 002b:00007fd7ebaaf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1035.993855] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465ef9 [ 1036.001120] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1036.008388] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1036.015650] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1036.022921] R13: 00007ffc90d553bf R14: 00007fd7ebaaf300 R15: 0000000000022000 [ 1036.038585] Mem-Info: [ 1036.041122] active_anon:15008 inactive_anon:25026 isolated_anon:0 [ 1036.041122] active_file:513 inactive_file:2391 isolated_file:0 [ 1036.041122] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1036.041122] slab_reclaimable:12864 slab_unreclaimable:117594 [ 1036.041122] mapped:45617 shmem:25366 pagetables:2100 bounce:0 [ 1036.041122] free:131325 free_pcp:416 free_cma:0 [ 1036.080895] Node 0 active_anon:59404kB inactive_anon:74712kB active_file:1520kB inactive_file:7460kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128400kB dirty:96kB writeback:0kB shmem:75872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1036.113562] Node 1 active_anon:552kB inactive_anon:25388kB active_file:616kB inactive_file:2160kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:54136kB dirty:4kB writeback:0kB shmem:25588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1036.162596] Node 0 DMA free:15304kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1036.216941] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1036.245935] Node 0 DMA32 free:524324kB min:36200kB low:45248kB high:54296kB active_anon:59604kB inactive_anon:74620kB active_file:2720kB inactive_file:7252kB unevictable:0kB writepending:96kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9248kB pagetables:8288kB bounce:0kB free_pcp:832kB local_pcp:312kB free_cma:0kB [ 1036.279981] lowmem_reserve[]: 0 0 0 0 0 [ 1036.284111] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1036.315160] lowmem_reserve[]: 0 0 0 0 0 [ 1036.320506] Node 1 Normal free:81584kB min:53696kB low:67120kB high:80544kB active_anon:552kB inactive_anon:25388kB active_file:1616kB inactive_file:1160kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:292kB bounce:0kB free_pcp:672kB local_pcp:0kB free_cma:0kB [ 1036.356072] lowmem_reserve[]: 0 0 0 0 0 [ 1036.360240] Node 0 DMA: 6*4kB (UME) 10*8kB (UE) 11*16kB (UME) 8*32kB (UME) 9*64kB (UME) 5*128kB (UE) 3*256kB (UME) 3*512kB (UME) 5*1024kB (UME) 1*2048kB (E) 1*4096kB (M) = 15320kB [ 1036.381593] Node 0 DMA32: 10283*4kB (UE) 9714*8kB (UME) 14574*16kB (UME) 5663*32kB (UME) 129*64kB (UM) 34*128kB (UM) 7*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 547644kB [ 1036.402010] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1036.413857] Node 1 Normal: 1213*4kB (UM) 1630*8kB (UM) 1488*16kB (UM) 1239*32kB (UM) 3*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 81668kB [ 1036.433293] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1036.442278] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1036.451756] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1036.461091] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1036.470001] 28631 total pagecache pages [ 1036.474034] 0 pages in swap cache [ 1036.477762] Swap cache stats: add 0, delete 0, find 0/0 [ 1036.483761] Free swap = 0kB [ 1036.486918] Total swap = 0kB [ 1036.490123] 2097051 pages RAM [ 1036.493270] 0 pages HighMem/MovableOnly [ 1036.497344] 363840 pages reserved [ 1036.500973] 0 pages cma reserved [ 1036.838983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1036.845821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1036.881730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1036.888609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1036.910795] device bridge_slave_1 left promiscuous mode [ 1036.916442] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.925467] device bridge_slave_0 left promiscuous mode [ 1036.936044] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.949030] device veth1_macvtap left promiscuous mode [ 1036.954363] device veth0_macvtap left promiscuous mode [ 1036.960905] device veth1_vlan left promiscuous mode [ 1036.966001] device veth0_vlan left promiscuous mode [ 1037.083858] device hsr_slave_1 left promiscuous mode [ 1037.101387] device hsr_slave_0 left promiscuous mode [ 1037.122100] team0 (unregistering): Port device team_slave_1 removed [ 1037.138183] team0 (unregistering): Port device team_slave_0 removed [ 1037.154159] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1037.194299] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1037.263726] bond0 (unregistering): Released all slaves [ 1037.393924] syz-executor.5 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1037.409009] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1037.414149] CPU: 1 PID: 3548 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1037.421954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1037.431303] Call Trace: [ 1037.433894] dump_stack+0x1b2/0x281 [ 1037.437607] dump_header+0x178/0x82f [ 1037.441323] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1037.446421] ? ___ratelimit+0x2cd/0x530 [ 1037.450390] oom_kill_process.cold+0x10/0xb18 [ 1037.454892] out_of_memory+0xe3e/0x1190 [ 1037.459126] ? oom_killer_disable+0x1c0/0x1c0 [ 1037.463619] ? mutex_trylock+0x152/0x1a0 [ 1037.467765] __alloc_pages_nodemask+0x23e1/0x2720 [ 1037.472611] ? lock_acquire+0x170/0x3f0 [ 1037.476603] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1037.481452] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1037.486382] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1037.492010] alloc_pages_current+0x155/0x260 [ 1037.496436] ion_page_pool_alloc+0x118/0x1b0 [ 1037.500842] ion_system_heap_allocate+0x133/0x8c0 [ 1037.506200] ? _raw_spin_unlock+0x29/0x40 [ 1037.510341] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1037.515261] ? ion_system_contig_heap_create+0x130/0x130 [ 1037.520728] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1037.525759] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1037.530608] ion_alloc+0x27a/0x810 [ 1037.534148] ? ion_dma_buf_release+0x40/0x40 [ 1037.538552] ? __might_fault+0x177/0x1b0 [ 1037.542612] ion_ioctl+0xea/0x1f0 [ 1037.546071] ? ion_query_heaps+0x360/0x360 [ 1037.550313] ? ion_query_heaps+0x360/0x360 [ 1037.554543] do_vfs_ioctl+0x75a/0xff0 [ 1037.558350] ? ioctl_preallocate+0x1a0/0x1a0 [ 1037.562768] ? lock_downgrade+0x740/0x740 [ 1037.566922] ? __fget+0x225/0x360 [ 1037.570368] ? do_vfs_ioctl+0xff0/0xff0 [ 1037.574426] ? security_file_ioctl+0x83/0xb0 [ 1037.578842] SyS_ioctl+0x7f/0xb0 [ 1037.582213] ? do_vfs_ioctl+0xff0/0xff0 [ 1037.586187] do_syscall_64+0x1d5/0x640 [ 1037.590080] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1037.595264] RIP: 0033:0x465ef9 [ 1037.598455] RSP: 002b:00007fd7ebaaf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1037.606155] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465ef9 [ 1037.613432] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1037.620699] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1037.627970] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1037.635248] R13: 00007ffc90d553bf R14: 00007fd7ebaaf300 R15: 0000000000022000 [ 1037.656405] Mem-Info: [ 1037.658902] active_anon:15059 inactive_anon:25024 isolated_anon:0 [ 1037.658902] active_file:55 inactive_file:0 isolated_file:0 [ 1037.658902] unevictable:0 dirty:7 writeback:0 unstable:0 [ 1037.658902] slab_reclaimable:12875 slab_unreclaimable:116037 [ 1037.658902] mapped:43960 shmem:25362 pagetables:2128 bounce:0 [ 1037.658902] free:13843 free_pcp:0 free_cma:0 [ 1037.693677] Node 0 active_anon:59684kB inactive_anon:74708kB active_file:104kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123888kB dirty:24kB writeback:0kB shmem:75860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1037.721524] Node 1 active_anon:552kB inactive_anon:25388kB active_file:116kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51952kB dirty:4kB writeback:0kB shmem:25588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1037.748779] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1037.775062] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1037.780136] Node 0 DMA32 free:18092kB min:36200kB low:45248kB high:54296kB active_anon:59684kB inactive_anon:74616kB active_file:464kB inactive_file:40kB unevictable:0kB writepending:124kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9216kB pagetables:8220kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1037.809451] lowmem_reserve[]: 0 0 0 0 0 [ 1037.813461] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1037.839035] lowmem_reserve[]: 0 0 0 0 0 [ 1037.843042] Node 1 Normal free:26328kB min:53696kB low:67120kB high:80544kB active_anon:552kB inactive_anon:25388kB active_file:72kB inactive_file:220kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:292kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1037.871648] lowmem_reserve[]: 0 0 0 0 0 [ 1037.875654] Node 0 DMA: 2*4kB (ME) 2*8kB (UE) 3*16kB (ME) 4*32kB (UME) 2*64kB (ME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10952kB [ 1037.891951] Node 0 DMA32: 1229*4kB (UME) 735*8kB (UME) 160*16kB (UME) 34*32kB (UME) 3*64kB (UM) 18*128kB (UM) 7*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18732kB [ 1037.908548] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1037.919846] Node 1 Normal: 20*4kB (M) 17*8kB (M) 11*16kB (UM) 750*32kB (UM) 2*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 26824kB [ 1037.934118] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1037.943059] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1037.951720] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1037.960590] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1037.969203] 25437 total pagecache pages [ 1037.973178] 0 pages in swap cache [ 1037.976667] Swap cache stats: add 0, delete 0, find 0/0 [ 1037.982025] Free swap = 0kB [ 1037.985044] Total swap = 0kB [ 1037.988093] 2097051 pages RAM [ 1037.991193] 0 pages HighMem/MovableOnly [ 1037.995182] 363840 pages reserved [ 1037.998695] 0 pages cma reserved [ 1038.002066] Out of memory (oom_kill_allocating_task): Kill process 3548 (syz-executor.5) score 0 or sacrifice child [ 1038.012717] Killed process 3548 (syz-executor.5) total-vm:93496kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1038.022863] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1038.028502] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1038.034803] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1038.052857] CPU: 1 PID: 3548 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1038.060654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1038.070018] Call Trace: [ 1038.072613] dump_stack+0x1b2/0x281 [ 1038.076236] warn_alloc.cold+0x96/0x1cc [ 1038.080219] ? zone_watermark_ok_safe+0x220/0x220 [ 1038.085070] ? wait_for_completion_io+0x10/0x10 [ 1038.089745] __alloc_pages_nodemask+0x2127/0x2720 [ 1038.091787] in:imklog cpuset=/ [ 1038.094598] ? lock_acquire+0x170/0x3f0 [ 1038.094602] mems_allowed=0-1 [ 1038.106253] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1038.111110] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1038.115629] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1038.121117] alloc_pages_current+0x155/0x260 [ 1038.125567] ion_page_pool_alloc+0x118/0x1b0 [ 1038.129977] ion_system_heap_allocate+0x133/0x8c0 [ 1038.134822] ? _raw_spin_unlock+0x29/0x40 [ 1038.139395] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1038.145282] ? ion_system_contig_heap_create+0x130/0x130 [ 1038.151661] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1038.156683] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1038.161562] ion_alloc+0x27a/0x810 [ 1038.165191] ? ion_dma_buf_release+0x40/0x40 [ 1038.170312] ? __might_fault+0x177/0x1b0 [ 1038.174383] ion_ioctl+0xea/0x1f0 [ 1038.177834] ? ion_query_heaps+0x360/0x360 [ 1038.182089] ? ion_query_heaps+0x360/0x360 [ 1038.186320] do_vfs_ioctl+0x75a/0xff0 [ 1038.190307] ? ioctl_preallocate+0x1a0/0x1a0 [ 1038.194719] ? lock_downgrade+0x740/0x740 [ 1038.198865] ? __fget+0x225/0x360 [ 1038.202312] ? do_vfs_ioctl+0xff0/0xff0 [ 1038.206294] ? security_file_ioctl+0x83/0xb0 [ 1038.210788] SyS_ioctl+0x7f/0xb0 [ 1038.214152] ? do_vfs_ioctl+0xff0/0xff0 [ 1038.218127] do_syscall_64+0x1d5/0x640 [ 1038.222560] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1038.227853] RIP: 0033:0x465ef9 [ 1038.231150] RSP: 002b:00007fd7ebaaf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1038.239925] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465ef9 [ 1038.248091] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1038.257196] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1038.264637] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1038.272107] R13: 00007ffc90d553bf R14: 00007fd7ebaaf300 R15: 0000000000022000 [ 1038.279400] CPU: 0 PID: 2905 Comm: in:imklog Not tainted 4.14.222-syzkaller #0 [ 1038.286775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1038.287570] Mem-Info: [ 1038.296665] Call Trace: [ 1038.296688] dump_stack+0x1b2/0x281 [ 1038.296699] dump_header+0x178/0x82f [ 1038.296715] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1038.299147] active_anon:15066 inactive_anon:25024 isolated_anon:0 [ 1038.299147] active_file:17 inactive_file:16 isolated_file:0 [ 1038.299147] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1038.299147] slab_reclaimable:12874 slab_unreclaimable:116031 [ 1038.299147] mapped:43923 shmem:25362 pagetables:2128 bounce:0 [ 1038.299147] free:14127 free_pcp:4 free_cma:0 [ 1038.301723] ? ___ratelimit+0x2cd/0x530 [ 1038.305367] Node 0 active_anon:59712kB inactive_anon:74708kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123860kB dirty:0kB writeback:0kB shmem:75860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1038.309059] oom_kill_process.cold+0x10/0xb18 [ 1038.309078] out_of_memory+0xe3e/0x1190 [ 1038.309090] ? oom_killer_disable+0x1c0/0x1c0 [ 1038.309098] ? mutex_trylock+0x152/0x1a0 [ 1038.309109] __alloc_pages_nodemask+0x23e1/0x2720 [ 1038.314414] Node 1 active_anon:552kB inactive_anon:25388kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51832kB dirty:0kB writeback:0kB shmem:25588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1038.349696] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1038.349720] alloc_pages_current+0x155/0x260 [ 1038.349734] filemap_fault+0xea3/0x1980 [ 1038.354922] Node 0 [ 1038.383100] ext4_filemap_fault+0x84/0xb0 [ 1038.383112] __do_fault+0xfa/0x380 [ 1038.383121] __handle_mm_fault+0x2497/0x4620 [ 1038.383132] ? vm_insert_page+0x7c0/0x7c0 [ 1038.383146] ? lock_downgrade+0x740/0x740 [ 1038.388785] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1038.393259] handle_mm_fault+0x391/0x860 [ 1038.398051] lowmem_reserve[]: [ 1038.402262] __do_page_fault+0x549/0xad0 [ 1038.407142] 0 [ 1038.433994] ? spurious_fault+0x640/0x640 [ 1038.434007] ? do_page_fault+0x60/0x500 [ 1038.434016] ? page_fault+0x2f/0x50 [ 1038.434028] page_fault+0x45/0x50 [ 1038.440643] 2717 [ 1038.446458] RIP: 1fa0:0x1f9f [ 1038.446462] RSP: 0000:0000555ee19db9d0 EFLAGS: 7f6c1f545da0 [ 1038.540642] 2718 2718 2718 [ 1038.549443] Node 0 DMA32 free:18732kB min:36200kB low:45248kB high:54296kB active_anon:59712kB inactive_anon:74616kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9184kB pagetables:8220kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1038.582571] lowmem_reserve[]: 0 0 0 0 0 [ 1038.586763] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1038.617108] lowmem_reserve[]: 0 0 0 0 0 [ 1038.621129] Node 1 Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:552kB inactive_anon:25388kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:292kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1038.653679] lowmem_reserve[]: 0 0 0 0 0 [ 1038.657750] Node 0 DMA: 2*4kB (ME) 2*8kB (UE) 3*16kB (ME) 4*32kB (UME) 2*64kB (ME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10952kB [ 1038.677771] Node 0 DMA32: 1229*4kB (UME) 735*8kB (UME) 162*16kB (UME) 34*32kB (UME) 3*64kB (UM) 18*128kB (UM) 7*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18764kB [ 1038.695680] Mem-Info: [ 1038.700335] active_anon:15066 inactive_anon:25024 isolated_anon:0 [ 1038.700335] active_file:17 inactive_file:16 isolated_file:0 [ 1038.700335] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1038.700335] slab_reclaimable:12874 slab_unreclaimable:116031 [ 1038.700335] mapped:43923 shmem:25362 pagetables:2128 bounce:0 [ 1038.700335] free:14127 free_pcp:4 free_cma:0 [ 1038.738062] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1038.750954] Node 1 Normal: 20*4kB (M) 17*8kB (M) 11*16kB (UM) 750*32kB (UM) 2*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 26824kB [ 1038.755950] Node 0 active_anon:59712kB inactive_anon:74708kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123860kB dirty:0kB writeback:0kB shmem:75860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1038.767374] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1038.798488] Node 1 active_anon:552kB inactive_anon:25388kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51832kB dirty:0kB writeback:0kB shmem:25588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1038.805904] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1038.834497] Node 0 [ 1038.841851] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1038.853183] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1038.853199] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1038.853205] lowmem_reserve[]: [ 1038.876412] 25395 total pagecache pages [ 1038.896405] 0 pages in swap cache [ 1038.897899] 0 [ 1038.899868] Swap cache stats: add 0, delete 0, find 0/0 [ 1038.899876] 2717 [ 1038.901680] Free swap = 0kB [ 1038.914521] 2718 2718 2718 [ 1038.919670] Node 0 DMA32 free:18732kB min:36200kB low:45248kB high:54296kB active_anon:59712kB inactive_anon:74616kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9184kB pagetables:8220kB bounce:0kB free_pcp:40kB local_pcp:32kB free_cma:0kB [ 1038.926392] Total swap = 0kB [ 1038.958597] lowmem_reserve[]: 0 0 0 0 0 [ 1038.961213] 2097051 pages RAM [ 1038.962643] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1038.965849] 0 pages HighMem/MovableOnly [ 1039.001878] lowmem_reserve[]: 0 0 0 0 0 [ 1039.005889] Node 1 Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:552kB inactive_anon:25388kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:292kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1039.006426] 363840 pages reserved [ 1039.043752] lowmem_reserve[]: 0 0 0 0 0 [ 1039.051221] Node 0 DMA: 2*4kB (ME) 2*8kB (UE) 3*16kB (ME) 4*32kB (UME) 2*64kB (ME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10952kB [ 1039.066398] 0 pages cma reserved [ 1039.086840] Node 0 DMA32: 1229*4kB (UME) 735*8kB (UME) 162*16kB (UME) 34*32kB (UME) 3*64kB (UM) 18*128kB (UM) 7*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18764kB [ 1039.146419] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1039.166753] Node 1 Normal: 0*4kB 0*8kB 2*16kB (UM) 748*32kB (U) 1243*64kB (U) 208*128kB (U) 4*256kB (UM) 1*512kB (M) 114*1024kB (UM) 11*2048kB (UM) 1*4096kB (U) = 275040kB [ 1039.166827] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1039.166832] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1039.166838] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1039.166844] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1039.166848] 26024 total pagecache pages [ 1039.166857] 0 pages in swap cache [ 1039.166862] Swap cache stats: add 0, delete 0, find 0/0 [ 1039.166865] Free swap = 0kB [ 1039.166868] Total swap = 0kB [ 1039.166874] 2097051 pages RAM [ 1039.166876] 0 pages HighMem/MovableOnly [ 1039.166884] 363840 pages reserved [ 1039.408404] 0 pages cma reserved [ 1039.411827] Out of memory (oom_kill_allocating_task): Kill process 2905 (in:imklog) score 0 or sacrifice child [ 1039.448503] Killed process 2902 (rsyslogd) total-vm:254332kB, anon-rss:944kB, file-rss:0kB, shmem-rss:0kB [ 1039.465069] oom_reaper: reaped process 2902 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 18:03:58 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r1, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x1, 0xa8, 0x2, r3}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000005c0)={r5, 0x91, "d2ca095b4fbd10b7438f17b2b5b7f280b5c009edf69876704d1f61214a1f09f852a8ea771eeda36975c181f183ba409c4a12af51e0ba9fbc1074c31956b93f6aaa9468ed7f5eb1b8b34152ee56da307aa86c6484c78ccc82a12b44885273d0090e836e993db32aa9aa611d3ba9b80cbf0a776b964d3d19d309b383f8cd2a9274af440289a7a1ea86208be2449e6363f1ef"}, &(0x7f0000000200)=0x99) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000500)={r4, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r2) sendmsg$IPVS_CMD_SET_DEST(r2, 0x0, 0x8884) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f00000000c0)={0x74, 0x0, [0x1f, 0x100000000, 0x8, 0x2]}) 18:03:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00', 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x5, 0xffffffff, 0x400, 0x1000], 0x4, 0xc0000, 0x0, 0xffffffffffffffff}) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000880)='NET_DM\x00', r2) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x3408}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r4, 0x300}, 0x14}}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) 18:03:58 executing program 2: socket$nl_route(0x10, 0x3, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80, 0x80000) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname(r0, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x80) socket$inet_sctp(0x2, 0x0, 0x84) accept(r1, 0x0, 0x0) 18:03:58 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000500)={r2, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r1) sendmsg$IPVS_CMD_SET_DEST(r1, 0x0, 0x8884) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000002c0)={@loopback, 0x0}, &(0x7f0000000300)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000540)={@mcast1, 0x0}, &(0x7f0000000580)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000007c0)={@local, 0x0}, &(0x7f0000000800)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000e80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000940)={0x4d4, 0x0, 0x500, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xc4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0xfffffffffffffcf6, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0xfffffffffffffd65}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @activeport={{0x0, 0x1, 'activeport\x00'}, {}, {0x0, 0x4, r3}}}]}}, {{0x8, 0x1, r4}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x0, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {}, {0x0, 0x4, r3}}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x54, 0x4, [{0x4, 0xd7, 0x1, 0x8}, {0xfff, 0x9, 0x0, 0x3f}, {0x101, 0x80, 0x4d, 0xffff}, {0x87, 0x40, 0x51, 0x5}, {0x1, 0x20, 0x93, 0x1ff}, {0x2, 0x41, 0x0, 0xffff}, {0x9d1, 0x9, 0x0, 0x100}, {0x200, 0x9, 0xcf, 0x5}, {0x2, 0x7f, 0x8, 0x5}, {0x8, 0x2, 0x5, 0x3}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xffff}}}]}}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x4, 0x1c, 0x0, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r9, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000080)=0x2) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x8) 18:03:58 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x3, @null, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000880)='NET_DM\x00', r3) socket$l2tp6(0xa, 0x2, 0x73) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4(r4, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000040)=0x80, 0x800) 18:03:58 executing program 5: getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r0, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000500)={r2, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r1) sendmsg$IPVS_CMD_SET_DEST(r1, 0x0, 0x8884) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f00000001c0)=0x1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) socketpair(0x8, 0x6, 0x7fffffff, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x9, 0x400}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000080)={r5, 0x88}, 0x8) 18:03:58 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00', 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x5, 0xffffffff, 0x400, 0x1000], 0x4, 0xc0000, 0x0, 0xffffffffffffffff}) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000880)='NET_DM\x00', r2) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x3408}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r4, 0x300}, 0x14}}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) 18:03:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00', 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x5, 0xffffffff, 0x400, 0x1000], 0x4, 0xc0000, 0x0, 0xffffffffffffffff}) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000880)='NET_DM\x00', r2) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x3408}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r4, 0x300}, 0x14}}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) 18:03:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x3, @null, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000880)='NET_DM\x00', r3) socket$l2tp6(0xa, 0x2, 0x73) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:03:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00', 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x5, 0xffffffff, 0x400, 0x1000], 0x4, 0xc0000, 0x0, 0xffffffffffffffff}) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000880)='NET_DM\x00', r2) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x3408}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r4, 0x300}, 0x14}}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) 18:03:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x3, @null, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000880)='NET_DM\x00', r3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:03:59 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00', 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x5, 0xffffffff, 0x400, 0x1000], 0x4, 0xc0000, 0x0, 0xffffffffffffffff}) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000880)='NET_DM\x00', r2) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x3408}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r4, 0x300}, 0x14}}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) 18:03:59 executing program 2: socket$nl_route(0x10, 0x3, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80, 0x80000) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname(r0, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x80) socket$inet_sctp(0x2, 0x0, 0x84) accept(r1, 0x0, 0x0) 18:03:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x3, @null, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000880)='NET_DM\x00', r3) socket$l2tp6(0xa, 0x2, 0x73) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:03:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x3, @null, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:03:59 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00', 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x5, 0xffffffff, 0x400, 0x1000], 0x4, 0xc0000, 0x0, 0xffffffffffffffff}) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000880)='NET_DM\x00', r2) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x3408}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r4, 0x300}, 0x14}}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) [ 1042.895401] IPVS: ftp: loaded support on port[0] = 21 [ 1043.012932] chnl_net:caif_netlink_parms(): no params data found [ 1043.067532] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.074056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.081775] device bridge_slave_0 entered promiscuous mode [ 1043.089793] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.096170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.103878] device bridge_slave_1 entered promiscuous mode [ 1043.123403] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1043.132277] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1043.152874] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1043.160195] team0: Port device team_slave_0 added [ 1043.165573] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1043.173658] team0: Port device team_slave_1 added [ 1043.191902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1043.198267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.223664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1043.234715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1043.241181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.266795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1043.278027] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1043.285457] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1043.308827] device hsr_slave_0 entered promiscuous mode [ 1043.314491] device hsr_slave_1 entered promiscuous mode [ 1043.320776] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1043.328377] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1043.404524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.411060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.417848] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.424194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1043.455567] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1043.462168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.471542] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1043.480319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1043.488858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.495481] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.506240] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1043.513130] 8021q: adding VLAN 0 to HW filter on device team0 [ 1043.521979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1043.530068] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.536494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1043.545931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1043.555173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.561683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.578528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1043.587326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1043.599169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1043.610718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1043.620983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1043.631414] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1043.638739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1043.653444] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1043.661313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1043.668677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1043.681345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1043.738297] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1043.751586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1043.779175] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1043.787802] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1043.794694] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1043.804146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1043.811992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1043.819519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1043.830013] device veth0_vlan entered promiscuous mode [ 1043.840027] device veth1_vlan entered promiscuous mode [ 1043.845937] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1043.855454] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1043.868604] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1043.878947] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1043.887988] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1043.896099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1043.907583] device veth0_macvtap entered promiscuous mode [ 1043.914187] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1043.924620] device veth1_macvtap entered promiscuous mode [ 1043.939175] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1043.949979] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1043.959676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1043.970727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.980112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1043.990835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.000324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1044.011930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.021106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1044.031001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.040180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1044.050350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.060890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1044.068615] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1044.076298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1044.085327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1044.097404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1044.107972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.117963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1044.128070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.137302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1044.147533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.156872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1044.166966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.176120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1044.186325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.197380] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1044.204371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1044.212394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1044.220580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:04:02 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10200, 0x0) 18:04:02 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x3, @null, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:02 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x3, @null, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000880)='NET_DM\x00', r3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:02 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00', 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x5, 0xffffffff, 0x400, 0x1000], 0x4, 0xc0000, 0x0, 0xffffffffffffffff}) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000880)='NET_DM\x00', r1) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x3408}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r3, 0x300}, 0x14}}, 0x0) 18:04:02 executing program 2: socket$nl_route(0x10, 0x3, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80, 0x80000) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname(r0, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x80) socket$inet_sctp(0x2, 0x0, 0x84) 18:04:02 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7, 0x1e}) 18:04:02 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x3, @null, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000880)='NET_DM\x00', r3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:02 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x3, @null, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:02 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r1, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffffffff804, &(0x7f0000000000)=0xff}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000500)={r3, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r2) sendmsg$IPVS_CMD_SET_DEST(r2, 0x0, 0x8884) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000040)={0x2, 0x3, 0x8001, 0x1, 0x9}) 18:04:02 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00', 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x5, 0xffffffff, 0x400, 0x1000], 0x4, 0xc0000, 0x0, 0xffffffffffffffff}) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000880)='NET_DM\x00', r1) 18:04:02 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0xaac7f76552708aac, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) 18:04:02 executing program 2: socket$nl_route(0x10, 0x3, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80, 0x80000) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname(r0, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x80) 18:04:02 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x3, @null, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:02 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x3, @null, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000880)='NET_DM\x00', r3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:02 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00', 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x5, 0xffffffff, 0x400, 0x1000], 0x4, 0xc0000, 0x0, 0xffffffffffffffff}) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) 18:04:02 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x50501, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x4, 0x11}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000100)=0x1, 0x4) 18:04:03 executing program 2: socket$nl_route(0x10, 0x3, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80, 0x80000) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r0, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x80) 18:04:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x3, @null, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x3, @null, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:03 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00', 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x5, 0xffffffff, 0x400, 0x1000], 0x4, 0xc0000, 0x0, 0xffffffffffffffff}) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}) [ 1044.926962] Bluetooth: hci2 command 0x0409 tx timeout 18:04:03 executing program 2: socket$nl_route(0x10, 0x3, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80, 0x80000) socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x80) 18:04:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:03 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r0, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000500)={r2, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r1) sendmsg$IPVS_CMD_SET_DEST(r1, 0x0, 0x8884) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x6, 0x3, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000080)=0x2) 18:04:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x3, @null, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:03 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00', 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x5, 0xffffffff, 0x400, 0x1000], 0x4, 0xc0000}) 18:04:03 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r1, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x6, 0x6, &(0x7f0000000480)=0x6}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000500)={r4, 0x4}, 0x8) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x40000, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000005c0)={r3, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x4}, 0x90) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r2) sendmsg$IPVS_CMD_SET_DEST(r2, 0x0, 0x8884) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00', 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00', r5) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) 18:04:03 executing program 2: socket$nl_route(0x10, 0x3, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80, 0x80000) socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x80) 18:04:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x3, @null, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:03 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00', 0xffffffffffffffff) 18:04:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x3, @null, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:03 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="0302d81ccf37000000000000000a"], 0xa) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) 18:04:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:03 executing program 2: socket$nl_route(0x10, 0x3, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80, 0x80000) socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x80) 18:04:03 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6}) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00', 0xffffffffffffffff) 18:04:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x3, @null, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:04 executing program 2: socket$nl_route(0x10, 0x3, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80, 0x80000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r0, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x80) 18:04:04 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00', 0xffffffffffffffff) 18:04:04 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x290001, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0xec, 0x11}) r2 = accept4$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @remote, @default, @default, @remote, @bcast, @remote, @netrom]}, &(0x7f0000000140)=0x48, 0x800) r3 = accept4(r2, &(0x7f0000000240)=@sco, &(0x7f00000002c0)=0x80, 0x80000) recvfrom$netrom(r3, &(0x7f0000000300)=""/248, 0xf8, 0x120, &(0x7f0000000940)={{0x3, @default, 0x5}, [@null, @default, @null, @default, @null, @default, @bcast, @bcast]}, 0x48) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x5) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x2d0, 0x0, 0xffffffff, 0xf0, 0x2d0, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, &(0x7f0000000180), {[{{@ipv6={@loopback, @mcast1, [0xffffff00, 0x0, 0xff, 0xff000000], [0xff, 0xffffffff, 0xffffffff, 0xffffff00], 'vxcan1\x00', 'tunl0\x00', {}, {}, 0x3a, 0x3, 0x3, 0x10}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0xe, @ipv4=@empty, @ipv6=@mcast1, @gre_key=0xd5d7, @gre_key=0x7}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@private2={0xfc, 0x2, [], 0x1}, @ipv6=@remote, @gre_key=0x8000, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1, @ipv4=@multicast1, @ipv4=@multicast1, @gre_key=0x6, @port=0x4e24}}}, {{@ipv6={@local, @mcast1, [0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xff], 'ip_vti0\x00', 'veth0\x00', {}, {}, 0x4, 0x80, 0x2, 0x18}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x4, @ipv4=@remote, @ipv6=@mcast1, @icmp_id=0x67, @port=0x4e24}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000040)={0x4000, 0x109000}) 18:04:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:04 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:04 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x200000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x9, 0x8}, 0xc) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0xa2, 0x80, 0x20, 0xce, 0x81, 0x8, 0xaa, 0x40, 0x0, 0x6, 0x20, 0x81, 0xf9, 0x30}, 0xe) accept(0xffffffffffffffff, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80) 18:04:04 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:04 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r0, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x80) 18:04:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:04 executing program 1: syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00', 0xffffffffffffffff) 18:04:04 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x4c4000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000040)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 18:04:04 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:04 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r0, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x80) 18:04:04 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:04 executing program 1: syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) 18:04:04 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x14}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7, 0x20}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4ce}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20004080}, 0x800) socketpair(0x1d, 0x1, 0x9, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x8c, 0x0, 0x8, 0xd5, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa2b6}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x3a}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x2) 18:04:04 executing program 0: syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) [ 1047.006448] Bluetooth: hci2 command 0x041b tx timeout [ 1047.212940] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1047.225209] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1047.242323] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1047.249816] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1047.256063] CPU: 1 PID: 4108 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1047.264225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1047.274576] Call Trace: [ 1047.277791] dump_stack+0x1b2/0x281 [ 1047.281432] warn_alloc.cold+0x96/0x1cc [ 1047.285699] ? zone_watermark_ok_safe+0x220/0x220 [ 1047.290553] __alloc_pages_nodemask+0x2127/0x2720 [ 1047.295405] ? __schedule+0x893/0x1de0 [ 1047.299349] ? lock_acquire+0x170/0x3f0 [ 1047.303351] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1047.308220] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1047.313681] ? __mutex_unlock_slowpath+0x75/0x770 [ 1047.318617] alloc_pages_current+0x155/0x260 [ 1047.323035] ion_page_pool_alloc+0x118/0x1b0 [ 1047.327464] ion_system_heap_allocate+0x133/0x8c0 [ 1047.332317] ? ion_alloc+0x187/0x810 [ 1047.336032] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1047.341486] ? ion_system_contig_heap_create+0x130/0x130 [ 1047.346944] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1047.351973] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1047.356827] ion_alloc+0x204/0x810 [ 1047.360382] ? ion_dma_buf_release+0x40/0x40 [ 1047.364796] ? __might_fault+0x177/0x1b0 [ 1047.368858] ion_ioctl+0xea/0x1f0 [ 1047.372311] ? ion_query_heaps+0x360/0x360 [ 1047.376547] ? _raw_spin_unlock+0x29/0x40 [ 1047.380702] ? ion_query_heaps+0x360/0x360 [ 1047.384975] do_vfs_ioctl+0x75a/0xff0 [ 1047.388810] ? ioctl_preallocate+0x1a0/0x1a0 [ 1047.393316] ? lock_downgrade+0x740/0x740 [ 1047.397475] ? __fget+0x225/0x360 [ 1047.400964] ? do_vfs_ioctl+0xff0/0xff0 [ 1047.404952] ? security_file_ioctl+0x83/0xb0 [ 1047.409377] SyS_ioctl+0x7f/0xb0 [ 1047.412746] ? do_vfs_ioctl+0xff0/0xff0 [ 1047.416727] do_syscall_64+0x1d5/0x640 [ 1047.420617] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1047.425957] RIP: 0033:0x465ef9 [ 1047.429229] RSP: 002b:00007fd7eba8e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1047.436964] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000465ef9 [ 1047.444245] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1047.451520] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1047.458908] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1047.466175] R13: 00007ffc90d553bf R14: 00007fd7eba8e300 R15: 0000000000022000 [ 1047.475612] CPU: 0 PID: 4054 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1047.479020] Mem-Info: [ 1047.483599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1047.486015] active_anon:14562 inactive_anon:25026 isolated_anon:12 [ 1047.486015] active_file:3067 inactive_file:4518 isolated_file:0 [ 1047.486015] unevictable:0 dirty:141 writeback:0 unstable:0 [ 1047.486015] slab_reclaimable:12944 slab_unreclaimable:116037 [ 1047.486015] mapped:57756 shmem:25366 pagetables:2175 bounce:0 [ 1047.486015] free:271054 free_pcp:63 free_cma:0 [ 1047.496296] Call Trace: [ 1047.496321] dump_stack+0x1b2/0x281 [ 1047.496334] warn_alloc.cold+0x96/0x1cc [ 1047.496346] ? zone_watermark_ok_safe+0x220/0x220 [ 1047.496368] __alloc_pages_nodemask+0x2127/0x2720 [ 1047.496386] ? lock_acquire+0x170/0x3f0 [ 1047.496421] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1047.532181] Node 0 active_anon:57924kB inactive_anon:74716kB active_file:9960kB inactive_file:17776kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:176820kB dirty:556kB writeback:0kB shmem:75876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1047.534205] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1047.538582] Node 1 active_anon:324kB inactive_anon:25388kB active_file:2308kB inactive_file:296kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:54204kB dirty:8kB writeback:0kB shmem:25588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1047.542064] ? __mutex_unlock_slowpath+0x75/0x770 [ 1047.547281] Node 0 [ 1047.552636] ? retint_kernel+0x2d/0x2d [ 1047.557086] DMA free:11100kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1047.561670] alloc_pages_current+0x155/0x260 [ 1047.590684] lowmem_reserve[]: [ 1047.596207] ion_page_pool_alloc+0x118/0x1b0 [ 1047.623940] 0 [ 1047.628382] ion_system_heap_allocate+0x133/0x8c0 [ 1047.628394] ? ion_alloc+0x187/0x810 [ 1047.628406] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1047.628418] ? ion_system_contig_heap_create+0x130/0x130 [ 1047.630675] 2717 [ 1047.634568] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1047.661182] 2718 [ 1047.665184] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1047.668395] 2718 [ 1047.673383] ion_alloc+0x204/0x810 [ 1047.675160] 2718 [ 1047.679998] ? ion_dma_buf_release+0x40/0x40 [ 1047.680010] ? __might_fault+0x177/0x1b0 [ 1047.680021] ion_ioctl+0xea/0x1f0 [ 1047.680036] ? ion_query_heaps+0x360/0x360 [ 1047.690545] ? ion_query_heaps+0x360/0x360 [ 1047.690556] do_vfs_ioctl+0x75a/0xff0 [ 1047.690567] ? ioctl_preallocate+0x1a0/0x1a0 [ 1047.690577] ? lock_downgrade+0x740/0x740 [ 1047.690590] ? __fget+0x225/0x360 [ 1047.690601] ? do_vfs_ioctl+0xff0/0xff0 [ 1047.696992] Node 0 [ 1047.699234] ? security_file_ioctl+0x83/0xb0 [ 1047.704725] DMA32 free:577236kB min:36200kB low:45248kB high:54296kB active_anon:57924kB inactive_anon:74624kB active_file:9584kB inactive_file:18280kB unevictable:0kB writepending:556kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9312kB pagetables:8408kB bounce:0kB free_pcp:232kB local_pcp:92kB free_cma:0kB [ 1047.706765] SyS_ioctl+0x7f/0xb0 [ 1047.706774] ? do_vfs_ioctl+0xff0/0xff0 [ 1047.706785] do_syscall_64+0x1d5/0x640 [ 1047.706800] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1047.706808] RIP: 0033:0x465ef9 [ 1047.706813] RSP: 002b:00007fd7ebad0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1047.706826] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1047.713065] lowmem_reserve[]: [ 1047.714205] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1047.718231] 0 [ 1047.720065] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1047.725152] 0 [ 1047.730380] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1047.730386] R13: 00007ffc90d553bf R14: 00007fd7ebad0300 R15: 0000000000022000 [ 1047.885133] 0 0 0 [ 1047.887605] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1047.914978] lowmem_reserve[]: 0 0 0 0 0 [ 1047.919490] Node 1 Normal free:525064kB min:53696kB low:67120kB high:80544kB active_anon:324kB inactive_anon:25388kB active_file:2308kB inactive_file:296kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:292kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1047.963585] lowmem_reserve[]: 0 0 0 0 0 [ 1047.968320] Node 0 DMA: 5*4kB (UME) 9*8kB (UE) 10*16kB (UME) 9*32kB (UME) 3*64kB (UME) 1*128kB (E) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11100kB [ 1047.987874] Node 0 DMA32: 380*4kB (UME) 528*8kB (UME) 8312*16kB (UME) 7304*32kB (UME) 3122*64kB (UM) 113*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 586736kB [ 1048.006756] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1048.017664] Node 1 Normal: 1156*4kB (UM) 1526*8kB (UM) 1407*16kB (UM) 1048*32kB (U) 6*64kB (U) 0*128kB 2*256kB (U) 0*512kB 15*1024kB (U) 137*2048kB (U) 38*4096kB (U) = 525360kB [ 1048.035619] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1048.048864] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1048.058584] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1048.068579] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1048.079638] 32550 total pagecache pages [ 1048.083718] 0 pages in swap cache [ 1048.091579] Swap cache stats: add 0, delete 0, find 0/0 [ 1048.099358] Free swap = 0kB [ 1048.102507] Total swap = 0kB [ 1048.105534] 2097051 pages RAM [ 1048.112634] 0 pages HighMem/MovableOnly [ 1048.118705] 363840 pages reserved [ 1048.122711] 0 pages cma reserved [ 1049.094019] Bluetooth: hci2 command 0x040f tx timeout 18:04:08 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x80) 18:04:08 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x80800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0x50, "e1429092ac450d140c93ebfc2463ba8a9a809b90907b89775acf16dea061c6709d68d797093aaf254b16b7c283e0a4251e82c7612807a84b1215ced2f06883dae8c65ccd104db046c1736d5a96460713"}, &(0x7f0000000300)=0x58) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xcc, r2, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffff7}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x13}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x32}}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 18:04:08 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x61ac, 0x8}, 0x8) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={r2, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000500)={r4, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r3) sendmsg$IPVS_CMD_SET_DEST(r3, 0x0, 0x8884) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3], 0x1, 0x80800}) accept(r3, &(0x7f00000001c0)=@ieee802154={0x24, @long}, &(0x7f0000000080)=0x80) 18:04:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:08 executing program 1: syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) 18:04:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:08 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x4000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x800}) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f0000000100)={0x5, 0x0, 0x0, 0x40c}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf026, 0xfffc, 0x8, 0x2, 0x1, 0x388, 0xa098, 0x101, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000002c0)={r3, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={0x0, 0x1}, &(0x7f0000000200)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000500)={r5, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r4) sendmsg$IPVS_CMD_SET_DEST(r4, 0x0, 0x8884) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000140)={0x74, 0x0, [0x3, 0x3700000000000000, 0x2, 0xffff]}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000500)={0x0, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x8884) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000001c0)={0x3, 0x1, 0x1, 0x3, 0x3}) 18:04:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:08 executing program 1: syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) 18:04:08 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x80) 18:04:08 executing program 0: syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) 18:04:08 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x80) 18:04:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x80800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0x50, "e1429092ac450d140c93ebfc2463ba8a9a809b90907b89775acf16dea061c6709d68d797093aaf254b16b7c283e0a4251e82c7612807a84b1215ced2f06883dae8c65ccd104db046c1736d5a96460713"}, &(0x7f0000000300)=0x58) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xcc, r2, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffff7}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x13}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x32}}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 18:04:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:08 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0x250000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r1, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000500)={r3, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r2) sendmsg$IPVS_CMD_SET_DEST(r2, 0x0, 0x8884) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000004c0)={0x6, 0x30, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@in6={0xa, 0x4e20, 0x9, @mcast2, 0x7f5}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000140)="6d3a0582a944d85628547f8a9ba8e7c150f69dac8203e429aa1e7aec4669eff793fb703c70cb8c6da6a1cac76beacbf80fc1875895fe50f9a842461ee14bb9eb8946ecbbdf536d4af0648f7f5617ed9f3f39970d279efd72ed48f7827b1be4622a9ef8def6470f27a7b0a2893632ad23cd78cf0bdddabaf159db5a6a34758b1382fef21e442db1d06569e1b4d2fbd051e5670cbb7f9633011dcfbfeda253746f4e0816d1003239f03bc83a8fa2d158cfe12f81e003fe", 0xb6}, {&(0x7f0000000200)="4f4a7f9c368c12370c1ad32acc01e136e069ef8cc70399e089e537e476113d153482c660b821db5d95c64df34335", 0x2e}, {&(0x7f0000000240)="93167bcab9a75d86763526022fdb85a98efefbfc7f4a6e2a1ba4be8a0884e71e6c1be7a238c87072916dca920ed86c79c0eb4578f8cff6c56c932563ec8ed00fc6f7c66396e7c97f9a07139c57f84c0564f2d8f097e6247f116e5de370851401355ccb337b0da70ba3420f9c5da04bd241e9aa48155f31bfea8be4064cc1eae6b97e17503488d0763ed63f3f723a45f05af1f5a82af7136ec85def91f7083d4bb27dcc801fb87bf9033f61fb061ad3818ce499cf7bac286e3412d18a94fb376eab87673d74cc5a9a703a8a0cd988e6a3d8f6d328de54da4f0d07d20a7400d6812dcbcb655cb651f7045a950383edbd5e10f13a", 0xf3}], 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="0c0200bfb2b2bcac24da790002000000060001002000000001000000ea91b2edf4eca3889f36cdcbedf8e0e764f5c1bfb1286bb3f6b5698dbb20154806c8afa82497b53b41e1cfdd134a38230e07364a91477417ce1e", @ANYRES32=0x0], 0x20, 0x808}, 0x1) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000080)=0x1) socketpair(0xa, 0x5, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r5}) 18:04:08 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x200000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x9, 0x8}, 0xc) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0xa2, 0x80, 0x20, 0xce, 0x81, 0x8, 0xaa, 0x40, 0x0, 0x6, 0x20, 0x81, 0xf9, 0x30}, 0xe) accept(0xffffffffffffffff, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80) 18:04:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r1, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x6, 0x6, &(0x7f0000000480)=0x6}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000500)={r4, 0x4}, 0x8) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x40000, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000005c0)={r3, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x4}, 0x90) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r2) sendmsg$IPVS_CMD_SET_DEST(r2, 0x0, 0x8884) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00', 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00', r5) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) [ 1051.013302] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1051.046984] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1051.066639] CPU: 0 PID: 4156 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 1051.074468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1051.083918] Call Trace: [ 1051.086558] dump_stack+0x1b2/0x281 [ 1051.090206] warn_alloc.cold+0x96/0x1cc [ 1051.094318] ? zone_watermark_ok_safe+0x220/0x220 [ 1051.099185] __alloc_pages_nodemask+0x2127/0x2720 [ 1051.104060] ? lock_acquire+0x170/0x3f0 [ 1051.108061] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1051.112930] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1051.118402] ? __mutex_unlock_slowpath+0x75/0x770 [ 1051.123345] alloc_pages_current+0x155/0x260 [ 1051.127786] ion_page_pool_alloc+0x118/0x1b0 [ 1051.132367] ion_system_heap_allocate+0x133/0x8c0 [ 1051.137251] ? ion_alloc+0x187/0x810 [ 1051.140984] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1051.146452] ? ion_system_contig_heap_create+0x130/0x130 [ 1051.151936] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1051.157194] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1051.162053] ion_alloc+0x204/0x810 [ 1051.165609] ? ion_dma_buf_release+0x40/0x40 [ 1051.170154] ? __might_fault+0x177/0x1b0 [ 1051.174410] ion_ioctl+0xea/0x1f0 [ 1051.177968] ? ion_query_heaps+0x360/0x360 [ 1051.182223] ? ion_query_heaps+0x360/0x360 [ 1051.186462] do_vfs_ioctl+0x75a/0xff0 [ 1051.190272] ? ioctl_preallocate+0x1a0/0x1a0 [ 1051.194685] ? lock_downgrade+0x740/0x740 [ 1051.198838] ? __fget+0x225/0x360 [ 1051.202391] ? do_vfs_ioctl+0xff0/0xff0 [ 1051.206470] ? security_file_ioctl+0x83/0xb0 [ 1051.210983] SyS_ioctl+0x7f/0xb0 [ 1051.214381] ? do_vfs_ioctl+0xff0/0xff0 [ 1051.218364] do_syscall_64+0x1d5/0x640 [ 1051.222451] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1051.227654] RIP: 0033:0x465ef9 [ 1051.230853] RSP: 002b:00007f5842689188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1051.238577] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1051.246009] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1051.253299] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1051.260608] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1051.267888] R13: 00007ffc66db249f R14: 00007f5842689300 R15: 0000000000022000 [ 1051.279009] Bluetooth: hci2 command 0x0419 tx timeout [ 1051.815758] warn_alloc_show_mem: 1 callbacks suppressed [ 1051.815762] Mem-Info: [ 1051.842258] active_anon:14983 inactive_anon:25025 isolated_anon:0 [ 1051.842258] active_file:835 inactive_file:875 isolated_file:15 [ 1051.842258] unevictable:0 dirty:5 writeback:0 unstable:0 [ 1051.842258] slab_reclaimable:12937 slab_unreclaimable:115222 [ 1051.842258] mapped:54113 shmem:25365 pagetables:2206 bounce:0 [ 1051.842258] free:28470 free_pcp:266 free_cma:0 [ 1051.983729] Node 0 active_anon:58684kB inactive_anon:74708kB active_file:164kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):60kB mapped:158916kB dirty:20kB writeback:0kB shmem:75868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1052.063320] Node 1 active_anon:1248kB inactive_anon:25392kB active_file:960kB inactive_file:1216kB unevictable:0kB isolated(anon):0kB isolated(file):96kB mapped:53528kB dirty:64kB writeback:0kB shmem:25592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1052.098431] Node 0 DMA free:11020kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:92kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1052.155149] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1052.170763] Node 0 DMA32 free:36600kB min:36200kB low:45248kB high:54296kB active_anon:58688kB inactive_anon:74616kB active_file:248kB inactive_file:484kB unevictable:0kB writepending:24kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9216kB pagetables:8328kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1052.276254] lowmem_reserve[]: 0 0 0 0 0 [ 1052.293022] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1052.306206] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1052.306509] Node 0 [ 1052.322448] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1052.330200] syz-executor.5 cpuset= [ 1052.340687] syz-executor.0 cpuset= [ 1052.343448] / [ 1052.348112] / [ 1052.349942] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1052.355323] mems_allowed=0-1 [ 1052.379568] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1052.379595] CPU: 1 PID: 4125 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1052.379601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1052.379605] Call Trace: [ 1052.379626] dump_stack+0x1b2/0x281 [ 1052.379638] warn_alloc.cold+0x96/0x1cc [ 1052.379650] ? zone_watermark_ok_safe+0x220/0x220 [ 1052.379675] __alloc_pages_nodemask+0x2127/0x2720 [ 1052.379684] ? __schedule+0x893/0x1de0 [ 1052.379699] ? lock_acquire+0x170/0x3f0 [ 1052.379714] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1052.379729] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1052.379742] ? __mutex_unlock_slowpath+0x75/0x770 [ 1052.379757] alloc_pages_current+0x155/0x260 [ 1052.379772] ion_page_pool_alloc+0x118/0x1b0 [ 1052.379783] ion_system_heap_allocate+0x133/0x8c0 [ 1052.379799] ? ion_alloc+0x187/0x810 [ 1052.379810] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1052.379822] ? ion_system_contig_heap_create+0x130/0x130 [ 1052.379832] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1052.379843] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1052.379854] ion_alloc+0x204/0x810 [ 1052.406949] mems_allowed=0-1 [ 1052.407687] ? ion_dma_buf_release+0x40/0x40 [ 1052.407712] ? __might_fault+0x177/0x1b0 [ 1052.504657] ion_ioctl+0xea/0x1f0 [ 1052.508137] ? ion_query_heaps+0x360/0x360 [ 1052.512552] ? ion_query_heaps+0x360/0x360 [ 1052.516789] do_vfs_ioctl+0x75a/0xff0 [ 1052.520597] ? ioctl_preallocate+0x1a0/0x1a0 [ 1052.525028] ? lock_downgrade+0x740/0x740 [ 1052.529193] ? __fget+0x225/0x360 [ 1052.532645] ? do_vfs_ioctl+0xff0/0xff0 [ 1052.536619] ? security_file_ioctl+0x83/0xb0 [ 1052.541056] SyS_ioctl+0x7f/0xb0 [ 1052.544505] ? do_vfs_ioctl+0xff0/0xff0 [ 1052.548477] do_syscall_64+0x1d5/0x640 [ 1052.552369] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1052.557554] RIP: 0033:0x465ef9 [ 1052.560731] RSP: 002b:00007fd7ebad0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1052.568437] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1052.575723] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1052.582991] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1052.590261] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1052.597527] R13: 00007ffc90d553bf R14: 00007fd7ebad0300 R15: 0000000000022000 [ 1052.616427] lowmem_reserve[]: 0 0 0 0 0 [ 1052.620466] Node 1 Normal free:53332kB min:53696kB low:67120kB high:80544kB active_anon:1248kB inactive_anon:25392kB active_file:936kB inactive_file:876kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:496kB bounce:0kB free_pcp:668kB local_pcp:0kB free_cma:0kB [ 1052.649512] CPU: 1 PID: 4159 Comm: syz-executor.0 Not tainted 4.14.222-syzkaller #0 [ 1052.657404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1052.666783] Call Trace: [ 1052.669417] dump_stack+0x1b2/0x281 [ 1052.673067] warn_alloc.cold+0x96/0x1cc [ 1052.677045] ? zone_watermark_ok_safe+0x220/0x220 [ 1052.681903] __alloc_pages_nodemask+0x2127/0x2720 [ 1052.686743] ? ___preempt_schedule+0x16/0x18 [ 1052.692135] ? lock_acquire+0x170/0x3f0 [ 1052.696115] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1052.700969] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1052.706419] ? __mutex_unlock_slowpath+0x75/0x770 [ 1052.711257] ? retint_kernel+0x2d/0x2d [ 1052.715248] alloc_pages_current+0x155/0x260 [ 1052.719657] ion_page_pool_alloc+0x118/0x1b0 [ 1052.724065] ion_system_heap_allocate+0x133/0x8c0 [ 1052.728923] ? ion_alloc+0x187/0x810 [ 1052.732636] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1052.738083] ? ion_system_contig_heap_create+0x130/0x130 [ 1052.743530] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1052.748548] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1052.753391] ion_alloc+0x204/0x810 [ 1052.756938] ? ion_dma_buf_release+0x40/0x40 [ 1052.761359] ? __might_fault+0x177/0x1b0 [ 1052.765858] ion_ioctl+0xea/0x1f0 [ 1052.769335] ? ion_query_heaps+0x360/0x360 [ 1052.773583] ? ion_query_heaps+0x360/0x360 [ 1052.777906] do_vfs_ioctl+0x75a/0xff0 [ 1052.781702] ? ioctl_preallocate+0x1a0/0x1a0 [ 1052.786105] ? lock_downgrade+0x740/0x740 [ 1052.790252] ? __fget+0x225/0x360 [ 1052.793704] ? do_vfs_ioctl+0xff0/0xff0 [ 1052.797676] ? security_file_ioctl+0x83/0xb0 [ 1052.802086] SyS_ioctl+0x7f/0xb0 [ 1052.805452] ? do_vfs_ioctl+0xff0/0xff0 [ 1052.809446] do_syscall_64+0x1d5/0x640 [ 1052.813344] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1052.818533] RIP: 0033:0x465ef9 [ 1052.821711] RSP: 002b:00007ff463c74188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1052.830287] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1052.837803] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1052.845071] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1052.852355] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1052.859978] R13: 00007ffd9671605f R14: 00007ff463c74300 R15: 0000000000022000 [ 1052.868472] lowmem_reserve[]: 0 0 0 0 0 [ 1052.868558] CPU: 0 PID: 4133 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1052.872960] Node 0 [ 1052.880279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1052.880283] Call Trace: [ 1052.880302] dump_stack+0x1b2/0x281 [ 1052.880316] warn_alloc.cold+0x96/0x1cc [ 1052.880328] ? zone_watermark_ok_safe+0x220/0x220 [ 1052.880349] __alloc_pages_nodemask+0x2127/0x2720 [ 1052.882712] DMA: [ 1052.892068] ? lock_acquire+0x170/0x3f0 [ 1052.892085] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1052.892101] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1052.892113] ? __mutex_unlock_slowpath+0x75/0x770 [ 1052.894690] 1*4kB [ 1052.898406] alloc_pages_current+0x155/0x260 [ 1052.898422] ion_page_pool_alloc+0x118/0x1b0 [ 1052.898436] ion_system_heap_allocate+0x133/0x8c0 [ 1052.902397] (E) [ 1052.907230] ? ion_alloc+0x187/0x810 [ 1052.907241] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1052.907252] ? ion_system_contig_heap_create+0x130/0x130 [ 1052.907266] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1052.912086] 1*8kB [ 1052.914140] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1052.918133] (E) [ 1052.922929] ion_alloc+0x204/0x810 [ 1052.928393] 4*16kB [ 1052.933197] ? ion_dma_buf_release+0x40/0x40 [ 1052.935318] (UME) [ 1052.939840] ? __might_fault+0x177/0x1b0 [ 1052.939854] ion_ioctl+0xea/0x1f0 [ 1052.939865] ? ion_query_heaps+0x360/0x360 [ 1052.939878] ? ion_query_heaps+0x360/0x360 [ 1052.944296] 4*32kB [ 1052.949323] do_vfs_ioctl+0x75a/0xff0 [ 1052.949336] ? ioctl_preallocate+0x1a0/0x1a0 [ 1052.949345] ? lock_downgrade+0x740/0x740 [ 1052.949359] ? __fget+0x225/0x360 [ 1052.951327] (UME) [ 1052.955659] ? do_vfs_ioctl+0xff0/0xff0 [ 1052.961210] 4*64kB [ 1052.966774] ? security_file_ioctl+0x83/0xb0 [ 1052.966785] SyS_ioctl+0x7f/0xb0 [ 1052.966797] ? do_vfs_ioctl+0xff0/0xff0 [ 1052.971887] (UME) [ 1052.974025] do_syscall_64+0x1d5/0x640 [ 1052.978887] 1*128kB [ 1052.980821] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1052.984791] (E) [ 1052.987285] RIP: 0033:0x465ef9 [ 1052.987290] RSP: 002b:00007fd7ebaaf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1052.987298] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465ef9 [ 1052.987303] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1052.987308] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1052.987313] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1052.987319] R13: 00007ffc90d553bf R14: 00007fd7ebaaf300 R15: 0000000000022000 [ 1052.994569] Mem-Info: [ 1052.998004] 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11084kB [ 1052.998044] Node 0 DMA32: 3500*4kB (UME) 5538*8kB (UME) 6403*16kB (UME) 131*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB [ 1053.002796] active_anon:14985 inactive_anon:25025 isolated_anon:0 [ 1053.002796] active_file:58 inactive_file:156 isolated_file:15 [ 1053.002796] unevictable:0 dirty:19 writeback:0 unstable:0 [ 1053.002796] slab_reclaimable:12937 slab_unreclaimable:115058 [ 1053.002796] mapped:52796 shmem:25365 pagetables:2206 bounce:0 [ 1053.002796] free:57718 free_pcp:371 free_cma:0 [ 1053.005909] 0*2048kB [ 1053.015004] Node 0 active_anon:58692kB inactive_anon:74708kB active_file:116kB inactive_file:836kB unevictable:0kB isolated(anon):0kB isolated(file):60kB mapped:159356kB dirty:12kB writeback:12kB shmem:75868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1053.016984] 0*4096kB [ 1053.022166] Node 1 active_anon:1248kB inactive_anon:25392kB active_file:104kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51932kB dirty:64kB writeback:0kB shmem:25592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1053.025487] = 164944kB [ 1053.034381] Node 0 [ 1053.035182] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB [ 1053.037958] DMA free:11084kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:92kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1053.056389] 0*512kB [ 1053.062286] lowmem_reserve[]: [ 1053.063358] 0*1024kB [ 1053.065805] 0 [ 1053.076386] 0*2048kB [ 1053.100662] 2717 [ 1053.166399] 0*4096kB [ 1053.170695] 2718 [ 1053.172513] = 0kB [ 1053.200851] 2718 [ 1053.286418] Node 1 [ 1053.288004] 2718 [ 1053.288858] Normal: [ 1053.293342] 151*4kB (UM) 132*8kB (UM) 139*16kB (UM) 96*32kB (UM) 54*64kB (UM) 31*128kB (UM) 19*256kB (UM) 8*512kB (UM) 5*1024kB (U) 3*2048kB (U) 5*4096kB (U) = 55084kB [ 1053.293428] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1053.293434] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1053.293440] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1053.293446] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1053.293450] 26229 total pagecache pages [ 1053.293460] 0 pages in swap cache [ 1053.293465] Swap cache stats: add 0, delete 0, find 0/0 [ 1053.293469] Free swap = 0kB [ 1053.293472] Total swap = 0kB [ 1053.293479] 2097051 pages RAM [ 1053.293486] 0 pages HighMem/MovableOnly [ 1053.297310] Node 0 [ 1053.352927] 363840 pages reserved [ 1053.364720] DMA32 free:36320kB min:36200kB low:45248kB high:54296kB active_anon:58700kB inactive_anon:74616kB active_file:1368kB inactive_file:1360kB unevictable:0kB writepending:24kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9280kB pagetables:8328kB bounce:0kB free_pcp:732kB local_pcp:0kB free_cma:0kB [ 1053.386400] 0 pages cma reserved [ 1053.387374] lowmem_reserve[]: 0 0 0 0 0 [ 1053.424373] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1053.457674] lowmem_reserve[]: 0 0 0 0 0 [ 1053.461722] Node 1 Normal free:53692kB min:53696kB low:67120kB high:80544kB active_anon:1248kB inactive_anon:25392kB active_file:48kB inactive_file:40kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:496kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1053.711266] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1053.727385] lowmem_reserve[]: 0 0 0 0 0 [ 1053.731589] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 4*16kB (UME) 3*32kB (ME) 4*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11064kB [ 1053.793034] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1053.823570] CPU: 0 PID: 7966 Comm: syz-fuzzer Not tainted 4.14.222-syzkaller #0 [ 1053.831142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1053.840500] Call Trace: [ 1053.843106] dump_stack+0x1b2/0x281 [ 1053.846758] dump_header+0x178/0x82f [ 1053.850510] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1053.855800] ? ___ratelimit+0x2cd/0x530 [ 1053.859783] oom_kill_process.cold+0x10/0xb18 [ 1053.864295] out_of_memory+0xe3e/0x1190 [ 1053.868280] ? oom_killer_disable+0x1c0/0x1c0 [ 1053.872772] ? mutex_trylock+0x152/0x1a0 [ 1053.879554] __alloc_pages_nodemask+0x23e1/0x2720 [ 1053.884447] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1053.889314] alloc_pages_current+0x155/0x260 [ 1053.893727] filemap_fault+0xea3/0x1980 [ 1053.897708] ext4_filemap_fault+0x84/0xb0 [ 1053.902384] __do_fault+0xfa/0x380 [ 1053.905936] __handle_mm_fault+0x2497/0x4620 [ 1053.910356] ? vm_insert_page+0x7c0/0x7c0 [ 1053.914518] handle_mm_fault+0x391/0x860 [ 1053.918617] __do_page_fault+0x549/0xad0 [ 1053.922696] ? spurious_fault+0x640/0x640 [ 1053.926844] ? do_page_fault+0x60/0x500 [ 1053.930837] ? page_fault+0x2f/0x50 [ 1053.934468] page_fault+0x45/0x50 [ 1053.938009] RIP: 17a1140:0x100420248bf [ 1053.941972] RSP: 1e800:00007fff85fc5cd0 EFLAGS: 00000003 [ 1053.957439] Node 0 DMA32: 1046*4kB (ME) 705*8kB (ME) 1428*16kB (UME) 131*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36864kB [ 1054.027973] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1054.045126] Node 1 Normal: 79*4kB (UM) 66*8kB (M) 53*16kB (M) 37*32kB (M) 31*64kB (UM) 29*128kB (UM) 19*256kB (M) 13*512kB (M) 7*1024kB (UM) 3*2048kB (U) 5*4096kB (U) = 53884kB [ 1054.094658] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1054.144499] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1054.191248] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1054.239337] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1054.292503] 25404 total pagecache pages [ 1054.312973] 0 pages in swap cache [ 1054.323553] Swap cache stats: add 0, delete 0, find 0/0 [ 1054.365156] Free swap = 0kB [ 1054.406408] Total swap = 0kB [ 1054.409557] 2097051 pages RAM [ 1054.412651] 0 pages HighMem/MovableOnly [ 1054.443282] 363840 pages reserved [ 1054.465893] 0 pages cma reserved [ 1054.480894] Mem-Info: [ 1054.483346] active_anon:14989 inactive_anon:25025 isolated_anon:0 [ 1054.483346] active_file:38 inactive_file:7 isolated_file:0 [ 1054.483346] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1054.483346] slab_reclaimable:12937 slab_unreclaimable:114984 [ 1054.483346] mapped:52699 shmem:25365 pagetables:2206 bounce:0 [ 1054.483346] free:25148 free_pcp:0 free_cma:0 [ 1054.733857] Node 0 active_anon:58708kB inactive_anon:74708kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158964kB dirty:0kB writeback:0kB shmem:75868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1054.907808] Node 1 active_anon:1248kB inactive_anon:25392kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51832kB dirty:0kB writeback:0kB shmem:25592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1055.094568] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1055.183603] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1055.191130] Node 0 DMA32 free:36056kB min:36200kB low:45248kB high:54296kB active_anon:58704kB inactive_anon:74616kB active_file:84kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9280kB pagetables:8328kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1055.233704] lowmem_reserve[]: 0 0 0 0 0 [ 1055.242239] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1055.281321] lowmem_reserve[]: 0 0 0 0 0 [ 1055.285448] Node 1 Normal free:53616kB min:53696kB low:67120kB high:80544kB active_anon:1248kB inactive_anon:25392kB active_file:12kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:496kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1055.325638] lowmem_reserve[]: 0 0 0 0 0 [ 1055.329698] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 4*16kB (UME) 3*32kB (ME) 4*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11064kB [ 1055.355462] Node 0 DMA32: 1046*4kB (ME) 706*8kB (UME) 1349*16kB (UME) 133*32kB (UME) 2*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36056kB [ 1055.383881] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1055.403692] Node 1 Normal: 78*4kB (M) 67*8kB (UM) 54*16kB (UM) 38*32kB (UM) 30*64kB (M) 29*128kB (UM) 20*256kB (UM) 14*512kB (UM) 6*1024kB (UM) 3*2048kB (U) 5*4096kB (U) = 53616kB [ 1055.424374] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1055.433298] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1055.446200] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1055.455233] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1055.468113] 25393 total pagecache pages [ 1055.472107] 0 pages in swap cache [ 1055.475549] Swap cache stats: add 0, delete 0, find 0/0 [ 1055.481013] Free swap = 0kB [ 1055.484036] Total swap = 0kB [ 1055.487288] 2097051 pages RAM [ 1055.490401] 0 pages HighMem/MovableOnly [ 1055.494369] 363840 pages reserved [ 1055.497884] 0 pages cma reserved [ 1055.501270] Out of memory (oom_kill_allocating_task): Kill process 7966 (syz-fuzzer) score 0 or sacrifice child [ 1055.512342] Killed process 3645 (syz-executor.4) total-vm:84904kB, anon-rss:64kB, file-rss:4kB, shmem-rss:0kB [ 1055.543273] oom_reaper: reaped process 3645 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1055.558691] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1055.749721] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1055.754891] CPU: 1 PID: 2564 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1055.763203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1055.772566] Call Trace: [ 1055.775174] dump_stack+0x1b2/0x281 [ 1055.778805] dump_header+0x178/0x82f [ 1055.782537] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1055.787638] ? ___ratelimit+0x2cd/0x530 [ 1055.791727] oom_kill_process.cold+0x10/0xb18 [ 1055.796408] out_of_memory+0xe3e/0x1190 [ 1055.800397] ? oom_killer_disable+0x1c0/0x1c0 [ 1055.804900] ? mutex_trylock+0x152/0x1a0 [ 1055.808966] __alloc_pages_nodemask+0x23e1/0x2720 [ 1055.813827] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1055.818694] alloc_pages_current+0x155/0x260 [ 1055.823112] filemap_fault+0xea3/0x1980 [ 1055.827103] ext4_filemap_fault+0x84/0xb0 [ 1055.831257] __do_fault+0xfa/0x380 [ 1055.834802] __handle_mm_fault+0x2497/0x4620 [ 1055.839212] ? vm_insert_page+0x7c0/0x7c0 [ 1055.843367] ? nanosleep_copyout+0x100/0x100 [ 1055.847805] handle_mm_fault+0x391/0x860 [ 1055.851869] __do_page_fault+0x549/0xad0 [ 1055.855947] ? spurious_fault+0x640/0x640 [ 1055.860210] ? do_page_fault+0x60/0x500 [ 1055.864192] ? page_fault+0x2f/0x50 [ 1055.867825] page_fault+0x45/0x50 [ 1055.871275] RIP: 1009c7:0x11 [ 1055.874377] RSP: 002e:00007ffc90d5567c EFLAGS: 00000032 [ 1056.055488] Mem-Info: [ 1056.064369] active_anon:14950 inactive_anon:25025 isolated_anon:0 [ 1056.064369] active_file:37 inactive_file:64 isolated_file:22 [ 1056.064369] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1056.064369] slab_reclaimable:12937 slab_unreclaimable:114708 [ 1056.064369] mapped:44020 shmem:25365 pagetables:2161 bounce:0 [ 1056.064369] free:25495 free_pcp:160 free_cma:0 [ 1056.100293] Node 0 active_anon:58568kB inactive_anon:74708kB active_file:172kB inactive_file:512kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124404kB dirty:0kB writeback:0kB shmem:75868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1056.131630] Node 1 active_anon:1232kB inactive_anon:25392kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51832kB dirty:0kB writeback:0kB shmem:25592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1056.160919] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1056.204395] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1056.209700] Node 0 DMA32 free:35884kB min:36200kB low:45248kB high:54296kB active_anon:58564kB inactive_anon:74616kB active_file:680kB inactive_file:1316kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9344kB pagetables:8148kB bounce:0kB free_pcp:376kB local_pcp:0kB free_cma:0kB [ 1056.239864] lowmem_reserve[]: 0 0 0 0 0 [ 1056.245107] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1056.272528] lowmem_reserve[]: 0 0 0 0 0 [ 1056.278500] Node 1 Normal free:53620kB min:53696kB low:67120kB high:80544kB active_anon:1232kB inactive_anon:25392kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:496kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 1056.309582] lowmem_reserve[]: 0 0 0 0 0 [ 1056.315840] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 4*16kB (UME) 3*32kB (ME) 4*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11064kB [ 1056.344118] Node 0 DMA32: 710*4kB (UME) 875*8kB (UME) 1348*16kB (UME) 137*32kB (UME) 2*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36176kB [ 1056.358941] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1056.370352] Node 1 Normal: 45*4kB (M) 66*8kB (UM) 53*16kB (UM) 41*32kB (UM) 31*64kB (UM) 29*128kB (UM) 20*256kB (UM) 14*512kB (UM) 6*1024kB (UM) 3*2048kB (U) 5*4096kB (U) = 53620kB [ 1056.387673] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1056.397106] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1056.406736] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1056.416704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1056.426281] 25520 total pagecache pages [ 1056.430940] 0 pages in swap cache [ 1056.434921] Swap cache stats: add 0, delete 0, find 0/0 [ 1056.440928] Free swap = 0kB [ 1056.444507] Total swap = 0kB [ 1056.448009] 2097051 pages RAM [ 1056.451186] 0 pages HighMem/MovableOnly [ 1056.455363] 363840 pages reserved [ 1056.473947] 0 pages cma reserved [ 1056.477520] Out of memory (oom_kill_allocating_task): Kill process 2564 (syz-executor.5) score 0 or sacrifice child [ 1056.491051] Killed process 4125 (syz-executor.5) total-vm:93760kB, anon-rss:168kB, file-rss:34820kB, shmem-rss:0kB [ 1056.512178] oom_reaper: reaped process 4125 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1056.669961] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 1056.697795] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1056.702903] CPU: 1 PID: 4627 Comm: systemd-udevd Not tainted 4.14.222-syzkaller #0 [ 1056.710624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1056.720002] Call Trace: [ 1056.722595] dump_stack+0x1b2/0x281 [ 1056.726225] dump_header+0x178/0x82f [ 1056.729943] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1056.736030] ? ___ratelimit+0x2cd/0x530 [ 1056.740351] oom_kill_process.cold+0x10/0xb18 [ 1056.745722] ? lock_downgrade+0x740/0x740 [ 1056.749882] out_of_memory+0x2dc/0x1190 [ 1056.753948] ? oom_killer_disable+0x1c0/0x1c0 [ 1056.758441] ? mutex_trylock+0x152/0x1a0 [ 1056.762525] __alloc_pages_nodemask+0x23e1/0x2720 [ 1056.767393] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1056.772283] alloc_pages_current+0x155/0x260 [ 1056.776514] syz-executor.5: page allocation failure: order:0 [ 1056.776856] filemap_fault+0xea3/0x1980 [ 1056.776874] ext4_filemap_fault+0x84/0xb0 [ 1056.782660] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1056.786624] __do_fault+0xfa/0x380 [ 1056.786634] __handle_mm_fault+0x2497/0x4620 [ 1056.786644] ? trace_hardirqs_on+0x10/0x10 [ 1056.786650] ? vm_insert_page+0x7c0/0x7c0 [ 1056.786657] ? lock_downgrade+0x740/0x740 [ 1056.786665] ? __fdget+0x167/0x1f0 [ 1056.786681] handle_mm_fault+0x391/0x860 [ 1056.786693] __do_page_fault+0x549/0xad0 [ 1056.786705] ? spurious_fault+0x640/0x640 [ 1056.786712] ? do_page_fault+0x60/0x500 [ 1056.786722] ? page_fault+0x2f/0x50 [ 1056.786730] page_fault+0x45/0x50 [ 1056.786738] RIP: f85d48e0:0x7ffef85d48b0 [ 1056.786750] RSP: 006d:0000000000000030 EFLAGS: 7ffef85d48ed [ 1056.813602] Mem-Info: [ 1056.814557] syz-executor.5: [ 1056.835435] active_anon:14921 inactive_anon:25025 isolated_anon:0 [ 1056.835435] active_file:28 inactive_file:7 isolated_file:0 [ 1056.835435] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1056.835435] slab_reclaimable:12937 slab_unreclaimable:114373 [ 1056.835435] mapped:43994 shmem:25365 pagetables:2161 bounce:0 [ 1056.835435] free:13761 free_pcp:0 free_cma:0 [ 1056.844739] page allocation failure: order:0 [ 1056.873654] Node 0 active_anon:58540kB inactive_anon:74708kB active_file:88kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124144kB dirty:0kB writeback:0kB shmem:75868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1056.903913] (null) [ 1056.937122] Node 1 active_anon:1144kB inactive_anon:25392kB active_file:24kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51832kB dirty:0kB writeback:0kB shmem:25592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1056.951087] syz-executor.5 cpuset= [ 1056.972984] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1057.012118] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1057.019357] Node 0 DMA32 free:18088kB min:36200kB low:45248kB high:54296kB active_anon:58540kB inactive_anon:74616kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9216kB pagetables:8148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1057.036027] / [ 1057.058730] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1057.066988] lowmem_reserve[]: 0 0 0 0 0 [ 1057.072425] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1057.074301] mems_allowed=0-1 [ 1057.113519] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1057.118239] lowmem_reserve[]: 0 0 0 0 0 [ 1057.122682] Node 1 Normal free:26540kB min:53696kB low:67120kB high:80544kB active_anon:1144kB inactive_anon:25392kB active_file:20kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:496kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1057.122719] CPU: 0 PID: 4133 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1057.157413] lowmem_reserve[]: [ 1057.158858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1057.158866] 0 [ 1057.161955] Call Trace: [ 1057.171365] 0 [ 1057.173124] dump_stack+0x1b2/0x281 [ 1057.175669] 0 [ 1057.177464] warn_alloc.cold+0x96/0x1cc [ 1057.177477] ? zone_watermark_ok_safe+0x220/0x220 [ 1057.177488] ? usleep_range+0x130/0x130 [ 1057.181093] 0 [ 1057.182880] ? try_to_free_pages+0x23f/0x6e0 [ 1057.186856] 0 [ 1057.191657] ? _find_next_bit+0xdb/0x100 [ 1057.197410] ? run_timer_softirq+0x5a0/0x5a0 [ 1057.197427] __alloc_pages_nodemask+0x2127/0x2720 [ 1057.197447] ? lock_acquire+0x170/0x3f0 [ 1057.201838] Node 0 [ 1057.203632] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1057.207702] DMA: [ 1057.212147] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1057.217005] 3*4kB [ 1057.220941] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1057.223145] (UME) [ 1057.227990] alloc_pages_current+0x155/0x260 [ 1057.228007] ion_page_pool_alloc+0x118/0x1b0 [ 1057.228021] ion_system_heap_allocate+0x133/0x8c0 [ 1057.230083] 2*8kB [ 1057.234572] ? ion_alloc+0x187/0x810 [ 1057.236725] (UE) [ 1057.242151] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1057.244278] 3*16kB [ 1057.248678] ? ion_system_contig_heap_create+0x130/0x130 [ 1057.248689] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1057.248700] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1057.248714] ion_alloc+0x204/0x810 [ 1057.253229] (ME) [ 1057.258081] ? ion_dma_buf_release+0x40/0x40 [ 1057.258094] ? __might_fault+0x177/0x1b0 [ 1057.258111] ion_ioctl+0xea/0x1f0 [ 1057.260247] 4*32kB [ 1057.263952] ? ion_query_heaps+0x360/0x360 [ 1057.265993] (UME) [ 1057.271443] ? ion_query_heaps+0x360/0x360 [ 1057.271454] do_vfs_ioctl+0x75a/0xff0 [ 1057.271466] ? ioctl_preallocate+0x1a0/0x1a0 [ 1057.271475] ? lock_downgrade+0x740/0x740 [ 1057.271488] ? __fget+0x225/0x360 [ 1057.273712] 2*64kB [ 1057.279149] ? do_vfs_ioctl+0xff0/0xff0 [ 1057.279161] ? security_file_ioctl+0x83/0xb0 [ 1057.279172] SyS_ioctl+0x7f/0xb0 [ 1057.279181] ? do_vfs_ioctl+0xff0/0xff0 [ 1057.284271] (ME) [ 1057.289105] do_syscall_64+0x1d5/0x640 [ 1057.289122] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1057.289132] RIP: 0033:0x465ef9 [ 1057.289139] RSP: 002b:00007fd7ebaaf188 EFLAGS: 00000246 [ 1057.292675] 1*128kB [ 1057.294727] ORIG_RAX: 0000000000000010 [ 1057.294735] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465ef9 [ 1057.299178] (E) [ 1057.303182] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1057.306666] 3*256kB [ 1057.308859] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1057.308867] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1057.313087] (UME) [ 1057.315230] R13: 00007ffc90d553bf R14: 00007fd7ebaaf300 R15: 0000000000022000 [ 1057.319517] 3*512kB [ 1057.332117] CPU: 0 PID: 4125 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1057.361594] (UME) [ 1057.364506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1057.369184] 2*1024kB [ 1057.373038] Call Trace: [ 1057.375397] (ME) [ 1057.379412] dump_stack+0x1b2/0x281 [ 1057.379426] warn_alloc.cold+0x96/0x1cc [ 1057.379438] ? zone_watermark_ok_safe+0x220/0x220 [ 1057.379447] ? usleep_range+0x130/0x130 [ 1057.379459] ? try_to_free_pages+0x23f/0x6e0 [ 1057.386798] 1*2048kB [ 1057.388730] ? _find_next_bit+0xdb/0x100 [ 1057.395979] (E) [ 1057.398311] ? run_timer_softirq+0x5a0/0x5a0 [ 1057.398329] __alloc_pages_nodemask+0x2127/0x2720 [ 1057.398346] ? lock_acquire+0x170/0x3f0 [ 1057.398361] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1057.398376] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1057.406468] 1*4096kB [ 1057.413713] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1057.415841] (U) [ 1057.423129] ? retint_kernel+0x2d/0x2d [ 1057.423150] alloc_pages_current+0x155/0x260 [ 1057.423167] ion_page_pool_alloc+0x118/0x1b0 [ 1057.423179] ion_system_heap_allocate+0x133/0x8c0 [ 1057.425491] = 10956kB [ 1057.433451] ? ion_alloc+0x187/0x810 [ 1057.433462] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1057.433471] ? ion_system_contig_heap_create+0x130/0x130 [ 1057.433482] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1057.433495] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1057.435639] Node 0 [ 1057.445012] ion_alloc+0x204/0x810 [ 1057.445027] ? ion_dma_buf_release+0x40/0x40 [ 1057.445040] ? __might_fault+0x177/0x1b0 [ 1057.445052] ion_ioctl+0xea/0x1f0 [ 1057.447471] DMA32: [ 1057.450023] ? ion_query_heaps+0x360/0x360 [ 1057.452057] 1050*4kB [ 1057.455674] ? ion_query_heaps+0x360/0x360 [ 1057.459665] (ME) [ 1057.464461] do_vfs_ioctl+0x75a/0xff0 [ 1057.468446] 706*8kB [ 1057.472819] ? ioctl_preallocate+0x1a0/0x1a0 [ 1057.475209] (UME) [ 1057.479434] ? lock_downgrade+0x740/0x740 [ 1057.479447] ? __fget+0x225/0x360 [ 1057.479457] ? do_vfs_ioctl+0xff0/0xff0 [ 1057.479468] ? security_file_ioctl+0x83/0xb0 [ 1057.479478] SyS_ioctl+0x7f/0xb0 [ 1057.481436] 215*16kB [ 1057.485829] ? do_vfs_ioctl+0xff0/0xff0 [ 1057.490802] (UME) [ 1057.494738] do_syscall_64+0x1d5/0x640 [ 1057.499701] 138*32kB [ 1057.504161] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1057.506570] (UME) [ 1057.512018] RIP: 0033:0x465ef9 [ 1057.513971] 2*64kB [ 1057.517852] RSP: 002b:00007fd7ebad0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1057.517862] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1057.517867] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1057.517871] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1057.517876] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1057.517881] R13: 00007ffc90d553bf R14: 00007fd7ebad0300 R15: 0000000000022000 [ 1057.524891] warn_alloc_show_mem: 2 callbacks suppressed [ 1057.524895] Mem-Info: [ 1057.560034] (U) [ 1057.570623] active_anon:14921 inactive_anon:25025 isolated_anon:0 [ 1057.570623] active_file:11 inactive_file:17 isolated_file:0 [ 1057.570623] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1057.570623] slab_reclaimable:12937 slab_unreclaimable:114373 [ 1057.570623] mapped:43995 shmem:25365 pagetables:2161 bounce:0 [ 1057.570623] free:13896 free_pcp:0 free_cma:0 [ 1057.591664] 2*128kB [ 1057.602371] Node 0 active_anon:58540kB inactive_anon:74708kB active_file:24kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124148kB dirty:0kB writeback:0kB shmem:75868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1057.621094] (U) [ 1057.633174] Node 1 active_anon:1144kB inactive_anon:25392kB active_file:20kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51832kB dirty:0kB writeback:0kB shmem:25592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1057.633181] Node 0 [ 1057.795591] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18088kB [ 1057.886487] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1057.935236] Node 1 Normal: 129*4kB (UM) 66*8kB (UM) 53*16kB (UM) 39*32kB (UM) 3233*64kB (UM) 374*128kB (UM) 48*256kB (UM) 32*512kB (UM) 4*1024kB (U) 2*2048kB (U) 0*4096kB = 294788kB [ 1057.987844] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1058.000806] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1058.015663] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1058.031903] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1058.047152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1058.053937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.059738] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1058.069398] Node 0 DMA32 free:46344kB min:36200kB low:45248kB high:54296kB active_anon:58540kB inactive_anon:74616kB active_file:732kB inactive_file:1788kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9216kB pagetables:8148kB bounce:0kB free_pcp:220kB local_pcp:124kB free_cma:0kB [ 1058.069421] lowmem_reserve[]: 0 0 0 0 0 [ 1058.069440] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1058.148595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1058.169426] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1058.186498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.217339] 26485 total pagecache pages [ 1058.218384] device bridge_slave_1 left promiscuous mode [ 1058.229089] 0 pages in swap cache [ 1058.233328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.241630] Swap cache stats: add 0, delete 0, find 0/0 [ 1058.258466] Free swap = 0kB [ 1058.276440] Total swap = 0kB [ 1058.279546] 2097051 pages RAM [ 1058.282638] 0 pages HighMem/MovableOnly [ 1058.290652] device bridge_slave_0 left promiscuous mode [ 1058.306419] 363840 pages reserved [ 1058.306620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.309931] 0 pages cma reserved [ 1058.337043] lowmem_reserve[]: 0 0 0 0 0 [ 1058.341106] Node 1 Normal free:26896kB min:53696kB low:67120kB high:80544kB active_anon:1344kB inactive_anon:25392kB active_file:128kB inactive_file:2528kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:644kB bounce:0kB free_pcp:240kB local_pcp:140kB free_cma:0kB [ 1058.377076] device veth1_macvtap left promiscuous mode [ 1058.382419] device veth0_macvtap left promiscuous mode [ 1058.387474] Out of memory: Kill process 19207 (syz-executor.3) score 1005 or sacrifice child [ 1058.410081] device veth1_vlan left promiscuous mode [ 1058.415193] device veth0_vlan left promiscuous mode [ 1058.416621] Killed process 19207 (syz-executor.3) total-vm:93232kB, anon-rss:2192kB, file-rss:34628kB, shmem-rss:0kB [ 1058.437187] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1058.461825] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1058.467107] CPU: 1 PID: 4133 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1058.474901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1058.484259] Call Trace: [ 1058.486864] dump_stack+0x1b2/0x281 [ 1058.490953] warn_alloc.cold+0x96/0x1cc [ 1058.494931] ? zone_watermark_ok_safe+0x220/0x220 [ 1058.499796] __alloc_pages_nodemask+0x2127/0x2720 [ 1058.504654] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1058.509674] ? lock_acquire+0x170/0x3f0 [ 1058.514963] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1058.519820] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1058.525283] ? __mutex_unlock_slowpath+0x75/0x770 [ 1058.530134] alloc_pages_current+0x155/0x260 [ 1058.534550] ion_page_pool_alloc+0x118/0x1b0 [ 1058.538989] ion_system_heap_allocate+0x133/0x8c0 [ 1058.543852] ? _raw_spin_unlock+0x29/0x40 [ 1058.548014] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1058.552952] ? ion_system_contig_heap_create+0x130/0x130 [ 1058.558412] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1058.563437] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1058.568293] ion_alloc+0x27a/0x810 [ 1058.571848] ? ion_dma_buf_release+0x40/0x40 [ 1058.574400] lowmem_reserve[]: 0 [ 1058.576268] ? __might_fault+0x177/0x1b0 [ 1058.576283] ion_ioctl+0xea/0x1f0 [ 1058.585769] 0 [ 1058.587102] ? ion_query_heaps+0x360/0x360 [ 1058.587115] ? ion_query_heaps+0x360/0x360 [ 1058.587125] do_vfs_ioctl+0x75a/0xff0 [ 1058.587136] ? ioctl_preallocate+0x1a0/0x1a0 [ 1058.587145] ? lock_downgrade+0x740/0x740 [ 1058.587158] ? __fget+0x225/0x360 [ 1058.587167] ? do_vfs_ioctl+0xff0/0xff0 [ 1058.587178] ? security_file_ioctl+0x83/0xb0 [ 1058.587189] SyS_ioctl+0x7f/0xb0 [ 1058.587196] ? do_vfs_ioctl+0xff0/0xff0 [ 1058.587217] do_syscall_64+0x1d5/0x640 [ 1058.587233] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1058.587242] RIP: 0033:0x465ef9 [ 1058.587247] RSP: 002b:00007fd7ebaaf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1058.603225] 0 [ 1058.605776] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465ef9 [ 1058.630327] 0 [ 1058.632996] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1058.652524] 0 [ 1058.658131] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1058.658137] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1058.658142] R13: 00007ffc90d553bf R14: 00007fd7ebaaf300 R15: 0000000000022000 [ 1058.688402] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1058.710734] Node 0 DMA: 3*4kB (UME) 2*8kB (UE) 3*16kB (ME) 4*32kB (UME) 2*64kB (ME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10956kB [ 1058.733097] Node 0 DMA32: 1080*4kB (UME) 793*8kB (UME) 175*16kB (UME) 21*32kB (UME) 0*64kB 1*128kB (U) 0*256kB 7*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17848kB [ 1058.734625] in:imklog cpuset= [ 1058.752688] Node 0 [ 1058.754080] / [ 1058.755817] Normal: [ 1058.758113] mems_allowed=0-1 [ 1058.758125] CPU: 1 PID: 3591 Comm: in:imklog Not tainted 4.14.222-syzkaller #0 [ 1058.758130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1058.758133] Call Trace: [ 1058.758152] dump_stack+0x1b2/0x281 [ 1058.758164] dump_header+0x178/0x82f [ 1058.759949] 0*4kB [ 1058.762293] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1058.765390] 0*8kB [ 1058.772745] ? ___ratelimit+0x2cd/0x530 [ 1058.772757] oom_kill_process.cold+0x10/0xb18 [ 1058.772774] out_of_memory+0xe3e/0x1190 [ 1058.772786] ? oom_killer_disable+0x1c0/0x1c0 [ 1058.772794] ? mutex_trylock+0x152/0x1a0 [ 1058.772804] __alloc_pages_nodemask+0x23e1/0x2720 [ 1058.772828] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1058.772849] alloc_pages_current+0x155/0x260 [ 1058.772865] filemap_fault+0xea3/0x1980 [ 1058.782432] warn_alloc_show_mem: 1 callbacks suppressed [ 1058.782436] Mem-Info: [ 1058.784921] ext4_filemap_fault+0x84/0xb0 [ 1058.788625] active_anon:14971 inactive_anon:25025 isolated_anon:0 [ 1058.788625] active_file:47 inactive_file:0 isolated_file:1 [ 1058.788625] unevictable:0 dirty:25 writeback:25 unstable:0 [ 1058.788625] slab_reclaimable:12937 slab_unreclaimable:114779 [ 1058.788625] mapped:44044 shmem:25365 pagetables:2198 bounce:0 [ 1058.788625] free:13849 free_pcp:30 free_cma:0 [ 1058.792247] __do_fault+0xfa/0x380 [ 1058.794396] Node 0 active_anon:58540kB inactive_anon:74708kB active_file:76kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124244kB dirty:0kB writeback:0kB shmem:75868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1058.800449] __handle_mm_fault+0x2497/0x4620 [ 1058.800459] ? vm_insert_page+0x7c0/0x7c0 [ 1058.800468] ? lock_downgrade+0x740/0x740 [ 1058.800485] handle_mm_fault+0x391/0x860 [ 1058.800496] __do_page_fault+0x549/0xad0 [ 1058.800505] ? spurious_fault+0x640/0x640 [ 1058.800513] ? do_page_fault+0x60/0x500 [ 1058.800522] ? page_fault+0x2f/0x50 [ 1058.800529] page_fault+0x45/0x50 [ 1058.800536] RIP: 1fa0:0x1f9f [ 1058.800540] RSP: 0000:0000564d39c339d0 EFLAGS: 7f1f183e0da0 [ 1058.804448] Mem-Info: [ 1058.806902] 0*16kB [ 1058.811325] active_anon:14971 inactive_anon:25025 isolated_anon:0 [ 1058.811325] active_file:47 inactive_file:0 isolated_file:1 [ 1058.811325] unevictable:0 dirty:25 writeback:25 unstable:0 [ 1058.811325] slab_reclaimable:12937 slab_unreclaimable:114779 [ 1058.811325] mapped:44044 shmem:25365 pagetables:2198 bounce:0 [ 1058.811325] free:13849 free_pcp:30 free_cma:0 [ 1058.815281] 0*32kB [ 1058.823693] Node 0 active_anon:58540kB inactive_anon:74708kB active_file:76kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124244kB dirty:0kB writeback:0kB shmem:75868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1058.823955] Node 1 active_anon:1344kB inactive_anon:25392kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:51932kB dirty:100kB writeback:100kB shmem:25592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1058.828905] Node 1 active_anon:1344kB inactive_anon:25392kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:51932kB dirty:100kB writeback:100kB shmem:25592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1058.828912] Node 0 [ 1058.834433] 0*64kB [ 1058.842123] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1058.842306] 0*128kB [ 1058.849697] lowmem_reserve[]: [ 1058.850167] Node 0 [ 1058.854314] 0 [ 1058.888188] 0*256kB [ 1058.908695] 2717 [ 1058.919264] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1058.932562] 2718 [ 1058.936044] 0*512kB [ 1058.942672] 2718 [ 1058.944280] 0*1024kB [ 1058.949578] 2718 [ 1058.951918] lowmem_reserve[]: [ 1058.959693] 0 [ 1058.966381] 0*2048kB [ 1058.967160] 2717 [ 1058.969324] 0*4096kB [ 1059.006089] 2718 [ 1059.033994] Node 0 [ 1059.066592] 2718 [ 1059.096417] syz-executor.0: [ 1059.125510] 2718 [ 1059.126687] syz-executor.1: [ 1059.134264] page allocation failure: order:0 [ 1059.136313] Node 0 [ 1059.168440] page allocation failure: order:0 [ 1059.178811] DMA32 free:17848kB min:36200kB low:45248kB high:54296kB active_anon:58548kB inactive_anon:74616kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9216kB pagetables:8152kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1059.189586] DMA32 free:17848kB min:36200kB low:45248kB high:54296kB active_anon:58548kB inactive_anon:74616kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9216kB pagetables:8152kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1059.199099] lowmem_reserve[]: [ 1059.207207] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1059.211807] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1059.212362] (null) [ 1059.249304] 0 [ 1059.270892] lowmem_reserve[]: [ 1059.285847] 0 [ 1059.286307] 0 [ 1059.288525] 0 [ 1059.296175] 0 0 0 0 [ 1059.301135] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1059.306867] (null) [ 1059.335614] lowmem_reserve[]: 0 0 0 0 0 [ 1059.339709] Node 1 Normal free:26588kB min:53696kB low:67120kB high:80544kB active_anon:1348kB inactive_anon:25392kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:628kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1059.340265] = 0kB [ 1059.372473] 0 0 [ 1059.374468] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1059.382531] syz-executor.0 cpuset= [ 1059.403015] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1059.411815] CPU: 0 PID: 4156 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 1059.419630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1059.426393] lowmem_reserve[]: [ 1059.429002] Call Trace: [ 1059.429013] 0 [ 1059.432128] dump_stack+0x1b2/0x281 [ 1059.434697] 0 [ 1059.436492] warn_alloc.cold+0x96/0x1cc [ 1059.436504] ? zone_watermark_ok_safe+0x220/0x220 [ 1059.436513] ? usleep_range+0x130/0x130 [ 1059.436523] ? try_to_free_pages+0x23f/0x6e0 [ 1059.436534] ? _find_next_bit+0xdb/0x100 [ 1059.440159] / [ 1059.442137] ? run_timer_softirq+0x5a0/0x5a0 [ 1059.446089] mems_allowed=0-1 [ 1059.450930] __alloc_pages_nodemask+0x2127/0x2720 [ 1059.450948] ? lock_acquire+0x170/0x3f0 [ 1059.450963] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1059.450977] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1059.454965] 0 [ 1059.459354] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1059.459375] alloc_pages_current+0x155/0x260 [ 1059.459393] ion_page_pool_alloc+0x118/0x1b0 [ 1059.463427] 0 [ 1059.465136] ion_system_heap_allocate+0x133/0x8c0 [ 1059.486383] 0 [ 1059.490840] ? ion_alloc+0x187/0x810 [ 1059.498054] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1059.498067] ? ion_system_contig_heap_create+0x130/0x130 [ 1059.498077] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1059.498089] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1059.498100] ion_alloc+0x204/0x810 [ 1059.516388] Node 0 [ 1059.519162] ? ion_dma_buf_release+0x40/0x40 [ 1059.524587] DMA: [ 1059.530208] ? __might_fault+0x177/0x1b0 [ 1059.530223] ion_ioctl+0xea/0x1f0 [ 1059.530235] ? ion_query_heaps+0x360/0x360 [ 1059.530247] ? ion_query_heaps+0x360/0x360 [ 1059.556403] 3*4kB [ 1059.556428] do_vfs_ioctl+0x75a/0xff0 [ 1059.559868] (UME) [ 1059.564097] ? ioctl_preallocate+0x1a0/0x1a0 [ 1059.576393] 2*8kB [ 1059.576465] ? lock_downgrade+0x740/0x740 [ 1059.580945] (UE) [ 1059.583089] ? __fget+0x225/0x360 [ 1059.593439] ? do_vfs_ioctl+0xff0/0xff0 [ 1059.597417] ? security_file_ioctl+0x83/0xb0 [ 1059.601839] SyS_ioctl+0x7f/0xb0 [ 1059.605200] ? do_vfs_ioctl+0xff0/0xff0 [ 1059.606389] 3*16kB (ME) [ 1059.609172] do_syscall_64+0x1d5/0x640 [ 1059.609189] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1059.611864] 4*32kB [ 1059.615751] RIP: 0033:0x465ef9 [ 1059.626345] RSP: 002b:00007f5842689188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1059.634054] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1059.636390] (UME) [ 1059.641495] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1059.641503] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1059.643648] 2*64kB [ 1059.650904] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1059.650910] R13: 00007ffc66db249f R14: 00007f5842689300 R15: 0000000000022000 [ 1059.654577] Node 1 [ 1059.676394] lowmem_reserve[]: 0 0 0 0 0 [ 1059.676418] Node 1 Normal free:26588kB min:53696kB low:67120kB high:80544kB active_anon:1348kB inactive_anon:25392kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:628kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1059.676447] lowmem_reserve[]: [ 1059.679134] CPU: 1 PID: 4159 Comm: syz-executor.0 Not tainted 4.14.222-syzkaller #0 [ 1059.683194] 0 [ 1059.711164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1059.711169] Call Trace: [ 1059.711191] dump_stack+0x1b2/0x281 [ 1059.711203] warn_alloc.cold+0x96/0x1cc [ 1059.711215] ? zone_watermark_ok_safe+0x220/0x220 [ 1059.711223] ? usleep_range+0x130/0x130 [ 1059.711233] ? queue_work_on+0x10d/0x1d0 [ 1059.711244] ? _find_next_bit+0xdb/0x100 [ 1059.711253] ? run_timer_softirq+0x5a0/0x5a0 [ 1059.711275] __alloc_pages_nodemask+0x2127/0x2720 [ 1059.711291] ? lock_acquire+0x170/0x3f0 [ 1059.715362] Normal: [ 1059.722178] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1059.722190] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1059.722209] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1059.722228] alloc_pages_current+0x155/0x260 [ 1059.722243] ion_page_pool_alloc+0x118/0x1b0 [ 1059.724047] 61*4kB [ 1059.733401] ion_system_heap_allocate+0x133/0x8c0 [ 1059.733412] ? ion_alloc+0x187/0x810 [ 1059.733421] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1059.733431] ? ion_system_contig_heap_create+0x130/0x130 [ 1059.733441] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1059.733451] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1059.733461] ion_alloc+0x204/0x810 [ 1059.733475] ? ion_dma_buf_release+0x40/0x40 [ 1059.733487] ? __might_fault+0x177/0x1b0 [ 1059.733499] ion_ioctl+0xea/0x1f0 [ 1059.738391] (UM) [ 1059.739779] ? ion_query_heaps+0x360/0x360 [ 1059.743730] 50*8kB [ 1059.748669] ? ion_query_heaps+0x360/0x360 [ 1059.748680] do_vfs_ioctl+0x75a/0xff0 [ 1059.748692] ? ioctl_preallocate+0x1a0/0x1a0 [ 1059.748701] ? lock_downgrade+0x740/0x740 [ 1059.748713] ? __fget+0x225/0x360 [ 1059.748722] ? do_vfs_ioctl+0xff0/0xff0 [ 1059.748734] ? security_file_ioctl+0x83/0xb0 [ 1059.748744] SyS_ioctl+0x7f/0xb0 [ 1059.752773] 0 [ 1059.756894] ? do_vfs_ioctl+0xff0/0xff0 [ 1059.756907] do_syscall_64+0x1d5/0x640 [ 1059.756922] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1059.756930] RIP: 0033:0x465ef9 [ 1059.756935] RSP: 002b:00007ff463c74188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1059.756944] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1059.756949] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1059.756954] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1059.756959] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1059.756964] R13: 00007ffd9671605f R14: 00007ff463c74300 R15: 0000000000022000 [ 1059.770370] (ME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10956kB [ 1059.770422] Node 0 [ 1059.777240] (M) [ 1059.794753] DMA32: [ 1059.798432] 0 [ 1059.801084] 1080*4kB [ 1059.803209] 0 [ 1059.821780] (UME) [ 1059.824246] 43*16kB [ 1059.835790] 793*8kB [ 1059.837369] (UM) [ 1059.846838] (UME) [ 1059.848563] 0 [ 1059.850534] 175*16kB [ 1059.870798] (UME) [ 1059.875794] 31*32kB [ 1059.889540] 21*32kB [ 1059.892943] Node 0 [ 1059.894830] (UME) [ 1059.898799] (M) 19*64kB (UM) 25*128kB (UM) 14*256kB (M) 16*512kB (UM) 4*1024kB (U) 2*2048kB (U) 0*4096kB = 26708kB [ 1059.898851] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1059.898858] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1059.898865] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1059.898872] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1059.898876] 25393 total pagecache pages [ 1059.898887] 0 pages in swap cache [ 1059.898891] Swap cache stats: add 0, delete 0, find 0/0 [ 1059.898894] Free swap = 0kB [ 1059.898897] Total swap = 0kB [ 1059.898904] 2097051 pages RAM [ 1059.898908] 0 pages HighMem/MovableOnly [ 1059.898911] 363840 pages reserved [ 1059.898914] 0 pages cma reserved [ 1059.916963] DMA: [ 1059.951508] Mem-Info: [ 1060.039525] 3*4kB [ 1060.052487] 0*64kB [ 1060.075777] (UME) [ 1060.085437] 1*128kB [ 1060.090817] 2*8kB (UE) 3*16kB (ME) 4*32kB (UME) 2*64kB (ME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10956kB [ 1060.110495] (U) [ 1060.146443] Node 0 DMA32: 522*4kB (UME) 758*8kB (UME) 209*16kB (UME) 25*32kB (UME) 1594*64kB (UH) 1*128kB (U) 0*256kB 7*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 118024kB [ 1060.156384] 0*256kB 7*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17848kB [ 1060.216505] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1060.220294] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1060.256446] Node 1 Normal: 2*4kB (UM) 0*8kB 0*16kB 7*32kB (UM) 263*64kB (UM) 38*128kB (UM) 45*256kB (UM) 25*512kB (UM) 7*1024kB (U) 0*2048kB 0*4096kB = 53416kB [ 1060.273000] device hsr_slave_1 left promiscuous mode [ 1060.283588] Node 1 Normal: 2*4kB (UM) 0*8kB 0*16kB 7*32kB (UM) 263*64kB (UM) 38*128kB (UM) 45*256kB (UM) 25*512kB (UM) 7*1024kB (U) 0*2048kB 0*4096kB = 53416kB [ 1060.299991] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1060.319739] device hsr_slave_0 left promiscuous mode [ 1060.328439] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1060.338815] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1060.354474] active_anon:14950 inactive_anon:25025 isolated_anon:0 [ 1060.354474] active_file:39 inactive_file:1131 isolated_file:0 [ 1060.354474] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1060.354474] slab_reclaimable:12937 slab_unreclaimable:115415 [ 1060.354474] mapped:44762 shmem:25365 pagetables:2158 bounce:0 [ 1060.354474] free:28497 free_pcp:411 free_cma:0 [ 1060.368025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1060.401258] team0 (unregistering): Port device team_slave_1 removed [ 1060.408414] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1060.436977] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1060.447009] team0 (unregistering): Port device team_slave_0 removed [ 1060.456382] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1060.473064] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1060.477001] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1060.488005] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1060.505618] 26670 total pagecache pages [ 1060.506414] Node 0 active_anon:58448kB inactive_anon:74708kB active_file:428kB inactive_file:2744kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125896kB dirty:0kB writeback:0kB shmem:75868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1060.511619] 0 pages in swap cache [ 1060.538495] 26670 total pagecache pages [ 1060.538506] 0 pages in swap cache [ 1060.538512] Swap cache stats: add 0, delete 0, find 0/0 [ 1060.538516] Free swap = 0kB [ 1060.538519] Total swap = 0kB [ 1060.538526] 2097051 pages RAM [ 1060.538530] 0 pages HighMem/MovableOnly [ 1060.538532] 363840 pages reserved [ 1060.538536] 0 pages cma reserved [ 1060.538544] Out of memory (oom_kill_allocating_task): Kill process 3591 (in:imklog) score 0 or sacrifice child [ 1060.538591] Killed process 3589 (rsyslogd) total-vm:254332kB, anon-rss:684kB, file-rss:0kB, shmem-rss:0kB [ 1060.547039] CPU: 1 PID: 4125 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1060.556593] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1060.558259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1060.620385] Call Trace: [ 1060.623003] dump_stack+0x1b2/0x281 [ 1060.626659] warn_alloc.cold+0x96/0x1cc [ 1060.630934] ? zone_watermark_ok_safe+0x220/0x220 [ 1060.635971] __alloc_pages_nodemask+0x2127/0x2720 [ 1060.640938] ? _raw_spin_unlock_irq+0x24/0x80 [ 1060.645761] ? lock_acquire+0x170/0x3f0 [ 1060.649770] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1060.654624] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1060.660179] ? __mutex_unlock_slowpath+0x75/0x770 [ 1060.665039] alloc_pages_current+0x155/0x260 [ 1060.669461] ion_page_pool_alloc+0x118/0x1b0 [ 1060.674398] ion_system_heap_allocate+0x133/0x8c0 [ 1060.679245] ? _raw_spin_unlock+0x29/0x40 [ 1060.683406] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1060.688366] ? ion_system_contig_heap_create+0x130/0x130 [ 1060.693827] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1060.698864] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1060.700786] Swap cache stats: add 0, delete 0, find 0/0 [ 1060.704555] ion_alloc+0x27a/0x810 [ 1060.713815] ? ion_dma_buf_release+0x40/0x40 [ 1060.718419] ? __might_fault+0x177/0x1b0 [ 1060.722929] ion_ioctl+0xea/0x1f0 [ 1060.726512] ? ion_query_heaps+0x360/0x360 [ 1060.731544] ? ion_query_heaps+0x360/0x360 [ 1060.735793] do_vfs_ioctl+0x75a/0xff0 [ 1060.739602] ? ioctl_preallocate+0x1a0/0x1a0 [ 1060.740220] Free swap = 0kB [ 1060.744101] ? lock_downgrade+0x740/0x740 [ 1060.753122] ? __fget+0x225/0x360 [ 1060.756701] ? do_vfs_ioctl+0xff0/0xff0 [ 1060.760187] Total swap = 0kB [ 1060.760722] ? security_file_ioctl+0x83/0xb0 [ 1060.763939] 2097051 pages RAM [ 1060.768339] SyS_ioctl+0x7f/0xb0 [ 1060.768348] ? do_vfs_ioctl+0xff0/0xff0 [ 1060.768359] do_syscall_64+0x1d5/0x640 [ 1060.768375] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1060.768384] RIP: 0033:0x465ef9 [ 1060.768389] RSP: 002b:00007fd7ebad0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1060.768402] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1060.807730] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1060.815349] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1060.816437] 0 pages HighMem/MovableOnly [ 1060.823062] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1060.835255] R13: 00007ffc90d553bf R14: 00007fd7ebad0300 R15: 0000000000022000 [ 1060.847512] oom_reaper: reaped process 3589 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1060.858312] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1060.885596] oom_reaper: reaped process 4159 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1060.936744] 363840 pages reserved [ 1060.940227] 0 pages cma reserved [ 1060.966641] Node 1 active_anon:1152kB inactive_anon:25392kB active_file:780kB inactive_file:560kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:53152kB dirty:0kB writeback:0kB shmem:25592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1061.007031] oom_reaper: reaped process 4156 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1061.021822] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1061.032911] Node 0 DMA free:11024kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1061.045993] bond0 (unregistering): Released all slaves [ 1061.075704] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1061.079254] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1061.099228] Node 0 DMA32 free:104468kB min:36200kB low:45248kB high:54296kB active_anon:55700kB inactive_anon:74608kB active_file:3892kB inactive_file:5604kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9088kB pagetables:8008kB bounce:0kB free_pcp:312kB local_pcp:160kB free_cma:0kB [ 1061.106445] CPU: 0 PID: 4156 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 1061.139703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1061.140643] lowmem_reserve[]: [ 1061.149148] Call Trace: [ 1061.149167] dump_stack+0x1b2/0x281 [ 1061.149181] warn_alloc.cold+0x96/0x1cc [ 1061.149193] ? zone_watermark_ok_safe+0x220/0x220 [ 1061.149214] __alloc_pages_nodemask+0x2127/0x2720 [ 1061.152385] 0 [ 1061.155060] ? _raw_spin_unlock_irq+0x24/0x80 [ 1061.160342] 0 [ 1061.164370] ? lock_acquire+0x170/0x3f0 [ 1061.164390] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1061.169744] 0 [ 1061.174806] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1061.176610] 0 [ 1061.181097] ? __mutex_unlock_slowpath+0x75/0x770 [ 1061.181114] alloc_pages_current+0x155/0x260 [ 1061.181154] ion_page_pool_alloc+0x118/0x1b0 [ 1061.182972] 0 [ 1061.187305] ion_system_heap_allocate+0x133/0x8c0 [ 1061.187317] ? _raw_spin_unlock+0x29/0x40 [ 1061.187327] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1061.193983] ? ion_system_contig_heap_create+0x130/0x130 [ 1061.193995] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1061.194008] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1061.200113] Node 0 [ 1061.201927] ion_alloc+0x27a/0x810 [ 1061.206794] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1061.211262] ? ion_dma_buf_release+0x40/0x40 [ 1061.211279] ? __might_fault+0x177/0x1b0 [ 1061.216314] lowmem_reserve[]: [ 1061.218092] ion_ioctl+0xea/0x1f0 [ 1061.218103] ? ion_query_heaps+0x360/0x360 [ 1061.218117] ? ion_query_heaps+0x360/0x360 [ 1061.223288] 0 [ 1061.227451] do_vfs_ioctl+0x75a/0xff0 [ 1061.227465] ? ioctl_preallocate+0x1a0/0x1a0 [ 1061.227478] ? lock_downgrade+0x740/0x740 [ 1061.227491] ? __fget+0x225/0x360 [ 1061.227500] ? do_vfs_ioctl+0xff0/0xff0 [ 1061.227515] ? security_file_ioctl+0x83/0xb0 [ 1061.232843] 0 [ 1061.238242] SyS_ioctl+0x7f/0xb0 [ 1061.238251] ? do_vfs_ioctl+0xff0/0xff0 [ 1061.238262] do_syscall_64+0x1d5/0x640 [ 1061.238279] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1061.238289] RIP: 0033:0x465ef9 [ 1061.243742] 0 [ 1061.248489] RSP: 002b:00007f5842689188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1061.248499] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1061.248504] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1061.248509] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1061.248513] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1061.248519] R13: 00007ffc66db249f R14: 00007f5842689300 R15: 0000000000022000 [ 1061.414573] 0 0 [ 1061.419709] Node 1 Normal free:26596kB min:53696kB low:67120kB high:80544kB active_anon:1124kB inactive_anon:25392kB active_file:564kB inactive_file:544kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:496kB bounce:0kB free_pcp:1056kB local_pcp:728kB free_cma:0kB [ 1061.452684] lowmem_reserve[]: 0 0 0 0 0 [ 1061.472785] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1061.491296] Node 0 DMA: 2*4kB (ME) 1*8kB (E) 4*16kB (UME) 4*32kB (UME) 3*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11024kB [ 1061.531841] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1061.546507] CPU: 1 PID: 7966 Comm: syz-fuzzer Not tainted 4.14.222-syzkaller #0 [ 1061.553980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1061.563444] Call Trace: [ 1061.566040] dump_stack+0x1b2/0x281 [ 1061.569674] dump_header+0x178/0x82f [ 1061.573388] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1061.578572] ? ___ratelimit+0x2cd/0x530 [ 1061.582546] oom_kill_process.cold+0x10/0xb18 [ 1061.587042] out_of_memory+0xe3e/0x1190 [ 1061.591044] ? oom_killer_disable+0x1c0/0x1c0 [ 1061.595629] ? mutex_trylock+0x152/0x1a0 [ 1061.599681] __alloc_pages_nodemask+0x23e1/0x2720 [ 1061.604532] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1061.609380] alloc_pages_current+0x155/0x260 [ 1061.613792] filemap_fault+0xea3/0x1980 [ 1061.617766] ext4_filemap_fault+0x84/0xb0 [ 1061.621907] __do_fault+0xfa/0x380 [ 1061.625434] __handle_mm_fault+0x2497/0x4620 [ 1061.629831] ? vm_insert_page+0x7c0/0x7c0 [ 1061.633967] ? __might_fault+0x177/0x1b0 [ 1061.638029] handle_mm_fault+0x391/0x860 [ 1061.642079] __do_page_fault+0x549/0xad0 [ 1061.646223] ? spurious_fault+0x640/0x640 [ 1061.650380] ? do_page_fault+0x60/0x500 [ 1061.654342] ? page_fault+0x2f/0x50 [ 1061.657959] page_fault+0x45/0x50 [ 1061.661404] RIP: 0800:0x100420248bf [ 1061.665017] RSP: 0199:000000c0003f7cb0 EFLAGS: ffffffffffffffff [ 1061.665559] Node 0 DMA32: 982*4kB (UMEH) 697*8kB (MEH) 180*16kB (MEH) 189*32kB (UME) 3*64kB (MH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18624kB [ 1061.716413] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1061.730428] warn_alloc_show_mem: 1 callbacks suppressed [ 1061.730432] Mem-Info: [ 1061.736407] Node 1 Normal: 60*4kB (M) 208*8kB (UM) 237*16kB (UM) 212*32kB (UM) 20*64kB (M) 24*128kB (UM) 14*256kB (UM) 10*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 26560kB [ 1061.745495] active_anon:14231 inactive_anon:25023 isolated_anon:12 [ 1061.745495] active_file:71 inactive_file:9 isolated_file:20 [ 1061.745495] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1061.745495] slab_reclaimable:12916 slab_unreclaimable:115690 [ 1061.745495] mapped:44129 shmem:25361 pagetables:2126 bounce:0 [ 1061.745495] free:13797 free_pcp:195 free_cma:0 [ 1061.766397] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1061.791549] Node 0 active_anon:55800kB inactive_anon:74700kB active_file:124kB inactive_file:0kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:124612kB dirty:12kB writeback:0kB shmem:75852kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1061.796921] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1061.833606] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1061.842498] Mem-Info: [ 1061.844936] active_anon:14231 inactive_anon:25023 isolated_anon:12 [ 1061.844936] active_file:71 inactive_file:9 isolated_file:20 [ 1061.844936] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1061.844936] slab_reclaimable:12916 slab_unreclaimable:115690 [ 1061.844936] mapped:44129 shmem:25361 pagetables:2126 bounce:0 [ 1061.844936] free:13793 free_pcp:0 free_cma:0 [ 1061.878386] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1061.892452] 25447 total pagecache pages [ 1061.896511] 0 pages in swap cache [ 1061.899968] Swap cache stats: add 0, delete 0, find 0/0 [ 1061.905421] Free swap = 0kB [ 1061.908493] Total swap = 0kB [ 1061.911523] 2097051 pages RAM [ 1061.914617] 0 pages HighMem/MovableOnly [ 1061.918813] Node 0 active_anon:55800kB inactive_anon:74700kB active_file:124kB inactive_file:0kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:124612kB dirty:12kB writeback:0kB shmem:75852kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1061.929569] Node 1 active_anon:1124kB inactive_anon:25392kB active_file:160kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):80kB mapped:51904kB dirty:4kB writeback:0kB shmem:25592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1061.946774] 363840 pages reserved [ 1061.946779] 0 pages cma reserved [ 1061.976687] Node 1 active_anon:1124kB inactive_anon:25392kB active_file:160kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):80kB mapped:51904kB dirty:4kB writeback:0kB shmem:25592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1062.086431] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1062.159476] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1062.176396] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1062.218265] Node 0 DMA32 free:79184kB min:36200kB low:45248kB high:54296kB active_anon:55740kB inactive_anon:74608kB active_file:368kB inactive_file:2264kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9024kB pagetables:8008kB bounce:0kB free_pcp:484kB local_pcp:312kB free_cma:0kB [ 1062.316379] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1062.349896] Node 0 DMA32 free:27712kB min:36200kB low:45248kB high:54296kB active_anon:55740kB inactive_anon:74608kB active_file:1196kB inactive_file:1080kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9056kB pagetables:8156kB bounce:0kB free_pcp:688kB local_pcp:32kB free_cma:0kB [ 1062.375194] lowmem_reserve[]: 0 0 0 0 0 [ 1062.397270] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1062.453340] lowmem_reserve[]: 0 0 0 0 0 [ 1062.459552] Node 1 Normal free:26444kB min:53696kB low:67120kB high:80544kB active_anon:1116kB inactive_anon:25392kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:496kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1062.496407] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1062.501146] lowmem_reserve[]: [ 1062.521839] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1062.529920] 0 0 0 0 0 [ 1062.532680] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1062.544405] CPU: 1 PID: 4159 Comm: syz-executor.0 Not tainted 4.14.222-syzkaller #0 [ 1062.566020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1062.575465] Call Trace: [ 1062.578057] dump_stack+0x1b2/0x281 [ 1062.581915] warn_alloc.cold+0x96/0x1cc [ 1062.585988] ? zone_watermark_ok_safe+0x220/0x220 [ 1062.591200] __alloc_pages_nodemask+0x2127/0x2720 [ 1062.596057] ? lock_acquire+0x170/0x3f0 [ 1062.600499] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1062.605988] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1062.612087] ? __mutex_unlock_slowpath+0x75/0x770 [ 1062.616494] syz-executor.5: page allocation failure: order:0 [ 1062.617019] alloc_pages_current+0x155/0x260 [ 1062.617035] ion_page_pool_alloc+0x118/0x1b0 [ 1062.622827] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1062.627513] ion_system_heap_allocate+0x133/0x8c0 [ 1062.627526] ? _raw_spin_unlock+0x29/0x40 [ 1062.627534] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1062.627543] ? ion_system_contig_heap_create+0x130/0x130 [ 1062.627554] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1062.627565] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1062.627577] ion_alloc+0x27a/0x810 [ 1062.638143] lowmem_reserve[]: [ 1062.640617] ? ion_dma_buf_release+0x40/0x40 [ 1062.645786] 0 [ 1062.649931] ? __might_fault+0x177/0x1b0 [ 1062.649945] ion_ioctl+0xea/0x1f0 [ 1062.649955] ? ion_query_heaps+0x360/0x360 [ 1062.649967] ? ion_query_heaps+0x360/0x360 [ 1062.649977] do_vfs_ioctl+0x75a/0xff0 [ 1062.649987] ? ioctl_preallocate+0x1a0/0x1a0 [ 1062.649996] ? lock_downgrade+0x740/0x740 [ 1062.650009] ? __fget+0x225/0x360 [ 1062.650019] ? do_vfs_ioctl+0xff0/0xff0 [ 1062.650030] ? security_file_ioctl+0x83/0xb0 [ 1062.650039] SyS_ioctl+0x7f/0xb0 [ 1062.650046] ? do_vfs_ioctl+0xff0/0xff0 [ 1062.650059] do_syscall_64+0x1d5/0x640 [ 1062.658597] (null) [ 1062.660448] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1062.665454] syz-executor.5 cpuset= [ 1062.670291] RIP: 0033:0x465ef9 [ 1062.670296] RSP: 002b:00007ff463c74188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1062.670305] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1062.670309] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1062.670314] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1062.670319] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1062.670323] R13: 00007ffd9671605f R14: 00007ff463c74300 R15: 0000000000022000 [ 1062.683746] lowmem_reserve[]: [ 1062.696414] 0 [ 1062.709811] 0 [ 1062.728542] 0 [ 1062.739779] syz-executor.5: [ 1062.756429] / [ 1062.765532] 0 [ 1062.775471] 0 [ 1062.787268] page allocation failure: order:0 [ 1062.808562] 0 [ 1062.816957] 0 0 0 [ 1062.817848] mems_allowed=0-1 [ 1062.819922] Node 0 DMA: [ 1062.823019] CPU: 0 PID: 4133 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1062.823026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1062.825675] 2*4kB [ 1062.833562] Call Trace: [ 1062.833586] dump_stack+0x1b2/0x281 [ 1062.833599] warn_alloc.cold+0x96/0x1cc [ 1062.833611] ? zone_watermark_ok_safe+0x220/0x220 [ 1062.833621] ? usleep_range+0x130/0x130 [ 1062.833633] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1062.843681] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1062.845774] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1062.848377] (null) [ 1062.851967] ? run_timer_softirq+0x5a0/0x5a0 [ 1062.855914] syz-executor.5 cpuset= [ 1062.860772] __alloc_pages_nodemask+0x2127/0x2720 [ 1062.860792] ? lock_acquire+0x170/0x3f0 [ 1062.860811] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1062.864790] (ME) [ 1062.870825] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1062.870842] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1062.870863] alloc_pages_current+0x155/0x260 [ 1062.880207] / [ 1062.885276] ion_page_pool_alloc+0x118/0x1b0 [ 1062.887835] mems_allowed=0-1 [ 1062.892749] ion_system_heap_allocate+0x133/0x8c0 [ 1062.897557] 2*8kB [ 1062.903586] ? _raw_spin_unlock+0x29/0x40 [ 1062.916373] (UE) [ 1062.920449] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1062.926248] 4*16kB [ 1062.931099] ? ion_system_contig_heap_create+0x130/0x130 [ 1062.931110] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1062.931122] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1062.931133] ion_alloc+0x27a/0x810 [ 1062.946380] (UME) [ 1062.947290] ? ion_dma_buf_release+0x40/0x40 [ 1062.952456] 4*32kB [ 1062.954519] ? __might_fault+0x177/0x1b0 [ 1062.966391] warn_alloc_show_mem: 1 callbacks suppressed [ 1062.966396] Mem-Info: [ 1062.968238] ion_ioctl+0xea/0x1f0 [ 1062.973244] active_anon:14264 inactive_anon:25023 isolated_anon:0 [ 1062.973244] active_file:40 inactive_file:5 isolated_file:0 [ 1062.973244] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1062.973244] slab_reclaimable:12916 slab_unreclaimable:115832 [ 1062.973244] mapped:44113 shmem:25361 pagetables:2163 bounce:0 [ 1062.973244] free:13782 free_pcp:0 free_cma:0 [ 1062.978157] ? ion_query_heaps+0x360/0x360 [ 1062.978169] ? ion_query_heaps+0x360/0x360 [ 1062.978180] do_vfs_ioctl+0x75a/0xff0 [ 1062.978191] ? ioctl_preallocate+0x1a0/0x1a0 [ 1062.978205] ? lock_downgrade+0x740/0x740 [ 1062.996384] (UME) [ 1062.999954] ? __fget+0x225/0x360 [ 1063.002359] 2*64kB [ 1063.005901] ? do_vfs_ioctl+0xff0/0xff0 [ 1063.039492] Node 0 active_anon:55940kB inactive_anon:74700kB active_file:156kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124620kB dirty:0kB writeback:0kB shmem:75852kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1063.043652] ? security_file_ioctl+0x83/0xb0 [ 1063.056407] Node 1 active_anon:1116kB inactive_anon:25392kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51832kB dirty:0kB writeback:0kB shmem:25592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1063.060225] SyS_ioctl+0x7f/0xb0 [ 1063.062369] Node 0 [ 1063.065869] ? do_vfs_ioctl+0xff0/0xff0 [ 1063.086422] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1063.100076] do_syscall_64+0x1d5/0x640 [ 1063.100094] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1063.100104] RIP: 0033:0x465ef9 [ 1063.100113] RSP: 002b:00007fd7ebaaf188 EFLAGS: 00000246 [ 1063.116395] (ME) [ 1063.131797] ORIG_RAX: 0000000000000010 [ 1063.131803] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465ef9 [ 1063.131808] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1063.131812] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1063.131817] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1063.131822] R13: 00007ffc90d553bf R14: 00007fd7ebaaf300 R15: 0000000000022000 [ 1063.148576] Node 1 [ 1063.186111] lowmem_reserve[]: [ 1063.228595] Normal free:26652kB min:53696kB low:67120kB high:80544kB active_anon:1116kB inactive_anon:25392kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:496kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1063.236663] CPU: 1 PID: 4125 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1063.269763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1063.279124] Call Trace: [ 1063.281716] dump_stack+0x1b2/0x281 [ 1063.285343] warn_alloc.cold+0x96/0x1cc [ 1063.289314] ? __kprobes_text_end+0x13fac0/0x1ef900 [ 1063.294324] ? zone_watermark_ok_safe+0x220/0x220 [ 1063.299171] ? usleep_range+0x130/0x130 [ 1063.303232] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1063.306404] lowmem_reserve[]: 0 [ 1063.308348] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1063.308359] ? run_timer_softirq+0x5a0/0x5a0 [ 1063.312203] 0 [ 1063.318007] __alloc_pages_nodemask+0x2127/0x2720 [ 1063.318025] ? lock_acquire+0x170/0x3f0 [ 1063.318039] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1063.318050] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1063.318066] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1063.318085] alloc_pages_current+0x155/0x260 [ 1063.318098] ion_page_pool_alloc+0x118/0x1b0 [ 1063.318109] ion_system_heap_allocate+0x133/0x8c0 [ 1063.318120] ? _raw_spin_unlock+0x29/0x40 [ 1063.318129] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1063.318139] ? ion_system_contig_heap_create+0x130/0x130 [ 1063.318153] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1063.347695] 0 [ 1063.347959] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1063.352356] 0 [ 1063.357405] ion_alloc+0x27a/0x810 [ 1063.357422] ? ion_dma_buf_release+0x40/0x40 [ 1063.357434] ? __might_fault+0x177/0x1b0 [ 1063.357445] ion_ioctl+0xea/0x1f0 [ 1063.357454] ? ion_query_heaps+0x360/0x360 [ 1063.357472] ? ion_query_heaps+0x360/0x360 [ 1063.357482] do_vfs_ioctl+0x75a/0xff0 [ 1063.357495] ? ioctl_preallocate+0x1a0/0x1a0 [ 1063.357504] ? lock_downgrade+0x740/0x740 [ 1063.357517] ? __fget+0x225/0x360 [ 1063.357526] ? do_vfs_ioctl+0xff0/0xff0 [ 1063.357540] ? security_file_ioctl+0x83/0xb0 [ 1063.378703] 0 [ 1063.382091] SyS_ioctl+0x7f/0xb0 [ 1063.388917] ? do_vfs_ioctl+0xff0/0xff0 [ 1063.388931] do_syscall_64+0x1d5/0x640 [ 1063.388948] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1063.388957] RIP: 0033:0x465ef9 [ 1063.388962] RSP: 002b:00007fd7ebad0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1063.388971] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1063.388976] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1063.388980] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1063.388985] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1063.388990] R13: 00007ffc90d553bf R14: 00007fd7ebad0300 R15: 0000000000022000 [ 1063.395263] 0 [ 1063.439575] Node 0 [ 1063.446542] 1*128kB [ 1063.459628] DMA: [ 1063.468414] (E) [ 1063.489886] 2*4kB [ 1063.498417] 3*256kB [ 1063.519564] (ME) 2*8kB (UE) 4*16kB (UME) 4*32kB (UME) 2*64kB (ME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10968kB [ 1063.525697] 2717 2718 2718 2718 [ 1063.546193] Node 0 DMA32 free:18276kB min:36200kB low:45248kB high:54296kB active_anon:55964kB inactive_anon:74608kB active_file:160kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:9056kB pagetables:8144kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1063.561806] Node 0 [ 1063.581248] (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10968kB [ 1063.591279] Node 0 DMA32: 1011*4kB (UME) 711*8kB (UME) 246*16kB (UME) 140*32kB (UME) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18276kB [ 1063.606382] DMA32: 1011*4kB (UME) 711*8kB (UME) 246*16kB (UME) 140*32kB (UME) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18276kB [ 1063.611735] Node 0 [ 1063.620285] lowmem_reserve[]: 0 0 0 0 0 [ 1063.632898] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1063.641710] Node 0 [ 1063.665086] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1063.683977] Node 1 Normal: 327*4kB (UM) 236*8kB (UM) 248*16kB (UM) 227*32kB (UM) 19*64kB (M) 22*128kB (M) 12*256kB (M) 10*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26652kB [ 1063.698614] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1063.726632] Node 1 Normal: 296*4kB (UM) 235*8kB (UM) 248*16kB (UM) 227*32kB (UM) 19*64kB (M) 22*128kB (M) 12*256kB (M) 10*512kB (UM) 92*1024kB (U) 0*2048kB 0*4096kB = 120728kB [ 1063.730670] lowmem_reserve[]: [ 1063.753696] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1063.776411] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1063.785543] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1063.787440] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1063.814441] 0 0 0 0 0 [ 1063.826402] Node 1 Normal free:330776kB min:53696kB low:67120kB high:80544kB active_anon:1116kB inactive_anon:25392kB active_file:96kB inactive_file:2608kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:496kB bounce:0kB free_pcp:280kB local_pcp:164kB free_cma:0kB [ 1063.846427] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1063.865796] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1063.896411] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1063.917074] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1063.925696] 26283 total pagecache pages [ 1063.926394] lowmem_reserve[]: 0 0 0 0 0 [ 1063.933722] 26283 total pagecache pages [ 1063.938063] Node 0 DMA: 2*4kB (ME) 2*8kB (UE) 4*16kB (UME) 4*32kB (UME) 2*64kB (ME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10968kB [ 1063.957111] 0 pages in swap cache [ 1063.960594] Swap cache stats: add 0, delete 0, find 0/0 [ 1063.965947] Free swap = 0kB [ 1063.966388] 0 pages in swap cache [ 1063.972440] Swap cache stats: add 0, delete 0, find 0/0 [ 1063.996398] Free swap = 0kB [ 1063.997464] Total swap = 0kB [ 1063.999609] Total swap = 0kB [ 1064.002775] 2097051 pages RAM [ 1064.005697] 2097051 pages RAM [ 1064.016574] Node 0 DMA32: 1011*4kB (UME) 1224*8kB (UME) 257*16kB (UME) 140*32kB (UME) 1398*64kB (U) 0*128kB 0*256kB 0*512kB 3*1024kB (U) 0*2048kB 0*4096kB = 114972kB [ 1064.037046] 0 pages HighMem/MovableOnly [ 1064.041045] 363840 pages reserved [ 1064.044491] 0 pages cma reserved [ 1064.056969] 0 pages HighMem/MovableOnly [ 1064.060968] 363840 pages reserved [ 1064.064435] 0 pages cma reserved [ 1064.068112] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1064.068959] warn_alloc_show_mem: 1 callbacks suppressed [ 1064.068963] Mem-Info: [ 1064.096449] Out of memory (oom_kill_allocating_task): Kill process 7966 (syz-fuzzer) score 0 or sacrifice child [ 1064.126778] Node 1 Normal: 238*4kB (UM) 2*8kB (UM) 113*16kB (UM) 197*32kB (UM) 11*64kB (UM) 19*128kB (M) 12*256kB (M) 10*512kB (UM) 630*1024kB (U) 8*2048kB (U) 0*4096kB = 681912kB [ 1064.143373] Killed process 7987 (syz-executor.3) total-vm:84904kB, anon-rss:60kB, file-rss:4kB, shmem-rss:0kB [ 1064.156436] active_anon:14270 inactive_anon:25023 isolated_anon:0 [ 1064.156436] active_file:42 inactive_file:888 isolated_file:0 [ 1064.156436] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1064.156436] slab_reclaimable:12895 slab_unreclaimable:115866 [ 1064.156436] mapped:44768 shmem:25361 pagetables:2160 bounce:0 [ 1064.156436] free:257551 free_pcp:109 free_cma:0 [ 1064.181696] oom_reaper: reaped process 7987 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1064.204339] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1064.238647] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1064.273970] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1064.501251] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1064.542318] 27002 total pagecache pages [ 1064.556431] 0 pages in swap cache [ 1064.559920] Swap cache stats: add 0, delete 0, find 0/0 [ 1064.565357] Free swap = 0kB [ 1064.586518] Total swap = 0kB [ 1064.589707] 2097051 pages RAM [ 1064.599816] 0 pages HighMem/MovableOnly [ 1064.600311] Node 0 active_anon:49504kB inactive_anon:74700kB active_file:664kB inactive_file:2268kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:91304kB dirty:0kB writeback:0kB shmem:75852kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1064.603843] 363840 pages reserved [ 1064.639842] 0 pages cma reserved [ 1064.773585] Node 1 active_anon:1116kB inactive_anon:25392kB active_file:204kB inactive_file:3300kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:54968kB dirty:0kB writeback:0kB shmem:25592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1064.876422] Node 0 DMA free:11096kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1064.944057] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1064.957759] Node 0 DMA32 free:358676kB min:36200kB low:45248kB high:54296kB active_anon:49404kB inactive_anon:74608kB active_file:1864kB inactive_file:4048kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7072kB pagetables:2076kB bounce:0kB free_pcp:420kB local_pcp:212kB free_cma:0kB [ 1065.057169] lowmem_reserve[]: 0 0 0 0 0 [ 1065.063889] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1065.136446] lowmem_reserve[]: 0 0 0 0 0 [ 1065.141327] Node 1 Normal free:943928kB min:53696kB low:67120kB high:80544kB active_anon:980kB inactive_anon:25392kB active_file:1404kB inactive_file:2136kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:496kB bounce:0kB free_pcp:444kB local_pcp:304kB free_cma:0kB [ 1065.198814] lowmem_reserve[]: 0 0 0 0 0 [ 1065.208340] Node 0 DMA: 2*4kB (ME) 2*8kB (UE) 4*16kB (UME) 4*32kB (UME) 4*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11096kB [ 1065.241986] Node 0 DMA32: 201*4kB (UME) 685*8kB (UME) 232*16kB (UME) 22*32kB (ME) 9*64kB (ME) 3*128kB (UE) 72*256kB (U) 44*512kB (U) 3*1024kB (U) 1*2048kB (M) 0*4096kB = 57740kB [ 1065.258806] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1065.286426] Node 1 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 1*32kB (M) 2233*64kB (UM) 496*128kB (UM) 105*256kB (UM) 35*512kB (UM) 639*1024kB (U) 8*2048kB (U) 0*4096kB = 921980kB [ 1065.306885] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1065.319771] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1065.330023] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1065.342430] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1065.352640] 27912 total pagecache pages [ 1065.360045] 0 pages in swap cache [ 1065.363705] Swap cache stats: add 0, delete 0, find 0/0 [ 1065.371224] Free swap = 0kB [ 1065.374378] Total swap = 0kB [ 1065.381697] 2097051 pages RAM [ 1065.385755] 0 pages HighMem/MovableOnly [ 1065.395316] 363840 pages reserved [ 1065.403451] 0 pages cma reserved [ 1065.562371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1065.579398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1065.616545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1065.634296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1065.642773] device bridge_slave_1 left promiscuous mode 18:04:24 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r0, 0x0, &(0x7f0000000140)) 18:04:24 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:24 executing program 5: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x7, 0x18}, 0xc) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@loopback, 0x0}, &(0x7f0000000240)=0x14) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00'}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={r2, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000500)={r4, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r3) sendmsg$IPVS_CMD_SET_DEST(r3, 0x0, 0x8884) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0)={r5, 0x0, 0x99da}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000660000000067000006009500a0e5dc3ce88500ad4a8aa7366b0000000000bca1d0104b633154c1620c3e8eab42dc533f98ee1ce906c58fa4e3c5c102e8f864b18d35fb44e2c3a532a7f9101f284e512d4b053d7fdec8d1f62e4d11b187d0ce716098ce4c1d9ef5e7c57aa10f84dfdecbbe9385a292dcdf073fd260e2887289636bfaf6b201d6e6511ee07db52273c80713d0b7c52aa05d0e6aa49c0cfe597a5000d881a6f848a05bc9be5f4c"], &(0x7f0000000480)='GPL\x00', 0x36, 0x16, &(0x7f00000004c0)=""/22, 0x100, 0x2, [], r1, 0x17, r3, 0x8, &(0x7f0000000500)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x6, 0x80, 0x3}, 0x10, 0x1bf56, r6}, 0x78) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x3}, &(0x7f0000000080)=0x8) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) 18:04:24 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x48003, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) getsockname(0xffffffffffffffff, &(0x7f00000001c0)=@can={0x1d, 0x0}, &(0x7f0000000240)=0x80) openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x600600, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000100)={@ipv4={[], [], @remote}, 0x0}, &(0x7f0000000140)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x4c, r5, 0x802, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x70, r5, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffeff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000850}, 0x800) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000800)={@empty, 0x0}, &(0x7f0000000840)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000a40)={0x608, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x10000}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0xfffffffffffffe16, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x211a9643}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x6c0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x467828c6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @mcast_rejoin_count={{0x0, 0x1, 'mcast_rejoin_count\x00'}, {}, {0x0, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x118, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x4, 0x63, 0x3f, 0x1f}, {0x2, 0x7f, 0x5, 0x6}, {0x40, 0x7, 0x8, 0xf72}, {0x5, 0x7, 0xe8}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x608}, 0x1, 0x0, 0x0, 0x81}, 0x4004) [ 1065.665478] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.689434] device bridge_slave_0 left promiscuous mode [ 1065.709004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.721434] device veth1_macvtap left promiscuous mode [ 1065.737020] device veth0_macvtap left promiscuous mode [ 1065.743360] device veth1_vlan left promiscuous mode [ 1065.751528] device veth0_vlan left promiscuous mode 18:04:24 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r0, 0x0, 0x0) 18:04:24 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r0, 0x0, 0x0) 18:04:24 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r0, 0x0, 0x0) 18:04:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x61ac, 0x8}, 0x8) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={r2, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000500)={r4, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r3) sendmsg$IPVS_CMD_SET_DEST(r3, 0x0, 0x8884) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3], 0x1, 0x80800}) accept(r3, &(0x7f00000001c0)=@ieee802154={0x24, @long}, &(0x7f0000000080)=0x80) [ 1066.189374] device hsr_slave_1 left promiscuous mode [ 1066.232576] device hsr_slave_0 left promiscuous mode [ 1066.315520] team0 (unregistering): Port device team_slave_1 removed [ 1066.344071] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 1066.359503] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1066.391828] team0 (unregistering): Port device team_slave_0 removed [ 1066.414218] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1066.421907] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1066.438348] CPU: 1 PID: 4191 Comm: rs:main Q:Reg Not tainted 4.14.222-syzkaller #0 [ 1066.446118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1066.455491] Call Trace: [ 1066.458077] dump_stack+0x1b2/0x281 [ 1066.461704] dump_header+0x178/0x82f [ 1066.465426] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1066.470524] ? ___ratelimit+0x2cd/0x530 [ 1066.474590] oom_kill_process.cold+0x10/0xb18 [ 1066.479084] out_of_memory+0xe3e/0x1190 [ 1066.483058] ? oom_killer_disable+0x1c0/0x1c0 [ 1066.487553] ? mutex_trylock+0x152/0x1a0 [ 1066.491612] __alloc_pages_nodemask+0x23e1/0x2720 [ 1066.496478] ? trace_hardirqs_on+0x10/0x10 [ 1066.500708] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1066.505542] ? __radix_tree_lookup+0x1b5/0x2e0 [ 1066.510131] alloc_pages_current+0x155/0x260 [ 1066.514545] pagecache_get_page+0x3f5/0xab0 [ 1066.518868] grab_cache_page_write_begin+0x63/0x90 [ 1066.523800] ext4_da_write_begin+0x249/0xe70 [ 1066.528217] ? ext4_write_begin+0x1260/0x1260 [ 1066.532713] generic_perform_write+0x1c9/0x420 [ 1066.537299] ? __mnt_drop_write_file+0x5f/0x90 [ 1066.541882] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 1066.546548] ? current_time+0xb0/0xb0 [ 1066.550347] ? ext4_file_write_iter+0x1cc/0xd20 [ 1066.555023] __generic_file_write_iter+0x227/0x590 [ 1066.559967] ext4_file_write_iter+0x276/0xd20 [ 1066.564456] ? aa_file_perm+0x304/0xab0 [ 1066.568425] ? ext4_file_read_iter+0x330/0x330 [ 1066.573043] ? trace_hardirqs_on+0x10/0x10 [ 1066.577279] ? iov_iter_init+0xa6/0x1c0 [ 1066.581273] __vfs_write+0x44c/0x630 [ 1066.584984] ? kernel_read+0x110/0x110 [ 1066.588878] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1066.595288] vfs_write+0x17f/0x4d0 [ 1066.598828] SyS_write+0xf2/0x210 [ 1066.602278] ? SyS_read+0x210/0x210 [ 1066.605990] ? do_syscall_64+0x4c/0x640 [ 1066.609966] ? SyS_read+0x210/0x210 [ 1066.613703] do_syscall_64+0x1d5/0x640 [ 1066.617596] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1066.622784] RIP: 0033:0x7fb2dc9081cd [ 1066.626494] RSP: 002b:00007fb2d9ec3590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1066.634217] RAX: ffffffffffffffda RBX: 00007fb2d00277a0 RCX: 00007fb2dc9081cd [ 1066.641479] RDX: 0000000000000069 RSI: 00007fb2d00277a0 RDI: 0000000000000009 [ 1066.648752] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1066.656011] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fb2d0027520 [ 1066.663360] R13: 00007fb2d9ec35b0 R14: 000055e605674480 R15: 0000000000000069 [ 1066.690069] CPU: 1 PID: 4210 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1066.698071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1066.707432] Call Trace: [ 1066.710027] dump_stack+0x1b2/0x281 [ 1066.713675] warn_alloc.cold+0x96/0x1cc [ 1066.717647] ? zone_watermark_ok_safe+0x220/0x220 [ 1066.722687] __alloc_pages_nodemask+0x2127/0x2720 [ 1066.727546] ? lock_acquire+0x170/0x3f0 [ 1066.731681] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1066.736808] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1066.742881] ? __mutex_unlock_slowpath+0x75/0x770 [ 1066.749119] alloc_pages_current+0x155/0x260 [ 1066.753632] ion_page_pool_alloc+0x118/0x1b0 [ 1066.758831] ion_system_heap_allocate+0x133/0x8c0 [ 1066.765079] ? ion_alloc+0x187/0x810 [ 1066.768792] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1066.774252] ? ion_system_contig_heap_create+0x130/0x130 [ 1066.779794] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1066.785532] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1066.791700] ion_alloc+0x204/0x810 [ 1066.795242] ? ion_dma_buf_release+0x40/0x40 [ 1066.800264] ? __might_fault+0x177/0x1b0 [ 1066.806594] ion_ioctl+0xea/0x1f0 [ 1066.810313] ? ion_query_heaps+0x360/0x360 [ 1066.815272] ? ion_query_heaps+0x360/0x360 [ 1066.819720] do_vfs_ioctl+0x75a/0xff0 [ 1066.823525] ? ioctl_preallocate+0x1a0/0x1a0 [ 1066.827934] ? lock_downgrade+0x740/0x740 [ 1066.832090] ? __fget+0x225/0x360 [ 1066.835625] ? do_vfs_ioctl+0xff0/0xff0 [ 1066.839726] ? security_file_ioctl+0x83/0xb0 [ 1066.845015] SyS_ioctl+0x7f/0xb0 [ 1066.848462] ? do_vfs_ioctl+0xff0/0xff0 [ 1066.852433] do_syscall_64+0x1d5/0x640 [ 1066.856327] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1066.861627] RIP: 0033:0x465ef9 [ 1066.864807] RSP: 002b:00007f785ae94188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1066.872511] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1066.879773] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1066.887034] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1066.894299] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1066.901577] R13: 00007ffc771f8d7f R14: 00007f785ae94300 R15: 0000000000022000 [ 1066.916405] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1066.928979] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1066.951025] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1066.952369] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1066.977069] CPU: 0 PID: 4196 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1066.984901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1066.995963] Call Trace: [ 1066.998555] dump_stack+0x1b2/0x281 [ 1067.002188] warn_alloc.cold+0x96/0x1cc [ 1067.006160] ? zone_watermark_ok_safe+0x220/0x220 [ 1067.011012] __alloc_pages_nodemask+0x2127/0x2720 [ 1067.015854] ? lock_acquire+0x170/0x3f0 [ 1067.019832] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1067.024694] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1067.030145] ? __mutex_unlock_slowpath+0x75/0x770 [ 1067.035106] alloc_pages_current+0x155/0x260 [ 1067.039534] ion_page_pool_alloc+0x118/0x1b0 [ 1067.043945] ion_system_heap_allocate+0x133/0x8c0 [ 1067.048785] ? ion_alloc+0x187/0x810 [ 1067.052842] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1067.058301] ? ion_system_contig_heap_create+0x130/0x130 [ 1067.063747] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1067.068761] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1067.073619] ion_alloc+0x204/0x810 [ 1067.077156] ? ion_dma_buf_release+0x40/0x40 [ 1067.081563] ? __might_fault+0x177/0x1b0 [ 1067.085618] ion_ioctl+0xea/0x1f0 [ 1067.089079] ? ion_query_heaps+0x360/0x360 [ 1067.093366] ? ion_query_heaps+0x360/0x360 [ 1067.097921] do_vfs_ioctl+0x75a/0xff0 [ 1067.101723] ? ioctl_preallocate+0x1a0/0x1a0 [ 1067.106423] ? lock_downgrade+0x740/0x740 [ 1067.111451] ? __fget+0x225/0x360 [ 1067.114904] ? do_vfs_ioctl+0xff0/0xff0 [ 1067.119251] ? security_file_ioctl+0x83/0xb0 [ 1067.124007] SyS_ioctl+0x7f/0xb0 [ 1067.127369] ? do_vfs_ioctl+0xff0/0xff0 [ 1067.133266] do_syscall_64+0x1d5/0x640 [ 1067.138028] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1067.143237] RIP: 0033:0x465ef9 [ 1067.146440] RSP: 002b:00007fd7ebad0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1067.154148] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1067.161604] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1067.170332] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1067.178871] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1067.186157] R13: 00007ffc90d553bf R14: 00007fd7ebad0300 R15: 0000000000022000 [ 1067.222108] Mem-Info: [ 1067.224620] active_anon:12725 inactive_anon:25022 isolated_anon:0 [ 1067.224620] active_file:11 inactive_file:12 isolated_file:27 [ 1067.224620] unevictable:0 dirty:2 writeback:1 unstable:0 [ 1067.224620] slab_reclaimable:12863 slab_unreclaimable:114603 [ 1067.224620] mapped:35434 shmem:25358 pagetables:691 bounce:0 [ 1067.224620] free:13837 free_pcp:75 free_cma:0 [ 1067.225178] bond0 (unregistering): Released all slaves [ 1067.261941] Node 0 active_anon:49504kB inactive_anon:74692kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:89876kB dirty:0kB writeback:0kB shmem:75836kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1067.276422] Mem-Info: [ 1067.295154] Node 1 active_anon:1396kB inactive_anon:25396kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):108kB mapped:51860kB dirty:8kB writeback:4kB shmem:25596kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1067.297757] active_anon:12725 inactive_anon:25022 isolated_anon:0 [ 1067.297757] active_file:11 inactive_file:12 isolated_file:1 [ 1067.297757] unevictable:0 dirty:2 writeback:1 unstable:0 [ 1067.297757] slab_reclaimable:12863 slab_unreclaimable:114603 [ 1067.297757] mapped:35434 shmem:25358 pagetables:691 bounce:0 [ 1067.297757] free:13862 free_pcp:38 free_cma:0 [ 1067.350634] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1067.364212] Node 0 active_anon:49504kB inactive_anon:74692kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:89876kB dirty:0kB writeback:0kB shmem:75836kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1067.404157] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1067.415956] Node 1 active_anon:1396kB inactive_anon:25396kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:51860kB dirty:8kB writeback:4kB shmem:25596kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1067.422709] Node 0 [ 1067.446841] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1067.452722] DMA32 free:17980kB min:36200kB low:45248kB high:54296kB active_anon:49504kB inactive_anon:74600kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7104kB pagetables:2120kB bounce:0kB free_pcp:380kB local_pcp:0kB free_cma:0kB [ 1067.477170] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1067.518659] Node 0 DMA32 free:17964kB min:36200kB low:45248kB high:54296kB active_anon:49504kB inactive_anon:74600kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7104kB pagetables:2120kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1067.526080] lowmem_reserve[]: [ 1067.552594] lowmem_reserve[]: [ 1067.553612] 0 [ 1067.556163] 0 [ 1067.559817] 0 0 0 0 [ 1067.559833] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1067.559849] lowmem_reserve[]: 0 0 0 0 0 [ 1067.559868] Node 1 Normal free:26696kB min:53696kB low:67120kB high:80544kB active_anon:1396kB inactive_anon:25396kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:644kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1067.559887] lowmem_reserve[]: 0 0 0 0 0 [ 1067.559908] Node 0 DMA: 3*4kB (UME) 2*8kB (UE) 3*16kB (ME) 4*32kB (UME) 2*64kB (ME) [ 1067.563406] 0 [ 1067.564885] 1*128kB [ 1067.567500] 0 [ 1067.597969] (E) [ 1067.616400] 0 [ 1067.633492] 3*256kB [ 1067.656431] 0 [ 1067.661789] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1067.664334] (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10956kB [ 1067.700964] Node 0 DMA32: 1046*4kB (ME) 868*8kB (UME) 270*16kB (UME) 40*32kB (UME) 10*64kB (ME) 2*128kB (E) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18136kB [ 1067.720128] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1067.726404] lowmem_reserve[]: 0 0 0 0 0 [ 1067.731762] Node 1 Normal: [ 1067.734883] Node 1 Normal free:26696kB min:53696kB low:67120kB high:80544kB active_anon:1396kB inactive_anon:25396kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:644kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1067.740412] 107*4kB (M) 71*8kB (M) 60*16kB (UM) 44*32kB (M) 46*64kB (M) 23*128kB (M) 17*256kB (M) 12*512kB (M) 3*1024kB (UM) 2*2048kB (U) 0*4096kB = 26916kB [ 1067.814230] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1067.823497] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1067.836603] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1067.846083] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1067.857811] lowmem_reserve[]: 0 0 0 0 0 [ 1067.861835] Node 0 DMA: 3*4kB (UME) 2*8kB (UE) 3*16kB (ME) 4*32kB (UME) 2*64kB (ME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10956kB [ 1067.880485] 25392 total pagecache pages [ 1067.884474] 0 pages in swap cache [ 1067.888235] Node 0 DMA32: 1046*4kB (ME) 868*8kB (UME) 270*16kB (UME) 40*32kB (UME) 10*64kB (ME) 2*128kB (E) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18136kB [ 1067.917008] Swap cache stats: add 0, delete 0, find 0/0 [ 1067.922400] Free swap = 0kB [ 1067.925408] Total swap = 0kB [ 1067.926379] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1067.934969] 2097051 pages RAM [ 1067.942396] 0 pages HighMem/MovableOnly [ 1067.946396] 363840 pages reserved [ 1067.949840] 0 pages cma reserved [ 1067.953198] Out of memory (oom_kill_allocating_task): Kill process 4191 (rs:main Q:Reg) score 0 or sacrifice child [ 1067.956411] Node 1 Normal: 106*4kB (M) 70*8kB (M) 59*16kB (UM) 43*32kB (M) 45*64kB (M) 24*128kB (M) 17*256kB (M) 12*512kB (M) 3*1024kB (UM) 2*2048kB (U) 0*4096kB = 26920kB [ 1067.964426] Killed process 4179 (rsyslogd) total-vm:254332kB, anon-rss:736kB, file-rss:0kB, shmem-rss:0kB [ 1067.990705] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1068.002466] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1068.012363] oom_reaper: reaped process 4179 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1068.031499] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1068.041168] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1068.053362] 25383 total pagecache pages [ 1068.058344] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1068.072803] 0 pages in swap cache [ 1068.077197] Swap cache stats: add 0, delete 0, find 0/0 [ 1068.082561] Free swap = 0kB [ 1068.085571] Total swap = 0kB [ 1068.090745] systemd-journal cpuset=/ mems_allowed=0-1 [ 1068.095959] CPU: 1 PID: 3195 Comm: systemd-journal Not tainted 4.14.222-syzkaller #0 [ 1068.103833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1068.113275] Call Trace: [ 1068.115870] dump_stack+0x1b2/0x281 [ 1068.119506] dump_header+0x178/0x82f [ 1068.123222] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1068.128334] ? ___ratelimit+0x2cd/0x530 [ 1068.132315] oom_kill_process.cold+0x10/0xb18 [ 1068.136821] out_of_memory+0xe3e/0x1190 [ 1068.140798] ? oom_killer_disable+0x1c0/0x1c0 [ 1068.145561] ? mutex_trylock+0x152/0x1a0 [ 1068.149639] __alloc_pages_nodemask+0x23e1/0x2720 [ 1068.154520] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1068.159378] ? cache_grow_begin+0x41/0x630 [ 1068.163623] cache_grow_begin+0x91/0x630 [ 1068.167690] ? cache_grow_begin+0x91/0x630 [ 1068.171937] fallback_alloc+0x207/0x2c0 [ 1068.175915] kmem_cache_alloc+0x1e5/0x3c0 [ 1068.180235] getname_flags+0xc8/0x550 [ 1068.184041] SyS_mkdirat+0x83/0x270 [ 1068.187674] ? SyS_mknod+0x30/0x30 [ 1068.191218] ? do_syscall_64+0x4c/0x640 [ 1068.195224] ? SyS_mkdirat+0x270/0x270 [ 1068.199142] do_syscall_64+0x1d5/0x640 [ 1068.203033] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1068.208220] RIP: 0033:0x7f6b52b63687 [ 1068.211938] RSP: 002b:00007ffe31c57bc8 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 1068.219669] RAX: ffffffffffffffda RBX: 00007ffe31c5ac30 RCX: 00007f6b52b63687 [ 1068.226969] RDX: 0000000000000000 RSI: 00000000000001ed RDI: 0000559483e0cd60 [ 1068.234767] RBP: 00007ffe31c57c00 R08: 0000559483dd33e5 R09: 0000000000000018 [ 1068.242049] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 1068.250567] R13: 0000000000000001 R14: 0000559483e0cd60 R15: 00007ffe31c58240 [ 1068.280255] 2097051 pages RAM [ 1068.283394] 0 pages HighMem/MovableOnly [ 1068.294919] 363840 pages reserved [ 1068.305496] 0 pages cma reserved [ 1068.309127] Mem-Info: [ 1068.324149] active_anon:12499 inactive_anon:25022 isolated_anon:0 [ 1068.324149] active_file:12 inactive_file:9 isolated_file:3 [ 1068.324149] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1068.324149] slab_reclaimable:12861 slab_unreclaimable:114062 [ 1068.324149] mapped:35427 shmem:25358 pagetables:691 bounce:0 [ 1068.324149] free:13961 free_pcp:31 free_cma:0 [ 1068.361057] Node 0 active_anon:49232kB inactive_anon:74692kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:89876kB dirty:0kB writeback:0kB shmem:75836kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1068.400402] Node 1 active_anon:764kB inactive_anon:25396kB active_file:24kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:51832kB dirty:0kB writeback:0kB shmem:25596kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1068.432621] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1068.459911] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1068.465006] Node 0 DMA32 free:19296kB min:36200kB low:45248kB high:54296kB active_anon:49232kB inactive_anon:74600kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7040kB pagetables:2120kB bounce:0kB free_pcp:20kB local_pcp:0kB free_cma:0kB [ 1068.493947] lowmem_reserve[]: 0 0 0 0 0 [ 1068.498005] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1068.531336] lowmem_reserve[]: 0 0 0 0 0 [ 1068.535373] Node 1 Normal free:26840kB min:53696kB low:67120kB high:80544kB active_anon:764kB inactive_anon:25396kB active_file:24kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:644kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1068.565072] lowmem_reserve[]: 0 0 0 0 0 [ 1068.569126] Node 0 DMA: 3*4kB (UME) 2*8kB (UE) 3*16kB (ME) 4*32kB (UME) 2*64kB (ME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10956kB [ 1068.586088] Node 0 DMA32: 1043*4kB (UME) 855*8kB (UME) 276*16kB (UME) 39*32kB (ME) 11*64kB (UME) 3*128kB (UE) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18020kB [ 1068.601356] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1068.612150] Node 1 Normal: 90*4kB (M) 61*8kB (M) 50*16kB (M) 34*32kB (UM) 31*64kB (UM) 22*128kB (UM) 18*256kB (UM) 11*512kB (M) 5*1024kB (M) 2*2048kB (U) 0*4096kB = 26992kB [ 1068.627966] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1068.636966] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1068.645614] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1068.658620] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1068.667261] 25383 total pagecache pages [ 1068.671264] 0 pages in swap cache [ 1068.674710] Swap cache stats: add 0, delete 0, find 0/0 [ 1068.682273] Free swap = 0kB [ 1068.685289] Total swap = 0kB [ 1068.688343] 2097051 pages RAM [ 1068.691541] 0 pages HighMem/MovableOnly [ 1068.701206] 363840 pages reserved [ 1068.704649] 0 pages cma reserved [ 1068.708050] Out of memory (oom_kill_allocating_task): Kill process 3195 (systemd-journal) score 0 or sacrifice child [ 1068.725420] Killed process 3195 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:2420kB [ 1068.737203] oom_reaper: reaped process 3195 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2420kB [ 1068.796559] syz-executor.5 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1068.818383] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1068.823546] CPU: 1 PID: 4196 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1068.831512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1068.840870] Call Trace: [ 1068.843486] dump_stack+0x1b2/0x281 [ 1068.847216] dump_header+0x178/0x82f [ 1068.850941] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1068.856140] ? ___ratelimit+0x2cd/0x530 [ 1068.860120] oom_kill_process.cold+0x10/0xb18 [ 1068.864642] out_of_memory+0xe3e/0x1190 [ 1068.868617] ? oom_killer_disable+0x1c0/0x1c0 [ 1068.873107] ? mutex_trylock+0x152/0x1a0 [ 1068.877184] __alloc_pages_nodemask+0x23e1/0x2720 [ 1068.882032] ? lock_acquire+0x170/0x3f0 [ 1068.886030] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1068.890894] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1068.895578] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1068.901037] alloc_pages_current+0x155/0x260 [ 1068.905444] ion_page_pool_alloc+0x118/0x1b0 [ 1068.909846] ion_system_heap_allocate+0x133/0x8c0 [ 1068.914685] ? ion_alloc+0x187/0x810 [ 1068.918405] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1068.923879] ? ion_system_contig_heap_create+0x130/0x130 [ 1068.929323] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1068.934335] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1068.939172] ion_alloc+0x204/0x810 [ 1068.942709] ? ion_dma_buf_release+0x40/0x40 [ 1068.947114] ? __might_fault+0x177/0x1b0 [ 1068.951173] ion_ioctl+0xea/0x1f0 [ 1068.954618] ? ion_query_heaps+0x360/0x360 [ 1068.958852] ? ion_query_heaps+0x360/0x360 [ 1068.963088] do_vfs_ioctl+0x75a/0xff0 [ 1068.966885] ? ioctl_preallocate+0x1a0/0x1a0 [ 1068.971291] ? lock_downgrade+0x740/0x740 [ 1068.975436] ? __fget+0x225/0x360 [ 1068.978885] ? do_vfs_ioctl+0xff0/0xff0 [ 1068.982854] ? security_file_ioctl+0x83/0xb0 [ 1068.987263] SyS_ioctl+0x7f/0xb0 [ 1068.990633] ? do_vfs_ioctl+0xff0/0xff0 [ 1068.994618] do_syscall_64+0x1d5/0x640 [ 1068.998508] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1069.003700] RIP: 0033:0x465ef9 [ 1069.006894] RSP: 002b:00007fd7ebad0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1069.014779] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1069.022077] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1069.029344] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1069.036619] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1069.044497] R13: 00007ffc90d553bf R14: 00007fd7ebad0300 R15: 0000000000022000 [ 1069.066404] Mem-Info: [ 1069.068865] active_anon:12379 inactive_anon:25022 isolated_anon:0 [ 1069.068865] active_file:8 inactive_file:13 isolated_file:3 [ 1069.068865] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1069.068865] slab_reclaimable:12861 slab_unreclaimable:113415 [ 1069.068865] mapped:35427 shmem:25358 pagetables:668 bounce:0 [ 1069.068865] free:13831 free_pcp:60 free_cma:0 [ 1069.105284] Node 0 active_anon:48752kB inactive_anon:74692kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:89876kB dirty:0kB writeback:0kB shmem:75836kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1069.133064] Node 1 active_anon:764kB inactive_anon:25396kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51832kB dirty:0kB writeback:0kB shmem:25596kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1069.160397] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1069.252495] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1069.266426] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1069.280332] Node 0 DMA32 free:18048kB min:36200kB low:45248kB high:54296kB active_anon:48752kB inactive_anon:74600kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7040kB pagetables:2048kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1069.300919] syz-executor.1 cpuset= [ 1069.324774] lowmem_reserve[]: [ 1069.326437] systemd-journal: page allocation failure: order:1, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1069.334388] 0 [ 1069.352081] / mems_allowed=0-1 [ 1069.357658] 0 0 0 0 [ 1069.360011] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1069.360783] CPU: 0 PID: 4156 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 1069.387849] lowmem_reserve[]: [ 1069.393383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1069.393394] 0 [ 1069.396478] Call Trace: [ 1069.396500] dump_stack+0x1b2/0x281 [ 1069.396514] warn_alloc.cold+0x96/0x1cc [ 1069.396528] ? zone_watermark_ok_safe+0x220/0x220 [ 1069.406010] 0 [ 1069.407818] ? usleep_range+0x130/0x130 [ 1069.407828] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1069.407840] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1069.407850] ? run_timer_softirq+0x5a0/0x5a0 [ 1069.407868] __alloc_pages_nodemask+0x2127/0x2720 [ 1069.410440] 0 [ 1069.414062] ? lock_acquire+0x170/0x3f0 [ 1069.418035] 0 [ 1069.422841] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1069.424611] 0 [ 1069.428679] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1069.428696] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1069.428716] alloc_pages_current+0x155/0x260 [ 1069.433813] Node 1 [ 1069.438843] ion_page_pool_alloc+0x118/0x1b0 [ 1069.438854] ion_system_heap_allocate+0x133/0x8c0 [ 1069.438866] ? _raw_spin_unlock+0x29/0x40 [ 1069.438879] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1069.443284] Normal free:26420kB min:53696kB low:67120kB high:80544kB active_anon:764kB inactive_anon:25396kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:596kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1069.448127] ? ion_system_contig_heap_create+0x130/0x130 [ 1069.448138] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1069.448150] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1069.448161] ion_alloc+0x27a/0x810 [ 1069.449946] lowmem_reserve[]: [ 1069.453927] ? ion_dma_buf_release+0x40/0x40 [ 1069.455699] 0 [ 1069.460527] ? __might_fault+0x177/0x1b0 [ 1069.460541] ion_ioctl+0xea/0x1f0 [ 1069.460552] ? ion_query_heaps+0x360/0x360 [ 1069.460565] ? ion_query_heaps+0x360/0x360 [ 1069.462358] 0 [ 1069.466841] do_vfs_ioctl+0x75a/0xff0 [ 1069.466854] ? ioctl_preallocate+0x1a0/0x1a0 [ 1069.466864] ? lock_downgrade+0x740/0x740 [ 1069.466877] ? __fget+0x225/0x360 [ 1069.472310] 0 [ 1069.476710] ? do_vfs_ioctl+0xff0/0xff0 [ 1069.476721] ? security_file_ioctl+0x83/0xb0 [ 1069.476731] SyS_ioctl+0x7f/0xb0 [ 1069.476743] ? do_vfs_ioctl+0xff0/0xff0 [ 1069.478962] 0 [ 1069.484495] do_syscall_64+0x1d5/0x640 [ 1069.489369] 0 [ 1069.493478] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1069.526054] RIP: 0033:0x465ef9 [ 1069.526060] RSP: 002b:00007f5842689188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1069.526070] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1069.526074] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1069.526079] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1069.526084] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1069.526094] R13: 00007ffc66db249f R14: 00007f5842689300 R15: 0000000000022000 [ 1069.531559] Node 0 [ 1069.542095] syz-executor.0: [ 1069.544934] DMA: [ 1069.551639] page allocation failure: order:0 [ 1069.569526] 3*4kB [ 1069.572715] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1069.576309] (UME) [ 1069.580872] (null) [ 1069.580879] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1069.580903] CPU: 0 PID: 4159 Comm: syz-executor.0 Not tainted 4.14.222-syzkaller #0 [ 1069.580909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1069.580916] Call Trace: [ 1069.596087] systemd-journal cpuset= [ 1069.600487] dump_stack+0x1b2/0x281 [ 1069.600501] warn_alloc.cold+0x96/0x1cc [ 1069.600513] ? zone_watermark_ok_safe+0x220/0x220 [ 1069.600523] ? usleep_range+0x130/0x130 [ 1069.600535] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1069.609800] / [ 1069.610359] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1069.614334] mems_allowed=0-1 [ 1069.616238] ? run_timer_softirq+0x5a0/0x5a0 [ 1069.621496] 2*8kB [ 1069.624651] __alloc_pages_nodemask+0x2127/0x2720 [ 1069.646380] (UE) [ 1069.649157] ? lock_acquire+0x170/0x3f0 [ 1069.666382] 3*16kB [ 1069.673662] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1069.675962] (ME) [ 1069.678989] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1069.679005] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1069.679023] alloc_pages_current+0x155/0x260 [ 1069.679037] ion_page_pool_alloc+0x118/0x1b0 [ 1069.696382] 4*32kB [ 1069.697466] ion_system_heap_allocate+0x133/0x8c0 [ 1069.699698] (UME) [ 1069.704799] ? _raw_spin_unlock+0x29/0x40 [ 1069.726386] 2*64kB [ 1069.729208] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1069.732921] (ME) [ 1069.737163] ? ion_system_contig_heap_create+0x130/0x130 [ 1069.737175] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1069.737194] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1069.737207] ion_alloc+0x27a/0x810 [ 1069.737221] ? ion_dma_buf_release+0x40/0x40 [ 1069.756384] 1*128kB [ 1069.760508] ? __might_fault+0x177/0x1b0 [ 1069.763751] (E) [ 1069.768185] ion_ioctl+0xea/0x1f0 [ 1069.768196] ? ion_query_heaps+0x360/0x360 [ 1069.768208] ? ion_query_heaps+0x360/0x360 [ 1069.768220] do_vfs_ioctl+0x75a/0xff0 [ 1069.768231] ? ioctl_preallocate+0x1a0/0x1a0 [ 1069.786389] 3*256kB [ 1069.789418] ? lock_downgrade+0x740/0x740 [ 1069.791842] (UME) [ 1069.796567] ? __fget+0x225/0x360 [ 1069.796577] ? do_vfs_ioctl+0xff0/0xff0 [ 1069.796587] ? security_file_ioctl+0x83/0xb0 [ 1069.796596] SyS_ioctl+0x7f/0xb0 [ 1069.796605] ? do_vfs_ioctl+0xff0/0xff0 [ 1069.796616] do_syscall_64+0x1d5/0x640 [ 1069.796632] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1069.796641] RIP: 0033:0x465ef9 [ 1069.796646] RSP: 002b:00007ff463c74188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1069.796656] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1069.796661] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1069.796672] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1069.796682] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1069.816388] 3*512kB [ 1069.816758] R13: 00007ffd9671605f R14: 00007ff463c74300 R15: 0000000000022000 [ 1069.819016] (UME) [ 1069.833012] warn_alloc_show_mem: 1 callbacks suppressed [ 1069.833017] Mem-Info: [ 1069.856954] CPU: 1 PID: 3195 Comm: systemd-journal Not tainted 4.14.222-syzkaller #0 [ 1069.860380] active_anon:12379 inactive_anon:25022 isolated_anon:0 [ 1069.860380] active_file:37 inactive_file:0 isolated_file:0 [ 1069.860380] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1069.860380] slab_reclaimable:12859 slab_unreclaimable:113394 [ 1069.860380] mapped:35427 shmem:25358 pagetables:661 bounce:0 [ 1069.860380] free:13856 free_pcp:0 free_cma:0 [ 1069.861905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1069.866321] Node 0 active_anon:48752kB inactive_anon:74692kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:89876kB dirty:0kB writeback:0kB shmem:75836kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1069.868618] Call Trace: [ 1069.872681] Node 1 active_anon:764kB inactive_anon:25396kB active_file:124kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51832kB dirty:0kB writeback:0kB shmem:25596kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1069.874637] dump_stack+0x1b2/0x281 [ 1069.880258] Node 0 [ 1069.882290] warn_alloc.cold+0x96/0x1cc [ 1069.886585] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1069.890295] ? zone_watermark_ok_safe+0x220/0x220 [ 1069.894697] lowmem_reserve[]: [ 1069.897016] ? usleep_range+0x130/0x130 [ 1069.897027] ? _find_next_bit+0xdb/0x100 [ 1069.897035] ? run_timer_softirq+0x5a0/0x5a0 [ 1069.897049] __alloc_pages_nodemask+0x2127/0x2720 [ 1069.897069] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1069.897088] ? cache_grow_begin+0x41/0x630 [ 1069.897097] cache_grow_begin+0x91/0x630 [ 1069.897105] ? cache_grow_begin+0x91/0x630 [ 1069.897114] fallback_alloc+0x207/0x2c0 [ 1069.897126] kmem_cache_alloc+0x1e5/0x3c0 [ 1069.903468] 0 [ 1069.906987] getname_flags+0xc8/0x550 [ 1069.906999] SyS_mkdirat+0x83/0x270 [ 1069.907007] ? SyS_mknod+0x30/0x30 [ 1069.907016] ? do_syscall_64+0x4c/0x640 [ 1069.907022] ? SyS_mkdirat+0x270/0x270 [ 1069.907029] do_syscall_64+0x1d5/0x640 [ 1069.907043] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1069.907055] RIP: 0033:0x7f6b52b63687 [ 1069.911042] 2717 [ 1069.915436] RSP: 002b:00007ffe31c57bc8 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 1069.921009] 2718 [ 1069.923804] RAX: ffffffffffffffda RBX: 00007ffe31c5ac30 RCX: 00007f6b52b63687 [ 1069.927742] 2718 [ 1069.932852] RDX: 0000000000000000 RSI: 00000000000001ed RDI: 0000559483e0cd60 [ 1069.932861] RBP: 00007ffe31c57c00 R08: 0000559483dd33e5 R09: 0000000000000018 [ 1069.936034] 2718 [ 1069.943724] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 1069.943730] R13: 0000000000000001 R14: 0000559483e0cd60 R15: 00007ffe31c58240 [ 1069.952122] 2*1024kB [ 1070.083213] (ME) [ 1070.480944] Node 0 DMA32 free:212612kB min:36200kB low:45248kB high:54296kB active_anon:48352kB inactive_anon:74600kB active_file:220kB inactive_file:3028kB unevictable:0kB writepending:4kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7104kB pagetables:2196kB bounce:0kB free_pcp:136kB local_pcp:620kB free_cma:0kB [ 1070.556753] lowmem_reserve[]: 0 0 0 0 0 [ 1070.560913] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1070.587608] 1*2048kB (E) 1*4096kB (U) = 10956kB [ 1070.601416] lowmem_reserve[]: 0 0 0 0 0 [ 1070.611141] Node 0 DMA32: 810*4kB (UE) 1301*8kB (UME) 816*16kB (UME) 564*32kB (UME) 2736*64kB (UME) 795*128kB (UME) 130*256kB (U) 11*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 362576kB [ 1070.617228] Node 1 Normal free:801860kB min:53696kB low:67120kB high:80544kB active_anon:1164kB inactive_anon:25396kB active_file:128kB inactive_file:8120kB unevictable:0kB writepending:36kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:596kB bounce:0kB free_pcp:320kB local_pcp:176kB free_cma:0kB [ 1070.654357] Node 0 [ 1070.682103] lowmem_reserve[]: 0 0 0 0 0 [ 1070.691962] Normal: [ 1070.693981] Node 0 DMA: 3*4kB (UME) 2*8kB (UE) 3*16kB (ME) 4*32kB (UME) 5*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11148kB [ 1070.704601] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1070.736506] Node 0 DMA32: 3173*4kB (UME) 1729*8kB (UME) 998*16kB (UME) 727*32kB (UME) 2914*64kB (UME) 811*128kB (UME) 252*256kB (U) 11*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 428252kB [ 1070.759712] Node 1 Normal: 241*4kB (UM) 95*8kB (UM) 139*16kB (UM) 137*32kB (UM) 2922*64kB (U) 817*128kB (U) 335*256kB (UM) 102*512kB (UM) 275*1024kB (UM) 72*2048kB (U) 1*4096kB (U) = 871052kB [ 1070.786476] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1070.805671] Node 1 Normal: 244*4kB (UM) 105*8kB (UM) 148*16kB (UM) 147*32kB (UM) 2946*64kB (U) 821*128kB (U) 335*256kB (UM) 102*512kB (UM) 275*1024kB (UM) 72*2048kB (U) 1*4096kB (U) = 873656kB [ 1070.817832] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1070.853763] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1070.872406] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1070.875676] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1070.896431] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1070.905413] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1070.914688] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1070.936397] 28577 total pagecache pages [ 1070.940755] 0 pages in swap cache [ 1070.944559] Swap cache stats: add 0, delete 0, find 0/0 [ 1070.950043] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1070.976442] Free swap = 0kB [ 1070.976446] 28577 total pagecache pages [ 1070.976457] 0 pages in swap cache [ 1070.979540] Total swap = 0kB [ 1070.983528] Swap cache stats: add 0, delete 0, find 0/0 [ 1070.991093] 2097051 pages RAM [ 1071.007033] Free swap = 0kB [ 1071.010571] Total swap = 0kB [ 1071.011611] 0 pages HighMem/MovableOnly [ 1071.013782] 2097051 pages RAM [ 1071.019376] 363840 pages reserved [ 1071.025165] 0 pages cma reserved [ 1071.040234] 0 pages HighMem/MovableOnly [ 1071.050637] 363840 pages reserved [ 1071.055325] 0 pages cma reserved [ 1071.059620] Out of memory (oom_kill_allocating_task): Kill process 4196 (syz-executor.5) score 0 or sacrifice child [ 1071.075220] Killed process 4196 (syz-executor.5) total-vm:93496kB, anon-rss:2204kB, file-rss:35640kB, shmem-rss:0kB [ 1071.100003] oom_reaper: reaped process 4196 (syz-executor.5), now anon-rss:0kB, file-rss:12kB, shmem-rss:0kB 18:04:29 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r1, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x6, 0x6, &(0x7f0000000480)=0x6}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000500)={r4, 0x4}, 0x8) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x40000, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000005c0)={r3, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x4}, 0x90) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r2) sendmsg$IPVS_CMD_SET_DEST(r2, 0x0, 0x8884) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00', 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00', r5) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) [ 1071.137955] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1071.153121] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1071.162440] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1071.203575] systemd[1]: Stopped Journal Service. [ 1071.248081] systemd[1]: Starting Journal Service... [ 1071.275181] systemd[1]: Stopped System Logging Service. [ 1071.312567] systemd[1]: Starting System Logging Service... 18:04:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x3, @null, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) [ 1071.608329] systemd[1]: Started System Logging Service. [ 1071.614312] systemd-journald[4224]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. 18:04:30 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r0, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000500)={r2, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r1) sendmsg$IPVS_CMD_SET_DEST(r1, 0x0, 0x8884) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x6, 0x3, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000080)=0x2) 18:04:30 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r0, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000500)={r2, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r1) sendmsg$IPVS_CMD_SET_DEST(r1, 0x0, 0x8884) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x6, 0x3, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000080)=0x2) [ 1072.065958] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1072.102703] IPVS: ftp: loaded support on port[0] = 21 [ 1072.408318] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1072.442957] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1072.486461] CPU: 1 PID: 4223 Comm: syz-executor.0 Not tainted 4.14.222-syzkaller #0 [ 1072.494284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1072.503646] Call Trace: [ 1072.506294] dump_stack+0x1b2/0x281 [ 1072.509933] warn_alloc.cold+0x96/0x1cc [ 1072.513923] ? zone_watermark_ok_safe+0x220/0x220 [ 1072.518252] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1072.518918] __alloc_pages_nodemask+0x2127/0x2720 [ 1072.536323] ? io_schedule_timeout+0x140/0x140 [ 1072.540914] ? lock_acquire+0x170/0x3f0 [ 1072.544909] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1072.550219] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1072.552108] systemd-journal cpuset=/ [ 1072.555673] ? __mutex_unlock_slowpath+0x75/0x770 [ 1072.555685] ? retint_kernel+0x2d/0x2d [ 1072.568743] alloc_pages_current+0x155/0x260 [ 1072.573163] ion_page_pool_alloc+0x118/0x1b0 [ 1072.577580] ion_system_heap_allocate+0x133/0x8c0 [ 1072.582439] ? ion_alloc+0x187/0x810 [ 1072.586162] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1072.591437] mems_allowed=0-1 [ 1072.591631] ? ion_system_contig_heap_create+0x130/0x130 [ 1072.600267] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1072.605288] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1072.610134] ion_alloc+0x204/0x810 [ 1072.613707] ? ion_dma_buf_release+0x40/0x40 [ 1072.618115] ? __might_fault+0x177/0x1b0 [ 1072.622179] ion_ioctl+0xea/0x1f0 [ 1072.625646] ? ion_query_heaps+0x360/0x360 [ 1072.629895] ? ion_query_heaps+0x360/0x360 [ 1072.634132] do_vfs_ioctl+0x75a/0xff0 [ 1072.637940] ? ioctl_preallocate+0x1a0/0x1a0 [ 1072.642350] ? lock_downgrade+0x740/0x740 [ 1072.646500] ? __fget+0x225/0x360 [ 1072.649976] ? do_vfs_ioctl+0xff0/0xff0 [ 1072.653953] ? security_file_ioctl+0x83/0xb0 [ 1072.658897] SyS_ioctl+0x7f/0xb0 [ 1072.662267] ? do_vfs_ioctl+0xff0/0xff0 [ 1072.666242] do_syscall_64+0x1d5/0x640 [ 1072.670137] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1072.675322] RIP: 0033:0x465ef9 [ 1072.678502] RSP: 002b:00007ff463c74188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1072.686240] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1072.693600] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1072.700875] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1072.708146] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1072.715423] R13: 00007ffd9671605f R14: 00007ff463c74300 R15: 0000000000022000 [ 1072.727730] warn_alloc_show_mem: 2 callbacks suppressed [ 1072.727734] Mem-Info: [ 1072.735666] active_anon:12967 inactive_anon:27047 isolated_anon:0 [ 1072.735666] active_file:46 inactive_file:4 isolated_file:0 [ 1072.735666] unevictable:0 dirty:59 writeback:25 unstable:0 [ 1072.735666] slab_reclaimable:12937 slab_unreclaimable:114105 [ 1072.735666] mapped:52589 shmem:27405 pagetables:771 bounce:0 [ 1072.735666] free:13696 free_pcp:30 free_cma:0 [ 1072.745993] CPU: 0 PID: 4224 Comm: systemd-journal Not tainted 4.14.222-syzkaller #0 [ 1072.769133] Node 0 active_anon:50180kB inactive_anon:82796kB active_file:56kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:147552kB dirty:212kB writeback:100kB shmem:84028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1072.776807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1072.776812] Call Trace: [ 1072.776832] dump_stack+0x1b2/0x281 [ 1072.776843] dump_header+0x178/0x82f [ 1072.776854] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1072.776866] ? ___ratelimit+0x2cd/0x530 [ 1072.804865] Node 1 active_anon:1688kB inactive_anon:25392kB active_file:128kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:62804kB dirty:24kB writeback:0kB shmem:25592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1072.814171] oom_kill_process.cold+0x10/0xb18 [ 1072.814190] out_of_memory+0xe3e/0x1190 [ 1072.814202] ? oom_killer_disable+0x1c0/0x1c0 [ 1072.814215] ? mutex_trylock+0x152/0x1a0 [ 1072.816831] Node 0 [ 1072.820454] __alloc_pages_nodemask+0x23e1/0x2720 [ 1072.824255] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1072.829383] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1072.829405] ? cache_grow_begin+0x41/0x630 [ 1072.829416] cache_grow_begin+0x91/0x630 [ 1072.833403] lowmem_reserve[]: [ 1072.861090] ? cache_grow_begin+0x91/0x630 [ 1072.861099] fallback_alloc+0x207/0x2c0 [ 1072.861109] kmem_cache_alloc+0x1e5/0x3c0 [ 1072.861120] getname_flags+0xc8/0x550 [ 1072.861133] SyS_mkdirat+0x83/0x270 [ 1072.865724] 0 [ 1072.869804] ? SyS_mknod+0x30/0x30 [ 1072.869814] ? do_syscall_64+0x4c/0x640 [ 1072.869820] ? SyS_mkdirat+0x270/0x270 [ 1072.869827] do_syscall_64+0x1d5/0x640 [ 1072.869839] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1072.869847] RIP: 0033:0x7f59596b9687 [ 1072.869851] RSP: 002b:00007ffc8d790e28 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 1072.869860] RAX: ffffffffffffffda RBX: 00007ffc8d793e90 RCX: 00007f59596b9687 [ 1072.869865] RDX: 0000000000000000 RSI: 00000000000001ed RDI: 00005578ca064300 [ 1072.869868] RBP: 00007ffc8d790e60 R08: 00005578c8da93e5 R09: 0000000000000018 [ 1072.869873] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 1072.869877] R13: 0000000000000001 R14: 00005578ca064300 R15: 00007ffc8d7914a0 [ 1073.021167] 2717 2718 2718 2718 [ 1073.024564] Node 0 DMA32 free:17824kB min:36200kB low:45248kB high:54296kB active_anon:50100kB inactive_anon:82704kB active_file:40kB inactive_file:100kB unevictable:0kB writepending:212kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2384kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1073.053442] lowmem_reserve[]: 0 0 0 0 0 [ 1073.057483] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1073.098984] Mem-Info: [ 1073.100581] lowmem_reserve[]: 0 [ 1073.101441] active_anon:12937 inactive_anon:27059 isolated_anon:0 [ 1073.101441] active_file:53 inactive_file:17 isolated_file:0 [ 1073.101441] unevictable:0 dirty:25 writeback:0 unstable:0 [ 1073.101441] slab_reclaimable:12924 slab_unreclaimable:114152 [ 1073.101441] mapped:52555 shmem:27413 pagetables:756 bounce:0 [ 1073.101441] free:13897 free_pcp:0 free_cma:0 [ 1073.101457] Node 0 active_anon:50104kB inactive_anon:82820kB active_file:176kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:147472kB dirty:100kB writeback:0kB shmem:84028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1073.104738] 0 [ 1073.149304] Node 1 active_anon:1644kB inactive_anon:25416kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:62748kB dirty:0kB writeback:0kB shmem:25624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1073.180403] 0 0 0 [ 1073.211156] Node 0 [ 1073.212548] Node 1 [ 1073.212564] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1073.212570] lowmem_reserve[]: [ 1073.214844] Normal free:26644kB min:53696kB low:67120kB high:80544kB active_anon:1644kB inactive_anon:25416kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:640kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1073.230054] 0 [ 1073.258035] lowmem_reserve[]: [ 1073.290055] 2717 [ 1073.292264] 0 [ 1073.293203] 2718 [ 1073.295258] 0 [ 1073.301843] 2718 2718 [ 1073.306146] Node 0 DMA32 free:17968kB min:36200kB low:45248kB high:54296kB active_anon:50104kB inactive_anon:82728kB active_file:136kB inactive_file:4kB unevictable:0kB writepending:100kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2384kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1073.306210] 0 [ 1073.349176] lowmem_reserve[]: 0 0 0 0 0 [ 1073.351193] 0 [ 1073.354998] Node 0 [ 1073.355007] 0 [ 1073.363812] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1073.393148] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1073.401963] Node 0 DMA: 2*4kB (ME) 1*8kB (E) 3*16kB (ME) 3*32kB (ME) 3*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10976kB [ 1073.414846] lowmem_reserve[]: [ 1073.425466] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1073.439204] Node 0 DMA32: [ 1073.443354] CPU: 0 PID: 4196 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1073.443364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1073.446212] 1028*4kB [ 1073.454783] Call Trace: [ 1073.454805] dump_stack+0x1b2/0x281 [ 1073.454818] warn_alloc.cold+0x96/0x1cc [ 1073.454829] ? zone_watermark_ok_safe+0x220/0x220 [ 1073.454839] ? usleep_range+0x130/0x130 [ 1073.454851] ? try_to_free_pages+0x23f/0x6e0 [ 1073.465225] (UME) [ 1073.467709] ? _find_next_bit+0xdb/0x100 [ 1073.467721] ? run_timer_softirq+0x5a0/0x5a0 [ 1073.467738] __alloc_pages_nodemask+0x2127/0x2720 [ 1073.470318] 876*8kB [ 1073.474078] ? lock_acquire+0x170/0x3f0 [ 1073.478063] (UME) [ 1073.483222] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1073.488098] 252*16kB [ 1073.497451] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1073.497468] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1073.497488] alloc_pages_current+0x155/0x260 [ 1073.499794] (UME) [ 1073.503850] ion_page_pool_alloc+0x118/0x1b0 [ 1073.508554] 28*32kB [ 1073.513377] ion_system_heap_allocate+0x133/0x8c0 [ 1073.515705] (ME) [ 1073.520003] ? ion_alloc+0x187/0x810 [ 1073.520013] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1073.520023] ? ion_system_contig_heap_create+0x130/0x130 [ 1073.520034] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1073.520048] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1073.522381] 8*64kB [ 1073.528157] ion_alloc+0x204/0x810 [ 1073.528172] ? ion_dma_buf_release+0x40/0x40 [ 1073.528185] ? __might_fault+0x177/0x1b0 [ 1073.528197] ion_ioctl+0xea/0x1f0 [ 1073.530778] (UE) [ 1073.535687] ? ion_query_heaps+0x360/0x360 [ 1073.541531] 3*128kB [ 1073.546031] ? ion_query_heaps+0x360/0x360 [ 1073.548196] (UE) [ 1073.552563] do_vfs_ioctl+0x75a/0xff0 [ 1073.554864] 2*256kB [ 1073.559984] ? ioctl_preallocate+0x1a0/0x1a0 [ 1073.559993] ? lock_downgrade+0x740/0x740 [ 1073.560005] ? __fget+0x225/0x360 [ 1073.560014] ? do_vfs_ioctl+0xff0/0xff0 [ 1073.560027] ? security_file_ioctl+0x83/0xb0 [ 1073.562076] (UM) [ 1073.565929] SyS_ioctl+0x7f/0xb0 [ 1073.571534] 1*512kB [ 1073.576947] ? do_vfs_ioctl+0xff0/0xff0 [ 1073.576960] do_syscall_64+0x1d5/0x640 [ 1073.576979] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1073.582309] (U) [ 1073.587333] RIP: 0033:0x465ef9 [ 1073.587337] RSP: 002b:00007fd7ebad0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1073.587347] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1073.587351] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1073.587362] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1073.587371] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1073.589656] 0*1024kB [ 1073.593265] R13: 00007ffc90d553bf R14: 00007fd7ebad0300 R15: 0000000000022000 [ 1073.600010] 0 [ 1073.620608] 0*2048kB [ 1073.628002] 0 [ 1073.645856] 0*4096kB [ 1073.658135] 0 [ 1073.676590] = 17968kB [ 1073.684188] 0 [ 1073.685643] Node 0 [ 1073.692997] 0 [ 1073.693006] Node 1 Normal free:26644kB min:53696kB low:67120kB high:80544kB active_anon:1644kB inactive_anon:25416kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:640kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1073.693025] lowmem_reserve[]: 0 0 0 0 0 [ 1073.693043] Node 0 DMA: 2*4kB (ME) 1*8kB (E) 3*16kB (ME) 3*32kB (ME) 3*64kB (UME) 1*128kB [ 1073.718162] Normal: [ 1073.732089] (E) [ 1073.751133] 0*4kB [ 1073.778295] 3*256kB [ 1073.789118] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1073.804010] (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10976kB [ 1073.808784] Node 1 Normal: 91*4kB (M) 59*8kB (UM) 53*16kB (M) 32*32kB (UM) 28*64kB (M) 13*128kB (UM) 4*256kB (M) 34*512kB (UM) 2*1024kB (M) 0*2048kB [ 1073.814590] Node 0 [ 1073.840559] 0*4096kB [ 1073.841902] DMA32: [ 1073.842823] = 26644kB [ 1073.845747] 1028*4kB [ 1073.852525] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1073.864723] (UME) 876*8kB (UME) 252*16kB (UME) 28*32kB (ME) 8*64kB (UE) 3*128kB (UE) 2*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17968kB [ 1073.868448] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1073.892393] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1073.895793] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1073.919634] Node 1 Normal: 91*4kB (M) 59*8kB (UM) 53*16kB (M) 32*32kB (UM) 28*64kB (M) 13*128kB (UM) 4*256kB (M) 34*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 26644kB [ 1073.921153] Mem-Info: [ 1073.946553] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1073.949565] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1073.955151] 27472 total pagecache pages [ 1073.977233] active_anon:12937 inactive_anon:27059 isolated_anon:0 [ 1073.977233] active_file:32 inactive_file:22 isolated_file:0 [ 1073.977233] unevictable:0 dirty:25 writeback:0 unstable:0 [ 1073.977233] slab_reclaimable:12924 slab_unreclaimable:114152 [ 1073.977233] mapped:52555 shmem:27413 pagetables:756 bounce:0 [ 1073.977233] free:13897 free_pcp:0 free_cma:0 [ 1073.980606] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1074.019112] 0 pages in swap cache [ 1074.022744] Swap cache stats: add 0, delete 0, find 0/0 [ 1074.035885] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1074.037159] Free swap = 0kB [ 1074.057470] Node 0 active_anon:50104kB inactive_anon:82820kB active_file:104kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:147472kB dirty:100kB writeback:0kB shmem:84028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1074.062915] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1074.094232] Total swap = 0kB [ 1074.103074] 2097051 pages RAM [ 1074.106199] 0 pages HighMem/MovableOnly [ 1074.106996] 27472 total pagecache pages [ 1074.110203] 363840 pages reserved [ 1074.114413] 0 pages in swap cache [ 1074.117896] 0 pages cma reserved [ 1074.120425] Node 1 active_anon:1644kB inactive_anon:25416kB active_file:32kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:62748kB dirty:0kB writeback:0kB shmem:25624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1074.123926] Swap cache stats: add 0, delete 0, find 0/0 [ 1074.124879] Node 0 [ 1074.155275] Bluetooth: hci2 command 0x0409 tx timeout [ 1074.163068] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1074.172791] Free swap = 0kB [ 1074.198070] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1074.203602] Bluetooth: hci4 command 0x0409 tx timeout [ 1074.203952] Node 0 [ 1074.211178] Total swap = 0kB [ 1074.213144] DMA32 free:17968kB min:36200kB low:45248kB high:54296kB active_anon:50104kB inactive_anon:82728kB active_file:96kB inactive_file:64kB unevictable:0kB writepending:100kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2384kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1074.213463] 2097051 pages RAM [ 1074.220457] lowmem_reserve[]: 0 0 0 0 0 [ 1074.259730] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1074.291821] 0 pages HighMem/MovableOnly [ 1074.296028] 363840 pages reserved [ 1074.300505] lowmem_reserve[]: 0 0 0 0 0 [ 1074.305170] Node 1 Normal free:26644kB min:53696kB low:67120kB high:80544kB active_anon:1644kB inactive_anon:25416kB active_file:32kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:640kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1074.312825] 0 pages cma reserved [ 1074.349010] lowmem_reserve[]: 0 0 0 0 0 [ 1074.353044] Node 0 DMA: 2*4kB (ME) 1*8kB (E) 3*16kB (ME) 3*32kB (ME) 3*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10976kB [ 1074.355029] Out of memory (oom_kill_allocating_task): Kill process 4224 (systemd-journal) score 0 or sacrifice child [ 1074.384543] Node 0 DMA32: 1028*4kB (UME) 876*8kB (UME) 252*16kB (UME) 28*32kB (ME) 8*64kB (UE) 3*128kB (UE) 2*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17968kB [ 1074.395501] Killed process 4224 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:4kB, shmem-rss:1300kB [ 1074.415501] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1074.425067] oom_reaper: reaped process 4224 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1300kB [ 1074.435145] Node 1 Normal: 91*4kB (M) 59*8kB (UM) 53*16kB (M) 32*32kB (UM) 28*64kB (M) 13*128kB (UM) 4*256kB (M) 34*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 26644kB [ 1074.458691] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1074.470743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1074.491310] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1074.495743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1074.505067] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1074.512822] CPU: 0 PID: 31492 Comm: syz-executor.0 Not tainted 4.14.222-syzkaller #0 [ 1074.521780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1074.524643] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1074.531131] Call Trace: [ 1074.531152] dump_stack+0x1b2/0x281 [ 1074.531164] dump_header+0x178/0x82f [ 1074.531174] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1074.531186] ? ___ratelimit+0x2cd/0x530 [ 1074.539967] 27472 total pagecache pages [ 1074.542527] oom_kill_process.cold+0x10/0xb18 [ 1074.546137] 0 pages in swap cache [ 1074.549842] out_of_memory+0xe3e/0x1190 [ 1074.549854] ? oom_killer_disable+0x1c0/0x1c0 [ 1074.549863] ? mutex_trylock+0x152/0x1a0 [ 1074.549875] __alloc_pages_nodemask+0x23e1/0x2720 [ 1074.554965] Swap cache stats: add 0, delete 0, find 0/0 [ 1074.558939] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1074.558966] alloc_pages_current+0x155/0x260 [ 1074.562933] Free swap = 0kB [ 1074.567428] filemap_fault+0xea3/0x1980 [ 1074.567446] ext4_filemap_fault+0x84/0xb0 [ 1074.567458] __do_fault+0xfa/0x380 [ 1074.571323] Total swap = 0kB [ 1074.575291] __handle_mm_fault+0x2497/0x4620 [ 1074.579804] 2097051 pages RAM [ 1074.583832] ? vm_insert_page+0x7c0/0x7c0 [ 1074.588718] 0 pages HighMem/MovableOnly [ 1074.594042] ? nanosleep_copyout+0x100/0x100 [ 1074.598897] 363840 pages reserved [ 1074.603362] handle_mm_fault+0x391/0x860 [ 1074.606380] 0 pages cma reserved [ 1074.610336] __do_page_fault+0x549/0xad0 [ 1074.655902] ? spurious_fault+0x640/0x640 [ 1074.660043] ? do_page_fault+0x60/0x500 [ 1074.664008] ? page_fault+0x2f/0x50 [ 1074.667628] page_fault+0x45/0x50 [ 1074.671074] RIP: 105c26:0x10 [ 1074.674079] RSP: 0163:00007ffd9671631c EFLAGS: 00000032 [ 1074.781981] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1075.053180] IPVS: ftp: loaded support on port[0] = 21 [ 1075.087555] Mem-Info: [ 1075.090026] active_anon:12842 inactive_anon:27057 isolated_anon:0 [ 1075.090026] active_file:768 inactive_file:1536 isolated_file:0 [ 1075.090026] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1075.090026] slab_reclaimable:12924 slab_unreclaimable:114224 [ 1075.090026] mapped:54313 shmem:27413 pagetables:756 bounce:0 [ 1075.090026] free:97400 free_pcp:562 free_cma:0 [ 1075.166430] Bluetooth: hci3 command 0x0406 tx timeout [ 1075.228718] Node 0 active_anon:49644kB inactive_anon:82820kB active_file:28kB inactive_file:972kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148108kB dirty:0kB writeback:0kB shmem:84028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1075.341914] Node 1 active_anon:1724kB inactive_anon:25408kB active_file:1736kB inactive_file:1872kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:66144kB dirty:16kB writeback:0kB shmem:25624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1075.369750] Node 0 DMA free:11008kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1075.401626] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1075.412275] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1075.421893] Node 0 DMA32 free:18008kB min:36200kB low:45248kB high:54296kB active_anon:49644kB inactive_anon:82728kB active_file:28kB inactive_file:464kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2384kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1075.431025] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1075.462471] lowmem_reserve[]: 0 [ 1075.465343] CPU: 1 PID: 4196 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1075.465352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1075.471296] 0 [ 1075.476457] Call Trace: [ 1075.476480] dump_stack+0x1b2/0x281 [ 1075.476494] warn_alloc.cold+0x96/0x1cc [ 1075.476506] ? zone_watermark_ok_safe+0x220/0x220 [ 1075.476527] __alloc_pages_nodemask+0x2127/0x2720 [ 1075.476539] ? check_preemption_disabled+0x35/0x240 [ 1075.476554] ? lock_acquire+0x170/0x3f0 [ 1075.476568] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1075.491689] 0 [ 1075.495077] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1075.499198] 0 [ 1075.504068] ? __mutex_unlock_slowpath+0x75/0x770 [ 1075.513883] 0 [ 1075.514253] alloc_pages_current+0x155/0x260 [ 1075.523918] ion_page_pool_alloc+0x118/0x1b0 [ 1075.525693] Node 0 [ 1075.531575] ion_system_heap_allocate+0x133/0x8c0 [ 1075.531587] ? _raw_spin_unlock+0x29/0x40 [ 1075.531596] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1075.531606] ? ion_system_contig_heap_create+0x130/0x130 [ 1075.531616] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1075.531627] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1075.531638] ion_alloc+0x27a/0x810 [ 1075.531652] ? ion_dma_buf_release+0x40/0x40 [ 1075.531664] ? __might_fault+0x177/0x1b0 [ 1075.531678] ion_ioctl+0xea/0x1f0 [ 1075.531687] ? ion_query_heaps+0x360/0x360 [ 1075.531700] ? ion_query_heaps+0x360/0x360 [ 1075.531710] do_vfs_ioctl+0x75a/0xff0 [ 1075.531724] ? ioctl_preallocate+0x1a0/0x1a0 [ 1075.548732] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1075.549073] ? lock_downgrade+0x740/0x740 [ 1075.551292] lowmem_reserve[]: [ 1075.556223] ? __fget+0x225/0x360 [ 1075.571956] 0 [ 1075.575927] ? do_vfs_ioctl+0xff0/0xff0 [ 1075.582274] 0 [ 1075.584407] ? security_file_ioctl+0x83/0xb0 [ 1075.593249] 0 [ 1075.596587] SyS_ioctl+0x7f/0xb0 [ 1075.596598] ? do_vfs_ioctl+0xff0/0xff0 [ 1075.596609] do_syscall_64+0x1d5/0x640 [ 1075.596625] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1075.596634] RIP: 0033:0x465ef9 [ 1075.596638] RSP: 002b:00007fd7ebad0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1075.596648] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1075.596653] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1075.596657] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1075.596662] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1075.596668] R13: 00007ffc90d553bf R14: 00007fd7ebad0300 R15: 0000000000022000 [ 1075.610953] Mem-Info: [ 1075.616836] 0 [ 1075.651357] active_anon:12842 inactive_anon:27057 isolated_anon:0 [ 1075.651357] active_file:68 inactive_file:33 isolated_file:0 [ 1075.651357] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1075.651357] slab_reclaimable:12924 slab_unreclaimable:114016 [ 1075.651357] mapped:52588 shmem:27413 pagetables:756 bounce:0 [ 1075.651357] free:13909 free_pcp:56 free_cma:0 [ 1075.654798] 0 [ 1075.662898] Node 0 active_anon:49644kB inactive_anon:82820kB active_file:56kB inactive_file:132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:147508kB dirty:0kB writeback:0kB shmem:84028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1075.671649] Node 1 active_anon:1724kB inactive_anon:25408kB active_file:216kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:62844kB dirty:16kB writeback:0kB shmem:25624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1075.680861] Node 1 [ 1075.688222] Node 0 [ 1075.695787] Normal free:26620kB min:53696kB low:67120kB high:80544kB active_anon:1724kB inactive_anon:25408kB active_file:56kB inactive_file:0kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:640kB bounce:0kB free_pcp:224kB local_pcp:224kB free_cma:0kB [ 1075.709281] DMA free:11008kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1075.714792] lowmem_reserve[]: [ 1075.724709] lowmem_reserve[]: [ 1075.732347] 0 [ 1075.732548] 0 [ 1075.734897] 0 [ 1075.743614] 2717 [ 1075.776778] 0 [ 1075.802002] 2718 [ 1075.839184] 0 [ 1075.862385] 2718 [ 1075.902864] 0 [ 1075.909984] 2718 [ 1075.916925] Node 0 DMA32 free:18008kB min:36200kB low:45248kB high:54296kB active_anon:49644kB inactive_anon:82728kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2384kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1075.955293] Node 0 DMA: 14*4kB (UME) 3*8kB (UE) 3*16kB (ME) 4*32kB (UME) 2*64kB (ME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11008kB [ 1075.956512] lowmem_reserve[]: 0 0 0 0 0 [ 1075.983712] Node 0 [ 1075.987637] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1075.989906] DMA32: 1038*4kB (ME) 882*8kB (ME) 271*16kB (UME) 33*32kB (ME) 8*64kB (UE) 2*128kB (E) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17624kB [ 1076.027945] lowmem_reserve[]: [ 1076.049001] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1076.052397] 0 [ 1076.070618] Node 1 Normal: 128*4kB (UM) 81*8kB (UM) 81*16kB (UM) 36*32kB (UM) 22*64kB (UM) 35*128kB (UM) 5*256kB (UM) 32*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 27160kB [ 1076.074312] 0 0 0 0 [ 1076.097808] Node 1 Normal free:27160kB min:53696kB low:67120kB high:80544kB active_anon:1724kB inactive_anon:25408kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:640kB bounce:0kB free_pcp:224kB local_pcp:0kB free_cma:0kB [ 1076.099773] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1076.133284] lowmem_reserve[]: 0 0 0 0 0 [ 1076.139493] Node 0 DMA: 14*4kB (UME) 3*8kB (UE) 3*16kB (ME) 4*32kB (UME) 2*64kB (ME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11008kB [ 1076.146088] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1076.162458] Node 0 DMA32: 1038*4kB (ME) 886*8kB (UME) 271*16kB (UME) 33*32kB (ME) 8*64kB (UE) 2*128kB (E) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17656kB [ 1076.174621] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1076.185789] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1076.199764] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1076.205602] Node 1 Normal: 128*4kB (UM) 81*8kB (UM) 81*16kB (UM) 36*32kB (UM) 22*64kB (UM) 35*128kB (UM) 5*256kB (UM) [ 1076.208512] Bluetooth: hci2 command 0x041b tx timeout [ 1076.219894] 27446 total pagecache pages [ 1076.231097] 32*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 27160kB [ 1076.240494] 0 pages in swap cache [ 1076.240710] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1076.243972] Swap cache stats: add 0, delete 0, find 0/0 [ 1076.255666] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1076.270364] Free swap = 0kB [ 1076.273399] Total swap = 0kB [ 1076.274339] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1076.283505] 2097051 pages RAM [ 1076.285417] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1076.288686] Bluetooth: hci4 command 0x041b tx timeout [ 1076.293078] 0 pages HighMem/MovableOnly [ 1076.305456] 27446 total pagecache pages [ 1076.311759] 0 pages in swap cache [ 1076.315300] Swap cache stats: add 0, delete 0, find 0/0 [ 1076.319331] 363840 pages reserved [ 1076.324199] 0 pages cma reserved [ 1076.327606] Free swap = 0kB [ 1076.327611] Total swap = 0kB [ 1076.327618] 2097051 pages RAM [ 1076.327621] 0 pages HighMem/MovableOnly [ 1076.327624] 363840 pages reserved [ 1076.327627] 0 pages cma reserved [ 1076.357578] Out of memory (oom_kill_allocating_task): Kill process 31492 (syz-executor.0) score 0 or sacrifice child [ 1076.376222] Killed process 4223 (syz-executor.0) total-vm:93232kB, anon-rss:2192kB, file-rss:34760kB, shmem-rss:0kB [ 1076.398809] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1076.436414] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1076.446213] syz-fuzzer cpuset= [ 1076.454661] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1076.463553] CPU: 1 PID: 4196 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1076.471376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1076.480737] Call Trace: [ 1076.483860] dump_stack+0x1b2/0x281 [ 1076.487501] warn_alloc.cold+0x96/0x1cc [ 1076.488612] / mems_allowed=0-1 [ 1076.491673] ? zone_watermark_ok_safe+0x220/0x220 [ 1076.491685] ? usleep_range+0x130/0x130 [ 1076.503697] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1076.508839] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1076.513875] ? run_timer_softirq+0x5a0/0x5a0 [ 1076.518306] __alloc_pages_nodemask+0x2127/0x2720 [ 1076.523162] ? lock_acquire+0x170/0x3f0 [ 1076.527144] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1076.531991] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1076.536499] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1076.541966] alloc_pages_current+0x155/0x260 [ 1076.546383] ion_page_pool_alloc+0x118/0x1b0 [ 1076.550796] ion_system_heap_allocate+0x133/0x8c0 [ 1076.555647] ? _raw_spin_unlock+0x29/0x40 [ 1076.559796] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1076.564734] ? ion_system_contig_heap_create+0x130/0x130 [ 1076.570187] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1076.575205] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1076.580054] ion_alloc+0x27a/0x810 [ 1076.583600] ? ion_dma_buf_release+0x40/0x40 [ 1076.588011] ? __might_fault+0x177/0x1b0 [ 1076.592080] ion_ioctl+0xea/0x1f0 [ 1076.595540] ? ion_query_heaps+0x360/0x360 [ 1076.599796] ? ion_query_heaps+0x360/0x360 [ 1076.604035] do_vfs_ioctl+0x75a/0xff0 [ 1076.607841] ? ioctl_preallocate+0x1a0/0x1a0 [ 1076.612259] ? lock_downgrade+0x740/0x740 [ 1076.616407] ? __fget+0x225/0x360 [ 1076.619858] ? do_vfs_ioctl+0xff0/0xff0 [ 1076.623919] ? security_file_ioctl+0x83/0xb0 [ 1076.628329] SyS_ioctl+0x7f/0xb0 [ 1076.631699] ? do_vfs_ioctl+0xff0/0xff0 [ 1076.635681] do_syscall_64+0x1d5/0x640 [ 1076.639601] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1076.644799] RIP: 0033:0x465ef9 [ 1076.647990] RSP: 002b:00007fd7ebad0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1076.655848] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1076.663125] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1076.670664] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1076.677960] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1076.685754] R13: 00007ffc90d553bf R14: 00007fd7ebad0300 R15: 0000000000022000 [ 1076.693542] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1076.696280] CPU: 0 PID: 7967 Comm: syz-fuzzer Not tainted 4.14.222-syzkaller #0 [ 1076.707243] syz-executor.0 cpuset= [ 1076.713937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1076.713947] / [ 1076.717472] Call Trace: [ 1076.726900] mems_allowed=0-1 [ 1076.728565] dump_stack+0x1b2/0x281 [ 1076.737864] dump_header+0x178/0x82f [ 1076.741576] oom_kill_process.cold+0x10/0xb18 [ 1076.746090] out_of_memory+0xe3e/0x1190 [ 1076.750063] ? oom_killer_disable+0x1c0/0x1c0 [ 1076.754559] ? mutex_trylock+0x152/0x1a0 [ 1076.758614] __alloc_pages_nodemask+0x23e1/0x2720 [ 1076.763464] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1076.768580] alloc_pages_current+0x155/0x260 [ 1076.772988] filemap_fault+0xea3/0x1980 [ 1076.777079] ext4_filemap_fault+0x84/0xb0 [ 1076.781230] __do_fault+0xfa/0x380 [ 1076.784778] __handle_mm_fault+0x2497/0x4620 [ 1076.789289] ? vm_insert_page+0x7c0/0x7c0 [ 1076.793435] ? lock_downgrade+0x740/0x740 [ 1076.797617] handle_mm_fault+0x391/0x860 [ 1076.801686] __do_page_fault+0x549/0xad0 [ 1076.805842] ? spurious_fault+0x640/0x640 [ 1076.811934] ? do_page_fault+0x60/0x500 [ 1076.815919] ? page_fault+0x2f/0x50 [ 1076.819541] page_fault+0x45/0x50 [ 1076.822989] RIP: 0000:0x92fd48 [ 1076.826170] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1076.826198] CPU: 1 PID: 4223 Comm: syz-executor.0 Not tainted 4.14.222-syzkaller #0 [ 1076.839443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1076.845186] Mem-Info: [ 1076.848823] Call Trace: [ 1076.848845] dump_stack+0x1b2/0x281 [ 1076.848858] warn_alloc.cold+0x96/0x1cc [ 1076.848870] ? zone_watermark_ok_safe+0x220/0x220 [ 1076.848879] ? usleep_range+0x130/0x130 [ 1076.848887] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1076.848899] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1076.848910] ? run_timer_softirq+0x5a0/0x5a0 [ 1076.848928] __alloc_pages_nodemask+0x2127/0x2720 [ 1076.848942] ? lock_acquire+0x170/0x3f0 [ 1076.848958] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1076.848969] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1076.848984] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1076.849004] alloc_pages_current+0x155/0x260 [ 1076.849016] ion_page_pool_alloc+0x118/0x1b0 [ 1076.849027] ion_system_heap_allocate+0x133/0x8c0 [ 1076.849039] ? ion_alloc+0x187/0x810 [ 1076.849050] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1076.849061] ? ion_system_contig_heap_create+0x130/0x130 [ 1076.849072] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1076.849083] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1076.849095] ion_alloc+0x204/0x810 [ 1076.849110] ? ion_dma_buf_release+0x40/0x40 [ 1076.849123] ? __might_fault+0x177/0x1b0 [ 1076.849135] ion_ioctl+0xea/0x1f0 [ 1076.849144] ? ion_query_heaps+0x360/0x360 [ 1076.849157] ? ion_query_heaps+0x360/0x360 [ 1076.849166] do_vfs_ioctl+0x75a/0xff0 [ 1076.849178] ? ioctl_preallocate+0x1a0/0x1a0 [ 1076.849186] ? lock_downgrade+0x740/0x740 [ 1076.849199] ? __fget+0x225/0x360 [ 1076.849208] ? do_vfs_ioctl+0xff0/0xff0 [ 1076.849219] ? security_file_ioctl+0x83/0xb0 [ 1076.849229] SyS_ioctl+0x7f/0xb0 [ 1076.849237] ? do_vfs_ioctl+0xff0/0xff0 [ 1076.849248] do_syscall_64+0x1d5/0x640 [ 1076.849263] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1076.849275] RIP: 0033:0x465ef9 [ 1076.873836] active_anon:12842 inactive_anon:27057 isolated_anon:0 [ 1076.873836] active_file:41 inactive_file:0 isolated_file:0 [ 1076.873836] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1076.873836] slab_reclaimable:12924 slab_unreclaimable:114058 [ 1076.873836] mapped:52230 shmem:27413 pagetables:719 bounce:0 [ 1076.873836] free:13845 free_pcp:132 free_cma:0 [ 1076.876313] RSP: 002b:00007ff463c74188 EFLAGS: 00000246 [ 1076.897989] Node 0 active_anon:49644kB inactive_anon:82820kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:146172kB dirty:0kB writeback:0kB shmem:84028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1076.899343] ORIG_RAX: 0000000000000010 [ 1076.903846] Node 1 active_anon:1724kB inactive_anon:25408kB active_file:156kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:62748kB dirty:0kB writeback:0kB shmem:25624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1076.909268] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1076.909274] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1076.909279] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1076.909284] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1076.909289] R13: 00007ffd9671605f R14: 00007ff463c74300 R15: 0000000000022000 [ 1076.915665] Mem-Info: [ 1076.931846] Node 0 [ 1076.942518] active_anon:12842 inactive_anon:27057 isolated_anon:0 [ 1076.942518] active_file:41 inactive_file:0 isolated_file:0 [ 1076.942518] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1076.942518] slab_reclaimable:12924 slab_unreclaimable:114058 [ 1076.942518] mapped:52230 shmem:27413 pagetables:719 bounce:0 [ 1076.942518] free:13845 free_pcp:132 free_cma:0 [ 1076.955193] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1076.956380] Node 0 active_anon:49644kB inactive_anon:82820kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:146172kB dirty:0kB writeback:0kB shmem:84028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1076.961731] lowmem_reserve[]: [ 1076.963412] Node 1 active_anon:1724kB inactive_anon:25408kB active_file:156kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:62748kB dirty:0kB writeback:0kB shmem:25624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1076.983363] 0 [ 1076.988874] Node 0 [ 1077.011633] 2717 [ 1077.017334] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1077.085573] 2718 [ 1077.262465] lowmem_reserve[]: [ 1077.275379] 2718 2718 [ 1077.337343] Node 0 DMA32 free:19352kB min:36200kB low:45248kB high:54296kB active_anon:49648kB inactive_anon:82724kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2284kB bounce:0kB free_pcp:184kB local_pcp:176kB free_cma:0kB [ 1077.346812] 0 [ 1077.367474] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1077.414961] systemd[1]: Failed to start Journal Service. [ 1077.436930] 2717 2718 2718 2718 [ 1077.440450] Node 0 DMA32 free:38608kB min:36200kB low:45248kB high:54296kB active_anon:49648kB inactive_anon:82724kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2284kB bounce:0kB free_pcp:164kB local_pcp:8kB free_cma:0kB [ 1077.475245] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1077.517787] lowmem_reserve[]: 0 0 0 0 0 [ 1077.522677] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1077.553139] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1077.576387] lowmem_reserve[]: 0 0 0 0 0 [ 1077.578248] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1077.580426] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1077.580447] lowmem_reserve[]: 0 0 0 0 0 [ 1077.580467] Node 1 Normal free:179380kB min:53696kB low:67120kB high:80544kB active_anon:1724kB inactive_anon:25408kB active_file:456kB inactive_file:6012kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:640kB bounce:0kB free_pcp:168kB local_pcp:116kB free_cma:0kB [ 1077.580490] lowmem_reserve[]: 0 0 0 0 [ 1077.599062] lowmem_reserve[]: [ 1077.657726] systemd[1]: Stopped Journal Service. [ 1077.675798] systemd[1]: Starting Journal Service... [ 1077.690407] 0 0 0 0 0 [ 1077.693979] Node 1 Normal free:88244kB min:53696kB low:67120kB high:80544kB active_anon:1724kB inactive_anon:25408kB active_file:456kB inactive_file:6112kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:640kB bounce:0kB free_pcp:168kB local_pcp:52kB free_cma:0kB [ 1077.725325] 0 [ 1077.727231] Node 0 DMA: 4*4kB (UME) 3*8kB (UE) 3*16kB (ME) 4*32kB (UME) 2*64kB (ME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10968kB [ 1077.812568] chnl_net:caif_netlink_parms(): no params data found [ 1077.814944] Node 0 DMA32: 448*4kB (ME) 885*8kB (ME) 272*16kB (ME) 34*32kB (UME) 11*64kB (UEH) 117*128kB (UE) 22*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 36136kB [ 1077.902632] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1077.913665] lowmem_reserve[]: 0 0 0 0 0 [ 1077.933611] Node 0 DMA: 4*4kB (UME) 3*8kB (UE) 3*16kB (ME) 4*32kB (UME) 2*64kB (ME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10968kB [ 1077.936969] syz-executor.0: [ 1077.957043] Node 1 Normal: 121*4kB (UM) 85*8kB (UM) 78*16kB (UM) 43*32kB (UM) 35*64kB (M) 7*128kB (UM) 6*256kB (UM) 40*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 28940kB [ 1077.984153] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1077.994875] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1078.012309] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1078.023944] CPU: 1 PID: 4223 Comm: syz-executor.0 Not tainted 4.14.222-syzkaller #0 [ 1078.031785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1078.032920] Node 0 [ 1078.041137] Call Trace: [ 1078.041159] dump_stack+0x1b2/0x281 [ 1078.041172] warn_alloc.cold+0x96/0x1cc [ 1078.041184] ? zone_watermark_ok_safe+0x220/0x220 [ 1078.041206] __alloc_pages_nodemask+0x2127/0x2720 [ 1078.041215] ? __schedule+0x893/0x1de0 [ 1078.041232] ? lock_acquire+0x170/0x3f0 [ 1078.041248] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1078.041263] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1078.061032] DMA32: [ 1078.063305] ? __mutex_unlock_slowpath+0x75/0x770 [ 1078.082552] 971*4kB [ 1078.083628] alloc_pages_current+0x155/0x260 [ 1078.095178] ion_page_pool_alloc+0x118/0x1b0 [ 1078.099593] ion_system_heap_allocate+0x133/0x8c0 [ 1078.103207] (UME) 889*8kB [ 1078.104448] ? _raw_spin_unlock+0x29/0x40 [ 1078.104460] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1078.113646] (UME) [ 1078.116570] ? ion_system_contig_heap_create+0x130/0x130 [ 1078.116582] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1078.116593] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1078.116604] ion_alloc+0x27a/0x810 [ 1078.116619] ? ion_dma_buf_release+0x40/0x40 [ 1078.116632] ? __might_fault+0x177/0x1b0 [ 1078.116644] ion_ioctl+0xea/0x1f0 [ 1078.116654] ? ion_query_heaps+0x360/0x360 [ 1078.116668] ? ion_query_heaps+0x360/0x360 [ 1078.116678] do_vfs_ioctl+0x75a/0xff0 [ 1078.116690] ? ioctl_preallocate+0x1a0/0x1a0 [ 1078.116706] ? lock_downgrade+0x740/0x740 [ 1078.116719] ? __fget+0x225/0x360 [ 1078.133628] 273*16kB [ 1078.134122] ? do_vfs_ioctl+0xff0/0xff0 [ 1078.142261] (ME) [ 1078.142491] ? security_file_ioctl+0x83/0xb0 [ 1078.163713] 33*32kB [ 1078.164514] SyS_ioctl+0x7f/0xb0 [ 1078.194126] (ME) 10*64kB [ 1078.195040] ? do_vfs_ioctl+0xff0/0xff0 [ 1078.195054] do_syscall_64+0x1d5/0x640 [ 1078.205653] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1078.210841] RIP: 0033:0x465ef9 [ 1078.214026] RSP: 002b:00007ff463c74188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1078.221831] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1078.223399] (UEH) [ 1078.229110] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1078.229116] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1078.229121] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1078.229126] R13: 00007ffd9671605f R14: 00007ff463c74300 R15: 0000000000022000 [ 1078.241072] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1078.272928] 2*128kB (E) 1*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18084kB [ 1078.278005] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1078.282357] Node 0 [ 1078.290022] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1078.290028] 27473 total pagecache pages [ 1078.290039] 0 pages in swap cache [ 1078.290044] Swap cache stats: add 0, delete 0, find 0/0 [ 1078.290051] Free swap = 0kB [ 1078.292350] Bluetooth: hci2 command 0x040f tx timeout [ 1078.300935] Total swap = 0kB [ 1078.300946] 2097051 pages RAM [ 1078.308291] Normal: [ 1078.308386] 0 pages HighMem/MovableOnly [ 1078.313716] 0*4kB [ 1078.316777] 363840 pages reserved [ 1078.316781] 0 pages cma reserved [ 1078.326384] warn_alloc_show_mem: 1 callbacks suppressed [ 1078.326388] Mem-Info: [ 1078.330796] 0*8kB [ 1078.334384] active_anon:12936 inactive_anon:27056 isolated_anon:0 [ 1078.334384] active_file:12 inactive_file:16 isolated_file:1 [ 1078.334384] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1078.334384] slab_reclaimable:12919 slab_unreclaimable:113638 [ 1078.334384] mapped:52248 shmem:27413 pagetables:733 bounce:0 [ 1078.334384] free:14483 free_pcp:1 free_cma:0 [ 1078.337157] 0*16kB [ 1078.340103] Node 0 active_anon:49908kB inactive_anon:82816kB active_file:8kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:146176kB dirty:0kB writeback:0kB shmem:84028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1078.343527] 0*32kB [ 1078.348964] Node 1 active_anon:1836kB inactive_anon:25408kB active_file:40kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:62816kB dirty:0kB writeback:0kB shmem:25624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1078.348969] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1078.348989] lowmem_reserve[]: 0 [ 1078.353943] 0*64kB [ 1078.476876] 2717 2718 2718 2718 [ 1078.481488] Bluetooth: hci4 command 0x040f tx timeout [ 1078.482953] Node 0 [ 1078.488863] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1078.500409] Node 1 Normal: 120*4kB (UM) 84*8kB (UM) 77*16kB (UM) 42*32kB (UM) 144*64kB (UM) 12*128kB (UM) 6*256kB (UM) 40*512kB (UM) 378*1024kB (U) 2*2048kB (U) 6*4096kB (U) = 452240kB [ 1078.516688] DMA32 free:43332kB min:36200kB low:45248kB high:54296kB active_anon:49908kB inactive_anon:82724kB active_file:20kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2288kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1078.520418] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1078.561162] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1078.569807] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1078.581253] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1078.590072] 27473 total pagecache pages [ 1078.594051] 0 pages in swap cache [ 1078.600095] Swap cache stats: add 0, delete 0, find 0/0 [ 1078.605461] Free swap = 0kB [ 1078.606409] lowmem_reserve[]: 0 0 0 0 0 [ 1078.609925] Total swap = 0kB [ 1078.612509] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1078.615530] 2097051 pages RAM [ 1078.615537] 0 pages HighMem/MovableOnly [ 1078.651792] 363840 pages reserved [ 1078.655252] 0 pages cma reserved [ 1078.658711] Out of memory (oom_kill_allocating_task): Kill process 7967 (syz-fuzzer) score 0 or sacrifice child [ 1078.671589] lowmem_reserve[]: 0 0 0 0 0 [ 1078.675593] Node 1 Normal free:393684kB min:53696kB low:67120kB high:80544kB active_anon:1836kB inactive_anon:25408kB active_file:56kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:644kB bounce:0kB free_pcp:104kB local_pcp:0kB free_cma:0kB [ 1078.707155] Killed process 4213 (syz-executor.3) total-vm:84904kB, anon-rss:64kB, file-rss:4kB, shmem-rss:0kB [ 1078.725965] oom_reaper: reaped process 4223 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1078.745672] oom_reaper: reaped process 4213 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1078.776575] lowmem_reserve[]: 0 0 0 0 0 [ 1078.786306] Node 0 DMA: 14*4kB (UME) 3*8kB (UE) 3*16kB (ME) 4*32kB (UME) 3*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11072kB [ 1078.865487] Node 0 DMA32: 160*4kB (ME) 891*8kB (MEH) 274*16kB (UME) 34*32kB (UME) 70*64kB (UEH) 2*128kB (E) 4*256kB (UM) 35*512kB (UH) 6*1024kB (U) 1*2048kB (M) 0*4096kB = 45112kB [ 1078.891795] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1078.923289] Node 1 Normal: 24*4kB (UM) 9*8kB (UM) 8*16kB (UM) 30*32kB (UM) 57*64kB (UM) 9*128kB (UM) 2*256kB (M) 1*512kB (M) 263*1024kB (U) 2*2048kB (U) 6*4096kB (U) = 305064kB [ 1078.951447] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1078.961631] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1078.971337] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1078.981372] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1078.991931] 30105 total pagecache pages [ 1078.996882] 0 pages in swap cache [ 1079.001530] Swap cache stats: add 0, delete 0, find 0/0 [ 1079.011884] Free swap = 0kB [ 1079.015322] Total swap = 0kB [ 1079.019432] 2097051 pages RAM [ 1079.023194] 0 pages HighMem/MovableOnly [ 1079.033100] 363840 pages reserved [ 1079.037915] 0 pages cma reserved [ 1079.051218] systemd-journald[4386]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1079.272305] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.290139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.311549] device bridge_slave_0 entered promiscuous mode [ 1079.338196] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.344684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.370010] device bridge_slave_1 entered promiscuous mode [ 1079.538793] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1079.604561] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1079.626558] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1079.635135] CPU: 1 PID: 4219 Comm: syz-executor.4 Not tainted 4.14.222-syzkaller #0 [ 1079.644273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1079.654062] Call Trace: [ 1079.656654] dump_stack+0x1b2/0x281 [ 1079.660292] dump_header+0x178/0x82f [ 1079.664190] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1079.670421] ? ___ratelimit+0x2cd/0x530 [ 1079.674397] oom_kill_process.cold+0x10/0xb18 [ 1079.678896] out_of_memory+0xe3e/0x1190 [ 1079.682877] ? oom_killer_disable+0x1c0/0x1c0 [ 1079.687368] ? mutex_trylock+0x152/0x1a0 [ 1079.691440] __alloc_pages_nodemask+0x23e1/0x2720 [ 1079.696307] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1079.701156] alloc_pages_current+0x155/0x260 [ 1079.705557] filemap_fault+0xea3/0x1980 [ 1079.709530] ext4_filemap_fault+0x84/0xb0 [ 1079.713675] __do_fault+0xfa/0x380 [ 1079.717555] __handle_mm_fault+0x2497/0x4620 [ 1079.721953] ? vm_insert_page+0x7c0/0x7c0 [ 1079.726095] ? task_work_run+0xfd/0x190 [ 1079.730072] handle_mm_fault+0x391/0x860 [ 1079.734125] __do_page_fault+0x549/0xad0 [ 1079.738197] ? spurious_fault+0x640/0x640 [ 1079.742336] ? do_page_fault+0x60/0x500 [ 1079.746300] ? page_fault+0x2f/0x50 [ 1079.749924] page_fault+0x45/0x50 [ 1079.753370] RIP: 14a4370:0x3 [ 1079.756560] RSP: 14a4320:0000000000000000 EFLAGS: 00000000 [ 1079.758262] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1079.796139] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1079.803787] CPU: 1 PID: 4223 Comm: syz-executor.0 Not tainted 4.14.222-syzkaller #0 [ 1079.811629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1079.820990] Call Trace: [ 1079.823667] dump_stack+0x1b2/0x281 [ 1079.827314] warn_alloc.cold+0x96/0x1cc [ 1079.831306] ? zone_watermark_ok_safe+0x220/0x220 [ 1079.836185] ? usleep_range+0x130/0x130 [ 1079.840164] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1079.845309] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1079.850335] ? run_timer_softirq+0x5a0/0x5a0 [ 1079.854850] __alloc_pages_nodemask+0x2127/0x2720 [ 1079.859716] ? lock_acquire+0x170/0x3f0 [ 1079.863691] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1079.868636] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1079.873150] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1079.878601] ? __alloc_pages_nodemask+0x9/0x2720 [ 1079.883356] alloc_pages_current+0x155/0x260 [ 1079.887798] ion_page_pool_alloc+0x118/0x1b0 [ 1079.892204] ion_system_heap_allocate+0x133/0x8c0 [ 1079.897053] ? _raw_spin_unlock+0x29/0x40 [ 1079.901299] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1079.906243] ? ion_system_contig_heap_create+0x130/0x130 [ 1079.911704] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1079.916809] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1079.921655] ion_alloc+0x27a/0x810 [ 1079.925210] ? ion_dma_buf_release+0x40/0x40 [ 1079.929625] ? __might_fault+0x177/0x1b0 [ 1079.933686] ion_ioctl+0xea/0x1f0 [ 1079.937137] ? ion_query_heaps+0x360/0x360 [ 1079.941367] ? ion_query_heaps+0x360/0x360 [ 1079.945616] do_vfs_ioctl+0x75a/0xff0 [ 1079.949418] ? ioctl_preallocate+0x1a0/0x1a0 [ 1079.953842] ? lock_downgrade+0x740/0x740 [ 1079.957986] ? __fget+0x225/0x360 [ 1079.961448] ? do_vfs_ioctl+0xff0/0xff0 [ 1079.965415] ? security_file_ioctl+0x83/0xb0 [ 1079.969823] SyS_ioctl+0x7f/0xb0 [ 1079.973184] ? do_vfs_ioctl+0xff0/0xff0 [ 1079.977155] do_syscall_64+0x1d5/0x640 [ 1079.981053] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1079.986410] RIP: 0033:0x465ef9 [ 1079.989589] RSP: 002b:00007ff463c74188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1079.997290] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1080.004554] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1080.011832] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1080.019111] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1080.026375] R13: 00007ffd9671605f R14: 00007ff463c74300 R15: 0000000000022000 [ 1080.042235] Mem-Info: [ 1080.044674] active_anon:12353 inactive_anon:29079 isolated_anon:0 [ 1080.044674] active_file:49 inactive_file:44 isolated_file:0 [ 1080.044674] unevictable:0 dirty:0 writeback:25 unstable:0 [ 1080.044674] slab_reclaimable:12919 slab_unreclaimable:114670 [ 1080.044674] mapped:43870 shmem:29436 pagetables:689 bounce:0 [ 1080.044674] free:14184 free_pcp:0 free_cma:0 [ 1080.068542] Mem-Info: [ 1080.083734] active_anon:12319 inactive_anon:29087 isolated_anon:0 [ 1080.083734] active_file:16 inactive_file:15 isolated_file:0 [ 1080.083734] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1080.083734] slab_reclaimable:12926 slab_unreclaimable:114685 [ 1080.083734] mapped:43843 shmem:29457 pagetables:685 bounce:0 [ 1080.083734] free:14325 free_pcp:13 free_cma:0 [ 1080.084499] Node 0 active_anon:47440kB inactive_anon:82756kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115948kB dirty:0kB writeback:0kB shmem:84028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1080.119413] Node 0 active_anon:47440kB inactive_anon:82756kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115948kB dirty:0kB writeback:0kB shmem:84028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1080.148810] Node 1 active_anon:1836kB inactive_anon:33592kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59424kB dirty:0kB writeback:0kB shmem:33800kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1080.203903] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1080.218876] Node 1 active_anon:1836kB inactive_anon:33592kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59424kB dirty:0kB writeback:0kB shmem:33800kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1080.233832] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1080.267895] Node 0 DMA32 free:18512kB min:36200kB low:45248kB high:54296kB active_anon:47440kB inactive_anon:82664kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2196kB bounce:0kB free_pcp:52kB local_pcp:0kB free_cma:0kB [ 1080.269638] Node 0 [ 1080.300334] lowmem_reserve[]: 0 0 0 0 0 [ 1080.306675] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1080.307529] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1080.335541] lowmem_reserve[]: [ 1080.364514] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1080.372854] 0 0 0 0 0 [ 1080.373010] Node 0 [ 1080.375529] Node 1 [ 1080.375562] DMA32 free:18512kB min:36200kB low:45248kB high:54296kB active_anon:47440kB inactive_anon:82664kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2196kB bounce:0kB free_pcp:52kB local_pcp:52kB free_cma:0kB [ 1080.383151] Normal free:27828kB min:53696kB low:67120kB high:80544kB active_anon:1836kB inactive_anon:33592kB active_file:44kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:544kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1080.410624] lowmem_reserve[]: 0 0 0 0 0 [ 1080.443220] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1080.448346] lowmem_reserve[]: [ 1080.471701] lowmem_reserve[]: 0 0 0 0 0 [ 1080.478897] Node 1 Normal free:27828kB min:53696kB low:67120kB high:80544kB active_anon:1836kB inactive_anon:33592kB active_file:44kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:544kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1080.481285] 0 0 0 0 0 [ 1080.515990] lowmem_reserve[]: [ 1080.518170] Node 0 DMA: 2*4kB [ 1080.521546] 0 [ 1080.521558] (ME) [ 1080.525609] 0 [ 1080.529647] Bluetooth: hci4 command 0x0419 tx timeout [ 1080.533525] 1*8kB (E) 4*16kB (UME) 4*32kB (UME) 2*64kB (ME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10960kB [ 1080.543870] 0 0 0 [ 1080.552804] Node 0 DMA: 2*4kB (ME) 1*8kB (E) 4*16kB (UME) 4*32kB (UME) 2*64kB (ME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10960kB [ 1080.556944] Node 0 [ 1080.573176] bond0 (unregistering): Released all slaves [ 1080.576123] Node 0 DMA32: 968*4kB (ME) 897*8kB (UME) 273*16kB (UME) 39*32kB (ME) 7*64kB (E) 3*128kB (UE) 2*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18520kB [ 1080.584952] DMA32: 968*4kB (ME) 897*8kB (UME) 273*16kB (UME) 39*32kB (ME) 7*64kB (E) 3*128kB (UE) 2*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18520kB [ 1080.611405] Node 0 [ 1080.628401] Node 0 [ 1080.633319] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1080.644260] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1080.655828] Node 1 Normal: 137*4kB (UM) 108*8kB (UM) 97*16kB (UM) 59*32kB (UM) 53*64kB (M) 17*128kB (M) 10*256kB (M) 7*512kB (M) 1*1024kB (M) 3*2048kB (UM) 1*4096kB (U) = 27828kB [ 1080.679055] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1080.691615] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1080.696442] Node 1 Normal: 137*4kB (UM) 108*8kB (UM) 97*16kB (UM) 59*32kB (UM) 53*64kB (M) 17*128kB (M) 10*256kB (M) 7*512kB (M) 1*1024kB (M) 3*2048kB (UM) 1*4096kB (U) = 27828kB [ 1080.710776] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1080.738583] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1080.753930] 29488 total pagecache pages [ 1080.756392] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1080.762776] 0 pages in swap cache [ 1080.778468] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1080.782894] Swap cache stats: add 0, delete 0, find 0/0 [ 1080.796083] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1080.796204] Free swap = 0kB [ 1080.819205] Total swap = 0kB [ 1080.820578] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1080.822281] 2097051 pages RAM [ 1080.840989] 0 pages HighMem/MovableOnly [ 1080.845252] 363840 pages reserved [ 1080.848885] 0 pages cma reserved [ 1080.849546] 29488 total pagecache pages [ 1080.879759] 0 pages in swap cache [ 1080.897816] Swap cache stats: add 0, delete 0, find 0/0 [ 1080.914952] Free swap = 0kB [ 1080.918129] Total swap = 0kB [ 1080.921142] 2097051 pages RAM [ 1080.924332] 0 pages HighMem/MovableOnly [ 1080.946365] 363840 pages reserved [ 1080.959561] 0 pages cma reserved [ 1080.973204] Out of memory (oom_kill_allocating_task): Kill process 4219 (syz-executor.4) score 0 or sacrifice child [ 1080.992636] Killed process 4219 (syz-executor.4) total-vm:93100kB, anon-rss:84kB, file-rss:33940kB, shmem-rss:0kB [ 1081.054651] oom_reaper: reaped process 4219 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1081.467054] syz-executor.4 (4219) used greatest stack depth: 24448 bytes left [ 1082.007302] systemd[1]: Started Journal Service. [ 1082.627239] device bridge_slave_1 left promiscuous mode [ 1082.633519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.644377] device bridge_slave_0 left promiscuous mode [ 1082.650394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.665704] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1082.705619] bond0 (unregistering): Released all slaves [ 1083.572059] IPVS: ftp: loaded support on port[0] = 21 [ 1083.725270] chnl_net:caif_netlink_parms(): no params data found [ 1083.863849] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.874155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.881690] device bridge_slave_0 entered promiscuous mode [ 1083.889150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.895881] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.904104] device bridge_slave_1 entered promiscuous mode [ 1083.928839] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1083.938531] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1083.963476] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1083.971898] team0: Port device team_slave_0 added [ 1083.977748] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1083.985141] team0: Port device team_slave_1 added [ 1084.007522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1084.013801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1084.039898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1084.052029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1084.058511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1084.083932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.095208] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1084.102935] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1084.131393] device hsr_slave_0 entered promiscuous mode [ 1084.137620] device hsr_slave_1 entered promiscuous mode [ 1084.144074] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1084.151449] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1084.253941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.260586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1084.267330] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.273723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1084.318113] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1084.324218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1084.335245] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1084.345747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1084.354569] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.376976] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.391211] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1084.397660] 8021q: adding VLAN 0 to HW filter on device team0 [ 1084.409354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1084.417935] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.424324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1084.448913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1084.457395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.463767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1084.472833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1084.481710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1084.497324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1084.507099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1084.518482] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1084.525260] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1084.533824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1084.542255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1084.551687] Bluetooth: hci2 command 0x0409 tx timeout [ 1084.557598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1084.567702] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1084.575749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1084.584024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1084.598527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1084.654090] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1084.665412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1084.695577] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1084.703350] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1084.710777] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1084.721578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1084.729505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1084.737345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1084.745418] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1084.754163] device veth0_vlan entered promiscuous mode [ 1084.764195] device veth1_vlan entered promiscuous mode [ 1084.778087] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1084.787950] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1084.795093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1084.803764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1084.813466] device veth0_macvtap entered promiscuous mode [ 1084.820873] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1084.829858] device veth1_macvtap entered promiscuous mode [ 1084.836203] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1084.845314] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1084.855245] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1084.864291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1084.875481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.884885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1084.895097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.904811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1084.914759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.924103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1084.934331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.946304] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1084.953924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1084.960998] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1084.968703] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1084.975805] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1084.983922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1084.994804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1085.005426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.015421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1085.025241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.034470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1085.044277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.056241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1085.066184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.077191] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1085.084098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1085.092347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1085.100542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:04:43 executing program 3: syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:43 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) r1 = getpgid(0x0) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x7}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) 18:04:43 executing program 0: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x7, 0x18}, 0xc) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@loopback, 0x0}, &(0x7f0000000240)=0x14) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00'}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={r2, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000500)={r4, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r3) sendmsg$IPVS_CMD_SET_DEST(r3, 0x0, 0x8884) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0)={r5, 0x0, 0x99da}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000660000000067000006009500a0e5dc3ce88500ad4a8aa7366b0000000000bca1d0104b633154c1620c3e8eab42dc533f98ee1ce906c58fa4e3c5c102e8f864b18d35fb44e2c3a532a7f9101f284e512d4b053d7fdec8d1f62e4d11b187d0ce716098ce4c1d9ef5e7c57aa10f84dfdecbbe9385a292dcdf073fd260e2887289636bfaf6b201d6e6511ee07db52273c80713d0b7c52aa05d0e6aa49c0cfe597a5000d881a6f848a05bc9be5f4c"], &(0x7f0000000480)='GPL\x00', 0x36, 0x16, &(0x7f00000004c0)=""/22, 0x100, 0x2, [], r1, 0x17, r3, 0x8, &(0x7f0000000500)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x6, 0x80, 0x3}, 0x10, 0x1bf56, r6}, 0x78) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x3}, &(0x7f0000000080)=0x8) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) 18:04:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:43 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) 18:04:43 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x61ac, 0x8}, 0x8) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={r2, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000500)={r4, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r3) sendmsg$IPVS_CMD_SET_DEST(r3, 0x0, 0x8884) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3], 0x1, 0x80800}) accept(r3, &(0x7f00000001c0)=@ieee802154={0x24, @long}, &(0x7f0000000080)=0x80) 18:04:43 executing program 3: syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x3, @null, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x3, @null, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:04:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r1, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffffffff804, &(0x7f0000000000)=0xff}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000500)={r3, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r2) sendmsg$IPVS_CMD_SET_DEST(r2, 0x0, 0x8884) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000040)={0x2, 0x3, 0x8001, 0x1, 0x9}) 18:04:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x50501, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x4, 0x11}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000100)=0x1, 0x4) 18:04:43 executing program 3: getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r0, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000500)={r2, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r1) sendmsg$IPVS_CMD_SET_DEST(r1, 0x0, 0x8884) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f00000001c0)=0x1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) socketpair(0x8, 0x6, 0x7fffffff, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x9, 0x400}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000080)={r5, 0x88}, 0x8) [ 1086.607123] Bluetooth: hci2 command 0x041b tx timeout [ 1086.739109] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1086.754012] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1086.760932] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1086.779031] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1086.784358] CPU: 0 PID: 4777 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1086.791521] syz-executor.1: [ 1086.792153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1086.792158] Call Trace: [ 1086.792187] dump_stack+0x1b2/0x281 [ 1086.792202] warn_alloc.cold+0x96/0x1cc [ 1086.792216] ? zone_watermark_ok_safe+0x220/0x220 [ 1086.796049] syz-executor.3: [ 1086.804693] __alloc_pages_nodemask+0x2127/0x2720 [ 1086.804712] ? lock_acquire+0x170/0x3f0 [ 1086.804732] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1086.804749] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1086.804762] ? __mutex_unlock_slowpath+0x75/0x770 [ 1086.804772] ? retint_kernel+0x2d/0x2d [ 1086.804785] alloc_pages_current+0x155/0x260 [ 1086.804800] ion_page_pool_alloc+0x118/0x1b0 [ 1086.813776] page allocation failure: order:4 [ 1086.814988] ion_system_heap_allocate+0x133/0x8c0 [ 1086.815002] ? ion_alloc+0x187/0x810 [ 1086.815013] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1086.815025] ? ion_system_contig_heap_create+0x130/0x130 [ 1086.828978] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1086.831683] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1086.831698] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1086.831714] ion_alloc+0x204/0x810 [ 1086.831729] ? ion_dma_buf_release+0x40/0x40 [ 1086.841185] syz-executor.5 cpuset= [ 1086.842029] ? __might_fault+0x177/0x1b0 [ 1086.850933] page allocation failure: order:4 [ 1086.855291] ion_ioctl+0xea/0x1f0 [ 1086.855305] ? ion_query_heaps+0x360/0x360 [ 1086.855319] ? ion_query_heaps+0x360/0x360 [ 1086.855330] do_vfs_ioctl+0x75a/0xff0 [ 1086.855344] ? ioctl_preallocate+0x1a0/0x1a0 [ 1086.863377] (null) [ 1086.864260] ? lock_downgrade+0x740/0x740 [ 1086.873216] syz-executor.5 cpuset= [ 1086.878641] ? __fget+0x225/0x360 [ 1086.878653] ? do_vfs_ioctl+0xff0/0xff0 [ 1086.878665] ? security_file_ioctl+0x83/0xb0 [ 1086.878676] SyS_ioctl+0x7f/0xb0 [ 1086.878684] ? do_vfs_ioctl+0xff0/0xff0 [ 1086.878696] do_syscall_64+0x1d5/0x640 [ 1086.878712] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1086.878721] RIP: 0033:0x465ef9 [ 1086.878730] RSP: 002b:00007f785ae94188 EFLAGS: 00000246 [ 1086.890961] / [ 1086.891648] ORIG_RAX: 0000000000000010 [ 1086.901331] / [ 1086.901537] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1086.905235] syz-executor.1 cpuset= [ 1086.909490] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1086.909496] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1086.909501] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1086.909507] R13: 00007ffc771f8d7f R14: 00007f785ae94300 R15: 0000000000022000 [ 1086.920617] Mem-Info: [ 1086.932740] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1086.941132] active_anon:12950 inactive_anon:29089 isolated_anon:0 [ 1086.941132] active_file:1578 inactive_file:5256 isolated_file:0 [ 1086.941132] unevictable:0 dirty:108 writeback:0 unstable:0 [ 1086.941132] slab_reclaimable:12740 slab_unreclaimable:116240 [ 1086.941132] mapped:57284 shmem:29458 pagetables:765 bounce:0 [ 1086.941132] free:118074 free_pcp:383 free_cma:0 [ 1086.945177] mems_allowed=0-1 [ 1086.949269] Node 0 active_anon:50248kB inactive_anon:82772kB active_file:3500kB inactive_file:16504kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138736kB dirty:228kB writeback:0kB shmem:84048kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1086.957512] mems_allowed=0-1 [ 1086.962675] Node 1 active_anon:1552kB inactive_anon:33584kB active_file:2812kB inactive_file:4520kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:90400kB dirty:204kB writeback:0kB shmem:33784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1086.968710] CPU: 1 PID: 4775 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1086.975468] Node 0 [ 1086.975811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1086.983408] DMA free:11124kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1086.984369] Call Trace: [ 1086.995635] syz-executor.0: [ 1086.997106] dump_stack+0x1b2/0x281 [ 1086.997120] warn_alloc.cold+0x96/0x1cc [ 1086.997132] ? zone_watermark_ok_safe+0x220/0x220 [ 1086.997158] __alloc_pages_nodemask+0x2127/0x2720 [ 1086.997174] ? ___preempt_schedule+0x16/0x18 [ 1086.997190] ? lock_acquire+0x170/0x3f0 [ 1086.997205] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1087.010001] page allocation failure: order:4 [ 1087.015497] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1087.015512] ? __mutex_unlock_slowpath+0x75/0x770 [ 1087.015528] alloc_pages_current+0x155/0x260 [ 1087.015544] ion_page_pool_alloc+0x118/0x1b0 [ 1087.025422] lowmem_reserve[]: [ 1087.030192] ion_system_heap_allocate+0x133/0x8c0 [ 1087.030203] ? ion_alloc+0x187/0x810 [ 1087.030214] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1087.030225] ? ion_system_contig_heap_create+0x130/0x130 [ 1087.030236] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1087.030249] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1087.030260] ion_alloc+0x204/0x810 [ 1087.030274] ? ion_dma_buf_release+0x40/0x40 [ 1087.030286] ? __might_fault+0x177/0x1b0 [ 1087.030298] ion_ioctl+0xea/0x1f0 [ 1087.030308] ? ion_query_heaps+0x360/0x360 [ 1087.030322] ? trace_hardirqs_on+0x10/0x10 [ 1087.030333] ? ion_query_heaps+0x360/0x360 [ 1087.048176] (null) [ 1087.081656] do_vfs_ioctl+0x75a/0xff0 [ 1087.081671] ? ioctl_preallocate+0x1a0/0x1a0 [ 1087.081680] ? lock_downgrade+0x740/0x740 [ 1087.081694] ? __fget+0x225/0x360 [ 1087.081704] ? do_vfs_ioctl+0xff0/0xff0 [ 1087.081714] ? security_file_ioctl+0x83/0xb0 [ 1087.081723] SyS_ioctl+0x7f/0xb0 [ 1087.081730] ? do_vfs_ioctl+0xff0/0xff0 [ 1087.081741] do_syscall_64+0x1d5/0x640 [ 1087.081756] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1087.081765] RIP: 0033:0x465ef9 [ 1087.081769] RSP: 002b:00007fd7ebaaf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1087.081780] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465ef9 [ 1087.081785] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1087.081790] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1087.081795] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1087.081800] R13: 00007ffc90d553bf R14: 00007fd7ebaaf300 R15: 0000000000022000 [ 1087.084093] CPU: 1 PID: 4769 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1087.093760] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1087.113305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1087.113310] Call Trace: [ 1087.113332] dump_stack+0x1b2/0x281 [ 1087.113346] warn_alloc.cold+0x96/0x1cc [ 1087.113359] ? zone_watermark_ok_safe+0x220/0x220 [ 1087.113380] __alloc_pages_nodemask+0x2127/0x2720 [ 1087.113391] ? _raw_spin_unlock_irq+0x24/0x80 [ 1087.113405] ? lock_acquire+0x170/0x3f0 [ 1087.113419] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1087.113435] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1087.113446] ? __mutex_unlock_slowpath+0x75/0x770 [ 1087.113461] alloc_pages_current+0x155/0x260 [ 1087.113476] ion_page_pool_alloc+0x118/0x1b0 [ 1087.113487] ion_system_heap_allocate+0x133/0x8c0 [ 1087.113498] ? ion_alloc+0x187/0x810 [ 1087.113507] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1087.113517] ? ion_system_contig_heap_create+0x130/0x130 [ 1087.113527] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1087.113537] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1087.113549] ion_alloc+0x204/0x810 [ 1087.113565] ? ion_dma_buf_release+0x40/0x40 [ 1087.113576] ? __might_fault+0x177/0x1b0 [ 1087.113588] ion_ioctl+0xea/0x1f0 [ 1087.113599] ? ion_query_heaps+0x360/0x360 [ 1087.113610] ? ion_query_heaps+0x360/0x360 [ 1087.113621] do_vfs_ioctl+0x75a/0xff0 [ 1087.113632] ? ioctl_preallocate+0x1a0/0x1a0 [ 1087.113640] ? lock_downgrade+0x740/0x740 [ 1087.113652] ? __fget+0x225/0x360 [ 1087.113660] ? do_vfs_ioctl+0xff0/0xff0 [ 1087.113671] ? security_file_ioctl+0x83/0xb0 [ 1087.113680] SyS_ioctl+0x7f/0xb0 [ 1087.113687] ? do_vfs_ioctl+0xff0/0xff0 [ 1087.113698] do_syscall_64+0x1d5/0x640 [ 1087.113713] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1087.113737] RIP: 0033:0x465ef9 [ 1087.125069] 0 [ 1087.145128] RSP: 002b:00007fd7ebad0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1087.145138] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1087.145143] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1087.145148] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1087.145152] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1087.145158] R13: 00007ffc90d553bf R14: 00007fd7ebad0300 R15: 0000000000022000 [ 1087.153629] / [ 1087.182506] (null) [ 1087.229361] mems_allowed=0-1 [ 1087.239583] syz-executor.3 cpuset= [ 1087.251954] CPU: 1 PID: 4782 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 1087.259554] 2717 [ 1087.259740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1087.263578] 2718 [ 1087.268893] Call Trace: [ 1087.268915] dump_stack+0x1b2/0x281 [ 1087.268930] warn_alloc.cold+0x96/0x1cc [ 1087.268942] ? zone_watermark_ok_safe+0x220/0x220 [ 1087.268964] __alloc_pages_nodemask+0x2127/0x2720 [ 1087.268980] ? lock_acquire+0x170/0x3f0 [ 1087.268995] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1087.269011] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1087.274597] / [ 1087.279482] ? __mutex_unlock_slowpath+0x75/0x770 [ 1087.292643] 2718 [ 1087.296301] alloc_pages_current+0x155/0x260 [ 1087.296319] ion_page_pool_alloc+0x118/0x1b0 [ 1087.296331] ion_system_heap_allocate+0x133/0x8c0 [ 1087.296341] ? ion_alloc+0x187/0x810 [ 1087.296351] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1087.296361] ? ion_system_contig_heap_create+0x130/0x130 [ 1087.296371] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1087.296381] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1087.296393] ion_alloc+0x204/0x810 [ 1087.300019] 2718 [ 1087.304157] ? ion_dma_buf_release+0x40/0x40 [ 1087.304172] ? __might_fault+0x177/0x1b0 [ 1087.304185] ion_ioctl+0xea/0x1f0 [ 1087.304196] ? ion_query_heaps+0x360/0x360 [ 1087.317704] mems_allowed=0-1 [ 1087.318682] ? ion_query_heaps+0x360/0x360 [ 1087.318695] do_vfs_ioctl+0x75a/0xff0 [ 1087.318708] ? ioctl_preallocate+0x1a0/0x1a0 [ 1087.318721] ? lock_downgrade+0x740/0x740 [ 1087.334682] ? __fget+0x225/0x360 [ 1087.334695] ? do_vfs_ioctl+0xff0/0xff0 [ 1087.334710] ? security_file_ioctl+0x83/0xb0 [ 1087.350678] Node 0 [ 1087.355498] SyS_ioctl+0x7f/0xb0 [ 1087.355509] ? do_vfs_ioctl+0xff0/0xff0 [ 1087.355521] do_syscall_64+0x1d5/0x640 [ 1087.355537] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1087.373840] DMA32 free:395728kB min:36200kB low:45248kB high:54296kB active_anon:50316kB inactive_anon:82680kB active_file:3592kB inactive_file:16408kB unevictable:0kB writepending:260kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2744kB bounce:0kB free_pcp:1040kB local_pcp:432kB free_cma:0kB [ 1087.381050] RIP: 0033:0x465ef9 [ 1087.381056] RSP: 002b:00007f5842689188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1087.381066] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1087.381071] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1087.381077] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1087.381083] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1087.381089] R13: 00007ffc66db249f R14: 00007f5842689300 R15: 0000000000022000 [ 1087.530895] CPU: 1 PID: 4786 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1087.532966] syz-executor.0 cpuset= [ 1087.538105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1087.538109] Call Trace: [ 1087.538128] dump_stack+0x1b2/0x281 [ 1087.538141] warn_alloc.cold+0x96/0x1cc [ 1087.538152] ? zone_watermark_ok_safe+0x220/0x220 [ 1087.538175] __alloc_pages_nodemask+0x2127/0x2720 [ 1087.538191] ? lock_acquire+0x170/0x3f0 [ 1087.538206] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1087.542548] / [ 1087.546415] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1087.551216] mems_allowed=0-1 [ 1087.554509] ? __mutex_unlock_slowpath+0x75/0x770 [ 1087.554525] alloc_pages_current+0x155/0x260 [ 1087.749305] lowmem_reserve[]: [ 1087.753337] ion_page_pool_alloc+0x118/0x1b0 [ 1087.753349] ion_system_heap_allocate+0x133/0x8c0 [ 1087.778207] 0 [ 1087.780611] ? ion_alloc+0x187/0x810 [ 1087.780625] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1087.791743] 0 [ 1087.792281] ? ion_system_contig_heap_create+0x130/0x130 [ 1087.807314] 0 [ 1087.810774] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1087.810790] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1087.829741] 0 [ 1087.845186] ion_alloc+0x204/0x810 [ 1087.845203] ? ion_dma_buf_release+0x40/0x40 [ 1087.845215] ? __might_fault+0x177/0x1b0 [ 1087.845226] ion_ioctl+0xea/0x1f0 [ 1087.845235] ? ion_query_heaps+0x360/0x360 [ 1087.845248] ? ion_query_heaps+0x360/0x360 [ 1087.845258] do_vfs_ioctl+0x75a/0xff0 [ 1087.845269] ? ioctl_preallocate+0x1a0/0x1a0 [ 1087.845279] ? lock_downgrade+0x740/0x740 [ 1087.845292] ? __fget+0x225/0x360 [ 1087.891464] 0 [ 1087.892484] ? do_vfs_ioctl+0xff0/0xff0 [ 1087.923457] ? security_file_ioctl+0x83/0xb0 [ 1087.923470] SyS_ioctl+0x7f/0xb0 [ 1087.949300] Node 0 [ 1087.952364] ? do_vfs_ioctl+0xff0/0xff0 [ 1087.952379] do_syscall_64+0x1d5/0x640 [ 1087.952395] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1087.980902] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1087.984987] RIP: 0033:0x465ef9 [ 1087.984992] RSP: 002b:00007fdf5e1ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1087.985004] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1087.985013] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1088.002935] lowmem_reserve[]: [ 1088.004546] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1088.004552] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1088.004558] R13: 00007ffcbaeb2d6f R14: 00007fdf5e1ae300 R15: 0000000000022000 [ 1088.154661] CPU: 0 PID: 4763 Comm: syz-executor.0 Not tainted 4.14.222-syzkaller #0 [ 1088.162563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1088.171918] Call Trace: [ 1088.174515] dump_stack+0x1b2/0x281 [ 1088.178145] warn_alloc.cold+0x96/0x1cc [ 1088.182213] ? zone_watermark_ok_safe+0x220/0x220 [ 1088.187082] __alloc_pages_nodemask+0x2127/0x2720 [ 1088.191923] ? __schedule+0x893/0x1de0 [ 1088.195857] ? lock_acquire+0x170/0x3f0 [ 1088.199864] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1088.204716] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1088.210179] ? __mutex_unlock_slowpath+0x75/0x770 [ 1088.215031] alloc_pages_current+0x155/0x260 [ 1088.219451] ion_page_pool_alloc+0x118/0x1b0 [ 1088.223964] ion_system_heap_allocate+0x133/0x8c0 [ 1088.228832] ? ion_alloc+0x187/0x810 [ 1088.232633] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1088.238171] ? ion_system_contig_heap_create+0x130/0x130 [ 1088.243793] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1088.248810] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1088.253655] ion_alloc+0x204/0x810 [ 1088.257205] ? ion_dma_buf_release+0x40/0x40 [ 1088.261616] ? __might_fault+0x177/0x1b0 [ 1088.265803] ion_ioctl+0xea/0x1f0 [ 1088.269262] ? ion_query_heaps+0x360/0x360 [ 1088.273500] ? ion_query_heaps+0x360/0x360 [ 1088.277741] do_vfs_ioctl+0x75a/0xff0 [ 1088.281544] ? ioctl_preallocate+0x1a0/0x1a0 [ 1088.286315] ? lock_downgrade+0x740/0x740 [ 1088.290473] ? __fget+0x225/0x360 [ 1088.293929] ? do_vfs_ioctl+0xff0/0xff0 [ 1088.297945] ? security_file_ioctl+0x83/0xb0 [ 1088.298991] warn_alloc_show_mem: 2 callbacks suppressed [ 1088.298995] Mem-Info: [ 1088.302357] SyS_ioctl+0x7f/0xb0 [ 1088.302368] ? do_vfs_ioctl+0xff0/0xff0 [ 1088.302380] do_syscall_64+0x1d5/0x640 [ 1088.302397] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1088.326751] RIP: 0033:0x465ef9 [ 1088.329969] RSP: 002b:00007ff463c74188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1088.338428] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1088.346564] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1088.351005] active_anon:12892 inactive_anon:29088 isolated_anon:0 [ 1088.351005] active_file:1809 inactive_file:5318 isolated_file:0 [ 1088.351005] unevictable:0 dirty:126 writeback:0 unstable:0 [ 1088.351005] slab_reclaimable:12713 slab_unreclaimable:116830 [ 1088.351005] mapped:57480 shmem:29457 pagetables:792 bounce:0 [ 1088.351005] free:180791 free_pcp:498 free_cma:0 [ 1088.353966] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1088.353973] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1088.353978] R13: 00007ffd9671605f R14: 00007ff463c74300 R15: 0000000000022000 [ 1088.360281] 0 0 0 0 0 [ 1088.443015] Node 1 Normal free:257604kB min:53696kB low:67120kB high:80544kB active_anon:1120kB inactive_anon:33584kB active_file:3640kB inactive_file:3224kB unevictable:0kB writepending:204kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:404kB bounce:0kB free_pcp:1344kB local_pcp:640kB free_cma:0kB [ 1088.456225] Node 0 active_anon:50348kB inactive_anon:82768kB active_file:4296kB inactive_file:17548kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138712kB dirty:300kB writeback:0kB shmem:84044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1088.487514] Node 1 active_anon:1120kB inactive_anon:33584kB active_file:3640kB inactive_file:3224kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:90508kB dirty:204kB writeback:0kB shmem:33784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1088.556531] Node 0 DMA free:11124kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1088.601293] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1088.613647] Node 0 DMA32 free:490784kB min:36200kB low:45248kB high:54296kB active_anon:50348kB inactive_anon:82676kB active_file:4100kB inactive_file:17244kB unevictable:0kB writepending:300kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2764kB bounce:0kB free_pcp:1288kB local_pcp:648kB free_cma:0kB [ 1088.613681] lowmem_reserve[]: 0 0 0 0 0 [ 1088.672791] lowmem_reserve[]: [ 1088.673901] Node 0 [ 1088.686404] Bluetooth: hci2 command 0x040f tx timeout [ 1088.690712] DMA: [ 1088.696097] 0 0 0 0 0 [ 1088.701772] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1088.703962] 17*4kB [ 1088.728308] lowmem_reserve[]: 0 0 0 0 0 [ 1088.731065] (UME) [ 1088.747229] Node 1 Normal free:280104kB min:53696kB low:67120kB high:80544kB active_anon:1120kB inactive_anon:33584kB active_file:3640kB inactive_file:3224kB unevictable:0kB writepending:204kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:404kB bounce:0kB free_pcp:1428kB local_pcp:704kB free_cma:0kB [ 1088.768434] 16*8kB [ 1088.781321] lowmem_reserve[]: 0 0 0 0 0 [ 1088.793768] Node 0 DMA: 17*4kB (UME) 16*8kB (UE) 13*16kB [ 1088.796163] (UE) [ 1088.799524] (UME) 13*32kB (UME) 3*64kB (UME) 1*128kB (E) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11124kB [ 1088.822134] Node 0 DMA32: 9507*4kB (UME) 2563*8kB (UME) 7522*16kB (UME) 7602*32kB (UME) 311*64kB (UM) 58*128kB (U) 8*256kB (UM) 8*512kB (U) 44*1024kB (U) 0*2048kB 0*4096kB = 500676kB [ 1088.846394] 13*16kB (UME) 13*32kB (UME) 3*64kB (UME) 1*128kB (E) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11124kB [ 1088.862525] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1088.881886] Node 0 DMA32: [ 1088.881908] Node 1 Normal: 6763*4kB (UM) 2314*8kB (UM) 2136*16kB (UM) 1940*32kB (UM) 410*64kB (U) 87*128kB (U) 61*256kB (U) 54*512kB (U) 84*1024kB (U) 0*2048kB 0*4096kB = 308476kB [ 1088.901105] 9621*4kB (UME) 2575*8kB (UME) 7542*16kB (UME) 7624*32kB (UME) 349*64kB (UM) [ 1088.905366] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1088.914571] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1088.923789] 59*128kB (U) 8*256kB (UM) 8*512kB (U) 44*1024kB (U) 0*2048kB 0*4096kB = 504812kB [ 1088.956443] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1088.965339] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1088.968407] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1088.999547] 36562 total pagecache pages [ 1089.036610] 0 pages in swap cache [ 1089.039513] Node 1 [ 1089.040113] Swap cache stats: add 0, delete 0, find 0/0 [ 1089.040122] Normal: [ 1089.042336] Free swap = 0kB [ 1089.042340] Total swap = 0kB [ 1089.042346] 2097051 pages RAM [ 1089.042353] 0 pages HighMem/MovableOnly [ 1089.079515] 6763*4kB (UM) 2314*8kB (UM) 2136*16kB (UM) 1940*32kB (UM) 410*64kB (U) 87*128kB (U) 61*256kB (U) 54*512kB (U) 84*1024kB (U) 0*2048kB 0*4096kB = 308476kB [ 1089.103340] 363840 pages reserved [ 1089.106860] 0 pages cma reserved [ 1089.146456] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1089.155445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1089.197104] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1089.206004] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1089.257858] 36578 total pagecache pages [ 1089.262108] 0 pages in swap cache [ 1089.265544] Swap cache stats: add 0, delete 0, find 0/0 [ 1089.273198] Free swap = 0kB [ 1089.276240] Total swap = 0kB [ 1089.284219] 2097051 pages RAM [ 1089.300201] 0 pages HighMem/MovableOnly [ 1089.304205] 363840 pages reserved [ 1089.319672] 0 pages cma reserved [ 1089.717224] oom_reaper: reaped process 4782 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1089.764577] oom_reaper: reaped process 4786 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1089.812262] oom_reaper: reaped process 4775 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1089.878647] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1089.900739] systemd-journal cpuset=/ mems_allowed=0-1 [ 1089.905973] CPU: 1 PID: 4386 Comm: systemd-journal Not tainted 4.14.222-syzkaller #0 [ 1089.913854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1089.923641] Call Trace: [ 1089.926234] dump_stack+0x1b2/0x281 [ 1089.929868] dump_header+0x178/0x82f [ 1089.933592] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1089.938700] ? ___ratelimit+0x2cd/0x530 [ 1089.942672] oom_kill_process.cold+0x10/0xb18 [ 1089.947184] out_of_memory+0xe3e/0x1190 [ 1089.951168] ? oom_killer_disable+0x1c0/0x1c0 [ 1089.955672] ? mutex_trylock+0x152/0x1a0 [ 1089.959742] __alloc_pages_nodemask+0x23e1/0x2720 [ 1089.964607] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1089.966613] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1089.969465] alloc_pages_current+0x155/0x260 [ 1089.969472] (null) [ 1089.980739] filemap_fault+0xea3/0x1980 [ 1089.980757] ext4_filemap_fault+0x84/0xb0 [ 1089.980767] __do_fault+0xfa/0x380 [ 1089.980787] __handle_mm_fault+0x2497/0x4620 [ 1089.993860] syz-executor.3 cpuset= [ 1089.995463] ? ep_poll+0x1ab/0xa50 [ 1089.999055] / [ 1090.003380] ? vm_insert_page+0x7c0/0x7c0 [ 1090.007056] syz-executor.2: [ 1090.010437] handle_mm_fault+0x391/0x860 [ 1090.012117] page allocation failure: order:0 [ 1090.016261] __do_page_fault+0x549/0xad0 [ 1090.024723] mems_allowed=0-1 [ 1090.027704] ? spurious_fault+0x640/0x640 [ 1090.027713] ? do_page_fault+0x60/0x500 [ 1090.027723] ? page_fault+0x2f/0x50 [ 1090.027730] page_fault+0x45/0x50 [ 1090.027739] RIP: 0001:0xffffffffffffffff [ 1090.027743] RSP: 1e9951e0:00007ffc2fa29e60 EFLAGS: 7ffc2fa29c80 [ 1090.027919] syz-executor.5: [ 1090.031819] CPU: 0 PID: 4786 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1090.034904] page allocation failure: order:0 [ 1090.039053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1090.039057] Call Trace: [ 1090.039076] dump_stack+0x1b2/0x281 [ 1090.039090] warn_alloc.cold+0x96/0x1cc [ 1090.039102] ? zone_watermark_ok_safe+0x220/0x220 [ 1090.039113] ? usleep_range+0x130/0x130 [ 1090.043098] syz-executor.5: [ 1090.046702] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1090.046715] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1090.046725] ? run_timer_softirq+0x5a0/0x5a0 [ 1090.046743] __alloc_pages_nodemask+0x2127/0x2720 [ 1090.066376] page allocation failure: order:0 [ 1090.071178] ? lock_acquire+0x170/0x3f0 [ 1090.075578] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1090.084936] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1090.084948] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1090.084964] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1090.084979] ? alloc_pages_current+0x15d/0x260 [ 1090.096377] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1090.099955] alloc_pages_current+0x155/0x260 [ 1090.103905] (null) [ 1090.107033] ion_page_pool_alloc+0x118/0x1b0 [ 1090.107043] ion_system_heap_allocate+0x133/0x8c0 [ 1090.107054] ? ion_alloc+0x187/0x810 [ 1090.107067] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1090.126379] (null) [ 1090.127779] ? ion_system_contig_heap_create+0x130/0x130 [ 1090.132172] syz-executor.5 cpuset= [ 1090.136158] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1090.143303] syz-executor.5 cpuset= [ 1090.148077] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1090.148092] ion_alloc+0x204/0x810 [ 1090.148107] ? ion_dma_buf_release+0x40/0x40 [ 1090.156384] / [ 1090.158021] ? __might_fault+0x177/0x1b0 [ 1090.162580] mems_allowed=0-1 [ 1090.169671] ion_ioctl+0xea/0x1f0 [ 1090.169683] ? ion_query_heaps+0x360/0x360 [ 1090.169695] ? ion_query_heaps+0x360/0x360 [ 1090.169707] do_vfs_ioctl+0x75a/0xff0 [ 1090.186389] / [ 1090.189149] ? ioctl_preallocate+0x1a0/0x1a0 [ 1090.194664] mems_allowed=0-1 [ 1090.196794] ? lock_downgrade+0x740/0x740 [ 1090.196807] ? __fget+0x225/0x360 [ 1090.196816] ? do_vfs_ioctl+0xff0/0xff0 [ 1090.196827] ? security_file_ioctl+0x83/0xb0 [ 1090.196837] SyS_ioctl+0x7f/0xb0 [ 1090.280314] ? do_vfs_ioctl+0xff0/0xff0 [ 1090.284376] do_syscall_64+0x1d5/0x640 [ 1090.288278] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1090.293474] RIP: 0033:0x465ef9 [ 1090.296653] RSP: 002b:00007fdf5e1ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1090.304356] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1090.311623] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1090.318885] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1090.326147] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1090.333419] R13: 00007ffcbaeb2d6f R14: 00007fdf5e1ae300 R15: 0000000000022000 [ 1090.340706] CPU: 1 PID: 4775 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1090.349138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1090.358500] Call Trace: [ 1090.361106] dump_stack+0x1b2/0x281 [ 1090.364754] warn_alloc.cold+0x96/0x1cc [ 1090.366713] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1090.368737] ? zone_watermark_ok_safe+0x220/0x220 [ 1090.368751] ? usleep_range+0x130/0x130 [ 1090.385191] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1090.390306] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1090.395335] ? run_timer_softirq+0x5a0/0x5a0 [ 1090.399713] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1090.399760] __alloc_pages_nodemask+0x2127/0x2720 [ 1090.399779] ? lock_acquire+0x170/0x3f0 [ 1090.414090] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1090.419025] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1090.423523] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1090.429159] alloc_pages_current+0x155/0x260 [ 1090.433578] ion_page_pool_alloc+0x118/0x1b0 [ 1090.437990] ion_system_heap_allocate+0x133/0x8c0 [ 1090.442838] ? ion_alloc+0x187/0x810 [ 1090.446549] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1090.451997] ? ion_system_contig_heap_create+0x130/0x130 [ 1090.457443] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1090.462460] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1090.467313] ion_alloc+0x204/0x810 [ 1090.470858] ? ion_dma_buf_release+0x40/0x40 [ 1090.475262] ? __might_fault+0x177/0x1b0 [ 1090.479326] ion_ioctl+0xea/0x1f0 [ 1090.482780] ? ion_query_heaps+0x360/0x360 [ 1090.487023] ? trace_hardirqs_on+0x10/0x10 [ 1090.491267] ? ion_query_heaps+0x360/0x360 [ 1090.495499] do_vfs_ioctl+0x75a/0xff0 [ 1090.500038] ? ioctl_preallocate+0x1a0/0x1a0 [ 1090.504444] ? lock_downgrade+0x740/0x740 [ 1090.508595] ? __fget+0x225/0x360 [ 1090.512046] ? do_vfs_ioctl+0xff0/0xff0 [ 1090.516022] ? security_file_ioctl+0x83/0xb0 [ 1090.520423] SyS_ioctl+0x7f/0xb0 [ 1090.523786] ? do_vfs_ioctl+0xff0/0xff0 [ 1090.527776] do_syscall_64+0x1d5/0x640 [ 1090.531673] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1090.536887] RIP: 0033:0x465ef9 [ 1090.540067] RSP: 002b:00007fd7ebaaf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1090.547812] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465ef9 [ 1090.555354] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1090.562622] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1090.569897] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1090.577517] R13: 00007ffc90d553bf R14: 00007fd7ebaaf300 R15: 0000000000022000 [ 1090.601346] CPU: 0 PID: 4777 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1090.609199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1090.618681] Call Trace: [ 1090.621272] dump_stack+0x1b2/0x281 [ 1090.624990] warn_alloc.cold+0x96/0x1cc [ 1090.629398] ? zone_watermark_ok_safe+0x220/0x220 [ 1090.634343] ? usleep_range+0x130/0x130 [ 1090.638308] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1090.643407] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1090.649040] ? run_timer_softirq+0x5a0/0x5a0 [ 1090.653461] __alloc_pages_nodemask+0x2127/0x2720 [ 1090.656373] Mem-Info: [ 1090.658300] ? lock_acquire+0x170/0x3f0 [ 1090.660709] active_anon:12820 inactive_anon:29088 isolated_anon:0 [ 1090.660709] active_file:5 inactive_file:29 isolated_file:0 [ 1090.660709] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1090.660709] slab_reclaimable:12699 slab_unreclaimable:116708 [ 1090.660709] mapped:52735 shmem:29457 pagetables:787 bounce:0 [ 1090.660709] free:14392 free_pcp:16 free_cma:0 [ 1090.664687] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1090.702584] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1090.707092] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1090.712538] ? retint_kernel+0x2d/0x2d [ 1090.716423] alloc_pages_current+0x155/0x260 [ 1090.720845] ion_page_pool_alloc+0x118/0x1b0 [ 1090.725252] ion_system_heap_allocate+0x133/0x8c0 [ 1090.730097] ? ion_alloc+0x187/0x810 [ 1090.733849] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1090.736391] Node 0 active_anon:50052kB inactive_anon:82768kB active_file:4kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126352kB dirty:0kB writeback:0kB shmem:84044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1090.739297] ? ion_system_contig_heap_create+0x130/0x130 [ 1090.772956] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1090.779278] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1090.784124] ion_alloc+0x204/0x810 [ 1090.787695] ? ion_dma_buf_release+0x40/0x40 [ 1090.792632] ? __might_fault+0x177/0x1b0 [ 1090.796383] Node 1 active_anon:1228kB inactive_anon:33584kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:84588kB dirty:0kB writeback:0kB shmem:33784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1090.796690] ion_ioctl+0xea/0x1f0 [ 1090.829256] ? ion_query_heaps+0x360/0x360 [ 1090.833577] ? ion_query_heaps+0x360/0x360 [ 1090.838171] do_vfs_ioctl+0x75a/0xff0 [ 1090.842057] ? ioctl_preallocate+0x1a0/0x1a0 [ 1090.846551] ? lock_downgrade+0x740/0x740 [ 1090.850785] ? __fget+0x225/0x360 [ 1090.855365] ? do_vfs_ioctl+0xff0/0xff0 [ 1090.856372] Node 0 [ 1090.859944] ? security_file_ioctl+0x83/0xb0 [ 1090.859964] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1090.862275] SyS_ioctl+0x7f/0xb0 [ 1090.876381] lowmem_reserve[]: [ 1090.894427] ? do_vfs_ioctl+0xff0/0xff0 [ 1090.894440] do_syscall_64+0x1d5/0x640 [ 1090.894457] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1090.894468] RIP: 0033:0x465ef9 [ 1090.920779] RSP: 002b:00007f785ae94188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1090.926373] 0 [ 1090.928484] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1090.928492] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1090.930543] 2717 [ 1090.937799] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1090.937804] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1090.937809] R13: 00007ffc771f8d7f R14: 00007f785ae94300 R15: 0000000000022000 [ 1090.961584] warn_alloc_show_mem: 2 callbacks suppressed [ 1090.961589] Mem-Info: [ 1090.974664] Bluetooth: hci2 command 0x0419 tx timeout [ 1091.010885] active_anon:12820 inactive_anon:29088 isolated_anon:0 [ 1091.010885] active_file:5 inactive_file:379 isolated_file:0 [ 1091.010885] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1091.010885] slab_reclaimable:12699 slab_unreclaimable:116708 [ 1091.010885] mapped:52960 shmem:29457 pagetables:787 bounce:0 [ 1091.010885] free:43196 free_pcp:163 free_cma:0 [ 1091.018237] CPU: 1 PID: 4769 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1091.051958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1091.061314] Call Trace: [ 1091.063908] dump_stack+0x1b2/0x281 [ 1091.067540] warn_alloc.cold+0x96/0x1cc [ 1091.071533] ? zone_watermark_ok_safe+0x220/0x220 [ 1091.076378] ? usleep_range+0x130/0x130 [ 1091.080444] ? try_to_free_pages+0x23f/0x6e0 [ 1091.084864] ? _find_next_bit+0xdb/0x100 [ 1091.088934] ? run_timer_softirq+0x5a0/0x5a0 [ 1091.093359] __alloc_pages_nodemask+0x2127/0x2720 [ 1091.098211] ? lock_acquire+0x170/0x3f0 [ 1091.102200] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1091.107056] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1091.111559] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1091.117026] alloc_pages_current+0x155/0x260 [ 1091.121446] ion_page_pool_alloc+0x118/0x1b0 [ 1091.125861] ion_system_heap_allocate+0x133/0x8c0 [ 1091.130712] ? ion_alloc+0x187/0x810 [ 1091.134437] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1091.139905] ? ion_system_contig_heap_create+0x130/0x130 [ 1091.145361] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1091.150385] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1091.155498] ion_alloc+0x204/0x810 [ 1091.159046] ? ion_dma_buf_release+0x40/0x40 [ 1091.163484] ? __might_fault+0x177/0x1b0 [ 1091.167560] ion_ioctl+0xea/0x1f0 [ 1091.171018] ? ion_query_heaps+0x360/0x360 [ 1091.175258] ? ion_query_heaps+0x360/0x360 [ 1091.179516] do_vfs_ioctl+0x75a/0xff0 [ 1091.183407] ? ioctl_preallocate+0x1a0/0x1a0 [ 1091.187814] ? lock_downgrade+0x740/0x740 [ 1091.191962] ? __fget+0x225/0x360 [ 1091.195414] ? do_vfs_ioctl+0xff0/0xff0 [ 1091.197015] Node 0 active_anon:50052kB inactive_anon:82768kB active_file:4kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126352kB dirty:0kB writeback:0kB shmem:84044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1091.199391] ? security_file_ioctl+0x83/0xb0 [ 1091.231577] SyS_ioctl+0x7f/0xb0 [ 1091.234955] ? do_vfs_ioctl+0xff0/0xff0 [ 1091.238935] do_syscall_64+0x1d5/0x640 [ 1091.242866] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1091.248076] RIP: 0033:0x465ef9 [ 1091.251263] RSP: 002b:00007fd7ebad0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1091.258975] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1091.266355] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1091.266492] Node 1 active_anon:1228kB inactive_anon:33584kB active_file:716kB inactive_file:892kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:85688kB dirty:0kB writeback:0kB shmem:33784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1091.273660] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1091.273670] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1091.316248] R13: 00007ffc90d553bf R14: 00007fd7ebad0300 R15: 0000000000022000 [ 1091.326194] 2718 2718 2718 [ 1091.329928] Node 0 DMA32 free:45088kB min:36200kB low:45248kB high:54296kB active_anon:50052kB inactive_anon:82676kB active_file:4kB inactive_file:100kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2744kB bounce:0kB free_pcp:376kB local_pcp:132kB free_cma:0kB [ 1091.357091] Node 0 DMA free:11116kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1091.361077] lowmem_reserve[]: 0 0 0 0 0 [ 1091.399295] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1091.428155] lowmem_reserve[]: 0 0 0 0 0 [ 1091.433108] Node 1 Normal free:464052kB min:53696kB low:67120kB high:80544kB active_anon:1228kB inactive_anon:33584kB active_file:1116kB inactive_file:2792kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:404kB bounce:0kB free_pcp:216kB local_pcp:132kB free_cma:0kB [ 1091.476426] lowmem_reserve[]: 0 0 0 0 0 [ 1091.480670] Node 0 DMA: 3*4kB (UME) 2*8kB (UE) 3*16kB (ME) 3*32kB (ME) 13*64kB (UME) 1*128kB (E) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11116kB [ 1091.487213] lowmem_reserve[]: [ 1091.497362] Node 0 DMA32: 1116*4kB (UME) 798*8kB (UME) 230*16kB (ME) 39*32kB (UME) 31*64kB (UME) 46*128kB (UE) 38*256kB (U) 7*512kB (U) 8*1024kB (U) 0*2048kB 0*4096kB = 45152kB [ 1091.519170] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1091.530512] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 0*16kB 2*32kB (UM) 2609*64kB (U) 242*128kB (UM) 59*256kB (U) 28*512kB (UM) 278*1024kB (UM) 38*2048kB (UM) 0*4096kB = 589976kB [ 1091.547622] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1091.556726] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1091.567210] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1091.576259] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1091.598049] 0 2717 2718 2718 2718 [ 1091.606079] 31073 total pagecache pages [ 1091.620481] 0 pages in swap cache [ 1091.630772] Swap cache stats: add 0, delete 0, find 0/0 [ 1091.636420] Node 0 DMA32 free:45220kB min:36200kB low:45248kB high:54296kB active_anon:50052kB inactive_anon:82676kB active_file:204kB inactive_file:100kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2744kB bounce:0kB free_pcp:620kB local_pcp:272kB free_cma:0kB [ 1091.650356] Free swap = 0kB [ 1091.710077] Total swap = 0kB [ 1091.713798] 2097051 pages RAM [ 1091.722227] 0 pages HighMem/MovableOnly [ 1091.727224] 363840 pages reserved [ 1091.732499] 0 pages cma reserved [ 1091.742904] Out of memory (oom_kill_allocating_task): Kill process 4386 (systemd-journal) score 0 or sacrifice child [ 1091.796374] lowmem_reserve[]: 0 0 0 0 0 [ 1091.799563] Killed process 4386 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1828kB [ 1091.800478] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1091.873170] oom_reaper: reaped process 4777 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1091.907196] oom_reaper: reaped process 4386 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2044kB [ 1091.946394] lowmem_reserve[]: 0 0 0 0 0 [ 1091.946417] Node 1 Normal free:527660kB min:53696kB low:67120kB high:80544kB active_anon:1228kB inactive_anon:33584kB active_file:3116kB inactive_file:3992kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:404kB bounce:0kB free_pcp:784kB local_pcp:144kB free_cma:0kB [ 1091.946440] lowmem_reserve[]: 0 0 0 0 0 [ 1091.946460] Node 0 DMA: 4*4kB (UE) 2*8kB (ME) 1*16kB (E) 2*32kB (UE) 2*64kB (ME) 7*128kB (UME) 3*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB [ 1092.001982] systemd[1]: systemd-journald.service: Failed with result 'signal'. 18:04:50 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r1, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffffffff804, &(0x7f0000000000)=0xff}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000500)={r3, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r2) sendmsg$IPVS_CMD_SET_DEST(r2, 0x0, 0x8884) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000040)={0x2, 0x3, 0x8001, 0x1, 0x9}) [ 1092.056437] (E) 1*4096kB (U) = 11120kB [ 1092.060667] Node 0 DMA32: 241*4kB (UME) 754*8kB (UME) 235*16kB (UME) 39*32kB (UME) 1555*64kB (UME) 95*128kB (UE) 55*256kB (U) 12*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 143908kB [ 1092.136464] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1092.141545] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1092.156462] Node 1 Normal: 29*4kB (UM) 14*8kB (UM) 10*16kB (UM) 9*32kB (U) 5136*64kB (UM) 457*128kB (U) 169*256kB (U) 75*512kB (U) 9*1024kB (U) 0*2048kB 0*4096kB = 478756kB [ 1092.211230] systemd[1]: Stopped Journal Service. [ 1092.228680] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1092.248085] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1092.272977] systemd[1]: Starting Journal Service... [ 1092.276908] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1092.337692] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1092.366407] 33146 total pagecache pages [ 1092.379220] 0 pages in swap cache [ 1092.399479] Swap cache stats: add 0, delete 0, find 0/0 [ 1092.421412] Free swap = 0kB [ 1092.431170] Total swap = 0kB [ 1092.447592] 2097051 pages RAM [ 1092.460897] 0 pages HighMem/MovableOnly [ 1092.475980] 363840 pages reserved [ 1092.489048] 0 pages cma reserved [ 1092.531707] systemd-journald[4807]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1092.801334] systemd-journald[4807]: Failed to open runtime journal: No space left on device [ 1092.882523] warn_alloc: 3 callbacks suppressed [ 1092.882528] syz-executor.5: [ 1092.888677] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1092.913520] systemd[1]: systemd-journald.service: Main process exited, code=exited, status=1/FAILURE [ 1092.931722] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1092.962039] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1092.971183] CPU: 0 PID: 4786 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1092.978447] syz-executor.5 cpuset= [ 1092.979081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1092.979089] / [ 1092.982624] Call Trace: [ 1092.996276] dump_stack+0x1b2/0x281 [ 1092.999909] warn_alloc.cold+0x96/0x1cc [ 1093.003888] ? zone_watermark_ok_safe+0x220/0x220 [ 1093.008744] __alloc_pages_nodemask+0x2127/0x2720 [ 1093.013588] ? lock_acquire+0x170/0x3f0 [ 1093.016358] mems_allowed=0-1 [ 1093.017732] ? lock_acquire+0x170/0x3f0 [ 1093.024790] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1093.029640] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1093.035090] ? __mutex_unlock_slowpath+0x75/0x770 [ 1093.039933] alloc_pages_current+0x155/0x260 [ 1093.044342] ion_page_pool_alloc+0x118/0x1b0 [ 1093.048751] ion_system_heap_allocate+0x133/0x8c0 [ 1093.053595] ? _raw_spin_unlock+0x29/0x40 [ 1093.057737] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1093.062665] ? ion_system_contig_heap_create+0x130/0x130 [ 1093.066774] syz-executor.5: [ 1093.068128] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1093.068137] page allocation failure: order:4 [ 1093.071142] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1093.076150] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1093.080546] ion_alloc+0x27a/0x810 [ 1093.080562] ? ion_dma_buf_release+0x40/0x40 [ 1093.080574] ? __might_fault+0x177/0x1b0 [ 1093.080587] ion_ioctl+0xea/0x1f0 [ 1093.096358] (null) [ 1093.096818] ? ion_query_heaps+0x360/0x360 [ 1093.101195] syz-executor.5 cpuset= [ 1093.105337] ? ion_query_heaps+0x360/0x360 [ 1093.122879] do_vfs_ioctl+0x75a/0xff0 [ 1093.126353] / mems_allowed=0-1 [ 1093.126677] ? ioctl_preallocate+0x1a0/0x1a0 [ 1093.126689] ? lock_downgrade+0x740/0x740 [ 1093.138937] ? __fget+0x225/0x360 [ 1093.142389] ? do_vfs_ioctl+0xff0/0xff0 [ 1093.146479] ? security_file_ioctl+0x83/0xb0 [ 1093.150995] SyS_ioctl+0x7f/0xb0 [ 1093.154358] ? do_vfs_ioctl+0xff0/0xff0 [ 1093.158333] do_syscall_64+0x1d5/0x640 [ 1093.162226] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1093.167419] RIP: 0033:0x465ef9 [ 1093.170617] RSP: 002b:00007fdf5e1ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1093.178323] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1093.185883] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1093.193160] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1093.200521] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1093.207783] R13: 00007ffcbaeb2d6f R14: 00007fdf5e1ae300 R15: 0000000000022000 [ 1093.215145] CPU: 1 PID: 4775 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1093.222956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1093.232430] Call Trace: [ 1093.235026] dump_stack+0x1b2/0x281 [ 1093.237279] syz-executor.1: page allocation failure: order:4 [ 1093.238666] warn_alloc.cold+0x96/0x1cc [ 1093.238687] ? zone_watermark_ok_safe+0x220/0x220 [ 1093.244477] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1093.248454] __alloc_pages_nodemask+0x2127/0x2720 [ 1093.248467] ? lock_acquire+0x170/0x3f0 [ 1093.248479] ? lock_acquire+0x170/0x3f0 [ 1093.248494] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1093.248509] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1093.248521] ? __mutex_unlock_slowpath+0x75/0x770 [ 1093.248537] alloc_pages_current+0x155/0x260 [ 1093.248551] ion_page_pool_alloc+0x118/0x1b0 [ 1093.248562] ion_system_heap_allocate+0x133/0x8c0 [ 1093.248574] ? _raw_spin_unlock+0x29/0x40 [ 1093.248582] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1093.248591] ? ion_system_contig_heap_create+0x130/0x130 [ 1093.248603] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1093.248613] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1093.248625] ion_alloc+0x27a/0x810 [ 1093.248638] ? ion_dma_buf_release+0x40/0x40 [ 1093.248659] ? __might_fault+0x177/0x1b0 [ 1093.248671] ion_ioctl+0xea/0x1f0 [ 1093.248681] ? ion_query_heaps+0x360/0x360 [ 1093.248693] ? trace_hardirqs_on+0x10/0x10 [ 1093.266418] (null) [ 1093.269431] ? ion_query_heaps+0x360/0x360 [ 1093.273513] syz-executor.1 cpuset= [ 1093.278352] do_vfs_ioctl+0x75a/0xff0 [ 1093.278365] ? ioctl_preallocate+0x1a0/0x1a0 [ 1093.278374] ? lock_downgrade+0x740/0x740 [ 1093.278386] ? __fget+0x225/0x360 [ 1093.278394] ? do_vfs_ioctl+0xff0/0xff0 [ 1093.278406] ? security_file_ioctl+0x83/0xb0 [ 1093.278416] SyS_ioctl+0x7f/0xb0 [ 1093.296425] / [ 1093.297576] ? do_vfs_ioctl+0xff0/0xff0 [ 1093.302455] mems_allowed=0-1 [ 1093.306598] do_syscall_64+0x1d5/0x640 [ 1093.306616] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1093.306624] RIP: 0033:0x465ef9 [ 1093.306628] RSP: 002b:00007fd7ebaaf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1093.306638] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465ef9 [ 1093.306643] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1093.306648] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1093.306653] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1093.306658] R13: 00007ffc90d553bf R14: 00007fd7ebaaf300 R15: 0000000000022000 [ 1093.318589] CPU: 1 PID: 4769 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1093.461968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1093.471840] Call Trace: [ 1093.474453] dump_stack+0x1b2/0x281 [ 1093.478170] warn_alloc.cold+0x96/0x1cc [ 1093.482143] ? zone_watermark_ok_safe+0x220/0x220 [ 1093.487030] __alloc_pages_nodemask+0x2127/0x2720 [ 1093.492849] ? lock_acquire+0x170/0x3f0 [ 1093.496830] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1093.501677] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1093.507134] ? __mutex_unlock_slowpath+0x75/0x770 [ 1093.511998] alloc_pages_current+0x155/0x260 [ 1093.516413] ion_page_pool_alloc+0x118/0x1b0 [ 1093.520827] ion_system_heap_allocate+0x133/0x8c0 [ 1093.525696] ? _raw_spin_unlock+0x29/0x40 [ 1093.529883] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1093.534827] ? ion_system_contig_heap_create+0x130/0x130 [ 1093.540540] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1093.545647] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1093.550503] ion_alloc+0x27a/0x810 [ 1093.554236] ? ion_dma_buf_release+0x40/0x40 [ 1093.558660] ? __might_fault+0x177/0x1b0 [ 1093.562731] ion_ioctl+0xea/0x1f0 [ 1093.566184] ? ion_query_heaps+0x360/0x360 [ 1093.570429] ? ion_query_heaps+0x360/0x360 [ 1093.574664] do_vfs_ioctl+0x75a/0xff0 [ 1093.578475] ? ioctl_preallocate+0x1a0/0x1a0 [ 1093.582884] ? lock_downgrade+0x740/0x740 [ 1093.587078] ? __fget+0x225/0x360 [ 1093.590531] ? do_vfs_ioctl+0xff0/0xff0 [ 1093.594510] ? security_file_ioctl+0x83/0xb0 [ 1093.598914] SyS_ioctl+0x7f/0xb0 [ 1093.602272] ? do_vfs_ioctl+0xff0/0xff0 [ 1093.606333] do_syscall_64+0x1d5/0x640 [ 1093.610225] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1093.615407] RIP: 0033:0x465ef9 [ 1093.618591] RSP: 002b:00007fd7ebad0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1093.626386] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1093.633655] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1093.641011] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1093.648287] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1093.655746] R13: 00007ffc90d553bf R14: 00007fd7ebad0300 R15: 0000000000022000 [ 1093.665555] Bluetooth: hci4 command 0x0409 tx timeout [ 1093.672404] warn_alloc_show_mem: 3 callbacks suppressed [ 1093.672408] Mem-Info: [ 1093.681690] active_anon:12306 inactive_anon:29074 isolated_anon:12 [ 1093.681690] active_file:67 inactive_file:487 isolated_file:0 [ 1093.681690] unevictable:0 dirty:2 writeback:0 unstable:0 [ 1093.681690] slab_reclaimable:12693 slab_unreclaimable:116597 [ 1093.681690] mapped:52507 shmem:29462 pagetables:759 bounce:0 [ 1093.681690] free:73973 free_pcp:395 free_cma:0 [ 1093.691966] CPU: 0 PID: 4806 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 1093.716762] Node 0 active_anon:47900kB inactive_anon:82768kB active_file:248kB inactive_file:2332kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:127676kB dirty:8kB writeback:0kB shmem:84048kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1093.722967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1093.750954] Node 1 active_anon:1324kB inactive_anon:33528kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82552kB dirty:0kB writeback:0kB shmem:33800kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1093.760256] Call Trace: [ 1093.760279] dump_stack+0x1b2/0x281 [ 1093.760292] warn_alloc.cold+0x96/0x1cc [ 1093.760307] ? zone_watermark_ok_safe+0x220/0x220 [ 1093.787497] Node 0 [ 1093.790051] __alloc_pages_nodemask+0x2127/0x2720 [ 1093.793651] DMA free:11008kB min:204kB low:252kB high:300kB active_anon:28kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1093.797604] ? lock_acquire+0x170/0x3f0 [ 1093.797624] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1093.797640] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1093.797651] ? __mutex_unlock_slowpath+0x75/0x770 [ 1093.797667] alloc_pages_current+0x155/0x260 [ 1093.797681] ion_page_pool_alloc+0x118/0x1b0 [ 1093.797694] ion_system_heap_allocate+0x133/0x8c0 [ 1093.797711] ? ion_alloc+0x187/0x810 [ 1093.802655] lowmem_reserve[]: [ 1093.804772] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1093.809638] 0 [ 1093.836058] ? ion_system_contig_heap_create+0x130/0x130 [ 1093.836070] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1093.836081] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1093.836094] ion_alloc+0x204/0x810 [ 1093.842017] 2717 [ 1093.846843] ? ion_dma_buf_release+0x40/0x40 [ 1093.846856] ? __might_fault+0x177/0x1b0 [ 1093.846869] ion_ioctl+0xea/0x1f0 [ 1093.852309] 2718 [ 1093.857142] ? ion_query_heaps+0x360/0x360 [ 1093.857159] ? ion_query_heaps+0x360/0x360 [ 1093.857171] do_vfs_ioctl+0x75a/0xff0 [ 1093.857182] ? ioctl_preallocate+0x1a0/0x1a0 [ 1093.861575] 2718 [ 1093.865974] ? lock_downgrade+0x740/0x740 [ 1093.870837] 2718 [ 1093.874515] ? __fget+0x225/0x360 [ 1093.883137] ? do_vfs_ioctl+0xff0/0xff0 [ 1093.885086] Node 0 [ 1093.890542] ? security_file_ioctl+0x83/0xb0 [ 1093.890553] SyS_ioctl+0x7f/0xb0 [ 1093.890561] ? do_vfs_ioctl+0xff0/0xff0 [ 1093.890573] do_syscall_64+0x1d5/0x640 [ 1093.890589] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1093.895951] DMA32 free:148628kB min:36200kB low:45248kB high:54296kB active_anon:47872kB inactive_anon:82676kB active_file:248kB inactive_file:2272kB unevictable:0kB writepending:8kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2604kB bounce:0kB free_pcp:936kB local_pcp:172kB free_cma:0kB [ 1093.900762] RIP: 0033:0x465ef9 [ 1093.900767] RSP: 002b:00007f5842689188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1093.900776] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1093.900781] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1093.900786] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1093.900791] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1093.900801] R13: 00007ffc66db249f R14: 00007f5842689300 R15: 0000000000022000 [ 1093.904331] lowmem_reserve[]: 0 0 0 0 0 [ 1094.058594] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1094.084509] lowmem_reserve[]: 0 0 0 0 0 [ 1094.089144] Node 1 Normal free:110360kB min:53696kB low:67120kB high:80544kB active_anon:1324kB inactive_anon:33528kB active_file:16kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:420kB bounce:0kB free_pcp:624kB local_pcp:0kB free_cma:0kB [ 1094.120372] lowmem_reserve[]: 0 0 0 0 0 [ 1094.126105] Node 0 DMA: 16*4kB (UME) 12*8kB (UME) 5*16kB (UME) 3*32kB (UME) 2*64kB (UE) 3*128kB (UE) 4*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11088kB [ 1094.146105] Node 0 DMA32: 13340*4kB (UE) 5366*8kB (UME) 2266*16kB (UE) 813*32kB (UME) 11*64kB (U) 0*128kB 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 159520kB [ 1094.170906] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1094.183229] Node 1 Normal: 11700*4kB (UM) 2793*8kB (UM) 863*16kB (UM) 746*32kB (UM) 5*64kB (U) 2*128kB (U) 10*256kB (U) 1*512kB (U) 127*1024kB (U) 0*2048kB 0*4096kB = 240520kB [ 1094.202270] systemd[1]: Failed to start Journal Service. [ 1094.211730] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1094.222845] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1094.238031] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1094.258582] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1094.268713] systemd[1]: systemd-journald.service: Failed with result 'exit-code'. [ 1094.294764] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1094.316371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1094.327120] systemd[1]: Stopped Journal Service. [ 1094.346558] 31986 total pagecache pages [ 1094.350723] 0 pages in swap cache [ 1094.354405] Swap cache stats: add 0, delete 0, find 0/0 [ 1094.367759] Free swap = 0kB [ 1094.371784] Total swap = 0kB [ 1094.379797] 2097051 pages RAM [ 1094.386655] 0 pages HighMem/MovableOnly [ 1094.390745] 363840 pages reserved [ 1094.394298] 0 pages cma reserved [ 1094.616822] systemd-journald[4812]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1095.726535] Bluetooth: hci4 command 0x041b tx timeout [ 1095.952696] IPVS: ftp: loaded support on port[0] = 21 [ 1096.261408] chnl_net:caif_netlink_parms(): no params data found [ 1096.628704] oom_reaper: reaped process 4806 (syz-executor.1), now anon-rss:0kB, file-rss:8kB, shmem-rss:0kB [ 1096.699151] kworker/u4:1 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1096.743710] kworker/u4:1 cpuset=/ mems_allowed=0-1 [ 1096.749836] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1096.758403] CPU: 0 PID: 4925 Comm: kworker/u4:1 Not tainted 4.14.222-syzkaller #0 [ 1096.765515] syz-executor.1 cpuset= [ 1096.770844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1096.770849] Call Trace: [ 1096.770867] dump_stack+0x1b2/0x281 [ 1096.770879] dump_header+0x178/0x82f [ 1096.770889] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1096.770897] ? ___ratelimit+0x2cd/0x530 [ 1096.770906] oom_kill_process.cold+0x10/0xb18 [ 1096.770917] ? lock_downgrade+0x740/0x740 [ 1096.770930] out_of_memory+0x2dc/0x1190 [ 1096.770943] ? oom_killer_disable+0x1c0/0x1c0 [ 1096.774713] / [ 1096.785079] ? mutex_trylock+0x152/0x1a0 [ 1096.788509] mems_allowed=0-1 [ 1096.792082] __alloc_pages_nodemask+0x23e1/0x2720 [ 1096.843545] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1096.848743] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1096.853851] ? finish_task_switch+0x178/0x610 [ 1096.858454] ? finish_task_switch+0x14d/0x610 [ 1096.863349] alloc_pages_current+0x155/0x260 [ 1096.867848] ? put_timespec64+0xf0/0xf0 [ 1096.871916] get_zeroed_page+0x19/0x50 [ 1096.875805] __pud_alloc+0x33/0x200 [ 1096.879448] __handle_mm_fault+0x1012/0x4620 [ 1096.883941] ? vm_insert_page+0x7c0/0x7c0 [ 1096.888216] ? touch_atime+0xce/0x250 [ 1096.892038] handle_mm_fault+0x391/0x860 [ 1096.896208] __get_user_pages+0x445/0x11d0 [ 1096.900499] ? follow_page_mask+0x18a0/0x18a0 [ 1096.905708] get_user_pages_remote+0x1c5/0x3c0 [ 1096.910894] copy_strings.isra.0+0x44f/0x8a0 [ 1096.916175] ? open_exec+0x60/0x60 [ 1096.919706] ? prepare_binprm+0x5c0/0x7e0 [ 1096.923852] copy_strings_kernel+0x9e/0x110 [ 1096.928190] do_execveat_common+0xd96/0x1f30 [ 1096.932700] ? copy_strings_kernel+0x110/0x110 [ 1096.937456] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1096.943192] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1096.948228] do_execve+0x33/0x50 [ 1096.952055] call_usermodehelper_exec_async+0x2ed/0x510 [ 1096.957562] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1096.963190] ret_from_fork+0x24/0x30 [ 1096.966917] CPU: 1 PID: 4806 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 1096.975430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1096.985397] Call Trace: [ 1096.988801] dump_stack+0x1b2/0x281 [ 1096.992559] warn_alloc.cold+0x96/0x1cc [ 1096.996400] syz-executor.5: page allocation failure: order:0 [ 1096.996543] ? zone_watermark_ok_safe+0x220/0x220 [ 1096.996556] ? usleep_range+0x130/0x130 [ 1097.003225] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1097.008070] ? try_to_free_pages+0x23f/0x6e0 [ 1097.008081] ? _find_next_bit+0xdb/0x100 [ 1097.008090] ? run_timer_softirq+0x5a0/0x5a0 [ 1097.008106] __alloc_pages_nodemask+0x2127/0x2720 [ 1097.008123] ? lock_acquire+0x170/0x3f0 [ 1097.008137] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1097.008148] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1097.008165] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1097.008185] alloc_pages_current+0x155/0x260 [ 1097.008197] ion_page_pool_alloc+0x118/0x1b0 [ 1097.008209] ion_system_heap_allocate+0x133/0x8c0 [ 1097.008220] ? ion_alloc+0x187/0x810 [ 1097.035410] (null) [ 1097.037113] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1097.037127] ? ion_system_contig_heap_create+0x130/0x130 [ 1097.037138] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1097.037157] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1097.037170] ion_alloc+0x204/0x810 [ 1097.037185] ? ion_dma_buf_release+0x40/0x40 [ 1097.043316] syz-executor.5 cpuset= [ 1097.046603] ? __might_fault+0x177/0x1b0 [ 1097.046617] ion_ioctl+0xea/0x1f0 [ 1097.046628] ? ion_query_heaps+0x360/0x360 [ 1097.046641] ? ion_query_heaps+0x360/0x360 [ 1097.046652] do_vfs_ioctl+0x75a/0xff0 [ 1097.046663] ? ioctl_preallocate+0x1a0/0x1a0 [ 1097.046673] ? lock_downgrade+0x740/0x740 [ 1097.046687] ? __fget+0x225/0x360 [ 1097.046697] ? do_vfs_ioctl+0xff0/0xff0 [ 1097.046708] ? security_file_ioctl+0x83/0xb0 [ 1097.046718] SyS_ioctl+0x7f/0xb0 [ 1097.046725] ? do_vfs_ioctl+0xff0/0xff0 [ 1097.046737] do_syscall_64+0x1d5/0x640 [ 1097.046752] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1097.060467] / [ 1097.061545] RIP: 0033:0x465ef9 [ 1097.069911] mems_allowed=0-1 [ 1097.071212] RSP: 002b:00007f5842689188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1097.185685] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1097.193059] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1097.200324] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1097.207600] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1097.214869] R13: 00007ffc66db249f R14: 00007f5842689300 R15: 0000000000022000 [ 1097.223239] CPU: 0 PID: 4769 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1097.228831] warn_alloc_show_mem: 3 callbacks suppressed [ 1097.228835] Mem-Info: [ 1097.231050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1097.236540] active_anon:12404 inactive_anon:31123 isolated_anon:0 [ 1097.236540] active_file:21 inactive_file:30 isolated_file:0 [ 1097.236540] unevictable:0 dirty:18 writeback:0 unstable:0 [ 1097.236540] slab_reclaimable:12536 slab_unreclaimable:119089 [ 1097.236540] mapped:52601 shmem:31510 pagetables:756 bounce:0 [ 1097.236540] free:13820 free_pcp:1 free_cma:0 [ 1097.238883] Call Trace: [ 1097.248378] Node 0 active_anon:48536kB inactive_anon:82768kB active_file:32kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126352kB dirty:68kB writeback:0kB shmem:84044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1097.281844] dump_stack+0x1b2/0x281 [ 1097.281859] warn_alloc.cold+0x96/0x1cc [ 1097.281870] ? zone_watermark_ok_safe+0x220/0x220 [ 1097.281879] ? usleep_range+0x130/0x130 [ 1097.281893] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1097.284496] Node 1 active_anon:1080kB inactive_anon:41724kB active_file:52kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:84052kB dirty:4kB writeback:0kB shmem:41996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1097.312154] ? _find_next_bit+0xdb/0x100 [ 1097.312166] ? run_timer_softirq+0x5a0/0x5a0 [ 1097.312182] __alloc_pages_nodemask+0x2127/0x2720 [ 1097.312205] ? lock_acquire+0x170/0x3f0 [ 1097.315826] Node 0 [ 1097.319783] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1097.319795] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1097.319814] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1097.324654] DMA free:10940kB min:204kB low:252kB high:300kB active_anon:28kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1097.328611] alloc_pages_current+0x155/0x260 [ 1097.328627] ion_page_pool_alloc+0x118/0x1b0 [ 1097.328639] ion_system_heap_allocate+0x133/0x8c0 [ 1097.333725] lowmem_reserve[]: [ 1097.360875] ? _raw_spin_unlock+0x29/0x40 [ 1097.360887] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1097.360897] ? ion_system_contig_heap_create+0x130/0x130 [ 1097.360907] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1097.360923] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1097.364978] 0 [ 1097.369374] ion_alloc+0x27a/0x810 [ 1097.369389] ? ion_dma_buf_release+0x40/0x40 [ 1097.369401] ? __might_fault+0x177/0x1b0 [ 1097.369413] ion_ioctl+0xea/0x1f0 [ 1097.374237] 2717 [ 1097.378219] ? ion_query_heaps+0x360/0x360 [ 1097.378232] ? ion_query_heaps+0x360/0x360 [ 1097.378243] do_vfs_ioctl+0x75a/0xff0 [ 1097.378259] ? ioctl_preallocate+0x1a0/0x1a0 [ 1097.380500] 2718 [ 1097.385330] ? lock_downgrade+0x740/0x740 [ 1097.389854] 2718 [ 1097.395383] ? __fget+0x225/0x360 [ 1097.421197] 2718 [ 1097.425595] ? do_vfs_ioctl+0xff0/0xff0 [ 1097.434838] ? security_file_ioctl+0x83/0xb0 [ 1097.437977] Node 0 [ 1097.442170] SyS_ioctl+0x7f/0xb0 [ 1097.447131] DMA32 free:17888kB min:36200kB low:45248kB high:54296kB active_anon:48508kB inactive_anon:82676kB active_file:32kB inactive_file:60kB unevictable:0kB writepending:68kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2588kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1097.452527] ? do_vfs_ioctl+0xff0/0xff0 [ 1097.457569] lowmem_reserve[]: [ 1097.462359] do_syscall_64+0x1d5/0x640 [ 1097.464133] 0 [ 1097.467688] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1097.467696] RIP: 0033:0x465ef9 [ 1097.467700] RSP: 002b:00007fd7ebad0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1097.467710] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1097.467714] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1097.467720] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1097.467728] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1097.472123] 0 [ 1097.476167] R13: 00007ffc90d553bf R14: 00007fd7ebad0300 R15: 0000000000022000 [ 1097.479641] 0 [ 1097.558263] syz-executor.5: [ 1097.611503] 0 0 [ 1097.645667] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1097.693199] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1097.703915] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1097.704124] Mem-Info: [ 1097.709101] CPU: 0 PID: 4775 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1097.709108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1097.709111] Call Trace: [ 1097.709129] dump_stack+0x1b2/0x281 [ 1097.709142] warn_alloc.cold+0x96/0x1cc [ 1097.709154] ? zone_watermark_ok_safe+0x220/0x220 [ 1097.709164] ? usleep_range+0x130/0x130 [ 1097.709173] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1097.709193] ? _find_next_bit+0xdb/0x100 [ 1097.709204] ? run_timer_softirq+0x5a0/0x5a0 [ 1097.709221] __alloc_pages_nodemask+0x2127/0x2720 [ 1097.709237] ? lock_acquire+0x170/0x3f0 [ 1097.709252] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1097.709264] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1097.709279] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1097.709298] alloc_pages_current+0x155/0x260 [ 1097.709310] ion_page_pool_alloc+0x118/0x1b0 [ 1097.717217] active_anon:12404 inactive_anon:31123 isolated_anon:0 [ 1097.717217] active_file:21 inactive_file:330 isolated_file:11 [ 1097.717217] unevictable:0 dirty:18 writeback:0 unstable:0 [ 1097.717217] slab_reclaimable:12536 slab_unreclaimable:119089 [ 1097.717217] mapped:52726 shmem:31510 pagetables:756 bounce:0 [ 1097.717217] free:31971 free_pcp:695 free_cma:0 [ 1097.720130] ion_system_heap_allocate+0x133/0x8c0 [ 1097.729718] Node 0 active_anon:48536kB inactive_anon:82768kB active_file:32kB inactive_file:1260kB unevictable:0kB isolated(anon):0kB isolated(file):44kB mapped:126852kB dirty:68kB writeback:0kB shmem:84044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1097.732155] ? _raw_spin_unlock+0x29/0x40 [ 1097.735766] Node 1 active_anon:1080kB inactive_anon:41724kB active_file:52kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:84052kB dirty:4kB writeback:0kB shmem:41996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1097.739739] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1097.739749] ? ion_system_contig_heap_create+0x130/0x130 [ 1097.739760] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1097.739771] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1097.739789] ion_alloc+0x27a/0x810 [ 1097.744748] lowmem_reserve[]: [ 1097.748710] ? ion_dma_buf_release+0x40/0x40 [ 1097.748723] ? __might_fault+0x177/0x1b0 [ 1097.748735] ion_ioctl+0xea/0x1f0 [ 1097.748747] ? ion_query_heaps+0x360/0x360 [ 1097.753925] 0 [ 1097.757985] ? trace_hardirqs_on+0x10/0x10 [ 1097.757997] ? ion_query_heaps+0x360/0x360 [ 1097.758007] do_vfs_ioctl+0x75a/0xff0 [ 1097.758023] ? ioctl_preallocate+0x1a0/0x1a0 [ 1097.762454] Node 0 [ 1097.767280] ? lock_downgrade+0x740/0x740 [ 1097.767293] ? __fget+0x225/0x360 [ 1097.767302] ? do_vfs_ioctl+0xff0/0xff0 [ 1097.767314] ? security_file_ioctl+0x83/0xb0 [ 1097.767324] SyS_ioctl+0x7f/0xb0 [ 1097.771414] DMA free:10980kB min:204kB low:252kB high:300kB active_anon:28kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1097.776242] ? do_vfs_ioctl+0xff0/0xff0 [ 1097.780845] 0 [ 1097.786233] do_syscall_64+0x1d5/0x640 [ 1097.790753] 0 [ 1097.795754] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1097.829435] lowmem_reserve[]: [ 1097.834067] RIP: 0033:0x465ef9 [ 1097.862112] 0 [ 1097.866209] RSP: 002b:00007fd7ebaaf188 EFLAGS: 00000246 [ 1097.893583] 0 [ 1097.898436] ORIG_RAX: 0000000000000010 [ 1097.898443] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465ef9 [ 1097.898448] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1097.898452] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1097.898457] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1097.898462] R13: 00007ffc90d553bf R14: 00007fd7ebaaf300 R15: 0000000000022000 [ 1098.089561] Bluetooth: hci4 command 0x040f tx timeout [ 1098.106816] 0 [ 1098.111006] Node 1 Normal free:128636kB min:53696kB low:67120kB high:80544kB active_anon:1080kB inactive_anon:41724kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:424kB bounce:0kB free_pcp:1392kB local_pcp:736kB free_cma:0kB [ 1098.146396] 2717 2718 2718 2718 [ 1098.146413] Node 0 DMA32 free:88616kB min:36200kB low:45248kB high:54296kB active_anon:48516kB inactive_anon:82676kB active_file:1340kB inactive_file:3804kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2588kB bounce:0kB free_pcp:1080kB local_pcp:344kB free_cma:0kB [ 1098.155130] lowmem_reserve[]: [ 1098.183564] lowmem_reserve[]: [ 1098.186435] 0 [ 1098.188011] 0 [ 1098.192073] 0 [ 1098.196986] 0 0 0 0 [ 1098.200419] 0 [ 1098.202569] Node 0 [ 1098.202578] 0 [ 1098.204390] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1098.204393] lowmem_reserve[]: 0 0 0 0 0 [ 1098.204412] Node 1 Normal free:128636kB min:53696kB low:67120kB high:80544kB active_anon:1080kB inactive_anon:41724kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:424kB bounce:0kB free_pcp:1392kB local_pcp:656kB free_cma:0kB [ 1098.217703] 0 [ 1098.276829] lowmem_reserve[]: 0 0 0 0 0 [ 1098.283218] Node 0 DMA: 16*4kB (UME) 2*8kB (UE) 4*16kB (UME) 4*32kB (UME) 2*64kB (ME) 3*128kB (UE) 4*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11024kB [ 1098.307296] Node 0 DMA32: 7998*4kB (UEH) 654*8kB (UEH) 374*16kB (UMEH) 323*32kB (UE) 53*64kB (UE) 3*128kB (UE) 6*256kB (UM) 1*512kB (M) 2*1024kB (UM) 0*2048kB 0*4096kB = 61416kB [ 1098.346388] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1098.359782] warn_alloc_show_mem: 1 callbacks suppressed [ 1098.359785] Mem-Info: [ 1098.369006] Node 1 Normal: 13178*4kB (UM) 564*8kB (UM) 420*16kB (UM) 240*32kB (U) 204*64kB (UM) 16*128kB (UM) 13*256kB (U) 11*512kB (U) 6*1024kB (U) 0*2048kB 6*4096kB (U) = 126408kB [ 1098.396771] active_anon:12331 inactive_anon:31123 isolated_anon:0 [ 1098.396771] active_file:421 inactive_file:2013 isolated_file:0 [ 1098.396771] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1098.396771] slab_reclaimable:12511 slab_unreclaimable:119581 [ 1098.396771] mapped:54269 shmem:31510 pagetables:756 bounce:0 [ 1098.396771] free:45714 free_pcp:403 free_cma:0 [ 1098.456421] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1098.465631] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1098.472374] Node 0 DMA: 19*4kB (UME) 2*8kB (UE) 4*16kB (UME) 4*32kB (UME) 2*64kB (ME) 3*128kB (UE) 4*256kB (UME) 2*512kB [ 1098.486577] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1098.492010] (ME) [ 1098.516591] Node 0 active_anon:48244kB inactive_anon:82768kB active_file:1740kB inactive_file:7804kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133524kB dirty:12kB writeback:0kB shmem:84044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1098.536382] 2*1024kB [ 1098.548240] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1098.562343] 34213 total pagecache pages [ 1098.568512] 0 pages in swap cache [ 1098.572950] (ME) 1*2048kB (E) 1*4096kB (U) = 11036kB [ 1098.573758] Swap cache stats: add 0, delete 0, find 0/0 [ 1098.596437] Free swap = 0kB [ 1098.599601] Total swap = 0kB [ 1098.600436] Node 0 DMA32: 4437*4kB (UMEH) 545*8kB (UMEH) 418*16kB (UEH) 327*32kB (UME) 61*64kB (UME) 4*128kB (UME) [ 1098.602660] 2097051 pages RAM [ 1098.602670] 0 pages HighMem/MovableOnly [ 1098.617933] 6*256kB [ 1098.618451] Node 1 active_anon:1080kB inactive_anon:41724kB active_file:344kB inactive_file:748kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:84252kB dirty:0kB writeback:0kB shmem:41996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1098.622348] (UM) [ 1098.624662] Node 0 [ 1098.655317] 363840 pages reserved [ 1098.661972] 0 pages cma reserved [ 1098.665335] Out of memory: Kill process 7966 (syz-fuzzer) score 5 or sacrifice child [ 1098.668715] 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 45724kB [ 1098.674238] Killed process 31490 (syz-executor.0) total-vm:84904kB, anon-rss:60kB, file-rss:4kB, shmem-rss:0kB [ 1098.690890] DMA free:11036kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1098.716392] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1098.718430] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1098.732531] Node 0 DMA32 free:46644kB min:36200kB low:45248kB high:54296kB active_anon:48216kB inactive_anon:82676kB active_file:2840kB inactive_file:6704kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2588kB bounce:0kB free_pcp:1060kB local_pcp:416kB free_cma:0kB [ 1098.756372] Node 1 Normal: 7120*4kB (U) 476*8kB (U) 419*16kB (U) 238*32kB (U) 199*64kB (UM) 15*128kB (UM) 13*256kB (U) 12*512kB (UM) 7*1024kB (UM) 1*2048kB (M) 5*4096kB (U) = 100432kB [ 1098.763797] lowmem_reserve[]: [ 1098.796835] oom_reaper: reaped process 31490 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1098.802382] 0 0 0 0 0 [ 1098.815712] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1098.836377] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1098.848519] lowmem_reserve[]: 0 0 0 0 0 [ 1098.850785] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1098.863763] Node 1 Normal free:121428kB min:53696kB low:67120kB high:80544kB active_anon:1080kB inactive_anon:41724kB active_file:344kB inactive_file:748kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:276kB bounce:0kB free_pcp:1248kB local_pcp:620kB free_cma:0kB [ 1098.886384] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1098.930044] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1098.935983] lowmem_reserve[]: 0 0 0 0 0 [ 1098.949221] 33095 total pagecache pages [ 1098.954148] Node 0 DMA: 19*4kB (UME) 2*8kB (UE) 4*16kB (UME) 4*32kB (UME) 2*64kB (ME) 3*128kB (UE) 4*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11036kB [ 1098.966690] 0 pages in swap cache [ 1098.994736] Node 0 DMA32: 2856*4kB (UMEH) 797*8kB (UMEH) 470*16kB (UMEH) 349*32kB (UME) 91*64kB (UME) 14*128kB (UME) 8*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 46664kB [ 1099.006383] Swap cache stats: add 0, delete 0, find 0/0 [ 1099.030651] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1099.033390] Free swap = 0kB [ 1099.057929] Node 1 Normal: 2559*4kB (U) 627*8kB (UM) 546*16kB (UM) 359*32kB (U) 323*64kB (UM) 25*128kB (UM) 16*256kB (UM) 13*512kB (U) 8*1024kB (U) 1*2048kB (M) 5*4096kB (U) = 100820kB [ 1099.075650] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1099.118983] Total swap = 0kB [ 1099.122249] 2097051 pages RAM [ 1099.125549] 0 pages HighMem/MovableOnly [ 1099.132185] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1099.146568] 363840 pages reserved [ 1099.150036] 0 pages cma reserved [ 1099.195533] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1099.210810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.238622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.250808] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1099.261296] device bridge_slave_0 entered promiscuous mode [ 1099.273063] 33986 total pagecache pages [ 1099.281143] 0 pages in swap cache [ 1099.292040] Swap cache stats: add 0, delete 0, find 0/0 [ 1099.299234] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.311299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.319626] Free swap = 0kB [ 1099.323334] Total swap = 0kB [ 1099.338287] device bridge_slave_1 entered promiscuous mode [ 1099.345761] 2097051 pages RAM [ 1099.354222] 0 pages HighMem/MovableOnly [ 1099.376022] 363840 pages reserved [ 1099.394723] 0 pages cma reserved [ 1099.450531] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1099.487011] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1099.539980] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1099.548131] team0: Port device team_slave_0 added [ 1099.554307] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1099.577288] team0: Port device team_slave_1 added [ 1099.617069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1099.636839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1099.697091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1099.731921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1099.746398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1099.796536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1099.821399] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready 18:04:58 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@name, &(0x7f0000000080)=0x80) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) 18:04:58 executing program 3: getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r0, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000500)={r2, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r1) sendmsg$IPVS_CMD_SET_DEST(r1, 0x0, 0x8884) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f00000001c0)=0x1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) socketpair(0x8, 0x6, 0x7fffffff, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x9, 0x400}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000080)={r5, 0x88}, 0x8) 18:04:58 executing program 0: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x7, 0x18}, 0xc) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@loopback, 0x0}, &(0x7f0000000240)=0x14) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00'}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={r2, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000500)={r4, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r3) sendmsg$IPVS_CMD_SET_DEST(r3, 0x0, 0x8884) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0)={r5, 0x0, 0x99da}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000660000000067000006009500a0e5dc3ce88500ad4a8aa7366b0000000000bca1d0104b633154c1620c3e8eab42dc533f98ee1ce906c58fa4e3c5c102e8f864b18d35fb44e2c3a532a7f9101f284e512d4b053d7fdec8d1f62e4d11b187d0ce716098ce4c1d9ef5e7c57aa10f84dfdecbbe9385a292dcdf073fd260e2887289636bfaf6b201d6e6511ee07db52273c80713d0b7c52aa05d0e6aa49c0cfe597a5000d881a6f848a05bc9be5f4c"], &(0x7f0000000480)='GPL\x00', 0x36, 0x16, &(0x7f00000004c0)=""/22, 0x100, 0x2, [], r1, 0x17, r3, 0x8, &(0x7f0000000500)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x6, 0x80, 0x3}, 0x10, 0x1bf56, r6}, 0x78) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x3}, &(0x7f0000000080)=0x8) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) [ 1099.840266] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1099.911690] device hsr_slave_0 entered promiscuous mode [ 1099.932375] device hsr_slave_1 entered promiscuous mode [ 1099.964943] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1099.984512] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1100.052349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1100.067296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1100.093178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1100.116469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1100.127017] Bluetooth: hci4 command 0x0419 tx timeout [ 1100.151159] device bridge_slave_1 left promiscuous mode [ 1100.159168] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.176397] device bridge_slave_0 left promiscuous mode [ 1100.191063] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.214268] device veth1_macvtap left promiscuous mode [ 1100.225611] device veth0_macvtap left promiscuous mode [ 1100.237726] device veth1_vlan left promiscuous mode [ 1100.249742] device veth0_vlan left promiscuous mode [ 1100.284439] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1100.323611] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1100.342901] CPU: 1 PID: 4806 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 1100.350835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1100.360221] Call Trace: [ 1100.362832] dump_stack+0x1b2/0x281 [ 1100.366493] warn_alloc.cold+0x96/0x1cc [ 1100.371009] ? zone_watermark_ok_safe+0x220/0x220 [ 1100.376164] __alloc_pages_nodemask+0x2127/0x2720 [ 1100.381022] ? __schedule+0x893/0x1de0 [ 1100.384927] ? lock_acquire+0x170/0x3f0 [ 1100.388914] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1100.393888] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1100.399346] ? __mutex_unlock_slowpath+0x75/0x770 [ 1100.404203] alloc_pages_current+0x155/0x260 [ 1100.408637] ion_page_pool_alloc+0x118/0x1b0 [ 1100.413054] ion_system_heap_allocate+0x133/0x8c0 [ 1100.417905] ? _raw_spin_unlock+0x29/0x40 [ 1100.422052] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1100.426988] ? ion_system_contig_heap_create+0x130/0x130 [ 1100.432445] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1100.437469] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1100.442325] ion_alloc+0x27a/0x810 [ 1100.445877] ? ion_dma_buf_release+0x40/0x40 [ 1100.450292] ? __might_fault+0x177/0x1b0 [ 1100.454358] ion_ioctl+0xea/0x1f0 [ 1100.457851] ? ion_query_heaps+0x360/0x360 [ 1100.462203] ? ion_query_heaps+0x360/0x360 [ 1100.466443] do_vfs_ioctl+0x75a/0xff0 [ 1100.470262] ? ioctl_preallocate+0x1a0/0x1a0 [ 1100.474679] ? lock_downgrade+0x740/0x740 [ 1100.478843] ? __fget+0x225/0x360 [ 1100.482320] ? do_vfs_ioctl+0xff0/0xff0 [ 1100.486302] ? security_file_ioctl+0x83/0xb0 [ 1100.490716] SyS_ioctl+0x7f/0xb0 [ 1100.494084] ? do_vfs_ioctl+0xff0/0xff0 [ 1100.498063] do_syscall_64+0x1d5/0x640 [ 1100.501966] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1100.507159] RIP: 0033:0x465ef9 [ 1100.510352] RSP: 002b:00007f5842689188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1100.518072] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1100.525350] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1100.532624] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1100.539930] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1100.541701] syz-executor.2: [ 1100.547210] R13: 00007ffc66db249f R14: 00007f5842689300 R15: 0000000000022000 [ 1100.562703] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1100.569714] Mem-Info: [ 1100.582070] active_anon:12358 inactive_anon:31120 isolated_anon:12 [ 1100.582070] active_file:1434 inactive_file:5241 isolated_file:12 [ 1100.582070] unevictable:0 dirty:48 writeback:0 unstable:0 [ 1100.582070] slab_reclaimable:12505 slab_unreclaimable:118556 [ 1100.582070] mapped:48412 shmem:31506 pagetables:710 bounce:0 [ 1100.582070] free:109867 free_pcp:162 free_cma:0 [ 1100.602749] syz-executor.3 cpuset= [ 1100.625722] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1100.644794] / mems_allowed=0-1 [ 1100.653611] CPU: 0 PID: 4984 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1100.662309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1100.665794] Node 0 active_anon:48332kB inactive_anon:82760kB active_file:3484kB inactive_file:17884kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:140840kB dirty:176kB writeback:0kB shmem:84032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1100.672720] Call Trace: [ 1100.672742] dump_stack+0x1b2/0x281 [ 1100.672756] warn_alloc.cold+0x96/0x1cc [ 1100.672768] ? zone_watermark_ok_safe+0x220/0x220 [ 1100.672791] __alloc_pages_nodemask+0x2127/0x2720 [ 1100.672808] ? lock_acquire+0x170/0x3f0 [ 1100.725457] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1100.730313] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1100.735773] ? __mutex_unlock_slowpath+0x75/0x770 [ 1100.739011] Node 1 active_anon:1100kB inactive_anon:41720kB active_file:2252kB inactive_file:3080kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:52808kB dirty:16kB writeback:0kB shmem:41992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1100.740621] alloc_pages_current+0x155/0x260 [ 1100.740640] ion_page_pool_alloc+0x118/0x1b0 [ 1100.740652] ion_system_heap_allocate+0x133/0x8c0 [ 1100.782729] ? ion_alloc+0x187/0x810 [ 1100.786637] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1100.792103] ? ion_system_contig_heap_create+0x130/0x130 [ 1100.797659] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1100.802751] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1100.807617] ion_alloc+0x204/0x810 [ 1100.811345] ? ion_dma_buf_release+0x40/0x40 [ 1100.815796] ? __might_fault+0x177/0x1b0 [ 1100.820051] ion_ioctl+0xea/0x1f0 [ 1100.823556] ? ion_query_heaps+0x360/0x360 [ 1100.825217] Node 0 [ 1100.827801] ? ion_query_heaps+0x360/0x360 [ 1100.827812] do_vfs_ioctl+0x75a/0xff0 [ 1100.827825] ? ioctl_preallocate+0x1a0/0x1a0 [ 1100.827840] ? lock_downgrade+0x740/0x740 [ 1100.833424] DMA free:11180kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1100.834313] ? __fget+0x225/0x360 [ 1100.843685] lowmem_reserve[]: [ 1100.847021] ? do_vfs_ioctl+0xff0/0xff0 [ 1100.847033] ? security_file_ioctl+0x83/0xb0 [ 1100.847043] SyS_ioctl+0x7f/0xb0 [ 1100.847052] ? do_vfs_ioctl+0xff0/0xff0 [ 1100.847063] do_syscall_64+0x1d5/0x640 [ 1100.847079] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1100.904178] 0 [ 1100.904853] RIP: 0033:0x465ef9 [ 1100.904856] 2717 2718 [ 1100.906649] RSP: 002b:00007fdf5e1ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1100.906665] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1100.906670] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1100.906675] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1100.906680] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1100.906685] R13: 00007ffcbaeb2d6f R14: 00007fdf5e1ae300 R15: 0000000000022000 [ 1100.923526] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1100.970213] CPU: 0 PID: 4985 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1100.972321] 2718 [ 1100.978006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1100.978011] Call Trace: [ 1100.978031] dump_stack+0x1b2/0x281 [ 1100.978045] warn_alloc.cold+0x96/0x1cc [ 1100.978056] ? zone_watermark_ok_safe+0x220/0x220 [ 1100.978079] __alloc_pages_nodemask+0x2127/0x2720 [ 1100.978097] ? lock_acquire+0x170/0x3f0 [ 1100.978111] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1100.978127] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1100.978139] ? __mutex_unlock_slowpath+0x75/0x770 [ 1100.978155] alloc_pages_current+0x155/0x260 [ 1100.978169] ion_page_pool_alloc+0x118/0x1b0 [ 1100.993776] 2718 [ 1100.995926] ion_system_heap_allocate+0x133/0x8c0 [ 1100.995938] ? ion_alloc+0x187/0x810 [ 1101.009590] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1101.009605] ? ion_system_contig_heap_create+0x130/0x130 [ 1101.009619] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1101.015806] Node 0 [ 1101.018424] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1101.018438] ion_alloc+0x204/0x810 [ 1101.018455] ? ion_dma_buf_release+0x40/0x40 [ 1101.018468] ? __might_fault+0x177/0x1b0 [ 1101.018480] ion_ioctl+0xea/0x1f0 [ 1101.030456] DMA32 free:385592kB min:36200kB low:45248kB high:54296kB active_anon:48632kB inactive_anon:82668kB active_file:3484kB inactive_file:17820kB unevictable:0kB writepending:176kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2600kB bounce:0kB free_pcp:1416kB local_pcp:796kB free_cma:0kB [ 1101.033224] ? ion_query_heaps+0x360/0x360 [ 1101.033238] ? ion_query_heaps+0x360/0x360 [ 1101.045366] lowmem_reserve[]: [ 1101.048595] do_vfs_ioctl+0x75a/0xff0 [ 1101.048610] ? ioctl_preallocate+0x1a0/0x1a0 [ 1101.048620] ? lock_downgrade+0x740/0x740 [ 1101.048633] ? __fget+0x225/0x360 [ 1101.048642] ? do_vfs_ioctl+0xff0/0xff0 [ 1101.048656] ? security_file_ioctl+0x83/0xb0 [ 1101.062868] 0 [ 1101.064554] SyS_ioctl+0x7f/0xb0 [ 1101.064566] ? do_vfs_ioctl+0xff0/0xff0 [ 1101.071235] 0 [ 1101.071627] do_syscall_64+0x1d5/0x640 [ 1101.080524] 0 [ 1101.083693] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1101.083704] RIP: 0033:0x465ef9 [ 1101.094886] 0 [ 1101.116208] RSP: 002b:00007f785ae94188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1101.116219] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1101.116223] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1101.116228] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1101.116233] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1101.116238] R13: 00007ffc771f8d7f R14: 00007f785ae94300 R15: 0000000000022000 [ 1101.147954] device hsr_slave_1 left promiscuous mode [ 1101.232972] 0 [ 1101.241133] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1101.305845] lowmem_reserve[]: 0 0 0 0 0 [ 1101.314439] Node 1 Normal free:519312kB min:53696kB low:67120kB high:80544kB active_anon:1064kB inactive_anon:41720kB active_file:2252kB inactive_file:3108kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:240kB bounce:0kB free_pcp:1408kB local_pcp:740kB free_cma:0kB [ 1101.386116] lowmem_reserve[]: 0 0 0 0 0 [ 1101.401584] device hsr_slave_0 left promiscuous mode [ 1101.410875] Node 0 DMA: 20*4kB (UME) 10*8kB (UE) 11*16kB (UME) 6*32kB (UME) 3*64kB (UME) 4*128kB (UE) 5*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11216kB [ 1101.465721] team0 (unregistering): Port device team_slave_1 removed [ 1101.477521] Node 0 DMA32: 13325*4kB (UEH) 7181*8kB (UEH) 5440*16kB (UMEH) 3591*32kB (UEH) 1023*64kB (UMH) 27*128kB (UH) 2*256kB (UH) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 382140kB [ 1101.521024] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1101.532408] team0 (unregistering): Port device team_slave_0 removed [ 1101.544022] Node 1 Normal: 37150*4kB (UM) 9183*8kB (UM) 4373*16kB (UM) 3974*32kB (U) 2729*64kB (U) 126*128kB (U) 40*256kB (U) 14*512kB (U) 18*1024kB (U) 2*2048kB (U) 0*4096kB = 649920kB [ 1101.561032] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1101.568207] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1101.616377] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1101.625336] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1101.649178] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1101.662500] bond0 (unregistering): Released all slaves [ 1101.680531] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1101.726981] 38210 total pagecache pages [ 1101.731695] 0 pages in swap cache [ 1101.735145] Swap cache stats: add 0, delete 0, find 0/0 [ 1101.766509] Free swap = 0kB [ 1101.769587] Total swap = 0kB [ 1101.772640] 2097051 pages RAM [ 1101.775751] 0 pages HighMem/MovableOnly [ 1101.796578] 363840 pages reserved [ 1101.800044] 0 pages cma reserved [ 1102.014225] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1102.162441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1102.200156] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1102.238795] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1102.261676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1102.270176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1102.300333] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1102.317395] 8021q: adding VLAN 0 to HW filter on device team0 [ 1102.348665] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1102.355767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1102.372445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1102.397128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.403732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1102.437175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1102.446150] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1102.483287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1102.495828] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1102.528420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.536297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1102.587109] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1102.614183] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1102.644790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1102.660537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1102.692957] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1102.711658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1102.729474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1102.763060] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1102.781421] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1102.802988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1102.833159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1102.867503] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1102.894812] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1102.924866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1102.940701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1102.969472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1102.996276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1103.036193] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1103.053294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1103.119305] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1103.150245] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1103.172833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1103.181398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1103.223857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1103.535298] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1103.569661] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1103.606746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1103.614753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1104.011914] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1104.029127] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1104.051649] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1104.088615] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1104.095516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1104.117265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1104.125017] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1104.166939] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1104.323053] oom_reaper: reaped process 4985 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1104.358659] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1104.390094] systemd-journal cpuset=/ mems_allowed=0-1 [ 1104.395360] CPU: 0 PID: 4812 Comm: systemd-journal Not tainted 4.14.222-syzkaller #0 [ 1104.403246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1104.412607] Call Trace: [ 1104.415569] dump_stack+0x1b2/0x281 [ 1104.419212] dump_header+0x178/0x82f [ 1104.423025] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1104.428154] ? ___ratelimit+0x2cd/0x530 [ 1104.432153] oom_kill_process.cold+0x10/0xb18 [ 1104.436764] out_of_memory+0xe3e/0x1190 [ 1104.440751] ? oom_killer_disable+0x1c0/0x1c0 [ 1104.445241] ? mutex_trylock+0x152/0x1a0 [ 1104.449295] __alloc_pages_nodemask+0x23e1/0x2720 [ 1104.454231] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1104.459177] ? cache_grow_begin+0x41/0x630 [ 1104.464271] cache_grow_begin+0x91/0x630 [ 1104.468325] ? cache_grow_begin+0x91/0x630 [ 1104.472552] fallback_alloc+0x207/0x2c0 [ 1104.476524] kmem_cache_alloc+0x1e5/0x3c0 [ 1104.480690] getname_flags+0xc8/0x550 [ 1104.484573] user_path_at_empty+0x2a/0x50 [ 1104.488821] SyS_faccessat+0x21b/0x680 [ 1104.492699] ? SyS_fallocate+0x80/0x80 [ 1104.496598] ? do_syscall_64+0x4c/0x640 [ 1104.500584] ? SyS_faccessat+0x680/0x680 [ 1104.504637] do_syscall_64+0x1d5/0x640 [ 1104.508525] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1104.513716] RIP: 0033:0x7f86e83709c7 [ 1104.517417] RSP: 002b:00007ffe4f667ae8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1104.525292] RAX: ffffffffffffffda RBX: 00007ffe4f66aa00 RCX: 00007f86e83709c7 [ 1104.532564] RDX: 00007f86e8de1a00 RSI: 0000000000000000 RDI: 000055ea809989a3 [ 1104.539844] RBP: 00007ffe4f667b20 R08: 0000000000000000 R09: 0000000000000000 [ 1104.547115] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1104.554389] R13: 0000000000000000 R14: 00007ffe4f66aa00 R15: 00007ffe4f668010 [ 1104.575418] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1104.603136] Mem-Info: [ 1104.605608] active_anon:12376 inactive_anon:31120 isolated_anon:0 [ 1104.605608] active_file:19 inactive_file:0 isolated_file:0 [ 1104.605608] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1104.605608] slab_reclaimable:12505 slab_unreclaimable:115473 [ 1104.605608] mapped:52673 shmem:31506 pagetables:754 bounce:0 [ 1104.605608] free:13902 free_pcp:0 free_cma:0 [ 1104.606184] syz-executor.2 cpuset= [ 1104.650337] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1104.656704] / mems_allowed=0-1 [ 1104.676716] Node 0 active_anon:48408kB inactive_anon:82760kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:161168kB dirty:0kB writeback:0kB shmem:84032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1104.682856] CPU: 1 PID: 4985 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1104.712045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1104.715773] syz-executor.1 cpuset= [ 1104.721398] Call Trace: [ 1104.721423] dump_stack+0x1b2/0x281 [ 1104.721436] warn_alloc.cold+0x96/0x1cc [ 1104.721448] ? zone_watermark_ok_safe+0x220/0x220 [ 1104.721456] ? usleep_range+0x130/0x130 [ 1104.721465] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1104.721477] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1104.721486] ? run_timer_softirq+0x5a0/0x5a0 [ 1104.721501] __alloc_pages_nodemask+0x2127/0x2720 [ 1104.721517] ? lock_acquire+0x170/0x3f0 [ 1104.721534] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1104.721546] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1104.721560] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1104.721579] alloc_pages_current+0x155/0x260 [ 1104.721592] ion_page_pool_alloc+0x118/0x1b0 [ 1104.721603] ion_system_heap_allocate+0x133/0x8c0 [ 1104.721612] ? ion_alloc+0x187/0x810 [ 1104.721621] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1104.721630] ? ion_system_contig_heap_create+0x130/0x130 [ 1104.721640] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1104.721649] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1104.721660] ion_alloc+0x204/0x810 [ 1104.721673] ? ion_dma_buf_release+0x40/0x40 [ 1104.721686] ? __might_fault+0x177/0x1b0 [ 1104.721698] ion_ioctl+0xea/0x1f0 [ 1104.721711] ? ion_query_heaps+0x360/0x360 [ 1104.725253] / [ 1104.727932] ? ion_query_heaps+0x360/0x360 [ 1104.741944] mems_allowed=0-1 [ 1104.744416] do_vfs_ioctl+0x75a/0xff0 [ 1104.753661] Node 1 active_anon:1096kB inactive_anon:41720kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:49524kB dirty:16kB writeback:0kB shmem:41992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1104.754520] ? ioctl_preallocate+0x1a0/0x1a0 [ 1104.770637] Node 0 [ 1104.772732] ? lock_downgrade+0x740/0x740 [ 1104.802480] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1104.806782] ? __fget+0x225/0x360 [ 1104.806794] ? do_vfs_ioctl+0xff0/0xff0 [ 1104.806805] ? security_file_ioctl+0x83/0xb0 [ 1104.806814] SyS_ioctl+0x7f/0xb0 [ 1104.806823] ? do_vfs_ioctl+0xff0/0xff0 [ 1104.806834] do_syscall_64+0x1d5/0x640 [ 1104.806850] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1104.806858] RIP: 0033:0x465ef9 [ 1104.806863] RSP: 002b:00007f785ae94188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1104.806872] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1104.806876] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1104.806881] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1104.806886] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1104.806891] R13: 00007ffc771f8d7f R14: 00007f785ae94300 R15: 0000000000022000 [ 1104.825246] warn_alloc_show_mem: 2 callbacks suppressed [ 1104.825250] Mem-Info: [ 1104.833030] CPU: 0 PID: 4806 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 1104.842325] active_anon:12376 inactive_anon:31120 isolated_anon:0 [ 1104.842325] active_file:18 inactive_file:0 isolated_file:0 [ 1104.842325] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1104.842325] slab_reclaimable:12505 slab_unreclaimable:115473 [ 1104.842325] mapped:52673 shmem:31506 pagetables:754 bounce:0 [ 1104.842325] free:13876 free_pcp:30 free_cma:0 [ 1104.842530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1104.844249] Node 0 active_anon:48408kB inactive_anon:82760kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:161168kB dirty:0kB writeback:0kB shmem:84032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1104.848475] Call Trace: [ 1104.848498] dump_stack+0x1b2/0x281 [ 1104.848512] warn_alloc.cold+0x96/0x1cc [ 1104.848524] ? zone_watermark_ok_safe+0x220/0x220 [ 1104.848536] ? usleep_range+0x130/0x130 [ 1104.851641] Node 1 active_anon:1096kB inactive_anon:41720kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:49524kB dirty:16kB writeback:0kB shmem:41992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1104.855554] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1104.886356] Node 0 [ 1104.888682] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1104.891110] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1104.896388] ? run_timer_softirq+0x5a0/0x5a0 [ 1104.896405] __alloc_pages_nodemask+0x2127/0x2720 [ 1104.896423] ? lock_acquire+0x170/0x3f0 [ 1104.896438] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1104.925349] lowmem_reserve[]: [ 1104.928761] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1104.928778] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1104.928804] alloc_pages_current+0x155/0x260 [ 1104.932782] 0 [ 1104.937289] ion_page_pool_alloc+0x118/0x1b0 [ 1104.937300] ion_system_heap_allocate+0x133/0x8c0 [ 1104.937312] ? _raw_spin_unlock+0x29/0x40 [ 1104.937325] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1104.940854] 2717 [ 1104.944948] ? ion_system_contig_heap_create+0x130/0x130 [ 1104.948858] 2718 [ 1104.954094] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1104.957329] 2718 [ 1104.966656] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1104.966670] ion_alloc+0x27a/0x810 [ 1104.966690] ? ion_dma_buf_release+0x40/0x40 [ 1104.975091] 2718 [ 1104.984801] ? __might_fault+0x177/0x1b0 [ 1104.984816] ion_ioctl+0xea/0x1f0 [ 1104.984828] ? ion_query_heaps+0x360/0x360 [ 1104.984841] ? ion_query_heaps+0x360/0x360 [ 1105.001090] do_vfs_ioctl+0x75a/0xff0 [ 1105.001103] ? ioctl_preallocate+0x1a0/0x1a0 [ 1105.001114] ? lock_downgrade+0x740/0x740 [ 1105.001128] ? __fget+0x225/0x360 [ 1105.010014] Node 0 [ 1105.015728] ? do_vfs_ioctl+0xff0/0xff0 [ 1105.019381] DMA32 free:17992kB min:36200kB low:45248kB high:54296kB active_anon:48408kB inactive_anon:82668kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2776kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1105.027107] ? security_file_ioctl+0x83/0xb0 [ 1105.027118] SyS_ioctl+0x7f/0xb0 [ 1105.027127] ? do_vfs_ioctl+0xff0/0xff0 [ 1105.027162] do_syscall_64+0x1d5/0x640 [ 1105.060973] lowmem_reserve[]: [ 1105.070676] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1105.070686] RIP: 0033:0x465ef9 [ 1105.070690] RSP: 002b:00007f5842689188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1105.070700] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1105.070711] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1105.098355] 0 [ 1105.100901] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1105.104509] 0 [ 1105.108747] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1105.108753] R13: 00007ffc66db249f R14: 00007f5842689300 R15: 0000000000022000 [ 1105.120238] lowmem_reserve[]: [ 1105.168050] 0 [ 1105.189755] 0 [ 1105.212933] 0 [ 1105.221792] 2717 [ 1105.233139] 0 [ 1105.235862] 2718 [ 1105.259809] 2718 [ 1105.276410] Node 0 [ 1105.287094] 2718 [ 1105.302323] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1105.356923] lowmem_reserve[]: [ 1105.367950] Node 0 [ 1105.386368] 0 [ 1105.399510] DMA32 free:17952kB min:36200kB low:45248kB high:54296kB active_anon:48408kB inactive_anon:82668kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2780kB bounce:0kB free_pcp:232kB local_pcp:112kB free_cma:0kB [ 1105.413911] 0 [ 1105.424931] lowmem_reserve[]: [ 1105.430422] 0 [ 1105.432026] 0 [ 1105.434202] 0 [ 1105.436243] 0 [ 1105.470564] 0 [ 1105.500792] 0 0 0 [ 1105.512968] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1105.547887] Node 1 Normal free:27172kB min:53696kB low:67120kB high:80544kB active_anon:1096kB inactive_anon:41720kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1105.554675] lowmem_reserve[]: [ 1105.587241] lowmem_reserve[]: 0 0 0 0 0 [ 1105.591095] 0 0 0 0 0 [ 1105.594421] Node 0 DMA: 3*4kB (UME) 2*8kB (UE) 4*16kB (UME) 4*32kB (UME) 2*64kB (ME) 5*128kB (UE) 5*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10972kB [ 1105.605329] Node 1 Normal free:67108kB min:53696kB low:67120kB high:80544kB active_anon:1096kB inactive_anon:41720kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1105.639178] Node 0 DMA32: 1002*4kB (ME) 483*8kB (UME) 176*16kB (UME) 29*32kB (UME) 7*64kB (UM) 2*128kB (U) 20*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 18976kB [ 1105.733697] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1105.791062] Node 1 Normal: 1*4kB (M) 1*8kB (U) 1*16kB (U) 1*32kB (M) 1*64kB (U) 2*128kB (UM) 0*256kB 1*512kB (M) 67*1024kB (UM) 6*2048kB (UM) 5*4096kB (U) = 102268kB [ 1105.800429] lowmem_reserve[]: 0 0 0 0 0 [ 1105.840785] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1105.847724] Node 0 DMA: 1*4kB (E) 2*8kB (UE) 3*16kB (UME) 1*32kB (E) 2*64kB (ME) 1*128kB (E) 4*256kB (UME) 5*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (U) = 11108kB [ 1105.899790] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1105.927073] Node 0 DMA32: 412*4kB (UME) 383*8kB (UME) 159*16kB (ME) 17*32kB (E) 501*64kB (UM) 250*128kB (U) 118*256kB (UM) 3*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 104632kB [ 1105.936370] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1105.971499] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1105.982449] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1105.996388] Node 1 Normal: 1*4kB (M) 1*8kB (U) 1*16kB (U) 1*32kB (M) 2110*64kB (U) 8*128kB (UM) 4*256kB (U) 4*512kB (UM) 68*1024kB (UM) 6*2048kB (UM) 5*4096kB (U) = 241596kB [ 1106.006594] 33971 total pagecache pages [ 1106.016302] 0 pages in swap cache [ 1106.036388] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1106.048707] Swap cache stats: add 0, delete 0, find 0/0 [ 1106.054098] Free swap = 0kB [ 1106.057285] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1106.057292] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1106.057297] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1106.057301] 33979 total pagecache pages [ 1106.057308] 0 pages in swap cache [ 1106.057313] Swap cache stats: add 0, delete 0, find 0/0 [ 1106.057315] Free swap = 0kB [ 1106.057318] Total swap = 0kB [ 1106.057323] 2097051 pages RAM [ 1106.057326] 0 pages HighMem/MovableOnly [ 1106.057328] 363840 pages reserved [ 1106.057331] 0 pages cma reserved [ 1106.057338] Out of memory (oom_kill_allocating_task): Kill process 4812 (systemd-journal) score 0 or sacrifice child [ 1106.057367] Killed process 4812 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1764kB [ 1106.092380] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1106.115422] Total swap = 0kB [ 1106.148756] 2097051 pages RAM [ 1106.151955] 0 pages HighMem/MovableOnly [ 1106.155930] 363840 pages reserved [ 1106.159499] 0 pages cma reserved [ 1106.189001] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1106.213055] systemd[1]: Stopped Journal Service. [ 1106.253002] systemd[1]: Starting Journal Service... [ 1106.399538] systemd-journald[5053]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1106.892815] systemd[1]: Started Journal Service. [ 1107.263427] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1107.287079] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1107.292273] CPU: 0 PID: 4985 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1107.300084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1107.309438] Call Trace: [ 1107.312051] dump_stack+0x1b2/0x281 [ 1107.315710] warn_alloc.cold+0x96/0x1cc [ 1107.319776] ? zone_watermark_ok_safe+0x220/0x220 [ 1107.324636] __alloc_pages_nodemask+0x2127/0x2720 [ 1107.329485] ? io_schedule_timeout+0x140/0x140 [ 1107.334074] ? lock_acquire+0x170/0x3f0 [ 1107.338056] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1107.342936] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1107.348482] ? __mutex_unlock_slowpath+0x75/0x770 [ 1107.353333] alloc_pages_current+0x155/0x260 [ 1107.357755] ion_page_pool_alloc+0x118/0x1b0 [ 1107.362174] ion_system_heap_allocate+0x133/0x8c0 [ 1107.367029] ? _raw_spin_unlock+0x29/0x40 [ 1107.371202] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1107.376140] ? ion_system_contig_heap_create+0x130/0x130 [ 1107.381794] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1107.386821] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1107.391849] ion_alloc+0x27a/0x810 [ 1107.395407] ? ion_dma_buf_release+0x40/0x40 [ 1107.399815] ? __might_fault+0x177/0x1b0 [ 1107.403968] ion_ioctl+0xea/0x1f0 [ 1107.407424] ? ion_query_heaps+0x360/0x360 [ 1107.411662] ? ion_query_heaps+0x360/0x360 [ 1107.415894] do_vfs_ioctl+0x75a/0xff0 [ 1107.419692] ? ioctl_preallocate+0x1a0/0x1a0 [ 1107.424093] ? lock_downgrade+0x740/0x740 [ 1107.428241] ? __fget+0x225/0x360 [ 1107.431690] ? do_vfs_ioctl+0xff0/0xff0 [ 1107.435659] ? security_file_ioctl+0x83/0xb0 [ 1107.440083] SyS_ioctl+0x7f/0xb0 [ 1107.443462] ? do_vfs_ioctl+0xff0/0xff0 [ 1107.447439] do_syscall_64+0x1d5/0x640 [ 1107.451344] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1107.456536] RIP: 0033:0x465ef9 [ 1107.459718] RSP: 002b:00007f785ae94188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1107.467439] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1107.474705] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1107.481972] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1107.489246] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1107.496530] R13: 00007ffc771f8d7f R14: 00007f785ae94300 R15: 0000000000022000 [ 1107.514420] warn_alloc_show_mem: 1 callbacks suppressed [ 1107.514424] Mem-Info: [ 1107.523664] active_anon:12380 inactive_anon:33153 isolated_anon:0 [ 1107.523664] active_file:1422 inactive_file:1942 isolated_file:0 [ 1107.523664] unevictable:0 dirty:35 writeback:0 unstable:0 [ 1107.523664] slab_reclaimable:12507 slab_unreclaimable:117202 [ 1107.523664] mapped:54638 shmem:33558 pagetables:706 bounce:0 [ 1107.523664] free:234699 free_pcp:370 free_cma:0 [ 1107.561359] Node 0 active_anon:48600kB inactive_anon:90960kB active_file:2516kB inactive_file:5364kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:166636kB dirty:60kB writeback:0kB shmem:92244kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1107.595739] Node 1 active_anon:920kB inactive_anon:41652kB active_file:3172kB inactive_file:2404kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51916kB dirty:80kB writeback:0kB shmem:41988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1107.627359] Node 0 DMA free:11352kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:528kB inactive_file:632kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1107.658404] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1107.663470] Node 0 DMA32 free:436704kB min:36200kB low:45248kB high:54296kB active_anon:48600kB inactive_anon:90868kB active_file:1988kB inactive_file:4732kB unevictable:0kB writepending:60kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2628kB bounce:0kB free_pcp:792kB local_pcp:104kB free_cma:0kB [ 1107.696514] lowmem_reserve[]: 0 0 0 0 0 [ 1107.700527] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1107.730138] lowmem_reserve[]: 0 0 0 0 0 [ 1107.734153] Node 1 Normal free:812848kB min:53696kB low:67120kB high:80544kB active_anon:920kB inactive_anon:41652kB active_file:3172kB inactive_file:2404kB unevictable:0kB writepending:80kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:196kB bounce:0kB free_pcp:656kB local_pcp:0kB free_cma:0kB [ 1107.766649] lowmem_reserve[]: 0 0 0 0 0 [ 1107.770678] Node 0 DMA: 36*4kB (UE) 12*8kB (UE) 6*16kB (UME) 4*32kB (UE) 3*64kB (UME) 2*128kB (UE) 3*256kB (UME) 5*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (U) = 11408kB [ 1107.790794] Node 0 DMA32: 23249*4kB (UME) 10929*8kB (UME) 6617*16kB (UME) 3452*32kB (UME) 1068*64kB (U) 28*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 469468kB [ 1107.810821] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1107.816460] Bluetooth: hci1 command 0x0409 tx timeout [ 1107.821653] Node 1 Normal: 41025*4kB (UM) 11130*8kB (UM) 6556*16kB (U) 5853*32kB (U) 3736*64kB (U) 645*128kB (U) 67*256kB (U) 20*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 896436kB [ 1107.850324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1107.859370] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1107.872734] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1107.881746] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1107.895540] 36932 total pagecache pages [ 1107.899658] 0 pages in swap cache [ 1107.903263] Swap cache stats: add 0, delete 0, find 0/0 [ 1107.912244] Free swap = 0kB [ 1107.915279] Total swap = 0kB [ 1107.919104] 2097051 pages RAM [ 1107.922754] 0 pages HighMem/MovableOnly [ 1107.930500] 363840 pages reserved [ 1107.934170] 0 pages cma reserved [ 1108.200718] IPVS: ftp: loaded support on port[0] = 21 [ 1108.209855] device veth0_vlan entered promiscuous mode [ 1108.234374] device veth1_vlan entered promiscuous mode [ 1108.279664] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1108.311110] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1108.322077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1108.331861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1108.350895] device veth0_macvtap entered promiscuous mode [ 1108.359181] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1108.378829] device veth1_macvtap entered promiscuous mode [ 1108.409605] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1108.471574] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1108.511132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1108.522854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.533457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1108.544122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.554072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1108.564627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.574593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1108.585683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.598519] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1108.605586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1108.631105] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1108.639125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1108.650738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1108.671916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1108.682419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.693238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1108.703892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.714306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1108.725274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.735590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1108.746540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.757866] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1108.764870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1108.772741] chnl_net:caif_netlink_parms(): no params data found [ 1108.786875] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1108.795275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1108.932595] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.939552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.948947] device bridge_slave_0 entered promiscuous mode [ 1108.956208] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.964656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.973147] device bridge_slave_1 entered promiscuous mode [ 1109.000783] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1109.011120] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1109.036055] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1109.044712] team0: Port device team_slave_0 added [ 1109.051893] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1109.060454] team0: Port device team_slave_1 added [ 1109.084141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1109.092196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1109.119588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1109.132093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1109.144696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1109.174583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1109.187081] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1109.194679] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1109.224894] device hsr_slave_0 entered promiscuous mode [ 1109.231084] device hsr_slave_1 entered promiscuous mode [ 1109.241386] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1109.249067] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 18:05:07 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x400100, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0xe, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) 18:05:07 executing program 3: getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r0, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000500)={r2, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r1) sendmsg$IPVS_CMD_SET_DEST(r1, 0x0, 0x8884) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f00000001c0)=0x1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) socketpair(0x8, 0x6, 0x7fffffff, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x9, 0x400}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000080)={r5, 0x88}, 0x8) 18:05:07 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r1, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffffffff804, &(0x7f0000000000)=0xff}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000500)={r3, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r2) sendmsg$IPVS_CMD_SET_DEST(r2, 0x0, 0x8884) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000040)={0x2, 0x3, 0x8001, 0x1, 0x9}) 18:05:07 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@name, &(0x7f0000000080)=0x80) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) 18:05:07 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r1, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000500)={r3, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r2) sendmsg$IPVS_CMD_SET_DEST(r2, 0x0, 0x8884) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0xfffb, 0x3ff, 0x6, 0x200, 0x7fff, 0x800, 0x401, 0xb4}, &(0x7f0000000100)=0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) 18:05:07 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={r2, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000500)={r5, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x8884) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1}, &(0x7f0000000180)=0x20) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)={0xd8, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, [], 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffff8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6df0}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3a}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x55}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1000}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000000) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000500)={r4, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r3) sendmsg$IPVS_CMD_SET_DEST(r3, 0x0, 0x8884) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40102}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) [ 1109.373046] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 18:05:07 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={r2, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000500)={r5, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x8884) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1}, &(0x7f0000000180)=0x20) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)={0xd8, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, [], 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffff8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6df0}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3a}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x55}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1000}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000000) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000500)={r4, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r3) sendmsg$IPVS_CMD_SET_DEST(r3, 0x0, 0x8884) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40102}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) [ 1109.488267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1109.522817] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1109.563834] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1109.587868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1109.601411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 18:05:08 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) [ 1109.634633] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1109.661287] 8021q: adding VLAN 0 to HW filter on device team0 [ 1109.701814] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 18:05:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r1, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000500)={r3, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r2) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000002a40)={0x0, 0x3}, &(0x7f0000002a80)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000002b40)={&(0x7f0000000900)=@in6={0xa, 0x4e23, 0x3f, @rand_addr=' \x01\x00', 0x4}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="c3079644c147805e6c3210fe5faf863b2110fc7ed8b0b39b6791e669e6bcca5f532e2569befc60049547b244fa74755bf8c966567712aa0a93ff63dece4761afea3e4e04330d75a08b4a8faf8c771e86df8811e93efd5d1bd4434421dfd2efb9bc84de5ff2dd657b9b0bb6b54ba000f9678c6d6d0005762957299ec95417e6798e7a9d01b8547e6fbd6d664157e6e838a8d2bd7591154a67516cc731368d5454a65ab54d4b13a9271c3be4292583a0c441eeddec17d2c6037d39767607ed5945443f0db07599ca2547c25cde2a72e47ed03311b8a716f14ff7930132aef875e34695cbfcb89f63ecd433e5cd5589802d631a40a0dd508af660b58764753932a105839f23698fcf9eb5d00c204318c83f4bfa6ba1f3453f9d323cc965c749dc8dd8e3f3a0b640a95fb6f2d6deaa09d734f4bc2ed90d67cf77d4d7e8487851d5fb82c136a945200f64b9a413ad1414bf7b6205ef9ef7fca8f6ef2c5eb982e026544a46002facdbb7e3549f2914ae9749f5e151f2f5fe053be48db932b7389f8abeb4d2c76bf138583fe04865b50398ea58e683f13a0c23a52192dc6ed88e041b2888e880b9fcd0e9edb371d628347e8e215d712b4f3646b8a0cba12fed6ae6c14ceac588a01ac37dd380b04ed28e4d61adadaa4b18f393981d61c04a7ba5064cf3d2a2f391d6e7a031da88c0467111dc983ca8a0326ea8dedf2dbc5ae23f14dca68c4ba08b46f4115be01b377fb8cbbee361204d42fabcd5b2dc2435c4e16240baaf03dd9baa861fedbcaa11ec8ecca77beb6f29d8358c13bae66a5952dd6e5c6413a2e561004c354b0a4df85984f3a044eb224967c70a7f34acc0206b38a0538382f84ab0e6785a1528ff2bbe68081c486546c5d9df5f761e743b080fd079f79d2407bbb0f25f0ad02c3ffe2c2caefb82871a283e7e9b42ec3f442633fc6547d4973588244881c4306c228cfa50ac8afbb099d1beb65aecbe30f892b5fa23374aa53bd11d2c9cc253ab82577b8d6bdf29d9583288a690edd4fd1e7aa2ea74c7ef284aab046c7203558ac801a2628d3ff5c5901785a7204ff29da1b9f7d4c56583f3f2f5ec4618d0fa1b11e68065dfd91d956a38b85e0df78e9557913e6d111102226fd1c3dbc5e11c7438035f37c6e011edc0bc84b29cd61780bdddbfe503afee11b66ce1789978e7eecc38afdc5e9bbf7f5442c3b28a42960091b26d92b694a6c88b46b2f796a93404b9e0638400df9e7ded9a3df625158d51f264f2074596f42b59e77c1988bf2d114b19b319a7adeb5952e0c818c1d6dea71588767e01a97d44bec36d5f8efffc9053f23b48bce0aad987d48021f078b45dcbdb0edb7701d542b0c87e996e3e405e5a0c414d4419199c9831d02368814f0cdd3a8f1b182993fca0c423c1fecfce1d63d47d3bd4cdae731984b82812949632f8a190a77db6c8dd45491455910d036373c9ee7562e6c2f41f412c33feb89c9c4bfe5066272cc4e21d0a527cdce1783fe3291f8ccebfbead6e87c55673e243ddbfb3a96683b9b3b3e052926c52cdb0a041044ed0c29cec97b1e9da8a5679a6a348ae77c3b805280b20df89b7c4e623b137116a39519af6c716cd416ecc4985593a7dc2c5c5ba8ea25a8945c41613d13862dff3beafc1816355311c082c43a5976a9df722750cc18d3fb4e0144e0de02c9f6e0c691f4695a08d258b78dec2acbcb0be2adb9b3f63a32437baf87b05a1b389894417f7bf661c0789a8de108db37b6769ddba44e13d205749242f2d39ad8f0a0a663e169bb0ae24df43bf04ea0f124396d1e283a865e3fc3ecc3aed4300b8bef3f13d31786661af04006f424f3efcf629c411adad8cfec63d6ec9f551631ef3c68cbb4551051c14a6b1e369b0df96b985139453bde7085873f4375ac96d0cdf621537a6787f44cb66f9b3bc446a515939d814364590df8c9e2ff35b5194b789c814579dd59a9344d93e97af527b7a43757e7b4a53bd6698d9a90650e9bebe5d99b488a6d6a84f5fdf3ce19a2d938f1521c4f76e9dd238cf36a9b581133172d0197a56be358c15d002666b57e40d72de0d01c3fec50f21e6401c222113c7659d14432bba3abd513d612de00d095794177c9189adecebbf0383a3309d3d9efe951a828568303b8f002061e6050ce0c218818868e794e06e72913ed1be007b62057fde8ec32d82ecb77c5fbdb2a1a1cc94cdcf683e07bb172a2e9e6eae83ad98093777082bc64924309660d64a455e415883e1a4e4d94da6e03867b0b338ce426b37c0e8620131018d119c06cbf0fb66ad6f0993ed6e56c58ee0bb8ac0c0a8de1b48ae3bfbf93ab020b9d12dabf7eddfb5da2e3b8361b7b89e96551a7827925ea363024c3b08002ced5d301ce994c67e7206ff38425a8988a2f24c8eae4acdd59363f287945b348421aac1ff2e27b7792147dd325be641adf559b92b517a9645834946525df58c26ef27afe96ca76d01e25fd908e649dd18da832644f3df41b9730b3a404b2f5040f1208ccf7343d5099c8c3df89129be7a44e134b0f3e638803125eaa7ae7d356d94fd091d946bbd2c212f5a7acd26d0a6237274dbc353552a56d8e5c627a524c2a1d20caffc61ff1402e7f2bbea68e6a06d54c58d10f8d5694cbec1f83f9487718524f76c9ac24b11d93c1a4390c7e52d405a4b8a4acca8ba599ead3b0c54cf06c98e50fedafebc9e07df5a5ce887f700ed8f82c77f0f15e1a64295748d897dcc5f4f7abfcb58be4be4b7f7550a2311599fe2958ae656a0a6e0883ea5b1c19e55ee9ca509d3199b270e6c7729cd253ac122509d1c50c3de4142359f7a07f679858633f0687dcdf4d9bb02c591a51a5b24ff982dffd32a65ca9a96e880de8e993df71664c071876e56db3802a9dd1d6720769ad50de3a4b5a52316e2fb2e1e3e8e7cab4d8c950158178e32e8e96dbe9f1baeb0202b305bd05a40645b15b58a770e08515282e41ae76da6e76292b3136527464403a9ec9a60942f856c5aeb25f8e7c0cf3acb9af0baedead426a98d2003f903c4f5b66c16255091b7cadd7113b39daa9f17fe2ceb993d882807eb43c76bfa3467fdfe828797c6d67ee8852231ac27974d66cd0cdd506d6588e77a4ddb2f5e05c7ff2df7999a2983a59f5a573b249e6a3ce9607ae1bd4d15ea1b2b1407862c35aa2766c97bf7b66fbda8732207d55a7af37d48133ea2941c707123dbbfae181cdb4d6990102b983dbd4e009aa64749822fb5179499a8d8d19acf2ada68173b2f44a5130a3f5c02bacebf960412a288ca389a04349b1ed6ed00493ee270cb33e836d69e072b46dc60d58446defae48e425d9a8cd39d5cb3ba196d415f93a352912e95466226d35b78e128aec203535647d21376edc2a4fd216c7dfe83aa9f3cc9f57f2db1d271eb12d57cd526c28d97f70de189222942467feb32980442bad70f1e7bdb518116ef156def2f91678a0ccc4016f95f819c99adc83ad2ed08d2197c5cdb76c5e1469c2c2781270ed54db582fc339af043ab73669de930213c6964f8b6c7332d239c16ecc226287fe30e4fbb85a90165861aff96ca1990fa1a08c2eafdbafd58292049d7b1e5feac598c0d67969b18c14e5b105034125923abffe72b17ba9b6e344089600f4080eb78bd06d8d44d782ca6666a6e32f78cbb3fd3c4d96854ebc713dd600c8d7b51345cf55167d99f546cfc0501df266629613a1fe427705d6db73968f74aa29a4ccff8d09a69f6ee07cdd17dae937a8b06cb2923caf11ddff71ba268c7130468ac1cc2381ce71682142e0aeaff1efbbeea94c6de3c48183912e5f28482abda01e7237b50c22962a160f539efbdd67800a242f68fd050cfea0394c016cb1e192226f7e6f093e8b628756780cf317153d00f4712ce507978b3a0b015933c2b317a5a43d5da130410b4f31fc660253ff4ae6af0ebdd42b7b8832b89fc4cf07e7e4f3bc2a642a01050cbc7daa89785d1be2b33d9dcb791d467c393b25c78deb5ef8f6a95484a6a231478357d2b8255747b3b548771a5f2b1ff3b16f4245cd62716a51a94909a4eb857b1682a69a8f9d17db05610e274112db4422f64989542be2d2701d0a883a113dc87f10760113a9219cc74b4e634ffdf0e09f9462ad3377d531190186db2ee028c2114923a7956c75d424a1ce8f62152bdb5894074e64bd5a2419de479542099e3a50db042a63e9c181c607ac6cde2f1bfa90386c995679fff26c2a6954dd7a26446d7c638bd38389c18a6d09622b98868e3d948d86ce106ee29f7d1d5aac65e5a02d5c9f35b13285eca7e9cfdadea327feb067535b576922f2340d17af8aa83ceb1e3ad2595fab9b9503d4495c0befcecc691a92145c4ad52e53a0826923a8e0701b3d65dd0df7c9e1fb0a7feac4321eb48a5591a426f189aa4ba3895c160785a00a09c0e24f2a041a7a0349d53844c735409924ab37faab77c5db09df0dba7c8cd047ebfa8e577d1874aacd08fafb9ce77f62647e97149d299b8ed72ec0cd42c87359fad94426a74e0cdcfec328b565777e8286f9b85e342ae77a611395dfaf21121854576c5713bcca3d7035d7b91f7505c46183af1e03664eb594b6137d8e0c777d5037828e22a05f2ebc9603ef4825b617a2effd13ca048356809b309cf0b7d12e332d88addc4d8bebdb011f3de986de7c84e7506ee2945eefaedc0d74dd4e0e14064f38cef92d26636614a49796dd246a3c3f1b314dcdf47233428a97525612d117852b6177d612c4dd7770bb241a7b2c96999fb10f6f963868112b154d6de676bba3f8163c70594a616d87918fb86899ce9ffa370f07c6a46773d63d4173b2fb12ad0843dd6ea5639672ec4426b5c7f61f79e5dd4063b1c93f73ab3c43103f521a99d5ded8427212a93659e0c0f437c5afc83bc59108e755e6a3aeae207c0a252d1686c039399bf591a2367113c2275b91a8835f3983c9c4b5ba5715819e958bd5752cc0aadab19d28e4a4046e2da0da1a83bf57cf3bb1e609eb762cb1597ed9cf484c62e7feb651d5e2a06c68594bd87ca7dad2d1e62bc3712d0abd684a51d296f8c121f0a8ac0b4c8d0b296f6d866aad5cc928b165478fc8438edadc045987e60fc29502c82b0de46eeb11159feaa067e5a59a441753301f79dd666b51771a5247cc259da759561336b45303fdc549d2131d1b18707d70e9ec05b48cade34af31e3b85cc12ec10006363a4f9ba8e450f6ee7dd72311f37dcba2bdcc441f32dd31d61afcf4b7e31b3f3a5c9e0cd65c0f6318b6f8913f5fb7ebf3ddf80cafe08b7eef24fe01b0c312b1ee875e371153ed055013247ff0495c4af6cb30df41a1356100ff077be3e96cda0a5e3fd00f109fa6c99c9fa466998bbf9a1f6dce1879bb36eaa6695dc18b0a92290eba42fec05d37796809dcf6917757bb24f8d8a61a03fd90eee9f9c13ac0948e62a327e0eb3663606d4983f5e30c16ffa9935e6ead6a22feaebd910840425cc32d700921c0c77d3239ca9861ebb9914fbebc8e6be1dcde08371d7dff33e312ea7c6ed39cdfbf1b2b6aeb9fc96f83220ab91910201db990ae206483ed3e3859e73ac91a1082f8a0e5f8953b0852f628afab5fb1c9ba5ca3ad06fb394f5ecaf4d755ff74f7e89c772de611f5573d642df08e327d7442164ee57b7dfe26e5768f650cd97f964cc98b2260157a6bf73b5015c39f9966c27dbd8a8eea0ed52ab18b0e39368c5fa298d3bfd405429776e0a78ece8f42c531b93c04b621c6c6902cf15da62fb04a72763ff344b6f8d21ff5457d0c167be45091c6a47cfba39b50ac9abe", 0x1000}, {&(0x7f0000002940)="4d5f358b32848725950d956505e67b8c7f9d4389306b1af59dc8", 0x1a}, {&(0x7f0000002980)="458b6d6b0f55a6177ba278af69defabf8e4308f7beb44c4460b8b5fd7e4ae3971643514cf2ac5a8c3556803a3645b4bec10013f0c64e4c2e4a7576607d3853d4a1aff177cbf285223937b9fbe9c3714795fa0eb38fe3f4", 0x57}], 0x4, &(0x7f0000002ac0)=[@prinfo={0x18, 0x84, 0x5, {0x20}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x8000, 0x8, 0x1fe000, r4}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @init={0x18, 0x84, 0x0, {0x8, 0x40, 0x7, 0x8001}}], 0x68, 0x80}, 0x80) sendmsg$IPVS_CMD_SET_DEST(r2, 0x0, 0x8884) r5 = accept(r0, &(0x7f00000005c0)=@x25={0x9, @remote}, &(0x7f0000000540)=0x80) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000640)=@assoc_value={r3, 0x2}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000006c0)={0x1, 0x2117, 0x4, 0xfffffff7, 0x2, 0x8, 0x5, 0xffff, r6}, &(0x7f0000000700)=0x20) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00', r0) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x41) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002b80)='IPVS\x00', r2) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xb8, r8, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4040011}, 0x1) [ 1109.743538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1109.762939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1109.790292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.796779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1109.838267] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1109.882474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1109.890860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1109.899580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1109.950115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.958849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.994066] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1110.001129] Bluetooth: hci1 command 0x041b tx timeout [ 1110.030814] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1110.062510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1110.087142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1110.098555] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1110.112548] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1110.112787] syz-executor.5: [ 1110.127172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1110.151699] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1110.152751] syz-executor.2 cpuset= [ 1110.166483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1110.181748] / mems_allowed=0-1 [ 1110.186369] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1110.191510] CPU: 1 PID: 5283 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1110.199302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1110.208743] Call Trace: [ 1110.211784] dump_stack+0x1b2/0x281 [ 1110.215416] warn_alloc.cold+0x96/0x1cc [ 1110.219398] ? zone_watermark_ok_safe+0x220/0x220 [ 1110.224440] __alloc_pages_nodemask+0x2127/0x2720 [ 1110.229304] ? lock_acquire+0x170/0x3f0 [ 1110.233463] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1110.239649] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1110.245227] ? __mutex_unlock_slowpath+0x75/0x770 [ 1110.250096] alloc_pages_current+0x155/0x260 [ 1110.255008] ion_page_pool_alloc+0x118/0x1b0 [ 1110.259440] ion_system_heap_allocate+0x133/0x8c0 [ 1110.264304] ? ion_alloc+0x187/0x810 [ 1110.268032] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1110.273499] ? ion_system_contig_heap_create+0x130/0x130 [ 1110.279057] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1110.284195] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1110.289143] ion_alloc+0x204/0x810 [ 1110.292801] ? ion_dma_buf_release+0x40/0x40 [ 1110.297835] ? __might_fault+0x177/0x1b0 [ 1110.302176] ion_ioctl+0xea/0x1f0 [ 1110.305636] ? ion_query_heaps+0x360/0x360 [ 1110.309885] ? ion_query_heaps+0x360/0x360 [ 1110.314214] do_vfs_ioctl+0x75a/0xff0 [ 1110.318118] ? ioctl_preallocate+0x1a0/0x1a0 [ 1110.322881] ? lock_downgrade+0x740/0x740 [ 1110.327403] ? __fget+0x225/0x360 [ 1110.330949] ? do_vfs_ioctl+0xff0/0xff0 [ 1110.337099] ? security_file_ioctl+0x83/0xb0 [ 1110.342742] SyS_ioctl+0x7f/0xb0 [ 1110.346118] ? do_vfs_ioctl+0xff0/0xff0 [ 1110.350125] do_syscall_64+0x1d5/0x640 [ 1110.354240] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1110.359872] RIP: 0033:0x465ef9 [ 1110.364225] RSP: 002b:00007fd7ebad0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1110.372040] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1110.379314] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1110.387424] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1110.395528] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1110.404201] R13: 00007ffc90d553bf R14: 00007fd7ebad0300 R15: 0000000000022000 [ 1110.417685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1110.433134] CPU: 0 PID: 5279 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1110.441160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1110.450767] Call Trace: [ 1110.453385] dump_stack+0x1b2/0x281 [ 1110.457763] warn_alloc.cold+0x96/0x1cc [ 1110.462813] ? zone_watermark_ok_safe+0x220/0x220 [ 1110.469002] __alloc_pages_nodemask+0x2127/0x2720 [ 1110.474238] ? io_schedule_timeout+0x140/0x140 [ 1110.478855] ? lock_acquire+0x170/0x3f0 [ 1110.482950] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1110.490364] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1110.497975] ? __mutex_unlock_slowpath+0x75/0x770 [ 1110.503888] ? alloc_pages_current+0x84/0x260 [ 1110.506253] Mem-Info: [ 1110.508417] alloc_pages_current+0x155/0x260 [ 1110.508433] ion_page_pool_alloc+0x118/0x1b0 [ 1110.508445] ion_system_heap_allocate+0x133/0x8c0 [ 1110.508459] ? ion_alloc+0x187/0x810 [ 1110.510967] active_anon:12577 inactive_anon:33152 isolated_anon:24 [ 1110.510967] active_file:1470 inactive_file:2907 isolated_file:0 [ 1110.510967] unevictable:0 dirty:5 writeback:0 unstable:0 [ 1110.510967] slab_reclaimable:12495 slab_unreclaimable:116666 [ 1110.510967] mapped:55648 shmem:33558 pagetables:785 bounce:0 [ 1110.510967] free:162076 free_pcp:53 free_cma:0 [ 1110.515306] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1110.515320] ? ion_system_contig_heap_create+0x130/0x130 [ 1110.515331] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1110.515344] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1110.520131] Node 0 active_anon:49408kB inactive_anon:90964kB active_file:4044kB inactive_file:9808kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:171228kB dirty:16kB writeback:0kB shmem:92244kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1110.524948] ion_alloc+0x204/0x810 [ 1110.524969] ? ion_dma_buf_release+0x40/0x40 [ 1110.529690] Node 1 active_anon:900kB inactive_anon:41644kB active_file:1836kB inactive_file:1820kB unevictable:0kB isolated(anon):96kB isolated(file):0kB mapped:51364kB dirty:4kB writeback:0kB shmem:41988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1110.565855] ? __might_fault+0x177/0x1b0 [ 1110.565872] ion_ioctl+0xea/0x1f0 [ 1110.565884] ? ion_query_heaps+0x360/0x360 [ 1110.565896] ? ion_query_heaps+0x360/0x360 [ 1110.565906] do_vfs_ioctl+0x75a/0xff0 [ 1110.565917] ? ioctl_preallocate+0x1a0/0x1a0 [ 1110.565943] ? lock_downgrade+0x740/0x740 [ 1110.565957] ? __fget+0x225/0x360 [ 1110.571798] Node 0 [ 1110.577138] ? do_vfs_ioctl+0xff0/0xff0 [ 1110.577151] ? security_file_ioctl+0x83/0xb0 [ 1110.577160] SyS_ioctl+0x7f/0xb0 [ 1110.577169] ? do_vfs_ioctl+0xff0/0xff0 [ 1110.577181] do_syscall_64+0x1d5/0x640 [ 1110.577197] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1110.582341] DMA free:11132kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:672kB inactive_file:488kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1110.587162] RIP: 0033:0x465ef9 [ 1110.587168] RSP: 002b:00007f785ae94188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1110.587177] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1110.587183] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1110.587188] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1110.587193] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1110.587198] R13: 00007ffc771f8d7f R14: 00007f785ae94300 R15: 0000000000022000 [ 1110.600304] syz-executor.1: [ 1110.618665] syz-executor.5: [ 1110.622769] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1110.624957] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1110.624978] syz-executor.5 cpuset= [ 1110.692561] page allocation failure: order:4 [ 1110.705285] lowmem_reserve[]: [ 1110.731302] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1110.749491] / [ 1110.759795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1110.770792] 0 [ 1110.785904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1110.796121] mems_allowed=0-1 [ 1110.820042] (null) [ 1110.833743] 2717 [ 1110.838715] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1110.842740] 2718 [ 1110.858612] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1110.866512] CPU: 1 PID: 5296 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1110.870757] syz-executor.1 cpuset= [ 1110.875797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1110.875802] Call Trace: [ 1110.875822] dump_stack+0x1b2/0x281 [ 1110.875836] warn_alloc.cold+0x96/0x1cc [ 1110.888747] / [ 1110.893695] ? zone_watermark_ok_safe+0x220/0x220 [ 1110.898826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1110.906764] __alloc_pages_nodemask+0x2127/0x2720 [ 1110.906777] ? _raw_spin_unlock_irq+0x24/0x80 [ 1110.906792] ? lock_acquire+0x170/0x3f0 [ 1110.906807] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1110.906823] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1110.906837] ? __mutex_unlock_slowpath+0x75/0x770 [ 1110.913238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1110.914225] alloc_pages_current+0x155/0x260 [ 1110.914241] ion_page_pool_alloc+0x118/0x1b0 [ 1110.928983] mems_allowed=0-1 [ 1110.931843] ion_system_heap_allocate+0x133/0x8c0 [ 1110.931854] ? ion_alloc+0x187/0x810 [ 1110.937379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1110.941267] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1110.941281] ? ion_system_contig_heap_create+0x130/0x130 [ 1110.941294] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1110.953821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1110.956631] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1110.956645] ion_alloc+0x204/0x810 [ 1110.956660] ? ion_dma_buf_release+0x40/0x40 [ 1110.956672] ? __might_fault+0x177/0x1b0 [ 1110.956683] ion_ioctl+0xea/0x1f0 [ 1110.956694] ? ion_query_heaps+0x360/0x360 [ 1110.956710] ? ion_query_heaps+0x360/0x360 [ 1111.048126] do_vfs_ioctl+0x75a/0xff0 [ 1111.052624] ? ioctl_preallocate+0x1a0/0x1a0 [ 1111.057218] ? lock_downgrade+0x740/0x740 [ 1111.061373] ? __fget+0x225/0x360 [ 1111.064834] ? do_vfs_ioctl+0xff0/0xff0 [ 1111.068897] ? security_file_ioctl+0x83/0xb0 [ 1111.073329] SyS_ioctl+0x7f/0xb0 [ 1111.076691] ? do_vfs_ioctl+0xff0/0xff0 [ 1111.080662] do_syscall_64+0x1d5/0x640 [ 1111.084638] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1111.089823] RIP: 0033:0x465ef9 [ 1111.093100] RSP: 002b:00007fd7eba8e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1111.100828] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000465ef9 [ 1111.108409] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1111.115683] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1111.122949] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1111.130210] R13: 00007ffc90d553bf R14: 00007fd7eba8e300 R15: 0000000000022000 [ 1111.145580] CPU: 0 PID: 5278 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 1111.149105] 2718 [ 1111.153405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1111.153409] Call Trace: [ 1111.153428] dump_stack+0x1b2/0x281 [ 1111.153443] warn_alloc.cold+0x96/0x1cc [ 1111.153457] ? zone_watermark_ok_safe+0x220/0x220 [ 1111.155601] 2718 [ 1111.164882] __alloc_pages_nodemask+0x2127/0x2720 [ 1111.164893] ? __schedule+0x893/0x1de0 [ 1111.164908] ? lock_acquire+0x170/0x3f0 [ 1111.164923] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1111.164940] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1111.164952] ? __mutex_unlock_slowpath+0x75/0x770 [ 1111.164966] alloc_pages_current+0x155/0x260 [ 1111.171170] ion_page_pool_alloc+0x118/0x1b0 [ 1111.171183] ion_system_heap_allocate+0x133/0x8c0 [ 1111.171195] ? ion_alloc+0x187/0x810 [ 1111.175869] Node 0 [ 1111.180618] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1111.180631] ? ion_system_contig_heap_create+0x130/0x130 [ 1111.180641] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1111.180652] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1111.180664] ion_alloc+0x204/0x810 [ 1111.180680] ? ion_dma_buf_release+0x40/0x40 [ 1111.180692] ? __might_fault+0x177/0x1b0 [ 1111.182858] DMA32 free:262144kB min:36200kB low:45248kB high:54296kB active_anon:49416kB inactive_anon:90872kB active_file:3380kB inactive_file:9332kB unevictable:0kB writepending:84kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2944kB bounce:0kB free_pcp:380kB local_pcp:140kB free_cma:0kB [ 1111.187583] ion_ioctl+0xea/0x1f0 [ 1111.187596] ? ion_query_heaps+0x360/0x360 [ 1111.187609] ? ion_query_heaps+0x360/0x360 [ 1111.187620] do_vfs_ioctl+0x75a/0xff0 [ 1111.187632] ? ioctl_preallocate+0x1a0/0x1a0 [ 1111.187644] ? lock_downgrade+0x740/0x740 [ 1111.191702] lowmem_reserve[]: [ 1111.195663] ? __fget+0x225/0x360 [ 1111.195675] ? do_vfs_ioctl+0xff0/0xff0 [ 1111.195686] ? security_file_ioctl+0x83/0xb0 [ 1111.195697] SyS_ioctl+0x7f/0xb0 [ 1111.200718] 0 [ 1111.206051] ? do_vfs_ioctl+0xff0/0xff0 [ 1111.206065] do_syscall_64+0x1d5/0x640 [ 1111.206083] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1111.206092] RIP: 0033:0x465ef9 [ 1111.211125] 0 [ 1111.215392] RSP: 002b:00007f5842689188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1111.215403] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1111.215409] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1111.215415] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1111.215421] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1111.215428] R13: 00007ffc66db249f R14: 00007f5842689300 R15: 0000000000022000 [ 1111.218152] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1111.237283] 0 [ 1111.303828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1111.315513] 0 0 [ 1111.445209] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1111.463465] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1111.476002] lowmem_reserve[]: 0 0 0 0 0 [ 1111.482782] Node 1 Normal free:859712kB min:53696kB low:67120kB high:80544kB active_anon:900kB inactive_anon:41652kB active_file:2996kB inactive_file:608kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:196kB bounce:0kB free_pcp:740kB local_pcp:0kB free_cma:0kB [ 1111.517791] warn_alloc_show_mem: 1 callbacks suppressed [ 1111.517794] Mem-Info: [ 1111.525122] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1111.532179] active_anon:12504 inactive_anon:33154 isolated_anon:0 [ 1111.532179] active_file:1887 inactive_file:2607 isolated_file:0 [ 1111.532179] unevictable:0 dirty:22 writeback:0 unstable:0 [ 1111.532179] slab_reclaimable:12452 slab_unreclaimable:117825 [ 1111.532179] mapped:55702 shmem:33558 pagetables:785 bounce:0 [ 1111.532179] free:274652 free_pcp:325 free_cma:0 [ 1111.572612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1111.573258] lowmem_reserve[]: 0 0 0 0 0 [ 1111.584547] Node 0 DMA: 23*4kB (UE) 14*8kB (UE) 11*16kB (UME) 6*32kB (UE) 4*64kB (UME) 1*128kB (E) 3*256kB (UME) 5*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (U) = 11452kB [ 1111.585630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1111.606641] Node 0 active_anon:49116kB inactive_anon:90964kB active_file:4552kB inactive_file:9820kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:171492kB dirty:84kB writeback:0kB shmem:92244kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1111.643323] Node 0 DMA32: 265*4kB (ME) 391*8kB (UME) 123*16kB (E) 2619*32kB (UE) 1200*64kB (U) 5*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 167404kB [ 1111.663962] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1111.681989] Node 1 active_anon:900kB inactive_anon:41652kB active_file:2996kB inactive_file:608kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51316kB dirty:4kB writeback:0kB shmem:41988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1111.688908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1111.720641] Node 1 Normal: 25680*4kB (UM) 8552*8kB (UM) 4783*16kB (UM) 4442*32kB (UM) 3826*64kB (UM) 1110*128kB (UM) 278*256kB (U) 144*512kB (UM) 20*1024kB (U) 0*2048kB 0*4096kB = 942128kB [ 1111.751607] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1111.768756] Node 0 DMA free:11452kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:672kB inactive_file:488kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1111.809979] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1111.828962] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1111.848329] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1111.860518] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1111.876831] Node 0 DMA32 free:47824kB min:36200kB low:45248kB high:54296kB active_anon:49116kB inactive_anon:90872kB active_file:3980kB inactive_file:9332kB unevictable:0kB writepending:84kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2944kB bounce:0kB free_pcp:632kB local_pcp:456kB free_cma:0kB [ 1111.914143] 38053 total pagecache pages [ 1111.924313] 0 pages in swap cache [ 1111.932652] Swap cache stats: add 0, delete 0, find 0/0 [ 1111.945455] Free swap = 0kB [ 1111.952148] Total swap = 0kB [ 1111.958812] 2097051 pages RAM [ 1111.965389] 0 pages HighMem/MovableOnly [ 1111.974147] 363840 pages reserved [ 1111.982245] 0 pages cma reserved [ 1111.987963] lowmem_reserve[]: 0 0 0 0 0 [ 1112.000459] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1112.030289] lowmem_reserve[]: 0 0 0 0 0 [ 1112.054561] Node 1 Normal free:997276kB min:53696kB low:67120kB high:80544kB active_anon:936kB inactive_anon:41652kB active_file:3248kB inactive_file:388kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:216kB bounce:0kB free_pcp:220kB local_pcp:124kB free_cma:0kB [ 1112.087773] Bluetooth: hci1 command 0x040f tx timeout [ 1112.111421] lowmem_reserve[]: 0 0 0 0 0 [ 1112.138232] Node 0 DMA: 1*4kB (E) 2*8kB (UE) 2*16kB (ME) 6*32kB (UE) 4*64kB (UME) 1*128kB (E) 3*256kB (UME) 5*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (U) = 11124kB [ 1112.173885] Node 0 DMA32: 283*4kB (ME) 391*8kB (ME) 127*16kB (UE) 16*32kB (UME) 591*64kB (U) 5*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45268kB [ 1112.236858] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1112.269112] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1112.280631] Node 1 Normal: 32*4kB (M) 4*8kB (M) 2001*16kB (UM) 3151*32kB (UM) 6258*64kB (UM) 1928*128kB (UM) 327*256kB (U) 153*512kB (UM) 24*1024kB (U) 0*2048kB 0*4096kB = 966928kB [ 1112.304800] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1112.334448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1112.335424] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1112.351135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1112.383633] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1112.429198] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1112.469127] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1112.504746] 38098 total pagecache pages [ 1112.521675] 0 pages in swap cache [ 1112.531962] Swap cache stats: add 0, delete 0, find 0/0 [ 1112.534231] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1112.548138] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1112.555398] Free swap = 0kB [ 1112.565311] Total swap = 0kB [ 1112.576396] 2097051 pages RAM [ 1112.577644] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1112.586681] 0 pages HighMem/MovableOnly [ 1112.599751] 363840 pages reserved [ 1112.603242] 0 pages cma reserved [ 1112.621053] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1112.657193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1112.665242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1112.711578] device veth0_vlan entered promiscuous mode [ 1112.720427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1112.739139] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1112.751192] device veth1_vlan entered promiscuous mode [ 1112.844486] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1112.880379] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1112.916726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1112.924566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1112.969153] device veth0_macvtap entered promiscuous mode [ 1112.975492] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1113.016797] device veth1_macvtap entered promiscuous mode [ 1113.023204] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1113.078507] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1113.112114] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1113.138759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1113.190457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.216435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1113.226183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.300195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1113.340174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.366418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1113.376158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.436435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1113.476770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.518346] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1113.525376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1113.556084] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1113.565622] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1113.578601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1113.591685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1113.604371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1113.616426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.625644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1113.636424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.645652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1113.656452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.694008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1113.707736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.717015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1113.727889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.740585] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1113.748303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1113.755463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1113.764919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1113.840592] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1113.938607] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1113.944137] CPU: 0 PID: 5274 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1113.951931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1113.961555] Call Trace: [ 1113.964240] dump_stack+0x1b2/0x281 [ 1113.967872] warn_alloc.cold+0x96/0x1cc [ 1113.971886] ? zone_watermark_ok_safe+0x220/0x220 [ 1113.976747] __alloc_pages_nodemask+0x2127/0x2720 [ 1113.981591] ? _raw_spin_unlock_irq+0x24/0x80 [ 1113.986186] ? lock_acquire+0x170/0x3f0 [ 1113.990168] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1113.995018] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1114.000486] ? __mutex_unlock_slowpath+0x75/0x770 [ 1114.005330] alloc_pages_current+0x155/0x260 [ 1114.009769] ion_page_pool_alloc+0x118/0x1b0 [ 1114.014532] ion_system_heap_allocate+0x133/0x8c0 [ 1114.019388] ? ion_alloc+0x187/0x810 [ 1114.023103] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1114.028553] ? ion_system_contig_heap_create+0x130/0x130 [ 1114.034028] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1114.039043] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1114.043890] ion_alloc+0x204/0x810 [ 1114.047436] ? ion_dma_buf_release+0x40/0x40 [ 1114.051844] ? __might_fault+0x177/0x1b0 [ 1114.055950] ion_ioctl+0xea/0x1f0 [ 1114.059405] ? ion_query_heaps+0x360/0x360 [ 1114.063642] ? ion_query_heaps+0x360/0x360 [ 1114.067886] do_vfs_ioctl+0x75a/0xff0 [ 1114.071696] ? ioctl_preallocate+0x1a0/0x1a0 [ 1114.076105] ? lock_downgrade+0x740/0x740 [ 1114.080257] ? __fget+0x225/0x360 [ 1114.083707] ? do_vfs_ioctl+0xff0/0xff0 [ 1114.087690] ? security_file_ioctl+0x83/0xb0 [ 1114.092104] SyS_ioctl+0x7f/0xb0 [ 1114.095509] ? do_vfs_ioctl+0xff0/0xff0 [ 1114.099509] do_syscall_64+0x1d5/0x640 [ 1114.103578] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1114.108894] RIP: 0033:0x465ef9 [ 1114.112078] RSP: 002b:00007fdf5e1ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1114.119790] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1114.127067] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1114.134342] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1114.141627] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1114.148897] R13: 00007ffcbaeb2d6f R14: 00007fdf5e1ae300 R15: 0000000000022000 [ 1114.160043] Bluetooth: hci1 command 0x0419 tx timeout [ 1114.319191] oom_reaper: reaped process 5278 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1114.348779] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1114.378769] in:imklog cpuset=/ mems_allowed=0-1 [ 1114.383674] CPU: 0 PID: 4227 Comm: in:imklog Not tainted 4.14.222-syzkaller #0 [ 1114.391299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1114.400665] Call Trace: [ 1114.403352] dump_stack+0x1b2/0x281 [ 1114.406979] dump_header+0x178/0x82f [ 1114.410687] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1114.415963] ? ___ratelimit+0x2cd/0x530 [ 1114.419933] oom_kill_process.cold+0x10/0xb18 [ 1114.424441] out_of_memory+0xe3e/0x1190 [ 1114.429020] ? oom_killer_disable+0x1c0/0x1c0 [ 1114.433517] ? mutex_trylock+0x152/0x1a0 [ 1114.437901] __alloc_pages_nodemask+0x23e1/0x2720 [ 1114.442760] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1114.447637] alloc_pages_current+0x155/0x260 [ 1114.452926] filemap_fault+0xea3/0x1980 [ 1114.457068] ext4_filemap_fault+0x84/0xb0 [ 1114.461319] __do_fault+0xfa/0x380 [ 1114.464855] __handle_mm_fault+0x2497/0x4620 [ 1114.469260] ? vm_insert_page+0x7c0/0x7c0 [ 1114.473533] ? lock_downgrade+0x740/0x740 [ 1114.477705] handle_mm_fault+0x391/0x860 [ 1114.481766] __do_page_fault+0x549/0xad0 [ 1114.485928] ? spurious_fault+0x640/0x640 [ 1114.490070] ? do_page_fault+0x60/0x500 [ 1114.494922] ? page_fault+0x2f/0x50 [ 1114.498541] page_fault+0x45/0x50 [ 1114.502611] RIP: fffff7e7:0x1f9f [ 1114.508578] RSP: 402594a0:00007f86402594ac EFLAGS: 7f8640259da0 [ 1114.566111] warn_alloc_show_mem: 1 callbacks suppressed [ 1114.566116] Mem-Info: [ 1114.567154] Mem-Info: [ 1114.574776] active_anon:12484 inactive_anon:33153 isolated_anon:0 [ 1114.574776] active_file:32 inactive_file:16 isolated_file:0 [ 1114.574776] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1114.574776] slab_reclaimable:12402 slab_unreclaimable:117751 [ 1114.574776] mapped:52618 shmem:33557 pagetables:768 bounce:0 [ 1114.574776] free:13940 free_pcp:69 free_cma:0 [ 1114.594419] active_anon:12484 inactive_anon:33153 isolated_anon:0 [ 1114.594419] active_file:32 inactive_file:16 isolated_file:0 [ 1114.594419] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1114.594419] slab_reclaimable:12402 slab_unreclaimable:117751 [ 1114.594419] mapped:52618 shmem:33557 pagetables:768 bounce:0 [ 1114.594419] free:13940 free_pcp:69 free_cma:0 [ 1114.616573] syz-executor.1: [ 1114.657135] Node 0 active_anon:49052kB inactive_anon:90960kB active_file:124kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162736kB dirty:0kB writeback:0kB shmem:92240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1114.671735] page allocation failure: order:0 [ 1114.693880] Node 1 active_anon:884kB inactive_anon:41652kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47736kB dirty:0kB writeback:0kB shmem:41988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1114.704237] Node 0 active_anon:49052kB inactive_anon:90960kB active_file:124kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162736kB dirty:0kB writeback:0kB shmem:92240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1114.729396] Node 0 [ 1114.756914] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1114.767267] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1114.772008] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:92kB active_file:32kB inactive_file:12kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1114.772924] CPU: 0 PID: 5278 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 1114.806366] lowmem_reserve[]: [ 1114.808423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1114.808434] 0 [ 1114.811792] Call Trace: [ 1114.822188] 2717 [ 1114.824581] dump_stack+0x1b2/0x281 [ 1114.827809] 2718 [ 1114.830969] warn_alloc.cold+0x96/0x1cc [ 1114.834581] 2718 [ 1114.836672] ? zone_watermark_ok_safe+0x220/0x220 [ 1114.836683] ? usleep_range+0x130/0x130 [ 1114.836693] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1114.836705] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1114.836714] ? run_timer_softirq+0x5a0/0x5a0 [ 1114.836730] __alloc_pages_nodemask+0x2127/0x2720 [ 1114.841153] 2718 [ 1114.843236] ? lock_acquire+0x170/0x3f0 [ 1114.853000] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1114.858134] Node 0 [ 1114.863300] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1114.867747] DMA32 free:18008kB min:36200kB low:45248kB high:54296kB active_anon:49028kB inactive_anon:90868kB active_file:108kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2856kB bounce:0kB free_pcp:148kB local_pcp:16kB free_cma:0kB [ 1114.872687] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1114.874720] lowmem_reserve[]: [ 1114.878696] alloc_pages_current+0x155/0x260 [ 1114.878713] ion_page_pool_alloc+0x118/0x1b0 [ 1114.878725] ion_system_heap_allocate+0x133/0x8c0 [ 1114.878736] ? ion_alloc+0x187/0x810 [ 1114.883584] 0 [ 1114.885821] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1114.891077] 0 [ 1114.920110] ? ion_system_contig_heap_create+0x130/0x130 [ 1114.920123] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1114.920134] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1114.920149] ion_alloc+0x204/0x810 [ 1114.925600] 0 [ 1114.928723] ? ion_dma_buf_release+0x40/0x40 [ 1114.928736] ? __might_fault+0x177/0x1b0 [ 1114.928748] ion_ioctl+0xea/0x1f0 [ 1114.928757] ? ion_query_heaps+0x360/0x360 [ 1114.928770] ? ion_query_heaps+0x360/0x360 [ 1114.933180] 0 [ 1114.939114] do_vfs_ioctl+0x75a/0xff0 [ 1114.939128] ? ioctl_preallocate+0x1a0/0x1a0 [ 1114.939137] ? lock_downgrade+0x740/0x740 [ 1114.939150] ? __fget+0x225/0x360 [ 1114.939161] ? do_vfs_ioctl+0xff0/0xff0 [ 1114.944271] 0 [ 1114.949304] ? security_file_ioctl+0x83/0xb0 [ 1114.949315] SyS_ioctl+0x7f/0xb0 [ 1114.949324] ? do_vfs_ioctl+0xff0/0xff0 [ 1114.949335] do_syscall_64+0x1d5/0x640 [ 1114.949352] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1114.957476] RIP: 0033:0x465ef9 [ 1114.957481] RSP: 002b:00007f5842689188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1114.957497] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1114.957502] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1114.957507] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1114.957512] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1114.957518] R13: 00007ffc66db249f R14: 00007f5842689300 R15: 0000000000022000 [ 1114.962647] Node 1 active_anon:884kB inactive_anon:41652kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47736kB dirty:0kB writeback:0kB shmem:41988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1114.982253] Node 0 [ 1114.986425] Node 0 [ 1115.010643] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1115.017580] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:24kB inactive_anon:92kB active_file:28kB inactive_file:12kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1115.034615] lowmem_reserve[]: [ 1115.038618] lowmem_reserve[]: [ 1115.048861] 0 [ 1115.054444] 0 [ 1115.072667] 0 [ 1115.078461] 2717 [ 1115.103246] 0 [ 1115.113406] 2718 [ 1115.155704] 0 [ 1115.177599] 2718 [ 1115.210550] 0 [ 1115.218225] 2718 [ 1115.224553] Node 0 DMA32 free:18144kB min:36200kB low:45248kB high:54296kB active_anon:48928kB inactive_anon:90868kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2856kB bounce:0kB free_pcp:404kB local_pcp:388kB free_cma:0kB [ 1115.266678] Node 1 Normal free:36056kB min:53696kB low:67120kB high:80544kB active_anon:880kB inactive_anon:41652kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:196kB bounce:0kB free_pcp:128kB local_pcp:4kB free_cma:0kB [ 1115.316702] lowmem_reserve[]: 0 0 0 0 0 [ 1115.320766] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1115.355860] lowmem_reserve[]: 0 0 0 0 0 [ 1115.362844] Node 1 Normal free:223832kB min:53696kB low:67120kB high:80544kB active_anon:880kB inactive_anon:41652kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:196kB bounce:0kB free_pcp:128kB local_pcp:124kB free_cma:0kB [ 1115.422802] lowmem_reserve[]: 0 [ 1115.426483] lowmem_reserve[]: 0 0 0 0 0 [ 1115.433838] Node 0 DMA: 4*4kB (M) 6*8kB (M) 8*16kB (M) 9*32kB (UM) 9*64kB (UM) 3*128kB (M) 2*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 2*4096kB (UE) = 11168kB [ 1115.448876] Node 0 DMA32: 1336*4kB (UME) 875*8kB (UME) 210*16kB (UME) 50*32kB (UME) 833*64kB (UM) 176*128kB (UM) 46*256kB (UM) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 106456kB [ 1115.450223] 0 [ 1115.464915] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1115.470752] 0 0 0 [ 1115.481378] Node 0 DMA: 4*4kB (M) 6*8kB (M) 8*16kB (M) 9*32kB (UM) 9*64kB (UM) 3*128kB (M) 2*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 2*4096kB (UE) = 11168kB [ 1115.516464] Node 1 Normal: 2603*4kB (UM) 52*8kB (UM) 38*16kB (M) 27*32kB (UM) 3351*64kB (UM) 290*128kB (UM) 35*256kB (U) 26*512kB (UM) 70*1024kB (U) 3*2048kB (U) 1*4096kB (U) = 368076kB [ 1115.520182] Node 0 [ 1115.533511] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1115.533522] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1115.569575] DMA32: 790*4kB (ME) 513*8kB (UME) 209*16kB (ME) 49*32kB (UME) 700*64kB (UM) 176*128kB (UM) 46*256kB (UM) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 92816kB [ 1115.630295] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1115.631920] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1115.642159] Node 1 [ 1115.651662] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1115.663567] 33861 total pagecache pages [ 1115.668984] 0 pages in swap cache [ 1115.670772] Normal: 4899*4kB (UM) 553*8kB (UM) 1174*16kB (UM) 93*32kB (UM) 3351*64kB (UM) 290*128kB (UM) 35*256kB (U) 26*512kB (UM) 70*1024kB (U) 3*2048kB (U) 1*4096kB (U) = 401556kB [ 1115.672910] Swap cache stats: add 0, delete 0, find 0/0 [ 1115.713394] Free swap = 0kB [ 1115.719379] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1115.726377] Total swap = 0kB [ 1115.731622] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1115.732377] 2097051 pages RAM [ 1115.756369] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1115.765509] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1115.769991] 0 pages HighMem/MovableOnly [ 1115.774735] 34157 total pagecache pages [ 1115.782301] 0 pages in swap cache [ 1115.785877] Swap cache stats: add 0, delete 0, find 0/0 [ 1115.807273] Free swap = 0kB [ 1115.810009] 363840 pages reserved [ 1115.810880] Total swap = 0kB [ 1115.813920] 0 pages cma reserved [ 1115.828179] 2097051 pages RAM [ 1115.846551] 0 pages HighMem/MovableOnly [ 1115.850566] 363840 pages reserved [ 1115.854216] 0 pages cma reserved [ 1115.867206] Out of memory (oom_kill_allocating_task): Kill process 4227 (in:imklog) score 0 or sacrifice child [ 1115.919134] Killed process 4225 (rsyslogd) total-vm:254332kB, anon-rss:1028kB, file-rss:0kB, shmem-rss:0kB [ 1115.960799] oom_reaper: reaped process 4225 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1116.178694] modprobe (5324) used greatest stack depth: 24440 bytes left [ 1116.314360] oom_reaper: reaped process 5283 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1116.376893] oom_reaper: reaped process 5279 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1116.428117] (rsyslogd) invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1116.440760] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1116.446456] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1116.462305] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1116.473002] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1116.478847] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1116.488928] (rsyslogd) cpuset=/ mems_allowed=0-1 [ 1116.502732] CPU: 1 PID: 5326 Comm: (rsyslogd) Not tainted 4.14.222-syzkaller #0 [ 1116.510468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1116.518526] syz-executor.5 cpuset= [ 1116.519876] Call Trace: [ 1116.519885] / [ 1116.523507] dump_stack+0x1b2/0x281 [ 1116.526073] mems_allowed=0-1 [ 1116.527777] dump_header+0x178/0x82f [ 1116.527787] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1116.527794] ? ___ratelimit+0x2cd/0x530 [ 1116.527802] oom_kill_process.cold+0x10/0xb18 [ 1116.527819] out_of_memory+0xe3e/0x1190 [ 1116.527830] ? oom_killer_disable+0x1c0/0x1c0 [ 1116.527837] ? mutex_trylock+0x152/0x1a0 [ 1116.527847] __alloc_pages_nodemask+0x23e1/0x2720 [ 1116.527864] ? __schedule+0x893/0x1de0 [ 1116.527871] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1116.527883] ? lock_acquire+0x170/0x3f0 [ 1116.582338] ? reacquire_held_locks+0xb5/0x3f0 [ 1116.586918] ? alloc_set_pte+0xd57/0x1610 [ 1116.591072] alloc_pages_vma+0xd2/0x6d0 [ 1116.595064] wp_page_copy+0x1f5/0x25c0 [ 1116.598953] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 1116.603467] ? __lock_acquire+0x5fc/0x3f20 [ 1116.607696] do_wp_page+0x245/0x1db0 [ 1116.611406] ? __handle_mm_fault+0x129c/0x4620 [ 1116.615986] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 1116.620653] __handle_mm_fault+0x234f/0x4620 [ 1116.625071] ? vm_insert_page+0x7c0/0x7c0 [ 1116.629215] ? __set_task_comm+0x7d/0x300 [ 1116.633363] ? perf_event_comm+0x19c/0x1f0 [ 1116.637611] handle_mm_fault+0x391/0x860 [ 1116.641671] __do_page_fault+0x549/0xad0 [ 1116.645746] ? spurious_fault+0x640/0x640 [ 1116.649982] ? do_page_fault+0x60/0x500 [ 1116.653963] ? page_fault+0x2f/0x50 [ 1116.657586] page_fault+0x45/0x50 [ 1116.661042] RIP: 6269a5e0:0x55fd9f0d7e30 [ 1116.665091] RSP: 6269a5e0:00007ffc6269cf89 EFLAGS: 55fd9f0d8258 [ 1116.665116] CPU: 0 PID: 5279 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1116.678967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1116.688318] Call Trace: [ 1116.690910] dump_stack+0x1b2/0x281 [ 1116.694552] warn_alloc.cold+0x96/0x1cc [ 1116.698526] ? zone_watermark_ok_safe+0x220/0x220 [ 1116.703373] ? usleep_range+0x130/0x130 [ 1116.707340] ? try_to_free_pages+0x23f/0x6e0 [ 1116.711765] ? _find_next_bit+0xdb/0x100 [ 1116.715822] ? run_timer_softirq+0x5a0/0x5a0 [ 1116.720240] __alloc_pages_nodemask+0x2127/0x2720 [ 1116.725112] ? lock_acquire+0x170/0x3f0 [ 1116.729090] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1116.733936] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1116.738438] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1116.743899] alloc_pages_current+0x155/0x260 [ 1116.748338] ion_page_pool_alloc+0x118/0x1b0 [ 1116.752781] ion_system_heap_allocate+0x133/0x8c0 [ 1116.757638] ? ion_alloc+0x187/0x810 [ 1116.761523] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1116.766980] ? ion_system_contig_heap_create+0x130/0x130 [ 1116.772452] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1116.777500] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1116.782377] ion_alloc+0x204/0x810 [ 1116.785924] ? ion_dma_buf_release+0x40/0x40 [ 1116.790335] ? __might_fault+0x177/0x1b0 [ 1116.794424] ion_ioctl+0xea/0x1f0 [ 1116.797900] ? ion_query_heaps+0x360/0x360 [ 1116.802141] ? ion_query_heaps+0x360/0x360 [ 1116.806371] do_vfs_ioctl+0x75a/0xff0 [ 1116.810180] ? ioctl_preallocate+0x1a0/0x1a0 [ 1116.814670] ? lock_downgrade+0x740/0x740 [ 1116.818827] ? __fget+0x225/0x360 [ 1116.822280] ? do_vfs_ioctl+0xff0/0xff0 [ 1116.826265] ? security_file_ioctl+0x83/0xb0 [ 1116.830675] SyS_ioctl+0x7f/0xb0 [ 1116.834052] ? do_vfs_ioctl+0xff0/0xff0 [ 1116.838028] do_syscall_64+0x1d5/0x640 [ 1116.841924] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1116.846365] Mem-Info: [ 1116.847105] RIP: 0033:0x465ef9 [ 1116.849524] active_anon:12220 inactive_anon:33153 isolated_anon:0 [ 1116.849524] active_file:43 inactive_file:15 isolated_file:0 [ 1116.849524] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1116.849524] slab_reclaimable:12364 slab_unreclaimable:117937 [ 1116.849524] mapped:52680 shmem:33557 pagetables:771 bounce:0 [ 1116.849524] free:13800 free_pcp:0 free_cma:0 [ 1116.852689] RSP: 002b:00007f785ae94188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1116.893649] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1116.900940] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1116.908298] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1116.915570] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1116.922947] R13: 00007ffc771f8d7f R14: 00007f785ae94300 R15: 0000000000022000 [ 1116.926384] Node 0 active_anon:47720kB inactive_anon:90960kB active_file:12kB inactive_file:124kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162896kB dirty:0kB writeback:0kB shmem:92240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1116.938197] CPU: 0 PID: 5283 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1116.966824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1116.976201] Call Trace: [ 1116.978796] dump_stack+0x1b2/0x281 [ 1116.982428] warn_alloc.cold+0x96/0x1cc [ 1116.986404] ? zone_watermark_ok_safe+0x220/0x220 [ 1116.991352] ? usleep_range+0x130/0x130 [ 1116.995333] ? try_to_free_pages+0x23f/0x6e0 [ 1117.000006] ? _find_next_bit+0xdb/0x100 [ 1117.004148] ? run_timer_softirq+0x5a0/0x5a0 [ 1117.006364] Node 1 active_anon:1160kB inactive_anon:41652kB active_file:160kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47824kB dirty:0kB writeback:0kB shmem:41988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1117.008569] __alloc_pages_nodemask+0x2127/0x2720 [ 1117.040775] ? lock_acquire+0x170/0x3f0 [ 1117.044771] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1117.049620] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1117.054121] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1117.059662] ? policy_node+0x9c/0x110 [ 1117.063462] alloc_pages_current+0x155/0x260 [ 1117.066360] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1117.067885] ion_page_pool_alloc+0x118/0x1b0 [ 1117.067896] ion_system_heap_allocate+0x133/0x8c0 [ 1117.103340] ? ion_alloc+0x187/0x810 [ 1117.107075] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1117.112529] ? ion_system_contig_heap_create+0x130/0x130 [ 1117.118079] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1117.123102] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1117.126346] lowmem_reserve[]: 0 [ 1117.127943] ion_alloc+0x204/0x810 [ 1117.127958] ? ion_dma_buf_release+0x40/0x40 [ 1117.131221] 2717 [ 1117.134747] ? __might_fault+0x177/0x1b0 [ 1117.145223] ion_ioctl+0xea/0x1f0 [ 1117.146337] 2718 2718 [ 1117.148673] ? ion_query_heaps+0x360/0x360 [ 1117.148685] ? ion_query_heaps+0x360/0x360 [ 1117.151162] 2718 [ 1117.155384] do_vfs_ioctl+0x75a/0xff0 [ 1117.166474] ? ioctl_preallocate+0x1a0/0x1a0 [ 1117.170879] ? lock_downgrade+0x740/0x740 [ 1117.175027] ? __fget+0x225/0x360 [ 1117.178491] ? do_vfs_ioctl+0xff0/0xff0 [ 1117.178494] Node 0 DMA32 free:17752kB min:36200kB low:45248kB high:54296kB active_anon:47920kB inactive_anon:90868kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2732kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1117.182459] ? security_file_ioctl+0x83/0xb0 [ 1117.216011] SyS_ioctl+0x7f/0xb0 [ 1117.219391] ? do_vfs_ioctl+0xff0/0xff0 [ 1117.223391] do_syscall_64+0x1d5/0x640 [ 1117.227384] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1117.232578] RIP: 0033:0x465ef9 [ 1117.235768] RSP: 002b:00007fd7ebad0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1117.243479] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1117.246373] lowmem_reserve[]: [ 1117.250744] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1117.250754] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1117.253952] 0 [ 1117.261222] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1117.261228] R13: 00007ffc90d553bf R14: 00007fd7ebad0300 R15: 0000000000022000 [ 1117.275901] warn_alloc_show_mem: 1 callbacks suppressed [ 1117.275906] Mem-Info: [ 1117.280930] syz-executor.5: [ 1117.286113] active_anon:12242 inactive_anon:33153 isolated_anon:0 [ 1117.286113] active_file:44 inactive_file:19 isolated_file:0 [ 1117.286113] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1117.286113] slab_reclaimable:12364 slab_unreclaimable:117906 [ 1117.286113] mapped:52664 shmem:33557 pagetables:786 bounce:0 [ 1117.286113] free:13888 free_pcp:2 free_cma:0 [ 1117.305230] CPU: 1 PID: 5278 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 1117.340409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1117.341054] Node 0 active_anon:47704kB inactive_anon:90960kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162808kB dirty:0kB writeback:0kB shmem:92240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1117.350649] Call Trace: [ 1117.350673] dump_stack+0x1b2/0x281 [ 1117.350686] warn_alloc.cold+0x96/0x1cc [ 1117.350698] ? zone_watermark_ok_safe+0x220/0x220 [ 1117.350718] __alloc_pages_nodemask+0x2127/0x2720 [ 1117.350729] ? lock_acquire+0x170/0x3f0 [ 1117.350742] ? lock_acquire+0x170/0x3f0 [ 1117.350760] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1117.412583] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1117.416622] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1117.418045] ? __mutex_unlock_slowpath+0x75/0x770 [ 1117.418061] alloc_pages_current+0x155/0x260 [ 1117.438942] ion_page_pool_alloc+0x118/0x1b0 [ 1117.443802] ion_system_heap_allocate+0x133/0x8c0 [ 1117.448661] ? _raw_spin_unlock+0x29/0x40 [ 1117.452813] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1117.457963] ? ion_system_contig_heap_create+0x130/0x130 [ 1117.463508] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1117.466403] (null) [ 1117.468528] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1117.470662] syz-executor.5 cpuset= [ 1117.475505] ion_alloc+0x27a/0x810 [ 1117.475507] / mems_allowed=0-1 [ 1117.479056] ? ion_dma_buf_release+0x40/0x40 [ 1117.479069] ? __might_fault+0x177/0x1b0 [ 1117.479080] ion_ioctl+0xea/0x1f0 [ 1117.479089] ? ion_query_heaps+0x360/0x360 [ 1117.479101] ? ion_query_heaps+0x360/0x360 [ 1117.479111] do_vfs_ioctl+0x75a/0xff0 [ 1117.479122] ? ioctl_preallocate+0x1a0/0x1a0 [ 1117.479132] ? lock_downgrade+0x740/0x740 [ 1117.479145] ? __fget+0x225/0x360 [ 1117.525584] ? do_vfs_ioctl+0xff0/0xff0 [ 1117.529756] ? security_file_ioctl+0x83/0xb0 [ 1117.534362] SyS_ioctl+0x7f/0xb0 [ 1117.537737] ? do_vfs_ioctl+0xff0/0xff0 [ 1117.542117] do_syscall_64+0x1d5/0x640 [ 1117.549603] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1117.554802] RIP: 0033:0x465ef9 [ 1117.556418] Node 1 active_anon:1340kB inactive_anon:41652kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47736kB dirty:0kB writeback:0kB shmem:41988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1117.558009] RSP: 002b:00007f5842689188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1117.593954] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1117.601321] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1117.609377] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1117.616658] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1117.623929] R13: 00007ffc66db249f R14: 00007f5842689300 R15: 0000000000022000 [ 1117.631901] CPU: 0 PID: 5296 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1117.639800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1117.649164] Call Trace: [ 1117.651768] dump_stack+0x1b2/0x281 [ 1117.655401] warn_alloc.cold+0x96/0x1cc [ 1117.659393] ? zone_watermark_ok_safe+0x220/0x220 [ 1117.664254] ? usleep_range+0x130/0x130 [ 1117.666367] 0 [ 1117.668239] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1117.668246] 0 [ 1117.670040] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1117.675131] 0 [ 1117.676942] ? run_timer_softirq+0x5a0/0x5a0 [ 1117.676958] __alloc_pages_nodemask+0x2127/0x2720 [ 1117.676976] ? lock_acquire+0x170/0x3f0 [ 1117.676991] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1117.702089] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1117.706380] 0 [ 1117.706600] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1117.708383] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1117.713860] alloc_pages_current+0x155/0x260 [ 1117.713877] ion_page_pool_alloc+0x118/0x1b0 [ 1117.748646] ion_system_heap_allocate+0x133/0x8c0 [ 1117.753511] ? ion_alloc+0x187/0x810 [ 1117.757415] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1117.762890] ? ion_system_contig_heap_create+0x130/0x130 [ 1117.766375] lowmem_reserve[]: [ 1117.768445] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1117.768454] 0 [ 1117.771671] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1117.783363] ion_alloc+0x204/0x810 [ 1117.786362] 0 0 0 [ 1117.786912] ? ion_dma_buf_release+0x40/0x40 [ 1117.786914] 0 [ 1117.789063] ? __might_fault+0x177/0x1b0 [ 1117.793459] Node 1 [ 1117.795258] ion_ioctl+0xea/0x1f0 [ 1117.805177] ? ion_query_heaps+0x360/0x360 [ 1117.809910] ? ion_query_heaps+0x360/0x360 [ 1117.814591] do_vfs_ioctl+0x75a/0xff0 [ 1117.816377] Normal free:133164kB min:53696kB low:67120kB high:80544kB active_anon:1340kB inactive_anon:41652kB active_file:48kB inactive_file:144kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:416kB bounce:0kB free_pcp:196kB local_pcp:40kB free_cma:0kB [ 1117.818397] ? ioctl_preallocate+0x1a0/0x1a0 [ 1117.851707] ? lock_downgrade+0x740/0x740 [ 1117.855878] ? __fget+0x225/0x360 [ 1117.859347] ? do_vfs_ioctl+0xff0/0xff0 [ 1117.863335] ? security_file_ioctl+0x83/0xb0 [ 1117.867839] SyS_ioctl+0x7f/0xb0 [ 1117.871248] ? do_vfs_ioctl+0xff0/0xff0 [ 1117.875249] do_syscall_64+0x1d5/0x640 [ 1117.876360] lowmem_reserve[]: 0 [ 1117.879144] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1117.879146] 0 0 [ 1117.882419] RIP: 0033:0x465ef9 [ 1117.892826] RSP: 002b:00007fd7eba8e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1117.896346] 0 [ 1117.900535] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000465ef9 [ 1117.900545] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1117.902360] 0 [ 1117.909617] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1117.909623] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1117.909628] R13: 00007ffc90d553bf R14: 00007fd7eba8e300 R15: 0000000000022000 [ 1117.936385] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1118.015540] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1118.020763] Node 0 DMA32 free:75488kB min:36200kB low:45248kB high:54296kB active_anon:47704kB inactive_anon:90868kB active_file:1520kB inactive_file:4620kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2732kB bounce:0kB free_pcp:172kB local_pcp:104kB free_cma:0kB [ 1118.050658] Node 0 DMA: 3*4kB (UM) 2*8kB (UM) 4*16kB (UM) 4*32kB (UM) 2*64kB (M) 1*128kB (M) 3*256kB (UM) 1*512kB (U) 1*1024kB (M) 0*2048kB 2*4096kB (UE) = 10972kB [ 1118.092857] lowmem_reserve[]: 0 0 0 0 0 [ 1118.097631] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1118.129987] lowmem_reserve[]: 0 0 0 0 0 [ 1118.134011] Node 1 Normal free:185132kB min:53696kB low:67120kB high:80544kB active_anon:1040kB inactive_anon:41652kB active_file:148kB inactive_file:344kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:416kB bounce:0kB free_pcp:740kB local_pcp:624kB free_cma:0kB [ 1118.146390] Node 0 DMA32: 477*4kB (E) 549*8kB (UE) 171*16kB (UE) 14*32kB (UME) 738*64kB (U) 113*128kB (UM) 4*256kB (UM) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 73740kB [ 1118.192057] lowmem_reserve[]: 0 0 0 0 0 [ 1118.240386] Node 0 DMA: 2*4kB (UM) 1*8kB (U) 3*16kB (UM) 3*32kB (UM) 1*64kB (M) 0*128kB 2*256kB (UM) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UE) = 10976kB [ 1118.246761] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1118.265443] Node 0 DMA32: 480*4kB (UME) 445*8kB (UME) 188*16kB (UE) 16*32kB (UE) 744*64kB (UM) 113*128kB (UM) 4*256kB (UM) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 73640kB [ 1118.287182] Node 1 Normal: 1281*4kB (UM) 177*8kB (UM) 122*16kB (UM) 119*32kB (UM) 924*64kB (UM) 207*128kB (UM) 59*256kB (U) 31*512kB (U) 51*1024kB (U) 2*2048kB (U) 0*4096kB = 185228kB [ 1118.317208] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1118.336947] Node 1 Normal: 1281*4kB (UM) 177*8kB (UM) 122*16kB (UM) 119*32kB (UM) 924*64kB (UM) 207*128kB (UM) 59*256kB (U) 31*512kB (U) 51*1024kB (U) 2*2048kB (U) 0*4096kB = 185228kB [ 1118.346387] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1118.366684] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1118.375295] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1118.396378] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1118.402125] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1118.405117] 35490 total pagecache pages [ 1118.415577] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1118.439859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1118.454671] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1118.456364] warn_alloc_show_mem: 1 callbacks suppressed [ 1118.456367] Mem-Info: [ 1118.465637] 35527 total pagecache pages [ 1118.476376] 0 pages in swap cache [ 1118.480713] Swap cache stats: add 0, delete 0, find 0/0 [ 1118.482535] 0 pages in swap cache [ 1118.492623] Swap cache stats: add 0, delete 0, find 0/0 [ 1118.506389] active_anon:12236 inactive_anon:33153 isolated_anon:0 [ 1118.506389] active_file:593 inactive_file:1360 isolated_file:0 [ 1118.506389] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1118.506389] slab_reclaimable:12362 slab_unreclaimable:117808 [ 1118.506389] mapped:53811 shmem:33557 pagetables:787 bounce:0 [ 1118.506389] free:37006 free_pcp:384 free_cma:0 [ 1118.520279] Free swap = 0kB [ 1118.541304] Free swap = 0kB [ 1118.541309] Total swap = 0kB [ 1118.541362] 2097051 pages RAM [ 1118.541365] 0 pages HighMem/MovableOnly [ 1118.541369] 363840 pages reserved [ 1118.541372] 0 pages cma reserved [ 1118.541380] Out of memory (oom_kill_allocating_task): Kill process 5326 ((rsyslogd)) score 0 or sacrifice child [ 1118.541619] Killed process 5326 ((rsyslogd)) total-vm:205036kB, anon-rss:2044kB, file-rss:0kB, shmem-rss:0kB [ 1118.542875] oom_reaper: reaped process 5326 ((rsyslogd)), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1118.597245] Total swap = 0kB [ 1118.598189] Node 0 active_anon:47704kB inactive_anon:90960kB active_file:2124kB inactive_file:5096kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:167208kB dirty:0kB writeback:0kB shmem:92240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1118.602178] 2097051 pages RAM [ 1118.633951] Node 1 active_anon:1040kB inactive_anon:41652kB active_file:248kB inactive_file:344kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48036kB dirty:0kB writeback:0kB shmem:41988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1118.726396] 0 pages HighMem/MovableOnly [ 1118.732262] 363840 pages reserved [ 1118.758862] 0 pages cma reserved [ 1118.775783] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1118.819918] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1118.825105] Node 0 DMA32 free:56288kB min:36200kB low:45248kB high:54296kB active_anon:47704kB inactive_anon:90868kB active_file:2120kB inactive_file:5096kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2732kB bounce:0kB free_pcp:1292kB local_pcp:640kB free_cma:0kB [ 1118.889705] lowmem_reserve[]: 0 0 0 0 0 [ 1118.893774] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1118.936550] lowmem_reserve[]: 0 0 0 0 0 [ 1118.946968] Node 1 Normal free:43500kB min:53696kB low:67120kB high:80544kB active_anon:1040kB inactive_anon:41652kB active_file:248kB inactive_file:344kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:416kB bounce:0kB free_pcp:1376kB local_pcp:740kB free_cma:0kB [ 1119.014335] lowmem_reserve[]: 0 0 0 0 0 [ 1119.018450] Node 0 DMA: 2*4kB (UM) 1*8kB (U) 3*16kB (UM) 3*32kB (UM) 1*64kB (M) 0*128kB 2*256kB (UM) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UE) = 10976kB [ 1119.038079] Node 0 DMA32: 12445*4kB (UME) 1469*8kB (UE) 2174*16kB (UME) 1175*32kB (UME) 140*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 143004kB [ 1119.055491] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1119.096420] Node 1 Normal: 11494*4kB (UM) 267*8kB (UM) 249*16kB (UM) 391*32kB (UM) 10*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 65248kB [ 1119.115052] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1119.125076] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1119.146353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1119.172288] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1119.190004] 35770 total pagecache pages [ 1119.194041] 0 pages in swap cache [ 1119.201541] Swap cache stats: add 0, delete 0, find 0/0 [ 1119.216849] Free swap = 0kB [ 1119.220702] Total swap = 0kB [ 1119.226230] 2097051 pages RAM [ 1119.231125] 0 pages HighMem/MovableOnly [ 1119.236837] 363840 pages reserved [ 1119.240495] 0 pages cma reserved [ 1119.291086] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1119.306405] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1119.346456] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1119.351362] syz-executor.5 cpuset= [ 1119.351618] CPU: 0 PID: 5283 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1119.351619] / mems_allowed=0-1 [ 1119.355147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1119.355151] Call Trace: [ 1119.355168] dump_stack+0x1b2/0x281 [ 1119.355182] warn_alloc.cold+0x96/0x1cc [ 1119.355200] ? zone_watermark_ok_safe+0x220/0x220 [ 1119.355223] __alloc_pages_nodemask+0x2127/0x2720 [ 1119.355240] ? lock_acquire+0x170/0x3f0 [ 1119.355254] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1119.355270] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1119.355282] ? __mutex_unlock_slowpath+0x75/0x770 [ 1119.415829] alloc_pages_current+0x155/0x260 [ 1119.421032] ion_page_pool_alloc+0x118/0x1b0 [ 1119.425483] ion_system_heap_allocate+0x133/0x8c0 [ 1119.430359] ? _raw_spin_unlock+0x29/0x40 [ 1119.434523] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1119.439521] ? ion_system_contig_heap_create+0x130/0x130 [ 1119.444973] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1119.450004] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1119.454870] ion_alloc+0x27a/0x810 [ 1119.458436] ? ion_dma_buf_release+0x40/0x40 [ 1119.462855] ? __might_fault+0x177/0x1b0 [ 1119.466930] ion_ioctl+0xea/0x1f0 [ 1119.470384] ? ion_query_heaps+0x360/0x360 [ 1119.474620] ? ion_query_heaps+0x360/0x360 [ 1119.478873] do_vfs_ioctl+0x75a/0xff0 [ 1119.482693] ? ioctl_preallocate+0x1a0/0x1a0 [ 1119.487109] ? lock_downgrade+0x740/0x740 [ 1119.491269] ? __fget+0x225/0x360 [ 1119.494725] ? do_vfs_ioctl+0xff0/0xff0 [ 1119.498703] ? security_file_ioctl+0x83/0xb0 [ 1119.503491] SyS_ioctl+0x7f/0xb0 [ 1119.506948] ? do_vfs_ioctl+0xff0/0xff0 [ 1119.510945] do_syscall_64+0x1d5/0x640 [ 1119.514882] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1119.520194] RIP: 0033:0x465ef9 [ 1119.523656] RSP: 002b:00007fd7ebad0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1119.531370] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1119.538812] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1119.546322] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1119.553617] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1119.560891] R13: 00007ffc90d553bf R14: 00007fd7ebad0300 R15: 0000000000022000 [ 1119.569239] CPU: 1 PID: 5296 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1119.571379] warn_alloc_show_mem: 1 callbacks suppressed [ 1119.571382] Mem-Info: [ 1119.577362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1119.577367] Call Trace: [ 1119.577387] dump_stack+0x1b2/0x281 [ 1119.577400] warn_alloc.cold+0x96/0x1cc [ 1119.577411] ? zone_watermark_ok_safe+0x220/0x220 [ 1119.577433] __alloc_pages_nodemask+0x2127/0x2720 [ 1119.577443] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1119.577452] ? finish_task_switch+0x178/0x610 [ 1119.577460] ? finish_task_switch+0x14d/0x610 [ 1119.577478] ? lock_acquire+0x170/0x3f0 [ 1119.583102] active_anon:12143 inactive_anon:33153 isolated_anon:0 [ 1119.583102] active_file:1169 inactive_file:1382 isolated_file:0 [ 1119.583102] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1119.583102] slab_reclaimable:12361 slab_unreclaimable:117469 [ 1119.583102] mapped:54106 shmem:33557 pagetables:732 bounce:0 [ 1119.583102] free:38087 free_pcp:132 free_cma:0 [ 1119.586232] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1119.586251] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1119.586263] ? __mutex_unlock_slowpath+0x75/0x770 [ 1119.595965] Node 0 active_anon:47632kB inactive_anon:90960kB active_file:4428kB inactive_file:5240kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:168344kB dirty:0kB writeback:0kB shmem:92240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1119.598487] ? alloc_pages_current+0x21c/0x260 [ 1119.598500] alloc_pages_current+0x155/0x260 [ 1119.598517] ion_page_pool_alloc+0x118/0x1b0 [ 1119.598528] ion_system_heap_allocate+0x133/0x8c0 [ 1119.598540] ? _raw_spin_unlock+0x29/0x40 [ 1119.598553] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1119.602686] Node 1 active_anon:940kB inactive_anon:41652kB active_file:248kB inactive_file:288kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48080kB dirty:0kB writeback:0kB shmem:41988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1119.606940] ? ion_system_contig_heap_create+0x130/0x130 [ 1119.606953] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1119.606963] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1119.606974] ion_alloc+0x27a/0x810 [ 1119.606989] ? ion_dma_buf_release+0x40/0x40 [ 1119.607000] ? __might_fault+0x177/0x1b0 [ 1119.607013] ion_ioctl+0xea/0x1f0 [ 1119.607023] ? ion_query_heaps+0x360/0x360 [ 1119.607036] ? ion_query_heaps+0x360/0x360 [ 1119.612130] Node 0 [ 1119.617050] do_vfs_ioctl+0x75a/0xff0 [ 1119.617063] ? ioctl_preallocate+0x1a0/0x1a0 [ 1119.617073] ? lock_downgrade+0x740/0x740 [ 1119.617084] ? __fget+0x225/0x360 [ 1119.617093] ? do_vfs_ioctl+0xff0/0xff0 [ 1119.617104] ? security_file_ioctl+0x83/0xb0 [ 1119.617113] SyS_ioctl+0x7f/0xb0 [ 1119.617125] ? do_vfs_ioctl+0xff0/0xff0 [ 1119.617136] do_syscall_64+0x1d5/0x640 [ 1119.617154] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1119.617165] RIP: 0033:0x465ef9 [ 1119.621964] DMA free:11012kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1119.626370] RSP: 002b:00007fd7eba8e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1119.626380] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000465ef9 [ 1119.626385] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1119.626390] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1119.626397] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1119.626402] R13: 00007ffc90d553bf R14: 00007fd7eba8e300 R15: 0000000000022000 [ 1119.940090] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1119.945307] Node 0 DMA32 free:44820kB min:36200kB low:45248kB high:54296kB active_anon:47532kB inactive_anon:90868kB active_file:1864kB inactive_file:1916kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2732kB bounce:0kB free_pcp:904kB local_pcp:212kB free_cma:0kB [ 1119.975624] lowmem_reserve[]: 0 0 0 0 0 [ 1120.005469] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1120.066102] lowmem_reserve[]: 0 0 0 0 0 [ 1120.071025] Node 1 Normal free:53184kB min:53696kB low:67120kB high:80544kB active_anon:936kB inactive_anon:41652kB active_file:96kB inactive_file:80kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:196kB bounce:0kB free_pcp:156kB local_pcp:36kB free_cma:0kB [ 1120.095843] syz-executor.0: [ 1120.099718] lowmem_reserve[]: 0 0 0 0 0 [ 1120.106841] Node 0 DMA: 24*4kB (UM) 1*8kB (U) 4*16kB (UM) 3*32kB (UM) 2*64kB (UM) 1*128kB (U) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UE) = 11016kB [ 1120.122148] Node 0 DMA32: 726*4kB (UME) 455*8kB (UME) 169*16kB (UME) 804*32kB (UME) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35104kB [ 1120.131025] page allocation failure: order:4 [ 1120.136550] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1120.152538] Node 1 Normal: 4205*4kB (UM) 922*8kB (UM) 650*16kB (UM) 628*32kB (U) 269*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 71908kB [ 1120.162835] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1120.170927] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1120.182348] (null) [ 1120.191389] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1120.204190] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1120.221394] CPU: 1 PID: 5343 Comm: syz-executor.0 Not tainted 4.14.222-syzkaller #0 [ 1120.229238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1120.238730] Call Trace: [ 1120.241331] dump_stack+0x1b2/0x281 [ 1120.244978] warn_alloc.cold+0x96/0x1cc [ 1120.248969] ? zone_watermark_ok_safe+0x220/0x220 [ 1120.253843] __alloc_pages_nodemask+0x2127/0x2720 [ 1120.258736] ? lock_acquire+0x170/0x3f0 [ 1120.262728] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1120.267604] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1120.273165] ? __mutex_unlock_slowpath+0x75/0x770 [ 1120.273804] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1120.278162] alloc_pages_current+0x155/0x260 [ 1120.278179] ion_page_pool_alloc+0x118/0x1b0 [ 1120.278189] ion_system_heap_allocate+0x133/0x8c0 [ 1120.278200] ? ion_alloc+0x187/0x810 [ 1120.278214] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1120.310470] ? ion_system_contig_heap_create+0x130/0x130 [ 1120.315937] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1120.316383] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1120.320958] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1120.335595] ion_alloc+0x204/0x810 [ 1120.339762] ? ion_dma_buf_release+0x40/0x40 [ 1120.344367] ? __might_fault+0x177/0x1b0 [ 1120.348443] ion_ioctl+0xea/0x1f0 [ 1120.351903] ? ion_query_heaps+0x360/0x360 [ 1120.356154] ? ion_query_heaps+0x360/0x360 [ 1120.356381] 33915 total pagecache pages [ 1120.360415] do_vfs_ioctl+0x75a/0xff0 [ 1120.364384] 0 pages in swap cache [ 1120.368198] ? ioctl_preallocate+0x1a0/0x1a0 [ 1120.368208] ? lock_downgrade+0x740/0x740 [ 1120.368220] ? __fget+0x225/0x360 [ 1120.368228] ? do_vfs_ioctl+0xff0/0xff0 [ 1120.368238] ? security_file_ioctl+0x83/0xb0 [ 1120.368247] SyS_ioctl+0x7f/0xb0 [ 1120.368254] ? do_vfs_ioctl+0xff0/0xff0 [ 1120.368265] do_syscall_64+0x1d5/0x640 [ 1120.368281] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1120.368291] RIP: 0033:0x465ef9 [ 1120.368296] RSP: 002b:00007fde3632e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1120.368305] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465ef9 [ 1120.368311] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1120.368315] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1120.368320] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1120.368326] R13: 00007ffca6023e4f R14: 00007fde3632e300 R15: 0000000000022000 [ 1120.434307] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1120.476687] Swap cache stats: add 0, delete 0, find 0/0 [ 1120.536406] Free swap = 0kB [ 1120.539466] Total swap = 0kB [ 1120.540126] (null), order=0, oom_score_adj=0 [ 1120.542580] 2097051 pages RAM [ 1120.542587] 0 pages HighMem/MovableOnly [ 1120.560659] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1120.565531] CPU: 1 PID: 7970 Comm: syz-fuzzer Not tainted 4.14.222-syzkaller #0 [ 1120.572981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1120.576502] 363840 pages reserved [ 1120.582517] Call Trace: [ 1120.585973] 0 pages cma reserved [ 1120.588640] dump_stack+0x1b2/0x281 [ 1120.588652] dump_header+0x178/0x82f [ 1120.588661] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1120.588669] ? ___ratelimit+0x2cd/0x530 [ 1120.588677] oom_kill_process.cold+0x10/0xb18 [ 1120.588694] out_of_memory+0xe3e/0x1190 [ 1120.588706] ? oom_killer_disable+0x1c0/0x1c0 [ 1120.588713] ? mutex_trylock+0x152/0x1a0 [ 1120.588723] __alloc_pages_nodemask+0x23e1/0x2720 [ 1120.588751] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1120.635357] alloc_pages_current+0x155/0x260 [ 1120.639779] filemap_fault+0xea3/0x1980 [ 1120.643771] ext4_filemap_fault+0x84/0xb0 [ 1120.647932] __do_fault+0xfa/0x380 [ 1120.651498] __handle_mm_fault+0x2497/0x4620 [ 1120.655910] ? vm_insert_page+0x7c0/0x7c0 [ 1120.660064] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1120.665085] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1120.670043] handle_mm_fault+0x391/0x860 [ 1120.674109] __do_page_fault+0x549/0xad0 [ 1120.678175] ? spurious_fault+0x640/0x640 [ 1120.682343] ? do_page_fault+0x60/0x500 [ 1120.686310] ? page_fault+0x2f/0x50 [ 1120.689940] page_fault+0x45/0x50 [ 1120.693566] RIP: 0001:0x10df6529c3c [ 1120.697354] RSP: 0000:000000c00003be40 EFLAGS: 10df6529c3c [ 1120.713454] warn_alloc_show_mem: 1 callbacks suppressed [ 1120.713458] Mem-Info: [ 1120.813285] active_anon:12176 inactive_anon:33153 isolated_anon:0 [ 1120.813285] active_file:42 inactive_file:1 isolated_file:0 [ 1120.813285] unevictable:0 dirty:2 writeback:0 unstable:0 [ 1120.813285] slab_reclaimable:12361 slab_unreclaimable:116867 [ 1120.813285] mapped:52724 shmem:33557 pagetables:793 bounce:0 [ 1120.813285] free:31385 free_pcp:653 free_cma:0 [ 1120.851940] Node 0 active_anon:47840kB inactive_anon:90960kB active_file:140kB inactive_file:156kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163160kB dirty:8kB writeback:0kB shmem:92240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1120.990429] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1120.997635] Mem-Info: [ 1121.005503] active_anon:12176 inactive_anon:33153 isolated_anon:0 [ 1121.005503] active_file:39 inactive_file:43 isolated_file:0 [ 1121.005503] unevictable:0 dirty:2 writeback:0 unstable:0 [ 1121.005503] slab_reclaimable:12361 slab_unreclaimable:116867 [ 1121.005503] mapped:52699 shmem:33557 pagetables:793 bounce:0 [ 1121.005503] free:13809 free_pcp:398 free_cma:0 [ 1121.010936] Node 1 active_anon:864kB inactive_anon:41652kB active_file:124kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47736kB dirty:0kB writeback:0kB shmem:41988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1121.041130] syz-executor.1: [ 1121.068675] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1121.084296] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1121.087871] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1121.104622] Node 0 active_anon:47824kB inactive_anon:90960kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163044kB dirty:0kB writeback:0kB shmem:92240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1121.106141] CPU: 1 PID: 5279 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1121.136898] syz-executor.5 cpuset= [ 1121.140281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1121.140290] / [ 1121.143934] Call Trace: [ 1121.155647] syz-executor.5 cpuset= [ 1121.157589] dump_stack+0x1b2/0x281 [ 1121.157603] warn_alloc.cold+0x96/0x1cc [ 1121.157616] ? zone_watermark_ok_safe+0x220/0x220 [ 1121.157642] __alloc_pages_nodemask+0x2127/0x2720 [ 1121.163394] / [ 1121.164817] ? lock_acquire+0x170/0x3f0 [ 1121.170977] mems_allowed=0-1 [ 1121.173625] ? lock_acquire+0x170/0x3f0 [ 1121.180636] page allocation failure: order:0 [ 1121.184117] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1121.198468] mems_allowed=0-1 [ 1121.200395] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1121.208491] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1121.209267] ? __mutex_unlock_slowpath+0x75/0x770 [ 1121.219123] Node 1 active_anon:788kB inactive_anon:41652kB active_file:64kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47736kB dirty:0kB writeback:0kB shmem:41988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1121.221828] alloc_pages_current+0x155/0x260 [ 1121.253677] ion_page_pool_alloc+0x118/0x1b0 [ 1121.258098] ion_system_heap_allocate+0x133/0x8c0 [ 1121.263660] ? _raw_spin_unlock+0x29/0x40 [ 1121.267815] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1121.272748] ? ion_system_contig_heap_create+0x130/0x130 [ 1121.276383] syz-executor.1 cpuset= [ 1121.278195] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1121.278202] / [ 1121.281750] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1121.293417] ion_alloc+0x27a/0x810 [ 1121.296959] ? ion_dma_buf_release+0x40/0x40 [ 1121.301361] ? __might_fault+0x177/0x1b0 [ 1121.305429] ion_ioctl+0xea/0x1f0 [ 1121.308892] ? ion_query_heaps+0x360/0x360 [ 1121.313132] ? ion_query_heaps+0x360/0x360 [ 1121.316397] mems_allowed=0-1 [ 1121.317363] do_vfs_ioctl+0x75a/0xff0 [ 1121.324286] ? ioctl_preallocate+0x1a0/0x1a0 [ 1121.328698] ? lock_downgrade+0x740/0x740 [ 1121.332854] ? __fget+0x225/0x360 [ 1121.336318] ? do_vfs_ioctl+0xff0/0xff0 [ 1121.340290] ? security_file_ioctl+0x83/0xb0 [ 1121.344723] SyS_ioctl+0x7f/0xb0 [ 1121.348094] ? do_vfs_ioctl+0xff0/0xff0 [ 1121.352094] do_syscall_64+0x1d5/0x640 [ 1121.356143] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1121.361353] RIP: 0033:0x465ef9 [ 1121.364540] RSP: 002b:00007f785ae94188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1121.370696] Node 0 [ 1121.372245] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1121.372266] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1121.374472] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1121.374480] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1121.422061] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1121.429507] R13: 00007ffc771f8d7f R14: 00007f785ae94300 R15: 0000000000022000 [ 1121.430616] lowmem_reserve[]: [ 1121.436892] CPU: 0 PID: 5278 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 1121.447798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1121.450612] Bluetooth: hci5 command 0x0406 tx timeout [ 1121.457152] Call Trace: [ 1121.457174] dump_stack+0x1b2/0x281 [ 1121.457188] warn_alloc.cold+0x96/0x1cc [ 1121.457200] ? zone_watermark_ok_safe+0x220/0x220 [ 1121.457212] ? usleep_range+0x130/0x130 [ 1121.462446] Node 0 [ 1121.464986] ? try_to_free_pages+0x23f/0x6e0 [ 1121.476442] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1121.477380] ? _find_next_bit+0xdb/0x100 [ 1121.481418] lowmem_reserve[]: [ 1121.483660] ? run_timer_softirq+0x5a0/0x5a0 [ 1121.506356] 0 [ 1121.514781] __alloc_pages_nodemask+0x2127/0x2720 [ 1121.526349] 2717 [ 1121.528113] ? lock_acquire+0x170/0x3f0 [ 1121.532929] 2718 [ 1121.534988] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1121.549205] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1121.553718] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1121.556361] 2718 2718 [ 1121.559177] ? ion_page_pool_alloc+0x28/0x1b0 [ 1121.559191] alloc_pages_current+0x155/0x260 [ 1121.561682] Node 0 [ 1121.566174] ion_page_pool_alloc+0x118/0x1b0 [ 1121.576369] DMA32 free:17964kB min:36200kB low:45248kB high:54296kB active_anon:47824kB inactive_anon:90868kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2852kB bounce:0kB free_pcp:740kB local_pcp:640kB free_cma:0kB [ 1121.577174] ion_system_heap_allocate+0x133/0x8c0 [ 1121.610117] ? _raw_spin_unlock+0x29/0x40 [ 1121.614357] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1121.619310] ? ion_system_contig_heap_create+0x130/0x130 [ 1121.624763] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1121.630130] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1121.634979] ion_alloc+0x27a/0x810 [ 1121.636351] lowmem_reserve[]: 0 0 [ 1121.638523] ? ion_dma_buf_release+0x40/0x40 [ 1121.638535] ? __might_fault+0x177/0x1b0 [ 1121.641992] 0 [ 1121.646397] ion_ioctl+0xea/0x1f0 [ 1121.646408] ? ion_query_heaps+0x360/0x360 [ 1121.646420] ? ion_query_heaps+0x360/0x360 [ 1121.646431] do_vfs_ioctl+0x75a/0xff0 [ 1121.646443] ? ioctl_preallocate+0x1a0/0x1a0 [ 1121.666350] 0 [ 1121.668350] ? lock_downgrade+0x740/0x740 [ 1121.672736] 0 [ 1121.674538] ? __fget+0x225/0x360 [ 1121.683988] ? do_vfs_ioctl+0xff0/0xff0 [ 1121.687969] ? security_file_ioctl+0x83/0xb0 [ 1121.692465] SyS_ioctl+0x7f/0xb0 [ 1121.695824] ? do_vfs_ioctl+0xff0/0xff0 [ 1121.699813] do_syscall_64+0x1d5/0x640 [ 1121.699816] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1121.703716] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1121.737108] RIP: 0033:0x465ef9 [ 1121.740309] RSP: 002b:00007f5842689188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1121.748358] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1121.755623] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1121.762889] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1121.766351] lowmem_reserve[]: [ 1121.770153] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1121.770162] R13: 00007ffc66db249f R14: 00007f5842689300 R15: 0000000000022000 [ 1121.773261] 0 [ 1121.785523] Mem-Info: [ 1121.792130] active_anon:12153 inactive_anon:33153 isolated_anon:0 [ 1121.792130] active_file:17 inactive_file:18 isolated_file:0 [ 1121.792130] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1121.792130] slab_reclaimable:12352 slab_unreclaimable:116867 [ 1121.792130] mapped:52695 shmem:33557 pagetables:764 bounce:0 [ 1121.792130] free:13878 free_pcp:398 free_cma:0 [ 1121.806356] CPU: 1 PID: 5283 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1121.830395] Node 0 active_anon:47824kB inactive_anon:90960kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163044kB dirty:0kB writeback:0kB shmem:92240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1121.833625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1121.865567] Node 1 active_anon:788kB inactive_anon:41652kB active_file:64kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47736kB dirty:0kB writeback:0kB shmem:41988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1121.870596] Call Trace: [ 1121.870618] dump_stack+0x1b2/0x281 [ 1121.870631] warn_alloc.cold+0x96/0x1cc [ 1121.870643] ? zone_watermark_ok_safe+0x220/0x220 [ 1121.870652] ? usleep_range+0x130/0x130 [ 1121.870660] ? try_to_free_pages+0x23f/0x6e0 [ 1121.870670] ? _find_next_bit+0xdb/0x100 [ 1121.870680] ? run_timer_softirq+0x5a0/0x5a0 [ 1121.870695] __alloc_pages_nodemask+0x2127/0x2720 [ 1121.902773] Node 0 [ 1121.904658] ? lock_acquire+0x170/0x3f0 [ 1121.909337] 0 [ 1121.913458] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1121.921713] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1121.921813] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1121.925850] lowmem_reserve[]: [ 1121.930269] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1121.930288] alloc_pages_current+0x155/0x260 [ 1121.930303] ion_page_pool_alloc+0x118/0x1b0 [ 1121.930314] ion_system_heap_allocate+0x133/0x8c0 [ 1121.930325] ? _raw_spin_unlock+0x29/0x40 [ 1121.930337] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1121.946630] 2717 [ 1121.948182] ? ion_system_contig_heap_create+0x130/0x130 [ 1121.988572] 0 [ 1121.991401] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1121.995798] 2717 [ 1122.000656] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1122.000670] ion_alloc+0x27a/0x810 [ 1122.000685] ? ion_dma_buf_release+0x40/0x40 [ 1122.000697] ? __might_fault+0x177/0x1b0 [ 1122.000709] ion_ioctl+0xea/0x1f0 [ 1122.000718] ? ion_query_heaps+0x360/0x360 [ 1122.000734] ? ion_query_heaps+0x360/0x360 [ 1122.028604] 2718 [ 1122.030481] do_vfs_ioctl+0x75a/0xff0 [ 1122.035305] 2718 [ 1122.038845] ? ioctl_preallocate+0x1a0/0x1a0 [ 1122.038855] ? lock_downgrade+0x740/0x740 [ 1122.038867] ? __fget+0x225/0x360 [ 1122.038876] ? do_vfs_ioctl+0xff0/0xff0 [ 1122.038886] ? security_file_ioctl+0x83/0xb0 [ 1122.038896] SyS_ioctl+0x7f/0xb0 [ 1122.038903] ? do_vfs_ioctl+0xff0/0xff0 [ 1122.038913] do_syscall_64+0x1d5/0x640 [ 1122.038930] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1122.038938] RIP: 0033:0x465ef9 [ 1122.038944] RSP: 002b:00007fd7ebad0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1122.057790] 2718 [ 1122.059377] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1122.061465] 2718 [ 1122.065264] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1122.069804] 2718 [ 1122.071816] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1122.079408] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1122.079413] R13: 00007ffc90d553bf R14: 00007fd7ebad0300 R15: 0000000000022000 [ 1122.088680] 0 [ 1122.101321] CPU: 0 PID: 5296 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1122.110779] 0 [ 1122.115355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1122.117446] 0 [ 1122.124664] Call Trace: [ 1122.126747] 0 [ 1122.134068] dump_stack+0x1b2/0x281 [ 1122.143392] warn_alloc.cold+0x96/0x1cc [ 1122.143404] ? zone_watermark_ok_safe+0x220/0x220 [ 1122.143413] ? usleep_range+0x130/0x130 [ 1122.143425] ? try_to_free_pages+0x23f/0x6e0 [ 1122.150729] Node 1 [ 1122.157995] ? _find_next_bit+0xdb/0x100 [ 1122.158006] ? run_timer_softirq+0x5a0/0x5a0 [ 1122.158029] __alloc_pages_nodemask+0x2127/0x2720 [ 1122.158046] ? lock_acquire+0x170/0x3f0 [ 1122.159850] Normal free:26572kB min:53696kB low:67120kB high:80544kB active_anon:788kB inactive_anon:41652kB active_file:64kB inactive_file:68kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:204kB bounce:0kB free_pcp:852kB local_pcp:732kB free_cma:0kB [ 1122.167744] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1122.167756] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1122.167771] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1122.167790] alloc_pages_current+0x155/0x260 [ 1122.169588] lowmem_reserve[]: [ 1122.178943] ion_page_pool_alloc+0x118/0x1b0 [ 1122.178954] ion_system_heap_allocate+0x133/0x8c0 [ 1122.178966] ? _raw_spin_unlock+0x29/0x40 [ 1122.178978] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1122.180783] 0 [ 1122.183403] ? ion_system_contig_heap_create+0x130/0x130 [ 1122.185180] 0 [ 1122.188850] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1122.188861] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1122.188873] ion_alloc+0x27a/0x810 [ 1122.188892] ? ion_dma_buf_release+0x40/0x40 [ 1122.192867] 0 [ 1122.197696] ? __might_fault+0x177/0x1b0 [ 1122.197710] ion_ioctl+0xea/0x1f0 [ 1122.197721] ? ion_query_heaps+0x360/0x360 [ 1122.197734] ? ion_query_heaps+0x360/0x360 [ 1122.201689] 0 [ 1122.206102] do_vfs_ioctl+0x75a/0xff0 [ 1122.208358] 0 [ 1122.212370] ? ioctl_preallocate+0x1a0/0x1a0 [ 1122.221586] ? lock_downgrade+0x740/0x740 [ 1122.225557] Node 0 [ 1122.253692] ? __fget+0x225/0x360 [ 1122.253703] ? do_vfs_ioctl+0xff0/0xff0 [ 1122.253714] ? security_file_ioctl+0x83/0xb0 [ 1122.253726] SyS_ioctl+0x7f/0xb0 [ 1122.258603] DMA: [ 1122.263379] ? do_vfs_ioctl+0xff0/0xff0 [ 1122.268874] 2*4kB [ 1122.273308] do_syscall_64+0x1d5/0x640 [ 1122.276449] (UM) [ 1122.280809] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1122.285621] 1*8kB [ 1122.289848] RIP: 0033:0x465ef9 [ 1122.289852] RSP: 002b:00007fd7eba8e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1122.289861] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000465ef9 [ 1122.289866] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1122.289871] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1122.289876] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1122.289881] R13: 00007ffc90d553bf R14: 00007fd7eba8e300 R15: 0000000000022000 [ 1122.302611] 2718 [ 1122.306378] syz-executor.2: [ 1122.324635] (U) [ 1122.352452] Node 0 [ 1122.361752] page allocation failure: order:0 [ 1122.377317] DMA32 free:18664kB min:36200kB low:45248kB high:54296kB active_anon:47824kB inactive_anon:90868kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2852kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1122.387863] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1122.397058] Node 0 [ 1122.404133] 3*16kB [ 1122.415440] lowmem_reserve[]: [ 1122.422226] (null) [ 1122.451369] DMA32 free:18664kB min:36200kB low:45248kB high:54296kB active_anon:47824kB inactive_anon:90868kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2852kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1122.451577] (UM) [ 1122.453764] lowmem_reserve[]: [ 1122.458302] 7*32kB (UM) 1*64kB (M) 1*128kB (U) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UE) = 10976kB [ 1122.458355] Node 0 DMA32: 1039*4kB (UME) 517*8kB (UME) 206*16kB (UME) [ 1122.502893] 0 [ 1122.503274] syz-executor.2 cpuset= [ 1122.552671] 0 [ 1122.573457] 46*32kB (UME) 69*64kB (UM) 10*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18756kB [ 1122.585795] / mems_allowed=0-1 [ 1122.586280] 0 [ 1122.589136] CPU: 1 PID: 5279 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1122.589143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1122.589147] Call Trace: [ 1122.589164] dump_stack+0x1b2/0x281 [ 1122.589179] warn_alloc.cold+0x96/0x1cc [ 1122.589193] ? zone_watermark_ok_safe+0x220/0x220 [ 1122.589202] ? usleep_range+0x130/0x130 [ 1122.589211] ? try_to_free_pages+0x23f/0x6e0 [ 1122.589221] ? _find_next_bit+0xdb/0x100 [ 1122.589234] ? run_timer_softirq+0x5a0/0x5a0 [ 1122.606678] 0 [ 1122.608236] __alloc_pages_nodemask+0x2127/0x2720 [ 1122.610847] 0 [ 1122.614489] ? lock_acquire+0x170/0x3f0 [ 1122.640472] 0 [ 1122.642134] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1122.659799] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1122.660200] 0 0 [ 1122.665359] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1122.665379] alloc_pages_current+0x155/0x260 [ 1122.678056] ion_page_pool_alloc+0x118/0x1b0 [ 1122.682562] ion_system_heap_allocate+0x133/0x8c0 [ 1122.686951] 0 [ 1122.687415] ? _raw_spin_unlock+0x29/0x40 [ 1122.689204] Node 0 [ 1122.693636] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1122.693659] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1122.695871] ? ion_system_contig_heap_create+0x130/0x130 [ 1122.704865] 0 [ 1122.726051] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1122.726065] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1122.726078] ion_alloc+0x27a/0x810 [ 1122.726093] ? ion_dma_buf_release+0x40/0x40 [ 1122.726104] ? __might_fault+0x177/0x1b0 [ 1122.726116] ion_ioctl+0xea/0x1f0 [ 1122.726126] ? ion_query_heaps+0x360/0x360 [ 1122.726138] ? ion_query_heaps+0x360/0x360 [ 1122.726147] do_vfs_ioctl+0x75a/0xff0 [ 1122.726159] ? ioctl_preallocate+0x1a0/0x1a0 [ 1122.726169] ? lock_downgrade+0x740/0x740 [ 1122.726183] ? __fget+0x225/0x360 [ 1122.726192] ? do_vfs_ioctl+0xff0/0xff0 [ 1122.726207] ? security_file_ioctl+0x83/0xb0 [ 1122.780190] lowmem_reserve[]: [ 1122.782244] SyS_ioctl+0x7f/0xb0 [ 1122.785779] 0 [ 1122.789851] ? do_vfs_ioctl+0xff0/0xff0 [ 1122.789864] do_syscall_64+0x1d5/0x640 [ 1122.789879] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1122.789887] RIP: 0033:0x465ef9 [ 1122.789891] RSP: 002b:00007f785ae94188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1122.789900] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1122.789905] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1122.789910] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1122.789915] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1122.789920] R13: 00007ffc771f8d7f R14: 00007f785ae94300 R15: 0000000000022000 [ 1122.791146] Node 0 [ 1122.796452] 0 [ 1122.824960] Normal: [ 1122.900011] 0 0 0 [ 1122.903930] Node 1 Normal free:353188kB min:53696kB low:67120kB high:80544kB active_anon:788kB inactive_anon:41652kB active_file:164kB inactive_file:1768kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:204kB bounce:0kB free_pcp:348kB local_pcp:116kB free_cma:0kB [ 1122.908033] 0*4kB [ 1122.944342] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1123.006404] lowmem_reserve[]: 0 0 0 0 0 [ 1123.011348] warn_alloc_show_mem: 2 callbacks suppressed [ 1123.011352] Mem-Info: [ 1123.013303] 0*8kB [ 1123.020688] Node 0 [ 1123.023244] lowmem_reserve[]: 0 0 0 0 0 [ 1123.030406] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1123.036411] active_anon:12196 inactive_anon:33153 isolated_anon:0 [ 1123.036411] active_file:90 inactive_file:1642 isolated_file:0 [ 1123.036411] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1123.036411] slab_reclaimable:12352 slab_unreclaimable:116902 [ 1123.036411] mapped:53895 shmem:33557 pagetables:771 bounce:0 [ 1123.036411] free:156409 free_pcp:130 free_cma:0 [ 1123.061084] Node 1 [ 1123.074546] DMA: 2*4kB (UM) 1*8kB (U) 3*16kB (UM) 7*32kB (UM) 3*64kB (UM) 2*128kB (U) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UE) = 11232kB [ 1123.094636] Normal: 1*4kB (U) 2*8kB (UM) 1*16kB (U) 2*32kB (UM) 5662*64kB (U) 931*128kB (UM) 101*256kB (UM) 51*512kB (U) 54*1024kB (UM) 1*2048kB (U) 0*4096kB = 590948kB [ 1123.096485] Node 1 [ 1123.126215] Node 0 [ 1123.131158] Normal free:648356kB min:53696kB low:67120kB high:80544kB active_anon:808kB inactive_anon:41652kB active_file:184kB inactive_file:1948kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:212kB bounce:0kB free_pcp:348kB local_pcp:116kB free_cma:0kB [ 1123.156357] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1123.166424] DMA32: 476*4kB (E) 384*8kB (ME) 158*16kB (E) 12*32kB (E) 1293*64kB (UME) 376*128kB (UME) 69*256kB (U) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 157968kB [ 1123.213962] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1123.214724] Node 0 active_anon:47992kB inactive_anon:90960kB active_file:768kB inactive_file:4684kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:166848kB dirty:0kB writeback:0kB shmem:92240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1123.233064] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1123.264700] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1123.269557] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1123.275437] 35540 total pagecache pages [ 1123.289488] lowmem_reserve[]: 0 0 0 0 0 [ 1123.289590] 0 pages in swap cache [ 1123.293522] Node 0 DMA: 2*4kB (UM) 1*8kB (U) 3*16kB (UM) 7*32kB (UM) 6*64kB (UM) 2*128kB (U) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UE) = 11424kB [ 1123.293592] Node 0 DMA32: 477*4kB (ME) 384*8kB (UE) 160*16kB (UME) 13*32kB [ 1123.297522] Swap cache stats: add 0, delete 0, find 0/0 [ 1123.327191] Free swap = 0kB [ 1123.330936] Total swap = 0kB [ 1123.333747] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 1*16kB (U) 2*32kB (UM) 6678*64kB (UM) 1237*128kB (UM) 210*256kB (UM) 82*512kB (U) 60*1024kB (UM) 4*2048kB (U) 0*4096kB = 751204kB [ 1123.336031] 2097051 pages RAM [ 1123.354673] Node 1 active_anon:808kB inactive_anon:41652kB active_file:484kB inactive_file:1344kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:49116kB dirty:0kB writeback:0kB shmem:41988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1123.370360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1123.384157] 0 pages HighMem/MovableOnly [ 1123.396473] (UE) 1127*64kB (UME) 390*128kB (UME) 71*256kB (UM) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 149204kB [ 1123.426662] 363840 pages reserved [ 1123.430123] 0 pages cma reserved [ 1123.430406] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1123.436353] Node 0 [ 1123.452755] Node 0 DMA free:11424kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1123.470212] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1123.485741] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1123.536379] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1123.536457] Node 1 [ 1123.545001] 35836 total pagecache pages [ 1123.545012] 0 pages in swap cache [ 1123.545017] Swap cache stats: add 0, delete 0, find 0/0 [ 1123.545019] Free swap = 0kB [ 1123.545022] Total swap = 0kB [ 1123.545029] 2097051 pages RAM [ 1123.545032] 0 pages HighMem/MovableOnly [ 1123.545035] 363840 pages reserved [ 1123.545042] 0 pages cma reserved [ 1123.553375] lowmem_reserve[]: [ 1123.582176] Normal: 1*4kB (U) 1*8kB (M) 1*16kB (U) 1*32kB (M) 6449*64kB (UM) 1237*128kB (UM) 210*256kB (UM) 82*512kB (U) 60*1024kB (UM) 4*2048kB (U) 0*4096kB = 736508kB [ 1123.609412] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1123.618770] 0 2717 2718 2718 2718 [ 1123.627024] Node 0 DMA32 free:44752kB min:36200kB low:45248kB high:54296kB active_anon:48092kB inactive_anon:90868kB active_file:1068kB inactive_file:5860kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2888kB bounce:0kB free_pcp:336kB local_pcp:172kB free_cma:0kB [ 1123.671959] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1123.708478] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1123.746433] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1123.759593] lowmem_reserve[]: 0 0 0 0 0 [ 1123.763812] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1123.786430] 36268 total pagecache pages [ 1123.806430] 0 pages in swap cache [ 1123.809910] Swap cache stats: add 0, delete 0, find 0/0 [ 1123.815267] Free swap = 0kB [ 1123.836403] Total swap = 0kB [ 1123.839483] 2097051 pages RAM [ 1123.842583] 0 pages HighMem/MovableOnly [ 1123.871271] lowmem_reserve[]: 0 0 0 0 0 [ 1123.875596] Node 1 Normal free:690348kB min:53696kB low:67120kB high:80544kB active_anon:1708kB inactive_anon:41652kB active_file:784kB inactive_file:2844kB unevictable:0kB writepending:296kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:212kB bounce:0kB free_pcp:276kB local_pcp:128kB free_cma:0kB [ 1123.876425] 363840 pages reserved [ 1123.961640] 0 pages cma reserved [ 1123.971604] Out of memory (oom_kill_allocating_task): Kill process 7970 (syz-fuzzer) score 0 or sacrifice child [ 1123.982511] lowmem_reserve[]: 0 0 0 0 0 [ 1123.997228] Node 0 DMA: 1*4kB (M) 0*8kB 3*16kB (UM) 2*32kB (M) 4*64kB (UM) 2*128kB (U) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UE) = 11124kB [ 1124.002097] Killed process 4992 (syz-executor.0) total-vm:84904kB, anon-rss:60kB, file-rss:4kB, shmem-rss:0kB [ 1124.034344] oom_reaper: reaped process 4992 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1124.056366] Node 0 DMA32: 415*4kB (UE) 384*8kB (UE) 158*16kB (E) 12*32kB (E) 491*64kB (UME) 158*128kB (UE) 78*256kB (U) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 79772kB [ 1124.108069] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1124.146569] Node 1 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 1*32kB (M) 7055*64kB (UM) 1905*128kB (UM) 338*256kB (UM) 115*512kB (UM) 118*1024kB (UM) 10*2048kB (U) 0*4096kB = 982124kB [ 1124.186394] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1124.195280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1124.226394] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1124.241331] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1124.266401] 36958 total pagecache pages [ 1124.270967] 0 pages in swap cache [ 1124.274777] Swap cache stats: add 0, delete 0, find 0/0 [ 1124.289547] Free swap = 0kB [ 1124.292611] Total swap = 0kB [ 1124.295642] 2097051 pages RAM [ 1124.333133] 0 pages HighMem/MovableOnly [ 1124.351069] 363840 pages reserved [ 1124.354561] 0 pages cma reserved 18:05:24 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) 18:05:24 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) recvfrom$netrom(0xffffffffffffffff, &(0x7f0000000100)=""/213, 0xd5, 0x10140, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xffffffffffffff64, 0x1e}) 18:05:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4(r0, &(0x7f0000000000)=@qipcrtr, &(0x7f0000000080)=0x80, 0x800) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) r4 = accept(r1, &(0x7f0000000640)=@ipx, &(0x7f0000000540)=0x80) accept(r4, &(0x7f00000006c0)=@can, &(0x7f0000000740)=0x80) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={r2, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000400)={0x0, 0x80}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000500)={r5, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r3) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000780)={r2, @in={{0x2, 0x4e21, @remote}}}, 0x84) sendmsg$IPVS_CMD_SET_DEST(r3, 0x0, 0x8884) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00', r6) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000826bd7000fddbdf250c0000000c00028008000700000400fd8fedef09e1f15400"], 0x20}, 0x1, 0x0, 0x0, 0x20000841}, 0x8000) accept(r0, 0x0, 0x0) 18:05:24 executing program 0: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x7, 0x18}, 0xc) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@loopback, 0x0}, &(0x7f0000000240)=0x14) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00'}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={r2, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000500)={r4, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r3) sendmsg$IPVS_CMD_SET_DEST(r3, 0x0, 0x8884) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0)={r5, 0x0, 0x99da}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000660000000067000006009500a0e5dc3ce88500ad4a8aa7366b0000000000bca1d0104b633154c1620c3e8eab42dc533f98ee1ce906c58fa4e3c5c102e8f864b18d35fb44e2c3a532a7f9101f284e512d4b053d7fdec8d1f62e4d11b187d0ce716098ce4c1d9ef5e7c57aa10f84dfdecbbe9385a292dcdf073fd260e2887289636bfaf6b201d6e6511ee07db52273c80713d0b7c52aa05d0e6aa49c0cfe597a5000d881a6f848a05bc9be5f4c"], &(0x7f0000000480)='GPL\x00', 0x36, 0x16, &(0x7f00000004c0)=""/22, 0x100, 0x2, [], r1, 0x17, r3, 0x8, &(0x7f0000000500)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x6, 0x80, 0x3}, 0x10, 0x1bf56, r6}, 0x78) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x3}, &(0x7f0000000080)=0x8) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) 18:05:24 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@name, &(0x7f0000000080)=0x80) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) 18:05:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x4, 0x8005, 0xff, 0x8}, &(0x7f0000000140)=0x10) eventfd2(0x890a, 0x1801) socketpair(0xc93ef11157126436, 0x804, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r1, &(0x7f0000000080)=@nfc, &(0x7f0000000240)=0x80) accept4$netrom(r3, &(0x7f00000001c0)={{0x3, @netrom}, [@netrom, @rose, @default, @remote, @null, @null, @bcast, @rose]}, &(0x7f0000000180)=0x48, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00'}) accept(r0, 0x0, 0x0) 18:05:24 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r1, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000500)={r3, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r2) sendmsg$IPVS_CMD_SET_DEST(r2, 0x0, 0x8884) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0xfffb, 0x3ff, 0x6, 0x200, 0x7fff, 0x800, 0x401, 0xb4}, &(0x7f0000000100)=0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) 18:05:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x4, 0x8005, 0xff, 0x8}, &(0x7f0000000140)=0x10) eventfd2(0x890a, 0x1801) socketpair(0xc93ef11157126436, 0x804, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r1, &(0x7f0000000080)=@nfc, &(0x7f0000000240)=0x80) accept4$netrom(r3, &(0x7f00000001c0)={{0x3, @netrom}, [@netrom, @rose, @default, @remote, @null, @null, @bcast, @rose]}, &(0x7f0000000180)=0x48, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00'}) accept(r0, 0x0, 0x0) 18:05:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x4, 0x8005, 0xff, 0x8}, &(0x7f0000000140)=0x10) eventfd2(0x890a, 0x1801) socketpair(0xc93ef11157126436, 0x804, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r1, &(0x7f0000000080)=@nfc, &(0x7f0000000240)=0x80) accept4$netrom(r3, &(0x7f00000001c0)={{0x3, @netrom}, [@netrom, @rose, @default, @remote, @null, @null, @bcast, @rose]}, &(0x7f0000000180)=0x48, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00'}) accept(r0, 0x0, 0x0) 18:05:24 executing program 5: getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r0, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000500)={r2, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r1) sendmsg$IPVS_CMD_SET_DEST(r1, 0x0, 0x8884) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_delneigh={0x50, 0x1d, 0x100, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, r3, 0x4, 0x21, 0x6}, [@NDA_VLAN={0x6, 0x5, 0x2}, @NDA_CACHEINFO={0x14, 0x3, {0x5, 0x3f, 0x81, 0x3}}, @NDA_LLADDR={0xa, 0x2, @dev={[], 0x2c}}, @NDA_DST_MAC={0xa, 0x1, @local}]}, 0x50}, 0x1, 0x0, 0x0, 0x40015}, 0x400c4) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x3c1801, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x121000, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) 18:05:24 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x6, @empty}}, 0x8000, 0x7}, 0x90) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="52000000af61e0b36a7794475c4c6a15883245e574d0913fb5b0180ae612ebb0753e7cea3e52fab5654805ff8aea61c7ac7ec6a908d74b690124a481386548f574cf60b6434c4a5b3dc4fd58498e4b7bcf2117fc17f96e3fc5"], &(0x7f0000000080)=0x5a) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000002c0)={r3, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000500)={r5, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r4) sendmsg$IPVS_CMD_SET_DEST(r4, 0x0, 0x8884) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000240)=""/154, &(0x7f0000000000)=0x9a) 18:05:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x4, 0x8005, 0xff, 0x8}, &(0x7f0000000140)=0x10) eventfd2(0x890a, 0x1801) socketpair(0xc93ef11157126436, 0x804, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r1, &(0x7f0000000080)=@nfc, &(0x7f0000000240)=0x80) accept4$netrom(r3, &(0x7f00000001c0)={{0x3, @netrom}, [@netrom, @rose, @default, @remote, @null, @null, @bcast, @rose]}, &(0x7f0000000180)=0x48, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00'}) accept(r0, 0x0, 0x0) [ 1126.599199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1126.606276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1126.641313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1126.657426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1126.674814] device bridge_slave_1 left promiscuous mode [ 1126.688560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.706551] device bridge_slave_0 left promiscuous mode [ 1126.719485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.742519] device veth1_macvtap left promiscuous mode [ 1126.753608] device veth0_macvtap left promiscuous mode [ 1126.764536] device veth1_vlan left promiscuous mode [ 1126.777956] device veth0_vlan left promiscuous mode [ 1127.047041] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1127.073018] syz-executor.4 cpuset= [ 1127.073056] device hsr_slave_1 left promiscuous mode [ 1127.096155] / mems_allowed=0-1 [ 1127.115873] device hsr_slave_0 left promiscuous mode [ 1127.121888] CPU: 1 PID: 5382 Comm: syz-executor.4 Not tainted 4.14.222-syzkaller #0 [ 1127.123313] syz-executor.5: [ 1127.129698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1127.129702] Call Trace: [ 1127.129724] dump_stack+0x1b2/0x281 [ 1127.129738] warn_alloc.cold+0x96/0x1cc [ 1127.129749] ? zone_watermark_ok_safe+0x220/0x220 [ 1127.129770] __alloc_pages_nodemask+0x2127/0x2720 [ 1127.129785] ? lock_acquire+0x170/0x3f0 [ 1127.129800] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1127.129816] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1127.129827] ? __mutex_unlock_slowpath+0x75/0x770 [ 1127.129843] alloc_pages_current+0x155/0x260 [ 1127.129859] ion_page_pool_alloc+0x118/0x1b0 [ 1127.133385] syz-executor.2: [ 1127.142239] ion_system_heap_allocate+0x133/0x8c0 [ 1127.142250] ? ion_alloc+0x187/0x810 [ 1127.142261] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1127.142270] ? ion_system_contig_heap_create+0x130/0x130 [ 1127.142292] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1127.142308] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1127.142319] ion_alloc+0x204/0x810 [ 1127.142336] ? ion_dma_buf_release+0x40/0x40 [ 1127.142348] ? __might_fault+0x177/0x1b0 [ 1127.142363] ion_ioctl+0xea/0x1f0 [ 1127.152663] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1127.157518] ? ion_query_heaps+0x360/0x360 [ 1127.157532] ? ion_query_heaps+0x360/0x360 [ 1127.157543] do_vfs_ioctl+0x75a/0xff0 [ 1127.157554] ? ioctl_preallocate+0x1a0/0x1a0 [ 1127.157563] ? lock_downgrade+0x740/0x740 [ 1127.157575] ? __fget+0x225/0x360 [ 1127.157584] ? do_vfs_ioctl+0xff0/0xff0 [ 1127.157594] ? security_file_ioctl+0x83/0xb0 [ 1127.157604] SyS_ioctl+0x7f/0xb0 [ 1127.157612] ? do_vfs_ioctl+0xff0/0xff0 [ 1127.157623] do_syscall_64+0x1d5/0x640 [ 1127.157640] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1127.168349] page allocation failure: order:4 [ 1127.172799] RIP: 0033:0x465ef9 [ 1127.172805] RSP: 002b:00007f6ac73d4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1127.172814] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1127.172820] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1127.172825] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1127.172830] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1127.172836] R13: 00007ffc5e29017f R14: 00007f6ac73d4300 R15: 0000000000022000 [ 1127.229580] team0 (unregistering): Port device team_slave_1 removed [ 1127.236462] (null) [ 1127.242398] warn_alloc_show_mem: 1 callbacks suppressed [ 1127.242402] Mem-Info: [ 1127.267172] syz-executor.5 cpuset= [ 1127.288349] active_anon:12526 inactive_anon:33152 isolated_anon:12 [ 1127.288349] active_file:2138 inactive_file:3990 isolated_file:20 [ 1127.288349] unevictable:0 dirty:4 writeback:20 unstable:0 [ 1127.288349] slab_reclaimable:12488 slab_unreclaimable:118697 [ 1127.288349] mapped:48709 shmem:33554 pagetables:714 bounce:0 [ 1127.288349] free:43968 free_pcp:364 free_cma:0 [ 1127.323488] / [ 1127.324838] Node 0 active_anon:48308kB inactive_anon:90944kB active_file:6584kB inactive_file:12068kB unevictable:0kB isolated(anon):48kB isolated(file):80kB mapped:143252kB dirty:4kB writeback:68kB shmem:92216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1127.341027] mems_allowed=0-1 [ 1127.354411] Node 1 active_anon:1796kB inactive_anon:41664kB active_file:1968kB inactive_file:3892kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51584kB dirty:12kB writeback:12kB shmem:42000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1127.375646] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1127.417514] Node 0 [ 1127.495681] team0 (unregistering): Port device team_slave_0 removed [ 1127.513806] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1127.523075] CPU: 1 PID: 5393 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1127.525315] (null) [ 1127.531677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1127.531683] Call Trace: [ 1127.531705] dump_stack+0x1b2/0x281 [ 1127.531718] warn_alloc.cold+0x96/0x1cc [ 1127.531729] ? zone_watermark_ok_safe+0x220/0x220 [ 1127.531751] __alloc_pages_nodemask+0x2127/0x2720 [ 1127.531768] ? lock_acquire+0x170/0x3f0 [ 1127.531782] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1127.531799] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1127.547538] syz-executor.2 cpuset= [ 1127.547855] ? __mutex_unlock_slowpath+0x75/0x770 [ 1127.562775] / [ 1127.566692] ? retint_kernel+0x2d/0x2d [ 1127.589739] mems_allowed=0-1 [ 1127.590715] alloc_pages_current+0x155/0x260 [ 1127.605415] ion_page_pool_alloc+0x118/0x1b0 [ 1127.611236] ion_system_heap_allocate+0x133/0x8c0 [ 1127.616916] ? ion_alloc+0x187/0x810 [ 1127.620895] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1127.626354] ? ion_system_contig_heap_create+0x130/0x130 [ 1127.631816] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1127.636839] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1127.641690] ion_alloc+0x204/0x810 [ 1127.645239] ? ion_dma_buf_release+0x40/0x40 [ 1127.649653] ? __might_fault+0x177/0x1b0 [ 1127.653716] ion_ioctl+0xea/0x1f0 [ 1127.657180] ? ion_query_heaps+0x360/0x360 [ 1127.661434] ? ion_query_heaps+0x360/0x360 [ 1127.665672] do_vfs_ioctl+0x75a/0xff0 [ 1127.669473] ? ioctl_preallocate+0x1a0/0x1a0 [ 1127.673880] ? lock_downgrade+0x740/0x740 [ 1127.678038] ? __fget+0x225/0x360 [ 1127.681487] ? do_vfs_ioctl+0xff0/0xff0 [ 1127.685544] ? security_file_ioctl+0x83/0xb0 [ 1127.689981] SyS_ioctl+0x7f/0xb0 [ 1127.693349] ? do_vfs_ioctl+0xff0/0xff0 [ 1127.697515] do_syscall_64+0x1d5/0x640 [ 1127.701544] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1127.706756] RIP: 0033:0x465ef9 [ 1127.709940] RSP: 002b:00007fd7ebad0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1127.717653] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1127.724943] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1127.732222] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1127.739674] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1127.747036] R13: 00007ffc90d553bf R14: 00007fd7ebad0300 R15: 0000000000022000 [ 1127.763388] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1127.780526] CPU: 0 PID: 5372 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1127.788371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1127.797727] Call Trace: [ 1127.800331] dump_stack+0x1b2/0x281 [ 1127.803981] warn_alloc.cold+0x96/0x1cc [ 1127.808264] ? zone_watermark_ok_safe+0x220/0x220 [ 1127.813172] __alloc_pages_nodemask+0x2127/0x2720 [ 1127.818038] ? lock_acquire+0x170/0x3f0 [ 1127.822033] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1127.826897] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1127.832372] ? __mutex_unlock_slowpath+0x75/0x770 [ 1127.837232] ? retint_kernel+0x2d/0x2d [ 1127.841311] alloc_pages_current+0x155/0x260 [ 1127.845855] ion_page_pool_alloc+0x118/0x1b0 [ 1127.850279] ion_system_heap_allocate+0x133/0x8c0 [ 1127.855144] ? ion_alloc+0x187/0x810 [ 1127.858891] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1127.867226] ? ion_system_contig_heap_create+0x130/0x130 [ 1127.873561] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1127.878594] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1127.883991] ion_alloc+0x204/0x810 [ 1127.889032] ? ion_dma_buf_release+0x40/0x40 [ 1127.893472] ? __might_fault+0x177/0x1b0 [ 1127.897636] ion_ioctl+0xea/0x1f0 [ 1127.901107] ? ion_query_heaps+0x360/0x360 [ 1127.905367] ? ion_query_heaps+0x360/0x360 [ 1127.909702] do_vfs_ioctl+0x75a/0xff0 [ 1127.913536] ? ioctl_preallocate+0x1a0/0x1a0 [ 1127.919528] ? lock_downgrade+0x740/0x740 [ 1127.923779] ? __fget+0x225/0x360 [ 1127.927629] ? do_vfs_ioctl+0xff0/0xff0 [ 1127.931969] ? security_file_ioctl+0x83/0xb0 [ 1127.937304] SyS_ioctl+0x7f/0xb0 [ 1127.940684] ? do_vfs_ioctl+0xff0/0xff0 [ 1127.944792] do_syscall_64+0x1d5/0x640 [ 1127.948785] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1127.954510] RIP: 0033:0x465ef9 [ 1127.957725] RSP: 002b:00007f785ae94188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1127.965491] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1127.972768] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1127.980132] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1127.987678] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1127.996002] R13: 00007ffc771f8d7f R14: 00007f785ae94300 R15: 0000000000022000 [ 1128.098007] DMA free:11108kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1128.151921] bond0 (unregistering): Released all slaves [ 1128.172514] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1128.190923] Node 0 DMA32 free:45912kB min:36200kB low:45248kB high:54296kB active_anon:48376kB inactive_anon:90852kB active_file:6836kB inactive_file:12104kB unevictable:0kB writepending:92kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:2636kB bounce:0kB free_pcp:932kB local_pcp:188kB free_cma:0kB [ 1128.277557] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1128.306379] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1128.312200] CPU: 1 PID: 5396 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1128.320084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1128.330952] Call Trace: [ 1128.337228] dump_stack+0x1b2/0x281 [ 1128.340861] warn_alloc.cold+0x96/0x1cc [ 1128.344836] ? zone_watermark_ok_safe+0x220/0x220 [ 1128.349707] __alloc_pages_nodemask+0x2127/0x2720 [ 1128.354557] ? io_schedule_timeout+0x140/0x140 [ 1128.359157] ? lock_acquire+0x170/0x3f0 [ 1128.363234] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1128.368092] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1128.373553] ? __mutex_unlock_slowpath+0x75/0x770 [ 1128.378403] alloc_pages_current+0x155/0x260 [ 1128.382836] ion_page_pool_alloc+0x118/0x1b0 [ 1128.387364] ion_system_heap_allocate+0x133/0x8c0 [ 1128.392229] ? ion_alloc+0x187/0x810 [ 1128.395965] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1128.401432] ? ion_system_contig_heap_create+0x130/0x130 [ 1128.406918] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1128.411946] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1128.416975] ion_alloc+0x204/0x810 [ 1128.420529] ? ion_dma_buf_release+0x40/0x40 [ 1128.424945] ? __might_fault+0x177/0x1b0 [ 1128.429014] ion_ioctl+0xea/0x1f0 [ 1128.432472] ? ion_query_heaps+0x360/0x360 [ 1128.436718] ? ion_query_heaps+0x360/0x360 [ 1128.440956] do_vfs_ioctl+0x75a/0xff0 [ 1128.444759] ? ioctl_preallocate+0x1a0/0x1a0 [ 1128.449170] ? lock_downgrade+0x740/0x740 [ 1128.453321] ? __fget+0x225/0x360 [ 1128.456777] ? do_vfs_ioctl+0xff0/0xff0 [ 1128.460752] ? security_file_ioctl+0x83/0xb0 [ 1128.465271] SyS_ioctl+0x7f/0xb0 [ 1128.468658] ? do_vfs_ioctl+0xff0/0xff0 [ 1128.472637] do_syscall_64+0x1d5/0x640 [ 1128.476534] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1128.481726] RIP: 0033:0x465ef9 [ 1128.484921] RSP: 002b:00007fd7ebaaf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1128.492791] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465ef9 [ 1128.501106] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1128.508390] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1128.512951] warn_alloc_show_mem: 1 callbacks suppressed [ 1128.512955] Mem-Info: [ 1128.515661] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1128.515667] R13: 00007ffc90d553bf R14: 00007fd7ebaaf300 R15: 0000000000022000 [ 1128.529273] lowmem_reserve[]: 0 0 0 0 0 [ 1128.563917] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1128.580528] active_anon:12543 inactive_anon:33152 isolated_anon:0 [ 1128.580528] active_file:2109 inactive_file:2173 isolated_file:0 [ 1128.580528] unevictable:0 dirty:30 writeback:0 unstable:0 [ 1128.580528] slab_reclaimable:12488 slab_unreclaimable:118166 [ 1128.580528] mapped:56237 shmem:33554 pagetables:754 bounce:0 [ 1128.580528] free:78091 free_pcp:378 free_cma:0 [ 1128.618483] lowmem_reserve[]: 0 0 0 0 0 [ 1128.638146] Node 1 Normal free:192668kB min:53696kB low:67120kB high:80544kB active_anon:1796kB inactive_anon:41664kB active_file:1992kB inactive_file:3868kB unevictable:0kB writepending:28kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:232kB bounce:0kB free_pcp:788kB local_pcp:80kB free_cma:0kB [ 1128.701208] lowmem_reserve[]: 0 0 0 0 0 [ 1128.710247] Node 0 DMA: 6*4kB (UM) 7*8kB (U) 8*16kB (UM) 10*32kB (UM) 4*64kB (UM) 1*128kB (U) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (UE) = 11152kB [ 1128.738340] Node 0 active_anon:48376kB inactive_anon:90944kB active_file:6444kB inactive_file:4824kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:152368kB dirty:92kB writeback:0kB shmem:92216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1128.742414] Node 0 DMA32: 389*4kB (ME) 430*8kB (ME) 139*16kB (ME) 1001*32kB (UME) 80*64kB (UM) 5*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45268kB [ 1128.823910] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1128.839446] Node 1 active_anon:1796kB inactive_anon:41664kB active_file:1992kB inactive_file:3868kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72580kB dirty:28kB writeback:0kB shmem:42000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1128.846977] Node 1 Normal: 7*4kB (UM) 3726*8kB (UM) 4724*16kB (UM) 2492*32kB (U) 830*64kB (U) 6*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 239052kB [ 1128.920560] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1128.940495] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1128.943764] Node 0 [ 1128.959240] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1128.963339] DMA free:11108kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1128.987592] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1129.032475] 37845 total pagecache pages [ 1129.033531] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1129.050927] 0 pages in swap cache [ 1129.060500] Node 0 DMA32 free:68908kB min:36200kB low:45248kB high:54296kB active_anon:48384kB inactive_anon:90852kB active_file:6836kB inactive_file:4668kB unevictable:0kB writepending:104kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:2788kB bounce:0kB free_pcp:848kB local_pcp:716kB free_cma:0kB [ 1129.065965] Swap cache stats: add 0, delete 0, find 0/0 [ 1129.151514] lowmem_reserve[]: 0 0 0 0 0 [ 1129.164364] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1129.167990] Free swap = 0kB [ 1129.249131] lowmem_reserve[]: 0 0 0 0 0 [ 1129.260498] Total swap = 0kB [ 1129.262033] Node 1 Normal free:292684kB min:53696kB low:67120kB high:80544kB active_anon:1796kB inactive_anon:41664kB active_file:1992kB inactive_file:3872kB unevictable:0kB writepending:32kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:276kB bounce:0kB free_pcp:664kB local_pcp:700kB free_cma:0kB [ 1129.276276] 2097051 pages RAM [ 1129.363131] 0 pages HighMem/MovableOnly [ 1129.365550] lowmem_reserve[]: 0 0 0 0 0 [ 1129.380740] 363840 pages reserved [ 1129.383835] Node 0 DMA: 3*4kB (UM) 1*8kB (U) 10*16kB (UM) 10*32kB (UM) 4*64kB (UM) 1*128kB (U) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (UE) = 11124kB [ 1129.393061] 0 pages cma reserved [ 1129.435896] Node 0 DMA32: 358*4kB (ME) 431*8kB (UME) 343*16kB (UME) 158*32kB (UME) 490*64kB (UM) 13*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 48704kB [ 1129.488780] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1129.521896] Node 1 Normal: 512*4kB (UM) 4097*8kB (UM) 5084*16kB (UM) 2691*32kB (UM) 1094*64kB (U) 59*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 279848kB [ 1129.576976] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1129.606366] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1129.615162] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1129.666387] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1129.675177] 37834 total pagecache pages [ 1129.696378] 0 pages in swap cache [ 1129.700249] Swap cache stats: add 0, delete 0, find 0/0 [ 1129.705702] Free swap = 0kB [ 1129.736389] Total swap = 0kB [ 1129.739541] 2097051 pages RAM [ 1129.742646] 0 pages HighMem/MovableOnly [ 1129.766362] 363840 pages reserved [ 1129.770403] 0 pages cma reserved [ 1132.463578] IPVS: ftp: loaded support on port[0] = 21 [ 1132.943732] oom_reaper: reaped process 5382 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1133.000419] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1133.023565] systemd-journal cpuset=/ mems_allowed=0-1 [ 1133.030952] CPU: 0 PID: 5053 Comm: systemd-journal Not tainted 4.14.222-syzkaller #0 [ 1133.038876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1133.048838] Call Trace: [ 1133.051431] dump_stack+0x1b2/0x281 [ 1133.055059] dump_header+0x178/0x82f [ 1133.059140] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1133.064276] ? ___ratelimit+0x2cd/0x530 [ 1133.068427] oom_kill_process.cold+0x10/0xb18 [ 1133.072936] out_of_memory+0xe3e/0x1190 [ 1133.076923] ? oom_killer_disable+0x1c0/0x1c0 [ 1133.081425] ? mutex_trylock+0x152/0x1a0 [ 1133.085946] __alloc_pages_nodemask+0x23e1/0x2720 [ 1133.091610] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1133.097178] alloc_pages_current+0x155/0x260 [ 1133.101601] filemap_fault+0xea3/0x1980 [ 1133.106909] ext4_filemap_fault+0x84/0xb0 [ 1133.111067] __do_fault+0xfa/0x380 [ 1133.114615] __handle_mm_fault+0x2497/0x4620 [ 1133.119572] ? ep_poll+0x1ab/0xa50 [ 1133.123104] ? vm_insert_page+0x7c0/0x7c0 [ 1133.127288] handle_mm_fault+0x391/0x860 [ 1133.131590] __do_page_fault+0x549/0xad0 [ 1133.135668] ? spurious_fault+0x640/0x640 [ 1133.140245] ? do_page_fault+0x60/0x500 [ 1133.144758] ? page_fault+0x2f/0x50 [ 1133.148676] page_fault+0x45/0x50 [ 1133.152237] RIP: 0001:0xffffffffffffffff [ 1133.156667] RSP: 250bd1e0:00007fff73aa11a0 EFLAGS: 7fff73aa0fb0 [ 1133.156990] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1133.183138] Mem-Info: [ 1133.186727] active_anon:12580 inactive_anon:33154 isolated_anon:0 [ 1133.186727] active_file:31 inactive_file:0 isolated_file:0 [ 1133.186727] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1133.186727] slab_reclaimable:12526 slab_unreclaimable:117847 [ 1133.186727] mapped:52778 shmem:33558 pagetables:756 bounce:0 [ 1133.186727] free:13893 free_pcp:32 free_cma:0 [ 1133.226164] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1133.231651] CPU: 0 PID: 5382 Comm: syz-executor.4 Not tainted 4.14.222-syzkaller #0 [ 1133.239473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1133.250061] Call Trace: [ 1133.252976] dump_stack+0x1b2/0x281 [ 1133.257144] warn_alloc.cold+0x96/0x1cc [ 1133.261829] ? zone_watermark_ok_safe+0x220/0x220 [ 1133.268514] ? usleep_range+0x130/0x130 [ 1133.273375] ? try_to_free_pages+0x23f/0x6e0 [ 1133.278596] ? _find_next_bit+0xdb/0x100 [ 1133.283384] ? run_timer_softirq+0x5a0/0x5a0 [ 1133.288696] __alloc_pages_nodemask+0x2127/0x2720 [ 1133.294512] ? lock_acquire+0x170/0x3f0 [ 1133.298935] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1133.305566] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1133.310273] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1133.315952] ? __sanitizer_cov_trace_pc+0x3d/0x50 [ 1133.321769] alloc_pages_current+0x155/0x260 [ 1133.326364] ion_page_pool_alloc+0x118/0x1b0 [ 1133.330829] ion_system_heap_allocate+0x133/0x8c0 [ 1133.336142] ? ion_alloc+0x187/0x810 [ 1133.340577] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1133.346143] ? ion_system_contig_heap_create+0x130/0x130 [ 1133.351774] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1133.357585] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1133.362991] ion_alloc+0x204/0x810 [ 1133.366564] ? ion_dma_buf_release+0x40/0x40 [ 1133.371419] ? __might_fault+0x177/0x1b0 [ 1133.375577] ion_ioctl+0xea/0x1f0 [ 1133.379215] ? ion_query_heaps+0x360/0x360 [ 1133.383721] ? ion_query_heaps+0x360/0x360 [ 1133.388123] do_vfs_ioctl+0x75a/0xff0 [ 1133.391928] ? ioctl_preallocate+0x1a0/0x1a0 [ 1133.396489] ? lock_downgrade+0x740/0x740 [ 1133.400648] ? __fget+0x225/0x360 [ 1133.404100] ? do_vfs_ioctl+0xff0/0xff0 [ 1133.408070] ? security_file_ioctl+0x83/0xb0 [ 1133.412515] SyS_ioctl+0x7f/0xb0 [ 1133.415878] ? do_vfs_ioctl+0xff0/0xff0 [ 1133.419873] do_syscall_64+0x1d5/0x640 [ 1133.423774] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1133.431399] RIP: 0033:0x465ef9 [ 1133.434679] RSP: 002b:00007f6ac73d4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1133.442391] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1133.449663] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1133.456933] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1133.464224] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1133.471493] R13: 00007ffc5e29017f R14: 00007f6ac73d4300 R15: 0000000000022000 [ 1133.484319] Node 0 active_anon:48456kB inactive_anon:90944kB active_file:116kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142412kB dirty:0kB writeback:0kB shmem:92224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1133.512325] Node 1 active_anon:1864kB inactive_anon:41672kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68700kB dirty:0kB writeback:0kB shmem:42008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1133.539612] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1133.566288] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1133.571419] Node 0 DMA32 free:17792kB min:36200kB low:45248kB high:54296kB active_anon:48456kB inactive_anon:90852kB active_file:116kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:2748kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1133.600760] lowmem_reserve[]: 0 0 0 0 0 [ 1133.604767] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1133.631419] lowmem_reserve[]: 0 0 0 0 0 [ 1133.636055] Node 1 Normal free:26828kB min:53696kB low:67120kB high:80544kB active_anon:1864kB inactive_anon:41672kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:276kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1133.665160] lowmem_reserve[]: 0 0 0 0 0 [ 1133.669319] Node 0 DMA: 2*4kB (ME) 0*8kB 4*16kB (UME) 4*32kB (UME) 8*64kB (UME) 2*128kB (UE) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10952kB [ 1133.684876] Node 0 DMA32: 920*4kB (ME) 554*8kB (UME) 185*16kB (UMEH) 56*32kB (ME) 27*64kB (UM) 5*128kB (UM) 2*256kB (M) 0*512kB 2*1024kB (UM) 0*2048kB 0*4096kB = 17792kB [ 1133.700466] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1133.711276] Node 1 Normal: 39*4kB (UM) 34*8kB (M) 38*16kB (M) 24*32kB (UM) 21*64kB (UM) 3*128kB (M) 3*256kB (UM) 2*512kB (UM) 3*1024kB (U) 9*2048kB (U) 0*4096kB = 26828kB [ 1133.727002] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1133.735847] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1133.744486] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1133.753848] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1133.763113] 33589 total pagecache pages [ 1133.767148] 0 pages in swap cache [ 1133.770601] Swap cache stats: add 0, delete 0, find 0/0 [ 1133.776401] Free swap = 0kB [ 1133.779418] Total swap = 0kB [ 1133.783129] 2097051 pages RAM [ 1133.786396] 0 pages HighMem/MovableOnly [ 1133.790601] 363840 pages reserved [ 1133.794258] 0 pages cma reserved [ 1133.797706] warn_alloc_show_mem: 1 callbacks suppressed [ 1133.797710] Mem-Info: [ 1133.805496] active_anon:12580 inactive_anon:33154 isolated_anon:0 [ 1133.805496] active_file:31 inactive_file:0 isolated_file:0 [ 1133.805496] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1133.805496] slab_reclaimable:12526 slab_unreclaimable:117847 [ 1133.805496] mapped:52778 shmem:33558 pagetables:756 bounce:0 [ 1133.805496] free:13893 free_pcp:32 free_cma:0 [ 1133.838836] Out of memory (oom_kill_allocating_task): Kill process 5053 (systemd-journal) score 0 or sacrifice child [ 1133.849611] Killed process 5053 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:2212kB [ 1133.862505] Node 0 active_anon:48456kB inactive_anon:90944kB active_file:0kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142412kB dirty:0kB writeback:0kB shmem:92224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1133.864731] syz-executor.5: [ 1133.890836] systemd-journal: page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 1133.890859] systemd-journal cpuset=/ mems_allowed=0-1 [ 1133.890879] CPU: 0 PID: 5053 Comm: systemd-journal Not tainted 4.14.222-syzkaller #0 [ 1133.890884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1133.890888] Call Trace: [ 1133.890903] dump_stack+0x1b2/0x281 [ 1133.890915] warn_alloc.cold+0x96/0x1cc [ 1133.914187] oom_reaper: reaped process 5393 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1133.919222] ? zone_watermark_ok_safe+0x220/0x220 [ 1133.919231] ? usleep_range+0x130/0x130 [ 1133.919238] ? try_to_free_pages+0x23f/0x6e0 [ 1133.919246] ? _find_next_bit+0xdb/0x100 [ 1133.919254] ? run_timer_softirq+0x5a0/0x5a0 [ 1133.919268] __alloc_pages_nodemask+0x2127/0x2720 [ 1133.975417] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1133.980272] alloc_pages_current+0x155/0x260 [ 1133.984689] filemap_fault+0xea3/0x1980 [ 1133.988668] ext4_filemap_fault+0x84/0xb0 [ 1133.992820] __do_fault+0xfa/0x380 [ 1133.996354] __handle_mm_fault+0x2497/0x4620 [ 1134.000771] ? ep_poll+0x1ab/0xa50 [ 1134.004303] ? vm_insert_page+0x7c0/0x7c0 [ 1134.008455] handle_mm_fault+0x391/0x860 [ 1134.012509] __do_page_fault+0x549/0xad0 [ 1134.016562] ? spurious_fault+0x640/0x640 [ 1134.020701] ? do_page_fault+0x60/0x500 [ 1134.024667] ? page_fault+0x2f/0x50 [ 1134.028282] page_fault+0x45/0x50 [ 1134.031720] RIP: 0001:0xffffffffffffffff [ 1134.035897] RSP: 250bd1e0:00007fff73aa11a0 EFLAGS: 7fff73aa0fb0 [ 1134.039262] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1134.046350] page allocation failure: order:0 [ 1134.066622] Node 1 active_anon:1856kB inactive_anon:41672kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68700kB dirty:0kB writeback:0kB shmem:42008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1134.071346] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1134.106401] syz-executor.5 cpuset= [ 1134.106992] Node 0 [ 1134.113538] / [ 1134.123560] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1134.136363] mems_allowed=0-1 [ 1134.159742] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1134.164816] Node 0 DMA32 free:17792kB min:36200kB low:45248kB high:54296kB active_anon:48344kB inactive_anon:90852kB active_file:152kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:2748kB bounce:0kB free_pcp:132kB local_pcp:8kB free_cma:0kB [ 1134.166340] (null) [ 1134.203234] lowmem_reserve[]: 0 0 0 0 0 [ 1134.206355] CPU: 1 PID: 5396 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1134.209424] Node 0 [ 1134.215089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1134.215113] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1134.217316] Call Trace: [ 1134.217338] dump_stack+0x1b2/0x281 [ 1134.217351] warn_alloc.cold+0x96/0x1cc [ 1134.217362] ? zone_watermark_ok_safe+0x220/0x220 [ 1134.217371] ? usleep_range+0x130/0x130 [ 1134.217380] ? try_to_free_pages+0x23f/0x6e0 [ 1134.217389] ? _find_next_bit+0xdb/0x100 [ 1134.217400] ? run_timer_softirq+0x5a0/0x5a0 [ 1134.217417] __alloc_pages_nodemask+0x2127/0x2720 [ 1134.217438] ? lock_acquire+0x170/0x3f0 [ 1134.235225] lowmem_reserve[]: [ 1134.251906] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1134.251919] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1134.251934] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1134.251952] alloc_pages_current+0x155/0x260 [ 1134.251965] ion_page_pool_alloc+0x118/0x1b0 [ 1134.251977] ion_system_heap_allocate+0x133/0x8c0 [ 1134.251988] ? ion_alloc+0x187/0x810 [ 1134.251998] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1134.252008] ? ion_system_contig_heap_create+0x130/0x130 [ 1134.252018] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1134.252027] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1134.252037] ion_alloc+0x204/0x810 [ 1134.252056] ? ion_dma_buf_release+0x40/0x40 [ 1134.263654] 0 [ 1134.267179] ? __might_fault+0x177/0x1b0 [ 1134.267195] ion_ioctl+0xea/0x1f0 [ 1134.267206] ? ion_query_heaps+0x360/0x360 [ 1134.267224] ? ion_query_heaps+0x360/0x360 [ 1134.267235] do_vfs_ioctl+0x75a/0xff0 [ 1134.267247] ? ioctl_preallocate+0x1a0/0x1a0 [ 1134.267260] ? lock_downgrade+0x740/0x740 [ 1134.271231] 0 [ 1134.275643] ? __fget+0x225/0x360 [ 1134.288226] 0 [ 1134.289102] ? do_vfs_ioctl+0xff0/0xff0 [ 1134.293064] 0 [ 1134.296173] ? security_file_ioctl+0x83/0xb0 [ 1134.310167] oom_reaper: reaped process 5053 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2216kB [ 1134.311255] SyS_ioctl+0x7f/0xb0 [ 1134.419195] ? do_vfs_ioctl+0xff0/0xff0 [ 1134.423168] do_syscall_64+0x1d5/0x640 [ 1134.427056] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1134.432879] RIP: 0033:0x465ef9 [ 1134.436077] RSP: 002b:00007fd7ebaaf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1134.443790] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465ef9 [ 1134.451077] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1134.458373] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1134.465648] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1134.472920] R13: 00007ffc90d553bf R14: 00007fd7ebaaf300 R15: 0000000000022000 [ 1134.483341] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1134.496676] Bluetooth: hci1 command 0x0409 tx timeout [ 1134.502083] 0 [ 1134.503928] Node 1 Normal free:26828kB min:53696kB low:67120kB high:80544kB active_anon:1856kB inactive_anon:41672kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:276kB bounce:0kB free_pcp:128kB local_pcp:120kB free_cma:0kB [ 1134.526358] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1134.536940] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1134.544145] CPU: 0 PID: 7967 Comm: syz-fuzzer Not tainted 4.14.222-syzkaller #0 [ 1134.551840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1134.561379] Call Trace: [ 1134.564375] dump_stack+0x1b2/0x281 [ 1134.568003] dump_header+0x178/0x82f [ 1134.571974] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1134.577077] ? ___ratelimit+0x2cd/0x530 [ 1134.581057] oom_kill_process.cold+0x10/0xb18 [ 1134.585567] out_of_memory+0xe3e/0x1190 [ 1134.589560] ? oom_killer_disable+0x1c0/0x1c0 [ 1134.594326] ? mutex_trylock+0x152/0x1a0 [ 1134.598483] __alloc_pages_nodemask+0x23e1/0x2720 [ 1134.603371] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1134.608340] alloc_pages_current+0x155/0x260 [ 1134.612946] filemap_fault+0xea3/0x1980 [ 1134.617108] ext4_filemap_fault+0x84/0xb0 [ 1134.621526] __do_fault+0xfa/0x380 [ 1134.625087] __handle_mm_fault+0x2497/0x4620 [ 1134.629501] ? vm_insert_page+0x7c0/0x7c0 [ 1134.633644] ? lock_downgrade+0x740/0x740 [ 1134.637981] handle_mm_fault+0x391/0x860 [ 1134.642394] __do_page_fault+0x549/0xad0 [ 1134.646518] ? spurious_fault+0x640/0x640 [ 1134.650669] ? do_page_fault+0x60/0x500 [ 1134.654635] ? page_fault+0x2f/0x50 [ 1134.659224] page_fault+0x45/0x50 [ 1134.662850] RIP: 0000:0x92fd48 [ 1134.666039] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1134.666958] lowmem_reserve[]: 0 0 0 0 0 [ 1134.676091] CPU: 1 PID: 5393 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1134.676774] Node 0 [ 1134.684433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1134.684442] DMA: [ 1134.686850] Call Trace: [ 1134.686872] dump_stack+0x1b2/0x281 [ 1134.686885] warn_alloc.cold+0x96/0x1cc [ 1134.686896] ? zone_watermark_ok_safe+0x220/0x220 [ 1134.686913] ? wait_for_completion_io+0x10/0x10 [ 1134.686926] __alloc_pages_nodemask+0x2127/0x2720 [ 1134.686943] ? lock_acquire+0x170/0x3f0 [ 1134.696449] 2*4kB [ 1134.698385] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1134.700968] (ME) [ 1134.704765] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1134.708953] 0*8kB [ 1134.713736] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1134.718573] 4*16kB [ 1134.723881] alloc_pages_current+0x155/0x260 [ 1134.728019] (UME) [ 1134.730097] ion_page_pool_alloc+0x118/0x1b0 [ 1134.734915] 4*32kB [ 1134.736977] ion_system_heap_allocate+0x133/0x8c0 [ 1134.736987] ? ion_alloc+0x187/0x810 [ 1134.736997] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1134.737007] ? ion_system_contig_heap_create+0x130/0x130 [ 1134.737017] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1134.737028] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1134.737039] ion_alloc+0x204/0x810 [ 1134.737054] ? ion_dma_buf_release+0x40/0x40 [ 1134.737066] ? __might_fault+0x177/0x1b0 [ 1134.741684] (UME) [ 1134.743792] ion_ioctl+0xea/0x1f0 [ 1134.813561] ? ion_query_heaps+0x360/0x360 [ 1134.817986] ? ion_query_heaps+0x360/0x360 [ 1134.822226] do_vfs_ioctl+0x75a/0xff0 [ 1134.826047] ? ioctl_preallocate+0x1a0/0x1a0 [ 1134.830460] ? lock_downgrade+0x740/0x740 [ 1134.834617] ? __fget+0x225/0x360 [ 1134.838070] ? do_vfs_ioctl+0xff0/0xff0 [ 1134.842569] ? security_file_ioctl+0x83/0xb0 [ 1134.846981] SyS_ioctl+0x7f/0xb0 [ 1134.850358] ? do_vfs_ioctl+0xff0/0xff0 [ 1134.854338] do_syscall_64+0x1d5/0x640 [ 1134.858238] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1134.863427] RIP: 0033:0x465ef9 [ 1134.866615] RSP: 002b:00007fd7ebad0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1134.874327] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1134.881714] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1134.888983] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1134.896339] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1134.903875] R13: 00007ffc90d553bf R14: 00007fd7ebad0300 R15: 0000000000022000 [ 1134.912130] 8*64kB (UME) 2*128kB (UE) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10952kB [ 1134.922955] Node 0 DMA32: 920*4kB (ME) 554*8kB (UME) 185*16kB (UMEH) 56*32kB (ME) 27*64kB (UM) 5*128kB (UM) 2*256kB (M) 0*512kB 2*1024kB (UM) 0*2048kB 0*4096kB = 17792kB [ 1134.938801] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1134.949713] Mem-Info: [ 1134.953359] active_anon:12450 inactive_anon:33154 isolated_anon:0 [ 1134.953359] active_file:39 inactive_file:0 isolated_file:0 [ 1134.953359] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1134.953359] slab_reclaimable:12526 slab_unreclaimable:117847 [ 1134.953359] mapped:52228 shmem:33558 pagetables:756 bounce:0 [ 1134.953359] free:13893 free_pcp:183 free_cma:0 [ 1134.992340] Node 1 Normal: 39*4kB (UM) 34*8kB (M) 38*16kB (M) 24*32kB (UM) 21*64kB (UM) 3*128kB (M) 3*256kB (UM) 2*512kB (UM) 3*1024kB (U) 9*2048kB (U) 0*4096kB = 26828kB [ 1135.008466] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1135.017570] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1135.027351] Node 0 active_anon:47944kB inactive_anon:90944kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140212kB dirty:0kB writeback:0kB shmem:92224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1135.057848] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1135.068186] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1135.077431] 33589 total pagecache pages [ 1135.081504] 0 pages in swap cache [ 1135.085043] Swap cache stats: add 0, delete 0, find 0/0 [ 1135.091337] Node 1 active_anon:1856kB inactive_anon:41672kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68700kB dirty:0kB writeback:0kB shmem:42008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1135.122144] Free swap = 0kB [ 1135.125780] Total swap = 0kB [ 1135.135710] 2097051 pages RAM [ 1135.139531] 0 pages HighMem/MovableOnly [ 1135.144027] 363840 pages reserved [ 1135.158972] 0 pages cma reserved [ 1135.189458] warn_alloc_show_mem: 1 callbacks suppressed [ 1135.189462] Mem-Info: [ 1135.189723] Node 0 [ 1135.195310] active_anon:12434 inactive_anon:33153 isolated_anon:0 [ 1135.195310] active_file:15 inactive_file:66 isolated_file:0 [ 1135.195310] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1135.195310] slab_reclaimable:12526 slab_unreclaimable:117844 [ 1135.195310] mapped:52225 shmem:33558 pagetables:754 bounce:0 [ 1135.195310] free:45050 free_pcp:237 free_cma:0 [ 1135.226891] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1135.374735] Node 0 active_anon:47880kB inactive_anon:90940kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140200kB dirty:0kB writeback:0kB shmem:92224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1135.375190] lowmem_reserve[]: [ 1135.405974] Node 1 active_anon:1956kB inactive_anon:41672kB active_file:304kB inactive_file:4904kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72000kB dirty:0kB writeback:0kB shmem:42008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1135.405979] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1135.405999] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1135.406020] Node 0 DMA32 free:39336kB min:36200kB low:45248kB high:54296kB active_anon:47880kB inactive_anon:90848kB active_file:56kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2740kB bounce:0kB free_pcp:1328kB local_pcp:620kB free_cma:0kB [ 1135.406041] lowmem_reserve[]: 0 0 0 0 0 [ 1135.406059] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1135.406079] lowmem_reserve[]: 0 0 0 0 0 [ 1135.406098] Node 1 Normal free:543616kB min:53696kB low:67120kB high:80544kB active_anon:1956kB inactive_anon:41672kB active_file:304kB inactive_file:4904kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:276kB bounce:0kB free_pcp:880kB local_pcp:716kB free_cma:0kB [ 1135.406120] lowmem_reserve[]: 0 0 0 0 0 [ 1135.406139] Node 0 DMA: 2*4kB (ME) 0*8kB 4*16kB [ 1135.413349] 0 [ 1135.476354] (UME) 4*32kB (UME) 8*64kB (UME) 2*128kB (UE) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10952kB [ 1135.686448] Node 0 DMA32: 4205*4kB (UMEH) 1024*8kB (UME) 293*16kB (UMEH) 112*32kB (UME) 245*64kB (UME) 48*128kB (UME) 26*256kB (UM) 0*512kB 2*1024kB (UM) 0*2048kB 0*4096kB = 63812kB [ 1135.706449] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1135.709612] 2717 [ 1135.718637] Node 1 [ 1135.718681] 2718 2718 2718 [ 1135.726087] Node 0 DMA32 free:70640kB min:36200kB low:45248kB high:54296kB active_anon:47880kB inactive_anon:90848kB active_file:56kB inactive_file:260kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2740kB bounce:0kB free_pcp:1368kB local_pcp:724kB free_cma:0kB [ 1135.766374] Normal: 1910*4kB (UME) 112*8kB (U) 357*16kB (U) 303*32kB (UE) 5962*64kB (UE) 1868*128kB (UME) 571*256kB (UE) 101*512kB (UE) 105*1024kB (UE) 21*2048kB (U) 0*4096kB = 993032kB [ 1135.786469] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1135.806914] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1135.856381] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1135.865381] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1135.876368] lowmem_reserve[]: 0 0 0 0 0 [ 1135.876394] 35735 total pagecache pages [ 1135.876404] Node 0 [ 1135.880529] 0 pages in swap cache [ 1135.884634] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1135.887011] Swap cache stats: add 0, delete 0, find 0/0 [ 1135.887015] Free swap = 0kB [ 1135.887018] Total swap = 0kB [ 1135.887026] 2097051 pages RAM [ 1135.887029] 0 pages HighMem/MovableOnly [ 1135.887032] 363840 pages reserved [ 1135.887036] 0 pages cma reserved [ 1136.006396] lowmem_reserve[]: 0 0 0 0 0 [ 1136.010448] Node 1 Normal free:1134564kB min:53696kB low:67120kB high:80544kB active_anon:1956kB inactive_anon:41672kB active_file:404kB inactive_file:7804kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:276kB bounce:0kB free_pcp:1284kB local_pcp:664kB free_cma:0kB [ 1136.086372] lowmem_reserve[]: 0 0 0 0 0 [ 1136.090407] Node 0 DMA: 2*4kB (ME) 0*8kB 4*16kB (UME) 4*32kB (UME) 8*64kB (UME) 2*128kB (UE) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11208kB [ 1136.158774] Node 0 DMA32: 12551*4kB (UMEH) 3469*8kB (UME) 2140*16kB (UMEH) 284*32kB (UMEH) 1033*64kB (UMEH) 82*128kB (UME) 29*256kB (UM) 0*512kB 2*1024kB (UM) 0*2048kB 0*4096kB = 207364kB [ 1136.207492] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1136.236929] Node 1 Normal: 8200*4kB (UME) 601*8kB (UM) 611*16kB (UM) 550*32kB (UME) 7656*64kB (UME) 2300*128kB (UME) 702*256kB (UE) 213*512kB (UE) 106*1024kB (UE) 22*2048kB (U) 0*4096kB = 1291736kB [ 1136.286887] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1136.295792] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1136.303904] chnl_net:caif_netlink_parms(): no params data found [ 1136.356734] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1136.366905] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1136.396437] 35880 total pagecache pages [ 1136.400479] 0 pages in swap cache [ 1136.403951] Swap cache stats: add 0, delete 0, find 0/0 [ 1136.426415] Free swap = 0kB [ 1136.429697] Total swap = 0kB [ 1136.432904] 2097051 pages RAM [ 1136.436007] 0 pages HighMem/MovableOnly [ 1136.440916] 363840 pages reserved [ 1136.444805] 0 pages cma reserved [ 1136.448738] Out of memory (oom_kill_allocating_task): Kill process 7967 (syz-fuzzer) score 0 or sacrifice child [ 1136.467115] Killed process 2901 (syz-executor.1) total-vm:84904kB, anon-rss:60kB, file-rss:4kB, shmem-rss:0kB [ 1136.523287] oom_reaper: reaped process 2901 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1136.533409] Bluetooth: hci1 command 0x041b tx timeout [ 1136.613556] Bluetooth: hci0 command 0x0406 tx timeout [ 1136.694809] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.710471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.740975] device bridge_slave_0 entered promiscuous mode [ 1136.752960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.763817] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.803460] device bridge_slave_1 entered promiscuous mode [ 1136.884641] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1136.908617] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1136.973380] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1137.015976] team0: Port device team_slave_0 added [ 1137.037446] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1137.066741] team0: Port device team_slave_1 added [ 1137.150253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1137.172262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1137.266376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1137.320507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1137.340163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1137.436358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1137.518253] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1137.556511] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1137.655340] device hsr_slave_0 entered promiscuous mode [ 1137.661972] device hsr_slave_1 entered promiscuous mode [ 1137.690595] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1137.698370] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1137.712619] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1137.725447] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1137.750350] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1137.766457] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1137.776363] CPU: 1 PID: 5393 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1137.780525] syz-executor.4 cpuset= [ 1137.784287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1137.784295] / [ 1137.787824] Call Trace: [ 1137.802623] dump_stack+0x1b2/0x281 [ 1137.806254] warn_alloc.cold+0x96/0x1cc [ 1137.810231] ? zone_watermark_ok_safe+0x220/0x220 [ 1137.815114] __alloc_pages_nodemask+0x2127/0x2720 [ 1137.819972] ? lock_acquire+0x170/0x3f0 [ 1137.823961] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1137.826402] mems_allowed=0-1 [ 1137.828811] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1137.837538] ? __mutex_unlock_slowpath+0x75/0x770 [ 1137.842394] alloc_pages_current+0x155/0x260 [ 1137.846834] ion_page_pool_alloc+0x118/0x1b0 [ 1137.851251] ion_system_heap_allocate+0x133/0x8c0 [ 1137.856446] ? _raw_spin_unlock+0x29/0x40 [ 1137.860604] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1137.865637] ? ion_system_contig_heap_create+0x130/0x130 [ 1137.871179] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1137.876196] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1137.881040] ion_alloc+0x27a/0x810 [ 1137.884588] ? ion_dma_buf_release+0x40/0x40 [ 1137.888997] ? __might_fault+0x177/0x1b0 [ 1137.893173] ion_ioctl+0xea/0x1f0 [ 1137.896977] ? ion_query_heaps+0x360/0x360 [ 1137.901308] ? ion_query_heaps+0x360/0x360 [ 1137.905633] do_vfs_ioctl+0x75a/0xff0 [ 1137.906966] syz-executor.5 cpuset=/ [ 1137.909551] ? ioctl_preallocate+0x1a0/0x1a0 [ 1137.909565] ? lock_downgrade+0x740/0x740 [ 1137.913202] mems_allowed=0-1 [ 1137.917611] ? __fget+0x225/0x360 [ 1137.917621] ? do_vfs_ioctl+0xff0/0xff0 [ 1137.917632] ? security_file_ioctl+0x83/0xb0 [ 1137.917641] SyS_ioctl+0x7f/0xb0 [ 1137.917650] ? do_vfs_ioctl+0xff0/0xff0 [ 1137.917660] do_syscall_64+0x1d5/0x640 [ 1137.917676] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1137.917685] RIP: 0033:0x465ef9 [ 1137.917690] RSP: 002b:00007fd7ebad0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1137.917700] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1137.917705] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1137.917711] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1137.917724] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1137.917730] R13: 00007ffc90d553bf R14: 00007fd7ebad0300 R15: 0000000000022000 [ 1137.997052] CPU: 1 PID: 5382 Comm: syz-executor.4 Not tainted 4.14.222-syzkaller #0 [ 1138.016114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1138.026194] Call Trace: [ 1138.028880] dump_stack+0x1b2/0x281 [ 1138.032512] warn_alloc.cold+0x96/0x1cc [ 1138.036843] ? zone_watermark_ok_safe+0x220/0x220 [ 1138.042529] __alloc_pages_nodemask+0x2127/0x2720 [ 1138.047484] ? __schedule+0x893/0x1de0 [ 1138.051784] ? lock_acquire+0x170/0x3f0 [ 1138.056041] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1138.061174] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1138.067356] ? __mutex_unlock_slowpath+0x75/0x770 [ 1138.072218] alloc_pages_current+0x155/0x260 [ 1138.077245] ion_page_pool_alloc+0x118/0x1b0 [ 1138.081831] ion_system_heap_allocate+0x133/0x8c0 [ 1138.086687] ? _raw_spin_unlock+0x29/0x40 [ 1138.091122] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1138.096222] ? ion_system_contig_heap_create+0x130/0x130 [ 1138.101677] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1138.106719] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1138.111758] ion_alloc+0x27a/0x810 [ 1138.115303] ? ion_dma_buf_release+0x40/0x40 [ 1138.120679] ? __might_fault+0x177/0x1b0 [ 1138.125739] ion_ioctl+0xea/0x1f0 [ 1138.129196] ? ion_query_heaps+0x360/0x360 [ 1138.133431] ? ion_query_heaps+0x360/0x360 [ 1138.137779] do_vfs_ioctl+0x75a/0xff0 [ 1138.141752] ? ioctl_preallocate+0x1a0/0x1a0 [ 1138.146345] ? lock_downgrade+0x740/0x740 [ 1138.150844] ? __fget+0x225/0x360 [ 1138.154876] ? do_vfs_ioctl+0xff0/0xff0 [ 1138.159036] ? security_file_ioctl+0x83/0xb0 [ 1138.163461] SyS_ioctl+0x7f/0xb0 [ 1138.167013] ? do_vfs_ioctl+0xff0/0xff0 [ 1138.171009] do_syscall_64+0x1d5/0x640 [ 1138.175363] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1138.180562] RIP: 0033:0x465ef9 [ 1138.183750] RSP: 002b:00007f6ac73d4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1138.192415] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1138.199771] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1138.207569] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1138.215386] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1138.216395] warn_alloc_show_mem: 1 callbacks suppressed [ 1138.216398] Mem-Info: [ 1138.223735] R13: 00007ffc5e29017f R14: 00007f6ac73d4300 R15: 0000000000022000 [ 1138.257326] CPU: 0 PID: 5396 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1138.266064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1138.275864] Call Trace: [ 1138.278499] dump_stack+0x1b2/0x281 [ 1138.282136] warn_alloc.cold+0x96/0x1cc [ 1138.287623] ? zone_watermark_ok_safe+0x220/0x220 [ 1138.292677] __alloc_pages_nodemask+0x2127/0x2720 [ 1138.297531] ? lock_acquire+0x170/0x3f0 [ 1138.301624] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1138.306566] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1138.312301] ? __mutex_unlock_slowpath+0x75/0x770 [ 1138.317508] alloc_pages_current+0x155/0x260 [ 1138.322021] ion_page_pool_alloc+0x118/0x1b0 [ 1138.326532] ion_system_heap_allocate+0x133/0x8c0 [ 1138.331386] ? _raw_spin_unlock+0x29/0x40 [ 1138.335731] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1138.341023] ? ion_system_contig_heap_create+0x130/0x130 [ 1138.347104] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1138.352138] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1138.356991] ion_alloc+0x27a/0x810 [ 1138.360631] ? ion_dma_buf_release+0x40/0x40 [ 1138.365487] ? __might_fault+0x177/0x1b0 [ 1138.369759] ion_ioctl+0xea/0x1f0 [ 1138.373227] ? ion_query_heaps+0x360/0x360 [ 1138.377473] ? ion_query_heaps+0x360/0x360 [ 1138.381798] do_vfs_ioctl+0x75a/0xff0 [ 1138.385713] ? ioctl_preallocate+0x1a0/0x1a0 [ 1138.390140] ? lock_downgrade+0x740/0x740 [ 1138.394846] ? __fget+0x225/0x360 [ 1138.398831] ? do_vfs_ioctl+0xff0/0xff0 [ 1138.403166] ? security_file_ioctl+0x83/0xb0 [ 1138.407929] SyS_ioctl+0x7f/0xb0 [ 1138.413385] ? do_vfs_ioctl+0xff0/0xff0 [ 1138.417495] do_syscall_64+0x1d5/0x640 [ 1138.421509] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1138.426701] RIP: 0033:0x465ef9 [ 1138.429928] RSP: 002b:00007fd7ebaaf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1138.437814] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465ef9 [ 1138.445116] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1138.452571] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1138.461067] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1138.468523] R13: 00007ffc90d553bf R14: 00007fd7ebaaf300 R15: 0000000000022000 [ 1138.484648] active_anon:12270 inactive_anon:33153 isolated_anon:0 [ 1138.484648] active_file:1168 inactive_file:2055 isolated_file:0 [ 1138.484648] unevictable:0 dirty:41 writeback:0 unstable:0 [ 1138.484648] slab_reclaimable:12563 slab_unreclaimable:117357 [ 1138.484648] mapped:45073 shmem:33558 pagetables:601 bounce:0 [ 1138.484648] free:228617 free_pcp:621 free_cma:0 [ 1138.527673] Node 0 active_anon:47376kB inactive_anon:90944kB active_file:824kB inactive_file:3892kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:112252kB dirty:164kB writeback:0kB shmem:92228kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1138.550149] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1138.561834] Node 1 active_anon:1804kB inactive_anon:41668kB active_file:3848kB inactive_file:4428kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68140kB dirty:0kB writeback:0kB shmem:42004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1138.597300] Node 0 DMA free:10992kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1138.623906] Bluetooth: hci1 command 0x040f tx timeout [ 1138.633950] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1138.639163] Node 0 DMA32 free:554484kB min:36200kB low:45248kB high:54296kB active_anon:47376kB inactive_anon:90852kB active_file:824kB inactive_file:3892kB unevictable:0kB writepending:164kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2132kB bounce:0kB free_pcp:1424kB local_pcp:740kB free_cma:0kB [ 1138.646463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1138.675144] lowmem_reserve[]: 0 0 0 0 0 [ 1138.682270] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1138.709749] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1138.716448] lowmem_reserve[]: 0 0 0 0 0 [ 1138.720554] Node 1 Normal free:463416kB min:53696kB low:67120kB high:80544kB active_anon:1804kB inactive_anon:41668kB active_file:3848kB inactive_file:4428kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:272kB bounce:0kB free_pcp:1356kB local_pcp:656kB free_cma:0kB [ 1138.728940] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1138.755734] lowmem_reserve[]: 0 0 0 0 0 [ 1138.762422] Node 0 DMA: 28*4kB (UME) 26*8kB (U) 12*16kB (UME) 6*32kB (UME) 3*64kB (UME) 1*128kB (E) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11008kB [ 1138.782842] Node 0 DMA32: 27499*4kB (UEH) 13424*8kB (UMEH) 10135*16kB (UMEH) 5864*32kB (UMEH) 976*64kB (UMH) 45*128kB (UH) 6*256kB (U) 3*512kB (U) 7*1024kB (U) 0*2048kB 0*4096kB = 645660kB [ 1138.786739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1138.805155] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1138.822651] Node 1 Normal: 27147*4kB (UM) 9274*8kB (UM) 5903*16kB (UM) 4068*32kB (U) 1185*64kB (U) 16*128kB (U) 2*256kB (U) 7*512kB (U) 3*1024kB (U) 0*2048kB 0*4096kB = 492460kB [ 1138.826923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1138.843152] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1138.869294] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1138.869796] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1138.890694] 8021q: adding VLAN 0 to HW filter on device team0 [ 1138.900201] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1138.901124] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1138.916830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1138.924793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1138.932654] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1138.946370] 36876 total pagecache pages [ 1138.950431] 0 pages in swap cache [ 1138.955383] Swap cache stats: add 0, delete 0, find 0/0 [ 1138.957007] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.967242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.976393] Free swap = 0kB [ 1138.979452] Total swap = 0kB [ 1138.982470] 2097051 pages RAM [ 1138.985561] 0 pages HighMem/MovableOnly [ 1138.992670] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1139.003786] 363840 pages reserved [ 1139.006850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1139.007664] 0 pages cma reserved [ 1139.014559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1139.042310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1139.060990] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.067505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1139.093534] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1139.106987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1139.127329] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1139.134298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1139.150094] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1139.176898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1139.184854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1139.195720] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1139.217106] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1139.225559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1139.247285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1139.258136] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1139.278340] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1139.285436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1139.306989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1139.315378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1139.340108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1139.362656] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1139.369882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1139.407637] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1139.429191] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1139.435509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1139.459977] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1139.481634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1139.784418] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1139.830496] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1139.857001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1139.864993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1140.008652] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1140.015984] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1140.048032] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1140.089392] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1140.096049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1140.119746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1140.148212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1140.172807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1140.183909] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1140.186371] device veth0_vlan entered promiscuous mode [ 1140.229735] device veth1_vlan entered promiscuous mode [ 1140.247539] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1140.247957] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1140.291574] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1140.316875] systemd[1]: Stopped Journal Service. [ 1140.334756] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1140.371988] systemd[1]: Starting Journal Service... [ 1140.402106] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1140.411986] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1140.438128] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1140.445919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1140.477043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1140.498096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1140.532435] device veth0_macvtap entered promiscuous mode [ 1140.549904] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1140.550336] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1140.567323] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1140.583015] device veth1_macvtap entered promiscuous mode [ 1140.589702] systemd-journald[5633]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1140.601382] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1140.631006] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1140.672260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1140.686403] Bluetooth: hci1 command 0x0419 tx timeout [ 1140.696670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.706083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1140.715919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.726596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1140.756377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.765530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1140.775514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.797006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1140.816426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.837912] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1140.845527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1140.869179] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1140.877583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1140.916233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1140.936661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.945806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1141.000205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.009868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1141.040465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.060915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1141.080522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.120414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1141.130512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.161795] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1141.172640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1141.190820] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1141.202079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1141.381725] systemd[1]: Started Journal Service. [ 1141.443340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1141.451346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1141.464636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1141.496486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1141.505072] device bridge_slave_1 left promiscuous mode [ 1141.516917] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.524976] device bridge_slave_0 left promiscuous mode [ 1141.540422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.559706] device veth1_macvtap left promiscuous mode [ 1141.565041] device veth0_macvtap left promiscuous mode [ 1141.595912] device veth1_vlan left promiscuous mode [ 1141.601098] device veth0_vlan left promiscuous mode [ 1141.679121] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1141.726416] systemd-journal cpuset=/ mems_allowed=0-1 [ 1141.731665] CPU: 0 PID: 5633 Comm: systemd-journal Not tainted 4.14.222-syzkaller #0 [ 1141.740848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1141.750203] Call Trace: [ 1141.752830] dump_stack+0x1b2/0x281 [ 1141.756462] dump_header+0x178/0x82f [ 1141.760180] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1141.765557] ? ___ratelimit+0x2cd/0x530 [ 1141.769544] oom_kill_process.cold+0x10/0xb18 [ 1141.774060] out_of_memory+0xe3e/0x1190 [ 1141.778045] ? oom_killer_disable+0x1c0/0x1c0 [ 1141.782554] ? mutex_trylock+0x152/0x1a0 [ 1141.786630] __alloc_pages_nodemask+0x23e1/0x2720 [ 1141.791505] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1141.796383] alloc_pages_current+0x155/0x260 [ 1141.800827] filemap_fault+0xea3/0x1980 [ 1141.804825] ext4_filemap_fault+0x84/0xb0 [ 1141.808968] __do_fault+0xfa/0x380 [ 1141.812593] __handle_mm_fault+0x2497/0x4620 [ 1141.817019] ? trace_hardirqs_on+0x10/0x10 [ 1141.821260] ? vm_insert_page+0x7c0/0x7c0 [ 1141.825404] ? __fsnotify_inode_delete+0x20/0x20 [ 1141.830175] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1141.836871] handle_mm_fault+0x391/0x860 [ 1141.841742] __do_page_fault+0x549/0xad0 [ 1141.845843] ? spurious_fault+0x640/0x640 [ 1141.850080] ? do_page_fault+0x60/0x500 [ 1141.854051] ? page_fault+0x2f/0x50 [ 1141.857691] page_fault+0x45/0x50 [ 1141.861153] RIP: 9b2234c8:0x5642f59a1958 [ 1141.865471] RSP: 9b2233d0:00007ffe9b2233c8 EFLAGS: 5642f5f912b0 [ 1141.870211] Mem-Info: [ 1141.874663] syz-executor.5: [ 1141.876514] active_anon:12549 inactive_anon:35183 isolated_anon:0 [ 1141.876514] active_file:57 inactive_file:16 isolated_file:0 [ 1141.876514] unevictable:0 dirty:18 writeback:25 unstable:0 [ 1141.876514] slab_reclaimable:12557 slab_unreclaimable:117579 [ 1141.876514] mapped:43970 shmem:35601 pagetables:657 bounce:0 [ 1141.876514] free:13778 free_pcp:241 free_cma:0 [ 1141.879540] page allocation failure: order:0 [ 1141.882078] Node 0 active_anon:47172kB inactive_anon:90880kB active_file:72kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:109908kB dirty:60kB writeback:100kB shmem:92224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1141.934674] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1141.952811] Node 1 active_anon:3024kB inactive_anon:49852kB active_file:156kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:65972kB dirty:12kB writeback:0kB shmem:50180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1141.960785] (null) [ 1141.992081] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1141.999036] syz-executor.5 cpuset= [ 1142.023327] lowmem_reserve[]: [ 1142.026667] / [ 1142.026971] 0 [ 1142.030024] mems_allowed=0-1 [ 1142.031681] 2717 [ 1142.033471] CPU: 1 PID: 5393 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1142.040719] 2718 [ 1142.047164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1142.047168] Call Trace: [ 1142.047189] dump_stack+0x1b2/0x281 [ 1142.047202] warn_alloc.cold+0x96/0x1cc [ 1142.047212] ? kvm_apic_nmi_wd_deliver+0x80/0x180 [ 1142.047221] ? zone_watermark_ok_safe+0x220/0x220 [ 1142.047230] ? usleep_range+0x130/0x130 [ 1142.047238] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1142.047250] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1142.047260] ? run_timer_softirq+0x5a0/0x5a0 [ 1142.047278] __alloc_pages_nodemask+0x2127/0x2720 [ 1142.047295] ? lock_acquire+0x170/0x3f0 [ 1142.047311] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1142.047321] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1142.047336] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1142.047355] alloc_pages_current+0x155/0x260 [ 1142.047378] ion_page_pool_alloc+0x118/0x1b0 [ 1142.047390] ion_system_heap_allocate+0x133/0x8c0 [ 1142.047400] ? _raw_spin_unlock+0x29/0x40 [ 1142.047409] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1142.047418] ? ion_system_contig_heap_create+0x130/0x130 [ 1142.047428] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1142.047437] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1142.047448] ion_alloc+0x27a/0x810 [ 1142.047464] ? ion_dma_buf_release+0x40/0x40 [ 1142.047477] ? __might_fault+0x177/0x1b0 [ 1142.047491] ion_ioctl+0xea/0x1f0 [ 1142.047501] ? ion_query_heaps+0x360/0x360 [ 1142.047515] ? ion_query_heaps+0x360/0x360 [ 1142.047526] do_vfs_ioctl+0x75a/0xff0 [ 1142.047539] ? ioctl_preallocate+0x1a0/0x1a0 [ 1142.047547] ? lock_downgrade+0x740/0x740 [ 1142.047560] ? __fget+0x225/0x360 [ 1142.047568] ? do_vfs_ioctl+0xff0/0xff0 [ 1142.047578] ? security_file_ioctl+0x83/0xb0 [ 1142.047586] SyS_ioctl+0x7f/0xb0 [ 1142.047593] ? do_vfs_ioctl+0xff0/0xff0 [ 1142.047604] do_syscall_64+0x1d5/0x640 [ 1142.047619] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1142.047627] RIP: 0033:0x465ef9 [ 1142.047633] RSP: 002b:00007fd7ebad0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1142.047643] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1142.047648] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1142.047653] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1142.047658] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1142.047663] R13: 00007ffc90d553bf R14: 00007fd7ebad0300 R15: 0000000000022000 [ 1142.056027] warn_alloc_show_mem: 2 callbacks suppressed [ 1142.056031] Mem-Info: [ 1142.064167] 2718 [ 1142.065871] active_anon:12504 inactive_anon:35184 isolated_anon:0 [ 1142.065871] active_file:15 inactive_file:15 isolated_file:0 [ 1142.065871] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1142.065871] slab_reclaimable:12545 slab_unreclaimable:117573 [ 1142.065871] mapped:43913 shmem:35602 pagetables:657 bounce:0 [ 1142.065871] free:14229 free_pcp:2 free_cma:0 [ 1142.069805] 2718 [ 1142.069815] Node 0 DMA32 free:18292kB min:36200kB low:45248kB high:54296kB active_anon:47172kB inactive_anon:90788kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2176kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 1142.069834] lowmem_reserve[]: 0 0 0 0 0 [ 1142.069854] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1142.069876] lowmem_reserve[]: [ 1142.082806] Node 0 active_anon:47172kB inactive_anon:90880kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:109752kB dirty:0kB writeback:0kB shmem:92224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1142.088184] 0 [ 1142.093806] Node 1 active_anon:2844kB inactive_anon:49856kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:65900kB dirty:0kB writeback:0kB shmem:50184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1142.094017] 0 [ 1142.101594] Node 0 [ 1142.104688] 0 [ 1142.112100] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1142.115181] 0 [ 1142.119884] lowmem_reserve[]: [ 1142.122464] 0 [ 1142.136387] 0 [ 1142.140644] 2717 [ 1142.145650] Node 1 [ 1142.161849] 2718 [ 1142.168048] Normal free:27652kB min:53696kB low:67120kB high:80544kB active_anon:2844kB inactive_anon:49856kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:452kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1142.176408] 2718 [ 1142.178807] lowmem_reserve[]: [ 1142.180070] 2718 [ 1142.184291] 0 [ 1142.201027] 0 [ 1142.201362] Node 0 [ 1142.204802] 0 [ 1142.221107] DMA32 free:18292kB min:36200kB low:45248kB high:54296kB active_anon:47172kB inactive_anon:90788kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2176kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 1142.225878] 0 [ 1142.234713] lowmem_reserve[]: [ 1142.246118] 0 [ 1142.257342] 0 [ 1142.278984] 0 [ 1142.285230] Node 0 [ 1142.293577] 0 [ 1142.326954] DMA: [ 1142.361207] 0 [ 1142.387040] 3*4kB [ 1142.424510] 0 [ 1142.455017] (UME) [ 1142.490260] 0*8kB [ 1142.499000] Node 0 [ 1142.499879] 3*16kB [ 1142.502835] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1142.540775] (ME) [ 1142.550115] lowmem_reserve[]: [ 1142.550182] 3*32kB [ 1142.552350] 0 [ 1142.593366] (ME) [ 1142.596336] 0 [ 1142.598148] 11*64kB [ 1142.599957] 0 [ 1142.602003] (UME) [ 1142.603793] 0 [ 1142.605941] 1*128kB [ 1142.612014] 0 [ 1142.620140] (E) [ 1142.654477] 3*256kB [ 1142.655539] Node 1 [ 1142.658019] (UME) 2*512kB (ME) [ 1142.663619] Normal free:27652kB min:53696kB low:67120kB high:80544kB active_anon:2844kB inactive_anon:49856kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:452kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1142.663835] 2*1024kB [ 1142.666141] lowmem_reserve[]: [ 1142.676106] (ME) [ 1142.681588] 0 [ 1142.709899] 1*2048kB (E) 1*4096kB (U) = 10972kB [ 1142.720480] 0 0 0 0 [ 1142.720817] Node 0 [ 1142.722840] Node 0 [ 1142.722843] DMA32: 997*4kB [ 1142.725069] DMA: [ 1142.731494] (UME) 567*8kB (UME) 172*16kB (UME) 37*32kB (UME) 15*64kB (UM) 4*128kB (UM) 1*256kB (M) 0*512kB 4*1024kB (UM) 0*2048kB 0*4096kB = 18284kB [ 1142.736423] 3*4kB [ 1142.751539] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1142.755452] (UME) 0*8kB 3*16kB [ 1142.764487] Node 1 Normal: 73*4kB (M) 78*8kB (UM) 53*16kB (UM) 40*32kB (M) 36*64kB (M) 13*128kB (M) 5*256kB (UM) 4*512kB (UM) 17*1024kB (U) 0*2048kB 0*4096kB = 27748kB [ 1142.776023] (ME) 3*32kB (ME) 11*64kB (UME) 1*128kB (E) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10972kB [ 1142.795612] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1142.804139] Node 0 DMA32: 997*4kB (UME) 567*8kB (UME) 172*16kB (UME) 37*32kB (UME) 15*64kB (UM) 4*128kB (UM) 1*256kB (M) 0*512kB 4*1024kB (UM) 0*2048kB 0*4096kB = 18284kB [ 1142.804208] Node 0 Normal: 0*4kB [ 1142.821178] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1142.832808] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1142.850041] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1142.850049] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1142.850054] 35632 total pagecache pages [ 1142.850064] 0 pages in swap cache [ 1142.850069] Swap cache stats: add 0, delete 0, find 0/0 [ 1142.850071] Free swap = 0kB [ 1142.850074] Total swap = 0kB [ 1142.850081] 2097051 pages RAM [ 1142.850083] 0 pages HighMem/MovableOnly [ 1142.850087] 363840 pages reserved [ 1142.850090] 0 pages cma reserved [ 1142.850097] Out of memory (oom_kill_allocating_task): Kill process 5633 (systemd-journal) score 0 or sacrifice child [ 1142.850127] Killed process 5633 (systemd-journal) total-vm:46096kB, anon-rss:460kB, file-rss:0kB, shmem-rss:1556kB [ 1142.861220] Node 1 [ 1142.878609] oom_reaper: reaped process 5633 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1556kB [ 1142.883497] Normal: [ 1142.888485] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1142.891539] 73*4kB (M) 78*8kB (UM) 53*16kB (UM) 40*32kB (M) 36*64kB (M) 13*128kB (M) 5*256kB (UM) 4*512kB (UM) 17*1024kB (U) 0*2048kB 0*4096kB = 27748kB [ 1142.891597] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1142.891607] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1142.895573] (null) [ 1142.900099] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1142.922168] , order=0, oom_score_adj=0 [ 1142.939036] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1142.960352] syz-fuzzer cpuset= [ 1142.964562] 35632 total pagecache pages [ 1142.990780] / [ 1142.994036] 0 pages in swap cache [ 1143.014652] mems_allowed=0-1 [ 1143.015882] Swap cache stats: add 0, delete 0, find 0/0 [ 1143.028551] Free swap = 0kB [ 1143.032040] Total swap = 0kB [ 1143.035055] 2097051 pages RAM [ 1143.035298] CPU: 0 PID: 26488 Comm: syz-fuzzer Not tainted 4.14.222-syzkaller #0 [ 1143.038362] 0 pages HighMem/MovableOnly [ 1143.048394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1143.048398] Call Trace: [ 1143.048418] dump_stack+0x1b2/0x281 [ 1143.048429] dump_header+0x178/0x82f [ 1143.048439] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1143.048447] ? ___ratelimit+0x2cd/0x530 [ 1143.048458] oom_kill_process.cold+0x10/0xb18 [ 1143.052542] 363840 pages reserved [ 1143.062259] out_of_memory+0xe3e/0x1190 [ 1143.062273] ? oom_killer_disable+0x1c0/0x1c0 [ 1143.062282] ? mutex_trylock+0x152/0x1a0 [ 1143.062294] __alloc_pages_nodemask+0x23e1/0x2720 [ 1143.064879] 0 pages cma reserved [ 1143.069728] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1143.069751] alloc_pages_current+0x155/0x260 [ 1143.069763] filemap_fault+0xea3/0x1980 [ 1143.126865] ext4_filemap_fault+0x84/0xb0 [ 1143.131014] __do_fault+0xfa/0x380 [ 1143.134559] __handle_mm_fault+0x2497/0x4620 [ 1143.138964] ? vm_insert_page+0x7c0/0x7c0 [ 1143.143123] handle_mm_fault+0x391/0x860 [ 1143.147185] __do_page_fault+0x549/0xad0 [ 1143.151254] ? spurious_fault+0x640/0x640 [ 1143.155397] ? do_page_fault+0x60/0x500 [ 1143.159367] ? page_fault+0x2f/0x50 [ 1143.162986] page_fault+0x45/0x50 [ 1143.166450] RIP: 5577500:0x111f017ee60 [ 1143.170323] RSP: 02cc:000000c00018be30 EFLAGS: 00000003 [ 1143.186440] Mem-Info: [ 1143.194244] active_anon:12404 inactive_anon:35184 isolated_anon:0 [ 1143.194244] active_file:13 inactive_file:16 isolated_file:0 [ 1143.194244] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1143.194244] slab_reclaimable:12545 slab_unreclaimable:117572 [ 1143.194244] mapped:43538 shmem:35602 pagetables:657 bounce:0 [ 1143.194244] free:33882 free_pcp:61 free_cma:0 [ 1143.288326] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1143.308581] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1143.317963] Node 0 active_anon:47172kB inactive_anon:90880kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:109748kB dirty:0kB writeback:0kB shmem:92224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1143.358256] systemd[1]: Stopped Journal Service. [ 1143.396543] Node 1 active_anon:2380kB inactive_anon:49852kB active_file:40kB inactive_file:3948kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67500kB dirty:0kB writeback:0kB shmem:50184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1143.460736] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1143.491695] device hsr_slave_1 left promiscuous mode [ 1143.493916] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1143.502967] device hsr_slave_0 left promiscuous mode [ 1143.516383] Node 0 DMA32 free:89548kB min:36200kB low:45248kB high:54296kB active_anon:47272kB inactive_anon:90788kB active_file:20kB inactive_file:824kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2324kB bounce:0kB free_pcp:1396kB local_pcp:664kB free_cma:0kB [ 1143.527772] team0 (unregistering): Port device team_slave_1 removed [ 1143.610848] team0 (unregistering): Port device team_slave_0 removed [ 1143.621528] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1143.623426] lowmem_reserve[]: 0 0 0 0 0 [ 1143.634241] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1143.663863] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1143.722266] lowmem_reserve[]: 0 0 0 0 0 [ 1143.727031] Node 1 Normal free:471952kB min:53696kB low:67120kB high:80544kB active_anon:2280kB inactive_anon:49852kB active_file:40kB inactive_file:3948kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:360kB bounce:0kB free_pcp:1308kB local_pcp:644kB free_cma:0kB [ 1143.767867] lowmem_reserve[]: 0 0 0 0 0 [ 1143.772538] Node 0 DMA: 11*4kB (UME) 1*8kB (U) 4*16kB (UME) 3*32kB (ME) 11*64kB (UME) 1*128kB (E) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11028kB [ 1143.787075] bond0 (unregistering): Released all slaves [ 1143.820937] Node 0 DMA32: 19833*4kB (UE) 8914*8kB (UME) 916*16kB (UME) 712*32kB (UME) 718*64kB (UM) 44*128kB (UM) 9*256kB (UM) 0*512kB 4*1024kB (UM) 0*2048kB 0*4096kB = 246068kB [ 1143.869754] systemd-journald[5646]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1143.885484] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1143.919832] Node 1 Normal: 2339*4kB (UM) 1851*8kB (UM) 825*16kB (UM) 876*32kB (UM) 3633*64kB (UM) 470*128kB (UM) 60*256kB (UM) 126*512kB (UM) 34*1024kB (U) 0*2048kB 0*4096kB = 472756kB [ 1143.986348] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1143.995237] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1144.058354] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1144.100341] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1144.146594] 39973 total pagecache pages [ 1144.150611] 0 pages in swap cache [ 1144.154077] Swap cache stats: add 0, delete 0, find 0/0 [ 1144.176656] Free swap = 0kB [ 1144.179706] Total swap = 0kB [ 1144.182715] 2097051 pages RAM [ 1144.185913] 0 pages HighMem/MovableOnly [ 1144.226749] 363840 pages reserved [ 1144.230230] 0 pages cma reserved [ 1144.233682] Out of memory (oom_kill_allocating_task): Kill process 26488 (syz-fuzzer) score 0 or sacrifice child [ 1144.286428] Killed process 2563 (syz-executor.5) total-vm:84904kB, anon-rss:60kB, file-rss:4kB, shmem-rss:0kB [ 1145.782425] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1145.821086] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1145.833128] CPU: 0 PID: 5659 Comm: syz-executor.0 Not tainted 4.14.222-syzkaller #0 [ 1145.843617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1145.853513] Call Trace: [ 1145.857198] dump_stack+0x1b2/0x281 [ 1145.860836] warn_alloc.cold+0x96/0x1cc [ 1145.864821] ? zone_watermark_ok_safe+0x220/0x220 [ 1145.869682] __alloc_pages_nodemask+0x2127/0x2720 [ 1145.874734] ? lock_acquire+0x170/0x3f0 [ 1145.878727] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1145.883975] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1145.889887] ? __mutex_unlock_slowpath+0x75/0x770 [ 1145.895085] ? __sanitizer_cov_trace_pc+0x34/0x50 [ 1145.900284] alloc_pages_current+0x155/0x260 [ 1145.904902] ion_page_pool_alloc+0x118/0x1b0 [ 1145.909524] ion_system_heap_allocate+0x133/0x8c0 [ 1145.914377] ? ion_alloc+0x187/0x810 [ 1145.918116] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1145.923574] ? ion_system_contig_heap_create+0x130/0x130 [ 1145.929985] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1145.935026] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1145.940281] ion_alloc+0x204/0x810 [ 1145.943897] ? ion_dma_buf_release+0x40/0x40 [ 1145.948399] ? __might_fault+0x177/0x1b0 [ 1145.952525] ion_ioctl+0xea/0x1f0 [ 1145.956337] ? ion_query_heaps+0x360/0x360 [ 1145.960577] ? ion_query_heaps+0x360/0x360 [ 1145.965949] do_vfs_ioctl+0x75a/0xff0 [ 1145.969761] ? ioctl_preallocate+0x1a0/0x1a0 [ 1145.974881] ? lock_downgrade+0x740/0x740 [ 1145.979048] ? __fget+0x225/0x360 [ 1145.982502] ? do_vfs_ioctl+0xff0/0xff0 [ 1145.986538] ? security_file_ioctl+0x83/0xb0 [ 1145.991212] SyS_ioctl+0x7f/0xb0 [ 1145.994878] ? do_vfs_ioctl+0xff0/0xff0 [ 1145.999197] do_syscall_64+0x1d5/0x640 [ 1146.003485] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1146.009475] RIP: 0033:0x465ef9 [ 1146.012759] RSP: 002b:00007f4604950188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1146.021781] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1146.029066] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1146.036347] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1146.043622] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1146.050919] R13: 00007ffe2560deff R14: 00007f4604950300 R15: 0000000000022000 [ 1146.076338] Mem-Info: [ 1146.078809] active_anon:12412 inactive_anon:37215 isolated_anon:0 [ 1146.078809] active_file:1299 inactive_file:1226 isolated_file:0 [ 1146.078809] unevictable:0 dirty:7 writeback:0 unstable:0 [ 1146.078809] slab_reclaimable:12544 slab_unreclaimable:116572 [ 1146.078809] mapped:37038 shmem:37649 pagetables:592 bounce:0 [ 1146.078809] free:329431 free_pcp:210 free_cma:0 [ 1146.113440] Node 0 active_anon:47760kB inactive_anon:99072kB active_file:3676kB inactive_file:3352kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:80796kB dirty:28kB writeback:0kB shmem:100416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1146.145498] Node 1 active_anon:1888kB inactive_anon:49788kB active_file:1520kB inactive_file:1552kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67356kB dirty:0kB writeback:0kB shmem:50180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1146.174138] Node 0 DMA free:11116kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1146.200836] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1146.205892] Node 0 DMA32 free:1022932kB min:36200kB low:45248kB high:54296kB active_anon:47760kB inactive_anon:98980kB active_file:3676kB inactive_file:3352kB unevictable:0kB writepending:28kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7104kB pagetables:2096kB bounce:0kB free_pcp:796kB local_pcp:52kB free_cma:0kB [ 1146.236901] lowmem_reserve[]: 0 0 0 0 0 [ 1146.240932] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1146.267790] lowmem_reserve[]: 0 0 0 0 0 [ 1146.271862] Node 1 Normal free:478424kB min:53696kB low:67120kB high:80544kB active_anon:1888kB inactive_anon:49788kB active_file:1520kB inactive_file:1552kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:272kB bounce:0kB free_pcp:680kB local_pcp:0kB free_cma:0kB [ 1146.301490] lowmem_reserve[]: 0 0 0 0 0 [ 1146.305492] Node 0 DMA: 69*4kB (UME) 59*8kB (U) 38*16kB (UME) 21*32kB (UME) 2*64kB (ME) 2*128kB (UE) 2*256kB (ME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11116kB [ 1146.321695] Node 0 DMA32: 25327*4kB (UME) 21783*8kB (UME) 16939*16kB (UME) 11318*32kB (UME) 2013*64kB (U) 89*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1049252kB [ 1146.338223] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1146.349439] Node 1 Normal: 21537*4kB (UM) 11838*8kB (UM) 9727*16kB (U) 5380*32kB (U) 944*64kB (U) 29*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 573284kB [ 1146.365374] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1146.377719] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1146.387006] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1146.396039] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1146.405073] 40178 total pagecache pages [ 1146.409520] 0 pages in swap cache [ 1146.412978] Swap cache stats: add 0, delete 0, find 0/0 [ 1146.418652] Free swap = 0kB [ 1146.421689] Total swap = 0kB [ 1146.424706] 2097051 pages RAM [ 1146.428411] 0 pages HighMem/MovableOnly [ 1146.432390] 363840 pages reserved [ 1146.435836] 0 pages cma reserved 18:05:45 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x101, 0x5, 0x1}) 18:05:45 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0xf027, 0xfffa, 0x8, 0x2, 0x1, 0x40, 0x5, 0x1, 0x0}, &(0x7f0000000180)=0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r1, 0x0, 0x99da}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x20}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000004c0)={0x0, 0x2, 0x6, &(0x7f0000000480)=0x4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000500)={r3, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r2) sendmsg$IPVS_CMD_SET_DEST(r2, 0x0, 0x8884) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0xfffb, 0x3ff, 0x6, 0x200, 0x7fff, 0x800, 0x401, 0xb4}, &(0x7f0000000100)=0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) 18:05:45 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) socketpair(0x0, 0x6, 0x6eb7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0xfe, "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"}, &(0x7f0000000200)=0x106) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 18:05:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x4, 0x8005, 0xff, 0x8}, &(0x7f0000000140)=0x10) eventfd2(0x890a, 0x1801) socketpair(0xc93ef11157126436, 0x804, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r1, &(0x7f0000000080)=@nfc, &(0x7f0000000240)=0x80) accept4$netrom(r3, &(0x7f00000001c0)={{0x3, @netrom}, [@netrom, @rose, @default, @remote, @null, @null, @bcast, @rose]}, &(0x7f0000000180)=0x48, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00'}) accept(r0, 0x0, 0x0) 18:05:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x4, 0x8005, 0xff, 0x8}, &(0x7f0000000140)=0x10) eventfd2(0x890a, 0x1801) socketpair(0xc93ef11157126436, 0x804, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r1, &(0x7f0000000080)=@nfc, &(0x7f0000000240)=0x80) accept4$netrom(r3, &(0x7f00000001c0)={{0x3, @netrom}, [@netrom, @rose, @default, @remote, @null, @null, @bcast, @rose]}, &(0x7f0000000180)=0x48, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00'}) accept(r0, 0x0, 0x0) 18:05:45 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000000, 0x1e}) accept(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@name, &(0x7f0000000080)=0x80) 18:05:45 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) socketpair(0x0, 0x6, 0x6eb7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0xfe, "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"}, &(0x7f0000000200)=0x106) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 18:05:45 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x4, 0x8005, 0xff, 0x8}, &(0x7f0000000140)=0x10) eventfd2(0x890a, 0x1801) socketpair(0xc93ef11157126436, 0x804, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r0, &(0x7f0000000080)=@nfc, &(0x7f0000000240)=0x80) accept4$netrom(r2, &(0x7f00000001c0)={{0x3, @netrom}, [@netrom, @rose, @default, @remote, @null, @null, @bcast, @rose]}, &(0x7f0000000180)=0x48, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00'}) 18:05:45 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0xfffffff7], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000100)=0x2) 18:05:45 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x4, 0x8005, 0xff, 0x8}, &(0x7f0000000140)=0x10) eventfd2(0x890a, 0x1801) socketpair(0xc93ef11157126436, 0x804, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r0, &(0x7f0000000080)=@nfc, &(0x7f0000000240)=0x80) accept4$netrom(r2, &(0x7f00000001c0)={{0x3, @netrom}, [@netrom, @rose, @default, @remote, @null, @null, @bcast, @rose]}, &(0x7f0000000180)=0x48, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) socket$l2tp6(0xa, 0x2, 0x73) 18:05:45 executing program 0: socketpair(0x0, 0x1, 0x0, &(0x7f0000000000)) 18:05:45 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x4, 0x8005, 0xff, 0x8}, &(0x7f0000000140)=0x10) eventfd2(0x890a, 0x1801) socketpair(0xc93ef11157126436, 0x804, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r0, &(0x7f0000000080)=@nfc, &(0x7f0000000240)=0x80) accept4$netrom(r2, &(0x7f00000001c0)={{0x3, @netrom}, [@netrom, @rose, @default, @remote, @null, @null, @bcast, @rose]}, &(0x7f0000000180)=0x48, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, 0x0, &(0x7f0000000c80)) 18:05:45 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x400006, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) [ 1147.152338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1147.192195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1147.230576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1147.241250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1147.270214] device bridge_slave_1 left promiscuous mode [ 1147.276121] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.285792] device bridge_slave_0 left promiscuous mode [ 1147.295400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.320211] device veth1_macvtap left promiscuous mode [ 1147.329348] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1147.341590] device veth0_macvtap left promiscuous mode [ 1147.357576] device veth1_vlan left promiscuous mode [ 1147.364702] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1147.376375] CPU: 1 PID: 5676 Comm: syz-executor.4 Not tainted 4.14.222-syzkaller #0 [ 1147.377701] device veth0_vlan left promiscuous mode [ 1147.385038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1147.400318] Call Trace: [ 1147.402939] dump_stack+0x1b2/0x281 [ 1147.407104] warn_alloc.cold+0x96/0x1cc [ 1147.411525] ? zone_watermark_ok_safe+0x220/0x220 [ 1147.416391] __alloc_pages_nodemask+0x2127/0x2720 [ 1147.421246] ? lock_acquire+0x170/0x3f0 [ 1147.425230] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1147.430255] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1147.435735] ? __mutex_unlock_slowpath+0x75/0x770 [ 1147.440820] ? alloc_pages_current+0x37/0x260 [ 1147.445325] alloc_pages_current+0x155/0x260 [ 1147.449754] ion_page_pool_alloc+0x118/0x1b0 [ 1147.454173] ion_system_heap_allocate+0x133/0x8c0 [ 1147.459312] ? ion_alloc+0x187/0x810 [ 1147.463830] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1147.471059] ? ion_system_contig_heap_create+0x130/0x130 [ 1147.476522] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1147.481662] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1147.486688] ion_alloc+0x204/0x810 [ 1147.490831] ? ion_dma_buf_release+0x40/0x40 [ 1147.495247] ? __might_fault+0x177/0x1b0 [ 1147.499599] ion_ioctl+0xea/0x1f0 [ 1147.503159] ? ion_query_heaps+0x360/0x360 [ 1147.508133] ? ion_query_heaps+0x360/0x360 [ 1147.513185] do_vfs_ioctl+0x75a/0xff0 [ 1147.517194] ? ioctl_preallocate+0x1a0/0x1a0 [ 1147.522649] ? lock_downgrade+0x740/0x740 [ 1147.526810] ? __fget+0x225/0x360 [ 1147.530665] ? do_vfs_ioctl+0xff0/0xff0 [ 1147.535532] ? security_file_ioctl+0x83/0xb0 [ 1147.541031] SyS_ioctl+0x7f/0xb0 [ 1147.544941] ? do_vfs_ioctl+0xff0/0xff0 [ 1147.548932] do_syscall_64+0x1d5/0x640 [ 1147.552852] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1147.559116] RIP: 0033:0x465ef9 [ 1147.562308] RSP: 002b:00007f6ac73d4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1147.570644] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1147.579069] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1147.587499] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1147.594809] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1147.602620] R13: 00007ffc5e29017f R14: 00007f6ac73d4300 R15: 0000000000022000 [ 1147.611674] Mem-Info: [ 1147.614252] active_anon:12452 inactive_anon:37213 isolated_anon:24 [ 1147.614252] active_file:1755 inactive_file:4574 isolated_file:12 [ 1147.614252] unevictable:0 dirty:13 writeback:25 unstable:0 [ 1147.614252] slab_reclaimable:12544 slab_unreclaimable:116361 [ 1147.614252] mapped:39228 shmem:37646 pagetables:679 bounce:0 [ 1147.614252] free:414979 free_pcp:65 free_cma:0 [ 1147.650302] Node 0 active_anon:47932kB inactive_anon:99064kB active_file:6500kB inactive_file:18024kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:91716kB dirty:48kB writeback:100kB shmem:100404kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1147.686649] Node 1 active_anon:1876kB inactive_anon:49788kB active_file:520kB inactive_file:272kB unevictable:0kB isolated(anon):96kB isolated(file):0kB mapped:65196kB dirty:4kB writeback:0kB shmem:50180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1147.724100] Node 0 DMA free:11180kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1147.750944] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1147.756960] Node 0 DMA32 free:674856kB min:36200kB low:45248kB high:54296kB active_anon:47928kB inactive_anon:98972kB active_file:6500kB inactive_file:17928kB unevictable:0kB writepending:248kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2444kB bounce:0kB free_pcp:204kB local_pcp:108kB free_cma:0kB [ 1147.817727] lowmem_reserve[]: 0 0 0 0 0 [ 1147.830228] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1147.884457] lowmem_reserve[]: 0 0 0 0 0 [ 1147.893055] Node 1 Normal free:1024556kB min:53696kB low:67120kB high:80544kB active_anon:1876kB inactive_anon:49788kB active_file:612kB inactive_file:384kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:272kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 1147.956027] lowmem_reserve[]: 0 0 0 0 0 [ 1147.965728] Node 0 DMA: 69*4kB (UME) 59*8kB (U) 38*16kB (UME) 21*32kB (UME) 3*64kB (UME) 2*128kB (UE) 2*256kB (ME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11180kB [ 1147.981902] device hsr_slave_1 left promiscuous mode [ 1147.989235] device hsr_slave_0 left promiscuous mode [ 1148.011050] Node 0 DMA32: 1*4kB (M) 5793*8kB (U) 16488*16kB (UE) 11364*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 673804kB [ 1148.030557] team0 (unregistering): Port device team_slave_1 removed [ 1148.039294] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1148.055663] team0 (unregistering): Port device team_slave_0 removed [ 1148.063121] Node 1 Normal: 20351*4kB (UM) 10614*8kB (UM) 8570*16kB (UM) 6609*32kB (UM) 398*64kB (U) 2412*128kB (U) 516*256kB (U) 141*512kB (U) 10*1024kB (U) 0*2048kB 0*4096kB = 1063660kB [ 1148.080125] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1148.093712] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1148.114930] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1148.136578] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1148.154575] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1148.173646] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1148.201350] 44108 total pagecache pages [ 1148.211363] 0 pages in swap cache [ 1148.221582] Swap cache stats: add 0, delete 0, find 0/0 [ 1148.234165] bond0 (unregistering): Released all slaves [ 1148.239427] Free swap = 0kB [ 1148.250403] Total swap = 0kB [ 1148.261301] 2097051 pages RAM [ 1148.271332] 0 pages HighMem/MovableOnly [ 1148.284669] 363840 pages reserved [ 1148.296034] 0 pages cma reserved [ 1148.640547] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1148.655256] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1148.661599] CPU: 1 PID: 5680 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1148.669407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1148.678771] Call Trace: [ 1148.681372] dump_stack+0x1b2/0x281 [ 1148.685029] warn_alloc.cold+0x96/0x1cc [ 1148.689009] ? zone_watermark_ok_safe+0x220/0x220 [ 1148.693872] __alloc_pages_nodemask+0x2127/0x2720 [ 1148.698736] ? _raw_spin_unlock_irq+0x24/0x80 [ 1148.703246] ? lock_acquire+0x170/0x3f0 [ 1148.708276] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1148.713564] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1148.719024] ? __mutex_unlock_slowpath+0x75/0x770 [ 1148.724230] alloc_pages_current+0x155/0x260 [ 1148.729521] ion_page_pool_alloc+0x118/0x1b0 [ 1148.733944] ion_system_heap_allocate+0x133/0x8c0 [ 1148.739008] ? ion_alloc+0x187/0x810 [ 1148.742735] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1148.748214] ? ion_system_contig_heap_create+0x130/0x130 [ 1148.753847] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1148.758872] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1148.763740] ion_alloc+0x204/0x810 [ 1148.767814] ? ion_dma_buf_release+0x40/0x40 [ 1148.772349] ? __might_fault+0x177/0x1b0 [ 1148.776463] ion_ioctl+0xea/0x1f0 [ 1148.780015] ? ion_query_heaps+0x360/0x360 [ 1148.785337] ? ion_query_heaps+0x360/0x360 [ 1148.789762] do_vfs_ioctl+0x75a/0xff0 [ 1148.793838] ? ioctl_preallocate+0x1a0/0x1a0 [ 1148.798295] ? lock_downgrade+0x740/0x740 [ 1148.802484] ? __fget+0x225/0x360 [ 1148.805944] ? do_vfs_ioctl+0xff0/0xff0 [ 1148.810832] ? security_file_ioctl+0x83/0xb0 [ 1148.815322] SyS_ioctl+0x7f/0xb0 [ 1148.820348] ? do_vfs_ioctl+0xff0/0xff0 [ 1148.824378] do_syscall_64+0x1d5/0x640 [ 1148.828288] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1148.835665] RIP: 0033:0x465ef9 [ 1148.839130] RSP: 002b:00007f785ae94188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1148.848170] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1148.857546] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1148.864831] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1148.872744] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1148.880022] R13: 00007ffc771f8d7f R14: 00007f785ae94300 R15: 0000000000022000 [ 1148.906041] Mem-Info: [ 1148.912658] active_anon:12473 inactive_anon:37213 isolated_anon:0 [ 1148.912658] active_file:1826 inactive_file:4521 isolated_file:12 [ 1148.912658] unevictable:0 dirty:30 writeback:0 unstable:0 [ 1148.912658] slab_reclaimable:12544 slab_unreclaimable:115960 [ 1148.912658] mapped:56760 shmem:37646 pagetables:640 bounce:0 [ 1148.912658] free:275968 free_pcp:31 free_cma:0 [ 1148.954075] Node 0 active_anon:48064kB inactive_anon:99064kB active_file:6972kB inactive_file:17860kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:162080kB dirty:116kB writeback:0kB shmem:100404kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1148.986813] Node 1 active_anon:1828kB inactive_anon:49788kB active_file:332kB inactive_file:224kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:64960kB dirty:4kB writeback:0kB shmem:50180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1149.020017] Node 0 DMA free:11116kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1149.079962] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1149.094066] Node 0 DMA32 free:495916kB min:36200kB low:45248kB high:54296kB active_anon:48112kB inactive_anon:98972kB active_file:7068kB inactive_file:17896kB unevictable:0kB writepending:192kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2640kB bounce:0kB free_pcp:152kB local_pcp:136kB free_cma:0kB [ 1149.162245] lowmem_reserve[]: 0 0 0 0 0 [ 1149.173626] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1149.230630] lowmem_reserve[]: 0 0 0 0 0 [ 1149.239195] Node 1 Normal free:515248kB min:53696kB low:67120kB high:80544kB active_anon:1828kB inactive_anon:49788kB active_file:332kB inactive_file:232kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:272kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1149.302236] lowmem_reserve[]: 0 0 0 0 0 [ 1149.310732] Node 0 DMA: 69*4kB (UME) 59*8kB (U) 38*16kB (UME) 21*32kB (UME) 2*64kB (ME) 2*128kB (UE) 2*256kB (ME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11116kB [ 1149.349065] Node 0 DMA32: 5*4kB (M) 3*8kB (M) 186*16kB (UME) 11397*32kB (UE) 6*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 368108kB [ 1149.379172] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1149.402187] Node 1 Normal: 20370*4kB (UM) 10625*8kB (UM) 8578*16kB (UM) 6610*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 515248kB [ 1149.431785] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1149.451832] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1149.470680] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1149.489655] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1149.508287] 43877 total pagecache pages [ 1149.517003] 0 pages in swap cache [ 1149.524177] Swap cache stats: add 0, delete 0, find 0/0 [ 1149.537015] Free swap = 0kB [ 1149.543372] Total swap = 0kB [ 1149.551001] 2097051 pages RAM [ 1149.566355] 0 pages HighMem/MovableOnly [ 1149.570367] 363840 pages reserved [ 1149.574682] 0 pages cma reserved [ 1149.670999] IPVS: ftp: loaded support on port[0] = 21 [ 1149.875105] IPVS: ftp: loaded support on port[0] = 21 [ 1149.886930] kworker/dying (9393) used greatest stack depth: 23240 bytes left [ 1150.019082] chnl_net:caif_netlink_parms(): no params data found [ 1150.275970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.284240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.296017] device bridge_slave_0 entered promiscuous mode [ 1150.352726] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.359948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.376067] device bridge_slave_1 entered promiscuous mode [ 1150.387590] chnl_net:caif_netlink_parms(): no params data found [ 1150.431406] syz-executor.5: page allocation failure: order:5, mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 1150.442124] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1150.447513] CPU: 1 PID: 5701 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1150.455387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1150.464747] Call Trace: [ 1150.467333] dump_stack+0x1b2/0x281 [ 1150.470960] warn_alloc.cold+0x96/0x1cc [ 1150.474940] ? zone_watermark_ok_safe+0x220/0x220 [ 1150.479774] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1150.485219] ? wake_all_kswapds+0x175/0x360 [ 1150.489558] __alloc_pages_nodemask+0x2127/0x2720 [ 1150.494410] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1150.499419] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 1150.504450] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1150.509283] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1150.514147] ? cache_alloc_refill+0x2fa/0x350 [ 1150.518656] ? ____cache_alloc_node+0x156/0x1d0 [ 1150.523319] cache_grow_begin+0x91/0x630 [ 1150.527394] ? cache_grow_begin+0x91/0x630 [ 1150.531623] fallback_alloc+0x207/0x2c0 [ 1150.535586] __kmalloc+0x213/0x400 [ 1150.539115] ? batadv_hash_new+0xaa/0x270 [ 1150.543362] batadv_hash_new+0xaa/0x270 [ 1150.547331] ? batadv_hash_set_lock_class+0x9a/0xf0 [ 1150.552351] batadv_tt_init+0x2b2/0x390 [ 1150.556417] batadv_mesh_init+0x478/0x630 [ 1150.560556] batadv_softif_init_late+0xa26/0xc90 [ 1150.565396] ? batadv_get_strings+0x40/0x40 [ 1150.569716] ? dev_valid_name+0x1a0/0x1a0 [ 1150.573871] ? batadv_get_strings+0x40/0x40 [ 1150.578182] register_netdevice+0x291/0xe40 [ 1150.582497] ? netdev_change_features+0xa0/0xa0 [ 1150.587166] ? rtnl_create_link+0x129/0x890 [ 1150.591477] rtnl_newlink+0x14dc/0x1830 [ 1150.595438] ? rtnl_newlink+0x43d/0x1830 [ 1150.599497] ? mark_held_locks+0xa6/0xf0 [ 1150.603545] ? rtnl_dellink+0x6a0/0x6a0 [ 1150.607510] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1150.612522] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1150.617040] ? rtnl_dellink+0x6a0/0x6a0 [ 1150.621002] rtnetlink_rcv_msg+0x3be/0xb10 [ 1150.625233] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1150.629761] ? __netlink_lookup+0x345/0x5d0 [ 1150.634082] netlink_rcv_skb+0x125/0x390 [ 1150.638135] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1150.642623] ? netlink_ack+0x9a0/0x9a0 [ 1150.646940] netlink_unicast+0x437/0x610 [ 1150.651082] ? netlink_sendskb+0xd0/0xd0 [ 1150.655129] ? __check_object_size+0x179/0x230 [ 1150.659703] netlink_sendmsg+0x62e/0xb80 [ 1150.663755] ? nlmsg_notify+0x170/0x170 [ 1150.667736] ? security_socket_sendmsg+0x83/0xb0 [ 1150.672481] ? nlmsg_notify+0x170/0x170 [ 1150.676462] sock_sendmsg+0xb5/0x100 [ 1150.680166] SyS_sendto+0x1c7/0x2c0 [ 1150.683782] ? SyS_getpeername+0x220/0x220 [ 1150.688016] ? sock_poll+0x220/0x220 [ 1150.691723] ? SyS_socket+0x12f/0x1b0 [ 1150.695513] ? move_addr_to_kernel+0x60/0x60 [ 1150.699913] ? do_syscall_64+0x4c/0x640 [ 1150.703889] ? SyS_getpeername+0x220/0x220 [ 1150.708135] do_syscall_64+0x1d5/0x640 [ 1150.712033] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1150.717219] RIP: 0033:0x41938c [ 1150.720495] RSP: 002b:00007ffc41d45480 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1150.728194] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041938c [ 1150.735477] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1150.742826] RBP: 0000000000000000 R08: 00007ffc41d454d4 R09: 000000000000000c [ 1150.750086] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1150.757347] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1150.764891] Mem-Info: [ 1150.767318] active_anon:12534 inactive_anon:37219 isolated_anon:0 [ 1150.767318] active_file:2082 inactive_file:4908 isolated_file:0 [ 1150.767318] unevictable:0 dirty:52 writeback:0 unstable:0 [ 1150.767318] slab_reclaimable:12527 slab_unreclaimable:115394 [ 1150.767318] mapped:57188 shmem:37654 pagetables:691 bounce:0 [ 1150.767318] free:59482 free_pcp:316 free_cma:0 [ 1150.801179] Node 0 active_anon:48208kB inactive_anon:99088kB active_file:7816kB inactive_file:19280kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163856kB dirty:200kB writeback:0kB shmem:100436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1150.830000] Node 1 active_anon:1928kB inactive_anon:49788kB active_file:512kB inactive_file:352kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:64896kB dirty:8kB writeback:0kB shmem:50180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1150.857340] Node 0 DMA free:11004kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:92kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1150.883812] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1150.888935] Node 0 DMA32 free:44712kB min:36200kB low:45248kB high:54296kB active_anon:48208kB inactive_anon:98996kB active_file:7816kB inactive_file:19280kB unevictable:0kB writepending:200kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7104kB pagetables:2492kB bounce:0kB free_pcp:576kB local_pcp:260kB free_cma:0kB [ 1150.920292] lowmem_reserve[]: 0 0 0 0 0 [ 1150.925266] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1150.951532] lowmem_reserve[]: 0 0 0 0 0 [ 1150.955612] Node 1 Normal free:182212kB min:53696kB low:67120kB high:80544kB active_anon:1928kB inactive_anon:49788kB active_file:512kB inactive_file:352kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:272kB bounce:0kB free_pcp:688kB local_pcp:208kB free_cma:0kB [ 1150.985818] lowmem_reserve[]: 0 0 0 0 0 [ 1150.989803] Node 0 DMA: 3*4kB (MEH) 46*8kB (UH) 40*16kB (UMEH) 22*32kB (UMEH) 5*64kB (UMEH) 2*128kB (UE) 2*256kB (ME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11004kB [ 1151.005955] Node 0 DMA32: 16*4kB (ME) 150*8kB (UMEH) 111*16kB (MEH) 1276*32kB (UEH) 11*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44576kB [ 1151.020157] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1151.031908] Node 1 Normal: 1*4kB (M) 0*8kB 0*16kB 5689*32kB (UM) 2*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 182180kB [ 1151.045929] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1151.055524] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1151.064993] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1151.074205] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1151.083129] 44526 total pagecache pages [ 1151.087205] 0 pages in swap cache [ 1151.091191] Swap cache stats: add 0, delete 0, find 0/0 [ 1151.097147] Free swap = 0kB [ 1151.100151] Total swap = 0kB [ 1151.103332] 2097051 pages RAM [ 1151.106424] 0 pages HighMem/MovableOnly [ 1151.110564] 363840 pages reserved [ 1151.114078] 0 pages cma reserved [ 1151.726409] Bluetooth: hci0 command 0x0409 tx timeout [ 1151.731743] Bluetooth: hci5 command 0x0409 tx timeout [ 1151.930256] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 1151.940525] ------------[ cut here ]------------ [ 1151.945299] WARNING: CPU: 0 PID: 5701 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 1151.954414] Kernel panic - not syncing: panic_on_warn set ... [ 1151.954414] [ 1151.961882] CPU: 0 PID: 5701 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1151.969682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1151.979039] Call Trace: [ 1151.981642] dump_stack+0x1b2/0x281 [ 1151.985294] panic+0x1f9/0x42d [ 1151.988485] ? add_taint.cold+0x16/0x16 [ 1151.992559] ? debug_print_object.cold+0xa7/0xdb [ 1151.998031] ? debug_print_object.cold+0xa7/0xdb [ 1152.002788] __warn.cold+0x20/0x44 [ 1152.007286] ? ist_end_non_atomic+0x10/0x10 [ 1152.011635] ? debug_print_object.cold+0xa7/0xdb [ 1152.016393] report_bug+0x208/0x250 [ 1152.020029] do_error_trap+0x195/0x2d0 [ 1152.023921] ? math_error+0x2d0/0x2d0 [ 1152.030092] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1152.035308] invalid_op+0x1b/0x40 [ 1152.038767] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 1152.044128] RSP: 0018:ffff88803c1bf248 EFLAGS: 00010086 [ 1152.049493] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 1152.056810] RDX: 0000000000000000 RSI: ffffffff878bbb40 RDI: ffffed1007837e3f [ 1152.064088] RBP: ffffffff878b6e00 R08: 0000000000000061 R09: 0000000000000001 [ 1152.072231] R10: 0000000000000000 R11: ffff88802218e0c0 R12: 0000000000000000 [ 1152.079508] R13: 0000000000000000 R14: ffff888039cf6970 R15: 1ffff11007837e52 [ 1152.086827] ? debug_print_object.cold+0xa7/0xdb [ 1152.091684] debug_object_assert_init+0x1d3/0x2d0 [ 1152.096883] ? debug_object_active_state+0x330/0x330 [ 1152.102160] ? rtnl_newlink+0x14dc/0x1830 [ 1152.106333] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 1152.110740] ? netlink_rcv_skb+0x125/0x390 [ 1152.114976] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1152.120356] del_timer+0x5d/0xe0 [ 1152.123714] ? process_timeout+0x20/0x20 [ 1152.127772] try_to_grab_pending+0x243/0x610 [ 1152.132174] __cancel_work_timer+0x90/0x460 [ 1152.136488] ? work_on_cpu_safe+0x70/0x70 [ 1152.140627] ? batadv_tvlv_handler_get+0x1db/0x2b0 [ 1152.145579] batadv_nc_mesh_free+0x41/0x120 [ 1152.150507] batadv_mesh_free+0x70/0x150 [ 1152.154582] batadv_mesh_init+0x561/0x630 [ 1152.158815] batadv_softif_init_late+0xa26/0xc90 [ 1152.164182] ? batadv_get_strings+0x40/0x40 [ 1152.168587] ? dev_valid_name+0x1a0/0x1a0 [ 1152.172742] ? batadv_get_strings+0x40/0x40 [ 1152.177081] register_netdevice+0x291/0xe40 [ 1152.181407] ? netdev_change_features+0xa0/0xa0 [ 1152.186178] ? rtnl_create_link+0x129/0x890 [ 1152.190494] rtnl_newlink+0x14dc/0x1830 [ 1152.194460] ? rtnl_newlink+0x43d/0x1830 [ 1152.198517] ? mark_held_locks+0xa6/0xf0 [ 1152.202573] ? rtnl_dellink+0x6a0/0x6a0 [ 1152.206535] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1152.211728] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1152.216278] ? rtnl_dellink+0x6a0/0x6a0 [ 1152.220252] rtnetlink_rcv_msg+0x3be/0xb10 [ 1152.224483] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1152.229003] ? __netlink_lookup+0x345/0x5d0 [ 1152.233407] netlink_rcv_skb+0x125/0x390 [ 1152.237473] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1152.241966] ? netlink_ack+0x9a0/0x9a0 [ 1152.245879] netlink_unicast+0x437/0x610 [ 1152.249940] ? netlink_sendskb+0xd0/0xd0 [ 1152.254785] ? __check_object_size+0x179/0x230 [ 1152.259373] netlink_sendmsg+0x62e/0xb80 [ 1152.263434] ? nlmsg_notify+0x170/0x170 [ 1152.267406] ? security_socket_sendmsg+0x83/0xb0 [ 1152.272153] ? nlmsg_notify+0x170/0x170 [ 1152.276134] sock_sendmsg+0xb5/0x100 [ 1152.279940] SyS_sendto+0x1c7/0x2c0 [ 1152.283558] ? SyS_getpeername+0x220/0x220 [ 1152.287790] ? sock_poll+0x220/0x220 [ 1152.291498] ? SyS_socket+0x12f/0x1b0 [ 1152.295907] ? move_addr_to_kernel+0x60/0x60 [ 1152.300317] ? do_syscall_64+0x4c/0x640 [ 1152.304297] ? SyS_getpeername+0x220/0x220 [ 1152.308530] do_syscall_64+0x1d5/0x640 [ 1152.312416] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1152.317858] RIP: 0033:0x41938c [ 1152.321032] RSP: 002b:00007ffc41d45480 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1152.328728] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041938c [ 1152.335993] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1152.343260] RBP: 0000000000000000 R08: 00007ffc41d454d4 R09: 000000000000000c [ 1152.350532] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1152.357801] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1152.366083] Kernel Offset: disabled [ 1152.369945] Rebooting in 86400 seconds..