n:0 [ 990.609145] active_file:125 inactive_file:451 isolated_file:0 [ 990.609145] unevictable:0 dirty:5 writeback:0 unstable:0 [ 990.609145] slab_reclaimable:13103 slab_unreclaimable:121825 [ 990.609145] mapped:44378 shmem:35599 pagetables:660 bounce:0 [ 990.609145] free:107536 free_pcp:383 free_cma:0 [ 990.610624] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 990.686498] Node 0 active_anon:44972kB inactive_anon:89528kB active_file:416kB inactive_file:1388kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138052kB dirty:0kB writeback:0kB shmem:90964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 990.706412] 36208 total pagecache pages [ 990.736459] Node 1 active_anon:1692kB inactive_anon:51176kB active_file:84kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39460kB dirty:20kB writeback:0kB shmem:51432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 990.739770] 0 pages in swap cache [ 990.806429] Node 0 DMA free:11404kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:24kB active_file:56kB inactive_file:16kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 990.810105] Swap cache stats: add 0, delete 0, find 0/0 [ 990.856439] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 990.861511] Node 0 DMA32 free:77764kB min:36200kB low:45248kB high:54296kB active_anon:44964kB inactive_anon:89504kB active_file:116kB inactive_file:1808kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:2172kB bounce:0kB free_pcp:736kB local_pcp:656kB free_cma:0kB [ 990.876396] Free swap = 0kB [ 990.908397] Total swap = 0kB [ 990.911438] 2097051 pages RAM [ 990.914533] 0 pages HighMem/MovableOnly [ 990.916433] lowmem_reserve[]: 0 0 0 0 0 [ 990.926861] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 990.936393] 363840 pages reserved [ 990.980629] 0 pages cma reserved [ 990.984011] Out of memory (oom_kill_allocating_task): Kill process 22042 (syz-executor.3) score 0 or sacrifice child [ 990.986424] lowmem_reserve[]: 0 0 0 0 0 [ 991.006437] Node 1 Normal free:473600kB min:53696kB low:67120kB high:80544kB active_anon:1696kB inactive_anon:51176kB active_file:96kB inactive_file:532kB unevictable:0kB writepending:32kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:468kB bounce:0kB free_pcp:760kB local_pcp:660kB free_cma:0kB [ 991.010104] Killed process 22042 (syz-executor.3) total-vm:93100kB, anon-rss:80kB, file-rss:33604kB, shmem-rss:0kB [ 991.066400] lowmem_reserve[]: 0 0 0 0 0 [ 991.070422] Node 0 DMA: 32*4kB (UME) 10*8kB (UE) 9*16kB (UM) 10*32kB (UME) 8*64kB (UME) 2*128kB (UE) 3*256kB (UE) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (U) 0*4096kB = 11424kB [ 991.102549] oom_reaper: reaped process 22042 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 991.106405] Node 0 DMA32: 92*4kB (UE) 147*8kB (UE) 162*16kB (UME) 1080*32kB (UME) 610*64kB (U) 159*128kB (U) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 99112kB [ 991.156394] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 991.176656] Node 1 Normal: 12960*4kB (UM) 5534*8kB (UM) 5640*16kB (UM) 5659*32kB (UM) 2220*64kB (UM) 295*128kB (U) 94*256kB (U) 32*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 587728kB [ 991.206420] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 991.215300] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 991.250020] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 991.258916] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 991.271269] 36382 total pagecache pages [ 991.275274] 0 pages in swap cache [ 991.278760] Swap cache stats: add 0, delete 0, find 0/0 [ 991.284116] Free swap = 0kB [ 991.290650] Total swap = 0kB [ 991.293681] 2097051 pages RAM [ 991.296838] 0 pages HighMem/MovableOnly [ 991.300802] 363840 pages reserved [ 991.304330] 0 pages cma reserved [ 991.437375] syz-executor.3 (22042) used greatest stack depth: 24712 bytes left 01:28:36 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6}) 01:28:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x0, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:28:36 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) [ 991.977797] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 992.005905] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 992.031204] CPU: 0 PID: 22302 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 992.039119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 992.048476] Call Trace: [ 992.051066] dump_stack+0x1b2/0x281 [ 992.054696] warn_alloc.cold+0x96/0x1cc [ 992.058687] ? zone_watermark_ok_safe+0x220/0x220 [ 992.063545] __alloc_pages_nodemask+0x2127/0x2720 [ 992.068387] ? io_schedule_timeout+0x140/0x140 [ 992.072972] ? lock_acquire+0x170/0x3f0 [ 992.076953] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 992.081798] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 992.087255] ? __mutex_unlock_slowpath+0x75/0x770 [ 992.092100] alloc_pages_current+0x155/0x260 [ 992.096513] ion_page_pool_alloc+0x118/0x1b0 [ 992.101706] ion_system_heap_allocate+0x133/0x8c0 [ 992.106549] ? ion_alloc+0x187/0x810 [ 992.110264] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 992.115714] ? ion_system_contig_heap_create+0x130/0x130 [ 992.121166] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 992.126182] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 992.131024] ion_alloc+0x204/0x810 [ 992.134566] ? ion_dma_buf_release+0x40/0x40 [ 992.138973] ? __might_fault+0x177/0x1b0 [ 992.143032] ion_ioctl+0xea/0x1f0 [ 992.146481] ? ion_query_heaps+0x360/0x360 [ 992.150737] ? ion_query_heaps+0x360/0x360 [ 992.154968] do_vfs_ioctl+0x75a/0xff0 [ 992.158771] ? ioctl_preallocate+0x1a0/0x1a0 [ 992.163177] ? lock_downgrade+0x740/0x740 [ 992.167326] ? __fget+0x225/0x360 [ 992.170877] ? do_vfs_ioctl+0xff0/0xff0 [ 992.174849] ? security_file_ioctl+0x83/0xb0 [ 992.179258] SyS_ioctl+0x7f/0xb0 [ 992.182619] ? do_vfs_ioctl+0xff0/0xff0 [ 992.186593] do_syscall_64+0x1d5/0x640 [ 992.190485] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 992.195673] RIP: 0033:0x465ef9 [ 992.198859] RSP: 002b:00007f9c72039188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 992.206565] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 992.213916] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 992.221182] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 992.228443] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 992.235707] R13: 00007ffc8293d1af R14: 00007f9c72039300 R15: 0000000000022000 [ 992.262941] Mem-Info: [ 992.265419] active_anon:11711 inactive_anon:35171 isolated_anon:0 [ 992.265419] active_file:1874 inactive_file:4379 isolated_file:12 [ 992.265419] unevictable:0 dirty:0 writeback:0 unstable:0 [ 992.265419] slab_reclaimable:13112 slab_unreclaimable:119759 [ 992.265419] mapped:39583 shmem:35592 pagetables:639 bounce:0 [ 992.265419] free:70065 free_pcp:433 free_cma:0 [ 992.303519] Node 0 active_anon:44844kB inactive_anon:89500kB active_file:4kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:134640kB dirty:0kB writeback:0kB shmem:90928kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 992.339256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.345852] Node 1 active_anon:2000kB inactive_anon:51184kB active_file:7492kB inactive_file:17412kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:23692kB dirty:0kB writeback:0kB shmem:51440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 992.380357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.389804] device bridge_slave_1 left promiscuous mode [ 992.399823] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.408579] device bridge_slave_0 left promiscuous mode [ 992.414001] Node 0 DMA free:11120kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 992.446912] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.455845] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 992.482510] Node 0 DMA32 free:67628kB min:36200kB low:45248kB high:54296kB active_anon:44836kB inactive_anon:89480kB active_file:4kB inactive_file:104kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2088kB bounce:0kB free_pcp:884kB local_pcp:156kB free_cma:0kB [ 992.573254] lowmem_reserve[]: 0 0 0 0 0 [ 992.585922] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 992.630833] device hsr_slave_1 left promiscuous mode [ 992.639359] lowmem_reserve[]: 0 [ 992.639401] device hsr_slave_0 left promiscuous mode [ 992.652034] 0 0 0 0 [ 992.654389] Node 1 Normal free:368552kB min:53696kB low:67120kB high:80544kB active_anon:2000kB inactive_anon:51184kB active_file:7400kB inactive_file:17640kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:468kB bounce:0kB free_pcp:952kB local_pcp:228kB free_cma:0kB [ 992.698350] team0 (unregistering): Port device team_slave_1 removed [ 992.712192] team0 (unregistering): Port device team_slave_0 removed [ 992.722067] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 992.732639] lowmem_reserve[]: 0 0 0 0 0 [ 992.738323] Node 0 DMA: 4*4kB (ME) 5*8kB (UME) 3*16kB (UM) 6*32kB (UME) 7*64kB (UME) 3*128kB (UME) 3*256kB (UE) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (U) 0*4096kB = 11112kB [ 992.761897] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 992.778537] Node 0 DMA32: 433*4kB (UME) 144*8kB (UME) 131*16kB (UME) 7*32kB (UE) 1*64kB (U) 29*128kB (U) 57*256kB (U) 13*512kB (U) 15*1024kB (U) 0*2048kB 0*4096kB = 45588kB [ 992.818501] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 992.843014] bond0 (unregistering): Released all slaves [ 992.852655] Node 1 Normal: 6416*4kB (U) 4897*8kB (UM) 3870*16kB (UM) 5083*32kB (UM) 1151*64kB (UM) 143*128kB (UM) 44*256kB (UM) 31*512kB (U) 42*1024kB (U) 0*2048kB 0*4096kB = 451528kB [ 992.881595] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 992.894527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 992.903591] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 992.937307] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 992.945933] 41943 total pagecache pages [ 992.989098] 0 pages in swap cache [ 992.992606] Swap cache stats: add 0, delete 0, find 0/0 [ 993.029059] Free swap = 0kB [ 993.032108] Total swap = 0kB [ 993.035123] 2097051 pages RAM [ 993.049620] 0 pages HighMem/MovableOnly [ 993.053619] 363840 pages reserved [ 993.069111] 0 pages cma reserved 01:28:38 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:28:38 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', 0xffffffffffffffff) 01:28:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6}) 01:28:38 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) 01:28:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6}) 01:28:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x1, 0x41}) memfd_create(&(0x7f0000000000)='/dev/ion\x00', 0xa) 01:28:38 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', 0xffffffffffffffff) 01:28:38 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) ioctl$SIOCRSACCEPT(r1, 0x89e3) 01:28:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x1, 0x41}) memfd_create(&(0x7f0000000000)='/dev/ion\x00', 0xa) 01:28:38 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', 0xffffffffffffffff) [ 994.400226] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 994.425186] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 994.435872] CPU: 1 PID: 22336 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 994.443776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 994.453123] Call Trace: [ 994.455717] dump_stack+0x1b2/0x281 [ 994.459471] warn_alloc.cold+0x96/0x1cc [ 994.463445] ? zone_watermark_ok_safe+0x220/0x220 [ 994.468304] __alloc_pages_nodemask+0x2127/0x2720 [ 994.473146] ? io_schedule_timeout+0x140/0x140 [ 994.477731] ? lock_acquire+0x170/0x3f0 [ 994.481717] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 994.486564] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 994.492013] ? __mutex_unlock_slowpath+0x75/0x770 [ 994.496865] alloc_pages_current+0x155/0x260 [ 994.501279] ion_page_pool_alloc+0x118/0x1b0 [ 994.505690] ion_system_heap_allocate+0x133/0x8c0 [ 994.510530] ? ion_alloc+0x187/0x810 [ 994.514242] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 994.519691] ? ion_system_contig_heap_create+0x130/0x130 [ 994.525140] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 994.530155] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 994.534999] ion_alloc+0x204/0x810 [ 994.538539] ? ion_dma_buf_release+0x40/0x40 [ 994.542949] ? __might_fault+0x177/0x1b0 [ 994.547011] ion_ioctl+0xea/0x1f0 [ 994.550460] ? ion_query_heaps+0x360/0x360 [ 994.554692] ? ion_query_heaps+0x360/0x360 [ 994.558924] do_vfs_ioctl+0x75a/0xff0 [ 994.562726] ? ioctl_preallocate+0x1a0/0x1a0 [ 994.567131] ? lock_downgrade+0x740/0x740 [ 994.571277] ? __fget+0x225/0x360 [ 994.574725] ? do_vfs_ioctl+0xff0/0xff0 [ 994.578698] ? security_file_ioctl+0x83/0xb0 [ 994.583103] SyS_ioctl+0x7f/0xb0 [ 994.586465] ? do_vfs_ioctl+0xff0/0xff0 [ 994.590438] do_syscall_64+0x1d5/0x640 [ 994.594330] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 994.599514] RIP: 0033:0x465ef9 [ 994.602695] RSP: 002b:00007fba3a452188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 994.610399] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 994.617661] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 994.624924] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 994.632187] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 994.639448] R13: 00007ffea651953f R14: 00007fba3a452300 R15: 0000000000022000 [ 994.661322] Mem-Info: [ 994.663833] active_anon:11753 inactive_anon:35171 isolated_anon:12 [ 994.663833] active_file:2359 inactive_file:4460 isolated_file:12 [ 994.663833] unevictable:0 dirty:51 writeback:0 unstable:0 [ 994.663833] slab_reclaimable:13147 slab_unreclaimable:118966 [ 994.663833] mapped:48641 shmem:35592 pagetables:728 bounce:0 [ 994.663833] free:45783 free_pcp:221 free_cma:0 [ 994.698577] Node 0 active_anon:45048kB inactive_anon:89504kB active_file:424kB inactive_file:1536kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:140736kB dirty:76kB writeback:0kB shmem:90932kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 994.727586] Node 1 active_anon:1964kB inactive_anon:51180kB active_file:9012kB inactive_file:16304kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:53828kB dirty:128kB writeback:0kB shmem:51436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 994.756501] Node 0 DMA free:11796kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 994.784061] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 994.794662] Node 0 DMA32 free:90908kB min:36200kB low:45248kB high:54296kB active_anon:45040kB inactive_anon:89484kB active_file:424kB inactive_file:1536kB unevictable:0kB writepending:76kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2148kB bounce:0kB free_pcp:188kB local_pcp:0kB free_cma:0kB [ 994.855624] lowmem_reserve[]: 0 0 0 0 0 [ 994.864127] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 994.945304] lowmem_reserve[]: 0 0 0 0 0 [ 994.949919] Node 1 Normal free:249260kB min:53696kB low:67120kB high:80544kB active_anon:2128kB inactive_anon:51180kB active_file:8932kB inactive_file:16816kB unevictable:0kB writepending:128kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:884kB bounce:0kB free_pcp:680kB local_pcp:0kB free_cma:0kB [ 994.982078] lowmem_reserve[]: 0 0 0 0 0 [ 995.004919] Node 0 DMA: 123*4kB (UME) 18*8kB (UME) 10*16kB (UM) 5*32kB (UME) 9*64kB (UME) 4*128kB (UME) 3*256kB (UE) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (U) 0*4096kB = 12028kB [ 995.056003] Node 0 DMA32: 7*4kB (UME) 40*8kB (ME) 112*16kB (UE) 6*32kB (ME) 533*64kB (UM) 63*128kB (UM) 2*256kB (UM) 1*512kB (M) 4*1024kB (U) 0*2048kB 0*4096kB = 49628kB [ 995.085863] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 995.106248] Node 1 Normal: 2143*4kB (UM) 4295*8kB (UM) 3087*16kB (UM) 1700*32kB (UM) 1783*64kB (UM) 782*128kB (U) 250*256kB (U) 28*512kB (U) 62*1024kB (U) 3*2048kB (U) 0*4096kB = 508900kB [ 995.138831] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 995.160640] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 995.185834] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 995.194703] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 995.220741] 42398 total pagecache pages [ 995.232014] 0 pages in swap cache [ 995.239890] Swap cache stats: add 0, delete 0, find 0/0 [ 995.253127] Free swap = 0kB [ 995.259496] Total swap = 0kB [ 995.265854] 2097051 pages RAM [ 995.272270] 0 pages HighMem/MovableOnly [ 995.283637] 363840 pages reserved [ 995.290488] 0 pages cma reserved [ 996.818212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 996.824963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.833084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 996.840252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 996.850066] device bridge_slave_1 left promiscuous mode [ 996.856572] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.863928] device bridge_slave_0 left promiscuous mode [ 996.870541] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.880570] device veth1_macvtap left promiscuous mode [ 996.886586] device veth0_macvtap left promiscuous mode [ 996.891982] device veth1_vlan left promiscuous mode [ 996.898205] device veth0_vlan left promiscuous mode [ 997.017904] device hsr_slave_1 left promiscuous mode [ 997.031698] device hsr_slave_0 left promiscuous mode [ 997.048998] team0 (unregistering): Port device team_slave_1 removed [ 997.066204] team0 (unregistering): Port device team_slave_0 removed [ 997.080834] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 997.091699] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 997.132454] bond0 (unregistering): Released all slaves [ 999.203754] IPVS: ftp: loaded support on port[0] = 21 [ 999.261112] IPVS: ftp: loaded support on port[0] = 21 [ 999.404795] chnl_net:caif_netlink_parms(): no params data found [ 999.534801] chnl_net:caif_netlink_parms(): no params data found [ 999.565373] Bluetooth: hci2 command 0x0409 tx timeout [ 999.565446] Bluetooth: hci0 command 0x0409 tx timeout [ 999.581010] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.588652] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.596411] device bridge_slave_0 entered promiscuous mode [ 999.603554] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.615160] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.622916] device bridge_slave_1 entered promiscuous mode [ 999.660700] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 999.671168] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 999.730641] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 999.741583] team0: Port device team_slave_0 added [ 999.748670] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.755049] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.767642] device bridge_slave_0 entered promiscuous mode [ 999.774650] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 999.787295] team0: Port device team_slave_1 added [ 999.792454] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.802754] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.811308] device bridge_slave_1 entered promiscuous mode [ 999.864409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.872464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.905644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.920465] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 999.930022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.936959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.962908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.975561] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 999.991304] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 999.999151] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1000.014693] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1000.022135] team0: Port device team_slave_0 added [ 1000.042469] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1000.050713] team0: Port device team_slave_1 added [ 1000.059550] device hsr_slave_0 entered promiscuous mode [ 1000.065688] device hsr_slave_1 entered promiscuous mode [ 1000.087031] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1000.094130] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1000.101943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.108365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.133688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.153904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.160418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.185783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1000.196697] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1000.211296] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1000.241805] device hsr_slave_0 entered promiscuous mode [ 1000.247766] device hsr_slave_1 entered promiscuous mode [ 1000.261439] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1000.272444] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1000.404043] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1000.426726] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1000.453455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.462467] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1000.471470] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1000.479722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1000.487458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1000.497457] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1000.503513] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.513073] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1000.521364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1000.529469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1000.537256] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.543591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.550814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1000.560648] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1000.569215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1000.577596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1000.585609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.591943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.604274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.612793] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1000.620753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1000.630948] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1000.639368] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1000.645669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1000.655912] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1000.662643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1000.669724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1000.679060] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1000.686353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1000.693913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1000.701984] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1000.710296] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1000.716452] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.724846] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1000.732588] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1000.739619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1000.747785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1000.755760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1000.763441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1000.771395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.777804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.785008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1000.797073] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1000.805619] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1000.812419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1000.821281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1000.829072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.835481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.842321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1000.850674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1000.860950] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1000.871341] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1000.879102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1000.889265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1000.899069] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1000.906909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1000.914618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1000.923431] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1000.934586] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1000.942863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1000.950957] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1000.958919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1000.966785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1000.974354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1000.984747] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1000.991809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1001.000354] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1001.010989] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1001.019071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1001.027008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1001.034459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1001.042512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1001.054032] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1001.060860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1001.076718] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1001.084637] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1001.091334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1001.098411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1001.109303] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1001.117709] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1001.124312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1001.133687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1001.143221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.153352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.229410] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1001.239890] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1001.247368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1001.259382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1001.269305] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1001.281224] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1001.289255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1001.297821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1001.320094] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1001.328204] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1001.334775] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1001.344702] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1001.351797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1001.359720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1001.367600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1001.374453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1001.385021] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1001.392011] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1001.399187] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1001.406615] device veth0_vlan entered promiscuous mode [ 1001.415767] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1001.423656] device veth0_vlan entered promiscuous mode [ 1001.431497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1001.439796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1001.450001] device veth1_vlan entered promiscuous mode [ 1001.456569] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1001.462971] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1001.470282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1001.477802] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1001.487049] device veth1_vlan entered promiscuous mode [ 1001.494764] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1001.509672] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1001.520395] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1001.529200] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1001.536846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1001.545586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1001.554107] device veth0_macvtap entered promiscuous mode [ 1001.561434] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1001.569997] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1001.579716] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1001.588820] device veth1_macvtap entered promiscuous mode [ 1001.594846] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1001.603514] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1001.610773] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1001.618460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1001.626274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1001.634694] device veth0_macvtap entered promiscuous mode [ 1001.641830] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1001.648274] Bluetooth: hci0 command 0x041b tx timeout [ 1001.652271] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1001.660806] Bluetooth: hci2 command 0x041b tx timeout [ 1001.667414] device veth1_macvtap entered promiscuous mode [ 1001.673492] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1001.683692] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1001.694530] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1001.704623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1001.714676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.724221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1001.734042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.743203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1001.752971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.762266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1001.772085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.782178] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1001.789394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.798375] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1001.807844] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1001.815537] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1001.822540] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1001.830675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1001.840237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1001.850858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.861148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1001.871405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.881067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1001.891159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.900711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1001.910850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.921361] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1001.928718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.939433] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1001.948397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1001.957328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1001.967533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.976793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1001.986601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.995777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1002.005955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.015148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1002.024846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.034093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1002.043873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.053999] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1002.061055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1002.071337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1002.079774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1002.089348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1002.099621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.108831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1002.118811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.128044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1002.137819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.146999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1002.156763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.165946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1002.175701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.186187] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1002.193079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1002.205362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1002.213065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1003.729526] Bluetooth: hci2 command 0x040f tx timeout [ 1003.735018] Bluetooth: hci0 command 0x040f tx timeout 01:28:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x0, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:28:48 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x1, 0x41}) memfd_create(&(0x7f0000000000)='/dev/ion\x00', 0xa) 01:28:48 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x1, {0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, r1}}, 0x38) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) 01:28:48 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400028}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x4c000) 01:28:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000004300ffcb000000000000080064"], 0x20}}, 0x0) 01:28:48 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) ioctl$SIOCRSACCEPT(r1, 0x89e3) 01:28:48 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/ion\x00', 0xa) 01:28:48 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x0, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:28:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r2, 0x401}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14e503f46ccae2f8fb3a1c8f63c1", @ANYRES16=r2, @ANYBLOB="00022abd7000fcdbdf2506000000080019000a010100"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macvlan1\x00'}) 01:28:48 executing program 0: memfd_create(&(0x7f0000000000)='/dev/ion\x00', 0xa) [ 1004.135702] nla_parse: 20 callbacks suppressed [ 1004.135709] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:28:48 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x128, 0x1403, 0x20, 0x70bd2b, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'caif0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'gretap0\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x500, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getpeername$l2tp(r0, 0x0, 0x0) 01:28:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000004300ffcb000000000000080064"], 0x20}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1404, 0x100, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x10) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x14000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00', 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRES16=r4, @ANYBLOB="03032bbd7000fddbdf2509000000050029000000000008003b0009000000130038000100000005802d000100000008003400fe"], 0x64}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x32}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000050}, 0xb67df4f1ae4f0b57) [ 1004.285226] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1005.066796] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1005.080653] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1005.080700] syz-executor.3: [ 1005.093194] syz-executor.1 cpuset= [ 1005.096484] syz-executor.5 cpuset= [ 1005.100066] / [ 1005.103644] / mems_allowed=0-1 [ 1005.106172] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1005.111497] mems_allowed=0-1 [ 1005.122742] CPU: 1 PID: 22856 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1005.123966] syz-executor.3 cpuset= [ 1005.130613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1005.130617] Call Trace: [ 1005.130634] dump_stack+0x1b2/0x281 [ 1005.130648] warn_alloc.cold+0x96/0x1cc [ 1005.130661] ? zone_watermark_ok_safe+0x220/0x220 [ 1005.130682] __alloc_pages_nodemask+0x2127/0x2720 [ 1005.137558] / [ 1005.143547] ? lock_acquire+0x170/0x3f0 [ 1005.146206] mems_allowed=0-1 [ 1005.149739] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1005.149755] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1005.149768] ? __mutex_unlock_slowpath+0x75/0x770 [ 1005.187170] alloc_pages_current+0x155/0x260 [ 1005.191568] ion_page_pool_alloc+0x118/0x1b0 [ 1005.195961] ion_system_heap_allocate+0x133/0x8c0 [ 1005.200787] ? ion_alloc+0x187/0x810 [ 1005.204500] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1005.209932] ? ion_system_contig_heap_create+0x130/0x130 [ 1005.215365] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1005.220366] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1005.225199] ion_alloc+0x204/0x810 [ 1005.228729] ? ion_dma_buf_release+0x40/0x40 [ 1005.233120] ? __might_fault+0x177/0x1b0 [ 1005.237170] ion_ioctl+0xea/0x1f0 [ 1005.240610] ? ion_query_heaps+0x360/0x360 [ 1005.244829] ? ion_query_heaps+0x360/0x360 [ 1005.249047] do_vfs_ioctl+0x75a/0xff0 [ 1005.252833] ? ioctl_preallocate+0x1a0/0x1a0 [ 1005.257222] ? lock_downgrade+0x740/0x740 [ 1005.261356] ? __fget+0x225/0x360 [ 1005.264789] ? do_vfs_ioctl+0xff0/0xff0 [ 1005.268746] ? security_file_ioctl+0x83/0xb0 [ 1005.273137] SyS_ioctl+0x7f/0xb0 [ 1005.276484] ? do_vfs_ioctl+0xff0/0xff0 [ 1005.280458] do_syscall_64+0x1d5/0x640 [ 1005.284337] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1005.289509] RIP: 0033:0x465ef9 [ 1005.292682] RSP: 002b:00007fba3a452188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1005.300370] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1005.307623] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1005.314875] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1005.322126] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1005.329408] R13: 00007ffea651953f R14: 00007fba3a452300 R15: 0000000000022000 [ 1005.336675] CPU: 0 PID: 22845 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1005.344561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1005.353897] Call Trace: [ 1005.356477] dump_stack+0x1b2/0x281 [ 1005.360098] warn_alloc.cold+0x96/0x1cc [ 1005.364060] ? zone_watermark_ok_safe+0x220/0x220 [ 1005.368904] __alloc_pages_nodemask+0x2127/0x2720 [ 1005.373745] ? lock_acquire+0x170/0x3f0 [ 1005.377761] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1005.382596] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1005.388248] ? __mutex_unlock_slowpath+0x75/0x770 [ 1005.393076] ? retint_kernel+0x2d/0x2d [ 1005.396951] alloc_pages_current+0x155/0x260 [ 1005.401351] ion_page_pool_alloc+0x118/0x1b0 [ 1005.405746] ion_system_heap_allocate+0x133/0x8c0 [ 1005.410575] ? ion_alloc+0x187/0x810 [ 1005.414360] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1005.419792] ? ion_system_contig_heap_create+0x130/0x130 [ 1005.425252] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1005.430254] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1005.435085] ion_alloc+0x204/0x810 [ 1005.438615] ? ion_dma_buf_release+0x40/0x40 [ 1005.443008] ? __might_fault+0x177/0x1b0 [ 1005.447059] ion_ioctl+0xea/0x1f0 [ 1005.450499] ? ion_query_heaps+0x360/0x360 [ 1005.454717] ? ion_query_heaps+0x360/0x360 [ 1005.458935] do_vfs_ioctl+0x75a/0xff0 [ 1005.462720] ? ioctl_preallocate+0x1a0/0x1a0 [ 1005.467110] ? lock_downgrade+0x740/0x740 [ 1005.471242] ? __fget+0x225/0x360 [ 1005.474675] ? do_vfs_ioctl+0xff0/0xff0 [ 1005.478631] ? security_file_ioctl+0x83/0xb0 [ 1005.483021] SyS_ioctl+0x7f/0xb0 [ 1005.486369] ? do_vfs_ioctl+0xff0/0xff0 [ 1005.490360] do_syscall_64+0x1d5/0x640 [ 1005.494249] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1005.499418] RIP: 0033:0x465ef9 [ 1005.502605] RSP: 002b:00007f6ee7ac3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1005.510299] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1005.517552] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1005.524803] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1005.532053] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1005.539302] R13: 00007ffe0127fadf R14: 00007f6ee7ac3300 R15: 0000000000022000 [ 1005.546568] CPU: 1 PID: 22853 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 1005.554455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1005.563801] Call Trace: [ 1005.566390] dump_stack+0x1b2/0x281 [ 1005.570022] warn_alloc.cold+0x96/0x1cc [ 1005.573998] ? zone_watermark_ok_safe+0x220/0x220 [ 1005.578852] __alloc_pages_nodemask+0x2127/0x2720 [ 1005.580501] Mem-Info: [ 1005.583695] ? lock_acquire+0x170/0x3f0 [ 1005.583711] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1005.586196] active_anon:11749 inactive_anon:35174 isolated_anon:0 [ 1005.586196] active_file:2872 inactive_file:4223 isolated_file:12 [ 1005.586196] unevictable:0 dirty:120 writeback:0 unstable:0 [ 1005.586196] slab_reclaimable:12995 slab_unreclaimable:114172 [ 1005.586196] mapped:57263 shmem:35599 pagetables:732 bounce:0 [ 1005.586196] free:303418 free_pcp:135 free_cma:0 [ 1005.590084] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1005.590098] ? __mutex_unlock_slowpath+0x75/0x770 [ 1005.596943] Node 0 active_anon:45680kB inactive_anon:89528kB active_file:944kB inactive_file:1632kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:164992kB dirty:272kB writeback:0kB shmem:90972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1005.628959] alloc_pages_current+0x155/0x260 [ 1005.628975] ion_page_pool_alloc+0x118/0x1b0 [ 1005.628986] ion_system_heap_allocate+0x133/0x8c0 [ 1005.628996] ? ion_alloc+0x187/0x810 [ 1005.629006] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1005.629018] ? ion_system_contig_heap_create+0x130/0x130 [ 1005.636686] Node 1 active_anon:1316kB inactive_anon:51168kB active_file:10544kB inactive_file:15260kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:64060kB dirty:208kB writeback:0kB shmem:51424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1005.639283] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1005.639294] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1005.639308] ion_alloc+0x204/0x810 [ 1005.669915] Node 0 [ 1005.671823] ? ion_dma_buf_release+0x40/0x40 [ 1005.671852] ? __might_fault+0x177/0x1b0 [ 1005.677245] DMA free:11108kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1005.681076] ion_ioctl+0xea/0x1f0 [ 1005.681086] ? ion_query_heaps+0x360/0x360 [ 1005.681098] ? ion_query_heaps+0x360/0x360 [ 1005.686184] lowmem_reserve[]: [ 1005.690227] do_vfs_ioctl+0x75a/0xff0 [ 1005.690238] ? ioctl_preallocate+0x1a0/0x1a0 [ 1005.690250] ? lock_downgrade+0x740/0x740 [ 1005.697014] 0 [ 1005.723520] ? __fget+0x225/0x360 [ 1005.723530] ? do_vfs_ioctl+0xff0/0xff0 [ 1005.723540] ? security_file_ioctl+0x83/0xb0 [ 1005.723550] SyS_ioctl+0x7f/0xb0 [ 1005.723557] ? do_vfs_ioctl+0xff0/0xff0 [ 1005.723567] do_syscall_64+0x1d5/0x640 [ 1005.723582] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1005.731042] 2717 [ 1005.733421] RIP: 0033:0x465ef9 [ 1005.733427] RSP: 002b:00007f516ace7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1005.733440] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1005.738336] 2718 [ 1005.739183] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1005.743627] 2718 [ 1005.747608] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1005.747613] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1005.747618] R13: 00007ffe55efda7f R14: 00007f516ace7300 R15: 0000000000022000 [ 1005.804798] Bluetooth: hci0 command 0x0419 tx timeout [ 1005.814119] 2718 [ 1005.819170] Bluetooth: hci2 command 0x0419 tx timeout [ 1005.899341] Node 0 DMA32 free:763752kB min:36200kB low:45248kB high:54296kB active_anon:45672kB inactive_anon:89508kB active_file:944kB inactive_file:1632kB unevictable:0kB writepending:272kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2528kB bounce:0kB free_pcp:492kB local_pcp:448kB free_cma:0kB [ 1005.929036] lowmem_reserve[]: 0 0 0 0 0 [ 1005.933122] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1005.959680] lowmem_reserve[]: 0 0 0 0 0 [ 1005.963779] Node 1 Normal free:300228kB min:53696kB low:67120kB high:80544kB active_anon:1316kB inactive_anon:51168kB active_file:10544kB inactive_file:15360kB unevictable:0kB writepending:208kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:400kB bounce:0kB free_pcp:128kB local_pcp:128kB free_cma:0kB [ 1005.995163] lowmem_reserve[]: 0 0 0 0 0 [ 1005.999246] Node 0 DMA: 133*4kB (UME) 78*8kB (UME) 34*16kB (UM) 16*32kB (UME) 5*64kB (UME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 11108kB [ 1006.015690] Node 0 DMA32: 68*4kB (UE) 3117*8kB (UME) 17890*16kB (UME) 10844*32kB (UE) 88*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 664216kB [ 1006.031830] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1006.054744] Node 1 Normal: 4377*4kB (UM) 4928*8kB (UM) 5260*16kB (UM) 4950*32kB (UM) 16*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 300772kB [ 1006.086257] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1006.099292] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1006.126655] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1006.153570] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1006.165762] 42614 total pagecache pages [ 1006.169759] 0 pages in swap cache [ 1006.173205] Swap cache stats: add 0, delete 0, find 0/0 [ 1006.180436] Free swap = 0kB [ 1006.183465] Total swap = 0kB [ 1006.188356] 2097051 pages RAM [ 1006.191468] 0 pages HighMem/MovableOnly [ 1006.197296] 363840 pages reserved [ 1006.200754] 0 pages cma reserved [ 1006.831774] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1006.852279] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1006.857509] CPU: 1 PID: 20306 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1006.865409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1006.874745] Call Trace: [ 1006.877319] dump_stack+0x1b2/0x281 [ 1006.880926] dump_header+0x178/0x82f [ 1006.884617] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1006.889697] ? ___ratelimit+0x2cd/0x530 [ 1006.893669] oom_kill_process.cold+0x10/0xb18 [ 1006.898169] out_of_memory+0xe3e/0x1190 [ 1006.902135] ? oom_killer_disable+0x1c0/0x1c0 [ 1006.906613] ? mutex_trylock+0x152/0x1a0 [ 1006.910656] __alloc_pages_nodemask+0x23e1/0x2720 [ 1006.915486] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1006.920316] alloc_pages_current+0x155/0x260 [ 1006.924721] filemap_fault+0xea3/0x1980 [ 1006.928690] ext4_filemap_fault+0x84/0xb0 [ 1006.932838] __do_fault+0xfa/0x380 [ 1006.936366] __handle_mm_fault+0x2497/0x4620 [ 1006.941294] ? vm_insert_page+0x7c0/0x7c0 [ 1006.945425] ? nanosleep_copyout+0x100/0x100 [ 1006.949823] handle_mm_fault+0x391/0x860 [ 1006.953870] __do_page_fault+0x549/0xad0 [ 1006.957945] ? spurious_fault+0x640/0x640 [ 1006.962076] ? do_page_fault+0x60/0x500 [ 1006.966048] ? page_fault+0x2f/0x50 [ 1006.969654] page_fault+0x45/0x50 [ 1006.973086] RIP: f561e:0x8 [ 1006.975907] RSP: 0045:00007ffea65197fc EFLAGS: 00000032 [ 1006.997668] Mem-Info: [ 1007.005543] active_anon:11833 inactive_anon:35174 isolated_anon:0 [ 1007.005543] active_file:31 inactive_file:0 isolated_file:1 [ 1007.005543] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1007.005543] slab_reclaimable:12900 slab_unreclaimable:113742 [ 1007.005543] mapped:52774 shmem:35599 pagetables:732 bounce:0 [ 1007.005543] free:25112 free_pcp:0 free_cma:0 [ 1007.038770] Node 0 active_anon:45832kB inactive_anon:89528kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:163824kB dirty:0kB writeback:0kB shmem:90972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1007.066541] Node 1 active_anon:1500kB inactive_anon:51168kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47220kB dirty:0kB writeback:0kB shmem:51424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1007.095076] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1007.125922] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1007.130973] Node 0 DMA32 free:36160kB min:36200kB low:45248kB high:54296kB active_anon:45824kB inactive_anon:89508kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2528kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1007.161302] lowmem_reserve[]: 0 0 0 0 0 [ 1007.166423] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1007.193664] lowmem_reserve[]: 0 0 0 0 0 [ 1007.197722] Node 1 Normal free:53124kB min:53696kB low:67120kB high:80544kB active_anon:1500kB inactive_anon:51168kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:400kB bounce:0kB free_pcp:156kB local_pcp:4kB free_cma:0kB [ 1007.226446] lowmem_reserve[]: 0 0 0 0 0 [ 1007.230443] Node 0 DMA: 122*4kB (UME) 79*8kB (UME) 34*16kB (UM) 16*32kB (UME) 5*64kB (UME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 11072kB [ 1007.246616] Node 0 DMA32: 536*4kB (MEH) 139*8kB (UMEH) 108*16kB (UMEH) 765*32kB (UE) 97*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35928kB [ 1007.261465] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1007.272237] Node 1 Normal: 117*4kB (M) 67*8kB (M) 53*16kB (UM) 1262*32kB (UM) 88*64kB (UM) 24*128kB (UM) 3*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 53244kB [ 1007.287716] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1007.296599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1007.305339] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1007.314251] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1007.322848] 35649 total pagecache pages [ 1007.327195] 0 pages in swap cache [ 1007.330642] Swap cache stats: add 0, delete 0, find 0/0 [ 1007.336024] Free swap = 0kB [ 1007.339019] Total swap = 0kB [ 1007.342016] 2097051 pages RAM [ 1007.345168] 0 pages HighMem/MovableOnly [ 1007.349125] 363840 pages reserved [ 1007.352581] 0 pages cma reserved [ 1007.356004] Out of memory (oom_kill_allocating_task): Kill process 20306 (syz-executor.5) score 0 or sacrifice child [ 1007.366817] Killed process 22856 (syz-executor.5) total-vm:93364kB, anon-rss:152kB, file-rss:34760kB, shmem-rss:0kB [ 1007.383273] oom_reaper: reaped process 22856 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1007.405133] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1007.434534] systemd-journal cpuset=/ mems_allowed=0-1 [ 1007.439767] CPU: 0 PID: 22057 Comm: systemd-journal Not tainted 4.14.222-syzkaller #0 [ 1007.447725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1007.457074] Call Trace: [ 1007.459696] dump_stack+0x1b2/0x281 [ 1007.463321] dump_header+0x178/0x82f [ 1007.467033] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1007.472137] ? ___ratelimit+0x2cd/0x530 [ 1007.476111] oom_kill_process.cold+0x10/0xb18 [ 1007.480617] out_of_memory+0xe3e/0x1190 [ 1007.484592] ? oom_killer_disable+0x1c0/0x1c0 [ 1007.489080] ? mutex_trylock+0x152/0x1a0 [ 1007.493147] __alloc_pages_nodemask+0x23e1/0x2720 [ 1007.498003] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1007.502871] alloc_pages_current+0x155/0x260 [ 1007.507281] filemap_fault+0xea3/0x1980 [ 1007.511283] ext4_filemap_fault+0x84/0xb0 [ 1007.515430] __do_fault+0xfa/0x380 [ 1007.518964] __handle_mm_fault+0x2497/0x4620 [ 1007.523367] ? ep_poll+0x1ab/0xa50 [ 1007.526897] ? vm_insert_page+0x7c0/0x7c0 [ 1007.531053] handle_mm_fault+0x391/0x860 [ 1007.535109] __do_page_fault+0x549/0xad0 [ 1007.539169] ? spurious_fault+0x640/0x640 [ 1007.543311] ? do_page_fault+0x60/0x500 [ 1007.547278] ? page_fault+0x2f/0x50 [ 1007.550936] page_fault+0x45/0x50 [ 1007.554380] RIP: 0001:0xffffffffffffffff [ 1007.558432] RSP: 17a461e0:00007fff2093acd0 EFLAGS: 7fff2093aaf0 [ 1007.564068] Mem-Info: [ 1007.573488] active_anon:11807 inactive_anon:35174 isolated_anon:0 [ 1007.573488] active_file:10 inactive_file:32 isolated_file:0 [ 1007.573488] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1007.573488] slab_reclaimable:12897 slab_unreclaimable:113750 [ 1007.573488] mapped:52761 shmem:35599 pagetables:732 bounce:0 [ 1007.573488] free:13949 free_pcp:30 free_cma:0 [ 1007.621134] Node 0 active_anon:45728kB inactive_anon:89528kB active_file:0kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163824kB dirty:0kB writeback:0kB shmem:90972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1007.655683] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1007.659212] Node 1 active_anon:1500kB inactive_anon:51168kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47220kB dirty:0kB writeback:0kB shmem:51424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1007.677598] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1007.706177] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1007.710090] CPU: 1 PID: 22856 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1007.710098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1007.736323] lowmem_reserve[]: [ 1007.744153] Call Trace: [ 1007.744172] dump_stack+0x1b2/0x281 [ 1007.744186] warn_alloc.cold+0x96/0x1cc [ 1007.753537] 0 [ 1007.756624] ? zone_watermark_ok_safe+0x220/0x220 [ 1007.756634] ? usleep_range+0x130/0x130 [ 1007.756644] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1007.759212] 2717 [ 1007.762833] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1007.766990] 2718 [ 1007.768755] ? run_timer_softirq+0x5a0/0x5a0 [ 1007.773569] 2718 [ 1007.777535] __alloc_pages_nodemask+0x2127/0x2720 [ 1007.777553] ? lock_acquire+0x170/0x3f0 [ 1007.782627] 2718 [ 1007.784679] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1007.784690] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1007.784705] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1007.791867] alloc_pages_current+0x155/0x260 [ 1007.796259] Node 0 [ 1007.798294] ion_page_pool_alloc+0x118/0x1b0 [ 1007.803125] DMA32 free:18028kB min:36200kB low:45248kB high:54296kB active_anon:45720kB inactive_anon:89508kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2528kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 1007.807082] ion_system_heap_allocate+0x133/0x8c0 [ 1007.807091] ? ion_alloc+0x187/0x810 [ 1007.807101] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1007.809136] lowmem_reserve[]: [ 1007.813963] ? ion_system_contig_heap_create+0x130/0x130 [ 1007.818443] 0 [ 1007.823866] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1007.828259] 0 [ 1007.830468] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1007.834859] 0 [ 1007.862872] ion_alloc+0x204/0x810 [ 1007.862888] ? ion_dma_buf_release+0x40/0x40 [ 1007.867714] 0 [ 1007.871400] ? __might_fault+0x177/0x1b0 [ 1007.876834] 0 [ 1007.879913] ion_ioctl+0xea/0x1f0 [ 1007.887122] ? ion_query_heaps+0x360/0x360 [ 1007.892110] Node 0 [ 1007.893896] ? ion_query_heaps+0x360/0x360 [ 1007.898733] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1007.900494] do_vfs_ioctl+0x75a/0xff0 [ 1007.904001] lowmem_reserve[]: [ 1007.908390] ? ioctl_preallocate+0x1a0/0x1a0 [ 1007.908400] ? lock_downgrade+0x740/0x740 [ 1007.908413] ? __fget+0x225/0x360 [ 1007.910199] 0 [ 1007.914255] ? do_vfs_ioctl+0xff0/0xff0 [ 1007.914266] ? security_file_ioctl+0x83/0xb0 [ 1007.914276] SyS_ioctl+0x7f/0xb0 [ 1007.916058] 0 [ 1007.919530] ? do_vfs_ioctl+0xff0/0xff0 [ 1007.923740] 0 [ 1007.925962] do_syscall_64+0x1d5/0x640 [ 1007.925978] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1007.925986] RIP: 0033:0x465ef9 [ 1007.925990] RSP: 002b:00007fba3a452188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1007.926002] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1007.930215] 0 [ 1007.955221] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1007.955227] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1007.955232] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1007.955236] R13: 00007ffea651953f R14: 00007fba3a452300 R15: 0000000000022000 [ 1007.965026] warn_alloc_show_mem: 2 callbacks suppressed [ 1007.965029] Mem-Info: [ 1007.976843] 0 [ 1007.989899] active_anon:11807 inactive_anon:35174 isolated_anon:0 [ 1007.989899] active_file:13 inactive_file:13 isolated_file:0 [ 1007.989899] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1007.989899] slab_reclaimable:12897 slab_unreclaimable:113728 [ 1007.989899] mapped:52761 shmem:35599 pagetables:732 bounce:0 [ 1007.989899] free:13886 free_pcp:65 free_cma:0 [ 1008.013166] Node 0 active_anon:45728kB inactive_anon:89528kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163824kB dirty:0kB writeback:0kB shmem:90972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1008.023662] Node 1 [ 1008.033301] Node 1 active_anon:1500kB inactive_anon:51168kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47220kB dirty:0kB writeback:0kB shmem:51424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1008.039117] Normal free:26932kB min:53696kB low:67120kB high:80544kB active_anon:1500kB inactive_anon:51168kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:400kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1008.039122] lowmem_reserve[]: [ 1008.055029] Node 0 [ 1008.068011] 0 [ 1008.109114] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1008.130186] 0 [ 1008.166675] lowmem_reserve[]: [ 1008.191163] 0 [ 1008.225383] 0 2717 2718 2718 2718 [ 1008.230735] Node 0 DMA32 free:17652kB min:36200kB low:45248kB high:54296kB active_anon:45720kB inactive_anon:89508kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2528kB bounce:0kB free_pcp:136kB local_pcp:116kB free_cma:0kB [ 1008.235929] 0 [ 1008.267742] lowmem_reserve[]: 0 0 0 0 0 [ 1008.271673] 0 [ 1008.273543] Node 0 [ 1008.273550] Node 0 [ 1008.278994] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1008.281522] DMA: 94*4kB (UME) 79*8kB (UME) 34*16kB (UM) 16*32kB (UME) 5*64kB (UME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 10960kB [ 1008.312967] lowmem_reserve[]: 0 0 0 0 0 [ 1008.333790] Node 0 DMA32: 533*4kB (ME) [ 1008.333809] Node 1 Normal free:26932kB min:53696kB low:67120kB high:80544kB active_anon:1500kB inactive_anon:51168kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:400kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1008.341220] 149*8kB [ 1008.374988] lowmem_reserve[]: 0 0 0 0 0 [ 1008.378211] (UME) [ 1008.381316] Node 0 [ 1008.381319] 106*16kB (ME) [ 1008.383445] DMA: 94*4kB [ 1008.392308] 194*32kB [ 1008.396278] (UME) 79*8kB (UME) 34*16kB (UM) 16*32kB (UME) 5*64kB (UME) 3*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 10960kB [ 1008.400356] (UE) [ 1008.422170] Node 0 DMA32: 533*4kB (ME) 149*8kB (UME) 106*16kB (ME) 194*32kB (UE) 97*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17692kB [ 1008.424618] 97*64kB [ 1008.448338] Node 0 [ 1008.450395] (U) [ 1008.450679] Normal: [ 1008.452917] 2*128kB [ 1008.458789] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1008.462523] (U) [ 1008.479160] Node 1 Normal: 117*4kB (M) 68*8kB (UM) 56*16kB (UM) 437*32kB (UM) 89*64kB (UM) 24*128kB (UM) 3*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 26964kB [ 1008.482165] 0*256kB [ 1008.505066] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1008.508220] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17692kB [ 1008.522469] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1008.533423] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1008.544549] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1008.558287] Node 1 Normal: 117*4kB (M) 68*8kB (UM) 56*16kB (UM) 437*32kB (UM) 89*64kB (UM) 24*128kB (UM) 3*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 26964kB [ 1008.569034] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1008.587995] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1008.593361] 35625 total pagecache pages [ 1008.600877] 0 pages in swap cache [ 1008.603841] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1008.611392] Swap cache stats: add 0, delete 0, find 0/0 [ 1008.615711] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1008.618331] Free swap = 0kB [ 1008.638071] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1008.638406] Total swap = 0kB [ 1008.651801] 2097051 pages RAM [ 1008.652218] 35625 total pagecache pages [ 1008.660269] 0 pages HighMem/MovableOnly [ 1008.665157] 0 pages in swap cache [ 1008.666141] 363840 pages reserved [ 1008.668608] Swap cache stats: add 0, delete 0, find 0/0 [ 1008.672039] 0 pages cma reserved [ 1008.694083] Free swap = 0kB [ 1008.697116] Total swap = 0kB [ 1008.700124] 2097051 pages RAM [ 1008.703218] 0 pages HighMem/MovableOnly [ 1008.723407] 363840 pages reserved [ 1008.726957] 0 pages cma reserved [ 1008.730332] Out of memory (oom_kill_allocating_task): Kill process 22057 (systemd-journal) score 0 or sacrifice child [ 1008.762860] Killed process 22057 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:4kB, shmem-rss:1976kB [ 1008.780915] oom_reaper: reaped process 22057 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1976kB [ 1009.002581] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1009.016313] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1009.044766] systemd[1]: Stopped Journal Service. [ 1009.059578] systemd[1]: Starting Journal Service... [ 1009.336723] systemd-journal invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1009.378830] systemd-journal cpuset=/ mems_allowed=0-1 [ 1009.392565] CPU: 0 PID: 22874 Comm: systemd-journal Not tainted 4.14.222-syzkaller #0 [ 1009.400546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1009.409883] Call Trace: [ 1009.412456] dump_stack+0x1b2/0x281 [ 1009.416065] dump_header+0x178/0x82f [ 1009.419758] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1009.424840] ? ___ratelimit+0x2cd/0x530 [ 1009.428797] oom_kill_process.cold+0x10/0xb18 [ 1009.433277] out_of_memory+0xe3e/0x1190 [ 1009.437238] ? oom_killer_disable+0x1c0/0x1c0 [ 1009.441711] ? mutex_trylock+0x152/0x1a0 [ 1009.445751] __alloc_pages_nodemask+0x23e1/0x2720 [ 1009.450581] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1009.455404] ? lock_acquire+0x170/0x3f0 [ 1009.459358] ? __lock_acquire+0x5fc/0x3f20 [ 1009.463575] alloc_pages_vma+0xd2/0x6d0 [ 1009.467532] __handle_mm_fault+0x25fa/0x4620 [ 1009.471921] ? vm_insert_page+0x7c0/0x7c0 [ 1009.476048] ? vfs_statx_fd+0x6d/0xd0 [ 1009.479851] handle_mm_fault+0x391/0x860 [ 1009.483899] __do_page_fault+0x549/0xad0 [ 1009.487942] ? spurious_fault+0x640/0x640 [ 1009.492069] ? do_page_fault+0x60/0x500 [ 1009.496023] ? page_fault+0x2f/0x50 [ 1009.499631] page_fault+0x45/0x50 [ 1009.503063] RIP: 977719e0:0x7f419776fb68 [ 1009.507099] RSP: 0011:0000000000000000 EFLAGS: 7f41960004f8 [ 1009.530886] Mem-Info: [ 1009.542978] active_anon:11750 inactive_anon:35173 isolated_anon:0 [ 1009.542978] active_file:37 inactive_file:34 isolated_file:2 [ 1009.542978] unevictable:0 dirty:25 writeback:0 unstable:0 [ 1009.542978] slab_reclaimable:12893 slab_unreclaimable:113242 [ 1009.542978] mapped:52251 shmem:35599 pagetables:745 bounce:0 [ 1009.542978] free:14316 free_pcp:11 free_cma:0 [ 1009.576946] Node 0 active_anon:45616kB inactive_anon:89524kB active_file:68kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:162276kB dirty:60kB writeback:0kB shmem:90972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1009.604772] Node 1 active_anon:1464kB inactive_anon:51168kB active_file:120kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46708kB dirty:12kB writeback:0kB shmem:51424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1009.632139] Node 0 DMA free:10988kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:20kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1009.661433] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1009.674025] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1009.679065] Node 0 DMA32 free:18476kB min:36200kB low:45248kB high:54296kB active_anon:45608kB inactive_anon:89504kB active_file:380kB inactive_file:504kB unevictable:0kB writepending:52kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2544kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1009.708138] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1009.713265] CPU: 0 PID: 22856 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1009.721407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1009.723475] lowmem_reserve[]: [ 1009.730758] Call Trace: [ 1009.730778] dump_stack+0x1b2/0x281 [ 1009.730791] warn_alloc.cold+0x96/0x1cc [ 1009.730802] ? zone_watermark_ok_safe+0x220/0x220 [ 1009.730823] __alloc_pages_nodemask+0x2127/0x2720 [ 1009.730840] ? lock_acquire+0x170/0x3f0 [ 1009.730855] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1009.730871] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1009.730884] ? __mutex_unlock_slowpath+0x75/0x770 [ 1009.730898] alloc_pages_current+0x155/0x260 [ 1009.730911] ion_page_pool_alloc+0x118/0x1b0 [ 1009.730922] ion_system_heap_allocate+0x133/0x8c0 [ 1009.760938] 0 [ 1009.762703] ? _raw_spin_unlock+0x29/0x40 [ 1009.789961] 0 0 [ 1009.792508] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1009.792519] ? ion_system_contig_heap_create+0x130/0x130 [ 1009.803230] 0 [ 1009.804862] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1009.804876] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1009.804889] ion_alloc+0x27a/0x810 [ 1009.804905] ? ion_dma_buf_release+0x40/0x40 [ 1009.804917] ? __might_fault+0x177/0x1b0 [ 1009.804929] ion_ioctl+0xea/0x1f0 [ 1009.804939] ? ion_query_heaps+0x360/0x360 [ 1009.804953] ? ion_query_heaps+0x360/0x360 [ 1009.822781] 0 [ 1009.824481] do_vfs_ioctl+0x75a/0xff0 [ 1009.824494] ? ioctl_preallocate+0x1a0/0x1a0 [ 1009.824503] ? lock_downgrade+0x740/0x740 [ 1009.824515] ? __fget+0x225/0x360 [ 1009.824525] ? do_vfs_ioctl+0xff0/0xff0 [ 1009.824535] ? security_file_ioctl+0x83/0xb0 [ 1009.824544] SyS_ioctl+0x7f/0xb0 [ 1009.824554] ? do_vfs_ioctl+0xff0/0xff0 [ 1009.850446] do_syscall_64+0x1d5/0x640 [ 1009.862994] Node 0 [ 1009.866360] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1009.866368] RIP: 0033:0x465ef9 [ 1009.866373] RSP: 002b:00007fba3a452188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1009.866383] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1009.866388] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1009.866393] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1009.866398] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1009.866404] R13: 00007ffea651953f R14: 00007fba3a452300 R15: 0000000000022000 [ 1009.871184] Mem-Info: [ 1009.878853] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1009.883220] active_anon:11770 inactive_anon:35173 isolated_anon:0 [ 1009.883220] active_file:22 inactive_file:12 isolated_file:2 [ 1009.883220] unevictable:0 dirty:18 writeback:0 unstable:0 [ 1009.883220] slab_reclaimable:12891 slab_unreclaimable:113252 [ 1009.883220] mapped:52246 shmem:35599 pagetables:747 bounce:0 [ 1009.883220] free:14027 free_pcp:28 free_cma:0 [ 1009.886079] lowmem_reserve[]: [ 1009.889290] Node 0 active_anon:45616kB inactive_anon:89524kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:162276kB dirty:60kB writeback:0kB shmem:90972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1009.896072] 0 [ 1009.903884] Node 1 active_anon:1464kB inactive_anon:51168kB active_file:20kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46708kB dirty:12kB writeback:0kB shmem:51424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1009.910622] 0 [ 1009.920753] Node 0 [ 1009.925239] 0 [ 1009.932491] DMA free:10988kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:20kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1009.934924] 0 0 [ 1009.934936] Node 1 Normal free:26644kB min:53696kB low:67120kB high:80544kB active_anon:1364kB inactive_anon:51168kB active_file:40kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:444kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1009.934953] lowmem_reserve[]: 0 0 0 0 0 [ 1009.934968] Node 0 DMA: 87*4kB (UME) [ 1009.963444] lowmem_reserve[]: [ 1009.997866] 78*8kB [ 1010.026021] 0 [ 1010.072514] (UME) [ 1010.087058] 2717 [ 1010.092410] 33*16kB [ 1010.117356] 2718 [ 1010.129801] (UM) [ 1010.130571] 2718 [ 1010.132681] 15*32kB [ 1010.136564] 2718 [ 1010.139587] (UME) [ 1010.141194] Node 0 [ 1010.143233] 5*64kB (UME) [ 1010.145596] DMA32 free:18480kB min:36200kB low:45248kB high:54296kB active_anon:45644kB inactive_anon:89504kB active_file:32kB inactive_file:92kB unevictable:0kB writepending:52kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2532kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1010.145599] lowmem_reserve[]: 0 0 0 0 0 [ 1010.145618] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1010.145638] lowmem_reserve[]: 0 0 [ 1010.162052] 4*128kB [ 1010.186279] 0 [ 1010.202928] (UME) [ 1010.215413] 0 0 [ 1010.226322] 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 11004kB [ 1010.232485] Node 1 Normal free:26728kB min:53696kB low:67120kB high:80544kB active_anon:1412kB inactive_anon:51168kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:452kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1010.239727] Node 0 [ 1010.270901] lowmem_reserve[]: 0 0 0 0 0 [ 1010.273244] DMA32: [ 1010.277174] Node 0 DMA: 87*4kB (UME) 78*8kB (UME) [ 1010.279414] 1669*4kB [ 1010.279417] 33*16kB (UM) [ 1010.294937] (UME) [ 1010.297647] 15*32kB [ 1010.297709] 324*8kB [ 1010.299839] (UME) [ 1010.302140] (UME) [ 1010.308868] 5*64kB (UME) 4*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 11004kB [ 1010.316562] 152*16kB (UME) 211*32kB (UE) 3*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18644kB [ 1010.325922] Node 0 DMA32: 1638*4kB (UME) 324*8kB (UME) 152*16kB (UME) 211*32kB (UE) 3*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18520kB [ 1010.340892] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1010.353428] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1010.367891] Node 1 Normal: 122*4kB (UM) 72*8kB (UM) 56*16kB (UM) 40*32kB (M) 27*64kB (UM) 10*128kB (M) 62*256kB (UM) 9*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26728kB [ 1010.377717] Node 1 Normal: 122*4kB (UM) 72*8kB (UM) 56*16kB (UM) 40*32kB (M) 27*64kB (UM) 10*128kB (M) 62*256kB (UM) 9*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26728kB [ 1010.395381] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1010.415741] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1010.426403] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1010.433375] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1010.440392] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1010.443578] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1010.463603] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1010.467339] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1010.472233] 35647 total pagecache pages [ 1010.486260] 35647 total pagecache pages [ 1010.490237] 0 pages in swap cache [ 1010.493681] Swap cache stats: add 0, delete 0, find 0/0 [ 1010.495738] 0 pages in swap cache [ 1010.502362] Free swap = 0kB [ 1010.502471] Swap cache stats: add 0, delete 0, find 0/0 [ 1010.505482] Total swap = 0kB [ 1010.505489] 2097051 pages RAM [ 1010.505493] 0 pages HighMem/MovableOnly [ 1010.505496] 363840 pages reserved [ 1010.505498] 0 pages cma reserved [ 1010.539055] Free swap = 0kB [ 1010.542078] Total swap = 0kB [ 1010.545173] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1010.550356] 2097051 pages RAM [ 1010.562851] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1010.568003] CPU: 0 PID: 22856 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1010.572965] 0 pages HighMem/MovableOnly [ 1010.575872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1010.575876] Call Trace: [ 1010.575894] dump_stack+0x1b2/0x281 [ 1010.575907] warn_alloc.cold+0x96/0x1cc [ 1010.575918] ? zone_watermark_ok_safe+0x220/0x220 [ 1010.575926] ? usleep_range+0x130/0x130 [ 1010.575936] ? try_to_free_pages+0x23f/0x6e0 [ 1010.581032] 363840 pages reserved [ 1010.589253] ? _find_next_bit+0xdb/0x100 [ 1010.589263] ? run_timer_softirq+0x5a0/0x5a0 [ 1010.589278] __alloc_pages_nodemask+0x2127/0x2720 [ 1010.589296] ? lock_acquire+0x170/0x3f0 [ 1010.589310] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1010.589322] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1010.589337] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1010.589357] alloc_pages_current+0x155/0x260 [ 1010.589369] ion_page_pool_alloc+0x118/0x1b0 [ 1010.589379] ion_system_heap_allocate+0x133/0x8c0 [ 1010.603324] 0 pages cma reserved [ 1010.604345] ? _raw_spin_unlock+0x29/0x40 [ 1010.604357] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1010.604367] ? ion_system_contig_heap_create+0x130/0x130 [ 1010.604377] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1010.604389] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1010.608339] Out of memory (oom_kill_allocating_task): Kill process 22874 (systemd-journal) score 0 or sacrifice child [ 1010.612726] ion_alloc+0x27a/0x810 [ 1010.628855] Killed process 22874 (systemd-journal) total-vm:33564kB, anon-rss:156kB, file-rss:0kB, shmem-rss:0kB [ 1010.629420] ? ion_dma_buf_release+0x40/0x40 [ 1010.635594] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1010.638191] ? __might_fault+0x177/0x1b0 [ 1010.642654] (null) [ 1010.648094] ion_ioctl+0xea/0x1f0 [ 1010.648104] ? ion_query_heaps+0x360/0x360 [ 1010.648116] ? ion_query_heaps+0x360/0x360 [ 1010.648126] do_vfs_ioctl+0x75a/0xff0 [ 1010.648136] ? ioctl_preallocate+0x1a0/0x1a0 [ 1010.648146] ? lock_downgrade+0x740/0x740 [ 1010.648159] ? __fget+0x225/0x360 [ 1010.648167] ? do_vfs_ioctl+0xff0/0xff0 [ 1010.648177] ? security_file_ioctl+0x83/0xb0 [ 1010.648186] SyS_ioctl+0x7f/0xb0 [ 1010.648195] ? do_vfs_ioctl+0xff0/0xff0 [ 1010.673053] , order=0, oom_score_adj=0 [ 1010.674364] do_syscall_64+0x1d5/0x640 [ 1010.674381] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1010.674389] RIP: 0033:0x465ef9 [ 1010.674394] RSP: 002b:00007fba3a452188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1010.674404] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1010.674409] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1010.674415] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1010.674420] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1010.674425] R13: 00007ffea651953f R14: 00007fba3a452300 R15: 0000000000022000 [ 1010.841177] in:imklog cpuset=/ mems_allowed=0-1 [ 1010.846298] CPU: 1 PID: 22056 Comm: in:imklog Not tainted 4.14.222-syzkaller #0 [ 1010.853742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1010.863096] Call Trace: [ 1010.865692] dump_stack+0x1b2/0x281 [ 1010.869319] dump_header+0x178/0x82f [ 1010.873033] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1010.878134] ? ___ratelimit+0x2cd/0x530 [ 1010.882107] oom_kill_process.cold+0x10/0xb18 [ 1010.886609] out_of_memory+0xe3e/0x1190 [ 1010.890594] ? oom_killer_disable+0x1c0/0x1c0 [ 1010.895095] ? mutex_trylock+0x152/0x1a0 [ 1010.899157] __alloc_pages_nodemask+0x23e1/0x2720 [ 1010.904016] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1010.908872] alloc_pages_current+0x155/0x260 [ 1010.913288] filemap_fault+0xea3/0x1980 [ 1010.917274] ext4_filemap_fault+0x84/0xb0 [ 1010.921533] __do_fault+0xfa/0x380 [ 1010.925074] __handle_mm_fault+0x2497/0x4620 [ 1010.929478] ? vm_insert_page+0x7c0/0x7c0 [ 1010.933621] ? lock_downgrade+0x740/0x740 [ 1010.937785] handle_mm_fault+0x391/0x860 [ 1010.941841] __do_page_fault+0x549/0xad0 [ 1010.945899] ? spurious_fault+0x640/0x640 [ 1010.950043] ? do_page_fault+0x60/0x500 [ 1010.954012] ? page_fault+0x2f/0x50 [ 1010.957640] page_fault+0x45/0x50 [ 1010.961087] RIP: 1fa0:0x1f9f [ 1010.964093] RSP: 0000:000055b50d3b79d0 EFLAGS: 7f308079ada0 [ 1010.968869] Mem-Info: [ 1010.977534] active_anon:11782 inactive_anon:35173 isolated_anon:0 [ 1010.977534] active_file:134 inactive_file:241 isolated_file:0 [ 1010.977534] unevictable:0 dirty:13 writeback:0 unstable:0 [ 1010.977534] slab_reclaimable:12866 slab_unreclaimable:113259 [ 1010.977534] mapped:52462 shmem:35599 pagetables:746 bounce:0 [ 1010.977534] free:169118 free_pcp:213 free_cma:0 [ 1011.015516] Node 0 active_anon:45720kB inactive_anon:89524kB active_file:120kB inactive_file:372kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162440kB dirty:0kB writeback:0kB shmem:90972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1011.047782] Node 1 active_anon:1420kB inactive_anon:51168kB active_file:432kB inactive_file:696kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47528kB dirty:0kB writeback:0kB shmem:51424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1011.079649] Node 0 DMA free:11116kB min:204kB low:252kB high:300kB active_anon:68kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1011.112633] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1011.118003] Node 0 DMA32 free:45176kB min:36200kB low:45248kB high:54296kB active_anon:45652kB inactive_anon:89504kB active_file:120kB inactive_file:472kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2532kB bounce:0kB free_pcp:356kB local_pcp:20kB free_cma:0kB [ 1011.154392] lowmem_reserve[]: 0 0 0 0 0 [ 1011.158875] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1011.190358] lowmem_reserve[]: 0 0 0 0 0 [ 1011.194468] Node 1 Normal free:393088kB min:53696kB low:67120kB high:80544kB active_anon:1420kB inactive_anon:51168kB active_file:532kB inactive_file:1196kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:456kB bounce:0kB free_pcp:728kB local_pcp:216kB free_cma:0kB [ 1011.228777] lowmem_reserve[]: 0 0 0 0 0 [ 1011.233365] Node 0 DMA: 3*4kB (ME) 70*8kB (UME) 33*16kB (UM) 15*32kB (UME) 13*64kB (UME) 4*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 11116kB [ 1011.255663] Node 0 DMA32: 353*4kB (UME) 141*8kB (ME) 108*16kB (UME) 8*32kB (UE) 473*64kB (UM) 78*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45036kB [ 1011.295659] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1011.336451] Node 1 Normal: 1*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (UM) 5*64kB (M) 794*128kB (UM) 120*256kB (UM) 13*512kB (UM) 88*1024kB (U) 0*2048kB 0*4096kB = 229532kB [ 1011.384380] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1011.403728] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1011.412371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1011.443720] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1011.452354] 37253 total pagecache pages [ 1011.456424] 0 pages in swap cache [ 1011.459872] Swap cache stats: add 0, delete 0, find 0/0 [ 1011.473704] Free swap = 0kB [ 1011.476734] Total swap = 0kB [ 1011.484850] 2097051 pages RAM [ 1011.496709] 0 pages HighMem/MovableOnly [ 1011.500765] 363840 pages reserved [ 1011.513699] 0 pages cma reserved [ 1011.517184] Out of memory (oom_kill_allocating_task): Kill process 22056 (in:imklog) score 0 or sacrifice child [ 1011.545375] Killed process 22046 (rsyslogd) total-vm:254332kB, anon-rss:1220kB, file-rss:0kB, shmem-rss:0kB [ 1011.555894] oom_reaper: reaped process 22874 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1011.575873] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1011.615951] systemd[1]: Failed to start Journal Service. [ 1011.644142] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1011.654578] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 01:28:55 executing program 0: memfd_create(0x0, 0xa) 01:28:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000004300ffcb000000000000080064"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:28:55 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x128, 0x1403, 0x20, 0x70bd2b, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'caif0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'gretap0\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x500, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getpeername$l2tp(r0, 0x0, 0x0) 01:28:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x0, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:28:56 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) ioctl$SIOCRSACCEPT(r1, 0x89e3) [ 1011.657512] systemd[1]: systemd-journald.service: Failed with result 'signal'. 01:28:56 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x0, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:28:56 executing program 0: memfd_create(0x0, 0x0) [ 1011.698205] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1011.722853] systemd[1]: rsyslog.service: Unit entered failed state. [ 1011.892082] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1011.957166] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1011.965203] syz-executor.2 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1011.980890] CPU: 1 PID: 22891 Comm: syz-executor.4 Not tainted 4.14.222-syzkaller #0 [ 1011.988794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1011.998136] Call Trace: [ 1012.000713] dump_stack+0x1b2/0x281 [ 1012.004324] warn_alloc.cold+0x96/0x1cc [ 1012.008281] ? zone_watermark_ok_safe+0x220/0x220 [ 1012.013112] __alloc_pages_nodemask+0x2127/0x2720 [ 1012.017942] ? lock_acquire+0x170/0x3f0 [ 1012.021916] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1012.026761] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1012.032195] ? __mutex_unlock_slowpath+0x75/0x770 [ 1012.037020] alloc_pages_current+0x155/0x260 [ 1012.041415] ion_page_pool_alloc+0x118/0x1b0 [ 1012.045805] ion_system_heap_allocate+0x133/0x8c0 [ 1012.050631] ? ion_alloc+0x187/0x810 [ 1012.054327] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1012.059771] ? ion_system_contig_heap_create+0x130/0x130 [ 1012.065201] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1012.070213] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1012.075039] ion_alloc+0x204/0x810 [ 1012.078563] ? ion_dma_buf_release+0x40/0x40 [ 1012.082972] ? __might_fault+0x177/0x1b0 [ 1012.087017] ion_ioctl+0xea/0x1f0 [ 1012.090451] ? ion_query_heaps+0x360/0x360 [ 1012.094680] ? ion_query_heaps+0x360/0x360 [ 1012.098895] do_vfs_ioctl+0x75a/0xff0 [ 1012.102684] ? ioctl_preallocate+0x1a0/0x1a0 [ 1012.107086] ? lock_downgrade+0x740/0x740 [ 1012.111217] ? __fget+0x225/0x360 [ 1012.114663] ? do_vfs_ioctl+0xff0/0xff0 [ 1012.118622] ? security_file_ioctl+0x83/0xb0 [ 1012.123011] SyS_ioctl+0x7f/0xb0 [ 1012.126356] ? do_vfs_ioctl+0xff0/0xff0 [ 1012.130312] do_syscall_64+0x1d5/0x640 [ 1012.134185] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1012.139357] RIP: 0033:0x465ef9 [ 1012.142527] RSP: 002b:00007f8d04491188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1012.150229] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1012.157489] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1012.164739] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1012.171989] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1012.179239] R13: 00007ffe31d3a91f R14: 00007f8d04491300 R15: 0000000000022000 [ 1012.194736] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1012.195964] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1012.217937] CPU: 1 PID: 21166 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1012.225838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1012.235171] Call Trace: [ 1012.237763] dump_stack+0x1b2/0x281 [ 1012.241372] dump_header+0x178/0x82f [ 1012.245083] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1012.250173] ? ___ratelimit+0x2cd/0x530 [ 1012.254126] oom_kill_process.cold+0x10/0xb18 [ 1012.258609] out_of_memory+0xe3e/0x1190 [ 1012.262565] ? oom_killer_disable+0x1c0/0x1c0 [ 1012.267037] ? mutex_trylock+0x152/0x1a0 [ 1012.271077] __alloc_pages_nodemask+0x23e1/0x2720 [ 1012.275905] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1012.280749] ? cache_grow_begin+0x41/0x630 [ 1012.284978] cache_grow_begin+0x91/0x630 [ 1012.289018] ? cache_grow_begin+0x91/0x630 [ 1012.293246] fallback_alloc+0x207/0x2c0 [ 1012.297204] kmem_cache_alloc+0x1e5/0x3c0 [ 1012.301335] getname_flags+0xc8/0x550 [ 1012.305117] user_path_mountpoint_at+0x23/0x40 [ 1012.311764] SyS_umount+0x125/0xeb0 [ 1012.315390] ? lock_downgrade+0x740/0x740 [ 1012.319518] ? __detach_mounts+0x400/0x400 [ 1012.323734] ? up_read+0x17/0x30 [ 1012.327079] ? __do_page_fault+0x159/0xad0 [ 1012.331291] ? do_syscall_64+0x4c/0x640 [ 1012.335248] ? __detach_mounts+0x400/0x400 [ 1012.339478] do_syscall_64+0x1d5/0x640 [ 1012.343354] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1012.348522] RIP: 0033:0x467357 [ 1012.351690] RSP: 002b:00007ffc8293c2f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1012.359378] RAX: ffffffffffffffda RBX: 0000000000000021 RCX: 0000000000467357 [ 1012.366627] RDX: 00007ffc8293c3cf RSI: 0000000000000002 RDI: 00007ffc8293c3c0 [ 1012.373890] RBP: 00007ffc8293c3c0 R08: 00000000ffffffff R09: 00007ffc8293c190 [ 1012.381140] R10: 00000000027d686b R11: 0000000000000246 R12: 00000000004bbe42 [ 1012.388388] R13: 00007ffc8293d490 R14: 00000000027d6810 R15: 00007ffc8293d4d0 [ 1012.395667] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1012.400842] CPU: 0 PID: 22889 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1012.402649] Mem-Info: [ 1012.408712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1012.408717] Call Trace: [ 1012.408735] dump_stack+0x1b2/0x281 [ 1012.408748] warn_alloc.cold+0x96/0x1cc [ 1012.408759] ? zone_watermark_ok_safe+0x220/0x220 [ 1012.408780] __alloc_pages_nodemask+0x2127/0x2720 [ 1012.408795] ? lock_acquire+0x170/0x3f0 [ 1012.411198] warn_alloc_show_mem: 1 callbacks suppressed [ 1012.411201] Mem-Info: [ 1012.420532] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1012.420548] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1012.420559] ? __mutex_unlock_slowpath+0x75/0x770 [ 1012.420572] alloc_pages_current+0x155/0x260 [ 1012.420587] ion_page_pool_alloc+0x118/0x1b0 [ 1012.420598] ion_system_heap_allocate+0x133/0x8c0 [ 1012.420607] ? ion_alloc+0x187/0x810 [ 1012.420617] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1012.420628] ? ion_system_contig_heap_create+0x130/0x130 [ 1012.426637] active_anon:11469 inactive_anon:35173 isolated_anon:0 [ 1012.426637] active_file:24 inactive_file:13 isolated_file:5 [ 1012.426637] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1012.426637] slab_reclaimable:12862 slab_unreclaimable:113412 [ 1012.426637] mapped:52241 shmem:35599 pagetables:735 bounce:0 [ 1012.426637] free:25172 free_pcp:4 free_cma:0 [ 1012.426840] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1012.430794] Node 0 active_anon:44428kB inactive_anon:89512kB active_file:8kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162200kB dirty:0kB writeback:0kB shmem:90960kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1012.435698] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1012.435710] ion_alloc+0x204/0x810 [ 1012.435725] ? ion_dma_buf_release+0x40/0x40 [ 1012.435735] ? __might_fault+0x177/0x1b0 [ 1012.435750] ion_ioctl+0xea/0x1f0 [ 1012.440608] active_anon:11469 inactive_anon:35173 isolated_anon:0 [ 1012.440608] active_file:24 inactive_file:13 isolated_file:5 [ 1012.440608] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1012.440608] slab_reclaimable:12862 slab_unreclaimable:113412 [ 1012.440608] mapped:52241 shmem:35599 pagetables:735 bounce:0 [ 1012.440608] free:25172 free_pcp:4 free_cma:0 [ 1012.444545] ? ion_query_heaps+0x360/0x360 [ 1012.444558] ? ion_query_heaps+0x360/0x360 [ 1012.444567] do_vfs_ioctl+0x75a/0xff0 [ 1012.444577] ? ioctl_preallocate+0x1a0/0x1a0 [ 1012.444586] ? lock_downgrade+0x740/0x740 [ 1012.444599] ? __fget+0x225/0x360 [ 1012.444608] ? do_vfs_ioctl+0xff0/0xff0 [ 1012.444617] ? security_file_ioctl+0x83/0xb0 [ 1012.444627] SyS_ioctl+0x7f/0xb0 [ 1012.453271] Node 0 active_anon:44428kB inactive_anon:89512kB active_file:8kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162200kB dirty:0kB writeback:0kB shmem:90960kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1012.457177] ? do_vfs_ioctl+0xff0/0xff0 [ 1012.457188] do_syscall_64+0x1d5/0x640 [ 1012.457203] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1012.457211] RIP: 0033:0x465ef9 [ 1012.457218] RSP: 002b:00007f6ee7ac3188 EFLAGS: 00000246 [ 1012.462655] Node 1 active_anon:1448kB inactive_anon:51180kB active_file:88kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:46764kB dirty:4kB writeback:0kB shmem:51436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1012.467460] ORIG_RAX: 0000000000000010 [ 1012.467466] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1012.467471] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1012.467476] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1012.467481] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1012.467486] R13: 00007ffe0127fadf R14: 00007f6ee7ac3300 R15: 0000000000022000 [ 1012.554095] Node 1 active_anon:1448kB inactive_anon:51180kB active_file:88kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:46764kB dirty:4kB writeback:0kB shmem:51436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1012.561736] Node 0 [ 1012.593511] Node 0 [ 1012.616237] DMA free:11252kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1012.663512] DMA free:11252kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1012.680143] lowmem_reserve[]: [ 1012.732043] lowmem_reserve[]: [ 1012.739246] 0 [ 1012.739964] 0 [ 1012.747113] 2717 2718 2718 2718 [ 1012.747130] Node 0 DMA32 free:35936kB min:36200kB low:45248kB high:54296kB active_anon:44368kB inactive_anon:89492kB active_file:8kB inactive_file:96kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2312kB bounce:0kB free_pcp:800kB local_pcp:168kB free_cma:0kB [ 1012.747151] lowmem_reserve[]: 0 0 0 0 0 [ 1012.747168] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1012.747184] lowmem_reserve[]: 0 0 0 0 0 [ 1012.747202] Node 1 Normal free:53656kB min:53696kB low:67120kB high:80544kB active_anon:1448kB inactive_anon:51180kB active_file:88kB inactive_file:32kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:628kB bounce:0kB free_pcp:48kB local_pcp:0kB free_cma:0kB [ 1012.747222] lowmem_reserve[]: [ 1012.755225] 2717 [ 1012.766250] 0 [ 1012.769174] 2718 [ 1012.799773] 0 [ 1012.800895] 2718 [ 1012.830039] 0 [ 1012.852764] 2718 [ 1012.852771] Node 0 DMA32 free:36440kB min:36200kB low:45248kB high:54296kB active_anon:44368kB inactive_anon:89492kB active_file:8kB inactive_file:96kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2312kB bounce:0kB free_pcp:168kB local_pcp:0kB free_cma:0kB [ 1012.852789] lowmem_reserve[]: 0 0 0 0 0 [ 1012.852804] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1012.852819] lowmem_reserve[]: 0 0 0 0 0 [ 1012.852837] Node 1 Normal free:53656kB min:53696kB low:67120kB high:80544kB active_anon:1448kB inactive_anon:51180kB active_file:88kB inactive_file:32kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:628kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1012.852854] lowmem_reserve[]: 0 0 0 0 0 [ 1012.852871] Node 0 DMA: 5*4kB (ME) 47*8kB (UME) 33*16kB (UM) 15*32kB (UME) 15*64kB (UME) 4*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 11068kB [ 1012.852938] Node 0 DMA32: 590*4kB (ME) 154*8kB (ME) 119*16kB (UME) 9*32kB (ME) 205*64kB (UME) 122*128kB (UM) 8*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB [ 1012.862183] 0 [ 1012.883460] = 36568kB [ 1012.897858] 0 [ 1012.923475] Node 0 [ 1012.931988] Normal: [ 1012.963251] Node 0 [ 1012.964899] 0*4kB [ 1012.966921] DMA: [ 1012.968707] 0*8kB [ 1012.970767] 5*4kB [ 1012.972551] 0*16kB [ 1012.978326] (ME) [ 1013.018964] 0*32kB [ 1013.044483] 47*8kB [ 1013.070774] 0*64kB [ 1013.102868] (UME) [ 1013.110755] 0*128kB [ 1013.126840] 33*16kB [ 1013.138035] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1013.160676] (UM) 15*32kB (UME) 15*64kB (UME) 4*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 11068kB [ 1013.164116] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1013.188250] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1013.191290] Node 0 DMA32: 632*4kB (ME) 155*8kB (UME) 118*16kB (ME) 10*32kB (UME) 189*64kB (UME) 122*128kB (UM) 8*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35736kB [ 1013.202767] Node 1 [ 1013.230091] CPU: 0 PID: 22886 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1013.231549] Node 0 [ 1013.232468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1013.251887] Call Trace: [ 1013.254483] dump_stack+0x1b2/0x281 [ 1013.255608] Normal: 0*4kB [ 1013.258107] warn_alloc.cold+0x96/0x1cc [ 1013.258118] ? zone_watermark_ok_safe+0x220/0x220 [ 1013.260941] 0*8kB 0*16kB [ 1013.264924] __alloc_pages_nodemask+0x2127/0x2720 [ 1013.264941] ? lock_acquire+0x170/0x3f0 [ 1013.264955] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1013.264972] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1013.264984] ? __mutex_unlock_slowpath+0x75/0x770 [ 1013.265000] alloc_pages_current+0x155/0x260 [ 1013.265014] ion_page_pool_alloc+0x118/0x1b0 [ 1013.282955] 0*32kB [ 1013.286204] ion_system_heap_allocate+0x133/0x8c0 [ 1013.286215] ? ion_alloc+0x187/0x810 [ 1013.286225] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1013.286235] ? ion_system_contig_heap_create+0x130/0x130 [ 1013.286245] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1013.286256] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1013.286266] ion_alloc+0x204/0x810 [ 1013.286279] ? ion_dma_buf_release+0x40/0x40 [ 1013.293186] Normal: [ 1013.296633] ? __might_fault+0x177/0x1b0 [ 1013.296648] ion_ioctl+0xea/0x1f0 [ 1013.296658] ? ion_query_heaps+0x360/0x360 [ 1013.296670] ? ion_query_heaps+0x360/0x360 [ 1013.296681] do_vfs_ioctl+0x75a/0xff0 [ 1013.296693] ? ioctl_preallocate+0x1a0/0x1a0 [ 1013.296702] ? lock_downgrade+0x740/0x740 [ 1013.296715] ? __fget+0x225/0x360 [ 1013.296723] ? do_vfs_ioctl+0xff0/0xff0 [ 1013.296733] ? security_file_ioctl+0x83/0xb0 [ 1013.296743] SyS_ioctl+0x7f/0xb0 [ 1013.314063] 0*64kB [ 1013.316319] ? do_vfs_ioctl+0xff0/0xff0 [ 1013.321747] 0*128kB [ 1013.327179] do_syscall_64+0x1d5/0x640 [ 1013.327195] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1013.327203] RIP: 0033:0x465ef9 [ 1013.327208] RSP: 002b:00007fba3a452188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1013.327216] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1013.327220] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1013.327224] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1013.327229] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1013.327233] R13: 00007ffea651953f R14: 00007fba3a452300 R15: 0000000000022000 [ 1013.363291] 133*4kB [ 1013.372977] 0*256kB [ 1013.395287] (M) [ 1013.406591] 0*512kB [ 1013.428766] 104*8kB [ 1013.443425] 0*1024kB [ 1013.467798] (M) 72*16kB (UM) 62*32kB (UM) 375*64kB (UM) 35*128kB (UM) 1*256kB (M) 1*512kB (M) 19*1024kB (U) 0*2048kB 0*4096kB = 53204kB [ 1013.476945] 0*2048kB 0*4096kB = 0kB [ 1013.491359] Node 1 Normal: 133*4kB (M) 104*8kB (M) 72*16kB (UM) 62*32kB (UM) 375*64kB (UM) 35*128kB (UM) 1*256kB (M) 1*512kB (M) 19*1024kB (U) 0*2048kB 0*4096kB = 53204kB [ 1013.504057] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1013.515778] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1013.515789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1013.515795] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1013.515802] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1013.515806] 35625 total pagecache pages [ 1013.515814] 0 pages in swap cache [ 1013.515819] Swap cache stats: add 0, delete 0, find 0/0 [ 1013.515823] Free swap = 0kB [ 1013.515828] Total swap = 0kB [ 1013.543307] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1013.560005] 2097051 pages RAM [ 1013.568936] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1013.596468] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1013.607222] 35625 total pagecache pages [ 1013.611200] 0 pages in swap cache [ 1013.619404] Swap cache stats: add 0, delete 0, find 0/0 [ 1013.623113] 0 pages HighMem/MovableOnly [ 1013.627197] Free swap = 0kB [ 1013.632519] Total swap = 0kB [ 1013.639717] 2097051 pages RAM [ 1013.642915] 0 pages HighMem/MovableOnly [ 1013.648927] 363840 pages reserved [ 1013.652378] 0 pages cma reserved [ 1013.659909] Out of memory (oom_kill_allocating_task): Kill process 21166 (syz-executor.2) score 0 or sacrifice child [ 1013.663078] 363840 pages reserved [ 1013.672339] Killed process 21166 (syz-executor.2) total-vm:93100kB, anon-rss:104kB, file-rss:34516kB, shmem-rss:0kB [ 1013.684784] 0 pages cma reserved [ 1013.751957] oom_reaper: reaped process 21166 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1013.926114] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1013.981760] systemd cpuset=/ mems_allowed=0-1 [ 1013.999392] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.222-syzkaller #0 [ 1014.006352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1014.015710] Call Trace: [ 1014.018303] dump_stack+0x1b2/0x281 [ 1014.021936] dump_header+0x178/0x82f [ 1014.025652] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1014.030754] ? ___ratelimit+0x2cd/0x530 [ 1014.034729] oom_kill_process.cold+0x10/0xb18 [ 1014.039225] ? lock_downgrade+0x740/0x740 [ 1014.043371] out_of_memory+0x2dc/0x1190 [ 1014.047354] ? oom_killer_disable+0x1c0/0x1c0 [ 1014.051873] ? mutex_trylock+0x152/0x1a0 [ 1014.055933] __alloc_pages_nodemask+0x23e1/0x2720 [ 1014.060784] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1014.066594] alloc_pages_current+0x155/0x260 [ 1014.071000] filemap_fault+0xea3/0x1980 [ 1014.074981] ext4_filemap_fault+0x84/0xb0 [ 1014.079125] __do_fault+0xfa/0x380 [ 1014.082661] __handle_mm_fault+0x2497/0x4620 [ 1014.087068] ? vm_insert_page+0x7c0/0x7c0 [ 1014.091213] ? __fd_install+0x227/0x5c0 [ 1014.095181] ? putname+0xcd/0x110 [ 1014.098638] handle_mm_fault+0x391/0x860 [ 1014.102698] __do_page_fault+0x549/0xad0 [ 1014.106757] ? spurious_fault+0x640/0x640 [ 1014.110900] ? do_page_fault+0x60/0x500 [ 1014.114868] ? page_fault+0x2f/0x50 [ 1014.118487] page_fault+0x45/0x50 [ 1014.121934] RIP: ffffffff:0xffffffff [ 1014.125637] RSP: 9dca7e50:00007f402b451440 EFLAGS: 00000000 [ 1014.155332] Mem-Info: [ 1014.163545] active_anon:11472 inactive_anon:35173 isolated_anon:0 [ 1014.163545] active_file:16 inactive_file:135 isolated_file:17 [ 1014.163545] unevictable:0 dirty:0 writeback:2 unstable:0 [ 1014.163545] slab_reclaimable:12862 slab_unreclaimable:112978 [ 1014.163545] mapped:52281 shmem:35599 pagetables:732 bounce:0 [ 1014.163545] free:30505 free_pcp:255 free_cma:0 [ 1014.197192] Node 0 active_anon:44428kB inactive_anon:89512kB active_file:24kB inactive_file:440kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162416kB dirty:0kB writeback:12kB shmem:90960kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1014.225274] Node 1 active_anon:1460kB inactive_anon:51180kB active_file:40kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):68kB mapped:46708kB dirty:0kB writeback:0kB shmem:51436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1014.252653] Node 0 DMA free:11116kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1014.293295] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1014.298366] Node 0 DMA32 free:66244kB min:36200kB low:45248kB high:54296kB active_anon:44368kB inactive_anon:89492kB active_file:124kB inactive_file:160kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2228kB bounce:0kB free_pcp:652kB local_pcp:8kB free_cma:0kB [ 1014.327311] lowmem_reserve[]: 0 0 0 0 0 [ 1014.331307] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1014.357019] lowmem_reserve[]: 0 0 0 0 0 [ 1014.365504] Node 1 Normal free:233552kB min:53696kB low:67120kB high:80544kB active_anon:1460kB inactive_anon:51180kB active_file:520kB inactive_file:104kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:700kB bounce:0kB free_pcp:884kB local_pcp:680kB free_cma:0kB [ 1014.403331] lowmem_reserve[]: 0 0 0 0 0 [ 1014.420761] Node 0 DMA: 5*4kB (ME) 5*8kB (UME) 33*16kB (UM) 15*32kB (UME) 13*64kB (UME) 2*128kB (ME) 3*256kB (UE) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 11116kB [ 1014.463273] Node 0 DMA32: 298*4kB (UME) 158*8kB (UME) 121*16kB (ME) 218*32kB (UME) 309*64kB (UME) 141*128kB (UM) 9*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 51496kB [ 1014.486468] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1014.533603] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 1032*64kB (UM) 186*128kB (UM) 19*256kB (UM) 1*512kB (M) 19*1024kB (U) 0*2048kB 0*4096kB = 114792kB [ 1014.566358] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1014.578828] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1014.629127] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1014.648363] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1014.657171] 35741 total pagecache pages [ 1014.661895] 0 pages in swap cache [ 1014.665510] Swap cache stats: add 0, delete 0, find 0/0 [ 1014.670932] Free swap = 0kB [ 1014.674606] Total swap = 0kB [ 1014.677680] 2097051 pages RAM [ 1014.680834] 0 pages HighMem/MovableOnly [ 1014.685231] 363840 pages reserved [ 1014.689147] 0 pages cma reserved [ 1014.692967] Out of memory: Kill process 22883 (syz-executor.3) score 1004 or sacrifice child [ 1014.702075] Killed process 22889 (syz-executor.3) total-vm:93232kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 1014.739790] oom_reaper: reaped process 22889 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1014.820889] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1014.842760] systemd[1]: Stopped System Logging Service. [ 1014.911048] systemd[1]: Starting System Logging Service... [ 1015.043569] oom_reaper: reaped process 22891 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1015.068814] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1015.103251] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1015.107064] syz-executor.4 cpuset= [ 1015.126728] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1015.135905] / mems_allowed=0-1 [ 1015.137535] CPU: 0 PID: 22889 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1015.146983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1015.156326] Call Trace: [ 1015.158904] dump_stack+0x1b2/0x281 [ 1015.162516] warn_alloc.cold+0x96/0x1cc [ 1015.166476] ? zone_watermark_ok_safe+0x220/0x220 [ 1015.171319] ? usleep_range+0x130/0x130 [ 1015.175278] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1015.180364] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1015.183214] syz-executor.4: page allocation failure: order:0 [ 1015.185366] ? run_timer_softirq+0x5a0/0x5a0 [ 1015.185381] __alloc_pages_nodemask+0x2127/0x2720 [ 1015.191155] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1015.195548] ? lock_acquire+0x170/0x3f0 [ 1015.195563] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1015.195573] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1015.195588] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1015.195607] alloc_pages_current+0x155/0x260 [ 1015.213649] (null) [ 1015.216270] ion_page_pool_alloc+0x118/0x1b0 [ 1015.220734] syz-executor.4 cpuset= [ 1015.226172] ion_system_heap_allocate+0x133/0x8c0 [ 1015.226182] ? ion_alloc+0x187/0x810 [ 1015.226192] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1015.226201] ? ion_system_contig_heap_create+0x130/0x130 [ 1015.226210] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1015.226222] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1015.243167] / [ 1015.245459] ion_alloc+0x204/0x810 [ 1015.249147] mems_allowed=0-1 [ 1015.254579] ? ion_dma_buf_release+0x40/0x40 [ 1015.254592] ? __might_fault+0x177/0x1b0 [ 1015.254604] ion_ioctl+0xea/0x1f0 [ 1015.254613] ? ion_query_heaps+0x360/0x360 [ 1015.254629] ? ion_query_heaps+0x360/0x360 [ 1015.298523] do_vfs_ioctl+0x75a/0xff0 [ 1015.302308] ? ioctl_preallocate+0x1a0/0x1a0 [ 1015.306698] ? lock_downgrade+0x740/0x740 [ 1015.310828] ? __fget+0x225/0x360 [ 1015.315394] ? do_vfs_ioctl+0xff0/0xff0 [ 1015.319351] ? security_file_ioctl+0x83/0xb0 [ 1015.323745] SyS_ioctl+0x7f/0xb0 [ 1015.327092] ? do_vfs_ioctl+0xff0/0xff0 [ 1015.331053] do_syscall_64+0x1d5/0x640 [ 1015.334929] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1015.340101] RIP: 0033:0x465ef9 [ 1015.343286] RSP: 002b:00007f6ee7ac3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1015.350973] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1015.358223] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1015.365490] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1015.372744] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1015.379995] R13: 00007ffe0127fadf R14: 00007f6ee7ac3300 R15: 0000000000022000 [ 1015.387260] CPU: 1 PID: 22351 Comm: syz-executor.4 Not tainted 4.14.222-syzkaller #0 [ 1015.392786] warn_alloc_show_mem: 2 callbacks suppressed [ 1015.392789] Mem-Info: [ 1015.395361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1015.395365] Call Trace: [ 1015.395383] dump_stack+0x1b2/0x281 [ 1015.395396] dump_header+0x178/0x82f [ 1015.400754] active_anon:11449 inactive_anon:35173 isolated_anon:0 [ 1015.400754] active_file:24 inactive_file:35 isolated_file:0 [ 1015.400754] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1015.400754] slab_reclaimable:12861 slab_unreclaimable:112998 [ 1015.400754] mapped:52245 shmem:35599 pagetables:704 bounce:0 [ 1015.400754] free:13819 free_pcp:30 free_cma:0 [ 1015.403137] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1015.403145] ? ___ratelimit+0x2cd/0x530 [ 1015.403157] oom_kill_process.cold+0x10/0xb18 [ 1015.412584] Node 0 active_anon:44540kB inactive_anon:89508kB active_file:92kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162256kB dirty:0kB writeback:0kB shmem:90956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1015.415148] out_of_memory+0xe3e/0x1190 [ 1015.415161] ? oom_killer_disable+0x1c0/0x1c0 [ 1015.418771] Node 1 active_anon:1256kB inactive_anon:51184kB active_file:4kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46724kB dirty:0kB writeback:0kB shmem:51440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1015.422462] ? mutex_trylock+0x152/0x1a0 [ 1015.455613] Node 0 [ 1015.460681] __alloc_pages_nodemask+0x23e1/0x2720 [ 1015.464654] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1015.469133] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1015.496785] lowmem_reserve[]: [ 1015.500739] alloc_pages_current+0x155/0x260 [ 1015.505212] 0 [ 1015.532247] filemap_fault+0xea3/0x1980 [ 1015.532264] ext4_filemap_fault+0x84/0xb0 [ 1015.536314] 2717 [ 1015.538525] __do_fault+0xfa/0x380 [ 1015.543353] 2718 [ 1015.568907] __handle_mm_fault+0x2497/0x4620 [ 1015.568916] ? vm_insert_page+0x7c0/0x7c0 [ 1015.568924] ? nanosleep_copyout+0x100/0x100 [ 1015.568942] handle_mm_fault+0x391/0x860 [ 1015.574318] 2718 [ 1015.576849] __do_page_fault+0x549/0xad0 [ 1015.581223] 2718 [ 1015.583013] ? spurious_fault+0x640/0x640 [ 1015.586980] Node 0 [ 1015.591104] ? do_page_fault+0x60/0x500 [ 1015.593170] DMA32 free:17624kB min:36200kB low:45248kB high:54296kB active_anon:44432kB inactive_anon:89488kB active_file:432kB inactive_file:216kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2228kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1015.596665] ? page_fault+0x2f/0x50 [ 1015.598700] lowmem_reserve[]: [ 1015.603087] page_fault+0x45/0x50 [ 1015.603095] RIP: f7948:0x4 [ 1015.603099] RSP: 000b:00007ffe31d3abdc EFLAGS: 00000025 [ 1015.606237] CPU: 1 PID: 22891 Comm: syz-executor.4 Not tainted 4.14.222-syzkaller #0 [ 1015.608584] 0 [ 1015.611636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1015.624566] 0 [ 1015.628036] Call Trace: [ 1015.630259] 0 [ 1015.634248] dump_stack+0x1b2/0x281 [ 1015.634262] warn_alloc.cold+0x96/0x1cc [ 1015.634272] ? zone_watermark_ok_safe+0x220/0x220 [ 1015.634283] ? usleep_range+0x130/0x130 [ 1015.662552] 0 [ 1015.666143] ? try_to_free_pages+0x23f/0x6e0 [ 1015.666151] ? _find_next_bit+0xdb/0x100 [ 1015.666162] ? run_timer_softirq+0x5a0/0x5a0 [ 1015.669243] 0 [ 1015.672684] __alloc_pages_nodemask+0x2127/0x2720 [ 1015.680849] ? lock_acquire+0x170/0x3f0 [ 1015.688735] Node 0 [ 1015.690512] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1015.699952] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1015.701719] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1015.704287] lowmem_reserve[]: [ 1015.706067] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1015.709660] 0 [ 1015.713624] alloc_pages_current+0x155/0x260 [ 1015.713638] ion_page_pool_alloc+0x118/0x1b0 [ 1015.718451] 0 [ 1015.722406] ion_system_heap_allocate+0x133/0x8c0 [ 1015.724197] 0 [ 1015.728576] ? ion_alloc+0x187/0x810 [ 1015.732606] 0 [ 1015.736997] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1015.737007] ? ion_system_contig_heap_create+0x130/0x130 [ 1015.737018] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1015.738795] 0 [ 1015.743616] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1015.743627] ion_alloc+0x204/0x810 [ 1015.743642] ? ion_dma_buf_release+0x40/0x40 [ 1015.749944] ? __might_fault+0x177/0x1b0 [ 1015.754769] Node 1 [ 1015.779630] ion_ioctl+0xea/0x1f0 [ 1015.779642] ? ion_query_heaps+0x360/0x360 [ 1015.779654] ? ion_query_heaps+0x360/0x360 [ 1015.784159] Normal free:26692kB min:53696kB low:67120kB high:80544kB active_anon:1256kB inactive_anon:51184kB active_file:32kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:588kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1015.787219] do_vfs_ioctl+0x75a/0xff0 [ 1015.792638] lowmem_reserve[]: [ 1015.794431] ? ioctl_preallocate+0x1a0/0x1a0 [ 1015.794445] ? lock_downgrade+0x740/0x740 [ 1015.794459] ? __fget+0x225/0x360 [ 1015.798838] 0 [ 1015.803229] ? do_vfs_ioctl+0xff0/0xff0 [ 1015.803240] ? security_file_ioctl+0x83/0xb0 [ 1015.803249] SyS_ioctl+0x7f/0xb0 [ 1015.805027] 0 [ 1015.809860] ? do_vfs_ioctl+0xff0/0xff0 [ 1015.811631] 0 [ 1015.815330] do_syscall_64+0x1d5/0x640 [ 1015.815349] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1015.817125] 0 [ 1015.822591] RIP: 0033:0x465ef9 [ 1015.828028] 0 [ 1015.833029] RSP: 002b:00007f8d04491188 EFLAGS: 00000246 [ 1015.834838] Mem-Info: [ 1015.839631] ORIG_RAX: 0000000000000010 [ 1015.847558] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1015.851593] Node 0 [ 1015.853810] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1015.853816] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1015.853821] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1015.853826] R13: 00007ffe31d3a91f R14: 00007f8d04491300 R15: 0000000000022000 [ 1015.855836] active_anon:11449 inactive_anon:35173 isolated_anon:0 [ 1015.855836] active_file:24 inactive_file:35 isolated_file:0 [ 1015.855836] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1015.855836] slab_reclaimable:12861 slab_unreclaimable:112998 [ 1015.855836] mapped:52245 shmem:35599 pagetables:704 bounce:0 [ 1015.855836] free:13858 free_pcp:60 free_cma:0 [ 1015.857266] DMA: [ 1015.861523] Node 0 active_anon:44540kB inactive_anon:89508kB active_file:92kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162256kB dirty:0kB writeback:0kB shmem:90956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1015.883090] 4*4kB [ 1015.894440] Node 1 active_anon:1256kB inactive_anon:51184kB active_file:4kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46724kB dirty:0kB writeback:0kB shmem:51440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1015.907657] (ME) [ 1015.909020] Node 0 [ 1015.912458] 2*8kB [ 1015.915261] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1015.938580] syz-executor.4: [ 1015.943405] (ME) [ 1015.946075] page allocation failure: order:4 [ 1015.947773] 21*16kB [ 1015.949557] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1015.954933] (UM) 15*32kB (UME) 12*64kB (UME) 3*128kB (ME) 3*256kB (UE) 4*512kB (UME) 2*1024kB (ME) 2*2048kB [ 1015.960562] lowmem_reserve[]: [ 1015.961321] (U) [ 1015.970445] (null) [ 1015.971399] 0*4096kB [ 1015.981417] 0 [ 1015.986189] = 10960kB [ 1015.993381] syz-executor.4 cpuset= [ 1016.000264] Node 0 [ 1016.035286] 2717 [ 1016.039291] DMA32: [ 1016.066564] 2718 [ 1016.072846] 615*4kB [ 1016.095355] 2718 [ 1016.100218] / [ 1016.100486] 2718 [ 1016.132240] (UME) [ 1016.138003] 163*8kB [ 1016.145108] Node 0 DMA32 free:17780kB min:36200kB low:45248kB high:54296kB active_anon:44564kB inactive_anon:89488kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2240kB bounce:0kB free_pcp:228kB local_pcp:116kB free_cma:0kB [ 1016.145126] lowmem_reserve[]: 0 0 0 0 0 [ 1016.145145] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1016.145160] lowmem_reserve[]: 0 0 0 [ 1016.158917] mems_allowed=0-1 [ 1016.161572] 0 [ 1016.162385] CPU: 1 PID: 22891 Comm: syz-executor.4 Not tainted 4.14.222-syzkaller #0 [ 1016.164801] 0 [ 1016.166553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1016.172454] Call Trace: [ 1016.174897] Node 1 [ 1016.176723] dump_stack+0x1b2/0x281 [ 1016.178940] Normal free:26768kB min:53696kB low:67120kB high:80544kB active_anon:1216kB inactive_anon:51184kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:592kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1016.180978] warn_alloc.cold+0x96/0x1cc [ 1016.183283] lowmem_reserve[]: [ 1016.185319] ? zone_watermark_ok_safe+0x220/0x220 [ 1016.187005] 0 [ 1016.189060] __alloc_pages_nodemask+0x2127/0x2720 [ 1016.191171] 0 [ 1016.193478] ? lock_acquire+0x170/0x3f0 [ 1016.193495] ? lock_acquire+0x170/0x3f0 [ 1016.222369] 0 [ 1016.226321] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1016.226338] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1016.251818] 0 [ 1016.255432] ? __mutex_unlock_slowpath+0x75/0x770 [ 1016.255447] alloc_pages_current+0x155/0x260 [ 1016.258523] 0 [ 1016.260312] ion_page_pool_alloc+0x118/0x1b0 [ 1016.269946] ion_system_heap_allocate+0x133/0x8c0 [ 1016.279285] Node 0 [ 1016.281841] ? _raw_spin_unlock+0x29/0x40 [ 1016.284059] DMA: [ 1016.287672] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1016.315416] 4*4kB [ 1016.319359] ? ion_system_contig_heap_create+0x130/0x130 [ 1016.322435] (ME) [ 1016.327260] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1016.327270] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1016.327281] ion_alloc+0x27a/0x810 [ 1016.329053] 2*8kB [ 1016.333894] ? ion_dma_buf_release+0x40/0x40 [ 1016.333906] ? __might_fault+0x177/0x1b0 [ 1016.335682] (ME) [ 1016.339637] ion_ioctl+0xea/0x1f0 [ 1016.343592] 21*16kB [ 1016.345365] ? ion_query_heaps+0x360/0x360 [ 1016.350191] (UM) [ 1016.355626] ? ion_query_heaps+0x360/0x360 [ 1016.355638] do_vfs_ioctl+0x75a/0xff0 [ 1016.357413] 15*32kB [ 1016.362254] ? ioctl_preallocate+0x1a0/0x1a0 [ 1016.366649] (UME) [ 1016.368421] ? lock_downgrade+0x740/0x740 [ 1016.368434] ? __fget+0x225/0x360 [ 1016.372810] 12*64kB [ 1016.377639] ? do_vfs_ioctl+0xff0/0xff0 [ 1016.377649] ? security_file_ioctl+0x83/0xb0 [ 1016.377659] SyS_ioctl+0x7f/0xb0 [ 1016.379871] (UME) [ 1016.383998] ? do_vfs_ioctl+0xff0/0xff0 [ 1016.384009] do_syscall_64+0x1d5/0x640 [ 1016.384024] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1016.386055] 3*128kB [ 1016.390974] RIP: 0033:0x465ef9 [ 1016.393110] (ME) [ 1016.398525] RSP: 002b:00007f8d04491188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1016.400571] 3*256kB [ 1016.405562] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1016.405569] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1016.405574] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1016.405582] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1016.410396] (UE) [ 1016.413911] R13: 00007ffe31d3a91f R14: 00007f8d04491300 R15: 0000000000022000 [ 1016.418579] (ME) [ 1016.420448] 4*512kB [ 1016.424536] 126*16kB (UME) 15*32kB (UME) 6*64kB (ME) 83*128kB (UM) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17780kB [ 1016.424584] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1016.424626] Node 1 Normal: 114*4kB (UM) 95*8kB (UM) 65*16kB (UM) 53*32kB (UM) 67*64kB (UM) 19*128kB (UM) 3*256kB (M) 2*512kB (UM) 14*1024kB (U) 0*2048kB 0*4096kB = 26800kB [ 1016.424699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1016.424706] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1016.424718] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1016.424724] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1016.424728] 35633 total pagecache pages [ 1016.424738] 0 pages in swap cache [ 1016.424742] Swap cache stats: add 0, delete 0, find 0/0 [ 1016.424745] Free swap = 0kB [ 1016.424748] Total swap = 0kB [ 1016.424753] 2097051 pages RAM [ 1016.424756] 0 pages HighMem/MovableOnly [ 1016.424759] 363840 pages reserved [ 1016.424762] 0 pages cma reserved [ 1016.457717] syz-executor.3: [ 1016.465657] (UME) [ 1016.465678] page allocation failure: order:4 [ 1016.469630] 2*1024kB [ 1016.474595] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1016.479805] (ME) [ 1016.483594] (null) [ 1016.483600] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1016.483621] CPU: 1 PID: 22889 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1016.489654] 2*2048kB [ 1016.492653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1016.494980] (U) [ 1016.498135] Call Trace: [ 1016.500172] 0*4096kB = 10960kB [ 1016.507873] dump_stack+0x1b2/0x281 [ 1016.507887] warn_alloc.cold+0x96/0x1cc [ 1016.510182] Node 0 [ 1016.517436] ? zone_watermark_ok_safe+0x220/0x220 [ 1016.517459] __alloc_pages_nodemask+0x2127/0x2720 [ 1016.524712] DMA32: [ 1016.531958] ? lock_acquire+0x170/0x3f0 [ 1016.539221] 615*4kB [ 1016.541266] ? lock_acquire+0x170/0x3f0 [ 1016.548520] (UME) [ 1016.550559] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1016.552848] 163*8kB (ME) [ 1016.564195] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1016.564209] ? __mutex_unlock_slowpath+0x75/0x770 [ 1016.574854] 126*16kB [ 1016.590262] alloc_pages_current+0x155/0x260 [ 1016.590278] ion_page_pool_alloc+0x118/0x1b0 [ 1016.599095] (UME) [ 1016.607642] ion_system_heap_allocate+0x133/0x8c0 [ 1016.607656] ? _raw_spin_unlock+0x29/0x40 [ 1016.616587] 15*32kB [ 1016.625146] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1016.625156] ? ion_system_contig_heap_create+0x130/0x130 [ 1016.625167] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1016.629123] (UME) [ 1016.632556] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1016.637904] 6*64kB [ 1016.640894] ion_alloc+0x27a/0x810 [ 1016.643897] (ME) [ 1016.646975] ? ion_dma_buf_release+0x40/0x40 [ 1016.650918] 83*128kB [ 1016.654442] ? __might_fault+0x177/0x1b0 [ 1016.654453] ion_ioctl+0xea/0x1f0 [ 1016.654464] ? ion_query_heaps+0x360/0x360 [ 1016.657802] (UM) [ 1016.660805] ? ion_query_heaps+0x360/0x360 [ 1016.662926] 2*256kB [ 1016.667314] do_vfs_ioctl+0x75a/0xff0 [ 1016.667326] ? ioctl_preallocate+0x1a0/0x1a0 [ 1016.667336] ? lock_downgrade+0x740/0x740 [ 1016.669720] (UM) [ 1016.676803] ? __fget+0x225/0x360 [ 1016.676814] ? do_vfs_ioctl+0xff0/0xff0 [ 1016.678879] 0*512kB [ 1016.681011] ? security_file_ioctl+0x83/0xb0 [ 1016.686097] 0*1024kB [ 1016.693946] SyS_ioctl+0x7f/0xb0 [ 1016.693954] ? do_vfs_ioctl+0xff0/0xff0 [ 1016.693965] do_syscall_64+0x1d5/0x640 [ 1016.696362] warn_alloc_show_mem: 1 callbacks suppressed [ 1016.696366] Mem-Info: [ 1016.705694] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1016.705704] RIP: 0033:0x465ef9 [ 1016.707658] 0*2048kB [ 1016.710214] RSP: 002b:00007f6ee7ac3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1016.713400] 0*4096kB [ 1016.716991] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1016.716998] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1016.720944] = 17780kB [ 1016.723157] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1016.723163] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1016.723168] R13: 00007ffe0127fadf R14: 00007f6ee7ac3300 R15: 0000000000022000 [ 1016.726156] active_anon:11447 inactive_anon:35173 isolated_anon:0 [ 1016.726156] active_file:17 inactive_file:17 isolated_file:0 [ 1016.726156] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1016.726156] slab_reclaimable:12861 slab_unreclaimable:113014 [ 1016.726156] mapped:52225 shmem:35599 pagetables:708 bounce:0 [ 1016.726156] free:13877 free_pcp:56 free_cma:0 [ 1016.728005] Node 0 [ 1016.732847] Node 0 active_anon:44572kB inactive_anon:89508kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162192kB dirty:0kB writeback:0kB shmem:90956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1016.752990] Normal: [ 1016.755862] Node 1 active_anon:1216kB inactive_anon:51184kB active_file:28kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46708kB dirty:0kB writeback:0kB shmem:51440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1016.760687] 0*4kB [ 1016.765634] Node 0 [ 1016.776886] 0*8kB [ 1016.779591] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1016.817622] 0*16kB [ 1016.819288] lowmem_reserve[]: [ 1016.820773] 0*32kB [ 1016.825190] 0 [ 1016.847620] 0*64kB [ 1016.848481] 2717 [ 1016.851699] 0*128kB [ 1016.856115] 2718 2718 2718 [ 1016.856128] Node 0 DMA32 free:17780kB min:36200kB low:45248kB high:54296kB active_anon:44564kB inactive_anon:89488kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2240kB bounce:0kB free_pcp:216kB local_pcp:108kB free_cma:0kB [ 1016.856149] lowmem_reserve[]: 0 0 0 0 0 [ 1016.856173] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1016.895207] 0*256kB [ 1016.896059] lowmem_reserve[]: [ 1016.897932] 0*512kB [ 1016.903162] 0 0 0 0 0 [ 1016.903180] Node 1 Normal free:26768kB min:53696kB low:67120kB high:80544kB active_anon:1216kB inactive_anon:51184kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:592kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1016.903202] lowmem_reserve[]: 0 0 0 0 0 [ 1016.903221] Node 0 DMA: 4*4kB (ME) 2*8kB (ME) 21*16kB (UM) 15*32kB (UME) 12*64kB (UME) [ 1016.918481] 0*1024kB [ 1016.919662] 3*128kB [ 1016.931709] 0*2048kB [ 1016.934623] (ME) [ 1016.936151] syz-executor.3: [ 1016.943455] 3*256kB (UE) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 10960kB [ 1016.943487] Node 0 DMA32: 615*4kB (UME) 163*8kB (ME) 126*16kB (UME) 15*32kB (UME) 6*64kB (ME) 83*128kB (UM) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB [ 1016.955679] 0*4096kB [ 1016.958593] 0*4096kB [ 1016.996044] page allocation failure: order:0 [ 1017.021753] = 17780kB [ 1017.028746] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1017.052832] Node 0 [ 1017.059085] = 0kB [ 1017.090139] Normal: [ 1017.092575] (null) [ 1017.094027] 0*4kB [ 1017.096237] syz-executor.3 cpuset= [ 1017.098272] 0*8kB 0*16kB [ 1017.100578] / [ 1017.108071] 0*32kB [ 1017.133100] Node 1 [ 1017.140996] 0*64kB [ 1017.162847] Normal: [ 1017.171616] 0*128kB [ 1017.172360] 114*4kB [ 1017.205618] 0*256kB [ 1017.213191] mems_allowed=0-1 [ 1017.217179] 0*512kB [ 1017.217739] CPU: 0 PID: 22889 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1017.220120] 0*1024kB [ 1017.222160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1017.228180] 0*2048kB [ 1017.233010] Call Trace: [ 1017.233030] dump_stack+0x1b2/0x281 [ 1017.233044] warn_alloc.cold+0x96/0x1cc [ 1017.233056] ? zone_watermark_ok_safe+0x220/0x220 [ 1017.233066] ? usleep_range+0x130/0x130 [ 1017.233075] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1017.233087] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1017.233097] ? run_timer_softirq+0x5a0/0x5a0 [ 1017.233114] __alloc_pages_nodemask+0x2127/0x2720 [ 1017.251458] 0*4096kB [ 1017.255616] ? lock_acquire+0x170/0x3f0 [ 1017.255632] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1017.255646] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1017.255662] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1017.258041] = 0kB [ 1017.265124] ? __list_del_entry_valid+0xb3/0xf0 [ 1017.265138] alloc_pages_current+0x155/0x260 [ 1017.265150] ion_page_pool_alloc+0x118/0x1b0 [ 1017.265161] ion_system_heap_allocate+0x133/0x8c0 [ 1017.265172] ? _raw_spin_unlock+0x29/0x40 [ 1017.265182] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1017.265193] ? ion_system_contig_heap_create+0x130/0x130 [ 1017.265203] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1017.265214] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1017.265225] ion_alloc+0x27a/0x810 [ 1017.265239] ? ion_dma_buf_release+0x40/0x40 [ 1017.272283] (UM) [ 1017.273936] ? __might_fault+0x177/0x1b0 [ 1017.273950] ion_ioctl+0xea/0x1f0 [ 1017.273960] ? ion_query_heaps+0x360/0x360 [ 1017.273972] ? ion_query_heaps+0x360/0x360 [ 1017.273982] do_vfs_ioctl+0x75a/0xff0 [ 1017.276107] 95*8kB [ 1017.279628] ? ioctl_preallocate+0x1a0/0x1a0 [ 1017.282354] (UM) [ 1017.284050] ? lock_downgrade+0x740/0x740 [ 1017.284063] ? __fget+0x225/0x360 [ 1017.284072] ? do_vfs_ioctl+0xff0/0xff0 [ 1017.284083] ? security_file_ioctl+0x83/0xb0 [ 1017.284093] SyS_ioctl+0x7f/0xb0 [ 1017.284101] ? do_vfs_ioctl+0xff0/0xff0 [ 1017.284112] do_syscall_64+0x1d5/0x640 [ 1017.284127] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1017.284135] RIP: 0033:0x465ef9 [ 1017.284140] RSP: 002b:00007f6ee7ac3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1017.284150] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1017.284156] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1017.284160] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1017.284165] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1017.284171] R13: 00007ffe0127fadf R14: 00007f6ee7ac3300 R15: 0000000000022000 [ 1017.554917] Node 1 Normal: 116*4kB (UM) 95*8kB (UM) 65*16kB (UM) 54*32kB (UM) 67*64kB (UM) 19*128kB (UM) 3*256kB (M) 2*512kB (UM) 14*1024kB (U) 0*2048kB 0*4096kB = 26840kB [ 1017.570677] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1017.579751] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1017.580329] 65*16kB [ 1017.588500] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1017.592688] (UM) [ 1017.600210] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1017.600504] 53*32kB [ 1017.602776] 36060 total pagecache pages [ 1017.615858] (UM) 67*64kB (UM) [ 1017.617869] 0 pages in swap cache [ 1017.617877] Swap cache stats: add 0, delete 0, find 0/0 [ 1017.621052] 19*128kB (UM) 3*256kB (M) 2*512kB (UM) 14*1024kB (U) 0*2048kB 0*4096kB [ 1017.625033] Free swap = 0kB [ 1017.631905] = 26800kB [ 1017.638972] Total swap = 0kB [ 1017.644126] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1017.644132] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1017.647938] 2097051 pages RAM [ 1017.669637] 0 pages HighMem/MovableOnly [ 1017.674043] 363840 pages reserved [ 1017.677944] 0 pages cma reserved [ 1017.696427] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1017.712751] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1017.722032] 35627 total pagecache pages [ 1017.729333] 0 pages in swap cache [ 1017.732792] Swap cache stats: add 0, delete 0, find 0/0 [ 1017.738822] Free swap = 0kB [ 1017.741834] Total swap = 0kB [ 1017.748027] 2097051 pages RAM [ 1017.751135] 0 pages HighMem/MovableOnly [ 1017.755956] 363840 pages reserved [ 1017.759409] 0 pages cma reserved [ 1017.762766] Out of memory (oom_kill_allocating_task): Kill process 22351 (syz-executor.4) score 0 or sacrifice child [ 1017.777258] Killed process 22351 (syz-executor.4) total-vm:93100kB, anon-rss:108kB, file-rss:34760kB, shmem-rss:0kB [ 1017.795937] oom_reaper: reaped process 22351 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1017.876687] systemd[1]: rsyslog.service: Main process exited, code=exited, status=127/n/a [ 1017.925991] systemd[1]: Failed to start System Logging Service. [ 1017.946264] systemd[1]: rsyslog.service: Unit entered failed state. [ 1017.985672] systemd[1]: rsyslog.service: Failed with result 'exit-code'. [ 1018.057217] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1018.088461] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1018.101411] CPU: 0 PID: 21525 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 1018.109308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1018.118658] Call Trace: [ 1018.121252] dump_stack+0x1b2/0x281 [ 1018.124877] dump_header+0x178/0x82f [ 1018.128608] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1018.133704] ? ___ratelimit+0x2cd/0x530 [ 1018.137679] oom_kill_process.cold+0x10/0xb18 [ 1018.142174] out_of_memory+0xe3e/0x1190 [ 1018.146151] ? oom_killer_disable+0x1c0/0x1c0 [ 1018.150648] ? mutex_trylock+0x152/0x1a0 [ 1018.154706] __alloc_pages_nodemask+0x23e1/0x2720 [ 1018.159552] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1018.164410] alloc_pages_current+0x155/0x260 [ 1018.168819] filemap_fault+0xea3/0x1980 [ 1018.172798] ext4_filemap_fault+0x84/0xb0 [ 1018.176942] __do_fault+0xfa/0x380 [ 1018.180478] __handle_mm_fault+0x2497/0x4620 [ 1018.184884] ? vm_insert_page+0x7c0/0x7c0 [ 1018.189028] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1018.194039] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1018.198799] handle_mm_fault+0x391/0x860 [ 1018.202859] __do_page_fault+0x549/0xad0 [ 1018.206917] ? spurious_fault+0x640/0x640 [ 1018.211063] ? do_page_fault+0x60/0x500 [ 1018.215038] ? page_fault+0x2f/0x50 [ 1018.218668] page_fault+0x45/0x50 [ 1018.222115] RIP: 4bbe61:0x7ffe55efcaf0 [ 1018.226008] RSP: 4ce020:00007ffe55efc950 EFLAGS: 7ffe55efc970 [ 1018.235403] Mem-Info: [ 1018.252905] active_anon:11447 inactive_anon:35173 isolated_anon:0 [ 1018.252905] active_file:44 inactive_file:654 isolated_file:0 [ 1018.252905] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1018.252905] slab_reclaimable:12861 slab_unreclaimable:112668 [ 1018.252905] mapped:52572 shmem:35599 pagetables:670 bounce:0 [ 1018.252905] free:62155 free_pcp:234 free_cma:0 [ 1018.287703] Node 0 active_anon:44592kB inactive_anon:89508kB active_file:172kB inactive_file:3112kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163880kB dirty:0kB writeback:0kB shmem:90956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1018.319114] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. 01:29:02 executing program 0: memfd_create(0x0, 0x0) 01:29:02 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x0, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:29:02 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:29:02 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x128, 0x1403, 0x20, 0x70bd2b, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'caif0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'gretap0\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x500, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) getpeername$l2tp(r0, 0x0, 0x0) [ 1018.349067] systemd[1]: Stopped System Logging Service. [ 1018.356344] Node 1 active_anon:1196kB inactive_anon:51184kB active_file:4kB inactive_file:4504kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:49808kB dirty:0kB writeback:0kB shmem:51440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1018.453247] systemd[1]: Starting System Logging Service... [ 1018.461009] systemd-journald[22897]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1018.485938] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1018.553139] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1018.569760] Node 0 DMA32 free:18096kB min:36200kB low:45248kB high:54296kB active_anon:44584kB inactive_anon:89488kB active_file:408kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7200kB pagetables:2216kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1018.603148] lowmem_reserve[]: 0 0 0 0 0 [ 1018.607154] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1018.622767] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1018.636824] lowmem_reserve[]: [ 1018.649063] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1018.659832] 0 [ 1018.671964] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1018.686963] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1018.692107] CPU: 1 PID: 22891 Comm: syz-executor.4 Not tainted 4.14.222-syzkaller #0 [ 1018.696140] 0 [ 1018.699974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1018.699980] 0 [ 1018.701757] Call Trace: [ 1018.711114] 0 [ 1018.712889] dump_stack+0x1b2/0x281 [ 1018.712903] warn_alloc.cold+0x96/0x1cc [ 1018.715463] 0 [ 1018.717249] ? zone_watermark_ok_safe+0x220/0x220 [ 1018.724799] ? usleep_range+0x130/0x130 [ 1018.724807] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1018.724819] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1018.724828] ? run_timer_softirq+0x5a0/0x5a0 [ 1018.726602] Node 1 [ 1018.731451] __alloc_pages_nodemask+0x2127/0x2720 [ 1018.735412] Normal free:53448kB min:53696kB low:67120kB high:80544kB active_anon:1196kB inactive_anon:51184kB active_file:44kB inactive_file:112kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:464kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 1018.740477] ? lock_acquire+0x170/0x3f0 [ 1018.745490] lowmem_reserve[]: [ 1018.749879] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1018.752079] 0 [ 1018.756920] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1018.756936] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1018.756954] alloc_pages_current+0x155/0x260 [ 1018.756967] ion_page_pool_alloc+0x118/0x1b0 [ 1018.784928] 0 [ 1018.788857] ion_system_heap_allocate+0x133/0x8c0 [ 1018.792111] 0 [ 1018.796962] ? _raw_spin_unlock+0x29/0x40 [ 1018.796972] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1018.796994] ? ion_system_contig_heap_create+0x130/0x130 [ 1018.798768] 0 [ 1018.803246] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1018.803258] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1018.803269] ion_alloc+0x27a/0x810 [ 1018.808708] 0 [ 1018.813109] ? ion_dma_buf_release+0x40/0x40 [ 1018.813121] ? __might_fault+0x177/0x1b0 [ 1018.819286] ion_ioctl+0xea/0x1f0 [ 1018.824111] Node 0 [ 1018.825879] ? ion_query_heaps+0x360/0x360 [ 1018.829994] DMA: [ 1018.834903] ? ion_query_heaps+0x360/0x360 [ 1018.834912] do_vfs_ioctl+0x75a/0xff0 [ 1018.834924] ? ioctl_preallocate+0x1a0/0x1a0 [ 1018.840344] 4*4kB [ 1018.842127] ? lock_downgrade+0x740/0x740 [ 1018.847385] (ME) [ 1018.852199] ? __fget+0x225/0x360 [ 1018.855732] 2*8kB [ 1018.857504] ? do_vfs_ioctl+0xff0/0xff0 [ 1018.861904] (ME) [ 1018.865945] ? security_file_ioctl+0x83/0xb0 [ 1018.865955] SyS_ioctl+0x7f/0xb0 [ 1018.865963] ? do_vfs_ioctl+0xff0/0xff0 [ 1018.869387] 21*16kB [ 1018.871610] do_syscall_64+0x1d5/0x640 [ 1018.875832] (UM) [ 1018.877871] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1018.882065] 15*32kB (UME) [ 1018.885847] RIP: 0033:0x465ef9 [ 1018.885852] RSP: 002b:00007f8d04491188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1018.885863] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1018.890257] 12*64kB [ 1018.892383] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1018.892390] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1018.896524] (UME) [ 1018.898552] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1018.901977] 3*128kB [ 1018.904102] R13: 00007ffe31d3a91f R14: 00007f8d04491300 R15: 0000000000022000 [ 1018.910985] CPU: 1 PID: 22909 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1018.944043] (ME) [ 1018.950037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1018.957317] 3*256kB [ 1018.959592] Call Trace: [ 1018.966855] (UE) [ 1018.974102] dump_stack+0x1b2/0x281 [ 1018.974116] warn_alloc.cold+0x96/0x1cc [ 1018.976237] 4*512kB [ 1018.983490] ? zone_watermark_ok_safe+0x220/0x220 [ 1018.983537] __alloc_pages_nodemask+0x2127/0x2720 [ 1018.985809] (UME) [ 1018.993164] ? lock_acquire+0x170/0x3f0 [ 1018.993180] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1019.001037] 2*1024kB [ 1019.003099] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1019.003111] ? __mutex_unlock_slowpath+0x75/0x770 [ 1019.012435] (ME) [ 1019.014742] alloc_pages_current+0x155/0x260 [ 1019.014757] ion_page_pool_alloc+0x118/0x1b0 [ 1019.017309] 2*2048kB [ 1019.019352] ion_system_heap_allocate+0x133/0x8c0 [ 1019.022964] (U) [ 1019.026902] ? ion_alloc+0x187/0x810 [ 1019.029197] 0*4096kB [ 1019.034020] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1019.034030] ? ion_system_contig_heap_create+0x130/0x130 [ 1019.034041] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1019.038853] = 10960kB [ 1019.040983] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1019.045205] Node 0 [ 1019.050025] ion_alloc+0x204/0x810 [ 1019.052405] DMA32: [ 1019.057839] ? ion_dma_buf_release+0x40/0x40 [ 1019.057853] ? __might_fault+0x177/0x1b0 [ 1019.062686] 630*4kB [ 1019.064731] ion_ioctl+0xea/0x1f0 [ 1019.069105] (UME) [ 1019.073504] ? ion_query_heaps+0x360/0x360 [ 1019.073517] ? ion_query_heaps+0x360/0x360 [ 1019.075898] 212*8kB [ 1019.080731] do_vfs_ioctl+0x75a/0xff0 [ 1019.082695] (UME) [ 1019.086384] ? ioctl_preallocate+0x1a0/0x1a0 [ 1019.088771] 132*16kB [ 1019.094198] ? lock_downgrade+0x740/0x740 [ 1019.094210] ? __fget+0x225/0x360 [ 1019.094219] ? do_vfs_ioctl+0xff0/0xff0 [ 1019.094230] ? security_file_ioctl+0x83/0xb0 [ 1019.094239] SyS_ioctl+0x7f/0xb0 [ 1019.094247] ? do_vfs_ioctl+0xff0/0xff0 [ 1019.099689] (UME) [ 1019.104678] do_syscall_64+0x1d5/0x640 [ 1019.104697] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1019.107078] 223*32kB [ 1019.111897] RIP: 0033:0x465ef9 [ 1019.114127] (UME) [ 1019.117815] RSP: 002b:00007f6ee7ac3188 EFLAGS: 00000246 [ 1019.120026] 20*64kB [ 1019.124525] ORIG_RAX: 0000000000000010 [ 1019.124531] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1019.124537] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1019.124542] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1019.124548] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1019.128583] (UME) [ 1019.130882] R13: 00007ffe0127fadf R14: 00007f6ee7ac3300 R15: 0000000000022000 [ 1019.138578] warn_alloc_show_mem: 2 callbacks suppressed [ 1019.138581] Mem-Info: [ 1019.148315] 29*128kB [ 1019.166921] active_anon:11513 inactive_anon:35157 isolated_anon:0 [ 1019.166921] active_file:18 inactive_file:7 isolated_file:0 [ 1019.166921] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1019.166921] slab_reclaimable:12870 slab_unreclaimable:112537 [ 1019.166921] mapped:52225 shmem:35598 pagetables:686 bounce:0 [ 1019.166921] free:20696 free_pcp:0 free_cma:0 [ 1019.199705] (UM) [ 1019.220365] Node 0 active_anon:44608kB inactive_anon:89448kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162192kB dirty:0kB writeback:0kB shmem:90956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1019.252295] 0*256kB [ 1019.271463] Node 1 active_anon:1444kB inactive_anon:51180kB active_file:40kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46708kB dirty:0kB writeback:0kB shmem:51436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1019.350945] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18456kB [ 1019.379049] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1019.379581] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1019.411088] Node 1 [ 1019.445485] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1019.449620] Normal: [ 1019.467270] Node 0 DMA32 free:18324kB min:36200kB low:45248kB high:54296kB active_anon:44600kB inactive_anon:89428kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2160kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1019.471054] 124*4kB [ 1019.508970] lowmem_reserve[]: 0 0 0 0 0 [ 1019.515761] (UME) 102*8kB (UME) 77*16kB (ME) 194*32kB (UME) 405*64kB (UME) 23*128kB (UME) 5*256kB (UME) 3*512kB (UME) 13*1024kB (U) 0*2048kB 0*4096kB = 53744kB [ 1019.521903] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1019.551483] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1019.576035] lowmem_reserve[]: 0 0 0 0 0 [ 1019.580038] Node 1 Normal free:53376kB min:53696kB low:67120kB high:80544kB active_anon:1444kB inactive_anon:51180kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1019.597377] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1019.618085] lowmem_reserve[]: 0 0 0 0 0 [ 1019.622343] Node 0 DMA: 4*4kB (ME) 2*8kB (ME) 21*16kB (UM) 15*32kB (UME) 12*64kB (UME) 3*128kB (ME) 3*256kB (UE) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 10960kB [ 1019.636659] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1019.647507] Node 0 DMA32: 630*4kB (UME) 212*8kB (UME) 131*16kB (ME) 219*32kB (UME) 20*64kB (UME) 29*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18312kB [ 1019.673167] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1019.683751] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1019.690007] Node 1 [ 1019.698329] 35634 total pagecache pages [ 1019.699793] Normal: [ 1019.700570] 0 pages in swap cache [ 1019.710923] Swap cache stats: add 0, delete 0, find 0/0 [ 1019.711126] 124*4kB (UME) 102*8kB (UME) 77*16kB (ME) 194*32kB (UME) 405*64kB (UME) 23*128kB (UME) 5*256kB (UME) 3*512kB (UME) 13*1024kB (U) 0*2048kB 0*4096kB = 53744kB [ 1019.734399] Free swap = 0kB [ 1019.764452] Total swap = 0kB [ 1019.767092] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1019.767475] 2097051 pages RAM [ 1019.793728] 0 pages HighMem/MovableOnly [ 1019.797703] 363840 pages reserved [ 1019.797878] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1019.801143] 0 pages cma reserved [ 1019.828914] Out of memory (oom_kill_allocating_task): Kill process 21525 (syz-executor.1) score 0 or sacrifice child [ 1019.828985] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1019.840222] Killed process 21525 (syz-executor.1) total-vm:93100kB, anon-rss:104kB, file-rss:33472kB, shmem-rss:0kB [ 1019.868976] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1019.898995] 35634 total pagecache pages [ 1019.900094] oom_reaper: reaped process 21525 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1019.905336] 0 pages in swap cache [ 1019.915231] (rsyslogd) invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1019.918506] Swap cache stats: add 0, delete 0, find 0/0 [ 1019.929746] (rsyslogd) cpuset=/ mems_allowed=0-1 [ 1019.938845] Free swap = 0kB [ 1019.939679] CPU: 0 PID: 22907 Comm: (rsyslogd) Not tainted 4.14.222-syzkaller #0 [ 1019.942754] Total swap = 0kB [ 1019.950193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1019.957225] 2097051 pages RAM [ 1019.962522] Call Trace: [ 1019.962543] dump_stack+0x1b2/0x281 [ 1019.962555] dump_header+0x178/0x82f [ 1019.962564] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1019.962572] ? ___ratelimit+0x2cd/0x530 [ 1019.962580] oom_kill_process.cold+0x10/0xb18 [ 1019.962597] out_of_memory+0xe3e/0x1190 [ 1019.962611] ? oom_killer_disable+0x1c0/0x1c0 [ 1019.962617] ? mutex_trylock+0x152/0x1a0 [ 1019.962628] __alloc_pages_nodemask+0x23e1/0x2720 [ 1019.962646] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1019.962668] alloc_pages_current+0x155/0x260 [ 1019.962678] filemap_fault+0xea3/0x1980 [ 1019.968092] 0 pages HighMem/MovableOnly [ 1019.968342] ext4_filemap_fault+0x84/0xb0 [ 1019.971948] 363840 pages reserved [ 1019.975643] __do_fault+0xfa/0x380 [ 1019.975651] __handle_mm_fault+0x2497/0x4620 [ 1019.975660] ? vm_insert_page+0x7c0/0x7c0 [ 1019.975669] ? lock_acquire+0x170/0x3f0 [ 1019.975686] handle_mm_fault+0x391/0x860 [ 1019.975697] __do_page_fault+0x549/0xad0 [ 1019.975708] ? spurious_fault+0x640/0x640 [ 1019.975716] ? do_page_fault+0x60/0x500 [ 1019.975726] ? page_fault+0x2f/0x50 [ 1019.975734] page_fault+0x45/0x50 [ 1019.975741] RIP: 0000:0xffffffff [ 1019.975746] RSP: 9dc117a0:00007ffdf3401b40 EFLAGS: 55ab9dbac258 [ 1019.978239] Mem-Info: [ 1019.982826] 0 pages cma reserved [ 1019.984898] active_anon:11493 inactive_anon:35157 isolated_anon:0 [ 1019.984898] active_file:12 inactive_file:13 isolated_file:0 [ 1019.984898] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1019.984898] slab_reclaimable:12870 slab_unreclaimable:112542 [ 1019.984898] mapped:52225 shmem:35598 pagetables:637 bounce:0 [ 1019.984898] free:20738 free_pcp:96 free_cma:0 [ 1020.120459] Node 0 active_anon:44532kB inactive_anon:89448kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162192kB dirty:0kB writeback:0kB shmem:90956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1020.152197] Node 1 active_anon:1440kB inactive_anon:51180kB active_file:28kB inactive_file:180kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46908kB dirty:0kB writeback:0kB shmem:51436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1020.184029] Node 0 DMA free:11040kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1020.215680] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1020.221269] Node 0 DMA32 free:20128kB min:36200kB low:45248kB high:54296kB active_anon:44524kB inactive_anon:89428kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2064kB bounce:0kB free_pcp:568kB local_pcp:0kB free_cma:0kB [ 1020.254375] lowmem_reserve[]: 0 0 0 0 0 [ 1020.258384] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1020.291496] lowmem_reserve[]: 0 0 0 0 0 [ 1020.295550] Node 1 Normal free:53584kB min:53696kB low:67120kB high:80544kB active_anon:1440kB inactive_anon:51180kB active_file:100kB inactive_file:156kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:484kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1020.328726] lowmem_reserve[]: 0 0 0 0 0 [ 1020.333804] Node 0 DMA: 24*4kB (UME) 2*8kB (ME) 21*16kB (UM) 15*32kB (UME) 12*64kB (UME) 3*128kB (ME) 3*256kB (UE) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 11040kB [ 1020.354178] Node 0 DMA32: 591*4kB (UME) 219*8kB (UME) 132*16kB (UME) 24*32kB (UME) 390*64kB (UME) 29*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35668kB [ 1020.371653] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1020.386738] Node 1 Normal: 2*4kB (UE) 83*8kB (ME) 79*16kB (UME) 53*32kB (ME) 289*64kB (UME) 22*128kB (UME) 51*256kB (UME) 10*512kB (UME) 24*1024kB (U) 0*2048kB 0*4096kB = 67696kB [ 1020.406866] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1020.415792] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1020.415798] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1020.415803] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1020.415807] 35685 total pagecache pages [ 1020.415815] 0 pages in swap cache [ 1020.415820] Swap cache stats: add 0, delete 0, find 0/0 [ 1020.415823] Free swap = 0kB [ 1020.415826] Total swap = 0kB [ 1020.415831] 2097051 pages RAM [ 1020.415834] 0 pages HighMem/MovableOnly [ 1020.415837] 363840 pages reserved [ 1020.415840] 0 pages cma reserved [ 1020.415847] Out of memory (oom_kill_allocating_task): Kill process 22907 ((rsyslogd)) score 0 or sacrifice child [ 1020.415867] Killed process 22907 ((rsyslogd)) total-vm:205028kB, anon-rss:2044kB, file-rss:0kB, shmem-rss:0kB [ 1020.431349] oom_reaper: reaped process 22886 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1020.448590] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1020.448605] systemd cpuset=/ mems_allowed=0-1 [ 1020.448625] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.222-syzkaller #0 [ 1020.448630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1020.448633] Call Trace: [ 1020.448648] dump_stack+0x1b2/0x281 [ 1020.448659] dump_header+0x178/0x82f [ 1020.448669] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1020.448678] ? ___ratelimit+0x2cd/0x530 [ 1020.448688] oom_kill_process.cold+0x10/0xb18 [ 1020.448699] ? lock_downgrade+0x740/0x740 [ 1020.448714] out_of_memory+0x2dc/0x1190 [ 1020.448727] ? oom_killer_disable+0x1c0/0x1c0 [ 1020.448734] ? mutex_trylock+0x152/0x1a0 [ 1020.448745] __alloc_pages_nodemask+0x23e1/0x2720 [ 1020.448765] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1020.448789] alloc_pages_current+0x155/0x260 [ 1020.448799] filemap_fault+0xea3/0x1980 [ 1020.448817] ext4_filemap_fault+0x84/0xb0 [ 1020.448828] __do_fault+0xfa/0x380 [ 1020.448836] __handle_mm_fault+0x2497/0x4620 [ 1020.448852] ? ep_poll+0x1ab/0xa50 [ 1020.448859] ? vm_insert_page+0x7c0/0x7c0 [ 1020.448880] handle_mm_fault+0x391/0x860 [ 1020.448891] __do_page_fault+0x549/0xad0 [ 1020.448903] ? spurious_fault+0x640/0x640 [ 1020.448912] ? do_page_fault+0x60/0x500 [ 1020.448921] ? page_fault+0x2f/0x50 [ 1020.448929] page_fault+0x45/0x50 [ 1020.448936] RIP: 0001:0xffffffffffffffff [ 1020.448941] RSP: 9db63f50:00007ffdf3402010 EFLAGS: 7ffdf3401d50 [ 1020.448954] Mem-Info: [ 1020.448969] active_anon:11493 inactive_anon:35157 isolated_anon:0 [ 1020.448969] active_file:37 inactive_file:32 isolated_file:0 [ 1020.448969] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1020.448969] slab_reclaimable:12870 slab_unreclaimable:112152 [ 1020.448969] mapped:52225 shmem:35598 pagetables:637 bounce:0 [ 1020.448969] free:20936 free_pcp:39 free_cma:0 [ 1020.448982] Node 0 active_anon:44532kB inactive_anon:89448kB active_file:24kB inactive_file:96kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162192kB dirty:0kB writeback:0kB shmem:90956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1020.448995] Node 1 active_anon:1440kB inactive_anon:51180kB active_file:124kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46708kB dirty:0kB writeback:0kB shmem:51436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1020.448998] Node 0 DMA free:11040kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1020.449015] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1020.449034] Node 0 DMA32 free:19036kB min:36200kB low:45248kB high:54296kB active_anon:44524kB inactive_anon:89428kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2064kB bounce:0kB free_pcp:136kB local_pcp:16kB free_cma:0kB [ 1020.449050] lowmem_reserve[]: 0 0 0 0 0 [ 1020.449068] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1020.449083] lowmem_reserve[]: 0 0 0 0 0 [ 1020.449101] Node 1 Normal free:53668kB min:53696kB low:67120kB high:80544kB active_anon:1440kB inactive_anon:51180kB active_file:100kB inactive_file:156kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:484kB bounce:0kB free_pcp:92kB local_pcp:92kB free_cma:0kB [ 1020.449117] lowmem_reserve[]: 0 0 0 0 0 [ 1020.449135] Node 0 DMA: 24*4kB (UME) 2*8kB (ME) 21*16kB (UM) 15*32kB (UME) 12*64kB (UME) 3*128kB (ME) 3*256kB (UE) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 11040kB [ 1020.449204] Node 0 DMA32: 676*4kB (ME) 219*8kB (UME) 132*16kB (UME) 23*32kB (ME) 123*64kB (UME) 29*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18888kB [ 1020.449262] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1020.449304] Node 1 Normal: 125*4kB (ME) 91*8kB (UME) 70*16kB (UME) 55*32kB (ME) 68*64kB (UME) 20*128kB (UME) 51*256kB (UME) 11*512kB (UME) 24*1024kB (U) 0*2048kB 0*4096kB = 54284kB [ 1020.449375] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1020.449381] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1020.449386] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1020.449391] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1020.449395] 35685 total pagecache pages [ 1020.449404] 0 pages in swap cache [ 1020.449408] Swap cache stats: add 0, delete 0, find 0/0 [ 1020.449411] Free swap = 0kB [ 1020.449414] Total swap = 0kB [ 1020.449419] 2097051 pages RAM [ 1020.449422] 0 pages HighMem/MovableOnly [ 1020.449426] 363840 pages reserved [ 1020.449428] 0 pages cma reserved [ 1020.449434] Out of memory: Kill process 22905 (syz-executor.3) score 1004 or sacrifice child [ 1020.449454] Killed process 22909 (syz-executor.3) total-vm:93232kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 1020.493645] oom_reaper: reaped process 22909 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1020.502532] syz-executor.5: [ 1020.512747] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1020.522677] page allocation failure: order:0 [ 1020.537251] (null) [ 1020.543682] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1020.552943] , order=0, oom_score_adj=0 [ 1020.557528] (null) [ 1020.561649] syz-fuzzer cpuset= [ 1020.575448] syz-executor.5 cpuset= [ 1020.577305] syz-executor.3: [ 1020.580988] / [ 1021.094579] / [ 1021.098368] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1021.110532] mems_allowed=0-1 [ 1021.114189] CPU: 0 PID: 7978 Comm: syz-fuzzer Not tainted 4.14.222-syzkaller #0 [ 1021.117504] mems_allowed=0-1 [ 1021.121628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1021.134055] Call Trace: [ 1021.136649] dump_stack+0x1b2/0x281 [ 1021.140272] dump_header+0x178/0x82f [ 1021.143967] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1021.149050] ? ___ratelimit+0x2cd/0x530 [ 1021.153011] oom_kill_process.cold+0x10/0xb18 [ 1021.157500] out_of_memory+0xe3e/0x1190 [ 1021.161456] ? oom_killer_disable+0x1c0/0x1c0 [ 1021.162845] syz-executor.3 cpuset= [ 1021.165934] ? mutex_trylock+0x152/0x1a0 [ 1021.165940] / [ 1021.169460] __alloc_pages_nodemask+0x23e1/0x2720 [ 1021.180035] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1021.184873] alloc_pages_current+0x155/0x260 [ 1021.189267] filemap_fault+0xea3/0x1980 [ 1021.193238] ext4_filemap_fault+0x84/0xb0 [ 1021.196289] mems_allowed=0-1 [ 1021.197377] __do_fault+0xfa/0x380 [ 1021.203980] __handle_mm_fault+0x2497/0x4620 [ 1021.208372] ? vm_insert_page+0x7c0/0x7c0 [ 1021.212504] ? __fget+0x225/0x360 [ 1021.215962] handle_mm_fault+0x391/0x860 [ 1021.220012] __do_page_fault+0x549/0xad0 [ 1021.224061] ? spurious_fault+0x640/0x640 [ 1021.228193] ? do_page_fault+0x60/0x500 [ 1021.232151] ? page_fault+0x2f/0x50 [ 1021.235771] page_fault+0x45/0x50 [ 1021.239222] RIP: 0001:0xedb1842a6a [ 1021.242744] RSP: 2b8008:000000c000353db8 EFLAGS: edb1842a6a [ 1021.242831] CPU: 1 PID: 22886 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1021.243834] Mem-Info: [ 1021.248544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1021.268117] Call Trace: [ 1021.270704] dump_stack+0x1b2/0x281 [ 1021.272386] active_anon:11396 inactive_anon:35157 isolated_anon:0 [ 1021.272386] active_file:13 inactive_file:12 isolated_file:0 [ 1021.272386] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1021.272386] slab_reclaimable:12870 slab_unreclaimable:112147 [ 1021.272386] mapped:52225 shmem:35598 pagetables:602 bounce:0 [ 1021.272386] free:18506 free_pcp:279 free_cma:0 [ 1021.274325] warn_alloc.cold+0x96/0x1cc [ 1021.311489] ? zone_watermark_ok_safe+0x220/0x220 [ 1021.316314] ? usleep_range+0x130/0x130 [ 1021.320288] ? try_to_free_pages+0x23f/0x6e0 [ 1021.324683] ? _find_next_bit+0xdb/0x100 [ 1021.328723] ? run_timer_softirq+0x5a0/0x5a0 [ 1021.333135] __alloc_pages_nodemask+0x2127/0x2720 [ 1021.337964] ? lock_acquire+0x170/0x3f0 [ 1021.341935] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1021.342373] Node 0 active_anon:44392kB inactive_anon:89448kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162192kB dirty:0kB writeback:0kB shmem:90956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1021.346765] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1021.379012] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1021.384451] alloc_pages_current+0x155/0x260 [ 1021.388847] ion_page_pool_alloc+0x118/0x1b0 [ 1021.393237] ion_system_heap_allocate+0x133/0x8c0 [ 1021.398062] ? ion_alloc+0x187/0x810 [ 1021.401755] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1021.402362] Node 1 active_anon:1192kB inactive_anon:51180kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46708kB dirty:0kB writeback:0kB shmem:51436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1021.407198] ? ion_system_contig_heap_create+0x130/0x130 [ 1021.439756] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1021.444754] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1021.449597] ion_alloc+0x204/0x810 [ 1021.454077] ? ion_dma_buf_release+0x40/0x40 [ 1021.458466] ? __might_fault+0x177/0x1b0 [ 1021.462508] ion_ioctl+0xea/0x1f0 [ 1021.465941] ? ion_query_heaps+0x360/0x360 [ 1021.470158] ? ion_query_heaps+0x360/0x360 [ 1021.472344] Node 0 [ 1021.474388] do_vfs_ioctl+0x75a/0xff0 [ 1021.474398] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1021.474402] lowmem_reserve[]: [ 1021.476634] ? ioctl_preallocate+0x1a0/0x1a0 [ 1021.480412] 0 [ 1021.505981] ? lock_downgrade+0x740/0x740 [ 1021.505994] ? __fget+0x225/0x360 [ 1021.506003] ? do_vfs_ioctl+0xff0/0xff0 [ 1021.526861] ? security_file_ioctl+0x83/0xb0 [ 1021.531252] SyS_ioctl+0x7f/0xb0 [ 1021.534613] ? do_vfs_ioctl+0xff0/0xff0 [ 1021.538568] do_syscall_64+0x1d5/0x640 [ 1021.542334] 2717 2718 2718 [ 1021.542445] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1021.542453] RIP: 0033:0x465ef9 [ 1021.545358] 2718 [ 1021.550538] RSP: 002b:00007fba3a452188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1021.563458] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1021.563463] Node 0 [ 1021.570707] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1021.570713] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1021.587420] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1021.592337] DMA32 free:17816kB min:36200kB low:45248kB high:54296kB active_anon:44384kB inactive_anon:89428kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:1948kB bounce:0kB free_pcp:376kB local_pcp:120kB free_cma:0kB [ 1021.594669] R13: 00007ffea651953f R14: 00007fba3a452300 R15: 0000000000022000 [ 1021.600169] warn_alloc_show_mem: 1 callbacks suppressed [ 1021.600172] Mem-Info: [ 1021.624056] CPU: 0 PID: 22909 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1021.633379] active_anon:11396 inactive_anon:35157 isolated_anon:0 [ 1021.633379] active_file:13 inactive_file:12 isolated_file:0 [ 1021.633379] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1021.633379] slab_reclaimable:12870 slab_unreclaimable:112147 [ 1021.633379] mapped:52225 shmem:35598 pagetables:602 bounce:0 [ 1021.633379] free:18506 free_pcp:278 free_cma:0 [ 1021.635709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1021.638109] Node 0 active_anon:44392kB inactive_anon:89448kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162192kB dirty:0kB writeback:0kB shmem:90956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1021.645965] Call Trace: [ 1021.645985] dump_stack+0x1b2/0x281 [ 1021.645998] warn_alloc.cold+0x96/0x1cc [ 1021.646010] ? zone_watermark_ok_safe+0x220/0x220 [ 1021.646019] ? usleep_range+0x130/0x130 [ 1021.646027] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1021.646050] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1021.686268] Node 1 active_anon:1192kB inactive_anon:51180kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46708kB dirty:0kB writeback:0kB shmem:51436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1021.688604] ? run_timer_softirq+0x5a0/0x5a0 [ 1021.720711] Node 0 [ 1021.722460] __alloc_pages_nodemask+0x2127/0x2720 [ 1021.722478] ? lock_acquire+0x170/0x3f0 [ 1021.722491] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1021.722501] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1021.722516] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1021.726478] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1021.731295] ? __list_del_entry_valid+0xb3/0xf0 [ 1021.739645] lowmem_reserve[]: [ 1021.740360] alloc_pages_current+0x155/0x260 [ 1021.745403] 0 [ 1021.772536] ion_page_pool_alloc+0x118/0x1b0 [ 1021.772548] ion_system_heap_allocate+0x133/0x8c0 [ 1021.772557] ? ion_alloc+0x187/0x810 [ 1021.772567] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1021.772576] ? ion_system_contig_heap_create+0x130/0x130 [ 1021.772584] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1021.772594] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1021.772604] ion_alloc+0x204/0x810 [ 1021.772616] ? ion_dma_buf_release+0x40/0x40 [ 1021.772627] ? __might_fault+0x177/0x1b0 [ 1021.772638] ion_ioctl+0xea/0x1f0 [ 1021.772647] ? ion_query_heaps+0x360/0x360 [ 1021.772658] ? ion_query_heaps+0x360/0x360 [ 1021.772667] do_vfs_ioctl+0x75a/0xff0 [ 1021.772678] ? ioctl_preallocate+0x1a0/0x1a0 [ 1021.772687] ? lock_downgrade+0x740/0x740 [ 1021.772700] ? __fget+0x225/0x360 [ 1021.772709] ? do_vfs_ioctl+0xff0/0xff0 [ 1021.772719] ? security_file_ioctl+0x83/0xb0 [ 1021.772729] SyS_ioctl+0x7f/0xb0 [ 1021.772736] ? do_vfs_ioctl+0xff0/0xff0 [ 1021.772748] do_syscall_64+0x1d5/0x640 [ 1021.772763] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1021.772771] RIP: 0033:0x465ef9 [ 1021.772778] RSP: 002b:00007f6ee7ac3188 EFLAGS: 00000246 [ 1021.781616] lowmem_reserve[]: [ 1021.784209] ORIG_RAX: 0000000000000010 [ 1021.784215] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1021.784219] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1021.784224] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1021.784228] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1021.784232] R13: 00007ffe0127fadf R14: 00007f6ee7ac3300 R15: 0000000000022000 [ 1021.813611] 0 [ 1021.834652] 0 [ 1021.852371] 0 [ 1021.857645] 2717 [ 1021.872405] 0 [ 1021.877572] 2718 [ 1021.877830] 0 [ 1021.881354] 2718 [ 1021.910448] 2718 [ 1021.932325] Node 0 [ 1021.952357] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1021.959470] Node 0 [ 1021.982302] lowmem_reserve[]: [ 1021.992740] DMA32 free:17800kB min:36200kB low:45248kB high:54296kB active_anon:44384kB inactive_anon:89428kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:1948kB bounce:0kB free_pcp:364kB local_pcp:244kB free_cma:0kB [ 1022.002314] 0 [ 1022.006782] lowmem_reserve[]: 0 [ 1022.008566] 0 [ 1022.010607] 0 [ 1022.032294] 0 [ 1022.044423] 0 [ 1022.073395] 0 0 [ 1022.073406] Node 1 Normal free:45232kB min:53696kB low:67120kB high:80544kB active_anon:1192kB inactive_anon:51180kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:460kB bounce:0kB free_pcp:736kB local_pcp:116kB free_cma:0kB [ 1022.073422] lowmem_reserve[]: 0 0 0 0 0 [ 1022.073439] Node 0 DMA: 5*4kB (UME) 3*8kB (UME) 20*16kB (UM) 15*32kB (UME) 12*64kB (UME) 3*128kB (ME) 3*256kB (UE) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 10956kB [ 1022.073508] Node 0 DMA32: 676*4kB (MEH) 220*8kB (UMEH) 130*16kB (ME) 24*32kB (MEH) 106*64kB (UME) 29*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17808kB [ 1022.073564] Node 0 [ 1022.079765] 0 [ 1022.080404] Normal: [ 1022.082182] 0 [ 1022.084456] 0*4kB [ 1022.087756] 0*8kB [ 1022.120843] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1022.197306] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1022.197338] Node 1 Normal: 126*4kB (UME) 91*8kB (UME) 72*16kB (UME) 59*32kB (UME) 342*64kB (UME) 23*128kB (UME) 5*256kB (UME) 3*512kB (ME) 13*1024kB (U) 0*2048kB 0*4096kB = 45232kB [ 1022.197407] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1022.197413] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1022.197418] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1022.197423] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1022.197427] 35623 total pagecache pages [ 1022.197435] 0 pages in swap cache [ 1022.197440] Swap cache stats: add 0, delete 0, find 0/0 [ 1022.197442] Free swap = 0kB [ 1022.197445] Total swap = 0kB [ 1022.197450] 2097051 pages RAM [ 1022.197452] 0 pages HighMem/MovableOnly [ 1022.197455] 363840 pages reserved [ 1022.197484] 0 pages cma reserved [ 1022.211453] lowmem_reserve[]: [ 1022.232332] Out of memory (oom_kill_allocating_task): Kill process 7978 (syz-fuzzer) score 0 or sacrifice child [ 1022.244469] 0 [ 1022.273255] Killed process 22314 (syz-executor.3) total-vm:84904kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 1022.277554] 0 [ 1022.280045] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1022.283581] 0 0 0 [ 1022.283593] Node 1 Normal free:45232kB min:53696kB low:67120kB high:80544kB active_anon:1192kB inactive_anon:51180kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:460kB bounce:0kB free_pcp:736kB local_pcp:620kB free_cma:0kB [ 1022.283614] lowmem_reserve[]: [ 1022.287958] (null) [ 1022.290396] 0 [ 1022.293511] , order=0, oom_score_adj=0 [ 1022.293515] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1022.293536] CPU: 0 PID: 7978 Comm: syz-fuzzer Not tainted 4.14.222-syzkaller #0 [ 1022.293540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1022.293543] Call Trace: [ 1022.293561] dump_stack+0x1b2/0x281 [ 1022.293573] dump_header+0x178/0x82f [ 1022.293592] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1022.307838] 0 [ 1022.315783] ? ___ratelimit+0x2cd/0x530 [ 1022.315794] oom_kill_process.cold+0x10/0xb18 [ 1022.315815] out_of_memory+0xe3e/0x1190 [ 1022.317593] 0 [ 1022.327295] ? oom_killer_disable+0x1c0/0x1c0 [ 1022.327304] ? mutex_trylock+0x152/0x1a0 [ 1022.327313] __alloc_pages_nodemask+0x23e1/0x2720 [ 1022.327334] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1022.327358] alloc_pages_current+0x155/0x260 [ 1022.327369] filemap_fault+0xea3/0x1980 [ 1022.327386] ext4_filemap_fault+0x84/0xb0 [ 1022.327397] __do_fault+0xfa/0x380 [ 1022.333472] 0 [ 1022.358238] __handle_mm_fault+0x2497/0x4620 [ 1022.358248] ? vm_insert_page+0x7c0/0x7c0 [ 1022.358257] ? __fget+0x225/0x360 [ 1022.358273] handle_mm_fault+0x391/0x860 [ 1022.358285] __do_page_fault+0x549/0xad0 [ 1022.358298] ? spurious_fault+0x640/0x640 [ 1022.358307] ? do_page_fault+0x60/0x500 [ 1022.358317] ? page_fault+0x2f/0x50 [ 1022.358324] page_fault+0x45/0x50 [ 1022.358331] RIP: 0001:0xedb1842a6a [ 1022.358338] RSP: 2b8008:000000c000353db8 EFLAGS: edb1842a6a [ 1022.365338] 0 [ 1022.452504] Mem-Info: [ 1022.459070] active_anon:11396 inactive_anon:35157 isolated_anon:0 [ 1022.459070] active_file:13 inactive_file:12 isolated_file:0 [ 1022.459070] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1022.459070] slab_reclaimable:12870 slab_unreclaimable:112161 [ 1022.459070] mapped:52225 shmem:35598 pagetables:602 bounce:0 [ 1022.459070] free:18497 free_pcp:275 free_cma:0 [ 1022.476213] Node 0 [ 1022.482192] Node 0 active_anon:44392kB inactive_anon:89448kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162192kB dirty:0kB writeback:0kB shmem:90956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1022.483735] DMA: [ 1022.487429] Node 1 active_anon:1192kB inactive_anon:51180kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46708kB dirty:0kB writeback:0kB shmem:51436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1022.491026] 5*4kB [ 1022.499063] Node 0 [ 1022.542224] (UME) [ 1022.547677] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1022.602661] 3*8kB [ 1022.607769] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1022.645713] Node 0 DMA32 free:17800kB min:36200kB low:45248kB high:54296kB active_anon:44384kB inactive_anon:89428kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:1948kB bounce:0kB free_pcp:360kB local_pcp:116kB free_cma:0kB [ 1022.662251] (UME) [ 1022.679842] lowmem_reserve[]: 0 0 0 0 0 [ 1022.682277] 20*16kB (UM) 15*32kB (UME) 12*64kB (UME) 3*128kB (ME) 3*256kB (UE) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 10956kB [ 1022.688138] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1022.722226] Node 0 DMA32: 676*4kB (MEH) 220*8kB (UMEH) 130*16kB (ME) 24*32kB (MEH) 106*64kB (UME) 29*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17808kB [ 1022.734118] lowmem_reserve[]: 0 0 0 0 0 [ 1022.748416] Node 1 Normal free:45232kB min:53696kB low:67120kB high:80544kB active_anon:1192kB inactive_anon:51180kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:460kB bounce:0kB free_pcp:660kB local_pcp:116kB free_cma:0kB [ 1022.762596] Node 0 [ 1022.784456] lowmem_reserve[]: 0 0 0 0 0 [ 1022.790701] Node 0 DMA: 5*4kB (UME) 3*8kB (UME) 20*16kB (UM) 15*32kB (UME) 12*64kB (UME) 3*128kB (ME) 3*256kB (UE) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 10956kB [ 1022.792257] Normal: [ 1022.811356] Node 0 DMA32: 676*4kB (MEH) 220*8kB (UMEH) 130*16kB (ME) 24*32kB (MEH) 106*64kB (UME) 29*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17808kB [ 1022.832234] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1022.833627] Node 0 [ 1022.841647] Node 1 [ 1022.841649] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1022.852216] Normal: 126*4kB (UME) 89*8kB (UME) 72*16kB (UME) 59*32kB (UME) 342*64kB (UME) 23*128kB (UME) 5*256kB (UME) 3*512kB (ME) 13*1024kB (U) 0*2048kB 0*4096kB = 45216kB [ 1022.861041] Node 1 Normal: 126*4kB (UME) 89*8kB (UME) 72*16kB (UME) 59*32kB (UME) 342*64kB (UME) 23*128kB (UME) 5*256kB (UME) 3*512kB (ME) 13*1024kB (U) 0*2048kB 0*4096kB = 45216kB [ 1022.901449] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1022.902201] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1022.910359] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1022.919491] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1022.928630] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1022.945767] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1022.954384] 35623 total pagecache pages [ 1022.958353] 0 pages in swap cache [ 1022.958837] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1022.961790] Swap cache stats: add 0, delete 0, find 0/0 [ 1022.961796] Free swap = 0kB [ 1022.976547] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1022.987709] 35623 total pagecache pages [ 1022.991681] 0 pages in swap cache [ 1022.992170] Total swap = 0kB [ 1022.998175] 2097051 pages RAM [ 1022.999725] Swap cache stats: add 0, delete 0, find 0/0 [ 1023.001268] 0 pages HighMem/MovableOnly [ 1023.006654] Free swap = 0kB [ 1023.006658] Total swap = 0kB [ 1023.006664] 2097051 pages RAM [ 1023.006667] 0 pages HighMem/MovableOnly [ 1023.006670] 363840 pages reserved [ 1023.006673] 0 pages cma reserved [ 1023.062719] 363840 pages reserved [ 1023.066202] 0 pages cma reserved [ 1023.069560] Out of memory (oom_kill_allocating_task): Kill process 7978 (syz-fuzzer) score 0 or sacrifice child [ 1023.092754] Killed process 22350 (syz-executor.4) total-vm:84904kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 1023.123015] oom_reaper: reaped process 22314 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1023.152642] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1023.183328] systemd cpuset=/ mems_allowed=0-1 [ 1023.187864] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.222-syzkaller #0 [ 1023.188112] syz-executor.5: [ 1023.194774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1023.194778] Call Trace: [ 1023.194793] dump_stack+0x1b2/0x281 [ 1023.194804] dump_header+0x178/0x82f [ 1023.194813] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1023.194822] ? ___ratelimit+0x2cd/0x530 [ 1023.194831] oom_kill_process.cold+0x10/0xb18 [ 1023.194843] ? lock_downgrade+0x740/0x740 [ 1023.194857] out_of_memory+0x2dc/0x1190 [ 1023.194870] ? oom_killer_disable+0x1c0/0x1c0 [ 1023.194877] ? mutex_trylock+0x152/0x1a0 [ 1023.194888] __alloc_pages_nodemask+0x23e1/0x2720 [ 1023.194909] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1023.194931] alloc_pages_current+0x155/0x260 [ 1023.194940] filemap_fault+0xea3/0x1980 [ 1023.194959] ext4_filemap_fault+0x84/0xb0 [ 1023.269448] __do_fault+0xfa/0x380 [ 1023.272970] __handle_mm_fault+0x2497/0x4620 [ 1023.277359] ? ep_poll+0x1ab/0xa50 [ 1023.280875] ? vm_insert_page+0x7c0/0x7c0 [ 1023.285011] handle_mm_fault+0x391/0x860 [ 1023.289063] __do_page_fault+0x549/0xad0 [ 1023.293106] ? spurious_fault+0x640/0x640 [ 1023.297233] ? do_page_fault+0x60/0x500 [ 1023.301186] ? page_fault+0x2f/0x50 [ 1023.304792] page_fault+0x45/0x50 [ 1023.308240] RIP: 0001:0xffffffffffffffff [ 1023.312284] RSP: 9db63f50:00007ffdf3402010 EFLAGS: 7ffdf3401d50 [ 1023.315790] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1023.332760] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1023.337890] CPU: 1 PID: 22886 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1023.345773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1023.355134] Call Trace: [ 1023.357727] dump_stack+0x1b2/0x281 [ 1023.361344] warn_alloc.cold+0x96/0x1cc [ 1023.365302] ? zone_watermark_ok_safe+0x220/0x220 [ 1023.370135] __alloc_pages_nodemask+0x2127/0x2720 [ 1023.374965] ? lock_acquire+0x170/0x3f0 [ 1023.378923] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1023.383765] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1023.389201] ? __mutex_unlock_slowpath+0x75/0x770 [ 1023.394030] alloc_pages_current+0x155/0x260 [ 1023.398422] ion_page_pool_alloc+0x118/0x1b0 [ 1023.402814] ion_system_heap_allocate+0x133/0x8c0 [ 1023.407638] ? _raw_spin_unlock+0x29/0x40 [ 1023.411770] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1023.416680] ? ion_system_contig_heap_create+0x130/0x130 [ 1023.422111] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1023.427108] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1023.431932] ion_alloc+0x27a/0x810 [ 1023.435455] ? ion_dma_buf_release+0x40/0x40 [ 1023.439861] ? __might_fault+0x177/0x1b0 [ 1023.443926] ion_ioctl+0xea/0x1f0 [ 1023.447372] ? ion_query_heaps+0x360/0x360 [ 1023.451600] ? ion_query_heaps+0x360/0x360 [ 1023.455825] do_vfs_ioctl+0x75a/0xff0 [ 1023.459631] ? ioctl_preallocate+0x1a0/0x1a0 [ 1023.464023] ? lock_downgrade+0x740/0x740 [ 1023.468156] ? __fget+0x225/0x360 [ 1023.471591] ? do_vfs_ioctl+0xff0/0xff0 [ 1023.475550] ? security_file_ioctl+0x83/0xb0 [ 1023.479939] SyS_ioctl+0x7f/0xb0 [ 1023.483285] ? do_vfs_ioctl+0xff0/0xff0 [ 1023.487241] do_syscall_64+0x1d5/0x640 [ 1023.491200] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1023.496369] RIP: 0033:0x465ef9 [ 1023.499627] RSP: 002b:00007fba3a452188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1023.507316] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1023.514565] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1023.522014] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1023.529278] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1023.536527] R13: 00007ffea651953f R14: 00007fba3a452300 R15: 0000000000022000 [ 1023.543811] Mem-Info: [ 1023.545133] warn_alloc_show_mem: 1 callbacks suppressed [ 1023.545136] Mem-Info: [ 1023.546239] active_anon:11396 inactive_anon:35157 isolated_anon:0 [ 1023.546239] active_file:38 inactive_file:8 isolated_file:1 [ 1023.546239] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1023.546239] slab_reclaimable:12870 slab_unreclaimable:111830 [ 1023.546239] mapped:34850 shmem:35598 pagetables:565 bounce:0 [ 1023.546239] free:20609 free_pcp:683 free_cma:0 [ 1023.551586] active_anon:11396 inactive_anon:35157 isolated_anon:0 [ 1023.551586] active_file:38 inactive_file:8 isolated_file:1 [ 1023.551586] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1023.551586] slab_reclaimable:12870 slab_unreclaimable:111830 [ 1023.551586] mapped:34850 shmem:35598 pagetables:565 bounce:0 [ 1023.551586] free:20609 free_pcp:683 free_cma:0 [ 1023.561961] Node 0 active_anon:44392kB inactive_anon:89448kB active_file:132kB inactive_file:112kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:133092kB dirty:0kB writeback:0kB shmem:90956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1023.587260] Node 0 active_anon:44392kB inactive_anon:89448kB active_file:132kB inactive_file:112kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:133092kB dirty:0kB writeback:0kB shmem:90956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1023.587275] Node 1 active_anon:1192kB inactive_anon:51180kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:6308kB dirty:0kB writeback:0kB shmem:51436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1023.587278] Node 0 DMA free:11156kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:20kB active_file:32kB inactive_file:104kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1023.587297] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1023.587316] Node 0 DMA32 free:42088kB min:36200kB low:45248kB high:54296kB active_anon:44384kB inactive_anon:89428kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:1948kB bounce:0kB free_pcp:1540kB local_pcp:700kB free_cma:0kB [ 1023.587334] lowmem_reserve[]: 0 0 0 0 [ 1023.624323] Node 1 active_anon:1192kB inactive_anon:51180kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:6308kB dirty:0kB writeback:0kB shmem:51436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1023.648929] 0 [ 1023.718998] Node 0 [ 1023.765887] DMA free:11100kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:20kB active_file:20kB inactive_file:144kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1023.771113] Node 0 [ 1023.840709] lowmem_reserve[]: [ 1023.843269] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1023.862069] 0 2717 2718 2718 2718 [ 1023.880208] lowmem_reserve[]: 0 0 0 0 0 [ 1023.886955] Node 0 DMA32 free:42884kB min:36200kB low:45248kB high:54296kB active_anon:44384kB inactive_anon:89428kB active_file:28kB inactive_file:760kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:1948kB bounce:0kB free_pcp:1268kB local_pcp:528kB free_cma:0kB [ 1023.891741] Node 1 Normal free:29724kB min:53696kB low:67120kB high:80544kB active_anon:1192kB inactive_anon:51180kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:312kB bounce:0kB free_pcp:1296kB local_pcp:660kB free_cma:0kB [ 1023.946153] lowmem_reserve[]: 0 0 0 0 0 [ 1023.950954] Node 0 DMA: 85*4kB (UE) 3*8kB (ME) 18*16kB (U) 17*32kB (UME) 11*64kB (UME) 2*128kB (ME) 3*256kB (UE) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 11116kB [ 1023.962050] lowmem_reserve[]: 0 0 0 0 0 [ 1023.968066] Node 0 [ 1023.971200] Node 0 [ 1023.972108] DMA32: 295*4kB (UME) 408*8kB (UME) 219*16kB (UME) 85*32kB (UME) 411*64kB (UME) 29*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 40684kB [ 1023.995573] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB [ 1023.995943] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1024.004193] lowmem_reserve[]: [ 1024.034959] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1024.057421] 0 0 0 0 0 [ 1024.060022] Node 1 Normal free:31176kB min:53696kB low:67120kB high:80544kB active_anon:1116kB inactive_anon:51180kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:268kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1024.067998] Node 1 [ 1024.090037] systemd-journald[22897]: Failed to open runtime journal: No space left on device 01:29:08 executing program 0: memfd_create(0x0, 0x0) [ 1024.148939] Normal: 2685*4kB (UME) 104*8kB (UME) 114*16kB (UME) 111*32kB (UME) 154*64kB (UME) 22*128kB (UME) 6*256kB (UME) 3*512kB (ME) 0*1024kB 0*2048kB 0*4096kB = 32692kB [ 1024.189889] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1024.198801] lowmem_reserve[]: 0 0 0 0 0 [ 1024.198822] Node 0 DMA: 86*4kB (UME) 3*8kB (ME) 17*16kB (UM) 17*32kB (UME) 11*64kB (UME) 2*128kB (ME) 3*256kB (UE) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 11104kB [ 1024.198889] Node 0 DMA32: 384*4kB (UME) 360*8kB (UME) 256*16kB (UME) 103*32kB (UE) 404*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37792kB [ 1024.198947] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1024.198991] Node 1 Normal: 2685*4kB [ 1024.219931] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1024.234512] (UME) 104*8kB (UME) 114*16kB (UME) 111*32kB (UME) 154*64kB (UME) 22*128kB (UME) 6*256kB (UME) 3*512kB (ME) 0*1024kB 0*2048kB 0*4096kB = 32692kB [ 1024.274105] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1024.284917] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1024.288546] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1024.304332] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1024.307627] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1024.322180] 36208 total pagecache pages [ 1024.326044] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1024.332060] 0 pages in swap cache [ 1024.335845] 36393 total pagecache pages [ 1024.347949] 0 pages in swap cache [ 1024.348866] Swap cache stats: add 0, delete 0, find 0/0 [ 1024.352398] Swap cache stats: add 0, delete 0, find 0/0 [ 1024.364702] Free swap = 0kB [ 1024.367809] Total swap = 0kB [ 1024.377391] 2097051 pages RAM [ 1024.380152] Free swap = 0kB [ 1024.388953] Total swap = 0kB [ 1024.396030] 2097051 pages RAM [ 1024.400461] 0 pages HighMem/MovableOnly [ 1024.404751] 0 pages HighMem/MovableOnly [ 1024.406994] 363840 pages reserved [ 1024.408866] 363840 pages reserved [ 1024.414967] 0 pages cma reserved [ 1024.420071] Out of memory: Kill process 7966 (syz-fuzzer) score 4 or sacrifice child 01:29:08 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x0, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) [ 1024.434858] Killed process 17543 (syz-executor.0) total-vm:84904kB, anon-rss:60kB, file-rss:4kB, shmem-rss:0kB [ 1024.436220] 0 pages cma reserved [ 1024.480957] oom_reaper: reaped process 17543 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1024.519894] systemd[1]: systemd-journald.service: Main process exited, code=exited, status=1/FAILURE [ 1024.587752] systemd[1]: Failed to start Journal Service. [ 1024.637234] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1024.667969] systemd[1]: systemd-journald.service: Failed with result 'exit-code'. 01:29:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macvlan1\x00'}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xf3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00', r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xa1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x2c}}, 0x800) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40010) [ 1024.709870] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1024.786300] systemd[1]: Failed to start System Logging Service. [ 1024.805865] systemd[1]: rsyslog.service: Unit entered failed state. [ 1024.812877] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1024.820481] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1024.859460] systemd[1]: Stopped Journal Service. [ 1024.906544] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1024.948528] systemd cpuset=/ mems_allowed=0-1 [ 1024.958246] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.222-syzkaller #0 [ 1024.965192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1024.974542] Call Trace: [ 1024.977136] dump_stack+0x1b2/0x281 [ 1024.980763] dump_header+0x178/0x82f [ 1024.984474] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1024.989589] ? ___ratelimit+0x2cd/0x530 [ 1024.993657] oom_kill_process.cold+0x10/0xb18 [ 1024.998153] ? lock_downgrade+0x740/0x740 [ 1025.002303] out_of_memory+0x2dc/0x1190 [ 1025.006284] ? oom_killer_disable+0x1c0/0x1c0 [ 1025.010784] ? mutex_trylock+0x152/0x1a0 [ 1025.014845] __alloc_pages_nodemask+0x23e1/0x2720 [ 1025.019703] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1025.024561] alloc_pages_current+0x155/0x260 [ 1025.028975] filemap_fault+0xea3/0x1980 [ 1025.032938] ext4_filemap_fault+0x84/0xb0 [ 1025.037067] __do_fault+0xfa/0x380 [ 1025.040586] __handle_mm_fault+0x2497/0x4620 [ 1025.044974] ? vm_insert_page+0x7c0/0x7c0 [ 1025.049108] handle_mm_fault+0x391/0x860 [ 1025.053153] __do_page_fault+0x549/0xad0 [ 1025.057210] ? spurious_fault+0x640/0x640 [ 1025.061336] ? do_page_fault+0x60/0x500 [ 1025.065293] ? page_fault+0x2f/0x50 [ 1025.068900] page_fault+0x45/0x50 [ 1025.072333] RIP: 9db775b0:0x7b [ 1025.075502] RSP: f3401c90:00007ffdf3401c88 EFLAGS: 55ab9db68f40 [ 1025.078351] Mem-Info: [ 1025.089111] active_anon:11073 inactive_anon:35157 isolated_anon:0 [ 1025.089111] active_file:16 inactive_file:26 isolated_file:20 [ 1025.089111] unevictable:0 dirty:1 writeback:14 unstable:0 [ 1025.089111] slab_reclaimable:12872 slab_unreclaimable:111438 [ 1025.089111] mapped:26133 shmem:35598 pagetables:468 bounce:0 [ 1025.089111] free:23481 free_pcp:306 free_cma:0 [ 1025.122593] Node 0 active_anon:43424kB inactive_anon:89448kB active_file:60kB inactive_file:96kB unevictable:0kB isolated(anon):0kB isolated(file):80kB mapped:98276kB dirty:4kB writeback:56kB shmem:90956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1025.150717] Node 1 active_anon:868kB inactive_anon:51180kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:6256kB dirty:0kB writeback:0kB shmem:51436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1025.177574] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:20kB active_file:24kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1025.221913] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1025.226982] Node 0 DMA32 free:17732kB min:36200kB low:45248kB high:54296kB active_anon:43416kB inactive_anon:89428kB active_file:400kB inactive_file:352kB unevictable:0kB writepending:60kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7072kB pagetables:1660kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1025.291914] lowmem_reserve[]: 0 0 0 0 0 [ 1025.295937] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1025.321568] lowmem_reserve[]: 0 0 0 0 0 [ 1025.328758] Node 1 Normal free:166284kB min:53696kB low:67120kB high:80544kB active_anon:868kB inactive_anon:51180kB active_file:4kB inactive_file:208kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:212kB bounce:0kB free_pcp:1040kB local_pcp:216kB free_cma:0kB [ 1025.358529] lowmem_reserve[]: 0 0 0 0 0 [ 1025.362699] Node 0 DMA: 5*4kB (UME) 3*8kB (UME) 14*16kB (UM) 16*32kB (UME) 13*64kB (UME) 3*128kB (ME) 3*256kB (UE) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 10956kB [ 1025.379013] Node 0 DMA32: 744*4kB (UME) 242*8kB (UME) 144*16kB (UME) 23*32kB (ME) 154*64kB (UME) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18192kB [ 1025.395691] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1025.442121] Node 1 Normal: 3*4kB (UME) 2*8kB (ME) 2*16kB (E) 37*32kB (ME) 1037*64kB (UME) 463*128kB (UME) 6*256kB (UME) 4*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 130460kB 01:29:09 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @remote, 0x3}, 0x10) getpeername$l2tp(r0, 0x0, 0x0) 01:29:09 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x0, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) [ 1025.516668] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1025.562065] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1025.570737] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1025.594305] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1025.602989] 37886 total pagecache pages [ 1025.607585] 0 pages in swap cache [ 1025.611415] Swap cache stats: add 0, delete 0, find 0/0 [ 1025.618318] Free swap = 0kB [ 1025.621345] Total swap = 0kB [ 1025.624468] 2097051 pages RAM [ 1025.630722] 0 pages HighMem/MovableOnly [ 1025.635699] 363840 pages reserved [ 1025.639680] 0 pages cma reserved [ 1025.646489] Out of memory: Kill process 7966 (syz-fuzzer) score 5 or sacrifice child [ 1025.655946] Killed process 20305 (syz-executor.5) total-vm:84904kB, anon-rss:60kB, file-rss:4kB, shmem-rss:0kB [ 1025.689261] oom_reaper: reaped process 20305 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1026.093710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.100452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.123422] syz-executor.4 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1026.151843] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1026.156990] CPU: 1 PID: 22943 Comm: syz-executor.4 Not tainted 4.14.222-syzkaller #0 [ 1026.164861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1026.174207] Call Trace: [ 1026.176780] dump_stack+0x1b2/0x281 [ 1026.180391] dump_header+0x178/0x82f [ 1026.184086] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1026.189165] ? ___ratelimit+0x2cd/0x530 [ 1026.193119] oom_kill_process.cold+0x10/0xb18 [ 1026.197598] out_of_memory+0xe3e/0x1190 [ 1026.201569] ? oom_killer_disable+0x1c0/0x1c0 [ 1026.206040] ? mutex_trylock+0x152/0x1a0 [ 1026.210079] __alloc_pages_nodemask+0x23e1/0x2720 [ 1026.214903] ? ____cache_alloc_node+0xf4/0x1d0 [ 1026.219468] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1026.224315] ? do_raw_spin_unlock+0x164/0x220 [ 1026.228789] ? _raw_spin_unlock+0x29/0x40 [ 1026.232923] alloc_pages_current+0x155/0x260 [ 1026.237310] __vmalloc_area_node+0x40a/0x680 [ 1026.241699] ? __vmalloc_node_range+0x150/0x150 [ 1026.246347] ? __get_vm_area_node+0x27d/0x340 [ 1026.250821] __vmalloc_node_range+0xbe/0x150 [ 1026.255208] vmalloc_user+0x47/0xa0 [ 1026.258813] ? kcov_mmap+0x2b/0x120 [ 1026.262433] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1026.267424] kcov_mmap+0x2b/0x120 [ 1026.270853] ? kmem_cache_alloc+0x35f/0x3c0 [ 1026.275155] mmap_region+0xa1a/0x1220 [ 1026.278937] do_mmap+0x5b3/0xcb0 [ 1026.282289] vm_mmap_pgoff+0x14e/0x1a0 [ 1026.286158] ? vma_is_stack_for_current+0xb0/0xb0 [ 1026.290977] ? __fget+0x225/0x360 [ 1026.294410] SyS_mmap_pgoff+0x249/0x510 [ 1026.298474] ? find_mergeable_anon_vma+0x230/0x230 [ 1026.303380] ? do_syscall_64+0x4c/0x640 [ 1026.307336] ? align_vdso_addr+0x250/0x250 [ 1026.311548] do_syscall_64+0x1d5/0x640 [ 1026.315418] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1026.320587] RIP: 0033:0x465f42 [ 1026.323754] RSP: 002b:00007ffc0e446f68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1026.331441] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000465f42 [ 1026.338702] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000000000000 [ 1026.346036] RBP: 0000000000000000 R08: 00000000000000ed R09: 0000000000000000 [ 1026.353286] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000000ee [ 1026.360532] R13: 000000000056ca68 R14: 0000000000000000 R15: 0000000000400538 [ 1026.392993] Mem-Info: [ 1026.395440] active_anon:11053 inactive_anon:35148 isolated_anon:0 [ 1026.395440] active_file:56 inactive_file:75 isolated_file:9 [ 1026.395440] unevictable:0 dirty:19 writeback:0 unstable:0 [ 1026.395440] slab_reclaimable:12877 slab_unreclaimable:110722 [ 1026.395440] mapped:5728 shmem:35582 pagetables:472 bounce:0 [ 1026.395440] free:13936 free_pcp:122 free_cma:0 [ 1026.428763] Node 0 active_anon:42900kB inactive_anon:89424kB active_file:96kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3780kB dirty:36kB writeback:0kB shmem:90904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1026.456652] Node 1 active_anon:1312kB inactive_anon:51168kB active_file:128kB inactive_file:216kB unevictable:0kB isolated(anon):0kB isolated(file):36kB mapped:19132kB dirty:40kB writeback:0kB shmem:51424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1026.484524] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1026.518104] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1026.523880] Node 0 DMA32 free:18168kB min:36200kB low:45248kB high:54296kB active_anon:42872kB inactive_anon:89404kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:6912kB pagetables:1332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1026.552363] lowmem_reserve[]: 0 0 0 0 0 [ 1026.556371] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1026.582872] lowmem_reserve[]: 0 0 0 0 0 [ 1026.586860] Node 1 Normal free:26460kB min:53696kB low:67120kB high:80544kB active_anon:1292kB inactive_anon:51168kB active_file:104kB inactive_file:44kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:408kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1026.615369] lowmem_reserve[]: 0 0 0 0 0 [ 1026.619358] Node 0 DMA: 3*4kB (UME) 3*8kB (UME) 13*16kB (U) 15*32kB (UME) 12*64kB (UME) 2*128kB (ME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 10964kB [ 1026.640645] Node 0 DMA32: 746*4kB (ME) 246*8kB (UME) 156*16kB (ME) 23*32kB (UME) 12*64kB (ME) 13*128kB (UM) 13*256kB (U) 8*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18040kB [ 1026.661650] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1026.666331] syz-executor.3: page allocation failure: order:0, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1026.679582] Node 0 [ 1026.689982] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1026.700541] syz-executor.3 cpuset= [ 1026.702901] CPU: 0 PID: 22886 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1026.702907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1026.702910] Call Trace: [ 1026.702929] dump_stack+0x1b2/0x281 [ 1026.708068] / [ 1026.714314] warn_alloc.cold+0x96/0x1cc [ 1026.733656] mems_allowed=0-1 [ 1026.735656] ? zone_watermark_ok_safe+0x220/0x220 [ 1026.743594] ? usleep_range+0x130/0x130 [ 1026.747570] ? try_to_free_pages+0x23f/0x6e0 [ 1026.751973] ? _find_next_bit+0xdb/0x100 [ 1026.754949] Normal: [ 1026.756027] ? run_timer_softirq+0x5a0/0x5a0 [ 1026.756029] 0*4kB 0*8kB [ 1026.758348] __alloc_pages_nodemask+0x2127/0x2720 [ 1026.770322] ? lock_acquire+0x170/0x3f0 [ 1026.774297] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1026.779136] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1026.783632] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1026.788252] 0*16kB 0*32kB 0*64kB 0*128kB [ 1026.789085] alloc_pages_current+0x155/0x260 [ 1026.789099] ion_page_pool_alloc+0x118/0x1b0 [ 1026.802011] ion_system_heap_allocate+0x133/0x8c0 [ 1026.806854] ? _raw_spin_unlock+0x29/0x40 [ 1026.808448] 0*256kB [ 1026.811096] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1026.811099] 0*512kB 0*1024kB [ 1026.813408] ? ion_system_contig_heap_create+0x130/0x130 [ 1026.813417] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1026.813428] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1026.813438] ion_alloc+0x27a/0x810 [ 1026.813453] ? ion_dma_buf_release+0x40/0x40 [ 1026.813463] ? __might_fault+0x177/0x1b0 [ 1026.813478] ion_ioctl+0xea/0x1f0 [ 1026.848221] 0*2048kB [ 1026.848682] ? ion_query_heaps+0x360/0x360 [ 1026.855360] 0*4096kB = 0kB [ 1026.858725] ? ion_query_heaps+0x360/0x360 [ 1026.861542] Node 1 [ 1026.865760] do_vfs_ioctl+0x75a/0xff0 [ 1026.865771] ? ioctl_preallocate+0x1a0/0x1a0 [ 1026.865780] ? lock_downgrade+0x740/0x740 [ 1026.865792] ? __fget+0x225/0x360 [ 1026.865800] ? do_vfs_ioctl+0xff0/0xff0 [ 1026.865811] ? security_file_ioctl+0x83/0xb0 [ 1026.865820] SyS_ioctl+0x7f/0xb0 [ 1026.865827] ? do_vfs_ioctl+0xff0/0xff0 [ 1026.865838] do_syscall_64+0x1d5/0x640 [ 1026.865854] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1026.865862] RIP: 0033:0x465ef9 [ 1026.865868] RSP: 002b:00007fba3a452188 EFLAGS: 00000246 [ 1026.898302] Normal: [ 1026.899469] ORIG_RAX: 0000000000000010 [ 1026.899481] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1026.918439] 127*4kB [ 1026.919359] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1026.919366] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1026.938033] (ME) [ 1026.940265] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1026.956913] R13: 00007ffea651953f R14: 00007fba3a452300 R15: 0000000000022000 [ 1026.967762] CPU: 1 PID: 22909 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1026.971271] Mem-Info: [ 1026.975659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1026.975663] Call Trace: [ 1026.975681] dump_stack+0x1b2/0x281 [ 1026.975694] warn_alloc.cold+0x96/0x1cc [ 1026.975706] ? zone_watermark_ok_safe+0x220/0x220 [ 1026.978107] active_anon:11041 inactive_anon:35148 isolated_anon:0 [ 1026.978107] active_file:18 inactive_file:0 isolated_file:0 [ 1026.978107] unevictable:0 dirty:2 writeback:0 unstable:0 [ 1026.978107] slab_reclaimable:12886 slab_unreclaimable:110734 [ 1026.978107] mapped:5633 shmem:35582 pagetables:435 bounce:0 [ 1026.978107] free:13835 free_pcp:59 free_cma:0 [ 1026.987547] ? usleep_range+0x130/0x130 [ 1026.987556] ? try_to_free_pages+0x23f/0x6e0 [ 1026.987566] ? _find_next_bit+0xdb/0x100 [ 1026.987576] ? run_timer_softirq+0x5a0/0x5a0 [ 1026.990145] 83*8kB [ 1026.993751] __alloc_pages_nodemask+0x2127/0x2720 [ 1026.993775] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1026.997711] (ME) [ 1027.002543] ? ion_heap_sglist_zero+0x165/0x220 [ 1027.002562] ? mark_held_locks+0xa6/0xf0 [ 1027.035536] Node 0 active_anon:42872kB inactive_anon:89424kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3680kB dirty:0kB writeback:0kB shmem:90904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1027.039459] ? cache_grow_begin+0x41/0x630 [ 1027.043867] Node 1 active_anon:1292kB inactive_anon:51168kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18852kB dirty:8kB writeback:0kB shmem:51424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1027.047900] cache_grow_begin+0x91/0x630 [ 1027.052316] Node 0 [ 1027.054521] ? cache_grow_begin+0x91/0x630 [ 1027.059346] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1027.064158] fallback_alloc+0x207/0x2c0 [ 1027.064175] kmem_cache_alloc_node_trace+0xed/0x400 [ 1027.066216] 72*16kB [ 1027.070860] __get_vm_area_node+0xed/0x340 [ 1027.074915] lowmem_reserve[]: [ 1027.102206] vmap+0xd5/0x290 [ 1027.102217] ? ion_heap_clear_pages+0x23/0x70 [ 1027.102226] ? vunmap+0x50/0x50 [ 1027.106441] (UME) [ 1027.133495] ? __vunmap+0x21c/0x300 [ 1027.133509] ion_heap_clear_pages+0x23/0x70 [ 1027.133521] ion_heap_sglist_zero+0x165/0x220 [ 1027.137562] 0 [ 1027.139781] ? ion_heap_clear_pages+0x70/0x70 [ 1027.144003] 2717 [ 1027.169579] ? _ion_heap_freelist_drain+0x28b/0x410 [ 1027.173540] 54*32kB [ 1027.178524] ion_system_heap_free+0x1d0/0x240 [ 1027.180819] (UM) [ 1027.185038] ion_buffer_destroy+0x132/0x190 [ 1027.185048] _ion_heap_freelist_drain+0x293/0x410 [ 1027.185060] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1027.188137] 70*64kB [ 1027.191139] ion_alloc+0x244/0x810 [ 1027.195619] (UME) [ 1027.198873] ? ion_dma_buf_release+0x40/0x40 [ 1027.200990] 127*128kB [ 1027.204619] ? __might_fault+0x177/0x1b0 [ 1027.204633] ion_ioctl+0xea/0x1f0 [ 1027.208932] 2718 [ 1027.213405] ? ion_query_heaps+0x360/0x360 [ 1027.213420] ? ion_query_heaps+0x360/0x360 [ 1027.215312] 2718 [ 1027.219878] do_vfs_ioctl+0x75a/0xff0 [ 1027.221934] (UM) [ 1027.226917] ? ioctl_preallocate+0x1a0/0x1a0 [ 1027.229228] 7*256kB [ 1027.233709] ? lock_downgrade+0x740/0x740 [ 1027.233721] ? __fget+0x225/0x360 [ 1027.233730] ? do_vfs_ioctl+0xff0/0xff0 [ 1027.235772] 2718 [ 1027.240071] ? security_file_ioctl+0x83/0xb0 [ 1027.244936] (M) [ 1027.249744] SyS_ioctl+0x7f/0xb0 [ 1027.255565] ? do_vfs_ioctl+0xff0/0xff0 [ 1027.257687] Node 0 [ 1027.262092] do_syscall_64+0x1d5/0x640 [ 1027.262111] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1027.264586] 0*512kB [ 1027.268623] RIP: 0033:0x465ef9 [ 1027.272096] DMA32 free:17916kB min:36200kB low:45248kB high:54296kB active_anon:42872kB inactive_anon:89404kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:6912kB pagetables:1332kB bounce:0kB free_pcp:236kB local_pcp:120kB free_cma:0kB [ 1027.274101] RSP: 002b:00007f6ee7ac3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1027.278312] lowmem_reserve[]: 0 [ 1027.282527] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1027.282533] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1027.282538] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1027.282546] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1027.284587] 0*1024kB [ 1027.288360] R13: 00007ffe0127fadf R14: 00007f6ee7ac3300 R15: 0000000000022000 [ 1027.355280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1027.385124] 0*2048kB [ 1027.405622] 0 [ 1027.419686] 0*4096kB = 26580kB [ 1027.457952] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1027.471716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1027.476644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1027.486784] 0 0 0 [ 1027.486796] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1027.486815] lowmem_reserve[]: 0 0 0 0 0 [ 1027.486832] Node 1 Normal free:213716kB min:53696kB low:67120kB high:80544kB active_anon:1392kB inactive_anon:51168kB active_file:364kB inactive_file:7464kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:408kB bounce:0kB free_pcp:348kB local_pcp:180kB free_cma:0kB [ 1027.486849] lowmem_reserve[]: 0 0 0 0 0 [ 1027.486866] Node 0 DMA: 3*4kB (UME) 3*8kB (UME) 13*16kB (U) 15*32kB (UME) 12*64kB (UME) 2*128kB (ME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (U) [ 1027.494345] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1027.527485] device bridge_slave_1 left promiscuous mode [ 1027.554913] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1027.621777] 0*4096kB = 10964kB [ 1027.623645] 38059 total pagecache pages [ 1027.625141] Node 0 DMA32: 281*4kB (ME) 245*8kB (ME) 157*16kB (UME) 21*32kB (ME) 504*64kB (UME) 89*128kB (UM) 13*256kB (U) 8*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 57340kB [ 1027.631732] 0 pages in swap cache [ 1027.689381] Swap cache stats: add 0, delete 0, find 0/0 [ 1027.701612] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1027.725413] Free swap = 0kB [ 1027.728487] Total swap = 0kB [ 1027.742718] Node 1 Normal: 2*4kB (UE) 19*8kB (UME) 7*16kB (UME) 5*32kB (UM) 2752*64kB (UME) 242*128kB (UM) 14*256kB (UM) 0*512kB 178*1024kB (U) 0*2048kB 0*4096kB = 393392kB [ 1027.770080] 2097051 pages RAM [ 1027.776772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.783945] 0 pages HighMem/MovableOnly [ 1027.788440] 363840 pages reserved [ 1027.821847] device bridge_slave_0 left promiscuous mode [ 1027.827926] 0 pages cma reserved [ 1027.842049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.854086] Out of memory (oom_kill_allocating_task): Kill process 22943 (syz-executor.4) score 0 or sacrifice child [ 1027.869503] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1027.879537] device veth1_macvtap left promiscuous mode [ 1027.889913] device veth0_macvtap left promiscuous mode [ 1027.895322] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1027.915025] Killed process 22943 (syz-executor.4) total-vm:60328kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1027.929135] device veth1_vlan left promiscuous mode [ 1027.935615] device veth0_vlan left promiscuous mode [ 1027.950461] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1027.984334] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1028.014117] 39479 total pagecache pages [ 1028.020154] 0 pages in swap cache [ 1028.039907] Swap cache stats: add 0, delete 0, find 0/0 [ 1028.076653] Free swap = 0kB [ 1028.093460] Total swap = 0kB [ 1028.096976] 2097051 pages RAM [ 1028.104502] 0 pages HighMem/MovableOnly [ 1028.108574] 363840 pages reserved [ 1028.134770] 0 pages cma reserved [ 1028.296107] device hsr_slave_1 left promiscuous mode [ 1028.315075] device hsr_slave_0 left promiscuous mode [ 1028.344269] team0 (unregistering): Port device team_slave_1 removed [ 1028.366019] team0 (unregistering): Port device team_slave_0 removed [ 1028.393283] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1028.424071] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1028.497969] bond0 (unregistering): Released all slaves [ 1028.904909] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1028.929000] systemd-journal cpuset=/ mems_allowed=0-1 [ 1028.940044] CPU: 0 PID: 22952 Comm: systemd-journal Not tainted 4.14.222-syzkaller #0 [ 1028.948031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1028.957380] Call Trace: [ 1028.959969] dump_stack+0x1b2/0x281 [ 1028.963592] dump_header+0x178/0x82f [ 1028.967297] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1028.972392] ? ___ratelimit+0x2cd/0x530 [ 1028.976363] oom_kill_process.cold+0x10/0xb18 [ 1028.980855] out_of_memory+0xe3e/0x1190 [ 1028.984825] ? oom_killer_disable+0x1c0/0x1c0 [ 1028.989309] ? mutex_trylock+0x152/0x1a0 [ 1028.993363] __alloc_pages_nodemask+0x23e1/0x2720 [ 1028.998208] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1029.003055] ? cache_grow_begin+0x41/0x630 [ 1029.007279] cache_grow_begin+0x91/0x630 [ 1029.011329] ? cache_grow_begin+0x91/0x630 [ 1029.015556] fallback_alloc+0x207/0x2c0 [ 1029.019526] kmem_cache_alloc+0x1e5/0x3c0 [ 1029.023666] getname_flags+0xc8/0x550 [ 1029.027456] do_sys_open+0x1ce/0x410 [ 1029.031159] ? filp_open+0x60/0x60 [ 1029.034692] ? do_syscall_64+0x4c/0x640 [ 1029.038655] ? do_sys_open+0x410/0x410 [ 1029.042535] do_syscall_64+0x1d5/0x640 [ 1029.046419] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1029.051706] RIP: 0033:0x7fad4fdbb840 [ 1029.055405] RSP: 002b:00007fffff0bed78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1029.063104] RAX: ffffffffffffffda RBX: 00007fffff0bf080 RCX: 00007fad4fdbb840 [ 1029.070380] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 000055deef54af50 [ 1029.077638] RBP: 000000000000000d R08: 000000000000ffc0 R09: 00000000ffffffff [ 1029.084897] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 1029.092156] R13: 000055deef547040 R14: 00007fffff0bf040 R15: 000055deef54b9b0 [ 1029.101058] Mem-Info: [ 1029.103957] active_anon:11637 inactive_anon:37196 isolated_anon:0 [ 1029.103957] active_file:30 inactive_file:55 isolated_file:0 [ 1029.103957] unevictable:0 dirty:0 writeback:14 unstable:0 [ 1029.103957] slab_reclaimable:12870 slab_unreclaimable:110882 [ 1029.103957] mapped:26536 shmem:37630 pagetables:561 bounce:0 [ 1029.103957] free:23030 free_pcp:213 free_cma:0 [ 1029.138093] Node 0 active_anon:45400kB inactive_anon:97616kB active_file:96kB inactive_file:376kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35740kB dirty:0kB writeback:44kB shmem:99096kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1029.166588] Node 1 active_anon:1148kB inactive_anon:51168kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70404kB dirty:0kB writeback:12kB shmem:51424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1029.194697] Node 0 DMA free:11004kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1029.221666] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1029.226853] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1029.239784] Node 0 DMA32 free:63484kB min:36200kB low:45248kB high:54296kB active_anon:45400kB inactive_anon:97596kB active_file:200kB inactive_file:860kB unevictable:0kB writepending:244kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:1832kB bounce:0kB free_pcp:172kB local_pcp:120kB free_cma:0kB [ 1029.269689] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1029.275368] CPU: 0 PID: 22909 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1029.283252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1029.292600] Call Trace: [ 1029.295189] dump_stack+0x1b2/0x281 [ 1029.298816] warn_alloc.cold+0x96/0x1cc [ 1029.302786] ? zone_watermark_ok_safe+0x220/0x220 [ 1029.307636] __alloc_pages_nodemask+0x2127/0x2720 [ 1029.312600] ? lock_acquire+0x170/0x3f0 [ 1029.316580] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1029.321422] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1029.326868] ? __mutex_unlock_slowpath+0x75/0x770 [ 1029.331703] ? retint_kernel+0x2d/0x2d [ 1029.335586] alloc_pages_current+0x155/0x260 [ 1029.339997] ion_page_pool_alloc+0x118/0x1b0 [ 1029.344402] ion_system_heap_allocate+0x133/0x8c0 [ 1029.349239] ? _raw_spin_unlock+0x29/0x40 [ 1029.352531] lowmem_reserve[]: [ 1029.353377] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1029.353378] 0 0 [ 1029.356468] ? ion_system_contig_heap_create+0x130/0x130 [ 1029.356479] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1029.356490] ion_alloc+0x27a/0x810 [ 1029.377151] ? ion_dma_buf_release+0x40/0x40 [ 1029.381556] ? __might_fault+0x177/0x1b0 [ 1029.383115] 0 0 [ 1029.385607] ion_ioctl+0xea/0x1f0 [ 1029.385618] ? ion_query_heaps+0x360/0x360 [ 1029.387574] 0 [ 1029.391012] ? ion_query_heaps+0x360/0x360 [ 1029.401221] do_vfs_ioctl+0x75a/0xff0 [ 1029.405026] Node 0 [ 1029.405035] ? ioctl_preallocate+0x1a0/0x1a0 [ 1029.405047] ? lock_downgrade+0x740/0x740 [ 1029.412494] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1029.415787] ? __fget+0x225/0x360 [ 1029.444103] ? do_vfs_ioctl+0xff0/0xff0 [ 1029.448071] ? security_file_ioctl+0x83/0xb0 [ 1029.452174] lowmem_reserve[]: 0 [ 1029.452493] SyS_ioctl+0x7f/0xb0 [ 1029.452502] ? do_vfs_ioctl+0xff0/0xff0 [ 1029.455783] 0 [ 1029.459134] do_syscall_64+0x1d5/0x640 [ 1029.465934] 0 0 0 [ 1029.468756] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1029.470891] RIP: 0033:0x465ef9 [ 1029.476121] Node 1 [ 1029.479227] RSP: 002b:00007f6ee7ac3188 EFLAGS: 00000246 [ 1029.479248] Normal free:26524kB min:53696kB low:67120kB high:80544kB active_anon:1148kB inactive_anon:51168kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:412kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1029.481445] ORIG_RAX: 0000000000000010 [ 1029.481451] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1029.481457] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1029.481462] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1029.481467] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1029.481472] R13: 00007ffe0127fadf R14: 00007f6ee7ac3300 R15: 0000000000022000 [ 1029.483346] warn_alloc_show_mem: 1 callbacks suppressed [ 1029.483350] Mem-Info: [ 1029.492059] lowmem_reserve[]: [ 1029.516415] active_anon:11637 inactive_anon:37196 isolated_anon:12 [ 1029.516415] active_file:103 inactive_file:327 isolated_file:0 [ 1029.516415] unevictable:0 dirty:0 writeback:14 unstable:0 [ 1029.516415] slab_reclaimable:12870 slab_unreclaimable:110857 [ 1029.516415] mapped:26811 shmem:37630 pagetables:561 bounce:0 [ 1029.516415] free:24975 free_pcp:38 free_cma:0 [ 1029.523577] 0 [ 1029.527757] Node 0 active_anon:45400kB inactive_anon:97616kB active_file:488kB inactive_file:1480kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:36940kB dirty:0kB writeback:44kB shmem:99096kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1029.535968] 0 [ 1029.542150] Node 1 active_anon:1148kB inactive_anon:51168kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70404kB dirty:0kB writeback:12kB shmem:51424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1029.553183] 0 [ 1029.557039] Node 0 [ 1029.563172] 0 [ 1029.570267] DMA free:11004kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1029.602046] 0 [ 1029.607382] lowmem_reserve[]: [ 1029.647324] 0 [ 1029.661244] Node 0 [ 1029.681312] 2717 [ 1029.692649] DMA: 3*4kB (UME) 4*8kB (UME) 5*16kB (U) 16*32kB (UME) 10*64kB (UME) 4*128kB (UME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 11004kB [ 1029.706414] 2718 [ 1029.719599] Node 0 DMA32: 382*4kB (U) 2808*8kB (UE) 1963*16kB (UE) 152*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 60264kB [ 1029.722479] 2718 [ 1029.736294] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1029.738959] 2718 [ 1029.750210] Node 1 Normal: 222*4kB (UME) 523*8kB (UME) 305*16kB (UME) 139*32kB (UM) 74*64kB (UME) 28*128kB (M) 7*256kB (M) 2*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 26560kB [ 1029.755881] Node 0 [ 1029.769148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1029.769704] DMA32 free:59892kB min:36200kB low:45248kB high:54296kB active_anon:45400kB inactive_anon:97596kB active_file:532kB inactive_file:3876kB unevictable:0kB writepending:244kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:1832kB bounce:0kB free_pcp:148kB local_pcp:60kB free_cma:0kB [ 1029.772104] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1029.786105] lowmem_reserve[]: [ 1029.810582] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1029.822364] 0 [ 1029.830623] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1029.840006] 0 0 0 0 [ 1029.841339] 38952 total pagecache pages [ 1029.846648] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1029.847522] 0 pages in swap cache [ 1029.847529] Swap cache stats: add 0, delete 0, find 0/0 [ 1029.882624] Free swap = 0kB [ 1029.886120] Total swap = 0kB [ 1029.889670] 2097051 pages RAM [ 1029.893292] 0 pages HighMem/MovableOnly [ 1029.897807] 363840 pages reserved [ 1029.904194] 0 pages cma reserved [ 1029.908621] Out of memory (oom_kill_allocating_task): Kill process 22952 (systemd-journal) score 0 or sacrifice child [ 1029.915411] lowmem_reserve[]: 0 0 0 0 0 [ 1029.919922] Killed process 22952 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:4kB, shmem-rss:1624kB [ 1029.926542] Node 1 [ 1029.935213] oom_reaper: reaped process 22952 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1644kB [ 1029.951247] Normal free:26524kB min:53696kB low:67120kB high:80544kB active_anon:1148kB inactive_anon:51168kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:412kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB [ 1029.983236] lowmem_reserve[]: 0 0 0 0 0 [ 1029.987532] Node 0 DMA: 3*4kB (UME) 4*8kB (UME) 5*16kB (U) 16*32kB (UME) 10*64kB (UME) 4*128kB (UME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 11004kB [ 1030.006836] Node 0 DMA32: 0*4kB 2483*8kB (U) 2577*16kB (UE) 158*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 66152kB [ 1030.020193] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1030.035059] Node 1 Normal: 222*4kB (UME) 523*8kB (UME) 305*16kB (UME) 139*32kB (UM) 74*64kB (UME) 28*128kB (M) 7*256kB (M) 2*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 26560kB [ 1030.051497] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1030.060502] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1030.069347] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1030.078477] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1030.087350] 40570 total pagecache pages [ 1030.091632] 0 pages in swap cache [ 1030.095255] Swap cache stats: add 0, delete 0, find 0/0 [ 1030.100782] Free swap = 0kB [ 1030.107634] Total swap = 0kB [ 1030.111810] 2097051 pages RAM [ 1030.115859] 0 pages HighMem/MovableOnly [ 1030.120092] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1030.120787] 363840 pages reserved [ 1030.136339] 0 pages cma reserved [ 1030.162418] systemd[1]: Failed to start Journal Service. [ 1030.195687] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1030.207730] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1030.241560] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1030.258051] systemd[1]: Stopped Journal Service. [ 1030.276273] systemd[1]: Starting Journal Service... [ 1030.342415] systemd-journald[22960]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1031.107546] systemd[1]: Started Journal Service. [ 1031.453650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1031.460366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.474309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1031.481015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.511320] device bridge_slave_1 left promiscuous mode [ 1031.520344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.530808] device bridge_slave_0 left promiscuous mode [ 1031.536598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.546301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1031.553093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.561565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1031.568257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.576424] device bridge_slave_1 left promiscuous mode [ 1031.582507] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.590839] device bridge_slave_0 left promiscuous mode [ 1031.596679] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.606037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1031.612858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.621657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1031.628369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.636649] device bridge_slave_1 left promiscuous mode [ 1031.642650] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.649957] device bridge_slave_0 left promiscuous mode [ 1031.655672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.667405] device veth1_macvtap left promiscuous mode [ 1031.672785] device veth0_macvtap left promiscuous mode [ 1031.678100] device veth1_vlan left promiscuous mode [ 1031.683340] device veth0_vlan left promiscuous mode [ 1031.688819] device veth1_macvtap left promiscuous mode [ 1031.694414] device veth0_macvtap left promiscuous mode [ 1031.699745] device veth1_vlan left promiscuous mode [ 1031.704871] device veth0_vlan left promiscuous mode [ 1031.710318] device veth1_macvtap left promiscuous mode [ 1031.715774] device veth0_macvtap left promiscuous mode [ 1031.721140] device veth1_vlan left promiscuous mode [ 1031.726190] device veth0_vlan left promiscuous mode [ 1031.935361] device hsr_slave_1 left promiscuous mode [ 1031.946140] device hsr_slave_0 left promiscuous mode [ 1031.959714] team0 (unregistering): Port device team_slave_1 removed [ 1031.971197] team0 (unregistering): Port device team_slave_0 removed [ 1031.980718] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1031.993149] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1032.025129] bond0 (unregistering): Released all slaves [ 1032.071078] device hsr_slave_1 left promiscuous mode [ 1032.078948] device hsr_slave_0 left promiscuous mode [ 1032.095627] team0 (unregistering): Port device team_slave_1 removed [ 1032.105942] team0 (unregistering): Port device team_slave_0 removed [ 1032.115399] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1032.126392] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1032.163878] bond0 (unregistering): Released all slaves [ 1032.207126] device hsr_slave_1 left promiscuous mode [ 1032.215055] device hsr_slave_0 left promiscuous mode [ 1032.229923] team0 (unregistering): Port device team_slave_1 removed [ 1032.240601] team0 (unregistering): Port device team_slave_0 removed [ 1032.250885] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1032.261715] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1032.294207] bond0 (unregistering): Released all slaves 01:29:16 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:29:16 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) [ 1033.370315] IPVS: ftp: loaded support on port[0] = 21 [ 1033.481173] IPVS: ftp: loaded support on port[0] = 21 [ 1033.606045] chnl_net:caif_netlink_parms(): no params data found [ 1033.634665] IPVS: ftp: loaded support on port[0] = 21 [ 1033.721850] chnl_net:caif_netlink_parms(): no params data found [ 1033.780230] IPVS: ftp: loaded support on port[0] = 21 [ 1033.969371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.977808] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.986360] device bridge_slave_0 entered promiscuous mode [ 1033.993980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.000377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.009673] device bridge_slave_0 entered promiscuous mode [ 1034.016301] chnl_net:caif_netlink_parms(): no params data found [ 1034.063197] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.069691] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.078646] device bridge_slave_1 entered promiscuous mode [ 1034.085826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.093545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.102054] device bridge_slave_1 entered promiscuous mode [ 1034.183771] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1034.195490] chnl_net:caif_netlink_parms(): no params data found [ 1034.211908] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1034.220323] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1034.258011] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1034.303502] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1034.310946] team0: Port device team_slave_0 added [ 1034.316188] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1034.331377] team0: Port device team_slave_0 added [ 1034.348056] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1034.355330] team0: Port device team_slave_1 added [ 1034.361082] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1034.368488] team0: Port device team_slave_1 added [ 1034.406245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.413465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.439004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.450541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.457345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.482888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1034.494092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.500321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.534855] Bluetooth: hci3 command 0x0409 tx timeout [ 1034.548618] Bluetooth: hci1 command 0x0409 tx timeout [ 1034.563188] Bluetooth: hci2 command 0x0409 tx timeout [ 1034.568418] Bluetooth: hci0 command 0x0409 tx timeout [ 1034.569218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.589433] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1034.602386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.608621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.637770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1034.670215] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1034.688929] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1034.705635] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.713697] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.721551] device bridge_slave_0 entered promiscuous mode [ 1034.731277] device hsr_slave_0 entered promiscuous mode [ 1034.742524] device hsr_slave_1 entered promiscuous mode [ 1034.752070] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1034.789724] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.796365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.804737] device bridge_slave_1 entered promiscuous mode [ 1034.817769] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1034.843358] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.849750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.862243] device bridge_slave_0 entered promiscuous mode [ 1034.876576] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1034.895360] device hsr_slave_0 entered promiscuous mode [ 1034.905255] device hsr_slave_1 entered promiscuous mode [ 1034.915456] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.926908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.934662] device bridge_slave_1 entered promiscuous mode [ 1034.946748] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1034.967869] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1034.992511] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1035.005219] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1035.048398] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1035.059850] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1035.107315] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1035.115372] team0: Port device team_slave_0 added [ 1035.123705] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1035.131116] team0: Port device team_slave_1 added [ 1035.157875] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1035.165949] team0: Port device team_slave_0 added [ 1035.172654] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1035.179825] team0: Port device team_slave_1 added [ 1035.267876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1035.274612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1035.301660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1035.317019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1035.325910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1035.351951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1035.376068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1035.382942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1035.408525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1035.431277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1035.437529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1035.464124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1035.477895] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1035.501733] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1035.518063] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1035.527133] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1035.542957] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1035.572953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1035.579655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1035.589109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1035.596073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1035.605124] device bridge_slave_1 left promiscuous mode [ 1035.610819] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.617752] device bridge_slave_0 left promiscuous mode [ 1035.623395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.632302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1035.639015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1035.646721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1035.653496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1035.661087] device bridge_slave_1 left promiscuous mode [ 1035.667052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.674570] device bridge_slave_0 left promiscuous mode [ 1035.680007] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.689100] device veth1_macvtap left promiscuous mode [ 1035.694971] device veth0_macvtap left promiscuous mode [ 1035.702601] device veth1_vlan left promiscuous mode [ 1035.707641] device veth0_vlan left promiscuous mode [ 1035.713192] device veth1_macvtap left promiscuous mode [ 1035.718482] device veth0_macvtap left promiscuous mode [ 1035.723941] device veth1_vlan left promiscuous mode [ 1035.728976] device veth0_vlan left promiscuous mode [ 1035.837342] device hsr_slave_1 left promiscuous mode [ 1035.846414] device hsr_slave_0 left promiscuous mode [ 1035.859218] team0 (unregistering): Port device team_slave_1 removed [ 1035.868136] team0 (unregistering): Port device team_slave_0 removed [ 1035.877151] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1035.887442] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1035.918219] bond0 (unregistering): Released all slaves [ 1035.948818] device hsr_slave_1 left promiscuous mode [ 1035.956987] device hsr_slave_0 left promiscuous mode [ 1035.969413] team0 (unregistering): Port device team_slave_1 removed [ 1035.978273] team0 (unregistering): Port device team_slave_0 removed [ 1035.988901] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1035.999279] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1036.023230] bond0 (unregistering): Released all slaves [ 1036.063854] device hsr_slave_0 entered promiscuous mode [ 1036.069432] device hsr_slave_1 entered promiscuous mode [ 1036.083218] device hsr_slave_0 entered promiscuous mode [ 1036.089304] device hsr_slave_1 entered promiscuous mode [ 1036.102418] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1036.113055] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1036.119731] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1036.127571] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1036.135146] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1036.163399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.186135] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1036.232011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.246427] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1036.257409] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1036.264574] 8021q: adding VLAN 0 to HW filter on device team0 [ 1036.273279] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1036.286495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1036.293602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1036.315770] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1036.322944] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1036.343913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1036.351721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1036.358501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1036.366909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1036.374800] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.381185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1036.397511] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1036.403672] 8021q: adding VLAN 0 to HW filter on device team0 [ 1036.412233] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1036.422873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1036.429955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1036.438268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1036.446254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.452734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1036.459846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1036.471689] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1036.483920] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1036.495698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1036.505895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1036.513997] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.520348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1036.527563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1036.535813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1036.543484] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.549816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1036.558557] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1036.571031] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1036.579444] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1036.587182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1036.595267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1036.600628] Bluetooth: hci0 command 0x041b tx timeout [ 1036.603359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1036.609102] Bluetooth: hci2 command 0x041b tx timeout [ 1036.618787] Bluetooth: hci3 command 0x041b tx timeout [ 1036.621380] Bluetooth: hci1 command 0x041b tx timeout [ 1036.630536] Bluetooth: hci4 command 0x0409 tx timeout [ 1036.638811] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1036.654644] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1036.661526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1036.669203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1036.681975] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1036.693720] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1036.700069] Bluetooth: hci5 command 0x0409 tx timeout [ 1036.713387] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1036.721453] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1036.728782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1036.739510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1036.748119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1036.782011] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1036.794792] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1036.803731] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1036.815099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1036.823291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1036.833746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1036.842541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1036.850028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1036.862516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1036.877541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.892969] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1036.898970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1036.911091] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1036.920014] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1036.930922] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1036.938471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1036.949284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1036.957216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1036.968148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1036.985182] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1036.997112] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1037.008250] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1037.019347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1037.038668] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1037.048385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1037.056493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1037.072239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1037.079216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1037.090468] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1037.100540] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1037.108493] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1037.120257] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1037.127817] 8021q: adding VLAN 0 to HW filter on device team0 [ 1037.137789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1037.146383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1037.157292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1037.165233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1037.176867] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1037.184523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1037.198567] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1037.205772] 8021q: adding VLAN 0 to HW filter on device team0 [ 1037.217401] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1037.234176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1037.242815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1037.254876] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.261267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1037.269646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.279719] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1037.294688] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1037.301619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1037.308686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1037.316698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1037.324802] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.331205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1037.339487] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1037.352215] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1037.372257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1037.382575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1037.391200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1037.398862] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.405247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1037.413979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1037.422145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1037.429631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.436055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1037.444223] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1037.452251] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1037.461988] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1037.470898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1037.479161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1037.487448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1037.494204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1037.505278] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1037.515917] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1037.523252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1037.531774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1037.539249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1037.547721] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1037.557152] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1037.567428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1037.576083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1037.588680] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1037.602348] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1037.615240] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1037.622882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1037.633836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1037.641838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1037.649255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1037.656957] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1037.666456] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1037.681045] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1037.687213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1037.697596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.704125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1037.712453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1037.726722] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1037.738371] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1037.749529] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1037.759967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1037.768653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1037.782020] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1037.791773] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1037.805447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1037.818678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1037.832325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1037.843388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1037.852178] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1037.860381] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1037.867879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1037.884274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1037.892526] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1037.899304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1037.908729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1037.925327] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1037.936505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1037.956582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.974906] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1037.984950] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1037.994104] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1038.004357] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1038.015146] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1038.023411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1038.036909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1038.046845] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1038.055938] device veth0_vlan entered promiscuous mode [ 1038.065211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1038.073651] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1038.081841] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1038.088568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1038.100064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1038.111152] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1038.122882] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1038.133806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1038.142203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1038.155519] IPVS: ftp: loaded support on port[0] = 21 [ 1038.161682] device veth1_vlan entered promiscuous mode [ 1038.176458] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1038.211779] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1038.226732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1038.239095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1038.254642] device veth0_macvtap entered promiscuous mode [ 1038.264778] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1038.283959] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1038.309089] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1038.319010] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1038.325963] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1038.334366] device veth1_macvtap entered promiscuous mode [ 1038.340943] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1038.364946] IPVS: ftp: loaded support on port[0] = 21 [ 1038.376456] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1038.385785] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1038.398083] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1038.414343] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1038.423813] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1038.431387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1038.438696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1038.446809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1038.454846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1038.464329] device veth0_vlan entered promiscuous mode [ 1038.523045] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1038.529931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1038.545302] device veth1_vlan entered promiscuous mode [ 1038.553837] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1038.570142] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1038.580853] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1038.590650] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1038.597683] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1038.606565] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1038.615553] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1038.627795] chnl_net:caif_netlink_parms(): no params data found [ 1038.649090] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1038.656437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1038.669672] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1038.677780] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1038.686247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1038.693716] Bluetooth: hci4 command 0x041b tx timeout [ 1038.695067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1038.699071] Bluetooth: hci1 command 0x040f tx timeout [ 1038.710137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1038.719433] Bluetooth: hci3 command 0x040f tx timeout [ 1038.723403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1038.732592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1038.740986] Bluetooth: hci2 command 0x040f tx timeout [ 1038.746220] Bluetooth: hci0 command 0x040f tx timeout [ 1038.757041] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1038.765063] Bluetooth: hci5 command 0x041b tx timeout [ 1038.772080] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1038.779005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1038.790886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1038.807304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1038.814869] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1038.823365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1038.834135] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1038.841337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1038.849964] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1038.866591] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1038.885650] device veth0_vlan entered promiscuous mode [ 1038.898568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1038.908138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1038.918272] device veth0_macvtap entered promiscuous mode [ 1038.926012] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1038.937419] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1038.953467] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1038.960896] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1038.974482] device veth1_macvtap entered promiscuous mode [ 1038.981357] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1038.988923] device veth1_vlan entered promiscuous mode [ 1038.994807] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1039.010807] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1039.018960] device veth0_vlan entered promiscuous mode [ 1039.031869] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1039.039415] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1039.047037] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1039.055184] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1039.062596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1039.069832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1039.078119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1039.085845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1039.109225] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1039.116538] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1039.142941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.149388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.156865] device bridge_slave_0 entered promiscuous mode [ 1039.167418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.174086] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.181466] device bridge_slave_1 entered promiscuous mode [ 1039.196464] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1039.205420] device veth1_vlan entered promiscuous mode [ 1039.236711] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1039.254382] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1039.265004] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1039.301258] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1039.311353] device veth0_macvtap entered promiscuous mode [ 1039.317421] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1039.340875] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1039.352704] chnl_net:caif_netlink_parms(): no params data found [ 1039.365661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1039.373762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1039.382979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1039.393116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.403529] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1039.411102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1039.419293] device veth1_macvtap entered promiscuous mode [ 1039.425574] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1039.438668] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1039.464228] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1039.472136] team0: Port device team_slave_0 added [ 1039.477816] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1039.502973] team0: Port device team_slave_1 added [ 1039.508019] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1039.518072] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1039.526524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1039.534761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1039.542851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1039.550833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1039.559587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1039.570392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.580838] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1039.587716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1039.597141] device veth0_macvtap entered promiscuous mode [ 1039.603792] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1039.630307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.636559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.664587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1039.688140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1039.694700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.721964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1039.733439] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1039.742468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1039.751043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1039.766536] device veth1_macvtap entered promiscuous mode [ 1039.773414] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1039.781344] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1039.798457] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1039.819844] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1039.829836] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1039.839132] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1039.876082] device hsr_slave_0 entered promiscuous mode [ 1039.882957] device hsr_slave_1 entered promiscuous mode [ 1039.889379] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1039.902844] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1039.912225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1039.927391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.945883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1039.968577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 01:29:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r3, 0x401}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macvlan1\x00'}) [ 1039.980960] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1039.988502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1040.005653] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1040.019705] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 01:29:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r3, 0x401}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macvlan1\x00'}) [ 1040.031020] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1040.038790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1040.051458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 01:29:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r3, 0x401}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macvlan1\x00'}) [ 1040.075698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.085340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1040.096208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.107275] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1040.115891] batman_adv: batadv0: Interface activated: batadv_slave_1 01:29:24 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r2, 0x401}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) [ 1040.131437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1040.146046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.157100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 01:29:24 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) [ 1040.195716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.205256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1040.216693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.229150] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready 01:29:24 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) [ 1040.244462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1040.252333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1040.264321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1040.279457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1040.299454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1040.328782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1040.344974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.354571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1040.366421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.384037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1040.397570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.409092] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1040.416988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1040.453681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1040.462449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1040.520523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.526882] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.545037] device bridge_slave_0 entered promiscuous mode [ 1040.566880] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.574276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.584724] device bridge_slave_1 entered promiscuous mode [ 1040.640774] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1040.664173] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1040.693519] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1040.712626] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1040.719716] team0: Port device team_slave_0 added [ 1040.741790] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1040.752011] team0: Port device team_slave_1 added [ 1040.761039] Bluetooth: hci0 command 0x0419 tx timeout [ 1040.766287] Bluetooth: hci2 command 0x0419 tx timeout [ 1040.798065] Bluetooth: hci3 command 0x0419 tx timeout [ 1040.812861] Bluetooth: hci1 command 0x0419 tx timeout [ 1040.830163] Bluetooth: hci4 command 0x040f tx timeout [ 1040.840893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1040.847144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1040.873004] Bluetooth: hci5 command 0x040f tx timeout [ 1040.878948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.899057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1040.921741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.929867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1040.961293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.977585] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1040.999750] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1041.010078] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1041.029090] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1041.039628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1041.046936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1041.071774] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1041.077952] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.093305] device hsr_slave_0 entered promiscuous mode [ 1041.099404] device hsr_slave_1 entered promiscuous mode [ 1041.106936] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1041.116666] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1041.126824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1041.135548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1041.144101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.150494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.158693] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1041.169095] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1041.177649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1041.188483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1041.197379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1041.208014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.214442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.234015] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1041.246719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1041.254370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1041.262992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1041.275664] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1041.287954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1041.297209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1041.321284] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1041.334860] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1041.342143] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1041.349562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1041.361140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1041.368950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1041.379711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1041.396319] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1041.410640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1041.418443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1041.434124] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1041.441028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1041.483563] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1041.504616] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1041.520819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1041.527618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1041.554634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1041.617958] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1041.702542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1041.729394] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1041.749683] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1041.770368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1041.777432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1041.793923] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready 01:29:26 executing program 4: socket$l2tp(0x2, 0x2, 0x73) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x400040, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', r1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) getpeername$l2tp(r0, 0x0, 0x0) 01:29:26 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:29:26 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="03032bbd7000fddbdf2509000000050029000000000008003b0009000000130038000100000005002d000100000008003400fe"], 0x64}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000800) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x20014040}, 0x0) 01:29:26 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @remote, 0x3}, 0x10) getpeername$l2tp(r0, 0x0, 0x0) [ 1041.810592] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.837879] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1041.878154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1041.911795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1041.932051] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.938448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.967619] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1041.983872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1042.001127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1042.009124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1042.040874] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.047259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1042.073603] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1042.090841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1042.107440] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1042.124202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1042.144487] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1042.163261] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1042.182216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1042.200398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1042.208190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1042.230464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1042.239554] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1042.263101] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1042.283665] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1042.301097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1042.308753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1042.320595] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1042.330521] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1042.338686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1042.354437] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1042.360908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1042.368059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1042.387554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1042.404834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1042.414496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1042.434371] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1042.459622] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1042.475476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1042.487046] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1042.502744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1042.529653] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1042.539382] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1042.549504] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1042.569114] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1042.587754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1042.598293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1042.616864] device veth0_vlan entered promiscuous mode [ 1042.627847] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1042.644276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1042.657082] device veth1_vlan entered promiscuous mode [ 1042.673163] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1042.694683] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1042.718340] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1042.738437] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1042.749172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1042.758304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1042.772863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1042.787198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1042.801316] device veth0_macvtap entered promiscuous mode [ 1042.807588] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1042.825301] device veth1_macvtap entered promiscuous mode [ 1042.836249] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1042.845937] Bluetooth: hci4 command 0x0419 tx timeout [ 1042.866105] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1042.886429] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1042.902094] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1042.917250] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1042.925966] Bluetooth: hci5 command 0x0419 tx timeout [ 1042.936688] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1042.945440] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1042.960294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1042.973856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1042.983170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1042.997389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.008156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1043.022117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.032535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1043.044661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.055088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1043.067801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.080916] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1043.087983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1043.097276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1043.105871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1043.114873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1043.126375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.136298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1043.147039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.156879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1043.168636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.178417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1043.189031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.200416] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1043.207326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1043.215272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1043.226847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1043.245333] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1043.257832] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1043.265326] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1043.274716] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1043.283062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1043.295616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1043.305548] device veth0_vlan entered promiscuous mode [ 1043.316844] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1043.324768] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1043.333373] device veth1_vlan entered promiscuous mode [ 1043.358953] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1043.378252] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1043.391944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1043.401160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1043.411165] device veth0_macvtap entered promiscuous mode [ 1043.417502] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1043.431269] device veth1_macvtap entered promiscuous mode [ 1043.437589] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1043.448228] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1043.465285] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1043.475596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1043.495697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.504949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1043.515736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.526121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1043.536497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.546594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1043.557297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.568337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1043.578775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.590358] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1043.597384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1043.606361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1043.615639] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1043.623531] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1043.636625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1043.655590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1043.666034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.676241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1043.687395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.697442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1043.708015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.717833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1043.728372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.738328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1043.749154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.760885] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1043.767787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1043.775868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1043.784921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1044.641374] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1044.643589] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1044.665463] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1044.670315] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1044.672443] CPU: 1 PID: 24440 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1044.683553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1044.694020] Call Trace: [ 1044.696614] dump_stack+0x1b2/0x281 [ 1044.700235] warn_alloc.cold+0x96/0x1cc [ 1044.704205] ? zone_watermark_ok_safe+0x220/0x220 [ 1044.709062] __alloc_pages_nodemask+0x2127/0x2720 [ 1044.713904] ? lock_acquire+0x170/0x3f0 [ 1044.717865] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1044.722692] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1044.728122] ? __mutex_unlock_slowpath+0x75/0x770 [ 1044.732943] ? alloc_pages_current+0x123/0x260 [ 1044.737504] alloc_pages_current+0x155/0x260 [ 1044.741895] ion_page_pool_alloc+0x118/0x1b0 [ 1044.746298] ion_system_heap_allocate+0x133/0x8c0 [ 1044.751134] ? ion_alloc+0x187/0x810 [ 1044.754839] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1044.760282] ? ion_system_contig_heap_create+0x130/0x130 [ 1044.765716] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1044.770716] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1044.775543] ion_alloc+0x204/0x810 [ 1044.779076] ? ion_dma_buf_release+0x40/0x40 [ 1044.783477] ? __might_fault+0x177/0x1b0 [ 1044.787521] ion_ioctl+0xea/0x1f0 [ 1044.790957] ? ion_query_heaps+0x360/0x360 [ 1044.795174] ? ion_query_heaps+0x360/0x360 [ 1044.799743] do_vfs_ioctl+0x75a/0xff0 [ 1044.803534] ? ioctl_preallocate+0x1a0/0x1a0 [ 1044.807923] ? lock_downgrade+0x740/0x740 [ 1044.812052] ? __fget+0x225/0x360 [ 1044.815483] ? do_vfs_ioctl+0xff0/0xff0 [ 1044.819441] ? security_file_ioctl+0x83/0xb0 [ 1044.823843] SyS_ioctl+0x7f/0xb0 [ 1044.827202] ? do_vfs_ioctl+0xff0/0xff0 [ 1044.831169] do_syscall_64+0x1d5/0x640 [ 1044.835044] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1044.840568] RIP: 0033:0x465ef9 [ 1044.843743] RSP: 002b:00007f4207bea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1044.851442] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1044.858697] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1044.865945] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1044.873192] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1044.880440] R13: 00007ffc1ddb1d4f R14: 00007f4207bea300 R15: 0000000000022000 [ 1044.887704] CPU: 0 PID: 24455 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1044.895587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1044.904920] Call Trace: [ 1044.907488] dump_stack+0x1b2/0x281 [ 1044.911098] warn_alloc.cold+0x96/0x1cc [ 1044.915051] ? zone_watermark_ok_safe+0x220/0x220 [ 1044.919894] __alloc_pages_nodemask+0x2127/0x2720 [ 1044.924741] ? __schedule+0x893/0x1de0 [ 1044.928633] ? lock_acquire+0x170/0x3f0 [ 1044.932597] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1044.937429] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1044.942865] ? __mutex_unlock_slowpath+0x75/0x770 [ 1044.947696] alloc_pages_current+0x155/0x260 [ 1044.952103] ion_page_pool_alloc+0x118/0x1b0 [ 1044.956582] ion_system_heap_allocate+0x133/0x8c0 [ 1044.961419] ? ion_alloc+0x187/0x810 [ 1044.965112] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1044.970541] ? ion_system_contig_heap_create+0x130/0x130 [ 1044.975970] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1044.980965] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1044.985787] ion_alloc+0x204/0x810 [ 1044.989319] ? ion_dma_buf_release+0x40/0x40 [ 1044.993716] ? __might_fault+0x177/0x1b0 [ 1044.997847] ion_ioctl+0xea/0x1f0 [ 1045.001279] ? ion_query_heaps+0x360/0x360 [ 1045.005494] ? ion_query_heaps+0x360/0x360 [ 1045.009709] do_vfs_ioctl+0x75a/0xff0 [ 1045.013507] ? ioctl_preallocate+0x1a0/0x1a0 [ 1045.017893] ? lock_downgrade+0x740/0x740 [ 1045.022020] ? __fget+0x225/0x360 [ 1045.025452] ? do_vfs_ioctl+0xff0/0xff0 [ 1045.029408] ? security_file_ioctl+0x83/0xb0 [ 1045.033795] SyS_ioctl+0x7f/0xb0 [ 1045.037138] ? do_vfs_ioctl+0xff0/0xff0 [ 1045.041091] do_syscall_64+0x1d5/0x640 [ 1045.044960] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1045.050138] RIP: 0033:0x465ef9 [ 1045.053307] RSP: 002b:00007f21abfbc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1045.061428] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1045.068688] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1045.075935] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1045.083183] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1045.090430] R13: 00007ffe95e3d6ef R14: 00007f21abfbc300 R15: 0000000000022000 [ 1045.120467] Mem-Info: [ 1045.122920] active_anon:11747 inactive_anon:39246 isolated_anon:0 [ 1045.122920] active_file:2192 inactive_file:5030 isolated_file:0 [ 1045.122920] unevictable:0 dirty:11 writeback:0 unstable:0 [ 1045.122920] slab_reclaimable:12099 slab_unreclaimable:109173 [ 1045.122920] mapped:57633 shmem:39695 pagetables:705 bounce:0 [ 1045.122920] free:197264 free_pcp:75 free_cma:0 [ 1045.163860] Node 0 active_anon:46204kB inactive_anon:105828kB active_file:8756kB inactive_file:20112kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160128kB dirty:36kB writeback:0kB shmem:107368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1045.195772] Node 1 active_anon:784kB inactive_anon:51156kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70404kB dirty:8kB writeback:0kB shmem:51412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1045.235683] Node 0 DMA free:11092kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1045.267926] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1045.273058] Node 0 DMA32 free:589996kB min:36200kB low:45248kB high:54296kB active_anon:46204kB inactive_anon:105808kB active_file:8756kB inactive_file:20112kB unevictable:0kB writepending:32kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2512kB bounce:0kB free_pcp:316kB local_pcp:128kB free_cma:0kB [ 1045.306295] lowmem_reserve[]: 0 0 0 0 0 [ 1045.310402] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1045.340426] lowmem_reserve[]: 0 0 0 0 0 [ 1045.344466] Node 1 Normal free:53428kB min:53696kB low:67120kB high:80544kB active_anon:784kB inactive_anon:51156kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:308kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1045.376775] lowmem_reserve[]: 0 0 0 0 0 [ 1045.380858] Node 0 DMA: 13*4kB (UME) 32*8kB (UME) 32*16kB (UE) 23*32kB (UME) 7*64kB (UME) 11*128kB (UME) 6*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 11092kB [ 1045.400751] Node 0 DMA32: 475*4kB (UE) 116*8kB (E) 7633*16kB (UE) 10725*32kB (UE) 33*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 470524kB [ 1045.417081] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1045.431503] Node 1 Normal: 413*4kB (UM) 744*8kB (UM) 638*16kB (UM) 355*32kB (UM) 33*64kB (M) 13*128kB (M) 4*256kB (M) 38*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53428kB [ 1045.447936] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1045.459182] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1045.469020] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1045.481462] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1045.491299] 46802 total pagecache pages [ 1045.495361] 0 pages in swap cache [ 1045.498805] Swap cache stats: add 0, delete 0, find 0/0 [ 1045.506579] Free swap = 0kB [ 1045.511184] Total swap = 0kB [ 1045.514209] 2097051 pages RAM [ 1045.517305] 0 pages HighMem/MovableOnly [ 1045.523698] 363840 pages reserved [ 1045.527150] 0 pages cma reserved [ 1045.987524] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1046.004683] systemd-journal cpuset=/ mems_allowed=0-1 [ 1046.018209] CPU: 0 PID: 22960 Comm: systemd-journal Not tainted 4.14.222-syzkaller #0 [ 1046.026240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1046.035575] Call Trace: [ 1046.038145] dump_stack+0x1b2/0x281 [ 1046.041756] dump_header+0x178/0x82f [ 1046.045517] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1046.050605] ? ___ratelimit+0x2cd/0x530 [ 1046.054612] oom_kill_process.cold+0x10/0xb18 [ 1046.059094] out_of_memory+0xe3e/0x1190 [ 1046.063049] ? oom_killer_disable+0x1c0/0x1c0 [ 1046.067517] ? mutex_trylock+0x152/0x1a0 [ 1046.071566] __alloc_pages_nodemask+0x23e1/0x2720 [ 1046.076400] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1046.081229] alloc_pages_current+0x155/0x260 [ 1046.085614] filemap_fault+0xea3/0x1980 [ 1046.089580] ext4_filemap_fault+0x84/0xb0 [ 1046.093714] __do_fault+0xfa/0x380 [ 1046.097229] __handle_mm_fault+0x2497/0x4620 [ 1046.101615] ? vm_insert_page+0x7c0/0x7c0 [ 1046.105739] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1046.110740] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1046.115485] handle_mm_fault+0x391/0x860 [ 1046.119533] __do_page_fault+0x549/0xad0 [ 1046.123588] ? spurious_fault+0x640/0x640 [ 1046.127722] ? do_page_fault+0x60/0x500 [ 1046.131680] ? page_fault+0x2f/0x50 [ 1046.135293] page_fault+0x45/0x50 [ 1046.138724] RIP: 0001:0x1 [ 1046.141455] RSP: 72d081e0:00007fff09ad2750 EFLAGS: 7fff09ad2570 [ 1046.147250] Mem-Info: [ 1046.155967] active_anon:11852 inactive_anon:39246 isolated_anon:0 [ 1046.155967] active_file:18 inactive_file:6 isolated_file:0 [ 1046.155967] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1046.155967] slab_reclaimable:12091 slab_unreclaimable:108632 [ 1046.155967] mapped:52833 shmem:39695 pagetables:705 bounce:0 [ 1046.155967] free:25160 free_pcp:82 free_cma:0 [ 1046.195174] Node 0 active_anon:46624kB inactive_anon:105828kB active_file:48kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140928kB dirty:0kB writeback:0kB shmem:107368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1046.225479] Node 1 active_anon:784kB inactive_anon:51156kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70404kB dirty:0kB writeback:0kB shmem:51412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1046.252536] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1046.278825] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1046.283876] Node 0 DMA32 free:36140kB min:36200kB low:45248kB high:54296kB active_anon:46624kB inactive_anon:105808kB active_file:48kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2512kB bounce:0kB free_pcp:316kB local_pcp:208kB free_cma:0kB [ 1046.312903] lowmem_reserve[]: 0 0 0 0 0 [ 1046.316866] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1046.342423] lowmem_reserve[]: 0 0 0 0 0 [ 1046.346418] Node 1 Normal free:53436kB min:53696kB low:67120kB high:80544kB active_anon:784kB inactive_anon:51156kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:308kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1046.374908] lowmem_reserve[]: 0 0 0 0 0 [ 1046.378897] Node 0 DMA: 6*4kB (UME) 32*8kB (UME) 32*16kB (UE) 23*32kB (UME) 7*64kB (UME) 11*128kB (UME) 6*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 11064kB [ 1046.394945] Node 0 DMA32: 1064*4kB (MEH) 409*8kB (ME) 198*16kB (ME) 701*32kB (UMEH) 40*64kB (UM) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36072kB [ 1046.409719] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1046.420652] Node 1 Normal: 415*4kB (UM) 744*8kB (UM) 638*16kB (UM) 355*32kB (UM) 33*64kB (M) 13*128kB (M) 4*256kB (M) 38*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53436kB [ 1046.435930] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1046.445361] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1046.453994] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1046.462874] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1046.471545] 39719 total pagecache pages [ 1046.475518] 0 pages in swap cache [ 1046.478959] Swap cache stats: add 0, delete 0, find 0/0 [ 1046.484359] Free swap = 0kB [ 1046.487361] Total swap = 0kB [ 1046.490398] 2097051 pages RAM [ 1046.493485] 0 pages HighMem/MovableOnly [ 1046.497433] 363840 pages reserved [ 1046.500921] 0 pages cma reserved [ 1046.504298] Out of memory (oom_kill_allocating_task): Kill process 22960 (systemd-journal) score 0 or sacrifice child [ 1046.515079] Killed process 22960 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:2344kB [ 1046.526364] oom_reaper: reaped process 22960 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2436kB [ 1046.551196] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 1046.570822] ion_system_heap cpuset=/ mems_allowed=0-1 [ 1046.576048] CPU: 0 PID: 4243 Comm: ion_system_heap Not tainted 4.14.222-syzkaller #0 [ 1046.583921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1046.593296] Call Trace: [ 1046.595876] dump_stack+0x1b2/0x281 [ 1046.599602] dump_header+0x178/0x82f [ 1046.603310] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1046.608398] ? ___ratelimit+0x2cd/0x530 [ 1046.612359] oom_kill_process.cold+0x10/0xb18 [ 1046.616845] ? lock_downgrade+0x740/0x740 [ 1046.620984] out_of_memory+0x2dc/0x1190 [ 1046.624956] ? oom_killer_disable+0x1c0/0x1c0 [ 1046.629454] ? mutex_trylock+0x152/0x1a0 [ 1046.633503] __alloc_pages_nodemask+0x23e1/0x2720 [ 1046.638340] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1046.643203] ? kmem_cache_alloc_node_trace+0x153/0x400 [ 1046.648480] ? cache_grow_begin+0x41/0x630 [ 1046.652705] cache_grow_begin+0x91/0x630 [ 1046.656758] ? cache_grow_begin+0x91/0x630 [ 1046.660979] fallback_alloc+0x207/0x2c0 [ 1046.664945] kmem_cache_alloc_node_trace+0xed/0x400 [ 1046.669957] alloc_vmap_area+0xf0/0x7c0 [ 1046.673918] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1046.679364] ? purge_vmap_area_lazy+0xb0/0xb0 [ 1046.683869] ? __get_vm_area_node+0xed/0x340 [ 1046.688271] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1046.693599] __get_vm_area_node+0x126/0x340 [ 1046.697907] vmap+0xd5/0x290 [ 1046.700914] ? ion_heap_clear_pages+0x23/0x70 [ 1046.705401] ? vunmap+0x50/0x50 [ 1046.708666] ? __vunmap+0x21c/0x300 [ 1046.712287] ion_heap_clear_pages+0x23/0x70 [ 1046.716645] ion_heap_sglist_zero+0x165/0x220 [ 1046.721245] ? ion_heap_clear_pages+0x70/0x70 [ 1046.725830] ? finish_task_switch+0x178/0x610 [ 1046.730345] ? ion_heap_deferred_free+0x222/0x470 [ 1046.735188] ion_system_heap_free+0x1d0/0x240 [ 1046.739675] ion_buffer_destroy+0x132/0x190 [ 1046.743995] ion_heap_deferred_free+0x22a/0x470 [ 1046.748655] ? __schedule+0x877/0x1de0 [ 1046.752530] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1046.757198] ? wait_woken+0x230/0x230 [ 1046.760992] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1046.766091] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1046.770758] kthread+0x30d/0x420 [ 1046.774111] ? kthread_create_on_node+0xd0/0xd0 [ 1046.778756] ret_from_fork+0x24/0x30 [ 1046.788705] Mem-Info: [ 1046.791184] active_anon:11752 inactive_anon:39246 isolated_anon:0 [ 1046.791184] active_file:12 inactive_file:12 isolated_file:0 [ 1046.791184] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1046.791184] slab_reclaimable:12091 slab_unreclaimable:108634 [ 1046.791184] mapped:52833 shmem:39695 pagetables:705 bounce:0 [ 1046.791184] free:25085 free_pcp:59 free_cma:0 [ 1046.828396] Node 0 active_anon:46224kB inactive_anon:105828kB active_file:12kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140928kB dirty:0kB writeback:0kB shmem:107368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1046.865434] Node 1 active_anon:784kB inactive_anon:51156kB active_file:36kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70404kB dirty:0kB writeback:0kB shmem:51412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1046.896891] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1046.927377] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1046.938781] Node 0 DMA32 free:35832kB min:36200kB low:45248kB high:54296kB active_anon:46224kB inactive_anon:105808kB active_file:0kB inactive_file:96kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2512kB bounce:0kB free_pcp:256kB local_pcp:144kB free_cma:0kB [ 1046.974287] lowmem_reserve[]: 0 0 0 0 0 [ 1046.978300] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1047.006068] lowmem_reserve[]: 0 0 0 0 0 [ 1047.016302] Node 1 Normal free:53436kB min:53696kB low:67120kB high:80544kB active_anon:784kB inactive_anon:51156kB active_file:36kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:308kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1047.050168] lowmem_reserve[]: 0 0 0 0 0 [ 1047.054168] Node 0 DMA: 6*4kB (UME) 32*8kB (UME) 32*16kB (UE) 23*32kB (UME) 7*64kB (UME) 11*128kB (UME) 6*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 11064kB [ 1047.072296] Node 0 DMA32: 1108*4kB (UMEH) 406*8kB (UME) 201*16kB (UME) 683*32kB (UME) 42*64kB (UM) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35824kB [ 1047.088894] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1047.106039] Node 1 Normal: 415*4kB (UM) 744*8kB (UM) 638*16kB (UM) 355*32kB (UM) 33*64kB (M) 13*128kB (M) 4*256kB (M) 38*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53436kB [ 1047.128908] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1047.137830] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1047.150625] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1047.160022] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1047.168592] 39719 total pagecache pages [ 1047.174685] 0 pages in swap cache [ 1047.178141] Swap cache stats: add 0, delete 0, find 0/0 [ 1047.183559] Free swap = 0kB [ 1047.186649] Total swap = 0kB [ 1047.191137] 2097051 pages RAM [ 1047.194236] 0 pages HighMem/MovableOnly [ 1047.198270] 363840 pages reserved [ 1047.207824] 0 pages cma reserved [ 1047.211653] Out of memory: Kill process 24435 (syz-executor.5) score 1004 or sacrifice child [ 1047.223499] Killed process 24440 (syz-executor.5) total-vm:93232kB, anon-rss:144kB, file-rss:34820kB, shmem-rss:0kB [ 1047.298555] oom_reaper: reaped process 24440 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1047.319758] kworker/u4:5 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1047.340674] kworker/u4:5 cpuset=/ mems_allowed=0-1 [ 1047.345632] CPU: 1 PID: 8388 Comm: kworker/u4:5 Not tainted 4.14.222-syzkaller #0 [ 1047.353242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1047.362597] Workqueue: events_unbound call_usermodehelper_exec_work [ 1047.369000] Call Trace: [ 1047.371586] dump_stack+0x1b2/0x281 [ 1047.375208] dump_header+0x178/0x82f [ 1047.378915] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1047.384006] ? ___ratelimit+0x2cd/0x530 [ 1047.387957] oom_kill_process.cold+0x10/0xb18 [ 1047.392442] ? lock_downgrade+0x740/0x740 [ 1047.396587] out_of_memory+0x2dc/0x1190 [ 1047.399588] syz-executor.5: page allocation failure: order:0 [ 1047.400555] ? oom_killer_disable+0x1c0/0x1c0 [ 1047.400564] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1047.406336] ? mutex_trylock+0x152/0x1a0 [ 1047.420623] (null) [ 1047.420759] __alloc_pages_nodemask+0x23e1/0x2720 [ 1047.424796] syz-executor.5 cpuset= [ 1047.426938] ? ____cache_alloc_node+0xf4/0x1d0 [ 1047.439844] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1047.440189] / [ 1047.444670] ? do_raw_spin_unlock+0x164/0x220 [ 1047.444680] ? _raw_spin_unlock+0x29/0x40 [ 1047.446374] mems_allowed=0-1 [ 1047.450844] ? ____cache_alloc_node+0xf4/0x1d0 [ 1047.450858] ? kmem_cache_alloc_node+0x38b/0x410 [ 1047.450869] copy_process.part.0+0x265/0x71c0 [ 1047.450880] ? __lock_acquire+0x5fc/0x3f20 [ 1047.450895] ? debug_object_activate+0x292/0x490 [ 1047.450903] ? trace_hardirqs_on+0x10/0x10 [ 1047.450910] ? static_obj+0x50/0x50 [ 1047.450923] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1047.450932] ? __cleanup_sighand+0x40/0x40 [ 1047.498357] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1047.503798] _do_fork+0x184/0xc80 [ 1047.507235] ? fork_idle+0x270/0x270 [ 1047.510941] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1047.516035] ? process_one_work+0x6c4/0x14a0 [ 1047.520429] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1047.525867] kernel_thread+0x2f/0x40 [ 1047.529568] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1047.534830] ? call_usermodehelper+0x80/0x80 [ 1047.539243] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1047.544680] process_one_work+0x793/0x14a0 [ 1047.548899] ? work_busy+0x320/0x320 [ 1047.552597] ? worker_thread+0x158/0xff0 [ 1047.556646] ? _raw_spin_unlock_irq+0x24/0x80 [ 1047.561130] worker_thread+0x5cc/0xff0 [ 1047.565011] ? rescuer_thread+0xc80/0xc80 [ 1047.569143] kthread+0x30d/0x420 [ 1047.572497] ? kthread_create_on_node+0xd0/0xd0 [ 1047.577154] ret_from_fork+0x24/0x30 [ 1047.583924] CPU: 0 PID: 24440 Comm: syz-executor.5 Not tainted 4.14.222-syzkaller #0 [ 1047.589187] kworker/dying (1792) used greatest stack depth: 24320 bytes left [ 1047.591813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1047.598996] Mem-Info: [ 1047.608326] Call Trace: [ 1047.608343] dump_stack+0x1b2/0x281 [ 1047.608355] warn_alloc.cold+0x96/0x1cc [ 1047.608367] ? zone_watermark_ok_safe+0x220/0x220 [ 1047.610778] active_anon:11713 inactive_anon:39245 isolated_anon:0 [ 1047.610778] active_file:23 inactive_file:1 isolated_file:0 [ 1047.610778] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1047.610778] slab_reclaimable:12083 slab_unreclaimable:108673 [ 1047.610778] mapped:52225 shmem:39695 pagetables:679 bounce:0 [ 1047.610778] free:13956 free_pcp:174 free_cma:0 [ 1047.613323] ? usleep_range+0x130/0x130 [ 1047.616929] Node 0 active_anon:46068kB inactive_anon:105824kB active_file:92kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138496kB dirty:0kB writeback:0kB shmem:107368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1047.620887] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1047.620899] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1047.620909] ? run_timer_softirq+0x5a0/0x5a0 [ 1047.625741] Node 1 active_anon:784kB inactive_anon:51156kB active_file:0kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70404kB dirty:0kB writeback:0kB shmem:51412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1047.658873] __alloc_pages_nodemask+0x2127/0x2720 [ 1047.658890] ? lock_acquire+0x170/0x3f0 [ 1047.662954] Node 0 [ 1047.690687] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1047.690701] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1047.695786] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1047.700861] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1047.700880] alloc_pages_current+0x155/0x260 [ 1047.705256] lowmem_reserve[]: [ 1047.732233] ion_page_pool_alloc+0x118/0x1b0 [ 1047.732243] ion_system_heap_allocate+0x133/0x8c0 [ 1047.732253] ? ion_alloc+0x187/0x810 [ 1047.737067] 0 [ 1047.741021] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1047.741031] ? ion_system_contig_heap_create+0x130/0x130 [ 1047.741042] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1047.743248] 2717 [ 1047.748071] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1047.748081] ion_alloc+0x204/0x810 [ 1047.748094] ? ion_dma_buf_release+0x40/0x40 [ 1047.748103] ? __might_fault+0x177/0x1b0 [ 1047.748114] ion_ioctl+0xea/0x1f0 [ 1047.748122] ? ion_query_heaps+0x360/0x360 [ 1047.748135] ? ion_query_heaps+0x360/0x360 [ 1047.752698] 2718 [ 1047.778281] do_vfs_ioctl+0x75a/0xff0 [ 1047.778294] ? ioctl_preallocate+0x1a0/0x1a0 [ 1047.783731] 2718 [ 1047.788111] ? lock_downgrade+0x740/0x740 [ 1047.791218] 2718 [ 1047.795599] ? __fget+0x225/0x360 [ 1047.804105] ? do_vfs_ioctl+0xff0/0xff0 [ 1047.805879] Node 0 [ 1047.811311] ? security_file_ioctl+0x83/0xb0 [ 1047.811320] SyS_ioctl+0x7f/0xb0 [ 1047.811329] ? do_vfs_ioctl+0xff0/0xff0 [ 1047.816766] DMA32 free:18084kB min:36200kB low:45248kB high:54296kB active_anon:46068kB inactive_anon:105804kB active_file:92kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2408kB bounce:0kB free_pcp:452kB local_pcp:132kB free_cma:0kB [ 1047.821750] do_syscall_64+0x1d5/0x640 [ 1047.821767] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1047.823802] lowmem_reserve[]: [ 1047.828624] RIP: 0033:0x465ef9 [ 1047.832147] 0 [ 1047.836519] RSP: 002b:00007f4207bea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1047.840571] 0 [ 1047.843994] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1047.848201] 0 [ 1047.852410] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1047.852416] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1047.852421] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1047.852425] R13: 00007ffc1ddb1d4f R14: 00007f4207bea300 R15: 0000000000022000 [ 1047.862904] warn_alloc_show_mem: 1 callbacks suppressed [ 1047.862907] Mem-Info: [ 1047.877322] 0 [ 1047.884125] active_anon:11713 inactive_anon:39245 isolated_anon:0 [ 1047.884125] active_file:23 inactive_file:1 isolated_file:0 [ 1047.884125] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1047.884125] slab_reclaimable:12083 slab_unreclaimable:108673 [ 1047.884125] mapped:52225 shmem:39695 pagetables:679 bounce:0 [ 1047.884125] free:13956 free_pcp:172 free_cma:0 [ 1047.887171] 0 [ 1047.888668] Node 0 active_anon:46068kB inactive_anon:105824kB active_file:92kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138496kB dirty:0kB writeback:0kB shmem:107368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1047.926408] Node 1 active_anon:784kB inactive_anon:51156kB active_file:0kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70404kB dirty:0kB writeback:0kB shmem:51412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1047.940597] Node 0 [ 1047.951569] Node 0 [ 1047.965670] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1047.978352] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1047.983517] lowmem_reserve[]: [ 1047.999510] lowmem_reserve[]: [ 1048.034050] 0 [ 1048.069740] 0 [ 1048.093560] 0 [ 1048.126183] 2717 [ 1048.147863] 0 0 0 [ 1048.158714] Node 1 Normal free:26776kB min:53696kB low:67120kB high:80544kB active_anon:784kB inactive_anon:51156kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:308kB bounce:0kB free_pcp:244kB local_pcp:120kB free_cma:0kB [ 1048.159975] 2718 [ 1048.193442] lowmem_reserve[]: 0 0 0 0 0 [ 1048.198649] 2718 [ 1048.199606] Node 0 DMA: 3*4kB (UME) 21*8kB (UME) 32*16kB (UE) 23*32kB (UME) 7*64kB (UME) 11*128kB (UME) 6*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 10964kB [ 1048.199673] Node 0 DMA32: 1107*4kB (UME) 407*8kB (UME) 200*16kB (ME) 129*32kB (UME) 42*64kB (UM) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18084kB [ 1048.199733] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1048.199772] Node 1 Normal: 36*4kB (UM) 23*8kB (UM) 7*16kB (UM) 65*32kB (UM) 33*64kB (M) 13*128kB (M) 4*256kB (M) 38*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26776kB [ 1048.199834] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1048.199840] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1048.199846] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1048.199851] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1048.199854] 39719 total pagecache pages [ 1048.199862] 0 pages in swap cache [ 1048.199866] Swap cache stats: add 0, delete 0, find 0/0 [ 1048.199869] Free swap = 0kB [ 1048.199872] Total swap = 0kB [ 1048.199878] 2097051 pages RAM [ 1048.199881] 0 pages HighMem/MovableOnly [ 1048.199884] 363840 pages reserved [ 1048.199887] 0 pages cma reserved [ 1048.199894] Out of memory: Kill process 24453 (syz-executor.3) score 1004 or sacrifice child [ 1048.199918] Killed process 24455 (syz-executor.3) total-vm:93232kB, anon-rss:144kB, file-rss:34820kB, shmem-rss:0kB [ 1048.257152] oom_reaper: reaped process 24455 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1048.304997] 2718 [ 1048.319537] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1048.324467] syz-executor.3: [ 1048.326133] (null), order=0, oom_score_adj=0 [ 1048.334769] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1048.334787] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1048.334808] CPU: 0 PID: 24455 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1048.334814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1048.334817] Call Trace: [ 1048.334836] dump_stack+0x1b2/0x281 [ 1048.334849] warn_alloc.cold+0x96/0x1cc [ 1048.334862] ? zone_watermark_ok_safe+0x220/0x220 [ 1048.357738] in:imklog cpuset= [ 1048.367044] ? usleep_range+0x130/0x130 [ 1048.367053] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1048.367065] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1048.367075] ? run_timer_softirq+0x5a0/0x5a0 [ 1048.367091] __alloc_pages_nodemask+0x2127/0x2720 [ 1048.370114] / [ 1048.374575] ? lock_acquire+0x170/0x3f0 [ 1048.384962] mems_allowed=0-1 [ 1048.390034] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1048.390047] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1048.466682] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1048.472120] alloc_pages_current+0x155/0x260 [ 1048.476515] ion_page_pool_alloc+0x118/0x1b0 [ 1048.480916] ion_system_heap_allocate+0x133/0x8c0 [ 1048.485737] ? ion_alloc+0x187/0x810 [ 1048.489431] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1048.494860] ? ion_system_contig_heap_create+0x130/0x130 [ 1048.500293] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1048.505290] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1048.510216] ion_alloc+0x204/0x810 [ 1048.513742] ? ion_dma_buf_release+0x40/0x40 [ 1048.518146] ? __might_fault+0x177/0x1b0 [ 1048.522209] ion_ioctl+0xea/0x1f0 [ 1048.525642] ? ion_query_heaps+0x360/0x360 [ 1048.529859] ? ion_query_heaps+0x360/0x360 [ 1048.534078] do_vfs_ioctl+0x75a/0xff0 [ 1048.537860] ? ioctl_preallocate+0x1a0/0x1a0 [ 1048.542365] ? lock_downgrade+0x740/0x740 [ 1048.546494] ? __fget+0x225/0x360 [ 1048.549927] ? do_vfs_ioctl+0xff0/0xff0 [ 1048.553896] ? security_file_ioctl+0x83/0xb0 [ 1048.558286] SyS_ioctl+0x7f/0xb0 [ 1048.561630] ? do_vfs_ioctl+0xff0/0xff0 [ 1048.565587] do_syscall_64+0x1d5/0x640 [ 1048.569461] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1048.574630] RIP: 0033:0x465ef9 [ 1048.577798] RSP: 002b:00007f21abfbc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1048.585485] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1048.592734] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1048.600003] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1048.607251] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1048.614510] R13: 00007ffe95e3d6ef R14: 00007f21abfbc300 R15: 0000000000022000 [ 1048.621772] CPU: 1 PID: 22956 Comm: in:imklog Not tainted 4.14.222-syzkaller #0 [ 1048.629235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1048.629239] Call Trace: [ 1048.629255] dump_stack+0x1b2/0x281 [ 1048.629266] dump_header+0x178/0x82f [ 1048.629276] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1048.629283] ? ___ratelimit+0x2cd/0x530 [ 1048.629296] oom_kill_process.cold+0x10/0xb18 [ 1048.638634] Node 0 [ 1048.641208] out_of_memory+0xe3e/0x1190 [ 1048.641220] ? oom_killer_disable+0x1c0/0x1c0 [ 1048.641227] ? mutex_trylock+0x152/0x1a0 [ 1048.641237] __alloc_pages_nodemask+0x23e1/0x2720 [ 1048.641258] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1048.646834] DMA32 free:18076kB min:36200kB low:45248kB high:54296kB active_anon:46068kB inactive_anon:105804kB active_file:16kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2408kB bounce:0kB free_pcp:516kB local_pcp:312kB free_cma:0kB [ 1048.648660] alloc_pages_current+0x155/0x260 [ 1048.653759] lowmem_reserve[]: [ 1048.657685] filemap_fault+0xea3/0x1980 [ 1048.663928] 0 [ 1048.664385] ext4_filemap_fault+0x84/0xb0 [ 1048.668320] 0 0 [ 1048.672802] __do_fault+0xfa/0x380 [ 1048.672810] __handle_mm_fault+0x2497/0x4620 [ 1048.672819] ? vm_insert_page+0x7c0/0x7c0 [ 1048.672829] ? lock_downgrade+0x740/0x740 [ 1048.672847] handle_mm_fault+0x391/0x860 [ 1048.676875] 0 [ 1048.681700] __do_page_fault+0x549/0xad0 [ 1048.681712] ? spurious_fault+0x640/0x640 [ 1048.681720] ? do_page_fault+0x60/0x500 [ 1048.681729] ? page_fault+0x2f/0x50 [ 1048.681736] page_fault+0x45/0x50 [ 1048.681742] RIP: 1fa0:0x1f9f [ 1048.681746] RSP: 0000:00005590796219d0 EFLAGS: 7fd224115da0 [ 1048.682146] net_ratelimit: 7 callbacks suppressed [ 1048.682150] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1048.698248] Mem-Info: [ 1048.717399] 0 [ 1048.731960] active_anon:11713 inactive_anon:39245 isolated_anon:0 [ 1048.731960] active_file:5 inactive_file:19 isolated_file:0 [ 1048.731960] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1048.731960] slab_reclaimable:12083 slab_unreclaimable:108691 [ 1048.731960] mapped:52225 shmem:39695 pagetables:679 bounce:0 [ 1048.731960] free:13954 free_pcp:189 free_cma:0 [ 1048.735022] Node 0 active_anon:46068kB inactive_anon:105824kB active_file:16kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138496kB dirty:0kB writeback:0kB shmem:107368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1048.738532] Node 0 [ 1048.755143] Node 1 active_anon:784kB inactive_anon:51156kB active_file:4kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70404kB dirty:0kB writeback:0kB shmem:51412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1048.757842] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1048.770119] Node 0 [ 1048.775297] lowmem_reserve[]: [ 1048.776945] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1048.779979] 0 0 0 0 0 [ 1048.779996] Node 1 Normal free:26776kB min:53696kB low:67120kB high:80544kB active_anon:784kB inactive_anon:51156kB active_file:4kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:308kB bounce:0kB free_pcp:244kB local_pcp:124kB free_cma:0kB [ 1048.780016] lowmem_reserve[]: 0 0 0 0 0 [ 1048.780035] Node 0 DMA: 3*4kB (UME) 21*8kB (UME) 32*16kB (UE) 23*32kB (UME) 7*64kB (UME) 11*128kB [ 1048.795627] lowmem_reserve[]: [ 1048.798364] (UME) [ 1048.805387] 0 [ 1048.835451] 6*256kB [ 1048.876198] 2717 [ 1048.897123] (UME) [ 1048.927555] 2718 [ 1048.952677] 4*512kB [ 1048.986697] 2718 [ 1049.004209] (UME) [ 1049.008830] 2718 [ 1049.013210] 2*1024kB [ 1049.016235] (ME) [ 1049.018281] Node 0 [ 1049.026647] Mem-Info: [ 1049.028610] 1*2048kB [ 1049.028896] active_anon:11690 inactive_anon:39245 isolated_anon:0 [ 1049.028896] active_file:13 inactive_file:11 isolated_file:0 [ 1049.028896] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1049.028896] slab_reclaimable:12080 slab_unreclaimable:108704 [ 1049.028896] mapped:52225 shmem:39695 pagetables:679 bounce:0 [ 1049.028896] free:13950 free_pcp:192 free_cma:0 [ 1049.034718] (U) [ 1049.074998] DMA32 free:18060kB min:36200kB low:45248kB high:54296kB active_anon:45976kB inactive_anon:105804kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2408kB bounce:0kB free_pcp:524kB local_pcp:220kB free_cma:0kB [ 1049.075001] lowmem_reserve[]: 0 0 0 0 0 [ 1049.075020] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1049.075035] lowmem_reserve[]: [ 1049.077238] 0*4096kB [ 1049.112388] 0 [ 1049.137309] = 10964kB [ 1049.145248] Node 0 DMA32: 1107*4kB (UME) 408*8kB (UMEH) 201*16kB (MEH) 128*32kB (UME) 42*64kB (UM) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18076kB [ 1049.150705] Node 0 active_anon:45976kB inactive_anon:105824kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138496kB dirty:0kB writeback:0kB shmem:107368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1049.162903] Node 0 [ 1049.190727] 0 0 0 0 [ 1049.195293] Node 1 Normal free:26776kB min:53696kB low:67120kB high:80544kB active_anon:784kB inactive_anon:51156kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:308kB bounce:0kB free_pcp:244kB local_pcp:120kB free_cma:0kB [ 1049.201076] Normal: [ 1049.229923] Node 1 active_anon:784kB inactive_anon:51156kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70404kB dirty:0kB writeback:0kB shmem:51412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1049.233321] 0*4kB [ 1049.270138] lowmem_reserve[]: [ 1049.270560] 0*8kB [ 1049.272341] 0 [ 1049.275432] 0*16kB [ 1049.277559] 0 0 0 0 [ 1049.286787] 0*32kB [ 1049.287864] Node 0 [ 1049.287867] 0*64kB 0*128kB [ 1049.291897] DMA: [ 1049.294514] 0*256kB [ 1049.295281] 3*4kB [ 1049.297325] 0*512kB [ 1049.303168] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1049.310635] 0*1024kB [ 1049.342540] (UME) [ 1049.343738] 0*2048kB [ 1049.344988] 21*8kB [ 1049.347120] 0*4096kB = 0kB [ 1049.352550] (UME) 32*16kB (UE) 23*32kB (UME) 7*64kB (UME) 11*128kB (UME) 6*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 10964kB [ 1049.357536] Node 1 [ 1049.374245] lowmem_reserve[]: 0 2717 2718 2718 [ 1049.376588] Normal: 36*4kB (UM) 23*8kB (UM) 7*16kB (UM) 65*32kB (UM) 33*64kB (M) 13*128kB (M) 4*256kB (M) 38*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26776kB [ 1049.381774] Node 0 [ 1049.401734] 2718 [ 1049.405281] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1049.406033] Node 0 [ 1049.423111] DMA32: 1107*4kB (UME) 406*8kB (UME) 200*16kB (ME) 128*32kB (UME) 42*64kB (UM) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18044kB [ 1049.426957] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1049.448036] DMA32 free:18060kB min:36200kB low:45248kB high:54296kB active_anon:45976kB inactive_anon:105804kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2408kB bounce:0kB free_pcp:488kB local_pcp:200kB free_cma:0kB [ 1049.455608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1049.483656] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1049.493751] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1049.504390] Node 1 Normal: 36*4kB (UM) 23*8kB (UM) 7*16kB (UM) 65*32kB (UM) 33*64kB (M) 13*128kB (M) 4*256kB (M) 38*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26776kB [ 1049.506559] 39719 total pagecache pages [ 1049.526932] lowmem_reserve[]: 0 0 0 0 0 [ 1049.530969] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1049.532653] 0 pages in swap cache [ 1049.564088] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1049.570128] Swap cache stats: add 0, delete 0, find 0/0 [ 1049.574726] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1049.578287] Free swap = 0kB [ 1049.592482] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1049.599192] Total swap = 0kB [ 1049.604346] 2097051 pages RAM [ 1049.605838] lowmem_reserve[]: [ 1049.607435] 0 pages HighMem/MovableOnly [ 1049.607441] 363840 pages reserved [ 1049.612868] 0 0 0 0 0 [ 1049.623489] 0 pages cma reserved [ 1049.625481] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1049.636328] Node 1 Normal free:61592kB min:53696kB low:67120kB high:80544kB active_anon:784kB inactive_anon:51156kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:308kB bounce:0kB free_pcp:244kB local_pcp:120kB free_cma:0kB [ 1049.658932] 39719 total pagecache pages [ 1049.669388] lowmem_reserve[]: 0 0 0 0 0 [ 1049.674255] Node 0 DMA: 2*4kB (ME) 21*8kB (UME) 33*16kB (UME) 21*32kB (UE) 7*64kB (UME) 10*128kB (UE) 6*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 11296kB [ 1049.694499] 0 pages in swap cache [ 1049.698779] Node 0 DMA32: 1107*4kB (UME) 406*8kB (UME) 200*16kB (ME) 128*32kB (UME) 42*64kB (UM) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18044kB [ 1049.719165] Swap cache stats: add 0, delete 0, find 0/0 [ 1049.721721] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1049.736079] Free swap = 0kB [ 1049.740711] Node 1 Normal: 0*4kB 0*8kB 0*16kB 59*32kB (UM) 8*64kB (M) 13*128kB (M) 4*256kB (M) 38*512kB (U) 222*1024kB (U) 0*2048kB 0*4096kB = 251872kB [ 1049.745928] Total swap = 0kB [ 1049.758194] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1049.770822] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1049.782942] 2097051 pages RAM [ 1049.786089] 0 pages HighMem/MovableOnly [ 1049.791092] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1049.803417] 363840 pages reserved [ 1049.806920] 0 pages cma reserved [ 1049.814413] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1049.825888] Out of memory (oom_kill_allocating_task): Kill process 22956 (in:imklog) score 0 or sacrifice child [ 1049.838674] 40977 total pagecache pages [ 1049.845733] Killed process 22945 (rsyslogd) total-vm:254332kB, anon-rss:1316kB, file-rss:0kB, shmem-rss:0kB [ 1049.857948] 0 pages in swap cache [ 1049.865031] Swap cache stats: add 0, delete 0, find 0/0 [ 1049.872154] Free swap = 0kB [ 1049.875205] Total swap = 0kB [ 1049.878227] 2097051 pages RAM [ 1049.885393] oom_reaper: reaped process 22945 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1049.902617] 0 pages HighMem/MovableOnly [ 1049.906611] 363840 pages reserved [ 1049.911360] 0 pages cma reserved [ 1050.054279] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1050.079601] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1050.102858] systemd[1]: rsyslog.service: Unit entered failed state. [ 1050.122183] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1050.141086] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1050.161388] systemd[1]: Stopped Journal Service. [ 1050.186160] systemd[1]: Starting Journal Service... [ 1050.337647] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1050.364740] systemd[1]: Stopped System Logging Service. [ 1050.388187] systemd-journald[24461]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1050.397171] systemd[1]: Starting System Logging Service... 01:29:35 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:29:35 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:29:35 executing program 4 (fault-call:0 fault-nth:0): memfd_create(0x0, 0xa) 01:29:35 executing program 5 (fault-call:7 fault-nth:0): openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) 01:29:35 executing program 0: socket$l2tp(0x2, 0x2, 0x73) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x400040, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', r1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) getpeername$l2tp(r0, 0x0, 0x0) 01:29:35 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @remote, 0x3}, 0x10) getpeername$l2tp(r0, 0x0, 0x0) 01:29:35 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:29:35 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:29:35 executing program 4: memfd_create(0x0, 0xa) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x0, {0x1, 0xfff, "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", 0xff, 0xe8, 0x2, 0x9, 0x0, 0xc1, 0x1f}}}, 0x128) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) memfd_create(&(0x7f0000000000)='\x00', 0x5) 01:29:35 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @remote, 0x3}, 0x10) 01:29:35 executing program 0 (fault-call:1 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) 01:29:35 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) [ 1051.124525] FAULT_INJECTION: forcing a failure. [ 1051.124525] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.152870] CPU: 1 PID: 24496 Comm: syz-executor.0 Not tainted 4.14.222-syzkaller #0 [ 1051.160792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1051.170160] Call Trace: [ 1051.172760] dump_stack+0x1b2/0x281 [ 1051.176419] should_fail.cold+0x10a/0x149 [ 1051.180593] should_failslab+0xd6/0x130 [ 1051.184585] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1051.189261] ion_alloc+0x187/0x810 [ 1051.192808] ? ion_dma_buf_release+0x40/0x40 [ 1051.197228] ? __might_fault+0x177/0x1b0 [ 1051.201295] ion_ioctl+0xea/0x1f0 [ 1051.204755] ? ion_query_heaps+0x360/0x360 [ 1051.208985] ? SyS_write+0x1b7/0x210 [ 1051.212703] ? ion_query_heaps+0x360/0x360 [ 1051.216945] do_vfs_ioctl+0x75a/0xff0 [ 1051.220749] ? ioctl_preallocate+0x1a0/0x1a0 [ 1051.225159] ? lock_downgrade+0x740/0x740 [ 1051.229321] ? __fget+0x225/0x360 [ 1051.232774] ? do_vfs_ioctl+0xff0/0xff0 [ 1051.236746] ? security_file_ioctl+0x83/0xb0 [ 1051.241152] SyS_ioctl+0x7f/0xb0 [ 1051.244515] ? do_vfs_ioctl+0xff0/0xff0 [ 1051.248484] do_syscall_64+0x1d5/0x640 [ 1051.252381] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1051.257572] RIP: 0033:0x465ef9 [ 1051.260765] RSP: 002b:00007fec42cb1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1051.268467] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1051.275735] RDX: 0000000020000240 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1051.283003] RBP: 00007fec42cb11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1051.290309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1051.297577] R13: 00007ffff684407f R14: 00007fec42cb1300 R15: 0000000000022000 01:29:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:29:36 executing program 4: memfd_create(0x0, 0xa) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)={'wg0', 0x32, 0x32}, 0x6) 01:29:36 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:29:36 executing program 2: connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote, 0x3}, 0x10) 01:29:36 executing program 0 (fault-call:1 fault-nth:1): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) 01:29:36 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x1e4b7c738f1ccdee, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3602ac98}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4040040) 01:29:36 executing program 2: connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote, 0x3}, 0x10) 01:29:36 executing program 4: memfd_create(0x0, 0x2) socketpair(0x23, 0x2, 0x1, &(0x7f0000000000)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r0, 0x1, r1, 0x100, 0x1a206507655dda3b}) [ 1052.081353] FAULT_INJECTION: forcing a failure. [ 1052.081353] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1052.121259] CPU: 1 PID: 24515 Comm: syz-executor.0 Not tainted 4.14.222-syzkaller #0 [ 1052.129179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1052.138748] Call Trace: [ 1052.141343] dump_stack+0x1b2/0x281 [ 1052.144982] should_fail.cold+0x10a/0x149 [ 1052.149138] __alloc_pages_nodemask+0x22c/0x2720 [ 1052.153906] ? lock_acquire+0x170/0x3f0 [ 1052.157887] ? ion_page_pool_alloc+0x28/0x1b0 [ 1052.162396] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1052.167243] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1052.171747] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1052.177207] ? __mutex_unlock_slowpath+0x75/0x770 [ 1052.182063] alloc_pages_current+0x155/0x260 [ 1052.186491] ion_page_pool_alloc+0x118/0x1b0 [ 1052.190918] ion_system_heap_allocate+0x133/0x8c0 [ 1052.195776] ? ion_alloc+0x187/0x810 [ 1052.199503] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1052.204960] ? ion_system_contig_heap_create+0x130/0x130 [ 1052.210413] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1052.215432] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1052.220290] ion_alloc+0x204/0x810 [ 1052.223882] ? ion_dma_buf_release+0x40/0x40 [ 1052.228292] ? __might_fault+0x177/0x1b0 01:29:36 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = gettid() ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x4], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000300)={0x34, 0x0, &(0x7f00000002c0)}) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x13, &(0x7f0000000080)='/dev/btrfs-control\x00'}, 0x30) socketpair(0xb, 0x2, 0xfffffffc, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r5, 0x401}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4044800) [ 1052.232367] ion_ioctl+0xea/0x1f0 [ 1052.235826] ? ion_query_heaps+0x360/0x360 [ 1052.240058] ? SyS_write+0x1b7/0x210 [ 1052.243773] ? ion_query_heaps+0x360/0x360 [ 1052.248008] do_vfs_ioctl+0x75a/0xff0 [ 1052.251817] ? ioctl_preallocate+0x1a0/0x1a0 [ 1052.256317] ? lock_downgrade+0x740/0x740 [ 1052.260471] ? __fget+0x225/0x360 [ 1052.263932] ? do_vfs_ioctl+0xff0/0xff0 [ 1052.267906] ? security_file_ioctl+0x83/0xb0 [ 1052.272313] SyS_ioctl+0x7f/0xb0 [ 1052.275679] ? do_vfs_ioctl+0xff0/0xff0 [ 1052.279659] do_syscall_64+0x1d5/0x640 [ 1052.283555] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1052.288740] RIP: 0033:0x465ef9 [ 1052.291927] RSP: 002b:00007fec42cb1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1052.299634] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1052.306903] RDX: 0000000020000240 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1052.314167] RBP: 00007fec42cb11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1052.321435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 01:29:36 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:29:36 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1405, 0x200, 0x70bd29, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000021400082dbd7000fbdbdf25080001000100000011538d549aed0600a3fb06b1591bcb6cf5c39bf8b083ffce05f8a75e3151132e22e53a991f7ebb26c9694fc34d9465785d7c901ed39e3cff69957acd36e7bcbead39a0798ce7076b79907e2293a1b31c6811d2226ba79e7e0ff3d7263a6610547bb4fd858decd563d508b06b9a1300c84c77590527ba8449f027bf51c23aa0e6c80a1b017066f285e9f48d2d191d2bc37d83b994b1c87b5fdf"], 0x18}, 0x1, 0x0, 0x0, 0x24008841}, 0x40000) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {&(0x7f00000001c0), 0x2, {0xa, 0x4e23, 0xffffffe0, @mcast1, 0x8}, r3}}, 0x38) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r2) 01:29:36 executing program 2: connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote, 0x3}, 0x10) [ 1052.328704] R13: 00007ffff684407f R14: 00007fec42cb1300 R15: 0000000000022000 01:29:37 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:29:37 executing program 4: memfd_create(0x0, 0xa) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), &(0x7f0000000040)=0x4) 01:29:37 executing program 2: socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote, 0x3}, 0x10) 01:29:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:29:37 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x3c3100, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x86000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) 01:29:37 executing program 0 (fault-call:1 fault-nth:2): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) 01:29:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) [ 1053.291479] FAULT_INJECTION: forcing a failure. [ 1053.291479] name failslab, interval 1, probability 0, space 0, times 0 01:29:37 executing program 2: socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote, 0x3}, 0x10) [ 1053.331808] CPU: 1 PID: 24563 Comm: syz-executor.0 Not tainted 4.14.222-syzkaller #0 [ 1053.339729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1053.349084] Call Trace: [ 1053.351680] dump_stack+0x1b2/0x281 [ 1053.355332] should_fail.cold+0x10a/0x149 [ 1053.359501] should_failslab+0xd6/0x130 [ 1053.363489] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1053.368178] ion_system_heap_allocate+0x344/0x8c0 [ 1053.373029] ? ion_alloc+0x187/0x810 [ 1053.376745] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1053.382199] ? ion_system_contig_heap_create+0x130/0x130 [ 1053.387658] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1053.392684] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1053.397532] ion_alloc+0x204/0x810 [ 1053.401080] ? ion_dma_buf_release+0x40/0x40 [ 1053.405502] ? __might_fault+0x177/0x1b0 [ 1053.409572] ion_ioctl+0xea/0x1f0 [ 1053.413060] ? ion_query_heaps+0x360/0x360 [ 1053.417299] ? SyS_write+0x1b7/0x210 [ 1053.421027] ? ion_query_heaps+0x360/0x360 [ 1053.425283] do_vfs_ioctl+0x75a/0xff0 [ 1053.429098] ? ioctl_preallocate+0x1a0/0x1a0 [ 1053.433513] ? lock_downgrade+0x740/0x740 [ 1053.437674] ? __fget+0x225/0x360 [ 1053.441130] ? do_vfs_ioctl+0xff0/0xff0 [ 1053.445115] ? security_file_ioctl+0x83/0xb0 [ 1053.449524] SyS_ioctl+0x7f/0xb0 [ 1053.452894] ? do_vfs_ioctl+0xff0/0xff0 [ 1053.456878] do_syscall_64+0x1d5/0x640 [ 1053.460777] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1053.465964] RIP: 0033:0x465ef9 [ 1053.469154] RSP: 002b:00007fec42cb1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 01:29:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:29:37 executing program 4: memfd_create(0x0, 0xa) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x1403, 0x200, 0x70bd2b, 0x25dfdc02, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040805) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000240)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002e0000000a0001007770000000000000"], 0x20}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x101}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1040}, 0x12) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20000044) [ 1053.476859] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1053.484128] RDX: 0000000020000240 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1053.491399] RBP: 00007fec42cb11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1053.498669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1053.505944] R13: 00007ffff684407f R14: 00007fec42cb1300 R15: 0000000000022000 01:29:37 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x2) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) 01:29:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:29:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:29:38 executing program 2: socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote, 0x3}, 0x10) 01:29:38 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:29:38 executing program 4: memfd_create(0x0, 0xa) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000)=0x60, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x70, @fixed={[], 0x12}, 0x2}, 0xe) 01:29:38 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="b00000000314080026bd7000fddbdf250900020073797a3100000000080041007369770014003300766574683000000000000000000000000900020073797a30000000000800410072786500140033006970766c616e310000000000f60000000900020073797a31000000000800410072786500140033007866726d3000000000000000000000000900020073797a310000000008004100727865001400330073797a6b616c6c657230000000000000"], 0xb0}, 0x1, 0x0, 0x0, 0xc1}, 0x8011) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r2) 01:29:40 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x2e903, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) 01:29:40 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, 0x0, 0x0) 01:29:40 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:29:40 executing program 4: memfd_create(0x0, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x2}, 0x14}}, 0x20000000) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x200, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 01:29:40 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0x4, 0x401, 0x6, 0x798bcf21, 0x8, 0x8000, 0x3, 0xfe1}, &(0x7f0000000080)={0x700000000000, 0xfffffffeffffffff, 0x0, 0x8, 0x3, 0x7fffffff, 0x2, 0xda}, &(0x7f00000000c0)={0x1, 0x7f, 0x3ff, 0x1000, 0x8, 0xfffffffffffffffe, 0x1, 0x4}, &(0x7f00000001c0)={r0, r1+60000000}, &(0x7f0000000240)={&(0x7f0000000200)={[0xd920]}, 0x8}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = syz_open_dev$mouse(&(0x7f0000000640)='/dev/input/mouse#\x00', 0x6282c2f9, 0x202) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x1406, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r5) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000003c40)={'syztnl2\x00', &(0x7f0000003b00)={'syztnl0\x00', 0x0, 0x1, 0x8000, 0x1, 0x3, {{0x3a, 0x4, 0x0, 0x4, 0xe8, 0x67, 0x0, 0x9, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xf, 0x97, [@private=0xa010101, @rand_addr=0x64010101, @local]}, @cipso={0x86, 0x54, 0x0, [{0x5, 0x12, "23cd69e1d3851a573715f76284628d13"}, {0x2, 0x6, "22e22146"}, {0x1, 0x8, "faafd21ca0c9"}, {0x2, 0x7, "f8753ce88b"}, {0x6, 0x10, "3b31b34a4cece36c5b413445b064"}, {0x2, 0xc, "ede31525f4169368fdc1"}, {0x5, 0xb, "f4b68583e26554b504"}]}, @lsrr={0x83, 0x7, 0xee, [@rand_addr=0x64010101]}, @lsrr={0x83, 0xb, 0xbc, [@loopback, @private=0xa010101]}, @lsrr={0x83, 0x1b, 0xb6, [@broadcast, @initdev={0xac, 0x1e, 0x7f, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback]}, @end, @end, @cipso={0x86, 0x2e, 0x3, [{0x7, 0x11, "8fc4dc758e4aaff7605cc341b9c4bd"}, {0x5, 0xc, "b65667bccbc73433ef23"}, {0x5, 0x7, "94db5a9d07"}, {0x0, 0x4, "fee4"}]}, @generic={0x44, 0x12, "97c603e299c5204171f6c53126d017ce"}]}}}}}) sendmsg$nl_route(r5, &(0x7f0000003d00)={&(0x7f0000000380), 0xc, &(0x7f0000003cc0)={&(0x7f0000003c80)=@getstats={0x1c, 0x5e, 0x2, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x5}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004080}, 0x400c800) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r4) 01:29:40 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:29:40 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, 0x0, 0x0) 01:29:40 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x38, 0x48040) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r2) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x6, 0x8, 0x1}) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) 01:29:40 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:29:40 executing program 4: memfd_create(0x0, 0xa) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x5b26ccbf, 0x1) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={[], 0x5ab9, 0x40, 0x3, 0x0, 0xc98, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x1402, 0x100, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000240)={@fixed={[], 0x10}, 0x3ff, 0x40, 0x4}) 01:29:40 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, 0x0, 0x0) 01:29:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x20000000) 01:29:40 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 01:29:40 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 01:29:40 executing program 4: memfd_create(0x0, 0xa) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000000)="e34cce203822e3cf1ec8eaa84fd9b0d97967618e19851514c5da44ee0a34533afa3c1d27e4601fa25762682ae9bc81d972a2d10514602d89b5848f3526771d8839124ac6d612d29774ed88976e281a0200027ec05e1f4e2638f388fb7b224a97fb11e031c5e635a8450302762a566352571bcba61ad6c0da4c143c") 01:29:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x20000000) 01:29:40 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r3, 0x401}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0xc020}, 0xc084) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) 01:29:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x20000000) 01:29:40 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xa5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_hsr\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) 01:29:40 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x6, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) 01:29:40 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:29:40 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:29:40 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000340)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0='bpq0\x00', 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000100)=[0x7, 0x6, 0x7fffffff], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34e3ccc91a4873dac72c72d44f02fde8f2b41826c98d197a2f71f485e9733578a04b47000000000000006ad23a31e5fda46b7fd3cb84a36b2944599e7ae1496c938ffe108d2e6a7d9c4a10354ebf5f17", @ANYRES16=r2, @ANYBLOB="10002dbd7000fedbdf250400000005002900010000000800310000000080"], 0x24}, 0x1, 0x0, 0x0, 0xc4004}, 0x4) connect$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4, [@default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default]}, 0x40) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x208480) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 01:29:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:29:40 executing program 4: memfd_create(0x0, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4046}, 0x4041095) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x2}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xa}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x19}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xf}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xdf}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x95}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}]}, 0x64}, 0x1, 0x0, 0x0, 0x40004}, 0x1) 01:29:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:29:40 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1409, 0x4, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40088c0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) 01:29:40 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x7, 0x14000, 0x2, 0x90, 0xffffffffffffffff, 0x7, [], 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x19, 0x7, 0x2, 0x0, 0x5, r2, 0x2, [], 0x0, r0, 0x5, 0x5, 0x4}, 0x40) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', r1) 01:29:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:29:40 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x49}) 01:29:40 executing program 4: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012de36e00fdc6df250400000005002e000100000008000300", @ANYRES32=r0, @ANYBLOB="08002b0003000000050035007f00000005003800010000000500380001000000080031000200000008000600", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x2090}, 0x20000040) memfd_create(0x0, 0xa) [ 1056.673217] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1056.694617] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1056.700843] CPU: 1 PID: 24694 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1056.708739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1056.718103] Call Trace: [ 1056.720699] dump_stack+0x1b2/0x281 [ 1056.724338] warn_alloc.cold+0x96/0x1cc [ 1056.728327] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1056.733362] ? zone_watermark_ok_safe+0x220/0x220 [ 1056.738228] __alloc_pages_nodemask+0x2127/0x2720 [ 1056.743075] ? _raw_spin_unlock_irq+0x24/0x80 [ 1056.747594] ? lock_acquire+0x170/0x3f0 [ 1056.751588] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1056.756437] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1056.761897] ? __mutex_unlock_slowpath+0x75/0x770 [ 1056.766756] alloc_pages_current+0x155/0x260 [ 1056.771171] ion_page_pool_alloc+0x118/0x1b0 [ 1056.775588] ion_system_heap_allocate+0x133/0x8c0 [ 1056.780435] ? ion_alloc+0x187/0x810 [ 1056.784149] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1056.789612] ? ion_system_contig_heap_create+0x130/0x130 [ 1056.795073] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1056.800095] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1056.804949] ion_alloc+0x204/0x810 [ 1056.808505] ? ion_dma_buf_release+0x40/0x40 [ 1056.812915] ? __might_fault+0x177/0x1b0 [ 1056.816983] ion_ioctl+0xea/0x1f0 [ 1056.820449] ? ion_query_heaps+0x360/0x360 [ 1056.824703] ? ion_query_heaps+0x360/0x360 [ 1056.828946] do_vfs_ioctl+0x75a/0xff0 [ 1056.832753] ? ioctl_preallocate+0x1a0/0x1a0 [ 1056.837342] ? lock_downgrade+0x740/0x740 [ 1056.841501] ? __fget+0x225/0x360 [ 1056.844971] ? do_vfs_ioctl+0xff0/0xff0 [ 1056.848955] ? security_file_ioctl+0x83/0xb0 [ 1056.853365] SyS_ioctl+0x7f/0xb0 [ 1056.856738] ? do_vfs_ioctl+0xff0/0xff0 [ 1056.860729] do_syscall_64+0x1d5/0x640 [ 1056.864631] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1056.869823] RIP: 0033:0x465ef9 [ 1056.873014] RSP: 002b:00007fca24dbc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1056.880726] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1056.889759] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1056.897049] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1056.904323] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1056.911601] R13: 00007ffeaa280ccf R14: 00007fca24dbc300 R15: 0000000000022000 [ 1056.944788] Mem-Info: [ 1056.947347] active_anon:11984 inactive_anon:41279 isolated_anon:0 [ 1056.947347] active_file:3013 inactive_file:3019 isolated_file:11 [ 1056.947347] unevictable:0 dirty:66 writeback:0 unstable:0 [ 1056.947347] slab_reclaimable:12437 slab_unreclaimable:117637 [ 1056.947347] mapped:57484 shmem:41743 pagetables:707 bounce:0 [ 1056.947347] free:217012 free_pcp:75 free_cma:0 [ 1056.986035] Node 0 active_anon:47368kB inactive_anon:113960kB active_file:12032kB inactive_file:12076kB unevictable:0kB isolated(anon):0kB isolated(file):44kB mapped:159532kB dirty:244kB writeback:0kB shmem:115560kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1057.023227] Node 1 active_anon:568kB inactive_anon:51156kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70404kB dirty:20kB writeback:0kB shmem:51412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1057.069803] Node 0 DMA free:11136kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:776kB inactive_file:0kB unevictable:0kB writepending:20kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1057.100811] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1057.105928] Node 0 DMA32 free:767728kB min:36200kB low:45248kB high:54296kB active_anon:47408kB inactive_anon:113888kB active_file:11284kB inactive_file:12016kB unevictable:0kB writepending:232kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2536kB bounce:0kB free_pcp:300kB local_pcp:300kB free_cma:0kB [ 1057.140425] lowmem_reserve[]: 0 0 0 0 0 [ 1057.144590] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1057.174616] lowmem_reserve[]: 0 0 0 0 0 [ 1057.179505] Node 1 Normal free:269200kB min:53696kB low:67120kB high:80544kB active_anon:568kB inactive_anon:51156kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:284kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1057.213009] lowmem_reserve[]: 0 0 0 0 0 [ 1057.217087] Node 0 DMA: 18*4kB (UME) 31*8kB (UME) 34*16kB (UME) 23*32kB (UME) 1*64kB (E) 2*128kB (ME) 2*256kB (UE) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (U) 0*4096kB = 11136kB [ 1057.238027] Node 0 DMA32: 8460*4kB (UEH) 9343*8kB (UEH) 15562*16kB (UEH) 9551*32kB (UEH) 6*64kB (H) 4*128kB (H) 1*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 664360kB [ 1057.263212] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1057.292015] Node 1 Normal: 402*4kB (UM) 725*8kB (UM) 614*16kB (UM) 342*32kB (UM) 45*64kB (UM) 780*128kB (UM) 6*256kB (UM) 1*512kB (U) 0*1024kB 36*2048kB (U) 10*4096kB (U) = 247632kB [ 1057.334271] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1057.354184] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1057.375205] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 01:29:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:29:41 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:29:41 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000040)={@none, 0x40, 0x58a6, 0x800}) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) 01:29:41 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) [ 1057.400474] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1057.418972] 47598 total pagecache pages [ 1057.427469] 0 pages in swap cache [ 1057.459278] Swap cache stats: add 0, delete 0, find 0/0 [ 1057.472838] Free swap = 0kB [ 1057.490257] Total swap = 0kB [ 1057.505409] 2097051 pages RAM [ 1057.513282] 0 pages HighMem/MovableOnly [ 1057.530538] 363840 pages reserved [ 1057.543479] 0 pages cma reserved 01:29:44 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:29:44 executing program 4: memfd_create(0x0, 0xa) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="880000000314000328bd7000fbdbdf250900020073797a30000000000800410073697700140033006970365f76896930000000000000000900020073797a300000000008004100736977001400264e0933382503330076657468305f746f5f626174616476000900020073797a320000000008004100727865001400330077673100000000000000000000000000f0bea67e604e3644b7bab66bc7d5e6c3ad467eec2cef3c11cf93346a6e41b6a8917b21133672a9eca3c954ab5f7d223efba67bae516b8b715a8ba449afaeb59b888c7d38d75cc9c78bf3316bab5598749e15abe5bd"], 0x88}, 0x1, 0x0, 0x0, 0x40801}, 0x4040001) 01:29:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:29:44 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={0x0, 0x1, 0x6}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x15}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) 01:29:44 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', r0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40a00, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) 01:29:44 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:29:44 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty, 0x2}, 0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) 01:29:44 executing program 4: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="00545929300e5f7a0543b3507f35f2e406d87d49c6eccb57759941c0d707c2eed4c5eccdbd007ddf4ccc8d03e881b3fd99a69f94b189b8ec3cd536fcd8d2ba5f3693c5da558ea5ae2692438d5c75b13012e0b67e14c91adb45ff5e29393c857703", @ANYRES16=0x0, @ANYBLOB="200025bd7000ffdbdf25110000000a000900ffffffffffff00000600280003000000050038000100000005002f004100000008003b0001040000"], 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x20008804) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="50000000f2d47532c81cf7f9a2e467", @ANYRES16=0x0, @ANYBLOB="08002bbd7000fddbdf2512000000080032004600000008000b00ca01000006002800010000000a000900ffffffffffff000008000300", @ANYRES32=0x0, @ANYBLOB="08003900050000000500290000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4c840}, 0x40011) memfd_create(0x0, 0x8) 01:29:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:29:44 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x1001, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x7, 0x2, 0x9, 0x8, 0x33, 0x10000, 0x2], 0x7, 0x800, 0x0, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x44c080, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) 01:29:44 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)=0xfffffbff) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) 01:29:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) [ 1060.566102] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1060.592358] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1060.604664] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1060.607615] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1060.614918] CPU: 0 PID: 24750 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1060.622876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1060.632217] Call Trace: [ 1060.634833] dump_stack+0x1b2/0x281 [ 1060.638460] warn_alloc.cold+0x96/0x1cc [ 1060.642446] ? zone_watermark_ok_safe+0x220/0x220 [ 1060.647287] __alloc_pages_nodemask+0x2127/0x2720 [ 1060.652130] ? lock_acquire+0x170/0x3f0 [ 1060.656100] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1060.660941] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1060.666485] ? __mutex_unlock_slowpath+0x75/0x770 [ 1060.671321] alloc_pages_current+0x155/0x260 [ 1060.675727] ion_page_pool_alloc+0x118/0x1b0 [ 1060.680145] ion_system_heap_allocate+0x133/0x8c0 [ 1060.684986] ? ion_alloc+0x187/0x810 [ 1060.688691] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1060.694133] ? ion_system_contig_heap_create+0x130/0x130 [ 1060.699583] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1060.704600] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1060.709438] ion_alloc+0x204/0x810 [ 1060.712974] ? ion_dma_buf_release+0x40/0x40 [ 1060.717383] ? __might_fault+0x177/0x1b0 [ 1060.721440] ion_ioctl+0xea/0x1f0 [ 1060.724882] ? ion_query_heaps+0x360/0x360 [ 1060.729105] ? ion_query_heaps+0x360/0x360 [ 1060.733325] do_vfs_ioctl+0x75a/0xff0 [ 1060.737124] ? ioctl_preallocate+0x1a0/0x1a0 [ 1060.741524] ? lock_downgrade+0x740/0x740 [ 1060.745671] ? __fget+0x225/0x360 [ 1060.749117] ? do_vfs_ioctl+0xff0/0xff0 [ 1060.753084] ? security_file_ioctl+0x83/0xb0 [ 1060.757830] SyS_ioctl+0x7f/0xb0 [ 1060.761210] ? do_vfs_ioctl+0xff0/0xff0 [ 1060.765177] do_syscall_64+0x1d5/0x640 [ 1060.769060] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1060.774243] RIP: 0033:0x465ef9 [ 1060.777420] RSP: 002b:00007fca24dbc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1060.785115] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1060.792377] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1060.799633] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1060.806893] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1060.814157] R13: 00007ffeaa280ccf R14: 00007fca24dbc300 R15: 0000000000022000 [ 1060.822569] Mem-Info: [ 1060.825001] active_anon:11990 inactive_anon:41277 isolated_anon:24 [ 1060.825001] active_file:1789 inactive_file:1757 isolated_file:0 [ 1060.825001] unevictable:0 dirty:28 writeback:25 unstable:0 [ 1060.825001] slab_reclaimable:12514 slab_unreclaimable:118665 [ 1060.825001] mapped:55745 shmem:41743 pagetables:705 bounce:0 [ 1060.825001] free:102451 free_pcp:185 free_cma:0 [ 1060.833945] CPU: 1 PID: 24748 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1060.859121] Node 0 active_anon:47408kB inactive_anon:113948kB active_file:7136kB inactive_file:7028kB unevictable:0kB isolated(anon):96kB isolated(file):0kB mapped:152576kB dirty:92kB writeback:100kB shmem:115556kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1060.866809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1060.895325] Node 1 active_anon:552kB inactive_anon:51160kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70404kB dirty:20kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1060.904572] Call Trace: [ 1060.904592] dump_stack+0x1b2/0x281 [ 1060.904607] warn_alloc.cold+0x96/0x1cc [ 1060.931788] Node 0 [ 1060.934244] ? zone_watermark_ok_safe+0x220/0x220 [ 1060.937874] DMA free:11168kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:668kB inactive_file:116kB unevictable:0kB writepending:20kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1060.941805] __alloc_pages_nodemask+0x2127/0x2720 [ 1060.944001] lowmem_reserve[]: [ 1060.948834] ? __schedule+0x893/0x1de0 [ 1060.948851] ? lock_acquire+0x170/0x3f0 [ 1060.948865] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1060.948880] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1060.948891] ? __mutex_unlock_slowpath+0x75/0x770 [ 1060.948904] alloc_pages_current+0x155/0x260 [ 1060.948918] ion_page_pool_alloc+0x118/0x1b0 [ 1060.948928] ion_system_heap_allocate+0x133/0x8c0 [ 1060.948938] ? ion_alloc+0x187/0x810 [ 1060.948950] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1061.017841] 0 [ 1061.019390] ? ion_system_contig_heap_create+0x130/0x130 [ 1061.023078] 2717 [ 1061.028511] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1061.028522] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1061.028533] ion_alloc+0x204/0x810 [ 1061.028547] ? ion_dma_buf_release+0x40/0x40 [ 1061.028557] ? __might_fault+0x177/0x1b0 [ 1061.028568] ion_ioctl+0xea/0x1f0 [ 1061.028577] ? ion_query_heaps+0x360/0x360 [ 1061.028592] ? ion_query_heaps+0x360/0x360 [ 1061.047605] 2718 [ 1061.047696] do_vfs_ioctl+0x75a/0xff0 [ 1061.051213] 2718 [ 1061.055605] ? ioctl_preallocate+0x1a0/0x1a0 [ 1061.067595] 2718 [ 1061.071517] ? lock_downgrade+0x740/0x740 [ 1061.077342] ? __fget+0x225/0x360 [ 1061.093381] ? do_vfs_ioctl+0xff0/0xff0 [ 1061.097357] ? security_file_ioctl+0x83/0xb0 [ 1061.098167] Node 0 DMA32 free:467404kB min:36200kB low:45248kB high:54296kB active_anon:47488kB inactive_anon:113928kB active_file:6676kB inactive_file:7020kB unevictable:0kB writepending:108kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2612kB bounce:0kB free_pcp:1380kB local_pcp:696kB free_cma:0kB [ 1061.101768] SyS_ioctl+0x7f/0xb0 [ 1061.101778] ? do_vfs_ioctl+0xff0/0xff0 [ 1061.138785] do_syscall_64+0x1d5/0x640 [ 1061.142682] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1061.147868] RIP: 0033:0x465ef9 [ 1061.151052] RSP: 002b:00007f21abfbc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1061.158757] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1061.166636] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1061.167572] lowmem_reserve[]: [ 1061.173895] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1061.173902] 0 [ 1061.176982] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1061.193282] R13: 00007ffe95e3d6ef R14: 00007f21abfbc300 R15: 0000000000022000 [ 1061.197519] 0 0 0 0 [ 1061.218783] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1061.279975] lowmem_reserve[]: 0 0 0 0 0 [ 1061.284022] Node 1 Normal free:53784kB min:53696kB low:67120kB high:80544kB active_anon:552kB inactive_anon:51160kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:284kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1061.348715] lowmem_reserve[]: 0 0 0 0 0 [ 1061.357168] Node 0 DMA: 14*4kB (UME) 23*8kB (UME) 35*16kB (UME) 23*32kB (UME) 19*64kB (UE) 2*128kB (ME) 2*256kB (UE) 3*512kB (UE) 2*1024kB (ME) 2*2048kB (U) 0*4096kB = 11200kB [ 1061.389693] Node 0 DMA32: 21*4kB (EH) 213*8kB (MEH) 12380*16kB (UMEH) 8146*32kB (UEH) 39*64kB (UMH) 5*128kB (UH) 1*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 463932kB [ 1061.427476] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1061.447786] Node 1 Normal: 401*4kB (UM) 725*8kB (UM) 615*16kB (UM) 343*32kB (UM) 448*64kB (UM) 279*128kB (UM) 319*256kB (UM) 20*512kB (U) 36*1024kB (U) 0*2048kB 0*4096kB = 221372kB [ 1061.477505] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1061.486411] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1061.507458] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1061.516347] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1061.547492] 45261 total pagecache pages [ 1061.551500] 0 pages in swap cache [ 1061.555074] Swap cache stats: add 0, delete 0, find 0/0 [ 1061.560797] Free swap = 0kB [ 1061.563825] Total swap = 0kB [ 1061.566843] 2097051 pages RAM [ 1061.570244] 0 pages HighMem/MovableOnly [ 1061.574217] 363840 pages reserved [ 1061.577964] 0 pages cma reserved 01:29:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:29:48 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:29:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:29:48 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x40a002, 0x0) 01:29:48 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) connect$rose(r0, &(0x7f0000000300)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x480800, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000000f142508000100636d0000000000000000000000b93826dcc3950afd68e54f2269257fef71748d493d"], 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x8800) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r2) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = accept4$bt_l2cap(r1, 0x0, &(0x7f0000000100), 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0xc) 01:29:48 executing program 4: memfd_create(0x0, 0xa) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) 01:29:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:29:48 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) 01:29:48 executing program 4: write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x10}, 0x18) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) memfd_create(0x0, 0xa) 01:29:48 executing program 0: r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x18a85a28, 0x2000) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) 01:29:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:29:48 executing program 4: memfd_create(0x0, 0xa) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)='net_prio.ifpriomap\x00', 0x2, 0x0) [ 1064.409930] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1064.423149] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1064.428939] CPU: 1 PID: 24791 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1064.436822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1064.446170] Call Trace: [ 1064.448745] dump_stack+0x1b2/0x281 [ 1064.452354] warn_alloc.cold+0x96/0x1cc [ 1064.456309] ? zone_watermark_ok_safe+0x220/0x220 [ 1064.461139] __alloc_pages_nodemask+0x2127/0x2720 [ 1064.465962] ? lock_acquire+0x170/0x3f0 [ 1064.469966] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1064.475224] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1064.480659] ? __mutex_unlock_slowpath+0x75/0x770 [ 1064.485478] ? __sanitizer_cov_trace_pc+0x41/0x50 [ 1064.490301] alloc_pages_current+0x155/0x260 [ 1064.494690] ion_page_pool_alloc+0x118/0x1b0 [ 1064.499076] ion_system_heap_allocate+0x133/0x8c0 [ 1064.503900] ? ion_alloc+0x187/0x810 [ 1064.507591] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1064.513019] ? ion_system_contig_heap_create+0x130/0x130 [ 1064.518447] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1064.523457] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1064.528282] ion_alloc+0x204/0x810 [ 1064.531808] ? ion_dma_buf_release+0x40/0x40 [ 1064.536216] ? __might_fault+0x177/0x1b0 [ 1064.540258] ion_ioctl+0xea/0x1f0 [ 1064.543689] ? ion_query_heaps+0x360/0x360 [ 1064.547904] ? ion_query_heaps+0x360/0x360 [ 1064.552116] do_vfs_ioctl+0x75a/0xff0 [ 1064.555897] ? ioctl_preallocate+0x1a0/0x1a0 [ 1064.560285] ? lock_downgrade+0x740/0x740 [ 1064.564414] ? __fget+0x225/0x360 [ 1064.567849] ? do_vfs_ioctl+0xff0/0xff0 [ 1064.571803] ? security_file_ioctl+0x83/0xb0 [ 1064.576192] SyS_ioctl+0x7f/0xb0 [ 1064.579535] ? do_vfs_ioctl+0xff0/0xff0 [ 1064.583489] do_syscall_64+0x1d5/0x640 [ 1064.587361] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1064.592527] RIP: 0033:0x465ef9 [ 1064.595695] RSP: 002b:00007f21abfbc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1064.603379] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1064.610627] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1064.617873] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1064.625120] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1064.632901] R13: 00007ffe95e3d6ef R14: 00007f21abfbc300 R15: 0000000000022000 [ 1064.675932] warn_alloc_show_mem: 1 callbacks suppressed [ 1064.675936] Mem-Info: [ 1064.686589] active_anon:12031 inactive_anon:41277 isolated_anon:0 [ 1064.686589] active_file:779 inactive_file:1157 isolated_file:0 [ 1064.686589] unevictable:0 dirty:46 writeback:0 unstable:0 [ 1064.686589] slab_reclaimable:12593 slab_unreclaimable:118744 [ 1064.686589] mapped:53890 shmem:41743 pagetables:720 bounce:0 [ 1064.686589] free:36253 free_pcp:147 free_cma:0 [ 1064.721303] Node 0 active_anon:47096kB inactive_anon:113944kB active_file:152kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140216kB dirty:88kB writeback:0kB shmem:115552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1064.750347] Node 1 active_anon:1028kB inactive_anon:51164kB active_file:2964kB inactive_file:4748kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:75944kB dirty:96kB writeback:0kB shmem:51420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1064.778496] Node 0 DMA free:11080kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1064.806006] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1064.811684] Node 0 DMA32 free:38228kB min:36200kB low:45248kB high:54296kB active_anon:47096kB inactive_anon:113924kB active_file:424kB inactive_file:508kB unevictable:0kB writepending:88kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2328kB bounce:0kB free_pcp:660kB local_pcp:248kB free_cma:0kB [ 1064.841643] lowmem_reserve[]: 0 0 0 0 0 [ 1064.846178] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1064.906184] lowmem_reserve[]: 0 0 0 0 0 [ 1064.914744] Node 1 Normal free:216484kB min:53696kB low:67120kB high:80544kB active_anon:1028kB inactive_anon:51164kB active_file:2992kB inactive_file:4796kB unevictable:0kB writepending:96kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:552kB bounce:0kB free_pcp:80kB local_pcp:68kB free_cma:0kB [ 1064.948532] lowmem_reserve[]: 0 0 0 0 0 [ 1064.953779] Node 0 DMA: 5*4kB (UME) 5*8kB (UME) 5*16kB (UME) 4*32kB (UME) 5*64kB (UME) 2*128kB (ME) 4*256kB (UE) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (U) 0*4096kB = 11084kB [ 1064.994413] Node 0 DMA32: 1144*4kB (UMEH) 916*8kB (UMEH) 2847*16kB (UMEH) 235*32kB (UMEH) 4*64kB (H) 3*128kB (H) 1*256kB (H) 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 66384kB [ 1065.014107] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1065.026193] Node 1 Normal: 11*4kB (UM) 1*8kB (U) 1*16kB (U) 1*32kB (U) 2*64kB (UM) 1*128kB (U) 1*256kB (U) 22*512kB (UM) 16*1024kB (UM) 13*2048kB (UM) 2*4096kB (U) = 63076kB [ 1065.042305] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1065.057096] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1065.062229] CPU: 1 PID: 24790 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1065.067101] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1065.070095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1065.070099] Call Trace: [ 1065.070115] dump_stack+0x1b2/0x281 [ 1065.070128] warn_alloc.cold+0x96/0x1cc [ 1065.090942] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1065.094476] ? zone_watermark_ok_safe+0x220/0x220 [ 1065.094497] __alloc_pages_nodemask+0x2127/0x2720 [ 1065.106169] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1065.107027] ? _raw_spin_unlock_irq+0x24/0x80 [ 1065.107045] ? lock_acquire+0x170/0x3f0 [ 1065.118460] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1065.125517] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1065.125534] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1065.140931] 43788 total pagecache pages [ 1065.142523] ? __mutex_unlock_slowpath+0x75/0x770 [ 1065.142538] alloc_pages_current+0x155/0x260 [ 1065.155017] 0 pages in swap cache [ 1065.156758] ion_page_pool_alloc+0x118/0x1b0 [ 1065.156770] ion_system_heap_allocate+0x133/0x8c0 [ 1065.168255] Swap cache stats: add 0, delete 0, find 0/0 [ 1065.169432] ? ion_alloc+0x187/0x810 [ 1065.169443] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1065.169455] ? ion_system_contig_heap_create+0x130/0x130 [ 1065.175001] Free swap = 0kB [ 1065.178675] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1065.178688] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1065.178698] ion_alloc+0x204/0x810 [ 1065.178712] ? ion_dma_buf_release+0x40/0x40 [ 1065.178724] ? __might_fault+0x177/0x1b0 [ 1065.187524] Total swap = 0kB [ 1065.187886] ion_ioctl+0xea/0x1f0 [ 1065.199920] 2097051 pages RAM [ 1065.201763] ? ion_query_heaps+0x360/0x360 [ 1065.201784] ? ion_query_heaps+0x360/0x360 [ 1065.209010] 0 pages HighMem/MovableOnly [ 1065.211600] do_vfs_ioctl+0x75a/0xff0 [ 1065.211616] ? ioctl_preallocate+0x1a0/0x1a0 [ 1065.217339] 363840 pages reserved [ 1065.219522] ? lock_downgrade+0x740/0x740 [ 1065.219539] ? __fget+0x225/0x360 [ 1065.225809] 0 pages cma reserved [ 1065.226586] ? do_vfs_ioctl+0xff0/0xff0 [ 1065.272014] ? security_file_ioctl+0x83/0xb0 [ 1065.276426] SyS_ioctl+0x7f/0xb0 [ 1065.279787] ? do_vfs_ioctl+0xff0/0xff0 [ 1065.283759] do_syscall_64+0x1d5/0x640 [ 1065.287651] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1065.292834] RIP: 0033:0x465ef9 [ 1065.296013] RSP: 002b:00007fca24dbc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1065.303716] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1065.310978] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1065.318244] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1065.326120] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1065.333560] R13: 00007ffeaa280ccf R14: 00007fca24dbc300 R15: 0000000000022000 [ 1066.446950] oom_reaper: reaped process 24790 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1066.543565] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1066.565544] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1066.570746] CPU: 0 PID: 23042 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1066.578617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1066.587955] Call Trace: [ 1066.590539] dump_stack+0x1b2/0x281 [ 1066.594154] dump_header+0x178/0x82f [ 1066.597872] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1066.602961] ? ___ratelimit+0x2cd/0x530 [ 1066.607006] oom_kill_process.cold+0x10/0xb18 [ 1066.611510] out_of_memory+0xe3e/0x1190 [ 1066.615476] ? oom_killer_disable+0x1c0/0x1c0 [ 1066.619949] ? mutex_trylock+0x152/0x1a0 [ 1066.623987] __alloc_pages_nodemask+0x23e1/0x2720 [ 1066.628826] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1066.633679] alloc_pages_current+0x155/0x260 [ 1066.638074] filemap_fault+0xea3/0x1980 [ 1066.642039] ext4_filemap_fault+0x84/0xb0 [ 1066.646167] __do_fault+0xfa/0x380 [ 1066.649692] __handle_mm_fault+0x2497/0x4620 [ 1066.654100] ? vm_insert_page+0x7c0/0x7c0 [ 1066.658243] ? nanosleep_copyout+0x100/0x100 [ 1066.662634] handle_mm_fault+0x391/0x860 [ 1066.666674] __do_page_fault+0x549/0xad0 [ 1066.670734] ? spurious_fault+0x640/0x640 [ 1066.674881] ? do_page_fault+0x60/0x500 [ 1066.678849] ? page_fault+0x2f/0x50 [ 1066.682460] page_fault+0x45/0x50 [ 1066.686259] RIP: 103f32:0x4 [ 1066.689169] RSP: 0015:00007ffe95e3d9ac EFLAGS: 00000032 [ 1066.698121] Mem-Info: [ 1066.705977] active_anon:11972 inactive_anon:41277 isolated_anon:0 [ 1066.705977] active_file:6 inactive_file:17 isolated_file:0 [ 1066.705977] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1066.705977] slab_reclaimable:12598 slab_unreclaimable:118768 [ 1066.705977] mapped:52640 shmem:41743 pagetables:705 bounce:0 [ 1066.705977] free:20136 free_pcp:406 free_cma:0 [ 1066.745197] Node 0 active_anon:46992kB inactive_anon:113936kB active_file:8kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140156kB dirty:0kB writeback:0kB shmem:115544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1066.775387] Node 1 active_anon:896kB inactive_anon:51172kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70404kB dirty:0kB writeback:0kB shmem:51428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1066.803971] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1066.830250] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1066.835275] Node 0 DMA32 free:17956kB min:36200kB low:45248kB high:54296kB active_anon:46992kB inactive_anon:113916kB active_file:0kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2328kB bounce:0kB free_pcp:392kB local_pcp:272kB free_cma:0kB [ 1066.864247] lowmem_reserve[]: 0 0 0 0 0 [ 1066.868281] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1066.894067] lowmem_reserve[]: 0 0 0 0 0 [ 1066.904492] Node 1 Normal free:51612kB min:53696kB low:67120kB high:80544kB active_anon:896kB inactive_anon:51172kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:492kB bounce:0kB free_pcp:1232kB local_pcp:552kB free_cma:0kB [ 1066.935984] lowmem_reserve[]: 0 0 0 0 0 [ 1066.945984] Node 0 DMA: 2*4kB (ME) 3*8kB (UME) 2*16kB (UE) 3*32kB (UME) 3*64kB (UME) 3*128kB (UME) 4*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (U) 0*4096kB = 10976kB [ 1066.966481] Node 0 DMA32: 447*4kB (ME) 281*8kB (UME) 144*16kB (ME) 13*32kB (UME) 1*64kB (U) 77*128kB (U) 3*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17956kB [ 1066.985675] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1066.996409] Node 1 Normal: 101*4kB (M) 65*8kB (M) 48*16kB (UM) 28*32kB (M) 38*64kB (M) 10*128kB (M) 3*256kB (UM) 1*512kB (M) 9*1024kB (UM) 13*2048kB (UM) 2*4096kB (U) = 51612kB [ 1067.014596] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1067.023468] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1067.032128] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1067.040982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1067.049578] 41766 total pagecache pages [ 1067.053585] 0 pages in swap cache [ 1067.057045] Swap cache stats: add 0, delete 0, find 0/0 [ 1067.062392] Free swap = 0kB [ 1067.065394] Total swap = 0kB [ 1067.068467] 2097051 pages RAM [ 1067.071562] 0 pages HighMem/MovableOnly [ 1067.075515] 363840 pages reserved [ 1067.079032] 0 pages cma reserved [ 1067.082388] Out of memory (oom_kill_allocating_task): Kill process 23042 (syz-executor.3) score 0 or sacrifice child [ 1067.093435] Killed process 24791 (syz-executor.3) total-vm:93232kB, anon-rss:148kB, file-rss:34820kB, shmem-rss:0kB [ 1067.136661] oom_reaper: reaped process 24791 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1067.161816] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 1067.178910] ion_system_heap cpuset=/ mems_allowed=0-1 [ 1067.185494] CPU: 1 PID: 4243 Comm: ion_system_heap Not tainted 4.14.222-syzkaller #0 [ 1067.193388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1067.202916] Call Trace: [ 1067.205509] dump_stack+0x1b2/0x281 [ 1067.209138] dump_header+0x178/0x82f [ 1067.213034] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1067.218135] ? ___ratelimit+0x2cd/0x530 [ 1067.222110] oom_kill_process.cold+0x10/0xb18 [ 1067.226608] ? lock_downgrade+0x740/0x740 [ 1067.230764] out_of_memory+0x2dc/0x1190 [ 1067.234749] ? oom_killer_disable+0x1c0/0x1c0 [ 1067.239242] ? mutex_trylock+0x152/0x1a0 [ 1067.243306] __alloc_pages_nodemask+0x23e1/0x2720 [ 1067.248345] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1067.253205] ? kmem_cache_alloc_node_trace+0x153/0x400 [ 1067.258495] ? cache_grow_begin+0x41/0x630 [ 1067.262729] cache_grow_begin+0x91/0x630 [ 1067.266787] ? cache_grow_begin+0x91/0x630 [ 1067.271027] fallback_alloc+0x207/0x2c0 [ 1067.275004] kmem_cache_alloc_node_trace+0xed/0x400 [ 1067.280032] alloc_vmap_area+0xf0/0x7c0 [ 1067.284013] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1067.289459] ? purge_vmap_area_lazy+0xb0/0xb0 [ 1067.293944] ? __get_vm_area_node+0xed/0x340 [ 1067.298346] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1067.303617] __get_vm_area_node+0x126/0x340 [ 1067.307932] vmap+0xd5/0x290 [ 1067.310950] ? ion_heap_clear_pages+0x23/0x70 [ 1067.315435] ? vunmap+0x50/0x50 [ 1067.318704] ? __vunmap+0x21c/0x300 [ 1067.322325] ion_heap_clear_pages+0x23/0x70 [ 1067.326642] ion_heap_sglist_zero+0x165/0x220 [ 1067.331133] ? ion_heap_clear_pages+0x70/0x70 [ 1067.335655] ? finish_task_switch+0x178/0x610 [ 1067.340158] ? ion_heap_deferred_free+0x222/0x470 [ 1067.344997] ion_system_heap_free+0x1d0/0x240 [ 1067.349493] ion_buffer_destroy+0x132/0x190 [ 1067.353809] ion_heap_deferred_free+0x22a/0x470 [ 1067.358473] ? __schedule+0x877/0x1de0 [ 1067.362355] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1067.367021] ? wait_woken+0x230/0x230 [ 1067.370814] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1067.375910] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1067.380572] kthread+0x30d/0x420 [ 1067.383932] ? kthread_create_on_node+0xd0/0xd0 [ 1067.388594] ret_from_fork+0x24/0x30 [ 1067.405875] Mem-Info: [ 1067.411786] active_anon:11972 inactive_anon:41277 isolated_anon:0 [ 1067.411786] active_file:12 inactive_file:1286 isolated_file:0 [ 1067.411786] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1067.411786] slab_reclaimable:12598 slab_unreclaimable:118768 [ 1067.411786] mapped:53365 shmem:41743 pagetables:668 bounce:0 [ 1067.411786] free:308558 free_pcp:217 free_cma:0 [ 1067.453200] Node 0 active_anon:46992kB inactive_anon:113936kB active_file:24kB inactive_file:4724kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143356kB dirty:0kB writeback:0kB shmem:115544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1067.492325] Node 1 active_anon:896kB inactive_anon:51172kB active_file:24kB inactive_file:1220kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:71304kB dirty:0kB writeback:0kB shmem:51428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1067.526470] Node 0 DMA free:11936kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1067.558629] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1067.564341] Node 0 DMA32 free:211300kB min:36200kB low:45248kB high:54296kB active_anon:46992kB inactive_anon:113916kB active_file:24kB inactive_file:6424kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2328kB bounce:0kB free_pcp:976kB local_pcp:232kB free_cma:0kB [ 1067.599190] lowmem_reserve[]: 0 0 0 0 0 [ 1067.603995] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1067.635010] lowmem_reserve[]: 0 0 0 0 0 01:29:52 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x8, 0x42}) 01:29:52 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xed22}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) [ 1067.640677] Node 1 Normal free:1448360kB min:53696kB low:67120kB high:80544kB active_anon:896kB inactive_anon:51172kB active_file:24kB inactive_file:1220kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:344kB bounce:0kB free_pcp:776kB local_pcp:88kB free_cma:0kB [ 1067.676192] lowmem_reserve[]: 0 0 0 0 0 [ 1067.696443] Node 0 DMA: 62*4kB (UME) 3*8kB (UME) 2*16kB (UE) 3*32kB (UME) 4*64kB (UME) 8*128kB (UME) 5*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (U) 0*4096kB = 12176kB [ 1067.718071] Node 0 DMA32: 1402*4kB (UE) 1361*8kB (UME) 3417*16kB (UME) 2796*32kB (UE) 3099*64kB (UME) 330*128kB (UME) 66*256kB (UM) 6*512kB (UM) 20*1024kB (U) 0*2048kB 0*4096kB = 441664kB [ 1067.740438] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1067.764669] Node 1 Normal: 1626*4kB (UM) 1532*8kB (UM) 1196*16kB (UM) 1005*32kB (UM) 9440*64kB (UM) 816*128kB (UM) 328*256kB (UM) 163*512kB (UM) 365*1024kB (UM) 88*2048kB (UM) 7*4096kB (U) = 1528744kB [ 1067.796269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1067.832502] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1067.850781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1067.870523] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1067.883209] 44948 total pagecache pages [ 1067.893672] 0 pages in swap cache [ 1067.898271] Swap cache stats: add 0, delete 0, find 0/0 [ 1067.904426] Free swap = 0kB [ 1067.914780] Total swap = 0kB [ 1067.924775] 2097051 pages RAM [ 1067.934087] 0 pages HighMem/MovableOnly [ 1067.946480] 363840 pages reserved [ 1067.956339] 0 pages cma reserved [ 1067.961568] Out of memory: Kill process 7966 (syz-fuzzer) score 5 or sacrifice child [ 1068.022282] Killed process 23005 (syz-executor.3) total-vm:84904kB, anon-rss:64kB, file-rss:4kB, shmem-rss:0kB 01:29:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:29:53 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:29:53 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) 01:29:53 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:29:53 executing program 4: memfd_create(0x0, 0x0) 01:29:53 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x1000, 0x9], 0x2, 0xc0000, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f00000000c0)={r2}) 01:29:53 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x1a1640, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x800, 0x400) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, 0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f00000000c0)={'syz_tun\x00'}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r2) 01:29:53 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r2, 0x401}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3f}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000001}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfff}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_RECV_TIMEOUT={0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x200000c0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) memfd_create(0x0, 0xa) 01:29:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, r1, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:29:53 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, 0x0, 0x0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x81}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x41}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x20}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x88, r1, 0x30c, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x40005) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r4) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1402, 0x100, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x7, 0x1f, 0x9, 0x80800}) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r5) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000200)={0x0, "e83a20"}, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x40, 0x8000, 0x7, 0xffffffc5, {{0x3e, 0x4, 0x1, 0x9, 0xf8, 0x64, 0x0, 0x0, 0x4, 0x0, @loopback, @empty, {[@end, @rr={0x7, 0x23, 0x1d, [@empty, @remote, @local, @dev={0xac, 0x14, 0x14, 0x28}, @remote, @loopback, @multicast2, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x14, 0x98, 0x1, 0xf, [{@multicast2, 0x6ad}, {@multicast2, 0x80005}]}, @ssrr={0x89, 0xb, 0x4d, [@multicast1, @local]}, @rr={0x7, 0xf, 0x15, [@multicast1, @multicast1, @multicast2]}, @timestamp={0x44, 0xc, 0xe8, 0x0, 0x1, [0xf7, 0x40]}, @cipso={0x86, 0x24, 0x0, [{0x7, 0xd, "742cb3a31d83edd68bc2c0"}, {0x5, 0x11, "5d329fca2a335dd3ac55bfd170de51"}]}, @timestamp_prespec={0x44, 0x54, 0xea, 0x3, 0x9, [{@local, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x5}, {@remote, 0x3}, {@local, 0x800}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x3ff}, {@empty, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ed83}, {@multicast2, 0x1}, {@local, 0xeff}]}, @ssrr={0x89, 0xb, 0xe6, [@multicast1, @remote]}]}}}}}) bind$rose(r5, &(0x7f0000000380)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) 01:29:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, r1, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:29:53 executing program 4: memfd_create(0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000040)=0x7, 0x8) memfd_create(&(0x7f0000000000)='$\x00', 0x4) [ 1069.199666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1069.206453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1069.218303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1069.225042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1069.233374] device bridge_slave_1 left promiscuous mode [ 1069.239402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.247719] device bridge_slave_0 left promiscuous mode [ 1069.253233] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.263716] device veth1_macvtap left promiscuous mode [ 1069.269929] device veth0_macvtap left promiscuous mode [ 1069.275275] device veth1_vlan left promiscuous mode [ 1069.281599] device veth0_vlan left promiscuous mode [ 1069.386313] device hsr_slave_1 left promiscuous mode [ 1069.397007] device hsr_slave_0 left promiscuous mode [ 1069.416064] team0 (unregistering): Port device team_slave_1 removed [ 1069.426185] team0 (unregistering): Port device team_slave_0 removed [ 1069.437851] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1069.449372] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1069.488354] bond0 (unregistering): Released all slaves [ 1071.180732] IPVS: ftp: loaded support on port[0] = 21 [ 1071.366129] chnl_net:caif_netlink_parms(): no params data found [ 1071.455069] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.461990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.470096] device bridge_slave_0 entered promiscuous mode [ 1071.478264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.484699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.492846] device bridge_slave_1 entered promiscuous mode [ 1071.522512] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1071.535655] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1071.573104] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1071.581159] team0: Port device team_slave_0 added [ 1071.587662] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1071.596875] team0: Port device team_slave_1 added [ 1071.619484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1071.625768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1071.655596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1071.667954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1071.674213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1071.704597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1071.720969] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1071.728766] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1071.768382] device hsr_slave_0 entered promiscuous mode [ 1071.774189] device hsr_slave_1 entered promiscuous mode [ 1071.784720] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1071.792385] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1071.903922] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.910350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.917045] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.923615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.979469] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1071.986359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.995476] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1072.006880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1072.014420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.021344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.032770] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1072.039362] 8021q: adding VLAN 0 to HW filter on device team0 [ 1072.049195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1072.057385] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.063758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1072.088925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1072.097655] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.104038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1072.111902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1072.120122] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1072.127954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1072.139338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1072.150479] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1072.156584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1072.163796] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1072.171174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1072.184337] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1072.194450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1072.201499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1072.212473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1072.296635] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1072.312115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1072.320700] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1072.360366] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1072.368814] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1072.375422] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1072.385147] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1072.392448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1072.400557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1072.408751] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1072.415634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1072.424340] device veth0_vlan entered promiscuous mode [ 1072.433894] device veth1_vlan entered promiscuous mode [ 1072.440489] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1072.450231] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1072.462323] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1072.471794] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1072.479300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1072.487301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1072.494409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1072.502422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1072.512492] device veth0_macvtap entered promiscuous mode [ 1072.519112] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1072.527686] device veth1_macvtap entered promiscuous mode [ 1072.533710] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1072.542561] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1072.552994] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1072.561845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1072.571622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.580909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1072.590667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.599845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1072.609596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.618803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1072.628566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.637768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1072.647570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.657749] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1072.664696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1072.672712] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1072.680511] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1072.688710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1072.696586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1072.705206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1072.715132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.724369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1072.734522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.744383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1072.754212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.763412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1072.773631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.782955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1072.792698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.802818] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1072.809843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1072.817024] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1072.825550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 01:29:57 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:29:57 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x1c1380, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) 01:29:57 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x3, 0x42}) 01:29:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, r1, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:29:57 executing program 4: memfd_create(0x0, 0xa) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 01:29:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, 0x0, 0x0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x81}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x41}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x20}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x88, r1, 0x30c, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x40005) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r4) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1402, 0x100, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x7, 0x1f, 0x9, 0x80800}) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r5) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000200)={0x0, "e83a20"}, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x40, 0x8000, 0x7, 0xffffffc5, {{0x3e, 0x4, 0x1, 0x9, 0xf8, 0x64, 0x0, 0x0, 0x4, 0x0, @loopback, @empty, {[@end, @rr={0x7, 0x23, 0x1d, [@empty, @remote, @local, @dev={0xac, 0x14, 0x14, 0x28}, @remote, @loopback, @multicast2, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x14, 0x98, 0x1, 0xf, [{@multicast2, 0x6ad}, {@multicast2, 0x80005}]}, @ssrr={0x89, 0xb, 0x4d, [@multicast1, @local]}, @rr={0x7, 0xf, 0x15, [@multicast1, @multicast1, @multicast2]}, @timestamp={0x44, 0xc, 0xe8, 0x0, 0x1, [0xf7, 0x40]}, @cipso={0x86, 0x24, 0x0, [{0x7, 0xd, "742cb3a31d83edd68bc2c0"}, {0x5, 0x11, "5d329fca2a335dd3ac55bfd170de51"}]}, @timestamp_prespec={0x44, 0x54, 0xea, 0x3, 0x9, [{@local, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x5}, {@remote, 0x3}, {@local, 0x800}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x3ff}, {@empty, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ed83}, {@multicast2, 0x1}, {@local, 0xeff}]}, @ssrr={0x89, 0xb, 0xe6, [@multicast1, @remote]}]}}}}}) bind$rose(r5, &(0x7f0000000380)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) 01:29:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, r1, 0x1, 0x0, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:29:57 executing program 4: r0 = memfd_create(0x0, 0xa) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r2, 0x1, r0, 0x1f}) 01:29:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:29:57 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) socket$bt_cmtp(0x1f, 0x3, 0x5) 01:29:57 executing program 4: syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001080)={r0, &(0x7f0000000040)="052b1d6bef1ef30327ab98cfb40d5921714b38fd3b8a5929136dcc62525bdd0bebe4fd02928f736b1702b5b020136df2432d2dbc0d2b6293df651fc28292737b557619a35d48453c2b05ed04c6b5418400287f3b2da0753f062f7c4a8f2001bc17dffd542d66f5c6e27ff17b4418f06cbd586777d7d869efb54551f78e1e01f2660aa1031abb03eca4941e59afd480dca05649dc432403152c7ee6c49561c2feaf145ad9ee8956a22964d011a4b8b93f9b02a3950db7473130824a40d36e283a255cc4b683b15009f94d04f0709967a8b37428adb396e9b4ce6930d495ad539b8b578bb3aeb2f209e363a1d569e2494950781f319b0a63c1045f6a435fd066413b0c474b7af548bbc10a9705f265eb49a3576bc9544050a3c819fbdc79ba3ea51e469ced73090c6be6b8a0e99f0e9e1c26724a4b34de963968bec0858283711c03840c953dbdb9ecd324e90b40f7bed3d02e38a17e6e87c6910a301c2b83390e321388ec25971d66613a284e85ac1d88914e6724e1d41370d16610028ee88bd7872c90c13847dfff099ceaf6af173b4e352f3e7868db16d2f93d172164e0995957e58155924bce13787e9a77a229416b6db136a898a7bfd38a3f59c3aeeab0328b2dbc1b522d771586d49e01c0850513d11e8c3881d0a6b12f423fdf0422c6739c7006151a1509db57493224ddbb876c521ead86a141f64a34fc1d4efce1de55e9ad941ae442fd398b06e1d574aae59b8437568f36965999db8ed36926dfef75ba6461a4c352c46999984dc375eaae084679c4fef55d71b56bf5772356fcc62c89f673a402422d329e58cfa7efc68700797a59fa96d6cff6bb8940bb0d26d7c3feee9927c07172ae722adae42a85a4ab5a6a10c4777fc031d42e9d7aaa63b7086d8e51fab454402b7387173015fbdacf05b4e99ded9bdbbf64285e6d89239391c44fd39cc1ad1841d7e741ded6a6649a81d621aff5088ad542f5c82997a4e6594b6a06640e8e6da2527cbb9ddb9e566d8af3a494f3bb1c2d5ad8cc2c20c1776b1e7221a7f384bc4b464d9cefb384ff67cae64d4a3a1d2a365a3d0ec7869fb93680adf79c0ff8e41fae050ec107b5207a578c42a2d22c732dbcd646b5449de40bf749eed941879f52e7df7f43028e88a2e9e211153aac0693d2ca6ce270c9853960d22d73b0e76755180ccae105a04516a4a8270fae66033191089b2e775507c30dc1c5d4f0de929001528f3320f8707b1b69b7ee6810143ac86e06539f682bc3f1f75884cd84eaa6e975173d89487fde7bb7da85d84a8ea8e9330d99b38617de53124a265ba687aee34d349f6548f663bffdf0510b4874aa4b08046d6110b497ad0ac34646136feb106a434ed6b52d77a8b28ee83922fe3f08627e49856776de9a1bb5dddbd3bb25ca45cf7c435c10ac9b5dea8a830956b6885e6e01cf4dde564d4c3be0950930a3b4f4b4b1f1c70b27e8b7569043cfcb6f5f07c8bdacb8e8aca714a795cf4a41f9025ad8073a49b1b52a84816fa9e739ce9526bf8366c9012413f0f82b2a44885ddc04ee499ef835d8580d58cfb4a6329c52355bc6c2e4f52ec439c30c51aba08f3873de0fd95df08bfb6351fb6a4a786d1fd4bbb613106e2ae07d0d7a412c79aed315317b3e4e71713db6f54de23f39559c61986e394f7508d4ef5cddc8057d2c00b8dafc5f3b879158ad0de0fd2a9d4338240841c53c0cf4515925b0c37ef6e6d425ed2ff306bb0e02bece3bc60644441aaee5eeb28dbe9a06f9ad423c794d72c71f93934560367c9283b9a378b6921f4e28b259a0d7edd5fb6ff9ab389b4b2e9ec93c45a733e75f2d6efb31e91fde72987d1d4c55d7215691ee1c641eb1711eeb1ba5a45b022572a04ca89b51eb789cd2cf87f8c8b1b5cf284c2b75f366327f1c321572086630cb0b603b3249557ae39bebcc75e9582eb6864fa968c799c6e0a160f7627ce35e4dbb06db9638c4d95c667f2822adbd69e8d5e93d9282099d5f4d9e18be449cb2570df192482748bf4c783ff8a245c488d1436a29a5354994516266429d0e7f661ab1fcfe0b43cc370f349be7525267fe94531e81febe8fbb9e95c857293a36b8275e09488dc1d8b8be54db798c971ec9ad065a429cbfb0ad2db932eb6e37316c3a52e17f858dca2236a5d4b9461a5d3f8a8edcaa144a0065766d82c717a1963aacd2ecc105f4ac469636a2379e565cca946af1b54245580befdddcccf301824fc90920d655871cf079816a642b0bd2e0c08d5529846f0c1142e2a14ccb54d95e512c13d6ae7f4a1cbadd8b33e4c0e6bd7d174640d03c79f92fd74f9cbd3df47f166ddcdfed37930825e86a1da31b64900561639cabe07abedcb73e86636c5e73936d5658e67abbd832860c227f8745c1c548051dbd8db0a69c516789969a7a9de0de9c39de4c67e6e687bd2d058104ae2a53750850b7e45c708213abc0af43f2f9f8a51aeb4837fdda72517e6b39a86199a46c8489ba3b878bd48657b8db08900764fba824dcf806498e52a024beac3a4129aebe488a0bf722ef80d11881a1ef97379cbca73fe7439e9a76c48d54ad8b8c06f79d8583ea931bbc23d12aa4116acd52382c7b498a9d269dc2cb7e81c01d55c3b66213cfd48fb79915feaa8b424f734447f8a23b022c606a94faeca241ae59c126bf0e4aca78ba841ad0db18a746ebec137829f01bec92acf59cf1945e4b10058a41fd9ea8b2f4408e0e79a641d6305209ffed97581790ac3e374f14222d9cdf99cb4c4cac3bf4659b7f2ae5b811cc2683386613089441871ddc73efc930233088040178124887477f20a9e8df5169312f0c41149040c2efab36587e192cc8e235379df5e5974a798b10c207ec006e8a37b5acd27a88ffcbcc289c7c63dad3728ea1dd6e714a68b0d1efafa324c6ec3d28b90214c21a2bbed6d2237f803643b6b89a7b37fb85d966f29ffec40dd5e9964e855e5d3ca9e7f636b069486ebf712795d5eb2cf7b75758883102b0eefa6f36433bf0def10b348b525b1808caccde50ee5c42a2a07899e332ac9c83dcee8146822bb3ba9160af5dbbb82737e33cb0dca255bd82fc0ac96f79e99e74e3285430dbdfc91a8f22335ea5b91a4c870164867b8e6efaa89af932f8098c29737359b0b5484a966967187f99803f11a3352813675474e00d376b9124da19676ee09e000f763c94803830f265233b0e79e5b2cdcddaecbbd26df801760fa3b6f2ac991e3b1cb159cd181d579b0a9708c8b24873a8f4425c7816d9675463c3171943b96fab6ced445458d125ded671b3524f1a61467870e670329d3f6a978267727a2fe8d0a4e2b334d6f82be55dd8a725a679561ad8409ae4c87d6e4eee8b72d875236cd0b9b1e4324046a9f8adf0afea2f241ef58bc6fbd513fab55d6bddbaf762037a0d969b2ae63f130fa7c0014a0f69f578e307af9e4eac1dd22fe55c38a2b08fe9081d9e472022a88c3af76b5e9239ec0a93efaf9da946bc495c50445c9bfb45ac7e1ec9702609058e2de5acced7cc357f6fc492140e24ec32507499e7578e223b8b904590cc9fe4612d166f78b37fe528420d15e4477579be01dec97ce5a937bccdba7145d263193738c624c5e48f8c32e987695e94c17db9d6c5ef4f1994d8ccac0e074af0b99ef744c7528c473d734174ade5ff8cdc9f514587bf5104bb80496e878d012733214976c2169c933a5c651f6d99c74a7f4f833ba864c4a89331b00bc6aaba22e4934a97ea6bef4cace7b10ead27222e9af11899a8511576d76d4cd8f79f881601d2d18780eb5ef03b18bc1489cd97afc0a605afa6840e1ff9ff44fe4265eb4836a35383982ecbf813d824bef44995ff777b31bd3da7595901702f4684cda0a9ded20ea474580f29794b3308c1c06ae9c0ec373ac96989bc5812b7ab237f2475bd81a8eb77ac7c24086ac4914913419a960f5d4acc8a53a007b0c1080b28a4077ad31f781b2a517e492fb34a3bb51ae0cc951141c4ef97393d3f427a341ed3c6ad41163a16d7928542a73f2021ee14825c4bc3d25d2fc06de63d83b8b0426538bdce047481963837b7894d245b435f6e1f349858197908482c599881d1c667df68d6ea8dd2b02c76f107d9a54d2323d1fc4ce7ad5a018432051b931efbf27b7a00bfcfee0b5ba3649039b3c548de10bab3403c680ae75ed81f23e961f73c016da8eb8b62874ea9b5984f1a1c3edc4ab3c5a4f2410f0b07411c80a8dd6fd87cd6462174dfadec92887d2065ba0d80a2b4a3932f7a822f50712cf459caa4eba7a9fcd094f73c1478f2b2d1f6bf5ac1cdd19290b18d48b04e2db3f173e22f91336443224954b52a1d8c8d1244b0b7a9d2ebc3c3306fbc78c54cc3f6aed114acdb23e65ac2f7ed92c7636ebdae060d482cf7b2e0918bd3fd2f21a87d33d065b1bbb466bd79d941d5e23f520f8091cd9589dab17ccfe33efe7be26f74560896a015c288566d5e7cdf5d97d55f4320eb305b285d21adb07d22cac14fbdb3e7ac9814dd70f490afffe749c2a647904103fb7f5719510557ae5c605fe5daa73a524a0543dcfdb7ff7fa67a9835844357fbbe8681bd2c2634c74cf63ce6495ae0c7f8fe2f46103bdcadfe58b328ce8e5604910716c85fba1c30c26369f5caf85d5a9596a386741bb065e11f8b8ae908e2973b9b6750027f3b7b4b3372f2f6d0382446090375e51449bc13a96205d8b0672cc591aadf74e087fc0e841efdbc59c87d5752b1bed268a5c8cca13f98f7fe6f927e969c101d958c60764f20762669d28532bdea785acb09375021378b6c0e7ce3a74c51c3c40845649576eaf013178bba719c04aed0f4eb0d907cc51123bf92beb081e2589a97324e13199bd717da773ebef6086a735bc38710a80c698fded5d6c11b702833c6eddfc054300029ff408369333c261ec687ede69418e933ff027db2b824777555d17888efa7f2cd06151e629eee57a7baf9e5f4c3e844bfeea804ebcafb7b2ebd96de32315ecfbcec8948800c07d6974dc577d427f3a2a990413b6a504ae4c2dd2698c4b93faf744aff1e99a94453db65078a2500ccc10c130e146efacfa867272355c354c5e2aeb51f40a89cd8cb54538e738e97013f62776649200cf644ee4cebd4183dce33f1c1a25b3a27926ca515d2a0d96902f16de5c49452034f7b29e813b9867dd529fe4f3e0d160b8f740d19be70812104fc34c4ce358c5c5fc8de3fb164d3dc3fbbc0f4d33e99d4673d1b9185c515778759861de8bf6bb5a9e8fcfe2fc1b631508a9c5f44869175812ea10c08c3c200a73f80bbccd50c44e4b9f501058568c9038c3f3b95a39375417be4d4d1b0d620c40735edf245798bfb100558381cafb613a5f7a79b4118c83aef0bdebd7d28f4d7a55ffdf084c7d82659dbeffc22d8340cce49e4e38b40ad2d479cc15dcc135deec4f2cb45bea51a66707a102c538061e6161ceddb07139e40e0e344d421ad767d937004bab147be643786708351d6f78dcb37bfd1fbe0c3926b609eb2ccf3a4c8b73cd358def7a27795ebe0911dd44c5bf8c1a50a0a9e5678358f73a42662e883add9667b049fc1eb03559415ccf4a01fc056fd4126873d1a313183087d06137437b9308752d536e585d2a7f2fb1535eeaec258a21a7d552e03b405367fe3eebdbd991942ebd2e3394637e6719d3aacf0ba560c753e7110f3b4ade10f95012dda264cd2f9462476cddb131722e5ca71f7dbe2ac2cb03b82f56f6cc9df48c4bc1fa283cd7d5c5c89f06db5f9bd7ed258f401a5a0815ab804fe441f63dce3b6f01d3fcd", &(0x7f0000001040)=@udp, 0x1}, 0x20) memfd_create(0x0, 0xa) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) 01:29:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0xd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) [ 1073.236849] Bluetooth: hci5 command 0x0409 tx timeout [ 1074.293421] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1074.309509] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1074.316254] CPU: 0 PID: 25150 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1074.324148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1074.333709] Call Trace: [ 1074.336299] dump_stack+0x1b2/0x281 [ 1074.339927] warn_alloc.cold+0x96/0x1cc [ 1074.343896] ? zone_watermark_ok_safe+0x220/0x220 [ 1074.348749] __alloc_pages_nodemask+0x2127/0x2720 [ 1074.353596] ? lock_acquire+0x170/0x3f0 [ 1074.357575] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1074.362423] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1074.367958] ? __mutex_unlock_slowpath+0x75/0x770 [ 1074.372820] ? __sanitizer_cov_trace_pc+0x3d/0x50 [ 1074.377672] alloc_pages_current+0x155/0x260 [ 1074.382079] ion_page_pool_alloc+0x118/0x1b0 [ 1074.386486] ion_system_heap_allocate+0x133/0x8c0 [ 1074.391326] ? ion_alloc+0x187/0x810 [ 1074.395127] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1074.400576] ? ion_system_contig_heap_create+0x130/0x130 [ 1074.406281] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1074.411295] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1074.416138] ion_alloc+0x204/0x810 [ 1074.419681] ? ion_dma_buf_release+0x40/0x40 [ 1074.424086] ? __might_fault+0x177/0x1b0 [ 1074.428147] ion_ioctl+0xea/0x1f0 [ 1074.431596] ? ion_query_heaps+0x360/0x360 [ 1074.435828] ? ion_query_heaps+0x360/0x360 [ 1074.440060] do_vfs_ioctl+0x75a/0xff0 [ 1074.443872] ? ioctl_preallocate+0x1a0/0x1a0 [ 1074.448275] ? lock_downgrade+0x740/0x740 [ 1074.452423] ? __fget+0x225/0x360 [ 1074.455866] ? do_vfs_ioctl+0xff0/0xff0 [ 1074.459834] ? security_file_ioctl+0x83/0xb0 [ 1074.464240] SyS_ioctl+0x7f/0xb0 [ 1074.467602] ? do_vfs_ioctl+0xff0/0xff0 [ 1074.471577] do_syscall_64+0x1d5/0x640 [ 1074.475464] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1074.480730] RIP: 0033:0x465ef9 [ 1074.483911] RSP: 002b:00007fab2d828188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1074.491612] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1074.498888] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1074.506149] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1074.513410] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1074.520673] R13: 00007ffde76bccff R14: 00007fab2d828300 R15: 0000000000022000 [ 1074.531408] warn_alloc_show_mem: 1 callbacks suppressed [ 1074.531412] Mem-Info: [ 1074.539269] active_anon:11980 inactive_anon:41278 isolated_anon:0 [ 1074.539269] active_file:1661 inactive_file:5764 isolated_file:0 [ 1074.539269] unevictable:0 dirty:110 writeback:0 unstable:0 [ 1074.539269] slab_reclaimable:12712 slab_unreclaimable:118019 [ 1074.539269] mapped:57404 shmem:41744 pagetables:728 bounce:0 [ 1074.539269] free:293459 free_pcp:383 free_cma:0 [ 1074.573544] Node 0 active_anon:46928kB inactive_anon:113940kB active_file:6040kB inactive_file:22320kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140748kB dirty:384kB writeback:0kB shmem:115548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1074.602948] Node 1 active_anon:992kB inactive_anon:51172kB active_file:604kB inactive_file:736kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88868kB dirty:56kB writeback:0kB shmem:51428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1074.631011] Node 0 DMA free:11164kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1074.658221] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1074.663343] Node 0 DMA32 free:803088kB min:36200kB low:45248kB high:54296kB active_anon:46928kB inactive_anon:113920kB active_file:5940kB inactive_file:22620kB unevictable:0kB writepending:384kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2296kB bounce:0kB free_pcp:836kB local_pcp:112kB free_cma:0kB [ 1074.694914] lowmem_reserve[]: 0 0 0 0 0 [ 1074.699576] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1074.726155] lowmem_reserve[]: 0 0 0 0 0 [ 1074.730270] Node 1 Normal free:171932kB min:53696kB low:67120kB high:80544kB active_anon:992kB inactive_anon:51172kB active_file:604kB inactive_file:736kB unevictable:0kB writepending:56kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:616kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1074.761689] lowmem_reserve[]: 0 0 0 0 0 [ 1074.765771] Node 0 DMA: 74*4kB (UME) 26*8kB (UME) 19*16kB (UE) 20*32kB (UME) 3*64kB (UME) 2*128kB (ME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (U) 0*4096kB = 11112kB [ 1074.782678] Node 0 DMA32: 10219*4kB (UME) 12185*8kB (UME) 16326*16kB (UME) 10094*32kB (UME) 1*64kB (U) 106*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 736212kB [ 1074.787318] syz-executor.2: [ 1074.800101] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1074.813579] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1074.815306] Node 1 Normal: 2671*4kB (UM) 2993*8kB (UM) 2960*16kB (UM) 2800*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 171588kB [ 1074.839825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1074.844685] syz-executor.2 cpuset= [ 1074.849645] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1074.852602] / [ 1074.853271] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1074.874934] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1074.877025] mems_allowed=0-1 [ 1074.886034] 48982 total pagecache pages [ 1074.890662] 0 pages in swap cache [ 1074.894267] Swap cache stats: add 0, delete 0, find 0/0 [ 1074.900897] Free swap = 0kB [ 1074.903992] Total swap = 0kB [ 1074.907915] 2097051 pages RAM [ 1074.908217] CPU: 1 PID: 25160 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1074.911107] 0 pages HighMem/MovableOnly [ 1074.918888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1074.918892] Call Trace: [ 1074.918909] dump_stack+0x1b2/0x281 [ 1074.918923] warn_alloc.cold+0x96/0x1cc [ 1074.918934] ? zone_watermark_ok_safe+0x220/0x220 [ 1074.918954] __alloc_pages_nodemask+0x2127/0x2720 [ 1074.918963] ? io_schedule_timeout+0x140/0x140 [ 1074.918977] ? lock_acquire+0x170/0x3f0 [ 1074.918992] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1074.919009] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1074.919021] ? __mutex_unlock_slowpath+0x75/0x770 [ 1074.919030] ? retint_kernel+0x2d/0x2d [ 1074.919044] alloc_pages_current+0x155/0x260 [ 1074.927577] 363840 pages reserved [ 1074.932428] ion_page_pool_alloc+0x118/0x1b0 [ 1074.932440] ion_system_heap_allocate+0x133/0x8c0 [ 1074.937593] 0 pages cma reserved [ 1074.941157] ? ion_alloc+0x187/0x810 [ 1074.941168] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1074.941180] ? ion_system_contig_heap_create+0x130/0x130 [ 1075.017186] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1075.022204] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1075.027046] ion_alloc+0x204/0x810 [ 1075.030588] ? ion_dma_buf_release+0x40/0x40 [ 1075.034997] ? __might_fault+0x177/0x1b0 [ 1075.039059] ion_ioctl+0xea/0x1f0 [ 1075.042510] ? ion_query_heaps+0x360/0x360 [ 1075.046742] ? ion_query_heaps+0x360/0x360 [ 1075.050972] do_vfs_ioctl+0x75a/0xff0 [ 1075.054770] ? ioctl_preallocate+0x1a0/0x1a0 [ 1075.059173] ? lock_downgrade+0x740/0x740 [ 1075.063319] ? __fget+0x225/0x360 [ 1075.066768] ? do_vfs_ioctl+0xff0/0xff0 [ 1075.070734] ? security_file_ioctl+0x83/0xb0 [ 1075.075176] SyS_ioctl+0x7f/0xb0 [ 1075.078543] ? do_vfs_ioctl+0xff0/0xff0 [ 1075.082516] do_syscall_64+0x1d5/0x640 [ 1075.086405] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1075.091594] RIP: 0033:0x465ef9 [ 1075.094774] RSP: 002b:00007fca24dbc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1075.102482] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1075.109746] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1075.117009] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1075.124455] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1075.131722] R13: 00007ffeaa280ccf R14: 00007fca24dbc300 R15: 0000000000022000 [ 1075.316044] Bluetooth: hci5 command 0x041b tx timeout 01:29:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:29:59 executing program 5: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x7, "cb6537"}, 0x6) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x51d381, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2202, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r2) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x1409, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x4001) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f00000000c0)={'wg1\x00'}) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r3) 01:29:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001300)={'vcan0\x00', 0x0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280)='l2tp\x00', r2) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r3) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f00000001c0)=0x5, 0x4) r4 = syz_open_dev$mouse(&(0x7f00000013c0)='/dev/input/mouse#\x00', 0x73, 0x1c9002) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200142, 0x0) connect$rose(r3, &(0x7f0000000200)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, &(0x7f0000000000), &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x5, [], r1, 0x25, r5, 0x8, &(0x7f0000001340)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001380)={0x2, 0xa, 0x8000, 0x6}, 0x10, 0x0, r4}, 0x78) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[0x54d8, 0x5, 0xbbea], 0x3, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x140f, 0x400, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x21) 01:29:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x68, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:29:59 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20400, 0x0) r0 = gettid() openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x595002, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) getpid() syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x6, 0x8, 0x4, 0x6, 0x0, 0x40, 0x42491, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x5, 0x7}, 0x4205, 0x77d93fbf, 0x1000, 0x1, 0x8, 0x3}, r0, 0xa, r1, 0x3) r2 = gettid() perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000100)='ns/pid\x00') 01:29:59 executing program 0: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/zero\x00', 0x244441, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000001600)={'veth1_to_team\x00'}) 01:29:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:29:59 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {r0, 0x4, 0x0, 0x0, 0x0, @ib={0x1b, 0x3f, 0x5, {"a22cde76836ce3d90e2e2ea841b4f2e3"}, 0xfdb, 0x2004, 0xfdb0}, @in6={0xa, 0x4e22, 0x7, @local, 0x8}}}, 0x118) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000140)={0x0, r1}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) [ 1075.697001] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1075.711193] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1075.717856] CPU: 0 PID: 25181 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1075.725759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1075.735112] Call Trace: [ 1075.737967] dump_stack+0x1b2/0x281 [ 1075.741600] warn_alloc.cold+0x96/0x1cc [ 1075.745582] ? zone_watermark_ok_safe+0x220/0x220 [ 1075.751135] __alloc_pages_nodemask+0x2127/0x2720 [ 1075.756096] ? io_schedule_timeout+0x140/0x140 [ 1075.760694] ? lock_acquire+0x170/0x3f0 [ 1075.764670] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1075.769520] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1075.775087] ? __mutex_unlock_slowpath+0x75/0x770 [ 1075.779929] ? retint_kernel+0x2d/0x2d [ 1075.784076] alloc_pages_current+0x155/0x260 [ 1075.788489] ion_page_pool_alloc+0x118/0x1b0 [ 1075.792898] ion_system_heap_allocate+0x133/0x8c0 [ 1075.797743] ? ion_alloc+0x187/0x810 [ 1075.801453] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1075.806954] ? ion_system_contig_heap_create+0x130/0x130 [ 1075.816668] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1075.821750] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1075.826597] ion_alloc+0x204/0x810 [ 1075.830140] ? ion_dma_buf_release+0x40/0x40 [ 1075.834547] ? __might_fault+0x177/0x1b0 [ 1075.838607] ion_ioctl+0xea/0x1f0 [ 1075.842062] ? ion_query_heaps+0x360/0x360 [ 1075.846299] ? ion_query_heaps+0x360/0x360 [ 1075.850534] do_vfs_ioctl+0x75a/0xff0 [ 1075.854345] ? ioctl_preallocate+0x1a0/0x1a0 [ 1075.858748] ? lock_downgrade+0x740/0x740 [ 1075.862896] ? __fget+0x225/0x360 [ 1075.866346] ? do_vfs_ioctl+0xff0/0xff0 [ 1075.870315] ? security_file_ioctl+0x83/0xb0 [ 1075.874721] SyS_ioctl+0x7f/0xb0 [ 1075.878083] ? do_vfs_ioctl+0xff0/0xff0 [ 1075.882055] do_syscall_64+0x1d5/0x640 [ 1075.885947] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1075.891133] RIP: 0033:0x465ef9 [ 1075.894315] RSP: 002b:00007fab2d828188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1075.902018] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1075.909287] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1075.916576] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1075.923852] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1075.931124] R13: 00007ffde76bccff R14: 00007fab2d828300 R15: 0000000000022000 [ 1075.947953] warn_alloc_show_mem: 1 callbacks suppressed [ 1075.947957] Mem-Info: [ 1075.962549] active_anon:12516 inactive_anon:41278 isolated_anon:0 [ 1075.962549] active_file:2122 inactive_file:5317 isolated_file:12 [ 1075.962549] unevictable:0 dirty:123 writeback:0 unstable:0 [ 1075.962549] slab_reclaimable:12718 slab_unreclaimable:119379 [ 1075.962549] mapped:57575 shmem:41744 pagetables:765 bounce:0 [ 1075.962549] free:125669 free_pcp:175 free_cma:0 [ 1075.997635] Node 0 active_anon:49316kB inactive_anon:113940kB active_file:7884kB inactive_file:20532kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:141432kB dirty:424kB writeback:0kB shmem:115548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1076.029085] Node 1 active_anon:748kB inactive_anon:51172kB active_file:604kB inactive_file:736kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88868kB dirty:68kB writeback:0kB shmem:51428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1076.057392] Node 0 DMA free:11120kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1076.085528] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1076.091365] Node 0 DMA32 free:46020kB min:36200kB low:45248kB high:54296kB active_anon:47604kB inactive_anon:113920kB active_file:7592kB inactive_file:20500kB unevictable:0kB writepending:424kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2548kB bounce:0kB free_pcp:620kB local_pcp:416kB free_cma:0kB [ 1076.122441] lowmem_reserve[]: 0 0 0 0 0 [ 1076.132080] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1076.186542] lowmem_reserve[]: 0 0 0 0 0 [ 1076.195069] Node 1 Normal free:937016kB min:53696kB low:67120kB high:80544kB active_anon:748kB inactive_anon:51172kB active_file:604kB inactive_file:736kB unevictable:0kB writepending:68kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:512kB bounce:0kB free_pcp:120kB local_pcp:108kB free_cma:0kB [ 1076.262543] lowmem_reserve[]: 0 0 0 0 0 [ 1076.269985] Node 0 DMA: 14*4kB (UME) 25*8kB (UME) 31*16kB (UE) 22*32kB (UME) 16*64kB (UME) 12*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 11184kB [ 1076.322299] Node 0 DMA32: 46*4kB (UE) 177*8kB (E) 127*16kB (UE) 7*32kB (UE) 3045*64kB (UME) 483*128kB (UM) 109*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 288976kB [ 1076.354465] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1076.388683] Node 1 Normal: 2*4kB (UM) 3*8kB (U) 211*16kB (U) 769*32kB (U) 10524*64kB (UM) 1574*128kB (UM) 392*256kB (UM) 425*512kB (U) 21*1024kB (U) 0*2048kB 0*4096kB = 1242480kB [ 1076.428654] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1076.450588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1076.469070] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1076.496352] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1076.505212] 48877 total pagecache pages [ 1076.520353] 0 pages in swap cache [ 1076.527134] Swap cache stats: add 0, delete 0, find 0/0 [ 1076.538010] Free swap = 0kB [ 1076.544331] Total swap = 0kB [ 1076.550703] 2097051 pages RAM [ 1076.558200] 0 pages HighMem/MovableOnly [ 1076.565468] 363840 pages reserved [ 1076.573456] 0 pages cma reserved 01:30:01 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:30:01 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="03032bbd7000fddbdf2509000000050029000000000008003b0009000000130038000100000005002d000100000008003400fe"], 0x64}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r2, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xf7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x2c, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3bbf7759}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff7}]}, 0x2c}}, 0x40000) 01:30:01 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x14000, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x42}) 01:30:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) [ 1077.395980] Bluetooth: hci5 command 0x040f tx timeout [ 1078.201678] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1078.224637] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1078.235349] CPU: 0 PID: 25213 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1078.243250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1078.252596] Call Trace: [ 1078.255187] dump_stack+0x1b2/0x281 [ 1078.258818] warn_alloc.cold+0x96/0x1cc [ 1078.262789] ? zone_watermark_ok_safe+0x220/0x220 [ 1078.267640] __alloc_pages_nodemask+0x2127/0x2720 [ 1078.272492] ? lock_acquire+0x170/0x3f0 [ 1078.276496] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1078.281342] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1078.286794] ? __mutex_unlock_slowpath+0x75/0x770 [ 1078.293196] ? alloc_pages_current+0x135/0x260 [ 1078.297778] alloc_pages_current+0x155/0x260 [ 1078.302194] ion_page_pool_alloc+0x118/0x1b0 [ 1078.306597] ion_system_heap_allocate+0x133/0x8c0 [ 1078.311434] ? ion_alloc+0x187/0x810 [ 1078.315145] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1078.320594] ? ion_system_contig_heap_create+0x130/0x130 [ 1078.326039] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1078.331058] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1078.335907] ion_alloc+0x204/0x810 [ 1078.339449] ? ion_dma_buf_release+0x40/0x40 [ 1078.343861] ? __might_fault+0x177/0x1b0 [ 1078.347920] ion_ioctl+0xea/0x1f0 [ 1078.351367] ? ion_query_heaps+0x360/0x360 [ 1078.355600] ? ion_query_heaps+0x360/0x360 [ 1078.359830] do_vfs_ioctl+0x75a/0xff0 [ 1078.363628] ? ioctl_preallocate+0x1a0/0x1a0 [ 1078.368030] ? lock_downgrade+0x740/0x740 [ 1078.372179] ? __fget+0x225/0x360 [ 1078.375625] ? do_vfs_ioctl+0xff0/0xff0 [ 1078.379596] ? security_file_ioctl+0x83/0xb0 [ 1078.383998] SyS_ioctl+0x7f/0xb0 [ 1078.387359] ? do_vfs_ioctl+0xff0/0xff0 [ 1078.391327] do_syscall_64+0x1d5/0x640 [ 1078.395216] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1078.400405] RIP: 0033:0x465ef9 [ 1078.403591] RSP: 002b:00007fca24dbc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1078.411382] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1078.418659] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1078.425928] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1078.433191] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1078.440461] R13: 00007ffeaa280ccf R14: 00007fca24dbc300 R15: 0000000000022000 [ 1078.449779] Mem-Info: [ 1078.452296] active_anon:12380 inactive_anon:41277 isolated_anon:0 [ 1078.452296] active_file:2686 inactive_file:2769 isolated_file:0 [ 1078.452296] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1078.452296] slab_reclaimable:12717 slab_unreclaimable:119681 [ 1078.452296] mapped:56901 shmem:41743 pagetables:705 bounce:0 [ 1078.452296] free:83747 free_pcp:279 free_cma:0 [ 1078.486125] Node 0 active_anon:48628kB inactive_anon:113940kB active_file:10732kB inactive_file:11060kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139908kB dirty:0kB writeback:0kB shmem:115548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1078.514988] Node 1 active_anon:892kB inactive_anon:51168kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87696kB dirty:0kB writeback:0kB shmem:51424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1078.542490] Node 0 DMA free:11120kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1078.571085] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1078.580753] Node 0 DMA32 free:224028kB min:36200kB low:45248kB high:54296kB active_anon:46580kB inactive_anon:113920kB active_file:10732kB inactive_file:10860kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2308kB bounce:0kB free_pcp:856kB local_pcp:112kB free_cma:0kB [ 1078.611745] lowmem_reserve[]: 0 0 0 0 0 [ 1078.616438] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1078.642751] lowmem_reserve[]: 0 0 0 0 0 [ 1078.648073] Node 1 Normal free:149912kB min:53696kB low:67120kB high:80544kB active_anon:892kB inactive_anon:51168kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:512kB bounce:0kB free_pcp:732kB local_pcp:0kB free_cma:0kB [ 1078.678075] lowmem_reserve[]: 0 0 0 0 0 [ 1078.682166] Node 0 DMA: 2*4kB (ME) 3*8kB (UME) 1*16kB (E) 2*32kB (ME) 10*64kB (UME) 13*128kB (UME) 6*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 11120kB [ 1078.699001] Node 0 DMA32: 49*4kB (UME) 159*8kB (ME) 128*16kB (UME) 3590*32kB (UME) 2558*64kB (U) 9*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 283260kB [ 1078.715169] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1078.727708] Node 1 Normal: 459*4kB (UM) 765*8kB (UM) 862*16kB (UM) 1613*32kB (UM) 411*64kB (UM) 5*128kB (UM) 2*256kB (M) 48*512kB (U) 10*1024kB (U) 7*2048kB (U) 0*4096kB = 149972kB [ 1078.761778] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1078.780724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1078.799451] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1078.818340] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1078.837248] 47048 total pagecache pages [ 1078.844610] 0 pages in swap cache [ 1078.853561] Swap cache stats: add 0, delete 0, find 0/0 [ 1078.859700] Free swap = 0kB [ 1078.862796] Total swap = 0kB [ 1078.866858] 2097051 pages RAM [ 1078.870033] 0 pages HighMem/MovableOnly [ 1078.874062] 363840 pages reserved [ 1078.878948] 0 pages cma reserved [ 1079.475566] Bluetooth: hci5 command 0x0419 tx timeout [ 1079.744309] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1079.787733] systemd-journal cpuset=/ mems_allowed=0-1 [ 1079.792964] CPU: 0 PID: 24461 Comm: systemd-journal Not tainted 4.14.222-syzkaller #0 [ 1079.800925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1079.810363] Call Trace: [ 1079.812952] dump_stack+0x1b2/0x281 [ 1079.816575] dump_header+0x178/0x82f [ 1079.820284] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1079.825376] ? ___ratelimit+0x2cd/0x530 [ 1079.829348] oom_kill_process.cold+0x10/0xb18 [ 1079.833932] out_of_memory+0xe3e/0x1190 [ 1079.837905] ? oom_killer_disable+0x1c0/0x1c0 [ 1079.842393] ? mutex_trylock+0x152/0x1a0 [ 1079.846450] __alloc_pages_nodemask+0x23e1/0x2720 [ 1079.851299] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1079.856153] alloc_pages_current+0x155/0x260 [ 1079.860563] filemap_fault+0xea3/0x1980 [ 1079.864540] ext4_filemap_fault+0x84/0xb0 [ 1079.868682] __do_fault+0xfa/0x380 [ 1079.872213] __handle_mm_fault+0x2497/0x4620 [ 1079.876624] ? vm_insert_page+0x7c0/0x7c0 [ 1079.880761] ? __fsnotify_inode_delete+0x20/0x20 [ 1079.885508] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1079.892175] handle_mm_fault+0x391/0x860 [ 1079.896230] __do_page_fault+0x549/0xad0 [ 1079.900290] ? spurious_fault+0x640/0x640 [ 1079.904517] ? do_page_fault+0x60/0x500 [ 1079.908496] ? page_fault+0x2f/0x50 [ 1079.912116] page_fault+0x45/0x50 [ 1079.915562] RIP: 003d:0x56379da13958 [ 1079.919267] RSP: 757e1dc2:00007ffd757e1dc2 EFLAGS: 7ffd757e15c0 [ 1079.958333] Mem-Info: [ 1079.967452] active_anon:12557 inactive_anon:41277 isolated_anon:0 [ 1079.967452] active_file:15 inactive_file:49 isolated_file:0 [ 1079.967452] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1079.967452] slab_reclaimable:12713 slab_unreclaimable:119636 [ 1079.967452] mapped:52708 shmem:41743 pagetables:705 bounce:0 [ 1079.967452] free:25215 free_pcp:89 free_cma:0 [ 1080.007549] Node 0 active_anon:49336kB inactive_anon:113940kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123136kB dirty:0kB writeback:0kB shmem:115548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1080.039568] Node 1 active_anon:892kB inactive_anon:51168kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87696kB dirty:0kB writeback:0kB shmem:51424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1080.071478] Node 0 DMA free:11040kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1080.100855] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1080.110160] Node 0 DMA32 free:35992kB min:36200kB low:45248kB high:54296kB active_anon:47288kB inactive_anon:113920kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2308kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 1080.142996] lowmem_reserve[]: 0 0 0 0 0 [ 1080.147032] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1080.174606] lowmem_reserve[]: 0 0 0 0 0 [ 1080.178777] Node 1 Normal free:53592kB min:53696kB low:67120kB high:80544kB active_anon:892kB inactive_anon:51168kB active_file:56kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:512kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1080.209670] lowmem_reserve[]: 0 0 0 0 0 [ 1080.214827] Node 0 DMA: 2*4kB (ME) 3*8kB (UME) 2*16kB (UE) 3*32kB (UME) 8*64kB (UME) 13*128kB (UME) 6*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 11040kB [ 1080.230607] Node 0 DMA32: 532*4kB (UME) 371*8kB (UME) 185*16kB (UME) 45*32kB (ME) 310*64kB (UM) 36*128kB (UM) 4*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 35992kB [ 1080.246166] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1080.256923] Node 1 Normal: 86*4kB (UM) 46*8kB (UM) 33*16kB (UM) 18*32kB (UM) 31*64kB (M) 5*128kB (UM) 2*256kB (M) 47*512kB (U) 10*1024kB (U) 7*2048kB (U) 0*4096kB = 53592kB [ 1080.272651] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1080.281497] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1080.290097] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1080.298952] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1080.307554] 41773 total pagecache pages [ 1080.311522] 0 pages in swap cache [ 1080.315018] Swap cache stats: add 0, delete 0, find 0/0 [ 1080.320401] Free swap = 0kB [ 1080.323407] Total swap = 0kB [ 1080.326458] 2097051 pages RAM [ 1080.329548] 0 pages HighMem/MovableOnly [ 1080.333500] 363840 pages reserved [ 1080.337627] 0 pages cma reserved [ 1080.340987] Out of memory (oom_kill_allocating_task): Kill process 24461 (systemd-journal) score 0 or sacrifice child [ 1080.351785] Killed process 24461 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1936kB [ 1080.367442] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1080.429118] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1080.434259] CPU: 1 PID: 22953 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1080.442130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1080.451562] Call Trace: [ 1080.454163] dump_stack+0x1b2/0x281 [ 1080.457785] dump_header+0x178/0x82f [ 1080.461751] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1080.468059] ? ___ratelimit+0x2cd/0x530 [ 1080.472026] oom_kill_process.cold+0x10/0xb18 [ 1080.476521] out_of_memory+0xe3e/0x1190 [ 1080.480490] ? oom_killer_disable+0x1c0/0x1c0 [ 1080.484987] ? mutex_trylock+0x152/0x1a0 [ 1080.489041] __alloc_pages_nodemask+0x23e1/0x2720 [ 1080.493885] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1080.498737] alloc_pages_current+0x155/0x260 [ 1080.503139] filemap_fault+0xea3/0x1980 [ 1080.507115] ext4_filemap_fault+0x84/0xb0 [ 1080.511255] __do_fault+0xfa/0x380 [ 1080.514787] __handle_mm_fault+0x2497/0x4620 [ 1080.519191] ? vm_insert_page+0x7c0/0x7c0 [ 1080.523331] ? nanosleep_copyout+0x100/0x100 [ 1080.527748] handle_mm_fault+0x391/0x860 [ 1080.531805] __do_page_fault+0x549/0xad0 [ 1080.535861] ? spurious_fault+0x640/0x640 [ 1080.540002] ? do_page_fault+0x60/0x500 [ 1080.543965] ? page_fault+0x2f/0x50 [ 1080.547582] page_fault+0x45/0x50 [ 1080.551027] RIP: 1073de:0x4 [ 1080.553942] RSP: 002d:00007ffeaa280f8c EFLAGS: 00000032 [ 1080.587182] Mem-Info: [ 1080.594972] active_anon:12441 inactive_anon:41276 isolated_anon:0 [ 1080.594972] active_file:41 inactive_file:0 isolated_file:0 [ 1080.594972] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1080.594972] slab_reclaimable:12711 slab_unreclaimable:119631 [ 1080.594972] mapped:52225 shmem:41743 pagetables:680 bounce:0 [ 1080.594972] free:25189 free_pcp:93 free_cma:0 [ 1080.649105] Node 0 active_anon:48872kB inactive_anon:113936kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121204kB dirty:0kB writeback:0kB shmem:115548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1080.724504] Node 1 active_anon:892kB inactive_anon:51168kB active_file:20kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87696kB dirty:0kB writeback:0kB shmem:51424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1080.756751] Node 0 DMA free:11040kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1080.787271] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1080.792313] Node 0 DMA32 free:36124kB min:36200kB low:45248kB high:54296kB active_anon:46824kB inactive_anon:113916kB active_file:36kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:2208kB bounce:0kB free_pcp:372kB local_pcp:120kB free_cma:0kB [ 1080.825310] lowmem_reserve[]: 0 0 0 0 0 [ 1080.829309] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1080.859119] lowmem_reserve[]: 0 0 0 0 0 [ 1080.863120] Node 1 Normal free:53592kB min:53696kB low:67120kB high:80544kB active_anon:892kB inactive_anon:51168kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:512kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1080.895482] lowmem_reserve[]: 0 0 0 0 0 [ 1080.899523] Node 0 DMA: 2*4kB (ME) 3*8kB (UME) 2*16kB (UE) 3*32kB (UME) 8*64kB (UME) 13*128kB (UME) 6*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 11040kB [ 1080.941085] Node 0 DMA32: 499*4kB (ME) 376*8kB (UME) 187*16kB (UME) 47*32kB (UME) 312*64kB (UM) 36*128kB (UM) 4*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36124kB [ 1080.964976] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1080.999990] Node 1 Normal: 86*4kB (UM) 46*8kB (UM) 33*16kB (UM) 18*32kB (UM) 31*64kB (M) 5*128kB (UM) 2*256kB (M) 47*512kB (U) 10*1024kB (U) 7*2048kB (U) 0*4096kB = 53592kB [ 1081.015753] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1081.024685] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1081.033816] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1081.042667] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1081.051273] 41773 total pagecache pages [ 1081.055285] 0 pages in swap cache [ 1081.058726] Swap cache stats: add 0, delete 0, find 0/0 [ 1081.064067] Free swap = 0kB [ 1081.067105] Total swap = 0kB [ 1081.070114] 2097051 pages RAM [ 1081.073199] 0 pages HighMem/MovableOnly [ 1081.077243] 363840 pages reserved [ 1081.080677] 0 pages cma reserved [ 1081.084016] Out of memory (oom_kill_allocating_task): Kill process 22953 (syz-executor.2) score 0 or sacrifice child [ 1081.094725] Killed process 25213 (syz-executor.2) total-vm:93232kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 1081.111321] oom_reaper: reaped process 25213 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1081.147291] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1081.163130] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1081.167954] CPU: 1 PID: 7967 Comm: syz-fuzzer Not tainted 4.14.222-syzkaller #0 [ 1081.175392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1081.184740] Call Trace: [ 1081.187334] dump_stack+0x1b2/0x281 [ 1081.190964] dump_header+0x178/0x82f [ 1081.194692] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1081.199876] ? ___ratelimit+0x2cd/0x530 [ 1081.203849] oom_kill_process.cold+0x10/0xb18 [ 1081.208348] out_of_memory+0xe3e/0x1190 [ 1081.212320] ? oom_killer_disable+0x1c0/0x1c0 [ 1081.216829] ? mutex_trylock+0x152/0x1a0 [ 1081.220884] __alloc_pages_nodemask+0x23e1/0x2720 [ 1081.225729] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1081.230585] alloc_pages_current+0x155/0x260 [ 1081.234981] filemap_fault+0xea3/0x1980 [ 1081.238940] ext4_filemap_fault+0x84/0xb0 [ 1081.243066] __do_fault+0xfa/0x380 [ 1081.246609] __handle_mm_fault+0x2497/0x4620 [ 1081.251010] ? vm_insert_page+0x7c0/0x7c0 [ 1081.255138] ? free_object+0xe4/0x240 [ 1081.258925] handle_mm_fault+0x391/0x860 [ 1081.262975] __do_page_fault+0x549/0xad0 [ 1081.267060] ? spurious_fault+0x640/0x640 [ 1081.271185] ? do_page_fault+0x60/0x500 [ 1081.275141] ? page_fault+0x2f/0x50 [ 1081.278745] page_fault+0x45/0x50 [ 1081.282276] RIP: 0000:0x92fd48 [ 1081.285440] RSP: 0002:000000c00003dfa0 EFLAGS: 0043b6a0 [ 1081.285607] Mem-Info: [ 1081.293372] active_anon:12418 inactive_anon:41276 isolated_anon:0 [ 1081.293372] active_file:23 inactive_file:7 isolated_file:0 [ 1081.293372] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1081.293372] slab_reclaimable:12711 slab_unreclaimable:119632 [ 1081.293372] mapped:52225 shmem:41743 pagetables:680 bounce:0 [ 1081.293372] free:13947 free_pcp:132 free_cma:0 [ 1081.295297] syz-executor.2: [ 1081.326741] Node 0 active_anon:48872kB inactive_anon:113936kB active_file:88kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121204kB dirty:0kB writeback:0kB shmem:115548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1081.342215] page allocation failure: order:0 [ 1081.357539] Node 1 active_anon:800kB inactive_anon:51168kB active_file:4kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87696kB dirty:0kB writeback:0kB shmem:51424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1081.357544] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1081.357561] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1081.357579] Node 0 DMA32 free:18020kB min:36200kB low:45248kB high:54296kB active_anon:46824kB inactive_anon:113916kB active_file:88kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:2208kB bounce:0kB free_pcp:316kB local_pcp:192kB free_cma:0kB [ 1081.357596] lowmem_reserve[]: 0 0 0 0 0 [ 1081.357613] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1081.357628] lowmem_reserve[]: [ 1081.375743] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1081.389232] 0 [ 1081.425480] (null) [ 1081.455154] 0 [ 1081.489457] syz-executor.2 cpuset= [ 1081.494854] 0 0 0 [ 1081.500925] Node 1 Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:800kB inactive_anon:51168kB active_file:4kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:512kB bounce:0kB free_pcp:212kB local_pcp:0kB free_cma:0kB [ 1081.503660] / [ 1081.535853] lowmem_reserve[]: 0 0 0 0 0 [ 1081.539104] mems_allowed=0-1 [ 1081.541548] Node 0 DMA: [ 1081.544643] CPU: 0 PID: 25213 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1081.544650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1081.550995] 2*4kB [ 1081.555152] Call Trace: [ 1081.555172] dump_stack+0x1b2/0x281 [ 1081.555186] warn_alloc.cold+0x96/0x1cc [ 1081.555198] ? zone_watermark_ok_safe+0x220/0x220 [ 1081.555206] ? usleep_range+0x130/0x130 [ 1081.555216] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1081.568669] (ME) [ 1081.569291] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1081.572887] 3*8kB [ 1081.576843] ? run_timer_softirq+0x5a0/0x5a0 [ 1081.576860] __alloc_pages_nodemask+0x2127/0x2720 [ 1081.576875] ? lock_acquire+0x170/0x3f0 [ 1081.576890] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1081.583020] (UME) [ 1081.585667] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1081.585688] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1081.585700] ? __sanitizer_cov_trace_pc+0x29/0x50 [ 1081.585715] alloc_pages_current+0x155/0x260 [ 1081.585729] ion_page_pool_alloc+0x118/0x1b0 [ 1081.585740] ion_system_heap_allocate+0x133/0x8c0 [ 1081.593797] 1*16kB [ 1081.597862] ? ion_alloc+0x187/0x810 [ 1081.597871] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1081.597881] ? ion_system_contig_heap_create+0x130/0x130 [ 1081.597892] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1081.597903] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1081.602511] (E) [ 1081.604422] ion_alloc+0x204/0x810 [ 1081.611171] 3*32kB [ 1081.613222] ? ion_dma_buf_release+0x40/0x40 [ 1081.621523] (UME) [ 1081.624645] ? __might_fault+0x177/0x1b0 [ 1081.631949] 7*64kB [ 1081.634896] ion_ioctl+0xea/0x1f0 [ 1081.642770] (UME) [ 1081.643668] ? ion_query_heaps+0x360/0x360 [ 1081.650349] 13*128kB [ 1081.650706] ? ion_query_heaps+0x360/0x360 [ 1081.654388] (UME) [ 1081.659818] do_vfs_ioctl+0x75a/0xff0 [ 1081.659831] ? ioctl_preallocate+0x1a0/0x1a0 [ 1081.659840] ? lock_downgrade+0x740/0x740 [ 1081.659853] ? __fget+0x225/0x360 [ 1081.659864] ? do_vfs_ioctl+0xff0/0xff0 [ 1081.671144] 6*256kB [ 1081.675723] ? security_file_ioctl+0x83/0xb0 [ 1081.675735] SyS_ioctl+0x7f/0xb0 [ 1081.675745] ? do_vfs_ioctl+0xff0/0xff0 [ 1081.677697] (UME) [ 1081.681220] do_syscall_64+0x1d5/0x640 [ 1081.683427] 4*512kB [ 1081.687824] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1081.687832] RIP: 0033:0x465ef9 [ 1081.687836] RSP: 002b:00007fca24dbc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1081.687846] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1081.687851] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1081.687857] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1081.687862] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1081.687867] R13: 00007ffeaa280ccf R14: 00007fca24dbc300 R15: 0000000000022000 [ 1081.700697] Mem-Info: [ 1081.703789] (UME) [ 1081.712902] active_anon:12418 inactive_anon:41276 isolated_anon:0 [ 1081.712902] active_file:23 inactive_file:7 isolated_file:0 [ 1081.712902] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1081.712902] slab_reclaimable:12711 slab_unreclaimable:119632 [ 1081.712902] mapped:52225 shmem:41743 pagetables:680 bounce:0 [ 1081.712902] free:13947 free_pcp:132 free_cma:0 [ 1081.714864] 3*1024kB [ 1081.723850] Node 0 active_anon:48872kB inactive_anon:113936kB active_file:88kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121204kB dirty:0kB writeback:0kB shmem:115548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1081.729129] (UME) [ 1081.737477] Node 1 active_anon:800kB inactive_anon:51168kB active_file:4kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87696kB dirty:0kB writeback:0kB shmem:51424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1081.741446] 1*2048kB [ 1081.744981] Node 0 [ 1081.754079] (U) [ 1081.761032] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1081.762421] 0*4096kB [ 1081.771581] lowmem_reserve[]: [ 1081.777992] = 10960kB [ 1081.784492] 0 [ 1081.788673] Node 0 [ 1081.805677] 2717 [ 1081.815031] DMA32: [ 1081.857899] 2718 [ 1081.883240] 499*4kB [ 1081.915977] 2718 [ 1081.945198] (ME) [ 1081.953911] 2718 [ 1081.960450] 375*8kB [ 1081.964688] (ME) 186*16kB (ME) 46*32kB (ME) 30*64kB (UM) 36*128kB (UM) 4*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18020kB [ 1081.975960] Node 0 DMA32 free:18124kB min:36200kB low:45248kB high:54296kB active_anon:46824kB inactive_anon:113916kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:2208kB bounce:0kB free_pcp:592kB local_pcp:168kB free_cma:0kB [ 1081.988911] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1082.022416] lowmem_reserve[]: 0 0 0 0 0 [ 1082.031662] Node 1 Normal: 86*4kB (UM) 46*8kB (UM) 33*16kB (UM) 17*32kB (M) 31*64kB (M) 4*128kB (M) 2*256kB (M) 1*512kB (U) 7*1024kB (U) 7*2048kB (U) 0*4096kB = 26808kB [ 1082.043996] Node 0 [ 1082.061645] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1082.064754] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1082.072741] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1082.106260] lowmem_reserve[]: 0 0 0 0 0 [ 1082.106283] Node 1 Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:800kB inactive_anon:51168kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:512kB bounce:0kB free_pcp:212kB local_pcp:212kB free_cma:0kB [ 1082.106302] lowmem_reserve[]: [ 1082.115671] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1082.149219] 0 0 0 0 0 [ 1082.153492] Node 0 DMA: 2*4kB (ME) 3*8kB (UME) 1*16kB (E) 3*32kB (UME) 7*64kB (UME) 13*128kB (UME) 6*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 10960kB [ 1082.156289] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1082.178343] Node 0 DMA32: 499*4kB (ME) 387*8kB (UME) 188*16kB (UME) 47*32kB (UME) 30*64kB (UM) 36*128kB (UM) 4*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18180kB [ 1082.183205] 41773 total pagecache pages [ 1082.202900] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1082.204074] 0 pages in swap cache [ 1082.217153] Node 1 Normal: 86*4kB (UM) 46*8kB (UM) 33*16kB (UM) 17*32kB (M) 31*64kB (M) 4*128kB (M) 2*256kB (M) 1*512kB (U) 7*1024kB (U) 7*2048kB (U) 0*4096kB = 26808kB [ 1082.222560] Swap cache stats: add 0, delete 0, find 0/0 [ 1082.241529] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1082.243918] Free swap = 0kB [ 1082.253407] Total swap = 0kB [ 1082.255595] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1082.261723] 2097051 pages RAM [ 1082.264976] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1082.268099] 0 pages HighMem/MovableOnly [ 1082.268102] 363840 pages reserved [ 1082.268105] 0 pages cma reserved [ 1082.268113] Out of memory (oom_kill_allocating_task): Kill process 7967 (syz-fuzzer) score 0 or sacrifice child [ 1082.268176] Killed process 23007 (syz-executor.5) total-vm:84904kB, anon-rss:60kB, file-rss:4kB, shmem-rss:0kB [ 1082.285457] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1082.306871] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1082.327572] 41773 total pagecache pages [ 1082.340922] (null), order=0, oom_score_adj=0 [ 1082.348559] 0 pages in swap cache [ 1082.348696] syz-fuzzer cpuset=/ [ 1082.352012] Swap cache stats: add 0, delete 0, find 0/0 [ 1082.352018] Free swap = 0kB [ 1082.359058] mems_allowed=0-1 [ 1082.365234] Total swap = 0kB [ 1082.368630] CPU: 1 PID: 7978 Comm: syz-fuzzer Not tainted 4.14.222-syzkaller #0 [ 1082.370527] 2097051 pages RAM [ 1082.377234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1082.377238] Call Trace: [ 1082.377255] dump_stack+0x1b2/0x281 [ 1082.377267] dump_header+0x178/0x82f [ 1082.377276] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1082.377286] ? ___ratelimit+0x2cd/0x530 [ 1082.383841] 0 pages HighMem/MovableOnly [ 1082.389725] oom_kill_process.cold+0x10/0xb18 [ 1082.389743] out_of_memory+0xe3e/0x1190 [ 1082.389756] ? oom_killer_disable+0x1c0/0x1c0 [ 1082.392659] 363840 pages reserved [ 1082.396265] ? mutex_trylock+0x152/0x1a0 [ 1082.396275] __alloc_pages_nodemask+0x23e1/0x2720 [ 1082.396294] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1082.400075] 0 pages cma reserved [ 1082.405170] alloc_pages_current+0x155/0x260 [ 1082.405181] filemap_fault+0xea3/0x1980 [ 1082.454812] ext4_filemap_fault+0x84/0xb0 [ 1082.458956] __do_fault+0xfa/0x380 [ 1082.462487] __handle_mm_fault+0x2497/0x4620 [ 1082.466888] ? vm_insert_page+0x7c0/0x7c0 [ 1082.471026] ? __fget+0x225/0x360 [ 1082.474518] handle_mm_fault+0x391/0x860 [ 1082.478575] __do_page_fault+0x549/0xad0 [ 1082.482635] ? spurious_fault+0x640/0x640 [ 1082.486880] ? do_page_fault+0x60/0x500 [ 1082.490847] ? page_fault+0x2f/0x50 [ 1082.494462] page_fault+0x45/0x50 [ 1082.497903] RIP: 0001:0xfba9cb826a [ 1082.501427] RSP: 2b8008:000000c000353db8 EFLAGS: fba9cb826a [ 1082.512238] Mem-Info: [ 1082.520597] active_anon:12393 inactive_anon:41276 isolated_anon:0 [ 1082.520597] active_file:14 inactive_file:191 isolated_file:0 [ 1082.520597] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1082.520597] slab_reclaimable:12711 slab_unreclaimable:119579 [ 1082.520597] mapped:43575 shmem:41743 pagetables:643 bounce:0 [ 1082.520597] free:20993 free_pcp:292 free_cma:0 [ 1082.568868] Node 0 active_anon:48772kB inactive_anon:113936kB active_file:44kB inactive_file:3148kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88004kB dirty:0kB writeback:0kB shmem:115548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1082.622212] Node 1 active_anon:800kB inactive_anon:51168kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87696kB dirty:0kB writeback:0kB shmem:51424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1082.649557] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1082.676273] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1082.681399] Node 0 DMA32 free:218540kB min:36200kB low:45248kB high:54296kB active_anon:46732kB inactive_anon:113916kB active_file:296kB inactive_file:3728kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2060kB bounce:0kB free_pcp:1240kB local_pcp:620kB free_cma:0kB [ 1082.711064] lowmem_reserve[]: 0 0 0 0 0 [ 1082.715190] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1082.740943] lowmem_reserve[]: 0 0 0 0 0 [ 1082.745149] Node 1 Normal free:82408kB min:53696kB low:67120kB high:80544kB active_anon:792kB inactive_anon:51168kB active_file:4kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:512kB bounce:0kB free_pcp:756kB local_pcp:20kB free_cma:0kB [ 1082.773712] lowmem_reserve[]: 0 0 0 0 0 [ 1082.777878] Node 0 DMA: 72*4kB (UME) 3*8kB (UME) 1*16kB (E) 3*32kB (UME) 7*64kB (UME) 13*128kB (UME) 6*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 11240kB [ 1082.815005] Node 0 DMA32: 2203*4kB (UE) 3669*8kB (UME) 4712*16kB (UE) 1567*32kB (UME) 360*64kB (UM) 37*128kB (UM) 5*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 193780kB [ 1082.832744] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1082.845009] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1082.866680] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1082.875972] Node 1 Normal: 888*4kB (UM) 1554*8kB (UM) 1874*16kB (UM) 1195*32kB (UM) 574*64kB (UM) 43*128kB (UM) 5*256kB (UM) 14*512kB (U) 7*1024kB (U) 7*2048kB (U) 0*4096kB = 156400kB [ 1082.908587] systemd[1]: Stopped Journal Service. [ 1082.928928] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1082.944263] systemd[1]: Starting Journal Service... [ 1082.950468] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1082.962577] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1082.971936] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1082.981866] 43264 total pagecache pages [ 1082.982458] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1082.995928] 0 pages in swap cache [ 1083.006891] Swap cache stats: add 0, delete 0, find 0/0 [ 1083.012309] Free swap = 0kB [ 1083.015386] Total swap = 0kB [ 1083.018394] 2097051 pages RAM [ 1083.021488] 0 pages HighMem/MovableOnly [ 1083.023795] syz-executor.2 cpuset= [ 1083.025539] 363840 pages reserved [ 1083.025716] / [ 1083.029064] 0 pages cma reserved [ 1083.032506] mems_allowed=0-1 [ 1083.034196] Out of memory (oom_kill_allocating_task): Kill process 7978 (syz-fuzzer) score 0 or sacrifice child [ 1083.034252] Killed process 22949 (syz-executor.2) total-vm:84904kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1083.062081] CPU: 1 PID: 25213 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1083.069971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1083.079324] Call Trace: [ 1083.081917] dump_stack+0x1b2/0x281 [ 1083.085544] warn_alloc.cold+0x96/0x1cc [ 1083.089517] ? zone_watermark_ok_safe+0x220/0x220 [ 1083.094370] __alloc_pages_nodemask+0x2127/0x2720 [ 1083.099221] ? lock_acquire+0x170/0x3f0 [ 1083.103214] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1083.108063] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1083.113514] ? check_preemption_disabled+0x35/0x240 [ 1083.118567] ? __mutex_unlock_slowpath+0x75/0x770 [ 1083.123409] alloc_pages_current+0x155/0x260 [ 1083.127913] ion_page_pool_alloc+0x118/0x1b0 [ 1083.132320] ion_system_heap_allocate+0x133/0x8c0 [ 1083.137160] ? _raw_spin_unlock+0x29/0x40 [ 1083.141304] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1083.146229] ? ion_system_contig_heap_create+0x130/0x130 [ 1083.151678] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1083.156691] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1083.161534] ion_alloc+0x27a/0x810 [ 1083.165077] ? ion_dma_buf_release+0x40/0x40 [ 1083.169483] ? __might_fault+0x177/0x1b0 [ 1083.173546] ion_ioctl+0xea/0x1f0 [ 1083.176998] ? ion_query_heaps+0x360/0x360 [ 1083.181243] ? ion_query_heaps+0x360/0x360 [ 1083.185476] do_vfs_ioctl+0x75a/0xff0 [ 1083.189279] ? ioctl_preallocate+0x1a0/0x1a0 [ 1083.193685] ? lock_downgrade+0x740/0x740 [ 1083.197840] ? __fget+0x225/0x360 [ 1083.201292] ? do_vfs_ioctl+0xff0/0xff0 [ 1083.205274] ? security_file_ioctl+0x83/0xb0 [ 1083.209689] SyS_ioctl+0x7f/0xb0 [ 1083.213062] ? do_vfs_ioctl+0xff0/0xff0 [ 1083.217047] do_syscall_64+0x1d5/0x640 [ 1083.220954] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1083.226133] RIP: 0033:0x465ef9 [ 1083.229305] RSP: 002b:00007fca24dbc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1083.236995] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1083.244245] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1083.251496] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1083.258748] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1083.265997] R13: 00007ffeaa280ccf R14: 00007fca24dbc300 R15: 0000000000022000 [ 1083.274716] Mem-Info: [ 1083.277567] active_anon:12449 inactive_anon:41276 isolated_anon:12 [ 1083.277567] active_file:49 inactive_file:216 isolated_file:0 [ 1083.277567] unevictable:0 dirty:11 writeback:0 unstable:0 [ 1083.277567] slab_reclaimable:12687 slab_unreclaimable:119044 [ 1083.277567] mapped:43535 shmem:41743 pagetables:673 bounce:0 [ 1083.277567] free:27698 free_pcp:65 free_cma:0 [ 1083.290861] oom_reaper: reaped process 22949 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1083.322007] Node 0 active_anon:49032kB inactive_anon:113936kB active_file:180kB inactive_file:1164kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:86644kB dirty:36kB writeback:0kB shmem:115548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1083.351474] Node 1 active_anon:764kB inactive_anon:51168kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87696kB dirty:8kB writeback:0kB shmem:51424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1083.385234] Node 0 DMA free:11032kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1083.416466] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1083.430460] Node 0 DMA32 free:37688kB min:36200kB low:45248kB high:54296kB active_anon:46884kB inactive_anon:113916kB active_file:460kB inactive_file:56kB unevictable:0kB writepending:136kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2180kB bounce:0kB free_pcp:500kB local_pcp:344kB free_cma:0kB [ 1083.463919] lowmem_reserve[]: 0 0 0 0 0 [ 1083.468073] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1083.497942] lowmem_reserve[]: 0 0 0 0 0 [ 1083.502118] Node 1 Normal free:53220kB min:53696kB low:67120kB high:80544kB active_anon:764kB inactive_anon:51168kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:512kB bounce:0kB free_pcp:148kB local_pcp:148kB free_cma:0kB [ 1083.537144] lowmem_reserve[]: 0 0 0 0 0 [ 1083.541160] Node 0 DMA: 80*4kB (UME) 3*8kB (UME) 2*16kB (UE) 3*32kB (UME) 3*64kB (UME) 13*128kB (UME) 6*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 11032kB [ 1083.558141] Node 0 DMA32: 2427*4kB (UME) 484*8kB (UME) 174*16kB (UME) 934*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 46316kB [ 1083.572762] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1083.584272] Node 1 Normal: 14*4kB (UM) 3*8kB (UM) 953*16kB (UM) 1192*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53472kB [ 1083.599325] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1083.608725] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1083.619316] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1083.628790] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1083.637743] 42052 total pagecache pages [ 1083.641724] 0 pages in swap cache [ 1083.645228] Swap cache stats: add 0, delete 0, find 0/0 [ 1083.650939] Free swap = 0kB [ 1083.653953] Total swap = 0kB [ 1083.657263] 2097051 pages RAM [ 1083.660370] 0 pages HighMem/MovableOnly [ 1083.664523] 363840 pages reserved [ 1083.668105] 0 pages cma reserved [ 1083.678985] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1083.723695] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1083.737207] CPU: 0 PID: 7979 Comm: syz-fuzzer Not tainted 4.14.222-syzkaller #0 [ 1083.744690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1083.754042] Call Trace: [ 1083.756633] dump_stack+0x1b2/0x281 [ 1083.760254] dump_header+0x178/0x82f [ 1083.763963] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1083.769059] ? ___ratelimit+0x2cd/0x530 [ 1083.773033] oom_kill_process.cold+0x10/0xb18 [ 1083.777557] out_of_memory+0xe3e/0x1190 [ 1083.781571] ? oom_killer_disable+0x1c0/0x1c0 [ 1083.784923] syz-executor.2: [ 1083.786045] ? mutex_trylock+0x152/0x1a0 [ 1083.786052] page allocation failure: order:0 [ 1083.789050] __alloc_pages_nodemask+0x23e1/0x2720 [ 1083.793092] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1083.797492] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1083.797516] alloc_pages_current+0x155/0x260 [ 1083.797530] filemap_fault+0xea3/0x1980 [ 1083.808741] (null) [ 1083.809436] ext4_filemap_fault+0x84/0xb0 [ 1083.814244] syz-executor.2 cpuset= [ 1083.818638] __do_fault+0xfa/0x380 [ 1083.818647] __handle_mm_fault+0x2497/0x4620 [ 1083.818656] ? vm_insert_page+0x7c0/0x7c0 [ 1083.818664] ? __might_fault+0x177/0x1b0 [ 1083.818681] handle_mm_fault+0x391/0x860 [ 1083.822629] / [ 1083.824768] __do_page_fault+0x549/0xad0 [ 1083.834007] mems_allowed=0-1 [ 1083.835936] ? spurious_fault+0x640/0x640 [ 1083.835945] ? do_page_fault+0x60/0x500 [ 1083.835954] ? page_fault+0x2f/0x50 [ 1083.835961] page_fault+0x45/0x50 [ 1083.835969] RIP: 0001:0xfc5c9be06a [ 1083.835976] RSP: 2b8008:000000c00003bdb8 EFLAGS: fc5c9be06a [ 1083.880192] CPU: 1 PID: 25213 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1083.893789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1083.896484] Mem-Info: [ 1083.903135] Call Trace: [ 1083.905565] active_anon:12430 inactive_anon:41276 isolated_anon:0 [ 1083.905565] active_file:27 inactive_file:4 isolated_file:0 [ 1083.905565] unevictable:0 dirty:11 writeback:0 unstable:0 [ 1083.905565] slab_reclaimable:12687 slab_unreclaimable:118741 [ 1083.905565] mapped:34837 shmem:41743 pagetables:630 bounce:0 [ 1083.905565] free:13735 free_pcp:60 free_cma:0 [ 1083.908110] dump_stack+0x1b2/0x281 [ 1083.941285] Node 0 active_anon:48956kB inactive_anon:113936kB active_file:96kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69760kB dirty:36kB writeback:0kB shmem:115548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1083.944883] warn_alloc.cold+0x96/0x1cc [ 1083.944896] ? zone_watermark_ok_safe+0x220/0x220 [ 1083.972744] Node 1 active_anon:764kB inactive_anon:51168kB active_file:12kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69588kB dirty:8kB writeback:0kB shmem:51424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1083.976694] ? usleep_range+0x130/0x130 [ 1083.976703] ? try_to_free_pages+0x23f/0x6e0 [ 1083.976714] ? _find_next_bit+0xdb/0x100 [ 1083.981546] Node 0 [ 1084.008504] ? run_timer_softirq+0x5a0/0x5a0 [ 1084.008523] __alloc_pages_nodemask+0x2127/0x2720 [ 1084.012479] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1084.016869] ? lock_acquire+0x170/0x3f0 [ 1084.016884] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1084.020910] lowmem_reserve[]: [ 1084.023152] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1084.027537] 0 [ 1084.032355] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1084.058188] 2717 [ 1084.062133] ? alloc_pages_current+0x21c/0x260 [ 1084.066953] 2718 [ 1084.070033] alloc_pages_current+0x155/0x260 [ 1084.074497] 2718 [ 1084.076285] ion_page_pool_alloc+0x118/0x1b0 [ 1084.076297] ion_system_heap_allocate+0x133/0x8c0 [ 1084.081732] 2718 [ 1084.083780] ? _raw_spin_unlock+0x29/0x40 [ 1084.090381] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1084.094759] Node 0 [ 1084.096812] ? ion_system_contig_heap_create+0x130/0x130 [ 1084.096825] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1084.101212] DMA32 free:17620kB min:36200kB low:45248kB high:54296kB active_anon:46908kB inactive_anon:113916kB active_file:96kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2132kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1084.106024] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1084.106035] ion_alloc+0x27a/0x810 [ 1084.106050] ? ion_dma_buf_release+0x40/0x40 [ 1084.108079] lowmem_reserve[]: [ 1084.112209] ? __might_fault+0x177/0x1b0 [ 1084.117120] 0 [ 1084.119332] ion_ioctl+0xea/0x1f0 [ 1084.124750] 0 [ 1084.129748] ? ion_query_heaps+0x360/0x360 [ 1084.129760] ? ion_query_heaps+0x360/0x360 [ 1084.129770] do_vfs_ioctl+0x75a/0xff0 [ 1084.157965] 0 [ 1084.162782] ? ioctl_preallocate+0x1a0/0x1a0 [ 1084.166303] 0 [ 1084.170702] ? lock_downgrade+0x740/0x740 [ 1084.173777] 0 [ 1084.177823] ? __fget+0x225/0x360 [ 1084.177831] ? do_vfs_ioctl+0xff0/0xff0 [ 1084.177842] ? security_file_ioctl+0x83/0xb0 [ 1084.183178] SyS_ioctl+0x7f/0xb0 [ 1084.184981] Node 0 [ 1084.189185] ? do_vfs_ioctl+0xff0/0xff0 [ 1084.193399] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1084.197188] do_syscall_64+0x1d5/0x640 [ 1084.197208] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1084.198983] lowmem_reserve[]: [ 1084.203371] RIP: 0033:0x465ef9 [ 1084.205158] 0 [ 1084.209268] RSP: 002b:00007fca24dbc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1084.211049] 0 [ 1084.214479] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1084.218438] 0 [ 1084.222811] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1084.222817] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1084.226171] 0 [ 1084.228379] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1084.228386] R13: 00007ffeaa280ccf R14: 00007fca24dbc300 R15: 0000000000022000 [ 1084.232335] 0 [ 1084.500330] Node 1 Normal free:590792kB min:53696kB low:67120kB high:80544kB active_anon:864kB inactive_anon:51168kB active_file:2000kB inactive_file:5600kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:388kB bounce:0kB free_pcp:540kB local_pcp:72kB free_cma:0kB [ 1084.582564] lowmem_reserve[]: 0 0 0 0 0 [ 1084.586653] Node 0 DMA: 66*4kB (UME) 3*8kB (UME) 2*16kB (UE) 3*32kB (UME) 3*64kB (UME) 13*128kB (UME) 6*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 10976kB [ 1084.610170] Node 0 DMA32: 188*4kB (UME) 665*8kB (UME) 171*16kB (UME) 337*32kB (UME) 2305*64kB (UM) 256*128kB (U) 48*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 212680kB [ 1084.639616] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1084.654157] Node 1 Normal: 13*4kB (UM) 0*8kB 1*16kB (U) 4*32kB (U) 8028*64kB (UM) 2018*128kB (U) 592*256kB (U) 56*512kB (U) 18*1024kB (UM) 0*2048kB 0*4096kB = 970948kB [ 1084.677306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1084.684140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1084.696288] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1084.709492] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1084.728248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1084.736361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1084.743338] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1084.761132] device bridge_slave_1 left promiscuous mode [ 1084.768115] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1084.793303] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.804544] device bridge_slave_0 left promiscuous mode [ 1084.810498] 45068 total pagecache pages [ 1084.814598] 0 pages in swap cache [ 1084.819301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.827219] Swap cache stats: add 0, delete 0, find 0/0 [ 1084.840385] Free swap = 0kB [ 1084.843463] Total swap = 0kB [ 1084.847104] 2097051 pages RAM [ 1084.847310] device veth1_macvtap left promiscuous mode [ 1084.856302] 0 pages HighMem/MovableOnly [ 1084.860337] 363840 pages reserved [ 1084.863857] device veth0_macvtap left promiscuous mode [ 1084.869654] 0 pages cma reserved [ 1084.873083] Out of memory (oom_kill_allocating_task): Kill process 7979 (syz-fuzzer) score 0 or sacrifice child [ 1084.884376] device veth1_vlan left promiscuous mode 01:30:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x401, 0x0) setsockopt$rose(r1, 0x104, 0x3, &(0x7f0000000040)=0xd14, 0x4) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2000, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r3) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x7, 0x39, 0x1}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r2) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 01:30:09 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:30:09 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x8100, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) 01:30:09 executing program 4: setrlimit(0xb, &(0x7f0000000000)={0xffffffffffffffe1, 0x3}) capget(&(0x7f0000000100)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000140)={0x93, 0x1, 0x7, 0x80000001, 0x7, 0x3}) memfd_create(0x0, 0xa) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r1}, 0x10) setrlimit(0xe23314f60cc2b5c3, &(0x7f0000000080)={0x3, 0x9}) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0)='l2tp\x00', r0) setrlimit(0x1, &(0x7f0000000300)={0x2db27d67, 0xcea9}) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x4, 0x9, 0x6, 0xfd, 0x0, 0xfffffffffffffff7, 0x40101, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x2, @perf_config_ext={0x1ff, 0x1}, 0x2628, 0x2000002, 0x0, 0x2, 0xfff, 0x4, 0x3ff}, 0x0, 0x7, r0, 0xc) r2 = gettid() perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000280)={0x20080522, r2}, &(0x7f00000002c0)={0x1, 0x9, 0x400, 0x5, 0x0, 0x8}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x1, 0x20}) 01:30:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) [ 1084.890383] device veth0_vlan left promiscuous mode [ 1084.892153] systemd-journald[25225]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1084.895849] Killed process 22961 (syz-executor.4) total-vm:84904kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1084.979970] oom_reaper: reaped process 22961 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 01:30:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x40000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2, 0x0) 01:30:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x60, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:30:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x82100, 0x0) setsockopt$rose(0xffffffffffffffff, 0x104, 0x4, &(0x7f0000000000)=0x1, 0x4) [ 1085.322459] device hsr_slave_1 left promiscuous mode [ 1085.343599] device hsr_slave_0 left promiscuous mode [ 1085.389637] team0 (unregistering): Port device team_slave_1 removed [ 1085.420856] team0 (unregistering): Port device team_slave_0 removed [ 1085.447684] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1085.475723] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1085.571024] bond0 (unregistering): Released all slaves [ 1086.656147] systemd[1]: Started Journal Service. 01:30:11 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:30:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80000, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={0x0, 0x1, r2, 0xf315}) setsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000080)=0x101, 0x4) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x40, 0xd}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x20140, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x46, 0x33, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) 01:30:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:30:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x58, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) [ 1087.509658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1087.520525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1087.529989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1087.539964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1087.548984] device bridge_slave_1 left promiscuous mode [ 1087.558093] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.566416] device bridge_slave_0 left promiscuous mode [ 1087.572029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.587074] device veth1_macvtap left promiscuous mode [ 1087.592515] device veth0_macvtap left promiscuous mode [ 1087.602603] device veth1_vlan left promiscuous mode [ 1087.608835] device veth0_vlan left promiscuous mode [ 1087.747796] device hsr_slave_1 left promiscuous mode [ 1087.760230] device hsr_slave_0 left promiscuous mode [ 1087.778499] team0 (unregistering): Port device team_slave_1 removed [ 1087.789386] team0 (unregistering): Port device team_slave_0 removed [ 1087.799059] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1087.809598] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1087.844156] bond0 (unregistering): Released all slaves [ 1088.687680] IPVS: ftp: loaded support on port[0] = 21 [ 1088.841844] chnl_net:caif_netlink_parms(): no params data found [ 1088.979950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.987301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.994453] device bridge_slave_0 entered promiscuous mode [ 1089.001690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.008174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.015622] device bridge_slave_1 entered promiscuous mode [ 1089.052241] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1089.065738] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1089.101134] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1089.108612] team0: Port device team_slave_0 added [ 1089.117576] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1089.125769] team0: Port device team_slave_1 added [ 1089.151281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.157901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.185632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.205003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1089.211280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.248592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1089.265476] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1089.273306] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1089.296872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1089.303613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1089.315961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1089.323450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1089.332657] device bridge_slave_1 left promiscuous mode [ 1089.339764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.347976] device bridge_slave_0 left promiscuous mode [ 1089.353521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.364782] device veth1_macvtap left promiscuous mode [ 1089.370093] device veth0_macvtap left promiscuous mode [ 1089.376990] device veth1_vlan left promiscuous mode [ 1089.382054] device veth0_vlan left promiscuous mode [ 1089.484003] device hsr_slave_1 left promiscuous mode [ 1089.495966] device hsr_slave_0 left promiscuous mode [ 1089.511732] team0 (unregistering): Port device team_slave_1 removed [ 1089.522274] team0 (unregistering): Port device team_slave_0 removed [ 1089.531946] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1089.543140] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1089.577209] bond0 (unregistering): Released all slaves [ 1089.611148] device hsr_slave_0 entered promiscuous mode [ 1089.617256] device hsr_slave_1 entered promiscuous mode [ 1089.628523] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1089.636133] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1089.754980] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1089.798242] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1089.807670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1089.818749] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1089.830947] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1089.838841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1089.849642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1089.859641] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1089.869573] 8021q: adding VLAN 0 to HW filter on device team0 [ 1089.880571] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1089.891006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1089.899885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1089.911608] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.918036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.931594] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1089.939855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1089.950612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1089.959432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1089.970954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.977362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1089.990863] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1089.998206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1090.013555] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1090.021306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1090.038464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1090.049076] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1090.057231] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1090.069701] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1090.076747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1090.088980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1090.098873] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1090.110047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1090.118679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1090.124259] Bluetooth: hci1 command 0x0409 tx timeout [ 1090.132065] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1090.139776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1090.150984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1090.160979] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1090.171353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1090.190902] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1090.198663] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1090.210703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1090.218661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1090.232873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1090.317857] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1090.331071] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1090.340907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1090.353464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1090.402387] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1090.415540] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1090.422327] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1090.436905] IPVS: ftp: loaded support on port[0] = 21 [ 1090.450145] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1090.459498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1090.470321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1090.482964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1090.490965] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1090.499416] device veth0_vlan entered promiscuous mode [ 1090.522217] device veth1_vlan entered promiscuous mode [ 1090.529306] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1090.560174] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1090.583834] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1090.641808] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1090.671293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1090.678938] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1090.689246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1090.698724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1090.711092] device veth0_macvtap entered promiscuous mode [ 1090.719114] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1090.730981] chnl_net:caif_netlink_parms(): no params data found [ 1090.742176] device veth1_macvtap entered promiscuous mode [ 1090.749469] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1090.763090] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1090.779730] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1090.789261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1090.799386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.808738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1090.818997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.828215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1090.839431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.849942] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1090.857299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1090.865646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1090.872833] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1090.880130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1090.888193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1090.903873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1090.913828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.924680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1090.934430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.943523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1090.953301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.963602] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1090.970664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1090.978256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1090.986529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1091.025477] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.031907] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.040676] device bridge_slave_0 entered promiscuous mode [ 1091.048297] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.058511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.065900] device bridge_slave_1 entered promiscuous mode [ 1091.086261] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1091.098630] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1091.122028] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1091.129415] team0: Port device team_slave_0 added [ 1091.136208] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1091.143277] team0: Port device team_slave_1 added [ 1091.167009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1091.173266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1091.198700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1091.209922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1091.216876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1091.242960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1091.257304] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1091.264953] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 01:30:15 executing program 4: memfd_create(0x0, 0xa) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xff}]}, 0x24}}, 0x8004) 01:30:15 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x42}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000)=0x4, 0x8) 01:30:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x50, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) [ 1091.294399] device hsr_slave_0 entered promiscuous mode [ 1091.300169] device hsr_slave_1 entered promiscuous mode [ 1091.306543] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1091.313627] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1091.320468] Bluetooth: hci3 command 0x0409 tx timeout 01:30:15 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:30:15 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x18, 0x0, 0x80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff8001}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000d5}, 0x4004c040) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) 01:30:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x48, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:30:15 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x3, 0x8982) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x4, [@default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r2) 01:30:15 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x7, 0x42, 0x1}) [ 1091.550668] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1091.619502] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1091.626407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1091.637371] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1091.647251] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1091.654899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1091.661931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1091.671998] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1091.678794] 8021q: adding VLAN 0 to HW filter on device team0 [ 1091.688442] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1091.695998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1091.704398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1091.712087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.718499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1091.729213] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1091.736657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1091.744373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1091.752298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1091.760178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.766610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1091.786775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1091.795119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1091.810453] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1091.820765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1091.831269] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1091.838400] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1091.846395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1091.854564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1091.868380] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1091.875528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1091.888671] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1091.895192] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1091.901922] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1091.916779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1092.010842] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1092.022931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1092.071276] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1092.079388] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1092.086683] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1092.093014] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1092.105127] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1092.113709] device veth0_vlan entered promiscuous mode [ 1092.120130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1092.128494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1092.136792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1092.143791] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1092.161400] device veth1_vlan entered promiscuous mode [ 1092.168882] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1092.182463] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1092.198942] Bluetooth: hci1 command 0x041b tx timeout [ 1092.209873] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1092.223596] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1092.232117] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1092.242643] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1092.253162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1092.265211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1092.275567] device veth0_macvtap entered promiscuous mode [ 1092.281897] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1092.295548] device veth1_macvtap entered promiscuous mode [ 1092.301923] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1092.313417] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1092.325300] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1092.335184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1092.345727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.356063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1092.366703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.376707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1092.387318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.397329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1092.407587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.426493] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1092.433494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1092.494741] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1092.502050] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1092.524770] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1092.532616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1092.550530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1092.561425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.570785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1092.581854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.591441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1092.601918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.611205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1092.621082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.631533] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1092.638716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1092.646157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1092.654013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 01:30:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:30:17 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:30:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x40, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:30:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x6901, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x5, 0x42}) [ 1093.197211] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1093.203229] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1093.225795] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1093.229057] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1093.242842] CPU: 1 PID: 25814 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1093.250741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1093.260256] Call Trace: [ 1093.262848] dump_stack+0x1b2/0x281 [ 1093.266476] warn_alloc.cold+0x96/0x1cc [ 1093.270439] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1093.275440] ? zone_watermark_ok_safe+0x220/0x220 [ 1093.280289] __alloc_pages_nodemask+0x2127/0x2720 [ 1093.285227] ? retint_kernel+0x2d/0x2d [ 1093.289125] ? lock_acquire+0x170/0x3f0 [ 1093.293104] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1093.298470] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1093.303915] ? __mutex_unlock_slowpath+0x75/0x770 [ 1093.308751] ? alloc_pages_current+0x123/0x260 [ 1093.313332] alloc_pages_current+0x155/0x260 [ 1093.317747] ion_page_pool_alloc+0x118/0x1b0 [ 1093.322156] ion_system_heap_allocate+0x133/0x8c0 [ 1093.326990] ? ion_alloc+0x187/0x810 [ 1093.330692] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1093.336132] ? ion_system_contig_heap_create+0x130/0x130 [ 1093.341572] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1093.346598] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1093.351434] ion_alloc+0x204/0x810 [ 1093.354968] ? ion_dma_buf_release+0x40/0x40 [ 1093.359375] ? __might_fault+0x177/0x1b0 [ 1093.363433] ion_ioctl+0xea/0x1f0 [ 1093.366878] ? ion_query_heaps+0x360/0x360 [ 1093.371103] ? ion_query_heaps+0x360/0x360 [ 1093.375410] do_vfs_ioctl+0x75a/0xff0 [ 1093.379204] ? ioctl_preallocate+0x1a0/0x1a0 [ 1093.383609] ? lock_downgrade+0x740/0x740 [ 1093.387756] ? __fget+0x225/0x360 [ 1093.391198] ? do_vfs_ioctl+0xff0/0xff0 [ 1093.395160] ? security_file_ioctl+0x83/0xb0 [ 1093.399555] SyS_ioctl+0x7f/0xb0 [ 1093.402916] ? do_vfs_ioctl+0xff0/0xff0 [ 1093.406885] do_syscall_64+0x1d5/0x640 [ 1093.410768] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1093.415960] RIP: 0033:0x465ef9 [ 1093.419135] RSP: 002b:00007fab2d828188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1093.426836] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1093.434096] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1093.441351] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1093.448609] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1093.455873] R13: 00007ffde76bccff R14: 00007fab2d828300 R15: 0000000000022000 [ 1093.463147] CPU: 0 PID: 25817 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1093.465438] Bluetooth: hci3 command 0x041b tx timeout [ 1093.471035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1093.471040] Call Trace: [ 1093.471057] dump_stack+0x1b2/0x281 [ 1093.471075] warn_alloc.cold+0x96/0x1cc [ 1093.478477] warn_alloc_show_mem: 1 callbacks suppressed [ 1093.478480] Mem-Info: [ 1093.485599] ? zone_watermark_ok_safe+0x220/0x220 [ 1093.485619] __alloc_pages_nodemask+0x2127/0x2720 [ 1093.485629] ? __schedule+0x893/0x1de0 [ 1093.485645] ? lock_acquire+0x170/0x3f0 [ 1093.498008] active_anon:11669 inactive_anon:43309 isolated_anon:0 [ 1093.498008] active_file:1023 inactive_file:5467 isolated_file:0 [ 1093.498008] unevictable:0 dirty:9 writeback:25 unstable:0 [ 1093.498008] slab_reclaimable:12339 slab_unreclaimable:109981 [ 1093.498008] mapped:56458 shmem:43788 pagetables:704 bounce:0 [ 1093.498008] free:339286 free_pcp:189 free_cma:0 [ 1093.501138] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1093.501154] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1093.506809] Node 0 active_anon:46244kB inactive_anon:122076kB active_file:3420kB inactive_file:20996kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:154704kB dirty:24kB writeback:0kB shmem:123736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1093.508377] ? __mutex_unlock_slowpath+0x75/0x770 [ 1093.508392] alloc_pages_current+0x155/0x260 [ 1093.515407] Node 1 active_anon:432kB inactive_anon:51160kB active_file:672kB inactive_file:872kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:71128kB dirty:12kB writeback:100kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1093.517102] ion_page_pool_alloc+0x118/0x1b0 [ 1093.517113] ion_system_heap_allocate+0x133/0x8c0 [ 1093.534058] Node 0 [ 1093.555294] ? ion_alloc+0x187/0x810 [ 1093.555305] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1093.555315] ? ion_system_contig_heap_create+0x130/0x130 [ 1093.555324] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1093.555334] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1093.555345] ion_alloc+0x204/0x810 [ 1093.555357] ? ion_dma_buf_release+0x40/0x40 [ 1093.555369] ? __might_fault+0x177/0x1b0 [ 1093.555382] ion_ioctl+0xea/0x1f0 [ 1093.555391] ? ion_query_heaps+0x360/0x360 [ 1093.555403] ? ion_query_heaps+0x360/0x360 [ 1093.555413] do_vfs_ioctl+0x75a/0xff0 [ 1093.555423] ? ioctl_preallocate+0x1a0/0x1a0 [ 1093.555433] ? lock_downgrade+0x740/0x740 [ 1093.555444] ? __fget+0x225/0x360 [ 1093.555452] ? do_vfs_ioctl+0xff0/0xff0 [ 1093.555462] ? security_file_ioctl+0x83/0xb0 [ 1093.555469] SyS_ioctl+0x7f/0xb0 [ 1093.555476] ? do_vfs_ioctl+0xff0/0xff0 [ 1093.555488] do_syscall_64+0x1d5/0x640 [ 1093.555503] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1093.555510] RIP: 0033:0x465ef9 [ 1093.555514] RSP: 002b:00007f6730f69188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1093.555523] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1093.555527] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1093.555531] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1093.555537] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1093.555542] R13: 00007fffdcef025f R14: 00007f6730f69300 R15: 0000000000022000 [ 1093.796046] DMA free:11096kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1093.829260] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1093.834396] Node 0 DMA32 free:1330792kB min:36200kB low:45248kB high:54296kB active_anon:46244kB inactive_anon:122056kB active_file:3824kB inactive_file:21704kB unevictable:0kB writepending:324kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2532kB bounce:0kB free_pcp:492kB local_pcp:164kB free_cma:0kB [ 1093.866561] lowmem_reserve[]: 0 0 0 0 0 [ 1093.877406] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1093.903332] lowmem_reserve[]: 0 0 0 0 0 [ 1093.913933] Node 1 Normal free:130768kB min:53696kB low:67120kB high:80544kB active_anon:432kB inactive_anon:51160kB active_file:924kB inactive_file:1232kB unevictable:0kB writepending:112kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:284kB bounce:0kB free_pcp:612kB local_pcp:612kB free_cma:0kB [ 1093.983767] lowmem_reserve[]: 0 0 0 0 0 [ 1093.987797] Node 0 DMA: 12*4kB (UM) 19*8kB (UM) 25*16kB (U) 16*32kB (UM) 19*64kB (UM) 8*128kB (UM) 5*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 1*4096kB (M) = 11288kB [ 1094.023758] Node 0 DMA32: 327*4kB (E) 163*8kB (UME) 8005*16kB (UME) 10387*32kB (UME) 7872*64kB (UME) 2539*128kB (UME) 530*256kB (UM) 36*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 1445988kB [ 1094.053787] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1094.073937] Node 1 Normal: 500*4kB (UM) 804*8kB (UM) 693*16kB (UM) 398*32kB (UM) 3742*64kB (UM) 218*128kB (UM) 93*256kB (UM) 48*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 348032kB [ 1094.104194] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1094.113064] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1094.143960] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1094.152833] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1094.183741] 50368 total pagecache pages [ 1094.187746] 0 pages in swap cache [ 1094.191193] Swap cache stats: add 0, delete 0, find 0/0 [ 1094.208054] Free swap = 0kB [ 1094.215545] Total swap = 0kB [ 1094.220830] 2097051 pages RAM [ 1094.233092] 0 pages HighMem/MovableOnly [ 1094.242189] 363840 pages reserved [ 1094.252785] 0 pages cma reserved [ 1094.273714] Bluetooth: hci1 command 0x040f tx timeout [ 1094.319138] IPVS: ftp: loaded support on port[0] = 21 [ 1094.615735] chnl_net:caif_netlink_parms(): no params data found [ 1094.885152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.891823] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.899392] device bridge_slave_0 entered promiscuous mode [ 1094.907427] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.915225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.922489] device bridge_slave_1 entered promiscuous mode [ 1094.953247] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1094.967270] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1095.001598] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1095.010621] team0: Port device team_slave_0 added [ 1095.019895] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1095.029201] team0: Port device team_slave_1 added [ 1095.059971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1095.068017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1095.098917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1095.110951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1095.121901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1095.151693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1095.167376] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1095.175150] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1095.215690] device hsr_slave_0 entered promiscuous mode [ 1095.221735] device hsr_slave_1 entered promiscuous mode [ 1095.232615] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1095.247847] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1095.430549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.436979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1095.443720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.450094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1095.504646] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1095.510743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1095.525585] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1095.539350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1095.547671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.564256] Bluetooth: hci3 command 0x040f tx timeout [ 1095.569664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.582956] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1095.600411] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1095.618535] 8021q: adding VLAN 0 to HW filter on device team0 [ 1095.657813] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1095.667828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1095.684375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1095.703921] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.710294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1095.723775] Bluetooth: hci4 command 0x0409 tx timeout [ 1095.732929] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1095.757074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1095.766055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1095.776906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.783267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1095.795774] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1095.812139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1095.822230] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1095.833850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1095.850163] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1095.857526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1095.870484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1095.881614] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1095.893081] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1095.901458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1095.913752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1095.928943] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1095.936374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1095.948925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1095.960953] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1095.973384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1095.981862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1095.997617] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1096.009733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1096.050708] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1096.074718] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1096.093376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1096.101519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1096.131561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1096.353828] Bluetooth: hci1 command 0x0419 tx timeout [ 1096.612514] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1096.626805] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1096.631584] CPU: 0 PID: 7967 Comm: syz-fuzzer Not tainted 4.14.222-syzkaller #0 [ 1096.639025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1096.648367] Call Trace: [ 1096.650939] dump_stack+0x1b2/0x281 [ 1096.654552] dump_header+0x178/0x82f [ 1096.658259] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1096.663345] ? ___ratelimit+0x2cd/0x530 [ 1096.667302] oom_kill_process.cold+0x10/0xb18 [ 1096.671781] out_of_memory+0xe3e/0x1190 [ 1096.675751] ? oom_killer_disable+0x1c0/0x1c0 [ 1096.680243] ? mutex_trylock+0x152/0x1a0 [ 1096.684306] __alloc_pages_nodemask+0x23e1/0x2720 [ 1096.689179] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1096.694023] alloc_pages_current+0x155/0x260 [ 1096.698427] filemap_fault+0xea3/0x1980 [ 1096.702524] ext4_filemap_fault+0x84/0xb0 [ 1096.706668] __do_fault+0xfa/0x380 [ 1096.710210] __handle_mm_fault+0x2497/0x4620 [ 1096.714606] ? vm_insert_page+0x7c0/0x7c0 [ 1096.718748] ? lock_downgrade+0x740/0x740 [ 1096.722897] handle_mm_fault+0x391/0x860 [ 1096.726954] __do_page_fault+0x549/0xad0 [ 1096.731026] ? spurious_fault+0x640/0x640 [ 1096.735160] ? do_page_fault+0x60/0x500 [ 1096.739141] ? page_fault+0x2f/0x50 [ 1096.742765] page_fault+0x45/0x50 [ 1096.746209] RIP: 0000:0x92fd48 [ 1096.749447] RSP: 2e000:000000c00003df00 EFLAGS: 0043b6a0 [ 1096.755102] Mem-Info: [ 1096.762956] active_anon:11861 inactive_anon:43312 isolated_anon:0 [ 1096.762956] active_file:20 inactive_file:0 isolated_file:0 [ 1096.762956] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1096.762956] slab_reclaimable:12250 slab_unreclaimable:110521 [ 1096.762956] mapped:52681 shmem:43792 pagetables:732 bounce:0 [ 1096.762956] free:25055 free_pcp:62 free_cma:0 [ 1096.800469] Node 0 active_anon:47004kB inactive_anon:122088kB active_file:72kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141136kB dirty:0kB writeback:0kB shmem:123752kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1096.830485] Node 1 active_anon:440kB inactive_anon:51160kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69588kB dirty:0kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1096.869183] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1096.900272] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1096.905368] Node 0 DMA32 free:35664kB min:36200kB low:45248kB high:54296kB active_anon:47004kB inactive_anon:122068kB active_file:48kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2640kB bounce:0kB free_pcp:248kB local_pcp:128kB free_cma:0kB [ 1096.938561] lowmem_reserve[]: 0 0 0 0 0 [ 1096.942565] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1096.970502] lowmem_reserve[]: 0 0 0 0 0 [ 1096.974536] Node 1 Normal free:53500kB min:53696kB low:67120kB high:80544kB active_anon:440kB inactive_anon:51160kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:288kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1097.006330] lowmem_reserve[]: 0 0 0 0 0 [ 1097.010342] Node 0 DMA: 2*4kB (UM) 1*8kB (M) 20*16kB (U) 15*32kB (UM) 18*64kB (UM) 9*128kB (UM) 5*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 1*4096kB (M) = 11056kB [ 1097.028257] Node 0 DMA32: 946*4kB (UME) 383*8kB (UME) 211*16kB (UME) 45*32kB (ME) 33*64kB (UME) 9*128kB (UME) 7*256kB (UM) 37*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 35664kB [ 1097.046210] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1097.057017] Node 1 Normal: 77*4kB (UM) 45*8kB (M) 32*16kB (M) 23*32kB (UM) 52*64kB (UM) 15*128kB (UM) 49*256kB (UM) 60*512kB (UM) 3*1024kB (M) 0*2048kB 0*4096kB = 53500kB [ 1097.072521] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1097.081401] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1097.090034] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1097.098904] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1097.107520] 43824 total pagecache pages [ 1097.116303] 0 pages in swap cache [ 1097.119743] Swap cache stats: add 0, delete 0, find 0/0 [ 1097.125142] Free swap = 0kB [ 1097.128149] Total swap = 0kB [ 1097.131151] 2097051 pages RAM [ 1097.134277] 0 pages HighMem/MovableOnly [ 1097.138236] 363840 pages reserved [ 1097.141673] 0 pages cma reserved [ 1097.145069] Out of memory (oom_kill_allocating_task): Kill process 7967 (syz-fuzzer) score 0 or sacrifice child [ 1097.155975] Killed process 25300 (syz-executor.2) total-vm:84904kB, anon-rss:64kB, file-rss:4kB, shmem-rss:0kB [ 1097.178842] oom_reaper: reaped process 25300 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1097.189659] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 1097.207941] ion_system_heap cpuset=/ mems_allowed=0-1 [ 1097.213159] CPU: 0 PID: 4243 Comm: ion_system_heap Not tainted 4.14.222-syzkaller #0 [ 1097.221028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1097.230388] Call Trace: [ 1097.232958] dump_stack+0x1b2/0x281 [ 1097.236569] dump_header+0x178/0x82f [ 1097.240264] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1097.245349] ? ___ratelimit+0x2cd/0x530 [ 1097.249312] oom_kill_process.cold+0x10/0xb18 [ 1097.253788] ? lock_downgrade+0x740/0x740 [ 1097.257916] out_of_memory+0x2dc/0x1190 [ 1097.261868] ? oom_killer_disable+0x1c0/0x1c0 [ 1097.266348] ? mutex_trylock+0x152/0x1a0 [ 1097.270387] __alloc_pages_nodemask+0x23e1/0x2720 [ 1097.275387] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1097.280213] ? ion_heap_sglist_zero+0x165/0x220 [ 1097.284862] ? cache_grow_begin+0x41/0x630 [ 1097.289075] cache_grow_begin+0x91/0x630 [ 1097.293114] ? cache_grow_begin+0x91/0x630 [ 1097.297325] fallback_alloc+0x207/0x2c0 [ 1097.301281] kmem_cache_alloc_node_trace+0xed/0x400 [ 1097.306277] __get_vm_area_node+0xed/0x340 [ 1097.310487] vmap+0xd5/0x290 [ 1097.313484] ? ion_heap_clear_pages+0x23/0x70 [ 1097.317955] ? vunmap+0x50/0x50 [ 1097.321208] ? __vunmap+0x21c/0x300 [ 1097.324813] ion_heap_clear_pages+0x23/0x70 [ 1097.329113] ion_heap_sglist_zero+0x165/0x220 [ 1097.333586] ? ion_heap_clear_pages+0x70/0x70 [ 1097.338058] ? finish_task_switch+0x178/0x610 [ 1097.342557] ? ion_heap_deferred_free+0x222/0x470 [ 1097.347378] ion_system_heap_free+0x1d0/0x240 [ 1097.351864] ion_buffer_destroy+0x132/0x190 [ 1097.356163] ion_heap_deferred_free+0x22a/0x470 [ 1097.360809] ? __schedule+0x877/0x1de0 [ 1097.364674] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1097.369319] ? wait_woken+0x230/0x230 [ 1097.373111] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1097.378192] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1097.382836] kthread+0x30d/0x420 [ 1097.386179] ? kthread_create_on_node+0xd0/0xd0 [ 1097.390824] ret_from_fork+0x24/0x30 [ 1097.406223] Mem-Info: [ 1097.408664] active_anon:11861 inactive_anon:43312 isolated_anon:0 [ 1097.408664] active_file:18 inactive_file:14 isolated_file:0 [ 1097.408664] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1097.408664] slab_reclaimable:12244 slab_unreclaimable:110530 [ 1097.408664] mapped:52661 shmem:43792 pagetables:732 bounce:0 [ 1097.408664] free:25053 free_pcp:102 free_cma:0 [ 1097.446559] Node 0 active_anon:47004kB inactive_anon:122088kB active_file:68kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141056kB dirty:0kB writeback:0kB shmem:123752kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1097.476822] Node 1 active_anon:440kB inactive_anon:51160kB active_file:0kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69588kB dirty:0kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1097.512329] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1097.543858] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1097.548904] Node 0 DMA32 free:35648kB min:36200kB low:45248kB high:54296kB active_anon:46908kB inactive_anon:122068kB active_file:92kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2460kB bounce:0kB free_pcp:528kB local_pcp:312kB free_cma:0kB [ 1097.578518] lowmem_reserve[]: 0 0 0 0 0 [ 1097.582512] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1097.608246] lowmem_reserve[]: 0 0 0 0 0 [ 1097.612235] Node 1 Normal free:53500kB min:53696kB low:67120kB high:80544kB active_anon:436kB inactive_anon:51160kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:288kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1097.634508] Bluetooth: hci3 command 0x0419 tx timeout [ 1097.640838] lowmem_reserve[]: 0 0 0 0 0 [ 1097.649962] Node 0 DMA: 2*4kB (UM) 1*8kB (M) 20*16kB (U) 15*32kB (UM) 18*64kB (UM) 9*128kB (UM) 5*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 1*4096kB (M) = 11056kB [ 1097.667448] Node 0 DMA32: 946*4kB (UME) 382*8kB (ME) 210*16kB (ME) 45*32kB (ME) 33*64kB (UME) 9*128kB (UME) 7*256kB (UM) 37*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 35640kB [ 1097.693715] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1097.708851] Node 1 Normal: 77*4kB (UM) 45*8kB (M) 32*16kB (M) 23*32kB (UM) 52*64kB (UM) 15*128kB (UM) 49*256kB (UM) 60*512kB (UM) 3*1024kB (M) 0*2048kB 0*4096kB = 53500kB [ 1097.729124] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1097.748542] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1097.759460] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1097.770394] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1097.779177] 43824 total pagecache pages [ 1097.783142] 0 pages in swap cache [ 1097.789053] Swap cache stats: add 0, delete 0, find 0/0 [ 1097.795104] Free swap = 0kB [ 1097.801776] Total swap = 0kB [ 1097.803353] Bluetooth: hci4 command 0x041b tx timeout [ 1097.808362] 2097051 pages RAM [ 1097.813132] 0 pages HighMem/MovableOnly [ 1097.817169] 363840 pages reserved [ 1097.820642] 0 pages cma reserved [ 1097.828407] Out of memory: Kill process 25813 (syz-executor.2) score 1004 or sacrifice child [ 1097.837127] Killed process 25817 (syz-executor.2) total-vm:93232kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 1097.866656] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1097.892877] systemd-journal cpuset=/ mems_allowed=0-1 [ 1097.900205] CPU: 0 PID: 25225 Comm: systemd-journal Not tainted 4.14.222-syzkaller #0 [ 1097.908180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1097.917540] Call Trace: [ 1097.920136] dump_stack+0x1b2/0x281 [ 1097.923785] dump_header+0x178/0x82f [ 1097.927494] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1097.932592] ? ___ratelimit+0x2cd/0x530 [ 1097.936560] oom_kill_process.cold+0x10/0xb18 [ 1097.941055] out_of_memory+0xe3e/0x1190 [ 1097.945026] ? oom_killer_disable+0x1c0/0x1c0 [ 1097.949511] ? mutex_trylock+0x152/0x1a0 [ 1097.953566] __alloc_pages_nodemask+0x23e1/0x2720 [ 1097.958423] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1097.963274] alloc_pages_current+0x155/0x260 [ 1097.967675] filemap_fault+0xea3/0x1980 [ 1097.971703] ext4_filemap_fault+0x84/0xb0 [ 1097.975843] __do_fault+0xfa/0x380 [ 1097.979368] __handle_mm_fault+0x2497/0x4620 [ 1097.983363] syz-executor.2: page allocation failure: order:0 [ 1097.983759] ? vm_insert_page+0x7c0/0x7c0 [ 1097.983770] ? __fsnotify_inode_delete+0x20/0x20 [ 1097.989652] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1097.993783] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1097.993799] handle_mm_fault+0x391/0x860 [ 1097.993811] __do_page_fault+0x549/0xad0 [ 1097.993823] ? spurious_fault+0x640/0x640 [ 1097.993830] ? do_page_fault+0x60/0x500 [ 1097.993840] ? page_fault+0x2f/0x50 [ 1097.993847] page_fault+0x45/0x50 [ 1097.993855] RIP: 8a30c08:0x55cc6a9de958 [ 1098.003398] (null) [ 1098.005679] RSP: 8a30cb0:0000000000000000 EFLAGS: 7ffd08a2eab0 [ 1098.012320] syz-executor.2 cpuset= [ 1098.028034] Mem-Info: [ 1098.032076] / [ 1098.032227] active_anon:11836 inactive_anon:43312 isolated_anon:0 [ 1098.032227] active_file:15 inactive_file:17 isolated_file:0 [ 1098.032227] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1098.032227] slab_reclaimable:12243 slab_unreclaimable:110575 [ 1098.032227] mapped:52661 shmem:43792 pagetables:687 bounce:0 [ 1098.032227] free:13956 free_pcp:143 free_cma:0 [ 1098.036255] mems_allowed=0-1 [ 1098.054677] Node 0 active_anon:46908kB inactive_anon:122088kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141056kB dirty:0kB writeback:0kB shmem:123752kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1098.058568] CPU: 1 PID: 25817 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1098.059224] Node 1 active_anon:436kB inactive_anon:51160kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69588kB dirty:0kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1098.092416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1098.092420] Call Trace: [ 1098.092439] dump_stack+0x1b2/0x281 [ 1098.092452] warn_alloc.cold+0x96/0x1cc [ 1098.092463] ? zone_watermark_ok_safe+0x220/0x220 [ 1098.092473] ? usleep_range+0x130/0x130 [ 1098.095569] Node 0 [ 1098.123988] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1098.124001] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1098.124011] ? run_timer_softirq+0x5a0/0x5a0 [ 1098.131888] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1098.158755] __alloc_pages_nodemask+0x2127/0x2720 [ 1098.158773] ? lock_acquire+0x170/0x3f0 [ 1098.168113] lowmem_reserve[]: [ 1098.170690] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1098.174382] 0 [ 1098.178325] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1098.183132] 2717 [ 1098.187095] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1098.187114] alloc_pages_current+0x155/0x260 [ 1098.189315] 2718 [ 1098.194400] ion_page_pool_alloc+0x118/0x1b0 [ 1098.194410] ion_system_heap_allocate+0x133/0x8c0 [ 1098.194420] ? ion_alloc+0x187/0x810 [ 1098.199925] 2718 [ 1098.204312] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1098.204323] ? ion_system_contig_heap_create+0x130/0x130 [ 1098.204335] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1098.229908] 2718 [ 1098.234722] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1098.234733] ion_alloc+0x204/0x810 [ 1098.234748] ? ion_dma_buf_release+0x40/0x40 [ 1098.241776] ? __might_fault+0x177/0x1b0 [ 1098.246600] Node 0 [ 1098.248373] ion_ioctl+0xea/0x1f0 [ 1098.252853] DMA32 free:18008kB min:36200kB low:45248kB high:54296kB active_anon:46908kB inactive_anon:122068kB active_file:56kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2460kB bounce:0kB free_pcp:448kB local_pcp:312kB free_cma:0kB [ 1098.254897] ? ion_query_heaps+0x360/0x360 [ 1098.254908] ? ion_query_heaps+0x360/0x360 [ 1098.254918] do_vfs_ioctl+0x75a/0xff0 [ 1098.260349] lowmem_reserve[]: [ 1098.264741] ? ioctl_preallocate+0x1a0/0x1a0 [ 1098.264748] ? lock_downgrade+0x740/0x740 [ 1098.264765] ? __fget+0x225/0x360 [ 1098.266800] 0 [ 1098.271189] ? do_vfs_ioctl+0xff0/0xff0 [ 1098.276014] 0 [ 1098.279696] ? security_file_ioctl+0x83/0xb0 [ 1098.281986] 0 [ 1098.287415] SyS_ioctl+0x7f/0xb0 [ 1098.287423] ? do_vfs_ioctl+0xff0/0xff0 [ 1098.287434] do_syscall_64+0x1d5/0x640 [ 1098.292850] 0 [ 1098.297851] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1098.297859] RIP: 0033:0x465ef9 [ 1098.299894] 0 [ 1098.304709] RSP: 002b:00007f6730f69188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1098.304719] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1098.304724] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1098.304731] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1098.312627] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1098.316676] Node 0 [ 1098.318874] R13: 00007fffdcef025f R14: 00007f6730f69300 R15: 0000000000022000 [ 1098.323718] warn_alloc_show_mem: 1 callbacks suppressed [ 1098.323721] Mem-Info: [ 1098.362801] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1098.366696] active_anon:11836 inactive_anon:43312 isolated_anon:0 [ 1098.366696] active_file:15 inactive_file:17 isolated_file:0 [ 1098.366696] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1098.366696] slab_reclaimable:12243 slab_unreclaimable:110575 [ 1098.366696] mapped:52661 shmem:43792 pagetables:687 bounce:0 [ 1098.366696] free:13956 free_pcp:141 free_cma:0 [ 1098.371744] lowmem_reserve[]: [ 1098.374826] Node 0 active_anon:46908kB inactive_anon:122088kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141056kB dirty:0kB writeback:0kB shmem:123752kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1098.374842] Node 1 active_anon:436kB inactive_anon:51160kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69588kB dirty:0kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1098.374845] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1098.374864] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1098.387647] 0 [ 1098.400041] 0 [ 1098.405894] Node 0 [ 1098.416182] 0 [ 1098.423105] DMA32 free:18008kB min:36200kB low:45248kB high:54296kB active_anon:46908kB inactive_anon:122068kB active_file:56kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2460kB bounce:0kB free_pcp:440kB local_pcp:128kB free_cma:0kB [ 1098.436669] 0 [ 1098.441229] lowmem_reserve[]: [ 1098.456727] 0 [ 1098.464779] 0 [ 1098.497108] 0 [ 1098.530059] Node 1 [ 1098.543654] 0 [ 1098.560859] Normal free:26840kB min:53696kB low:67120kB high:80544kB active_anon:436kB inactive_anon:51160kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:288kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 1098.599276] 0 [ 1098.615576] lowmem_reserve[]: [ 1098.626123] 0 [ 1098.659381] 0 [ 1098.700831] 0 0 0 0 [ 1098.706624] Node 0 DMA: 2*4kB (UM) 1*8kB (M) 15*16kB (U) 15*32kB (UM) 18*64kB (UM) 9*128kB (UM) 5*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 1*4096kB (M) = 10976kB [ 1098.710128] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1098.728076] Node 0 DMA32: 946*4kB (UME) 382*8kB (ME) 210*16kB (ME) 46*32kB (UME) 33*64kB (UME) 9*128kB (UME) 4*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 18008kB [ 1098.759890] lowmem_reserve[]: [ 1098.775696] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1098.779045] 0 [ 1098.792235] Node 1 [ 1098.792386] 0 [ 1098.798902] Normal: 76*4kB (M) 45*8kB (M) 32*16kB (M) 22*32kB (M) 52*64kB (UM) 15*128kB (UM) 9*256kB (UM) 28*512kB (UM) 3*1024kB (M) 0*2048kB 0*4096kB = 26840kB [ 1098.806594] 0 0 0 [ 1098.821281] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1098.822741] Node 1 [ 1098.831789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1098.831795] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1098.831801] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1098.831804] 43824 total pagecache pages [ 1098.831813] 0 pages in swap cache [ 1098.831817] Swap cache stats: add 0, delete 0, find 0/0 [ 1098.831820] Free swap = 0kB [ 1098.831822] Total swap = 0kB [ 1098.831828] 2097051 pages RAM [ 1098.831831] 0 pages HighMem/MovableOnly [ 1098.831836] 363840 pages reserved [ 1098.843317] Normal free:26840kB min:53696kB low:67120kB high:80544kB active_anon:436kB inactive_anon:51160kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:288kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 1098.856644] 0 pages cma reserved [ 1098.868949] lowmem_reserve[]: [ 1098.876564] Out of memory (oom_kill_allocating_task): Kill process 25225 (systemd-journal) score 0 or sacrifice child [ 1098.889765] 0 [ 1098.928275] Killed process 25225 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1680kB [ 1098.945965] 0 0 0 0 [ 1098.949644] Node 0 DMA: 2*4kB (UM) 1*8kB (M) 15*16kB (U) 15*32kB (UM) 18*64kB (UM) 9*128kB (UM) 5*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 1*4096kB (M) = 10976kB [ 1098.975239] Node 0 DMA32: 946*4kB (UME) 386*8kB (UME) 210*16kB (ME) 46*32kB (UME) 33*64kB (UME) 9*128kB (UME) 4*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 18040kB [ 1099.001015] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1099.028349] oom_reaper: reaped process 25817 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1099.040772] Node 1 Normal: 76*4kB (UM) 45*8kB (UM) 32*16kB (UM) 22*32kB (UM) 50*64kB (M) 13*128kB (M) 7*256kB (M) 28*512kB (UM) 4*1024kB (M) 0*2048kB 0*4096kB = 26968kB [ 1099.058214] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1099.075484] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1099.080266] CPU: 1 PID: 7978 Comm: syz-fuzzer Not tainted 4.14.222-syzkaller #0 [ 1099.087147] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1099.087700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1099.096554] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1099.105847] Call Trace: [ 1099.105866] dump_stack+0x1b2/0x281 [ 1099.105878] dump_header+0x178/0x82f [ 1099.114438] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1099.116993] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1099.120590] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1099.124298] ? ___ratelimit+0x2cd/0x530 [ 1099.124309] oom_kill_process.cold+0x10/0xb18 [ 1099.124327] out_of_memory+0xe3e/0x1190 [ 1099.133156] 43824 total pagecache pages [ 1099.138230] ? oom_killer_disable+0x1c0/0x1c0 [ 1099.146793] 0 pages in swap cache [ 1099.150731] ? mutex_trylock+0x152/0x1a0 [ 1099.155209] Swap cache stats: add 0, delete 0, find 0/0 [ 1099.159155] __alloc_pages_nodemask+0x23e1/0x2720 [ 1099.163115] Free swap = 0kB [ 1099.167588] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1099.171013] Total swap = 0kB [ 1099.175064] alloc_pages_current+0x155/0x260 [ 1099.175076] filemap_fault+0xea3/0x1980 [ 1099.180408] 2097051 pages RAM [ 1099.185240] ext4_filemap_fault+0x84/0xb0 [ 1099.185252] __do_fault+0xfa/0x380 [ 1099.188242] 0 pages HighMem/MovableOnly [ 1099.193072] __handle_mm_fault+0x2497/0x4620 [ 1099.196080] 363840 pages reserved [ 1099.200454] ? vm_insert_page+0x7c0/0x7c0 [ 1099.204424] 0 pages cma reserved [ 1099.207505] handle_mm_fault+0x391/0x860 [ 1099.238445] __do_page_fault+0x549/0xad0 [ 1099.242501] ? spurious_fault+0x640/0x640 [ 1099.246639] ? do_page_fault+0x60/0x500 [ 1099.250602] ? page_fault+0x2f/0x50 [ 1099.254217] page_fault+0x45/0x50 [ 1099.257659] RIP: 1980:0x4 [ 1099.260403] RSP: 0000:000000c000353f28 EFLAGS: 00000003 [ 1099.273452] Mem-Info: [ 1099.281259] active_anon:11702 inactive_anon:43312 isolated_anon:0 [ 1099.281259] active_file:0 inactive_file:32 isolated_file:0 [ 1099.281259] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1099.281259] slab_reclaimable:12218 slab_unreclaimable:110519 [ 1099.281259] mapped:43535 shmem:43792 pagetables:687 bounce:0 [ 1099.281259] free:34163 free_pcp:206 free_cma:0 [ 1099.363180] Node 0 active_anon:46372kB inactive_anon:122088kB active_file:24kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104552kB dirty:0kB writeback:0kB shmem:123752kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1099.403221] Node 1 active_anon:436kB inactive_anon:51160kB active_file:176kB inactive_file:4636kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72688kB dirty:100kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1099.453248] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1099.503205] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1099.513148] Node 0 DMA32 free:129920kB min:36200kB low:45248kB high:54296kB active_anon:46772kB inactive_anon:122068kB active_file:124kB inactive_file:1196kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2460kB bounce:0kB free_pcp:1296kB local_pcp:620kB free_cma:0kB [ 1099.549082] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1099.558379] lowmem_reserve[]: 0 0 0 0 0 [ 1099.563122] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1099.588955] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1099.620931] lowmem_reserve[]: 0 0 0 0 0 [ 1099.622104] systemd[1]: Stopped Journal Service. [ 1099.625739] Node 1 Normal free:436040kB min:53696kB low:67120kB high:80544kB active_anon:436kB inactive_anon:51160kB active_file:176kB inactive_file:4736kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:288kB bounce:0kB free_pcp:256kB local_pcp:140kB free_cma:0kB [ 1099.652146] systemd[1]: Starting Journal Service... [ 1099.688547] lowmem_reserve[]: 0 0 0 0 0 [ 1099.713570] Node 0 DMA: 2*4kB (UM) 1*8kB (M) 15*16kB (U) 15*32kB (UM) 18*64kB (UM) 9*128kB (UM) 5*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 1*4096kB (M) = 10976kB [ 1099.752935] Node 0 DMA32: 841*4kB (UME) 12872*8kB (UME) 12397*16kB (UME) 82*32kB (UME) 52*64kB (UME) 9*128kB (ME) 2*256kB (M) 4*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 315380kB [ 1099.781570] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1099.784416] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1099.805861] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 1*16kB (M) 1*32kB (M) 5184*64kB (U) 204*128kB (UM) 185*256kB (UM) 52*512kB (UM) 4*1024kB (M) 0*2048kB 0*4096kB = 436040kB [ 1099.808572] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1099.833627] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1099.838731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1099.876501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1099.883994] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1099.892758] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1099.902716] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1099.905219] Bluetooth: hci4 command 0x040f tx timeout [ 1099.916627] 46192 total pagecache pages [ 1099.916636] 0 pages in swap cache [ 1099.916641] Swap cache stats: add 0, delete 0, find 0/0 [ 1099.916645] Free swap = 0kB [ 1099.916647] Total swap = 0kB [ 1099.916652] 2097051 pages RAM [ 1099.916655] 0 pages HighMem/MovableOnly [ 1099.916658] 363840 pages reserved [ 1099.916660] 0 pages cma reserved [ 1099.916666] Out of memory (oom_kill_allocating_task): Kill process 7978 (syz-fuzzer) score 0 or sacrifice child [ 1099.916727] Killed process 25262 (syz-executor.5) total-vm:84904kB, anon-rss:60kB, file-rss:4kB, shmem-rss:0kB [ 1099.940514] oom_reaper: reaped process 25262 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1100.072345] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1100.084131] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1100.101239] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1100.114327] systemd-journald[26028]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1100.121507] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1100.143425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1100.163813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1100.193826] device veth0_vlan entered promiscuous mode [ 1100.203734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1100.210798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1100.241392] device veth1_vlan entered promiscuous mode [ 1100.258212] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1100.271409] systemd-journald[26028]: /dev/kmsg buffer overrun, some messages lost. [ 1100.274774] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1100.311050] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1100.331487] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1100.338760] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1100.359296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1100.375268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1100.394475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1100.415528] device veth0_macvtap entered promiscuous mode [ 1100.421928] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1100.445799] device veth1_macvtap entered promiscuous mode [ 1100.462372] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1100.485493] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1100.506382] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1100.525804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1100.535716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.545437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1100.563295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.572443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1100.612733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.633251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1100.673582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.682719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1100.716659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.757947] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1100.765025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1100.771824] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1100.803850] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1100.811057] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1100.833974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1100.865377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1100.902956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.913354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1100.937498] systemd[1]: Started Journal Service. [ 1100.947237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.973025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1100.990718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.012379] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1101.020724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1101.044537] syz-executor.2 cpuset=/ [ 1101.044548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.044565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1101.048187] mems_allowed=0-1 [ 1101.073233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.094639] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1101.101667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1101.103578] CPU: 1 PID: 25817 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1101.116308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1101.126008] Call Trace: [ 1101.128627] dump_stack+0x1b2/0x281 [ 1101.132260] warn_alloc.cold+0x96/0x1cc [ 1101.136241] ? zone_watermark_ok_safe+0x220/0x220 [ 1101.141102] __alloc_pages_nodemask+0x2127/0x2720 [ 1101.145946] ? _raw_spin_unlock_irq+0x24/0x80 [ 1101.150719] ? lock_acquire+0x170/0x3f0 [ 1101.154694] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1101.159565] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1101.165013] ? __mutex_unlock_slowpath+0x75/0x770 [ 1101.169863] alloc_pages_current+0x155/0x260 [ 1101.174275] ion_page_pool_alloc+0x118/0x1b0 [ 1101.178694] ion_system_heap_allocate+0x133/0x8c0 [ 1101.183545] ? _raw_spin_unlock+0x29/0x40 [ 1101.187693] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1101.192623] ? ion_system_contig_heap_create+0x130/0x130 [ 1101.198074] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1101.203268] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1101.208117] ion_alloc+0x27a/0x810 [ 1101.211662] ? ion_dma_buf_release+0x40/0x40 [ 1101.216070] ? __might_fault+0x177/0x1b0 [ 1101.220129] ion_ioctl+0xea/0x1f0 [ 1101.223580] ? ion_query_heaps+0x360/0x360 [ 1101.227808] ? ion_query_heaps+0x360/0x360 [ 1101.232036] do_vfs_ioctl+0x75a/0xff0 [ 1101.235919] ? ioctl_preallocate+0x1a0/0x1a0 [ 1101.240331] ? lock_downgrade+0x740/0x740 [ 1101.244475] ? __fget+0x225/0x360 [ 1101.247925] ? do_vfs_ioctl+0xff0/0xff0 [ 1101.251896] ? security_file_ioctl+0x83/0xb0 [ 1101.256304] SyS_ioctl+0x7f/0xb0 [ 1101.259661] ? do_vfs_ioctl+0xff0/0xff0 [ 1101.263633] do_syscall_64+0x1d5/0x640 [ 1101.267529] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1101.272715] RIP: 0033:0x465ef9 [ 1101.275894] RSP: 002b:00007f6730f69188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1101.283609] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1101.290870] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1101.298135] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1101.305396] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1101.312657] R13: 00007fffdcef025f R14: 00007f6730f69300 R15: 0000000000022000 [ 1101.333196] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1101.353137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1101.540896] Mem-Info: [ 1101.543575] active_anon:11794 inactive_anon:45343 isolated_anon:0 [ 1101.543575] active_file:1482 inactive_file:1977 isolated_file:0 [ 1101.543575] unevictable:0 dirty:42 writeback:0 unstable:0 [ 1101.543575] slab_reclaimable:12192 slab_unreclaimable:113084 [ 1101.543575] mapped:37528 shmem:45839 pagetables:650 bounce:0 [ 1101.543575] free:158196 free_pcp:562 free_cma:0 [ 1101.609054] Node 0 active_anon:46636kB inactive_anon:130212kB active_file:3356kB inactive_file:6012kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:76292kB dirty:28kB writeback:0kB shmem:131940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1101.638651] Node 1 active_anon:440kB inactive_anon:51160kB active_file:2972kB inactive_file:2096kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:73920kB dirty:140kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1101.678404] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1101.707592] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1101.712685] Node 0 DMA32 free:418632kB min:36200kB low:45248kB high:54296kB active_anon:46636kB inactive_anon:130192kB active_file:3356kB inactive_file:6912kB unevictable:0kB writepending:28kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2316kB bounce:0kB free_pcp:1312kB local_pcp:684kB free_cma:0kB [ 1101.744127] lowmem_reserve[]: 0 0 0 0 0 [ 1101.748222] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1101.774280] lowmem_reserve[]: 0 0 0 0 0 [ 1101.778412] Node 1 Normal free:199784kB min:53696kB low:67120kB high:80544kB active_anon:440kB inactive_anon:51160kB active_file:2972kB inactive_file:2096kB unevictable:0kB writepending:140kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:284kB bounce:0kB free_pcp:1416kB local_pcp:740kB free_cma:0kB [ 1101.814264] lowmem_reserve[]: 0 0 0 0 0 [ 1101.818648] Node 0 DMA: 2*4kB (UM) 1*8kB (M) 20*16kB (U) 15*32kB (UM) 18*64kB (UM) 9*128kB (UM) 5*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 1*4096kB (M) = 11056kB [ 1101.834281] Node 0 DMA32: 184*4kB (UM) 129*8kB (E) 8321*16kB (UME) 8303*32kB (UME) 39*64kB (UM) 5*128kB (U) 13*256kB (UM) 22*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 418328kB [ 1101.850486] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1101.861334] Node 1 Normal: 1677*4kB (UM) 1885*8kB (U) 1764*16kB (U) 1629*32kB (U) 976*64kB (U) 76*128kB (U) 42*256kB (U) 29*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 199932kB [ 1101.878221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1101.887277] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1101.895965] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1101.904930] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1101.913587] 49761 total pagecache pages [ 1101.919446] 0 pages in swap cache [ 1101.923311] Swap cache stats: add 0, delete 0, find 0/0 [ 1101.928677] Free swap = 0kB [ 1101.931731] Total swap = 0kB [ 1101.934822] 2097051 pages RAM [ 1101.937950] 0 pages HighMem/MovableOnly [ 1101.941957] 363840 pages reserved [ 1101.945477] 0 pages cma reserved 01:30:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x38, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:30:26 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:30:26 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x262100, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) 01:30:26 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = getpid() r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r2) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080)=r1, 0x12) capget(&(0x7f0000000000)={0x20080522, r1}, &(0x7f0000000040)={0x18, 0x0, 0xffffff7f, 0x7ff, 0x2}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) 01:30:26 executing program 4: memfd_create(0x0, 0xb) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c1ac024f2dbec811ebea2500d34cc140000004dc0372027082b1e90f8d74139a573c8cc6be9e40f9e6887c606c111fbba354daa1b9e6b56ed699f5d92fbda72ae8892c9627499dca0fa05045c225bcf9e585efcc9c73cf5b4475d740d7e2c1f0e71bf04ac44", @ANYRES16=r1, @ANYBLOB="010400"/14], 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc4008000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_newroute={0x34, 0x18, 0x0, 0x70bd25, 0x25dfdbff, {0xa, 0x10, 0x10, 0x5, 0xfc, 0x1, 0x0, 0x8}, [@RTA_MARK={0x8}, @RTA_UID={0x8, 0x19, 0xee01}, @RTA_UID={0x8, 0x19, 0xee01}]}, 0x34}, 0x1, 0x0, 0x0, 0x40851}, 0xc010) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x3bca}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x2c}}, 0x40011) [ 1102.115034] Bluetooth: hci4 command 0x0419 tx timeout 01:30:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:30:26 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:30:26 executing program 4: memfd_create(0x0, 0xf) [ 1102.285538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1102.292296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1102.334672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1102.341426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1102.395418] device bridge_slave_1 left promiscuous mode [ 1102.400968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.418966] device bridge_slave_0 left promiscuous mode [ 1102.431152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.442528] device veth1_macvtap left promiscuous mode [ 1102.451753] device veth0_macvtap left promiscuous mode [ 1102.467606] device veth1_vlan left promiscuous mode [ 1102.472669] device veth0_vlan left promiscuous mode [ 1102.599531] device hsr_slave_1 left promiscuous mode [ 1102.613805] device hsr_slave_0 left promiscuous mode [ 1102.654440] team0 (unregistering): Port device team_slave_1 removed [ 1102.688396] team0 (unregistering): Port device team_slave_0 removed [ 1102.710792] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1102.749550] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1102.827783] bond0 (unregistering): Released all slaves 01:30:28 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:30:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:30:28 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x1f}, @IEEE802154_ATTR_REASON={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000009) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) 01:30:28 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:30:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/399, @ANYRES16=r1, @ANYBLOB="03032bbd7000fddbdf2509000000050029000000000008003b0009000000130038000100000005002d000100000008003400fe"], 0x64}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r1, 0x720, 0x6, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe7a1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x0) memfd_create(0x0, 0xa) 01:30:28 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:30:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}]}, 0x28}}, 0x20000000) [ 1104.487910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1104.497833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1104.506810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1104.537182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1104.545643] device bridge_slave_1 left promiscuous mode [ 1104.551860] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.563745] device bridge_slave_0 left promiscuous mode [ 1104.569899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.586202] device veth1_macvtap left promiscuous mode [ 1104.591514] device veth0_macvtap left promiscuous mode [ 1104.606639] device veth1_vlan left promiscuous mode [ 1104.612401] device veth0_vlan left promiscuous mode [ 1104.778610] device hsr_slave_1 left promiscuous mode [ 1104.786905] device hsr_slave_0 left promiscuous mode [ 1104.806688] team0 (unregistering): Port device team_slave_1 removed [ 1104.821169] team0 (unregistering): Port device team_slave_0 removed [ 1104.831916] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1104.861048] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1104.902174] bond0 (unregistering): Released all slaves [ 1105.696371] IPVS: ftp: loaded support on port[0] = 21 [ 1105.857281] chnl_net:caif_netlink_parms(): no params data found [ 1105.986513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.993245] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.000567] device bridge_slave_0 entered promiscuous mode [ 1106.008797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.015833] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.025336] device bridge_slave_1 entered promiscuous mode [ 1106.044053] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1106.054088] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1106.073539] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1106.080602] team0: Port device team_slave_0 added [ 1106.086670] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1106.094625] team0: Port device team_slave_1 added [ 1106.110897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.117715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.143742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.155908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.162148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.187946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.198942] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1106.207082] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1106.242530] device hsr_slave_0 entered promiscuous mode [ 1106.248325] device hsr_slave_1 entered promiscuous mode [ 1106.269600] IPVS: ftp: loaded support on port[0] = 21 [ 1106.270127] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1106.284167] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1106.443092] chnl_net:caif_netlink_parms(): no params data found [ 1106.468135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.474539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1106.481176] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.487602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1106.528006] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1106.534140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1106.544644] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1106.554431] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1106.560779] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.568223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.576432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1106.583598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1106.596996] Bluetooth: hci1 command 0x0409 tx timeout [ 1106.605031] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.611370] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.619533] device bridge_slave_0 entered promiscuous mode [ 1106.627092] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.634447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.641460] device bridge_slave_1 entered promiscuous mode [ 1106.649543] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1106.656576] 8021q: adding VLAN 0 to HW filter on device team0 [ 1106.678731] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1106.688027] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1106.696691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1106.704590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.710934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1106.736853] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1106.744488] team0: Port device team_slave_0 added [ 1106.749868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1106.757912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.764341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1106.772686] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1106.779843] team0: Port device team_slave_1 added [ 1106.802907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.809178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.834917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.845638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1106.854850] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1106.867010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.873433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.898751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.909343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1106.920669] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1106.928643] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1106.938539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1106.947339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1106.968206] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1106.978592] device hsr_slave_0 entered promiscuous mode [ 1106.985796] device hsr_slave_1 entered promiscuous mode [ 1106.993259] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1107.000730] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1107.020743] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1107.036844] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1107.050412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1107.057387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1107.066586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1107.136880] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1107.174678] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1107.185580] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1107.194231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1107.201975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1107.213582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.222090] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1107.231154] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1107.237451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1107.244699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1107.256172] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1107.262344] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.271001] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1107.279245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1107.287671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1107.295884] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.302274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1107.310808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1107.319553] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1107.328338] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1107.337470] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1107.344545] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1107.350796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1107.358823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1107.366704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.373095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1107.382133] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1107.390743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1107.402320] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1107.408919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1107.417000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1107.425268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1107.432102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1107.440168] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1107.450214] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1107.458713] device veth0_vlan entered promiscuous mode [ 1107.464779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1107.475073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1107.483040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1107.490903] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1107.503919] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1107.511909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1107.520007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1107.529921] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1107.539487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1107.547953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1107.557871] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1107.565995] device veth1_vlan entered promiscuous mode [ 1107.571784] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1107.578291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1107.585759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1107.593640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1107.603915] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1107.610045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1107.621507] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1107.630978] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1107.641935] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1107.648967] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1107.656612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1107.663834] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1107.677306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1107.686481] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1107.697368] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1107.704686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1107.712841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1107.727223] device veth0_macvtap entered promiscuous mode [ 1107.734226] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1107.746741] device veth1_macvtap entered promiscuous mode [ 1107.753689] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1107.765805] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1107.776580] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1107.785939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1107.796568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.805910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1107.815696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.824869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1107.835108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.844391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1107.854271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.864734] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1107.871708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1107.880789] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1107.889147] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1107.896533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1107.904800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1107.914458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1107.925104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.934616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1107.944907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.954638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1107.964493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.973683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1107.983453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.993858] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1108.000742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1108.009862] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1108.018338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1108.026317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1108.048620] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1108.055867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1108.070169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1108.111558] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1108.120373] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1108.128270] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1108.140481] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1108.147883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1108.155555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1108.163793] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1108.170670] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1108.179937] device veth0_vlan entered promiscuous mode [ 1108.218773] device veth1_vlan entered promiscuous mode [ 1108.225261] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1108.234845] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1108.256272] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1108.269750] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1108.272371] Bluetooth: hci3 command 0x0409 tx timeout [ 1108.276765] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1108.289314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1108.296948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1108.305008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1108.315653] device veth0_macvtap entered promiscuous mode [ 1108.321742] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1108.332068] device veth1_macvtap entered promiscuous mode [ 1108.339369] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1108.349174] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1108.368128] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1108.377598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1108.388139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.397521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1108.407643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 01:30:32 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 01:30:32 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101d02, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) memfd_create(0x0, 0x0) memfd_create(&(0x7f00000000c0)='\\-./&[]\x00', 0x1) 01:30:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}]}, 0x28}}, 0x0) 01:30:32 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x200000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x6], 0x1, 0x80000}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000240)={0x31c8, 0x42}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000012c0)=@bpf_ext={0x1c, 0x7, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000c500000000000000000200004a1afeff10000000183300000400000000000000000000088d954cfff0ffffff8500000098000000c8c03d5b53913a9c467541bb753fc9df6df0816916"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000280)=""/4096, 0x41100, 0x0, [], 0x0, 0x0, r1, 0x8, &(0x7f0000000200)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000001280)={0x0, 0x3, 0xe4, 0xb18c}, 0x10, 0x2792, r0}, 0x78) 01:30:32 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r2, 0x401}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x200}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, [], 0x2e}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r3) 01:30:32 executing program 4: memfd_create(0x0, 0x8) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000040)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffff8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40811}, 0x20000040) [ 1108.417061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1108.441704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.490991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1108.518808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.539354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1108.564118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.588433] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1108.595831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1108.611860] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1108.620442] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1108.628596] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1108.636795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1108.647468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1108.657636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.666852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1108.676801] Bluetooth: hci1 command 0x041b tx timeout [ 1108.682385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.691522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1108.701599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.710903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1108.720661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.729806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1108.739586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.749802] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1108.757714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1108.765891] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1108.774228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 01:30:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:30:33 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 01:30:33 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x70, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x40}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xaf8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x800) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000000a14200029bd7000fddbdf2508000100010000000800150004000000080015000400000008001500030000000800010000000000080015000300000008000300030000000800030002000004080015000300000008000100010000008b833c1e63b241dc3676da0a3ed3142185de2c2ecdea3b045b8bca3c4ad8a97781e3bdc97f3fa9b8f19a458e9f184a5f63f9deb4737665f9d1a66b645f082ed7d388dd"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4040) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) 01:30:33 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r1, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f000000070008009431e72a2b5b84718855b8dc3a6b409cf7f0bbe92ceed5af11cf50d6d75968dbe2680de0da0efe0ea801d08c38bbac2860689f4271c8f51849751bdb1e83b3d0c53525900845f8194b0799f03fbc429a0ba2eb20eeb4c1e404ae8703145c8dcbd98b811928b2b2461fdce66d15a397adcdb63567322e6148577cbaa08eb8ef2439432905bd08eeec22b57ea242563dd69fbb48c136da1a62a5649c9f013d2b2d7a53c1c816a7218dcdbd06f55098c439737bdf23e44cb240d0a4b17e89e96ee00755064f5cc8d6686323fea568ae1c21a74cdddfad119420fc57857e9c8d28555b5e563e56966c1562166a5cef902480aa9e8049e75770a15a07ece3d9d92ed601f3"]) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r2) 01:30:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) 01:30:33 executing program 4: memfd_create(0x0, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00', r0) 01:30:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:30:33 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 01:30:33 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x101, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x0, 0x42, 0x1}) 01:30:33 executing program 4: memfd_create(0x0, 0xa) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffb}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 01:30:33 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0xe, 0x1}) 01:30:33 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000040)=""/111, 0x6f, 0x10100, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x40) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000001c0), &(0x7f0000000200)=0x4) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x101080, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) [ 1109.853534] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1109.855865] syz-executor.1: [ 1109.866725] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1109.878881] CPU: 0 PID: 26656 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1109.886773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1109.896123] Call Trace: [ 1109.898712] dump_stack+0x1b2/0x281 [ 1109.902028] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1109.902340] warn_alloc.cold+0x96/0x1cc [ 1109.902353] ? zone_watermark_ok_safe+0x220/0x220 [ 1109.921925] __alloc_pages_nodemask+0x2127/0x2720 [ 1109.922051] (null) [ 1109.926763] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1109.928886] syz-executor.1 cpuset= [ 1109.933883] ? lock_acquire+0x170/0x3f0 [ 1109.933899] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1109.933916] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1109.933926] ? __mutex_unlock_slowpath+0x75/0x770 [ 1109.933941] alloc_pages_current+0x155/0x260 [ 1109.933956] ion_page_pool_alloc+0x118/0x1b0 [ 1109.933967] ion_system_heap_allocate+0x133/0x8c0 [ 1109.933978] ? ion_alloc+0x187/0x810 [ 1109.973839] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1109.979294] ? ion_system_contig_heap_create+0x130/0x130 [ 1109.984743] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1109.985392] / mems_allowed=0-1 [ 1109.989752] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1109.989765] ion_alloc+0x204/0x810 [ 1110.001281] ? ion_dma_buf_release+0x40/0x40 [ 1110.005706] ? __might_fault+0x177/0x1b0 [ 1110.009763] ion_ioctl+0xea/0x1f0 [ 1110.013211] ? ion_query_heaps+0x360/0x360 [ 1110.017442] ? ion_query_heaps+0x360/0x360 [ 1110.021672] do_vfs_ioctl+0x75a/0xff0 [ 1110.025465] ? ioctl_preallocate+0x1a0/0x1a0 [ 1110.029867] ? lock_downgrade+0x740/0x740 [ 1110.034013] ? __fget+0x225/0x360 [ 1110.037460] ? do_vfs_ioctl+0xff0/0xff0 [ 1110.041430] ? security_file_ioctl+0x83/0xb0 [ 1110.045829] SyS_ioctl+0x7f/0xb0 [ 1110.049173] ? do_vfs_ioctl+0xff0/0xff0 [ 1110.053133] do_syscall_64+0x1d5/0x640 [ 1110.057022] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1110.062212] RIP: 0033:0x465ef9 [ 1110.065391] RSP: 002b:00007f26a58f1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1110.073179] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1110.080439] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1110.087874] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1110.095132] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1110.102387] R13: 00007ffe7e02d34f R14: 00007f26a58f1300 R15: 0000000000022000 [ 1110.126401] CPU: 1 PID: 26664 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 1110.134388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1110.143739] Call Trace: [ 1110.146332] dump_stack+0x1b2/0x281 [ 1110.149963] warn_alloc.cold+0x96/0x1cc [ 1110.151799] Mem-Info: [ 1110.153933] ? zone_watermark_ok_safe+0x220/0x220 [ 1110.153957] __alloc_pages_nodemask+0x2127/0x2720 [ 1110.153968] ? __schedule+0x893/0x1de0 [ 1110.156408] active_anon:12385 inactive_anon:45344 isolated_anon:0 [ 1110.156408] active_file:1513 inactive_file:5060 isolated_file:0 [ 1110.156408] unevictable:0 dirty:7 writeback:0 unstable:0 [ 1110.156408] slab_reclaimable:12178 slab_unreclaimable:111535 [ 1110.156408] mapped:57171 shmem:45840 pagetables:727 bounce:0 [ 1110.156408] free:210667 free_pcp:343 free_cma:0 [ 1110.161190] ? lock_acquire+0x170/0x3f0 [ 1110.161206] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1110.168919] Node 0 active_anon:49132kB inactive_anon:130216kB active_file:3032kB inactive_file:18380kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143600kB dirty:20kB writeback:0kB shmem:131944kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1110.169904] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1110.204557] Node 1 active_anon:408kB inactive_anon:51160kB active_file:3020kB inactive_file:1860kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:85084kB dirty:8kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1110.207498] ? retint_kernel+0x2d/0x2d [ 1110.207511] ? __mutex_unlock_slowpath+0x75/0x770 [ 1110.207531] alloc_pages_current+0x155/0x260 [ 1110.213726] Node 0 [ 1110.240619] ion_page_pool_alloc+0x118/0x1b0 [ 1110.240630] ion_system_heap_allocate+0x133/0x8c0 [ 1110.240640] ? ion_alloc+0x187/0x810 [ 1110.240650] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1110.240660] ? ion_system_contig_heap_create+0x130/0x130 [ 1110.240668] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1110.240681] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1110.248525] DMA free:11108kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1110.273425] ion_alloc+0x204/0x810 [ 1110.273439] ? ion_dma_buf_release+0x40/0x40 [ 1110.273452] ? __might_fault+0x177/0x1b0 [ 1110.273464] ion_ioctl+0xea/0x1f0 [ 1110.273473] ? ion_query_heaps+0x360/0x360 [ 1110.273485] ? ion_query_heaps+0x360/0x360 [ 1110.279532] lowmem_reserve[]: [ 1110.282183] do_vfs_ioctl+0x75a/0xff0 [ 1110.282194] ? ioctl_preallocate+0x1a0/0x1a0 [ 1110.282204] ? lock_downgrade+0x740/0x740 [ 1110.282217] ? __fget+0x225/0x360 [ 1110.282229] ? do_vfs_ioctl+0xff0/0xff0 [ 1110.289239] 0 [ 1110.293249] ? security_file_ioctl+0x83/0xb0 [ 1110.293260] SyS_ioctl+0x7f/0xb0 [ 1110.293268] ? do_vfs_ioctl+0xff0/0xff0 [ 1110.293279] do_syscall_64+0x1d5/0x640 [ 1110.293294] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1110.293303] RIP: 0033:0x465ef9 [ 1110.300097] 2717 [ 1110.301815] RSP: 002b:00007f7d1a1ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1110.301826] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1110.301831] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1110.301840] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1110.308894] 2718 [ 1110.312696] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1110.312701] R13: 00007ffc8ea5f85f R14: 00007f7d1a1ad300 R15: 0000000000022000 [ 1110.352475] Bluetooth: hci3 command 0x041b tx timeout [ 1110.398324] 2718 2718 [ 1110.490233] Node 0 DMA32 free:814624kB min:36200kB low:45248kB high:54296kB active_anon:47084kB inactive_anon:130196kB active_file:3032kB inactive_file:18380kB unevictable:0kB writepending:20kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2512kB bounce:0kB free_pcp:1340kB local_pcp:640kB free_cma:0kB [ 1110.521309] lowmem_reserve[]: 0 0 0 0 0 [ 1110.525945] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1110.556293] lowmem_reserve[]: 0 0 0 0 0 [ 1110.560293] Node 1 Normal free:173480kB min:53696kB low:67120kB high:80544kB active_anon:408kB inactive_anon:51160kB active_file:3020kB inactive_file:1860kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:396kB bounce:0kB free_pcp:1272kB local_pcp:620kB free_cma:0kB [ 1110.595771] lowmem_reserve[]: 0 0 0 0 0 [ 1110.599779] Node 0 DMA: 3*4kB (UM) 3*8kB (UM) 20*16kB (U) 14*32kB (UM) 17*64kB (UM) 4*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 0*4096kB = 11108kB [ 1110.620439] Node 0 DMA32: 2781*4kB (UME) 2572*8kB (UME) 11539*16kB (UME) 12284*32kB (UME) 2466*64kB (UM) 323*128kB (UM) 25*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 814980kB [ 1110.641302] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1110.656614] Node 1 Normal: 2784*4kB (UM) 1979*8kB (UM) 1734*16kB (UM) 1703*32kB (U) 1436*64kB (U) 324*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 242584kB [ 1110.676318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1110.685217] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1110.698729] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1110.708272] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1110.721269] 52356 total pagecache pages [ 1110.727345] 0 pages in swap cache [ 1110.730806] Swap cache stats: add 0, delete 0, find 0/0 [ 1110.741010] Free swap = 0kB [ 1110.745364] Total swap = 0kB [ 1110.748400] 2097051 pages RAM [ 1110.751494] 0 pages HighMem/MovableOnly [ 1110.757127] Bluetooth: hci1 command 0x040f tx timeout [ 1110.767392] 363840 pages reserved [ 1110.773417] 0 pages cma reserved 01:30:36 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:30:36 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r2) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000280)) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000000c0)={0x2, 0x42}) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000000)=@null) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="5f3d71777000fddbdf250a000000050033000100000008002b0001000080050033000300000008000300", @ANYRES32=0x0, @ANYBLOB="0800390006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000080}, 0x4) 01:30:36 executing program 4: memfd_create(0x0, 0xa) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) 01:30:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0xe, 0x1}) 01:30:36 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x10, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) 01:30:36 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:30:36 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x53c601, 0x0) socketpair(0xf, 0x4, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x0, 0x8, 0x1}) 01:30:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0xe, 0x1}) 01:30:36 executing program 4: write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x2, {0x9, 0x7, "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", 0xf0, 0x1, 0x8, 0x1, 0x12, 0x3, 0xfa}}}, 0x128) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x80800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000001c0)={0x20, 0x3ff, 0x0, 0x38, 0x3f, 0x3, 0xbe}, 0xc) memfd_create(0x0, 0x25ecb488fc135759) 01:30:36 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r2) write$cgroup_pid(r2, &(0x7f0000000080)=0xffffffffffffffff, 0x12) 01:30:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x0, 0x1}) 01:30:36 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x8001, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) [ 1112.512383] Bluetooth: hci3 command 0x040f tx timeout [ 1112.826941] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1112.839492] Bluetooth: hci1 command 0x0419 tx timeout [ 1112.866184] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1112.878050] CPU: 1 PID: 26695 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 1112.885966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1112.895320] Call Trace: [ 1112.897942] dump_stack+0x1b2/0x281 [ 1112.901597] warn_alloc.cold+0x96/0x1cc [ 1112.905580] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1112.910605] ? zone_watermark_ok_safe+0x220/0x220 [ 1112.915471] __alloc_pages_nodemask+0x2127/0x2720 [ 1112.915500] syz-executor.2: [ 1112.920308] ? __schedule+0x893/0x1de0 [ 1112.920325] ? lock_acquire+0x170/0x3f0 [ 1112.920340] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1112.933185] page allocation failure: order:4 [ 1112.936560] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1112.936572] ? __mutex_unlock_slowpath+0x75/0x770 [ 1112.944253] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1112.946396] ? __sanitizer_cov_trace_pc+0x3d/0x50 [ 1112.946413] alloc_pages_current+0x155/0x260 [ 1112.953468] (null) [ 1112.958367] ion_page_pool_alloc+0x118/0x1b0 [ 1112.958379] ion_system_heap_allocate+0x133/0x8c0 [ 1112.973131] syz-executor.2 cpuset= [ 1112.975217] ? ion_alloc+0x187/0x810 [ 1112.975234] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1112.982280] / [ 1112.983593] ? ion_system_contig_heap_create+0x130/0x130 [ 1112.992779] mems_allowed=0-1 [ 1112.994461] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1112.994476] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1113.012840] ion_alloc+0x204/0x810 [ 1113.016385] ? ion_dma_buf_release+0x40/0x40 [ 1113.020803] ? __might_fault+0x177/0x1b0 [ 1113.024881] ion_ioctl+0xea/0x1f0 [ 1113.028338] ? ion_query_heaps+0x360/0x360 [ 1113.032570] ? ion_query_heaps+0x360/0x360 [ 1113.036802] do_vfs_ioctl+0x75a/0xff0 [ 1113.040600] ? ioctl_preallocate+0x1a0/0x1a0 [ 1113.044995] ? lock_downgrade+0x740/0x740 [ 1113.049138] ? __fget+0x225/0x360 [ 1113.052588] ? do_vfs_ioctl+0xff0/0xff0 [ 1113.056563] ? security_file_ioctl+0x83/0xb0 [ 1113.060965] SyS_ioctl+0x7f/0xb0 [ 1113.064321] ? do_vfs_ioctl+0xff0/0xff0 [ 1113.068284] do_syscall_64+0x1d5/0x640 [ 1113.072172] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1113.077362] RIP: 0033:0x465ef9 [ 1113.080546] RSP: 002b:00007f7d1a1ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1113.088252] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1113.095526] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1113.102850] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1113.110114] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1113.117384] R13: 00007ffc8ea5f85f R14: 00007f7d1a1ad300 R15: 0000000000022000 [ 1113.124663] CPU: 0 PID: 26701 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1113.132558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1113.141910] Call Trace: [ 1113.144508] dump_stack+0x1b2/0x281 [ 1113.148140] warn_alloc.cold+0x96/0x1cc [ 1113.152119] ? zone_watermark_ok_safe+0x220/0x220 [ 1113.156978] __alloc_pages_nodemask+0x2127/0x2720 [ 1113.161828] ? retint_kernel+0x2d/0x2d [ 1113.165722] ? lock_acquire+0x170/0x3f0 [ 1113.169708] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1113.174656] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1113.180113] ? __mutex_unlock_slowpath+0x75/0x770 [ 1113.184962] alloc_pages_current+0x155/0x260 [ 1113.189379] ion_page_pool_alloc+0x118/0x1b0 [ 1113.193793] ion_system_heap_allocate+0x133/0x8c0 [ 1113.198638] ? ion_alloc+0x187/0x810 [ 1113.202358] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1113.207811] ? ion_system_contig_heap_create+0x130/0x130 [ 1113.213269] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1113.218285] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1113.223136] ion_alloc+0x204/0x810 [ 1113.226683] ? ion_dma_buf_release+0x40/0x40 [ 1113.231097] ? __might_fault+0x177/0x1b0 [ 1113.235164] ion_ioctl+0xea/0x1f0 [ 1113.238616] ? ion_query_heaps+0x360/0x360 [ 1113.242851] ? ion_query_heaps+0x360/0x360 [ 1113.247085] do_vfs_ioctl+0x75a/0xff0 [ 1113.250885] ? ioctl_preallocate+0x1a0/0x1a0 [ 1113.255291] ? lock_downgrade+0x740/0x740 [ 1113.259439] ? __fget+0x225/0x360 [ 1113.262890] ? do_vfs_ioctl+0xff0/0xff0 [ 1113.266866] ? security_file_ioctl+0x83/0xb0 [ 1113.271274] SyS_ioctl+0x7f/0xb0 [ 1113.274635] ? do_vfs_ioctl+0xff0/0xff0 [ 1113.278608] do_syscall_64+0x1d5/0x640 [ 1113.282513] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1113.287704] RIP: 0033:0x465ef9 [ 1113.290892] RSP: 002b:00007f26a58f1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1113.298605] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1113.305873] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1113.313141] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1113.320410] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1113.327681] R13: 00007ffe7e02d34f R14: 00007f26a58f1300 R15: 0000000000022000 [ 1113.461624] warn_alloc_show_mem: 1 callbacks suppressed [ 1113.461628] Mem-Info: [ 1113.469432] active_anon:11791 inactive_anon:45343 isolated_anon:0 [ 1113.469432] active_file:2387 inactive_file:4044 isolated_file:0 [ 1113.469432] unevictable:0 dirty:69 writeback:0 unstable:0 [ 1113.469432] slab_reclaimable:12170 slab_unreclaimable:113784 [ 1113.469432] mapped:57196 shmem:45839 pagetables:704 bounce:0 [ 1113.469432] free:383626 free_pcp:536 free_cma:0 [ 1113.531385] Node 0 active_anon:46756kB inactive_anon:130212kB active_file:5952kB inactive_file:15108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143640kB dirty:264kB writeback:0kB shmem:131940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1113.604091] Node 1 active_anon:408kB inactive_anon:51160kB active_file:3596kB inactive_file:1068kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:85144kB dirty:12kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1113.665080] Node 0 DMA free:11164kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1113.719971] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1113.730602] Node 0 DMA32 free:962712kB min:36200kB low:45248kB high:54296kB active_anon:46756kB inactive_anon:130192kB active_file:5952kB inactive_file:15108kB unevictable:0kB writepending:264kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2420kB bounce:0kB free_pcp:668kB local_pcp:32kB free_cma:0kB [ 1113.801567] lowmem_reserve[]: 0 0 0 0 0 [ 1113.805597] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1113.875028] lowmem_reserve[]: 0 0 0 0 0 [ 1113.879060] Node 1 Normal free:708700kB min:53696kB low:67120kB high:80544kB active_anon:408kB inactive_anon:51160kB active_file:3596kB inactive_file:1068kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:396kB bounce:0kB free_pcp:1400kB local_pcp:668kB free_cma:0kB [ 1113.939529] lowmem_reserve[]: 0 0 0 0 0 [ 1113.948078] Node 0 DMA: 3*4kB (UM) 4*8kB (UM) 21*16kB (U) 15*32kB (UM) 17*64kB (UM) 4*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 1*4096kB (M) = 11164kB [ 1113.988139] Node 0 DMA32: 28*4kB (UME) 173*8kB (UME) 11059*16kB (UME) 11423*32kB (UME) 3768*64kB (UME) 831*128kB (UME) 22*256kB (U) 18*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 906344kB [ 1114.023440] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1114.046592] Node 1 Normal: 2450*4kB (UM) 1734*8kB (UM) 1485*16kB (UM) 1457*32kB (U) 8303*64kB (UM) 813*128kB (UM) 196*256kB (UM) 29*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 794536kB [ 1114.063536] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1114.073614] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1114.083115] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1114.092751] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1114.101432] 52212 total pagecache pages [ 1114.106478] 0 pages in swap cache [ 1114.110011] Swap cache stats: add 0, delete 0, find 0/0 [ 1114.117084] Free swap = 0kB [ 1114.120188] Total swap = 0kB [ 1114.124207] 2097051 pages RAM [ 1114.127398] 0 pages HighMem/MovableOnly [ 1114.131427] 363840 pages reserved [ 1114.137261] 0 pages cma reserved [ 1114.595115] Bluetooth: hci3 command 0x0419 tx timeout [ 1115.920378] oom_reaper: reaped process 26701 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1115.953535] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1115.967413] systemd-journal cpuset=/ mems_allowed=0-1 [ 1115.978374] CPU: 0 PID: 26028 Comm: systemd-journal Not tainted 4.14.222-syzkaller #0 [ 1115.986362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1115.995711] Call Trace: [ 1115.998314] dump_stack+0x1b2/0x281 [ 1116.001947] dump_header+0x178/0x82f [ 1116.005668] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1116.010776] ? ___ratelimit+0x2cd/0x530 [ 1116.011381] syz-executor.2: page allocation failure: order:0 [ 1116.014748] oom_kill_process.cold+0x10/0xb18 [ 1116.014765] out_of_memory+0xe3e/0x1190 [ 1116.020542] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1116.025020] ? oom_killer_disable+0x1c0/0x1c0 [ 1116.025028] ? mutex_trylock+0x152/0x1a0 [ 1116.025037] __alloc_pages_nodemask+0x23e1/0x2720 [ 1116.025055] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1116.025078] alloc_pages_current+0x155/0x260 [ 1116.025088] filemap_fault+0xea3/0x1980 [ 1116.025104] ext4_filemap_fault+0x84/0xb0 [ 1116.025115] __do_fault+0xfa/0x380 [ 1116.031317] (null) [ 1116.036146] __handle_mm_fault+0x2497/0x4620 [ 1116.040614] syz-executor.2 cpuset= [ 1116.044662] ? ep_poll+0x1ab/0xa50 [ 1116.044669] ? vm_insert_page+0x7c0/0x7c0 [ 1116.044688] handle_mm_fault+0x391/0x860 [ 1116.044699] __do_page_fault+0x549/0xad0 [ 1116.044709] ? spurious_fault+0x640/0x640 [ 1116.044720] ? do_page_fault+0x60/0x500 [ 1116.050919] / [ 1116.054360] ? page_fault+0x2f/0x50 [ 1116.059418] mems_allowed=0-1 [ 1116.062806] page_fault+0x45/0x50 [ 1116.062815] RIP: 0001:0xffffffffffffffff [ 1116.062819] RSP: cee1f1e0:00007fff741397e0 EFLAGS: 7fff74139600 [ 1116.070958] Mem-Info: [ 1116.074624] CPU: 1 PID: 26701 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1116.077083] active_anon:11823 inactive_anon:45343 isolated_anon:0 [ 1116.077083] active_file:15 inactive_file:16 isolated_file:0 [ 1116.077083] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1116.077083] slab_reclaimable:12170 slab_unreclaimable:113490 [ 1116.077083] mapped:52655 shmem:45839 pagetables:704 bounce:0 [ 1116.077083] free:13735 free_pcp:79 free_cma:0 [ 1116.080591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1116.084143] Node 0 active_anon:46876kB inactive_anon:130212kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129816kB dirty:0kB writeback:0kB shmem:131940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1116.088228] Call Trace: [ 1116.092328] Node 1 active_anon:416kB inactive_anon:51160kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:80804kB dirty:0kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1116.096361] dump_stack+0x1b2/0x281 [ 1116.100468] Node 0 [ 1116.104424] warn_alloc.cold+0x96/0x1cc [ 1116.104443] ? zone_watermark_ok_safe+0x220/0x220 [ 1116.106137] DMA free:10948kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1116.109733] ? usleep_range+0x130/0x130 [ 1116.112821] lowmem_reserve[]: [ 1116.116247] ? try_to_free_pages+0x23f/0x6e0 [ 1116.120298] 0 2717 [ 1116.126340] ? _find_next_bit+0xdb/0x100 [ 1116.126350] ? run_timer_softirq+0x5a0/0x5a0 [ 1116.126367] __alloc_pages_nodemask+0x2127/0x2720 [ 1116.128743] 2718 [ 1116.136611] ? lock_acquire+0x170/0x3f0 [ 1116.136632] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1116.169772] 2718 [ 1116.179099] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1116.179118] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1116.206959] 2718 [ 1116.209520] ? policy_node+0x35/0x110 [ 1116.240181] alloc_pages_current+0x155/0x260 [ 1116.242400] Node 0 [ 1116.246348] ion_page_pool_alloc+0x118/0x1b0 [ 1116.251167] DMA32 free:17492kB min:36200kB low:45248kB high:54296kB active_anon:46876kB inactive_anon:130192kB active_file:48kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2420kB bounce:0kB free_pcp:196kB local_pcp:72kB free_cma:0kB [ 1116.276729] ion_system_heap_allocate+0x133/0x8c0 [ 1116.276740] ? ion_alloc+0x187/0x810 [ 1116.276751] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1116.280696] lowmem_reserve[]: [ 1116.283782] ? ion_system_contig_heap_create+0x130/0x130 [ 1116.283793] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1116.283805] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1116.288184] 0 [ 1116.290405] ion_alloc+0x204/0x810 [ 1116.294447] 0 [ 1116.298827] ? ion_dma_buf_release+0x40/0x40 [ 1116.303648] 0 [ 1116.305683] ? __might_fault+0x177/0x1b0 [ 1116.309624] 0 [ 1116.314448] ion_ioctl+0xea/0x1f0 [ 1116.314462] ? ion_query_heaps+0x360/0x360 [ 1116.316500] 0 [ 1116.316507] Node 0 [ 1116.320986] ? ion_query_heaps+0x360/0x360 [ 1116.326428] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1116.328466] do_vfs_ioctl+0x75a/0xff0 [ 1116.332247] lowmem_reserve[]: [ 1116.336627] ? ioctl_preallocate+0x1a0/0x1a0 [ 1116.338834] 0 [ 1116.343222] ? lock_downgrade+0x740/0x740 [ 1116.343235] ? __fget+0x225/0x360 [ 1116.343245] ? do_vfs_ioctl+0xff0/0xff0 [ 1116.371529] 0 [ 1116.376353] ? security_file_ioctl+0x83/0xb0 [ 1116.380033] 0 [ 1116.385480] SyS_ioctl+0x7f/0xb0 [ 1116.385488] ? do_vfs_ioctl+0xff0/0xff0 [ 1116.385500] do_syscall_64+0x1d5/0x640 [ 1116.388585] 0 [ 1116.394036] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1116.394046] RIP: 0033:0x465ef9 [ 1116.399033] 0 [ 1116.403863] RSP: 002b:00007f26a58f1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1116.403873] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1116.403878] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1116.403883] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1116.403889] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1116.409187] R13: 00007ffe7e02d34f R14: 00007f26a58f1300 R15: 0000000000022000 [ 1116.410965] Node 1 [ 1116.421279] warn_alloc_show_mem: 1 callbacks suppressed [ 1116.421282] Mem-Info: [ 1116.432821] Normal free:26500kB min:53696kB low:67120kB high:80544kB active_anon:416kB inactive_anon:51160kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:396kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1116.436741] active_anon:11823 inactive_anon:45343 isolated_anon:0 [ 1116.436741] active_file:15 inactive_file:16 isolated_file:0 [ 1116.436741] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1116.436741] slab_reclaimable:12170 slab_unreclaimable:113490 [ 1116.436741] mapped:52655 shmem:45839 pagetables:704 bounce:0 [ 1116.436741] free:13735 free_pcp:79 free_cma:0 [ 1116.438938] lowmem_reserve[]: [ 1116.465792] Node 0 active_anon:46876kB inactive_anon:130212kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129816kB dirty:0kB writeback:0kB shmem:131940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1116.472884] 0 [ 1116.475254] Node 1 active_anon:416kB inactive_anon:51160kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:80804kB dirty:0kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1116.476976] 0 [ 1116.481112] Node 0 [ 1116.489688] 0 [ 1116.491623] DMA free:10948kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1116.494765] 0 [ 1116.496524] lowmem_reserve[]: [ 1116.499862] 0 [ 1116.504635] 0 [ 1116.514790] 2717 [ 1116.517909] Node 0 [ 1116.519683] 2718 2718 [ 1116.534918] DMA: [ 1116.537250] 2718 [ 1116.551077] 1*4kB [ 1116.571989] (M) [ 1116.574003] Node 0 [ 1116.574623] 2*8kB [ 1116.606125] DMA32 free:17492kB min:36200kB low:45248kB high:54296kB active_anon:46876kB inactive_anon:130192kB active_file:48kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2420kB bounce:0kB free_pcp:196kB local_pcp:124kB free_cma:0kB [ 1116.640623] (UM) [ 1116.674147] lowmem_reserve[]: [ 1116.702065] 9*16kB [ 1116.709149] 0 [ 1116.731038] (U) [ 1116.739646] 0 [ 1116.740482] 15*32kB [ 1116.743007] 0 0 0 [ 1116.743018] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1116.743036] lowmem_reserve[]: [ 1116.745163] (UM) [ 1116.747128] 0 [ 1116.749254] 17*64kB [ 1116.758241] 0 [ 1116.789708] (UM) [ 1116.798580] 0 [ 1116.799392] 4*128kB [ 1116.801565] 0 0 [ 1116.801575] Node 1 Normal free:26500kB min:53696kB low:67120kB high:80544kB active_anon:416kB inactive_anon:51160kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:396kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1116.801595] lowmem_reserve[]: 0 0 [ 1116.830936] (UM) [ 1116.839370] 0 [ 1116.840848] 4*256kB [ 1116.842095] 0 0 [ 1116.842106] Node 0 DMA: 1*4kB (M) 2*8kB (UM) 9*16kB (U) 15*32kB (UM) 17*64kB (UM) [ 1116.844460] (UM) [ 1116.846394] 4*128kB (UM) [ 1116.878601] 3*512kB [ 1116.887015] 4*256kB [ 1116.897669] (UM) [ 1116.899890] (UM) [ 1116.901470] 2*1024kB (UM) 0*2048kB 1*4096kB (M) = 10948kB [ 1116.901490] Node 0 DMA32: 585*4kB [ 1116.909300] 3*512kB [ 1116.916831] (UME) [ 1116.918865] (UM) [ 1116.919356] 425*8kB (UME) 253*16kB (UME) 54*32kB (UME) 24*64kB (UME) 13*128kB (UME) 5*256kB (M) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17532kB [ 1116.926896] 2*1024kB (UM) 0*2048kB 1*4096kB (M) = 10948kB [ 1116.940793] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1116.949775] Node 0 DMA32: 585*4kB (UME) 425*8kB (UME) 253*16kB (UME) 54*32kB (UME) 24*64kB (UME) 13*128kB (UME) 5*256kB (M) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17532kB [ 1116.959432] Node 1 Normal: 75*4kB (M) 49*8kB (UM) 31*16kB (M) 19*32kB (M) 32*64kB (UM) 5*128kB (M) 2*256kB (M) 42*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26500kB [ 1116.980548] Node 0 [ 1116.995480] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1116.999012] Normal: [ 1117.006564] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1117.006573] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1117.008878] 0*4kB [ 1117.020775] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1117.033299] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1117.040395] 45870 total pagecache pages [ 1117.049691] Node 1 Normal: [ 1117.050060] 0 pages in swap cache [ 1117.050062] 75*4kB (M) [ 1117.057590] Swap cache stats: add 0, delete 0, find 0/0 [ 1117.064754] 49*8kB (UM) 31*16kB (M) 19*32kB (M) 32*64kB (UM) [ 1117.065606] Free swap = 0kB [ 1117.065610] 5*128kB (M) [ 1117.071497] Total swap = 0kB [ 1117.071504] 2097051 pages RAM [ 1117.071507] 0 pages HighMem/MovableOnly [ 1117.071510] 363840 pages reserved [ 1117.071513] 0 pages cma reserved [ 1117.071519] Out of memory (oom_kill_allocating_task): Kill process 26028 (systemd-journal) score 0 or sacrifice child [ 1117.071547] Killed process 26028 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:4kB, shmem-rss:1544kB [ 1117.076340] 2*256kB [ 1117.079104] systemd-journal: [ 1117.094121] (M) 42*512kB [ 1117.108972] page allocation failure: order:0 [ 1117.124495] oom_reaper: reaped process 26028 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1544kB [ 1117.127339] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1117.130750] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1117.139224] (null) [ 1117.139228] systemd-journal cpuset=/ mems_allowed=0-1 [ 1117.139247] CPU: 0 PID: 26028 Comm: systemd-journal Not tainted 4.14.222-syzkaller #0 [ 1117.139251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1117.139254] Call Trace: [ 1117.139273] dump_stack+0x1b2/0x281 [ 1117.151411] (null) [ 1117.155811] warn_alloc.cold+0x96/0x1cc [ 1117.157938] , order=0, oom_score_adj=0 [ 1117.163106] ? zone_watermark_ok_safe+0x220/0x220 [ 1117.163121] ? wait_for_completion_io+0x10/0x10 [ 1117.163132] __alloc_pages_nodemask+0x2127/0x2720 [ 1117.163151] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1117.163174] alloc_pages_current+0x155/0x260 [ 1117.176467] (U) [ 1117.180534] filemap_fault+0xea3/0x1980 [ 1117.183140] 0*1024kB [ 1117.186710] ext4_filemap_fault+0x84/0xb0 [ 1117.188827] 0*2048kB [ 1117.192779] __do_fault+0xfa/0x380 [ 1117.192789] __handle_mm_fault+0x2497/0x4620 [ 1117.192799] ? ep_poll+0x1ab/0xa50 [ 1117.192805] ? vm_insert_page+0x7c0/0x7c0 [ 1117.192826] handle_mm_fault+0x391/0x860 [ 1117.192837] __do_page_fault+0x549/0xad0 [ 1117.192851] ? spurious_fault+0x640/0x640 [ 1117.202183] syz-fuzzer cpuset= [ 1117.206292] ? do_page_fault+0x60/0x500 [ 1117.211096] / [ 1117.215916] ? page_fault+0x2f/0x50 [ 1117.225084] 0*4096kB [ 1117.226254] page_fault+0x45/0x50 [ 1117.228638] = 26500kB [ 1117.232762] RIP: 0001:0xffffffffffffffff [ 1117.232766] RSP: cee1f1e0:00007fff741397e0 EFLAGS: 7fff74139600 [ 1117.292180] mems_allowed=0-1 [ 1117.303539] CPU: 1 PID: 7978 Comm: syz-fuzzer Not tainted 4.14.222-syzkaller #0 [ 1117.310994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1117.315281] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1117.320344] Call Trace: [ 1117.331137] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1117.331731] dump_stack+0x1b2/0x281 [ 1117.340280] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1117.343901] dump_header+0x178/0x82f [ 1117.343911] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1117.343922] ? ___ratelimit+0x2cd/0x530 [ 1117.352940] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1117.356617] oom_kill_process.cold+0x10/0xb18 [ 1117.361711] 45870 total pagecache pages [ 1117.366089] out_of_memory+0xe3e/0x1190 [ 1117.374657] 0 pages in swap cache [ 1117.379114] ? oom_killer_disable+0x1c0/0x1c0 [ 1117.383079] Swap cache stats: add 0, delete 0, find 0/0 [ 1117.387014] ? mutex_trylock+0x152/0x1a0 [ 1117.390437] Free swap = 0kB [ 1117.394912] __alloc_pages_nodemask+0x23e1/0x2720 [ 1117.394932] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1117.400276] Total swap = 0kB [ 1117.404327] alloc_pages_current+0x155/0x260 [ 1117.404338] filemap_fault+0xea3/0x1980 [ 1117.407332] 2097051 pages RAM [ 1117.413234] ext4_filemap_fault+0x84/0xb0 [ 1117.413246] __do_fault+0xfa/0x380 [ 1117.418081] 0 pages HighMem/MovableOnly [ 1117.421077] __handle_mm_fault+0x2497/0x4620 [ 1117.425485] 363840 pages reserved [ 1117.429423] ? vm_insert_page+0x7c0/0x7c0 [ 1117.432516] 0 pages cma reserved [ 1117.436636] handle_mm_fault+0x391/0x860 [ 1117.463612] __do_page_fault+0x549/0xad0 [ 1117.467669] ? spurious_fault+0x640/0x640 [ 1117.471805] ? do_page_fault+0x60/0x500 [ 1117.475770] ? page_fault+0x2f/0x50 [ 1117.479387] page_fault+0x45/0x50 [ 1117.483351] RIP: 1980:0x1040b8fea6a [ 1117.486964] RSP: 03e7:000000c000353e40 EFLAGS: 00000003 [ 1117.500129] Mem-Info: [ 1117.511190] active_anon:11723 inactive_anon:45343 isolated_anon:0 [ 1117.511190] active_file:16 inactive_file:40 isolated_file:0 [ 1117.511190] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1117.511190] slab_reclaimable:12170 slab_unreclaimable:113350 [ 1117.511190] mapped:52655 shmem:45839 pagetables:704 bounce:0 [ 1117.511190] free:25718 free_pcp:235 free_cma:0 [ 1117.591134] Node 0 active_anon:46476kB inactive_anon:130212kB active_file:52kB inactive_file:548kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130016kB dirty:0kB writeback:0kB shmem:131940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1117.645045] Node 1 active_anon:416kB inactive_anon:51160kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:80804kB dirty:0kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1117.711135] Node 0 DMA free:11116kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:1080kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1117.761114] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1117.766185] Node 0 DMA32 free:44316kB min:36200kB low:45248kB high:54296kB active_anon:46476kB inactive_anon:130192kB active_file:52kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2420kB bounce:0kB free_pcp:820kB local_pcp:588kB free_cma:0kB [ 1117.827428] lowmem_reserve[]: 0 0 0 0 0 [ 1117.831514] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1117.898270] lowmem_reserve[]: 0 0 0 0 0 [ 1117.906096] Node 1 Normal free:585540kB min:53696kB low:67120kB high:80544kB active_anon:416kB inactive_anon:51160kB active_file:12kB inactive_file:912kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:396kB bounce:0kB free_pcp:220kB local_pcp:92kB free_cma:0kB [ 1117.974833] lowmem_reserve[]: 0 0 0 0 0 [ 1117.979031] Node 0 DMA: 1*4kB (M) 1*8kB (U) 0*16kB 1*32kB (M) 15*64kB (UM) 3*128kB (U) 4*256kB (UM) 3*512kB (UM) 1*1024kB (U) 1*2048kB (U) 1*4096kB (M) = 11116kB [ 1118.021271] Node 0 DMA32: 11872*4kB (UME) 9284*8kB (UME) 617*16kB (UME) 59*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 133520kB [ 1118.051103] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1118.071375] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 11*16kB (M) 20*32kB (UM) 2349*64kB (UM) 1884*128kB (UM) 155*256kB (UM) 42*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 453508kB [ 1118.101083] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1118.109948] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1118.143091] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1118.173531] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1118.191088] 46537 total pagecache pages [ 1118.195086] 0 pages in swap cache [ 1118.198527] Swap cache stats: add 0, delete 0, find 0/0 [ 1118.206799] Free swap = 0kB [ 1118.210181] Total swap = 0kB [ 1118.213242] 2097051 pages RAM [ 1118.216337] 0 pages HighMem/MovableOnly [ 1118.220305] 363840 pages reserved [ 1118.226681] 0 pages cma reserved [ 1118.230063] Out of memory (oom_kill_allocating_task): Kill process 7978 (syz-fuzzer) score 0 or sacrifice child [ 1118.240404] Killed process 26100 (syz-executor.5) total-vm:84904kB, anon-rss:64kB, file-rss:4kB, shmem-rss:0kB [ 1118.259183] oom_reaper: reaped process 26100 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1118.328396] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1118.345020] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1118.354362] CPU: 1 PID: 26701 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1118.362250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1118.371597] Call Trace: [ 1118.374186] dump_stack+0x1b2/0x281 [ 1118.377812] warn_alloc.cold+0x96/0x1cc [ 1118.381787] ? zone_watermark_ok_safe+0x220/0x220 [ 1118.386642] __alloc_pages_nodemask+0x2127/0x2720 [ 1118.391751] ? io_schedule_timeout+0x140/0x140 [ 1118.396334] ? lock_acquire+0x170/0x3f0 [ 1118.400310] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1118.405156] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1118.410602] ? __mutex_unlock_slowpath+0x75/0x770 [ 1118.415616] alloc_pages_current+0x155/0x260 [ 1118.420024] ion_page_pool_alloc+0x118/0x1b0 [ 1118.424431] ion_system_heap_allocate+0x133/0x8c0 [ 1118.429269] ? _raw_spin_unlock+0x29/0x40 [ 1118.433419] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1118.438349] ? ion_system_contig_heap_create+0x130/0x130 [ 1118.443794] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1118.448803] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1118.453639] ion_alloc+0x27a/0x810 [ 1118.457175] ? ion_dma_buf_release+0x40/0x40 [ 1118.461577] ? __might_fault+0x177/0x1b0 [ 1118.465632] ion_ioctl+0xea/0x1f0 [ 1118.469082] ? ion_query_heaps+0x360/0x360 [ 1118.473401] ? ion_query_heaps+0x360/0x360 [ 1118.477628] do_vfs_ioctl+0x75a/0xff0 [ 1118.481425] ? ioctl_preallocate+0x1a0/0x1a0 [ 1118.485823] ? lock_downgrade+0x740/0x740 [ 1118.489967] ? __fget+0x225/0x360 [ 1118.493415] ? do_vfs_ioctl+0xff0/0xff0 [ 1118.497381] ? security_file_ioctl+0x83/0xb0 [ 1118.501781] SyS_ioctl+0x7f/0xb0 [ 1118.505136] ? do_vfs_ioctl+0xff0/0xff0 [ 1118.509191] do_syscall_64+0x1d5/0x640 [ 1118.513083] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1118.518263] RIP: 0033:0x465ef9 [ 1118.521442] RSP: 002b:00007f26a58f1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1118.529141] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1118.536403] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1118.543674] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1118.551019] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1118.558278] R13: 00007ffe7e02d34f R14: 00007f26a58f1300 R15: 0000000000022000 [ 1118.581434] warn_alloc_show_mem: 1 callbacks suppressed [ 1118.581438] Mem-Info: [ 1118.589233] active_anon:11661 inactive_anon:45343 isolated_anon:0 [ 1118.589233] active_file:68 inactive_file:1418 isolated_file:0 [ 1118.589233] unevictable:0 dirty:27 writeback:0 unstable:0 [ 1118.589233] slab_reclaimable:12170 slab_unreclaimable:113348 [ 1118.589233] mapped:44414 shmem:45839 pagetables:641 bounce:0 [ 1118.589233] free:244877 free_pcp:294 free_cma:0 [ 1118.628056] Node 0 active_anon:46216kB inactive_anon:130212kB active_file:248kB inactive_file:5200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:107772kB dirty:0kB writeback:0kB shmem:131940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1118.663208] Node 1 active_anon:428kB inactive_anon:51160kB active_file:24kB inactive_file:972kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70284kB dirty:108kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1118.695944] Node 0 DMA free:11108kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:1160kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1118.730188] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1118.736001] Node 0 DMA32 free:1011524kB min:36200kB low:45248kB high:54296kB active_anon:46216kB inactive_anon:130192kB active_file:348kB inactive_file:5440kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7264kB pagetables:2168kB bounce:0kB free_pcp:992kB local_pcp:244kB free_cma:0kB [ 1118.767161] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1118.786711] lowmem_reserve[]: 0 0 0 0 0 [ 1118.790721] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1118.792557] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1118.820343] lowmem_reserve[]: 0 0 0 0 0 [ 1118.836363] Node 1 Normal free:293772kB min:53696kB low:67120kB high:80544kB active_anon:428kB inactive_anon:51160kB active_file:24kB inactive_file:972kB unevictable:0kB writepending:108kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:396kB bounce:0kB free_pcp:748kB local_pcp:112kB free_cma:0kB [ 1118.866776] systemd[1]: Stopped Journal Service. [ 1118.870129] lowmem_reserve[]: 0 0 0 0 0 [ 1118.876812] Node 0 DMA: 29*4kB (UM) 2*8kB (U) 0*16kB 1*32kB (M) 13*64kB (UM) 3*128kB (U) 4*256kB (UM) 3*512kB (UM) 1*1024kB (U) 1*2048kB (U) 1*4096kB (M) = 11108kB [ 1118.894309] systemd[1]: Starting Journal Service... [ 1118.896508] Node 0 DMA32: 12928*4kB (U) 20193*8kB (UME) 19051*16kB (UME) 8774*32kB (UE) 2808*64kB (UM) 245*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1010168kB [ 1118.921303] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1118.932402] Node 1 Normal: 3036*4kB (UM) 3176*8kB (UM) 3160*16kB (UM) 2855*32kB (UM) 2972*64kB (UM) 133*128kB (UM) 7*256kB (UM) 42*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 410000kB [ 1118.949042] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1118.958079] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1118.967052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1118.978951] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1118.988312] 48274 total pagecache pages [ 1118.993212] 0 pages in swap cache [ 1118.997282] Swap cache stats: add 0, delete 0, find 0/0 [ 1119.003582] Free swap = 0kB [ 1119.007115] Total swap = 0kB [ 1119.010652] 2097051 pages RAM [ 1119.014548] 0 pages HighMem/MovableOnly [ 1119.019174] 363840 pages reserved [ 1119.024124] 0 pages cma reserved [ 1119.285198] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1119.399557] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1119.413441] systemd-journald[26737]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1119.650787] systemd[1]: Started Journal Service. 01:30:44 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:30:44 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440)='/dev/nvram\x00', 0x20000, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r1, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendto$rose(r0, &(0x7f0000000300)="4698391bb29bbcd1d7976672cb13738b6382313cf52199dc64510b0f389812a32d56a6ad92e7e00a75e18b9cffa09c9a084c0b055b7b7129c9b2f6c4856996484d747eec35f1bdc868a9d43bb8f9779774d124507d6e72f5f00f311a709a97290a8ca4533a8fd6528cde713777e0483b4ccc49c75dc308a85d8027ccfa7d97f9ff00684f8c1fe782df0626280606635391fb5f5111f879d1d5b752b57263710edc4ba3731f44de335e8fb62b89c98c39b3a611713096ac2ada84e0d63710ee02db94ba97361b034e1fac0005a3a4d172fa8ca8a98ed4a86fe73ce03f31d189cf242dc1d0e052fd657cb833f9", 0xec, 0x4000, &(0x7f0000000400)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x2, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x9, 0x100, 0x1, 0x8, 0xffff, 0x7, 0x5, 0x81], 0x8, 0x800, 0x0, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f00000001c0)={0x8, 0x120, 0xfa00, {0x2, {0x1ff, 0x4, "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", 0x7, 0x5, 0x4, 0x40, 0x20, 0x5, 0x3, 0x1}}}, 0x128) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f00000000c0)={r4}) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r6) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r7) ioctl$SIOCRSSCAUSE(r5, 0x89e1, &(0x7f0000000100)=0x6) 01:30:44 executing program 4: memfd_create(0x0, 0x4) 01:30:44 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:30:44 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x0, 0x1}) 01:30:44 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200100, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000040)={@any, 0x80000000}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) 01:30:44 executing program 4: memfd_create(0x0, 0x0) 01:30:44 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x0, 0x1}) 01:30:44 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000180)=""/4096, 0x1000, 0x600000c0, 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x801, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2004}) [ 1119.803447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1119.829091] batman_adv: batadv0: Removing interface: batadv_slave_0 01:30:44 executing program 4: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x44}, 0x1, 0x0, 0x0, 0x881}, 0xc000) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast, 0x3}, 0x10) memfd_create(0x0, 0xa) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x200, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) connect$l2tp(r0, &(0x7f00000001c0)={0x2, 0x0, @empty, 0x3}, 0x10) 01:30:44 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe}) [ 1119.871871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1119.909322] batman_adv: batadv0: Removing interface: batadv_slave_1 01:30:44 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x40, 0x1}) [ 1119.944320] device bridge_slave_1 left promiscuous mode [ 1119.970269] bridge0: port 2(bridge_slave_1) entered disabled state 01:30:44 executing program 4: memfd_create(0x0, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="03031b90b9d6f81ca635461d04ae0008003b0005000000000000001100000005002d000100000008003400fe00000000000000000000000000434bad54814740d847a291ca6d0084a8890246ee587ac0acf5739dbd7c1e1f219485bffaef495e7bd428516aac5fc61e36921fc97c89410f0000008000000000d5fec32fb826af0365e83b5ee5e5e7c6f476b1a24bdfacfab394dc36f4e4770e3811aac055102a7b40614c662121ea6c6f7cbe98f0f364c2244a785e2490edb877ce254c6ecd28d2382f78b98ed870a4a6667f70bc611acf67fa921225571743f90190590b4e5e23e4774224e35a"], 0x64}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x48000) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r2) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000000000)=0x66ed) [ 1119.997180] device bridge_slave_0 left promiscuous mode [ 1120.013944] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.057010] device veth1_macvtap left promiscuous mode [ 1120.080600] device veth0_macvtap left promiscuous mode [ 1120.105331] device veth1_vlan left promiscuous mode [ 1120.136431] device veth0_vlan left promiscuous mode [ 1120.270433] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1120.288144] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1120.300300] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1120.305664] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1120.310994] CPU: 1 PID: 26764 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 1120.318880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1120.328234] Call Trace: [ 1120.330830] dump_stack+0x1b2/0x281 [ 1120.334465] warn_alloc.cold+0x96/0x1cc [ 1120.338443] ? zone_watermark_ok_safe+0x220/0x220 [ 1120.343329] __alloc_pages_nodemask+0x2127/0x2720 [ 1120.348182] ? __schedule+0x893/0x1de0 [ 1120.352132] ? lock_acquire+0x170/0x3f0 [ 1120.356112] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1120.360969] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1120.366425] ? __mutex_unlock_slowpath+0x75/0x770 [ 1120.371273] alloc_pages_current+0x155/0x260 [ 1120.375686] ion_page_pool_alloc+0x118/0x1b0 [ 1120.380095] ion_system_heap_allocate+0x133/0x8c0 [ 1120.384955] ? ion_alloc+0x187/0x810 [ 1120.388678] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1120.394145] ? ion_system_contig_heap_create+0x130/0x130 [ 1120.399606] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1120.404635] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1120.409498] ion_alloc+0x204/0x810 [ 1120.413049] ? ion_dma_buf_release+0x40/0x40 [ 1120.417485] ? __might_fault+0x177/0x1b0 [ 1120.421560] ion_ioctl+0xea/0x1f0 [ 1120.425023] ? ion_query_heaps+0x360/0x360 [ 1120.429258] ? retint_kernel+0x2d/0x2d [ 1120.433184] ? ion_query_heaps+0x360/0x360 [ 1120.437428] do_vfs_ioctl+0x75a/0xff0 [ 1120.441224] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1120.445978] ? ioctl_preallocate+0x1a0/0x1a0 [ 1120.450382] ? retint_kernel+0x2d/0x2d [ 1120.454279] ? do_vfs_ioctl+0xff0/0xff0 [ 1120.458254] ? security_file_ioctl+0x83/0xb0 [ 1120.462660] SyS_ioctl+0x7f/0xb0 [ 1120.466024] ? do_vfs_ioctl+0xff0/0xff0 [ 1120.470009] do_syscall_64+0x1d5/0x640 [ 1120.473904] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1120.479094] RIP: 0033:0x465ef9 [ 1120.482287] RSP: 002b:00007f7d1a1ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1120.490344] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1120.497608] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1120.504879] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1120.512151] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1120.519420] R13: 00007ffc8ea5f85f R14: 00007f7d1a1ad300 R15: 0000000000022000 [ 1120.527922] CPU: 1 PID: 26779 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1120.535903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1120.545257] Call Trace: [ 1120.547856] dump_stack+0x1b2/0x281 [ 1120.551486] warn_alloc.cold+0x96/0x1cc [ 1120.555473] ? zone_watermark_ok_safe+0x220/0x220 [ 1120.560337] __alloc_pages_nodemask+0x2127/0x2720 [ 1120.565192] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1120.570316] ? lock_acquire+0x170/0x3f0 [ 1120.574304] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1120.579155] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1120.584612] ? __mutex_unlock_slowpath+0x75/0x770 [ 1120.589459] alloc_pages_current+0x155/0x260 [ 1120.593874] ion_page_pool_alloc+0x118/0x1b0 [ 1120.598292] ion_system_heap_allocate+0x133/0x8c0 [ 1120.603145] ? ion_alloc+0x187/0x810 [ 1120.606858] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1120.612317] ? ion_system_contig_heap_create+0x130/0x130 [ 1120.617780] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1120.622802] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1120.627649] ion_alloc+0x204/0x810 [ 1120.631202] ? ion_dma_buf_release+0x40/0x40 [ 1120.635620] ? __might_fault+0x177/0x1b0 [ 1120.639699] ion_ioctl+0xea/0x1f0 [ 1120.643160] ? ion_query_heaps+0x360/0x360 [ 1120.647406] ? ion_query_heaps+0x360/0x360 [ 1120.651645] do_vfs_ioctl+0x75a/0xff0 [ 1120.655457] ? ioctl_preallocate+0x1a0/0x1a0 [ 1120.659875] ? lock_downgrade+0x740/0x740 [ 1120.664032] ? __fget+0x225/0x360 [ 1120.667510] ? do_vfs_ioctl+0xff0/0xff0 [ 1120.671493] ? security_file_ioctl+0x83/0xb0 [ 1120.675912] SyS_ioctl+0x7f/0xb0 [ 1120.679281] ? do_vfs_ioctl+0xff0/0xff0 [ 1120.683262] do_syscall_64+0x1d5/0x640 [ 1120.687243] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1120.692439] RIP: 0033:0x465ef9 [ 1120.695640] RSP: 002b:00007fab2d828188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1120.703353] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1120.710620] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1120.717889] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1120.725163] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1120.732434] R13: 00007ffde76bccff R14: 00007fab2d828300 R15: 0000000000022000 [ 1120.767839] Mem-Info: [ 1120.770461] active_anon:11830 inactive_anon:47373 isolated_anon:12 [ 1120.770461] active_file:2347 inactive_file:4423 isolated_file:25 [ 1120.770461] unevictable:0 dirty:5 writeback:0 unstable:0 [ 1120.770461] slab_reclaimable:12263 slab_unreclaimable:115134 [ 1120.770461] mapped:48545 shmem:47884 pagetables:713 bounce:0 [ 1120.770461] free:269848 free_pcp:172 free_cma:0 [ 1120.810215] Node 0 active_anon:46896kB inactive_anon:138332kB active_file:8680kB inactive_file:17392kB unevictable:0kB isolated(anon):0kB isolated(file):100kB mapped:123864kB dirty:8kB writeback:0kB shmem:140120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1120.845026] Node 1 active_anon:424kB inactive_anon:51160kB active_file:708kB inactive_file:300kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:70316kB dirty:12kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1120.872678] Node 0 DMA free:11128kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:1096kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1120.900090] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1120.905728] Node 0 DMA32 free:730368kB min:36200kB low:45248kB high:54296kB active_anon:46996kB inactive_anon:138312kB active_file:7100kB inactive_file:17640kB unevictable:0kB writepending:208kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7648kB pagetables:2568kB bounce:0kB free_pcp:712kB local_pcp:8kB free_cma:0kB [ 1120.942762] lowmem_reserve[]: 0 0 0 0 0 [ 1120.952766] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1120.978484] device hsr_slave_1 left promiscuous mode [ 1120.984294] lowmem_reserve[]: 0 0 0 0 0 [ 1120.988302] Node 1 Normal free:238692kB min:53696kB low:67120kB high:80544kB active_anon:424kB inactive_anon:51160kB active_file:760kB inactive_file:248kB unevictable:0kB writepending:84kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:284kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1120.997844] device hsr_slave_0 left promiscuous mode [ 1121.057994] lowmem_reserve[]: 0 0 0 0 0 [ 1121.071592] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1121.089371] Node 0 DMA: 42*4kB (UM) 4*8kB (U) 13*16kB (UM) 15*32kB (UM) 2*64kB (UM) 11*128kB (U) 4*256kB (UM) 3*512kB (UM) 0*1024kB 1*2048kB (U) 1*4096kB (M) = 11128kB [ 1121.109969] team0 (unregistering): Port device team_slave_1 removed [ 1121.118155] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1121.133405] CPU: 1 PID: 26761 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1121.141311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1121.150663] Call Trace: [ 1121.153251] dump_stack+0x1b2/0x281 [ 1121.156878] warn_alloc.cold+0x96/0x1cc [ 1121.160848] ? zone_watermark_ok_safe+0x220/0x220 [ 1121.165699] __alloc_pages_nodemask+0x2127/0x2720 [ 1121.170535] ? _raw_spin_unlock_irq+0x24/0x80 [ 1121.175114] ? lock_acquire+0x170/0x3f0 [ 1121.179086] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1121.184019] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1121.189567] ? __mutex_unlock_slowpath+0x75/0x770 [ 1121.194410] alloc_pages_current+0x155/0x260 [ 1121.198815] ion_page_pool_alloc+0x118/0x1b0 [ 1121.203221] ion_system_heap_allocate+0x133/0x8c0 [ 1121.208059] ? ion_alloc+0x187/0x810 [ 1121.211766] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1121.217211] ? ion_system_contig_heap_create+0x130/0x130 [ 1121.222655] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1121.227668] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1121.232508] ion_alloc+0x204/0x810 [ 1121.236046] ? ion_dma_buf_release+0x40/0x40 [ 1121.240451] ? __might_fault+0x177/0x1b0 [ 1121.244511] ion_ioctl+0xea/0x1f0 [ 1121.247959] ? ion_query_heaps+0x360/0x360 [ 1121.252293] ? ion_query_heaps+0x360/0x360 [ 1121.256529] do_vfs_ioctl+0x75a/0xff0 [ 1121.260335] ? ioctl_preallocate+0x1a0/0x1a0 [ 1121.264741] ? lock_downgrade+0x740/0x740 [ 1121.268899] ? __fget+0x225/0x360 [ 1121.272349] ? do_vfs_ioctl+0xff0/0xff0 [ 1121.276322] ? security_file_ioctl+0x83/0xb0 [ 1121.280733] SyS_ioctl+0x7f/0xb0 [ 1121.284097] ? do_vfs_ioctl+0xff0/0xff0 [ 1121.288071] do_syscall_64+0x1d5/0x640 [ 1121.291966] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1121.297361] RIP: 0033:0x465ef9 [ 1121.300543] RSP: 002b:00007f26a58f1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1121.308249] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1121.315515] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1121.322784] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1121.330054] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1121.337342] R13: 00007ffe7e02d34f R14: 00007f26a58f1300 R15: 0000000000022000 [ 1121.345265] team0 (unregistering): Port device team_slave_0 removed [ 1121.367353] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1121.370749] Node 0 DMA32: 52*4kB (ME) 110*8kB (ME) 18289*16kB (UME) 13617*32kB (UME) 739*64kB (UM) 211*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 803760kB [ 1121.393688] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1121.407275] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1121.442045] Node 1 Normal: 4571*4kB (UM) 1962*8kB (UM) 1863*16kB (UM) 1577*32kB (U) 6562*64kB (U) 603*128kB (U) 4*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 612428kB [ 1121.470553] bond0 (unregistering): Released all slaves [ 1121.470770] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1121.500737] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1121.509653] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1121.540766] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1121.549605] 54387 total pagecache pages [ 1121.556355] 0 pages in swap cache [ 1121.559826] Swap cache stats: add 0, delete 0, find 0/0 [ 1121.580726] Free swap = 0kB [ 1121.583760] Total swap = 0kB [ 1121.586857] 2097051 pages RAM [ 1121.589986] 0 pages HighMem/MovableOnly [ 1121.600729] 363840 pages reserved [ 1121.604217] 0 pages cma reserved [ 1121.804699] warn_alloc_show_mem: 1 callbacks suppressed [ 1121.804703] Mem-Info: [ 1121.835899] active_anon:11849 inactive_anon:47373 isolated_anon:0 [ 1121.835899] active_file:2637 inactive_file:4005 isolated_file:15 [ 1121.835899] unevictable:0 dirty:0 writeback:3 unstable:0 [ 1121.835899] slab_reclaimable:12266 slab_unreclaimable:114730 [ 1121.835899] mapped:57272 shmem:47884 pagetables:708 bounce:0 [ 1121.835899] free:348969 free_pcp:378 free_cma:0 [ 1121.946587] Node 0 active_anon:46972kB inactive_anon:138332kB active_file:9784kB inactive_file:15776kB unevictable:0kB isolated(anon):0kB isolated(file):60kB mapped:158700kB dirty:0kB writeback:0kB shmem:140120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1122.042274] Node 1 active_anon:424kB inactive_anon:51160kB active_file:764kB inactive_file:244kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70388kB dirty:12kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1122.118050] Node 0 DMA free:11328kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:1096kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1122.178858] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1122.193509] Node 0 DMA32 free:403972kB min:36200kB low:45248kB high:54296kB active_anon:47020kB inactive_anon:138312kB active_file:8720kB inactive_file:15772kB unevictable:0kB writepending:72kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7680kB pagetables:2708kB bounce:0kB free_pcp:984kB local_pcp:768kB free_cma:0kB [ 1122.260164] lowmem_reserve[]: 0 0 0 0 0 [ 1122.268646] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1122.335781] lowmem_reserve[]: 0 0 0 0 0 [ 1122.344385] Node 1 Normal free:803512kB min:53696kB low:67120kB high:80544kB active_anon:424kB inactive_anon:51160kB active_file:764kB inactive_file:244kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:284kB bounce:0kB free_pcp:732kB local_pcp:732kB free_cma:0kB [ 1122.413592] lowmem_reserve[]: 0 0 0 0 0 [ 1122.422259] Node 0 DMA: 20*4kB (UM) 16*8kB (U) 23*16kB (UM) 14*32kB (UM) 3*64kB (UM) 11*128kB (U) 4*256kB (UM) 3*512kB (UM) 0*1024kB 1*2048kB (U) 1*4096kB (M) = 11328kB [ 1122.460651] Node 0 DMA32: 155*4kB (ME) 268*8kB (ME) 162*16kB (UME) 2200*32kB (UME) 780*64kB (UM) 214*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 153324kB [ 1122.497952] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1122.523635] Node 1 Normal: 436*4kB (UM) 729*8kB (UM) 644*16kB (UM) 367*32kB (U) 7768*64kB (U) 1868*128kB (U) 53*256kB (U) 47*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 803512kB [ 1122.559012] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1122.577752] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1122.598671] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1122.623023] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1122.644854] 54381 total pagecache pages [ 1122.653890] 0 pages in swap cache [ 1122.663466] Swap cache stats: add 0, delete 0, find 0/0 [ 1122.675421] Free swap = 0kB [ 1122.684554] Total swap = 0kB [ 1122.691719] 2097051 pages RAM [ 1122.698128] 0 pages HighMem/MovableOnly [ 1122.709662] 363840 pages reserved [ 1122.718031] 0 pages cma reserved [ 1123.431390] IPVS: ftp: loaded support on port[0] = 21 [ 1123.565090] oom_reaper: reaped process 26764 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1123.615616] oom_reaper: reaped process 26779 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1123.642567] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1123.680020] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1123.702359] CPU: 0 PID: 9603 Comm: syz-fuzzer Not tainted 4.14.222-syzkaller #0 [ 1123.709813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1123.719167] Call Trace: [ 1123.720528] syz-executor.3: page allocation failure: order:0 [ 1123.721742] dump_stack+0x1b2/0x281 [ 1123.721753] dump_header+0x178/0x82f [ 1123.727531] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1123.731134] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1123.731142] ? ___ratelimit+0x2cd/0x530 [ 1123.731151] oom_kill_process.cold+0x10/0xb18 [ 1123.731168] out_of_memory+0xe3e/0x1190 [ 1123.731181] ? oom_killer_disable+0x1c0/0x1c0 [ 1123.731187] ? mutex_trylock+0x152/0x1a0 [ 1123.731196] __alloc_pages_nodemask+0x23e1/0x2720 [ 1123.731216] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1123.734906] syz-executor.1: [ 1123.742030] alloc_pages_current+0x155/0x260 [ 1123.742044] filemap_fault+0xea3/0x1980 [ 1123.742060] ext4_filemap_fault+0x84/0xb0 [ 1123.742069] __do_fault+0xfa/0x380 [ 1123.742077] __handle_mm_fault+0x2497/0x4620 [ 1123.742086] ? vm_insert_page+0x7c0/0x7c0 [ 1123.742103] handle_mm_fault+0x391/0x860 [ 1123.742114] __do_page_fault+0x549/0xad0 [ 1123.742125] ? spurious_fault+0x640/0x640 [ 1123.742133] ? do_page_fault+0x60/0x500 [ 1123.742148] ? page_fault+0x2f/0x50 [ 1123.749151] (null) [ 1123.751192] page_fault+0x45/0x50 [ 1123.751200] RIP: 4621e0:0xc00004b3e0 [ 1123.751204] RSP: 0300:000000c00494de40 EFLAGS: c00029bb58 [ 1123.764283] Mem-Info: [ 1123.769535] page allocation failure: order:0 [ 1123.783853] active_anon:11912 inactive_anon:47374 isolated_anon:0 [ 1123.783853] active_file:5 inactive_file:14 isolated_file:0 [ 1123.783853] unevictable:0 dirty:25 writeback:0 unstable:0 [ 1123.783853] slab_reclaimable:12256 slab_unreclaimable:115240 [ 1123.783853] mapped:52631 shmem:47885 pagetables:766 bounce:0 [ 1123.783853] free:13964 free_pcp:56 free_cma:0 [ 1123.785516] syz-executor.3 cpuset= [ 1123.789477] Node 0 active_anon:46972kB inactive_anon:138332kB active_file:0kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140884kB dirty:84kB writeback:0kB shmem:140120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1123.789491] Node 1 active_anon:676kB inactive_anon:51164kB active_file:28kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69640kB dirty:16kB writeback:0kB shmem:51420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1123.793680] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1123.793688] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1123.793707] CPU: 1 PID: 26764 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 1123.793714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1123.810461] Node 0 [ 1123.813936] Call Trace: [ 1123.818077] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:24kB inactive_file:12kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1123.822029] dump_stack+0x1b2/0x281 [ 1123.822042] warn_alloc.cold+0x96/0x1cc [ 1123.822054] ? zone_watermark_ok_safe+0x220/0x220 [ 1123.825661] lowmem_reserve[]: [ 1123.827793] ? usleep_range+0x130/0x130 [ 1123.831240] 0 [ 1123.834924] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1123.840447] 2717 [ 1123.842826] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1123.847209] 2718 [ 1123.880349] ? run_timer_softirq+0x5a0/0x5a0 [ 1123.880366] __alloc_pages_nodemask+0x2127/0x2720 [ 1123.880383] ? lock_acquire+0x170/0x3f0 [ 1123.880397] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1123.883945] 2718 [ 1123.911756] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1123.911772] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1123.911826] ? alloc_pages_current+0x37/0x260 [ 1123.911839] alloc_pages_current+0x155/0x260 [ 1123.911854] ion_page_pool_alloc+0x118/0x1b0 [ 1123.911866] ion_system_heap_allocate+0x133/0x8c0 [ 1123.939077] 2718 [ 1123.946664] ? ion_alloc+0x187/0x810 [ 1123.946675] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1123.946687] ? ion_system_contig_heap_create+0x130/0x130 [ 1123.959640] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1123.959652] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1123.968997] Node 0 [ 1123.971199] ion_alloc+0x204/0x810 [ 1123.971215] ? ion_dma_buf_release+0x40/0x40 [ 1123.973782] DMA32 free:18076kB min:36200kB low:45248kB high:54296kB active_anon:47172kB inactive_anon:138312kB active_file:44kB inactive_file:12kB unevictable:0kB writepending:28kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7680kB pagetables:2708kB bounce:0kB free_pcp:100kB local_pcp:100kB free_cma:0kB [ 1123.999517] ? __might_fault+0x177/0x1b0 [ 1123.999529] ion_ioctl+0xea/0x1f0 [ 1123.999539] ? ion_query_heaps+0x360/0x360 [ 1124.003166] lowmem_reserve[]: [ 1124.007112] ? retint_kernel+0x2d/0x2d [ 1124.011939] 0 [ 1124.015010] ? ion_query_heaps+0x360/0x360 [ 1124.018965] 0 [ 1124.020748] do_vfs_ioctl+0x75a/0xff0 [ 1124.020758] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1124.020768] ? ioctl_preallocate+0x1a0/0x1a0 [ 1124.025854] 0 [ 1124.027896] ? retint_kernel+0x2d/0x2d [ 1124.032898] 0 [ 1124.034925] ? do_vfs_ioctl+0xff0/0xff0 [ 1124.039309] 0 [ 1124.044150] ? security_file_ioctl+0x83/0xb0 [ 1124.044162] SyS_ioctl+0x7f/0xb0 [ 1124.052927] ? do_vfs_ioctl+0xff0/0xff0 [ 1124.052938] do_syscall_64+0x1d5/0x640 [ 1124.052954] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1124.054984] Node 0 [ 1124.059455] RIP: 0033:0x465ef9 [ 1124.064903] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1124.069355] RSP: 002b:00007f7d1a1ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1124.073757] lowmem_reserve[]: [ 1124.078129] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1124.082960] 0 [ 1124.084997] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1124.085003] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1124.089035] 0 [ 1124.094461] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1124.094466] R13: 00007ffc8ea5f85f R14: 00007f7d1a1ad300 R15: 0000000000022000 [ 1124.095362] / [ 1124.099917] 0 [ 1124.105058] mems_allowed=0-1 [ 1124.105070] CPU: 1 PID: 26779 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1124.105075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1124.105079] Call Trace: [ 1124.105096] dump_stack+0x1b2/0x281 [ 1124.105109] warn_alloc.cold+0x96/0x1cc [ 1124.105122] ? zone_watermark_ok_safe+0x220/0x220 [ 1124.105131] ? usleep_range+0x130/0x130 [ 1124.105139] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1124.105151] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1124.105160] ? run_timer_softirq+0x5a0/0x5a0 [ 1124.105174] __alloc_pages_nodemask+0x2127/0x2720 [ 1124.105189] ? lock_acquire+0x170/0x3f0 [ 1124.105209] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1124.105221] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1124.105235] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1124.105253] alloc_pages_current+0x155/0x260 [ 1124.105265] ion_page_pool_alloc+0x118/0x1b0 [ 1124.105282] ion_system_heap_allocate+0x133/0x8c0 [ 1124.105292] ? ion_alloc+0x187/0x810 [ 1124.105301] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1124.105311] ? ion_system_contig_heap_create+0x130/0x130 [ 1124.105321] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1124.105331] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1124.105342] ion_alloc+0x204/0x810 [ 1124.105356] ? ion_dma_buf_release+0x40/0x40 [ 1124.105367] ? __might_fault+0x177/0x1b0 [ 1124.105379] ion_ioctl+0xea/0x1f0 [ 1124.105387] ? ion_query_heaps+0x360/0x360 [ 1124.105399] ? ion_query_heaps+0x360/0x360 [ 1124.105411] do_vfs_ioctl+0x75a/0xff0 [ 1124.128133] 0 [ 1124.148980] ? ioctl_preallocate+0x1a0/0x1a0 [ 1124.148991] ? lock_downgrade+0x740/0x740 [ 1124.149004] ? __fget+0x225/0x360 [ 1124.153064] 0 [ 1124.156488] ? do_vfs_ioctl+0xff0/0xff0 [ 1124.163782] ? security_file_ioctl+0x83/0xb0 [ 1124.167639] Node 1 [ 1124.169448] SyS_ioctl+0x7f/0xb0 [ 1124.173854] Normal free:26812kB min:53696kB low:67120kB high:80544kB active_anon:604kB inactive_anon:51172kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:284kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 1124.175611] ? do_vfs_ioctl+0xff0/0xff0 [ 1124.179467] lowmem_reserve[]: [ 1124.184204] do_syscall_64+0x1d5/0x640 [ 1124.184224] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1124.184233] RIP: 0033:0x465ef9 [ 1124.188614] 0 [ 1124.190484] RSP: 002b:00007fab2d828188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1124.190495] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1124.190500] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1124.190507] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1124.194366] 0 [ 1124.196148] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1124.196154] R13: 00007ffde76bccff R14: 00007fab2d828300 R15: 0000000000022000 [ 1124.200099] 0 [ 1124.202833] Mem-Info: [ 1124.206285] 0 [ 1124.209643] active_anon:11875 inactive_anon:47376 isolated_anon:0 [ 1124.209643] active_file:14 inactive_file:12 isolated_file:0 [ 1124.209643] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1124.209643] slab_reclaimable:12255 slab_unreclaimable:115117 [ 1124.209643] mapped:52607 shmem:47888 pagetables:748 bounce:0 [ 1124.209643] free:14160 free_pcp:75 free_cma:0 [ 1124.222944] 0 [ 1124.228458] Node 0 active_anon:46896kB inactive_anon:138332kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140840kB dirty:0kB writeback:0kB shmem:140120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1124.267740] Node 1 active_anon:604kB inactive_anon:51172kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69588kB dirty:0kB writeback:0kB shmem:51432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1124.277731] Node 0 [ 1124.284075] Node 0 [ 1124.289035] DMA: [ 1124.289680] DMA free:10984kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1124.304087] 2*4kB [ 1124.307845] lowmem_reserve[]: [ 1124.307855] (UM) [ 1124.310973] 0 2717 2718 2718 2718 [ 1124.310991] Node 0 DMA32 free:18844kB min:36200kB low:45248kB high:54296kB active_anon:46896kB inactive_anon:138312kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7680kB pagetables:2708kB bounce:0kB free_pcp:176kB local_pcp:76kB free_cma:0kB [ 1124.311015] lowmem_reserve[]: 0 0 0 0 0 [ 1124.311048] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1124.326753] 2*8kB [ 1124.331792] lowmem_reserve[]: [ 1124.341194] (UM) [ 1124.345032] 0 [ 1124.347259] 1*16kB [ 1124.354144] 0 [ 1124.364875] (U) [ 1124.367990] 0 [ 1124.374379] 2*32kB [ 1124.377896] 0 [ 1124.380164] (UM) [ 1124.385637] 0 [ 1124.385645] Node 1 Normal free:26812kB min:53696kB low:67120kB high:80544kB active_anon:604kB inactive_anon:51172kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:284kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 1124.385667] lowmem_reserve[]: [ 1124.393602] 2*64kB [ 1124.397924] 0 [ 1124.399288] (UM) [ 1124.403018] 0 0 0 0 [ 1124.403033] Node 0 DMA: 2*4kB (UM) 2*8kB (UM) 1*16kB (U) 2*32kB (UM) 2*64kB (UM) 8*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 1*4096kB [ 1124.416984] 8*128kB [ 1124.422169] (M) [ 1124.428340] (UM) [ 1124.428369] = 10984kB [ 1124.435648] 4*256kB [ 1124.438277] Node 0 [ 1124.440268] (UM) [ 1124.446276] DMA32: [ 1124.454075] 3*512kB [ 1124.456213] 579*4kB [ 1124.458819] (UM) [ 1124.465901] (UME) [ 1124.472115] 1*1024kB [ 1124.475152] 418*8kB [ 1124.477772] (M) [ 1124.479991] (UME) [ 1124.491472] 1*2048kB [ 1124.600417] 270*16kB [ 1124.624884] (U) [ 1124.820382] (UME) [ 1124.841835] 1*4096kB (M) = 10984kB [ 1124.911825] 89*32kB (UME) 41*64kB (UM) 19*128kB (UM) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18908kB [ 1124.913262] Node 0 DMA32: 1052*4kB (UME) 181*8kB (UME) 256*16kB (UME) 76*32kB (UME) 1746*64kB (UM) 179*128kB (UM) 11*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 149656kB [ 1124.950461] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1124.950858] Node 0 [ 1124.965010] Node 1 Normal: 75*4kB (M) 48*8kB (M) 23*16kB (UM) 3*32kB (UM) 1623*64kB (UM) 73*128kB (U) 30*256kB (UM) 53*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 149180kB [ 1124.970023] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1125.000593] Node 1 Normal: 75*4kB (M) 48*8kB (M) 23*16kB (UM) 3*32kB (UM) 1623*64kB (UM) 73*128kB (U) 30*256kB (UM) 53*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 149180kB [ 1125.030363] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1125.039223] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1125.040376] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1125.070373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1125.078977] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1125.080339] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1125.110353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1125.118945] 48932 total pagecache pages [ 1125.140326] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1125.140455] 0 pages in swap cache [ 1125.148916] 48932 total pagecache pages [ 1125.170359] Swap cache stats: add 0, delete 0, find 0/0 [ 1125.176271] Free swap = 0kB [ 1125.181128] Total swap = 0kB [ 1125.187107] 2097051 pages RAM [ 1125.190825] 0 pages in swap cache [ 1125.194346] Swap cache stats: add 0, delete 0, find 0/0 [ 1125.194658] 0 pages HighMem/MovableOnly [ 1125.199692] Free swap = 0kB [ 1125.199695] Total swap = 0kB [ 1125.199702] 2097051 pages RAM [ 1125.199705] 0 pages HighMem/MovableOnly [ 1125.199708] 363840 pages reserved [ 1125.199711] 0 pages cma reserved [ 1125.199719] Out of memory (oom_kill_allocating_task): Kill process 9603 (syz-fuzzer) score 0 or sacrifice child [ 1125.199778] Killed process 26795 (syz-executor.5) total-vm:84904kB, anon-rss:60kB, file-rss:4kB, shmem-rss:0kB [ 1125.221688] 363840 pages reserved [ 1125.250002] Bluetooth: hci1 command 0x0409 tx timeout [ 1125.271103] oom_reaper: reaped process 26795 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1125.286695] 0 pages cma reserved [ 1126.302452] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1126.333256] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1126.338418] CPU: 1 PID: 26779 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1126.346297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1126.355647] Call Trace: [ 1126.358236] dump_stack+0x1b2/0x281 [ 1126.361861] warn_alloc.cold+0x96/0x1cc [ 1126.365851] ? zone_watermark_ok_safe+0x220/0x220 [ 1126.370700] __alloc_pages_nodemask+0x2127/0x2720 [ 1126.375533] ? ___preempt_schedule+0x16/0x18 [ 1126.379939] ? lock_acquire+0x170/0x3f0 [ 1126.383916] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1126.388761] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1126.394324] ? __mutex_unlock_slowpath+0x75/0x770 [ 1126.399164] alloc_pages_current+0x155/0x260 [ 1126.403740] ion_page_pool_alloc+0x118/0x1b0 [ 1126.408131] ion_system_heap_allocate+0x133/0x8c0 [ 1126.412953] ? _raw_spin_unlock+0x29/0x40 [ 1126.417081] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1126.421988] ? ion_system_contig_heap_create+0x130/0x130 [ 1126.427417] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1126.432415] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1126.437238] ion_alloc+0x27a/0x810 [ 1126.440786] ? ion_dma_buf_release+0x40/0x40 [ 1126.445217] ? __might_fault+0x177/0x1b0 [ 1126.449258] ion_ioctl+0xea/0x1f0 [ 1126.452689] ? ion_query_heaps+0x360/0x360 [ 1126.456917] ? ion_query_heaps+0x360/0x360 [ 1126.461133] do_vfs_ioctl+0x75a/0xff0 [ 1126.464915] ? ioctl_preallocate+0x1a0/0x1a0 [ 1126.469322] ? lock_downgrade+0x740/0x740 [ 1126.473471] ? __fget+0x225/0x360 [ 1126.476900] ? do_vfs_ioctl+0xff0/0xff0 [ 1126.480855] ? security_file_ioctl+0x83/0xb0 [ 1126.485240] SyS_ioctl+0x7f/0xb0 [ 1126.488582] ? do_vfs_ioctl+0xff0/0xff0 [ 1126.492554] do_syscall_64+0x1d5/0x640 [ 1126.496425] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1126.501592] RIP: 0033:0x465ef9 [ 1126.504762] RSP: 002b:00007fab2d828188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1126.512445] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1126.519774] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1126.527021] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1126.534268] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1126.541516] R13: 00007ffde76bccff R14: 00007fab2d828300 R15: 0000000000022000 [ 1126.678400] warn_alloc_show_mem: 1 callbacks suppressed [ 1126.678404] Mem-Info: [ 1126.688597] active_anon:11842 inactive_anon:47376 isolated_anon:12 [ 1126.688597] active_file:724 inactive_file:3134 isolated_file:0 [ 1126.688597] unevictable:0 dirty:33 writeback:0 unstable:0 [ 1126.688597] slab_reclaimable:12254 slab_unreclaimable:114810 [ 1126.688597] mapped:46466 shmem:47888 pagetables:700 bounce:0 [ 1126.688597] free:154637 free_pcp:391 free_cma:0 [ 1126.731473] Node 0 active_anon:46768kB inactive_anon:138332kB active_file:2976kB inactive_file:14528kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:117576kB dirty:120kB writeback:0kB shmem:140120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1126.775128] Node 1 active_anon:600kB inactive_anon:51172kB active_file:20kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69588kB dirty:12kB writeback:0kB shmem:51432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1126.808311] Node 0 DMA free:11008kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1126.843453] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1126.848517] Node 0 DMA32 free:491584kB min:36200kB low:45248kB high:54296kB active_anon:46568kB inactive_anon:138312kB active_file:3756kB inactive_file:17428kB unevictable:0kB writepending:120kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7584kB pagetables:2516kB bounce:0kB free_pcp:1300kB local_pcp:552kB free_cma:0kB [ 1126.882766] lowmem_reserve[]: 0 0 0 0 0 [ 1126.887084] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1126.918166] lowmem_reserve[]: 0 0 0 0 0 [ 1126.923160] Node 1 Normal free:109940kB min:53696kB low:67120kB high:80544kB active_anon:488kB inactive_anon:51164kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:284kB bounce:0kB free_pcp:136kB local_pcp:124kB free_cma:0kB [ 1126.955350] lowmem_reserve[]: 0 0 0 0 0 [ 1126.959805] Node 0 DMA: 13*4kB (UM) 18*8kB (UM) 22*16kB (U) 15*32kB (UM) 2*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 1*4096kB (M) = 11012kB [ 1126.979263] Node 0 DMA32: 11271*4kB (UE) 11782*8kB (UME) 6969*16kB (UE) 7064*32kB (UME) 226*64kB (U) 7*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 492252kB [ 1126.998741] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1127.010025] Node 1 Normal: 3461*4kB (UM) 1852*8kB (UM) 1810*16kB (U) 1635*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 109940kB [ 1127.028098] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1127.037018] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1127.049269] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1127.058619] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1127.071711] 53117 total pagecache pages [ 1127.075718] 0 pages in swap cache [ 1127.079161] Swap cache stats: add 0, delete 0, find 0/0 [ 1127.086726] Free swap = 0kB [ 1127.089761] Total swap = 0kB [ 1127.095229] 2097051 pages RAM [ 1127.098341] 0 pages HighMem/MovableOnly [ 1127.104346] 363840 pages reserved [ 1127.107826] 0 pages cma reserved [ 1128.486933] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1128.519988] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1128.525165] CPU: 1 PID: 26764 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 1128.533043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1128.542389] Call Trace: [ 1128.544967] dump_stack+0x1b2/0x281 [ 1128.548575] warn_alloc.cold+0x96/0x1cc [ 1128.552528] ? zone_watermark_ok_safe+0x220/0x220 [ 1128.557358] __alloc_pages_nodemask+0x2127/0x2720 [ 1128.562187] ? lock_acquire+0x170/0x3f0 [ 1128.566150] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1128.570979] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1128.576409] ? __mutex_unlock_slowpath+0x75/0x770 [ 1128.581230] ? retint_kernel+0x2d/0x2d [ 1128.585186] alloc_pages_current+0x155/0x260 [ 1128.589580] ion_page_pool_alloc+0x118/0x1b0 [ 1128.593977] ion_system_heap_allocate+0x133/0x8c0 [ 1128.598796] ? _raw_spin_unlock+0x29/0x40 [ 1128.602924] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1128.607830] ? ion_system_contig_heap_create+0x130/0x130 [ 1128.613258] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1128.618077] ion_alloc+0x27a/0x810 [ 1128.621601] ? ion_dma_buf_release+0x40/0x40 [ 1128.625989] ? __might_fault+0x177/0x1b0 [ 1128.630032] ion_ioctl+0xea/0x1f0 [ 1128.633465] ? ion_query_heaps+0x360/0x360 [ 1128.637681] ? retint_kernel+0x2d/0x2d [ 1128.641546] ? ion_query_heaps+0x360/0x360 [ 1128.645757] do_vfs_ioctl+0x75a/0xff0 [ 1128.649536] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1128.654271] ? ioctl_preallocate+0x1a0/0x1a0 [ 1128.658676] ? retint_kernel+0x2d/0x2d [ 1128.662541] ? do_vfs_ioctl+0xff0/0xff0 [ 1128.666509] ? security_file_ioctl+0x83/0xb0 [ 1128.670987] SyS_ioctl+0x7f/0xb0 [ 1128.674330] ? do_vfs_ioctl+0xff0/0xff0 [ 1128.678283] do_syscall_64+0x1d5/0x640 [ 1128.682165] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1128.687345] RIP: 0033:0x465ef9 [ 1128.690515] RSP: 002b:00007f7d1a1ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1128.698200] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1128.705447] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1128.712692] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1128.719944] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1128.727310] R13: 00007ffc8ea5f85f R14: 00007f7d1a1ad300 R15: 0000000000022000 [ 1128.869110] Mem-Info: [ 1128.875109] active_anon:11757 inactive_anon:47373 isolated_anon:0 [ 1128.875109] active_file:1420 inactive_file:3993 isolated_file:12 [ 1128.875109] unevictable:0 dirty:24 writeback:0 unstable:0 [ 1128.875109] slab_reclaimable:12256 slab_unreclaimable:114819 [ 1128.875109] mapped:56417 shmem:47884 pagetables:685 bounce:0 [ 1128.875109] free:58679 free_pcp:114 free_cma:0 [ 1128.912817] Node 0 active_anon:46568kB inactive_anon:138332kB active_file:5616kB inactive_file:16040kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153336kB dirty:108kB writeback:0kB shmem:140120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1128.944764] Node 1 active_anon:468kB inactive_anon:51160kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72340kB dirty:20kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1128.976083] Node 0 DMA free:11024kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1129.071875] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1129.080268] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1129.081141] Node 0 [ 1129.101679] systemd-journal cpuset=/ mems_allowed=0-1 [ 1129.106174] DMA32 free:19008kB min:36200kB low:45248kB high:54296kB active_anon:46600kB inactive_anon:138312kB active_file:2884kB inactive_file:2188kB unevictable:0kB writepending:28kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7648kB pagetables:2600kB bounce:0kB free_pcp:660kB local_pcp:664kB free_cma:0kB [ 1129.115187] CPU: 1 PID: 26737 Comm: systemd-journal Not tainted 4.14.222-syzkaller #0 [ 1129.146138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1129.155475] Call Trace: [ 1129.158045] dump_stack+0x1b2/0x281 [ 1129.161661] dump_header+0x178/0x82f [ 1129.165351] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1129.170450] ? ___ratelimit+0x2cd/0x530 [ 1129.174401] oom_kill_process.cold+0x10/0xb18 [ 1129.178880] out_of_memory+0xe3e/0x1190 [ 1129.182834] ? oom_killer_disable+0x1c0/0x1c0 [ 1129.187303] ? mutex_trylock+0x152/0x1a0 [ 1129.191343] __alloc_pages_nodemask+0x23e1/0x2720 [ 1129.196168] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1129.200998] ? cache_grow_begin+0x41/0x630 [ 1129.205222] cache_grow_begin+0x91/0x630 [ 1129.209262] ? cache_grow_begin+0x91/0x630 [ 1129.213486] fallback_alloc+0x207/0x2c0 [ 1129.217439] kmem_cache_alloc+0x1e5/0x3c0 [ 1129.221577] getname_flags+0xc8/0x550 [ 1129.225357] user_path_at_empty+0x2a/0x50 [ 1129.229481] SyS_faccessat+0x21b/0x680 [ 1129.233348] ? SyS_fallocate+0x80/0x80 [ 1129.237223] ? do_syscall_64+0x4c/0x640 [ 1129.241171] ? SyS_faccessat+0x680/0x680 [ 1129.245224] do_syscall_64+0x1d5/0x640 [ 1129.249091] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1129.254265] RIP: 0033:0x7f862896d9c7 [ 1129.257959] RSP: 002b:00007ffea83fc018 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1129.265643] RAX: ffffffffffffffda RBX: 00007ffea83fef30 RCX: 00007f862896d9c7 [ 1129.272891] RDX: 00007f86293dea00 RSI: 0000000000000000 RDI: 0000555d101429a3 [ 1129.280137] RBP: 00007ffea83fc050 R08: 0000000000000000 R09: 0000000000000000 [ 1129.287382] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1129.294627] R13: 0000000000000000 R14: 00007ffea83fef30 R15: 00007ffea83fc540 [ 1129.301901] lowmem_reserve[]: 0 0 0 0 0 [ 1129.305901] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1129.308229] Mem-Info: [ 1129.343212] lowmem_reserve[]: 0 0 0 0 0 [ 1129.346036] active_anon:11767 inactive_anon:47373 isolated_anon:0 [ 1129.346036] active_file:294 inactive_file:292 isolated_file:32 [ 1129.346036] unevictable:0 dirty:9 writeback:0 unstable:0 [ 1129.346036] slab_reclaimable:12256 slab_unreclaimable:114877 [ 1129.346036] mapped:53192 shmem:47884 pagetables:722 bounce:0 [ 1129.346036] free:13885 free_pcp:0 free_cma:0 [ 1129.347233] Node 1 Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:468kB inactive_anon:51160kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:288kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1129.385523] Node 0 active_anon:46600kB inactive_anon:138332kB active_file:1036kB inactive_file:1020kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:140124kB dirty:28kB writeback:0kB shmem:140120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1129.415948] lowmem_reserve[]: [ 1129.441532] Node 1 active_anon:468kB inactive_anon:51160kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72344kB dirty:8kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1129.444134] 0 [ 1129.444630] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1129.500050] 0 0 0 0 [ 1129.500065] Node 0 DMA: 2*4kB (UM) 10*8kB (UM) 22*16kB (U) 15*32kB (UM) 1*64kB (M) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 1*4096kB (M) = 10968kB [ 1129.503002] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1129.525166] Node 0 DMA32 free:17496kB min:36200kB low:45248kB high:54296kB active_anon:46600kB inactive_anon:138312kB active_file:1264kB inactive_file:1124kB unevictable:0kB writepending:28kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7648kB pagetables:2600kB bounce:0kB free_pcp:796kB local_pcp:120kB free_cma:0kB [ 1129.554668] Node 0 DMA32: 421*4kB (UME) 237*8kB (UME) 198*16kB (UME) 302*32kB (UME) 11*64kB (UM) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17500kB [ 1129.554840] lowmem_reserve[]: 0 0 0 0 0 [ 1129.572649] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1129.577082] Node 0 [ 1129.588151] Node 1 Normal: 19*4kB (M) 7*8kB (UM) 1*16kB (U) 835*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26868kB [ 1129.612805] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1129.624820] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1129.646261] lowmem_reserve[]: 0 0 0 0 0 [ 1129.650697] Node 1 Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:468kB inactive_anon:51160kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:288kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1129.662500] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1129.679094] lowmem_reserve[]: 0 0 0 0 0 [ 1129.690464] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1129.691703] Node 0 DMA: 2*4kB (UM) 10*8kB (UM) 22*16kB (U) 15*32kB (UM) 1*64kB (M) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 1*4096kB (M) = 10968kB [ 1129.703395] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1129.716244] Node 0 DMA32: 451*4kB (UME) 323*8kB (UME) 197*16kB (ME) 287*32kB (UME) 11*64kB (UM) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17812kB [ 1129.727730] 47934 total pagecache pages [ 1129.739690] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1129.746670] 0 pages in swap cache [ 1129.754339] Node 1 [ 1129.757471] Swap cache stats: add 0, delete 0, find 0/0 [ 1129.757477] Normal: [ 1129.759688] Free swap = 0kB [ 1129.765351] 25*4kB (UM) 7*8kB (UM) 1*16kB (U) 835*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26892kB [ 1129.779883] Total swap = 0kB [ 1129.783748] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1129.785054] 2097051 pages RAM [ 1129.793896] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1129.793901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1129.793906] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1129.804461] 0 pages HighMem/MovableOnly [ 1129.808159] 47934 total pagecache pages [ 1129.817248] 363840 pages reserved [ 1129.823101] 0 pages in swap cache [ 1129.827037] 0 pages cma reserved [ 1129.831026] Swap cache stats: add 0, delete 0, find 0/0 [ 1129.831030] Free swap = 0kB [ 1129.831033] Total swap = 0kB [ 1129.831040] 2097051 pages RAM [ 1129.831043] 0 pages HighMem/MovableOnly [ 1129.831046] 363840 pages reserved [ 1129.831048] 0 pages cma reserved [ 1129.831057] Out of memory (oom_kill_allocating_task): Kill process 26737 (systemd-journal) score 0 or sacrifice child [ 1129.878296] Killed process 26737 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:4kB, shmem-rss:1576kB [ 1129.889999] oom_reaper: reaped process 26737 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1576kB [ 1129.960357] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1129.973271] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1129.978301] CPU: 0 PID: 7967 Comm: syz-fuzzer Not tainted 4.14.222-syzkaller #0 [ 1129.985748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1129.995101] Call Trace: [ 1129.997737] dump_stack+0x1b2/0x281 [ 1130.001374] dump_header+0x178/0x82f [ 1130.005082] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1130.010163] ? ___ratelimit+0x2cd/0x530 [ 1130.014114] oom_kill_process.cold+0x10/0xb18 [ 1130.018592] out_of_memory+0xe3e/0x1190 [ 1130.022720] ? oom_killer_disable+0x1c0/0x1c0 [ 1130.027192] ? mutex_trylock+0x152/0x1a0 [ 1130.031231] __alloc_pages_nodemask+0x23e1/0x2720 [ 1130.036060] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1130.040890] alloc_pages_current+0x155/0x260 [ 1130.045280] filemap_fault+0xea3/0x1980 [ 1130.049249] ext4_filemap_fault+0x84/0xb0 [ 1130.053375] __do_fault+0xfa/0x380 [ 1130.056978] __handle_mm_fault+0x2497/0x4620 [ 1130.061364] ? vm_insert_page+0x7c0/0x7c0 [ 1130.065487] ? lock_downgrade+0x740/0x740 [ 1130.069630] handle_mm_fault+0x391/0x860 [ 1130.073669] __do_page_fault+0x549/0xad0 [ 1130.077719] ? spurious_fault+0x640/0x640 [ 1130.081846] ? do_page_fault+0x60/0x500 [ 1130.085797] ? page_fault+0x2f/0x50 [ 1130.089398] page_fault+0x45/0x50 [ 1130.092828] RIP: 0000:0x92fd48 [ 1130.095995] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1130.124863] Mem-Info: [ 1130.147294] active_anon:11681 inactive_anon:47373 isolated_anon:0 [ 1130.147294] active_file:13 inactive_file:14 isolated_file:0 [ 1130.147294] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1130.147294] slab_reclaimable:12254 slab_unreclaimable:114296 [ 1130.147294] mapped:52642 shmem:47884 pagetables:722 bounce:0 [ 1130.147294] free:13803 free_pcp:30 free_cma:0 [ 1130.241916] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1130.252741] Node 0 active_anon:46256kB inactive_anon:138332kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138224kB dirty:0kB writeback:0kB shmem:140120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1130.259495] syz-executor.3 cpuset= [ 1130.283866] systemd-journal: [ 1130.284850] syz-executor.1: [ 1130.287406] page allocation failure: order:0 [ 1130.298211] page allocation failure: order:0 [ 1130.299562] / [ 1130.302643] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1130.308838] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1130.324724] mems_allowed=0-1 [ 1130.327824] Node 1 active_anon:468kB inactive_anon:51160kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72344kB dirty:0kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1130.333368] (null) [ 1130.336543] Node 0 [ 1130.369396] CPU: 1 PID: 26779 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1130.377272] syz-executor.1 cpuset= [ 1130.379494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1130.379500] / [ 1130.383014] Call Trace: [ 1130.394507] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1130.396737] dump_stack+0x1b2/0x281 [ 1130.422516] mems_allowed=0-1 [ 1130.426088] warn_alloc.cold+0x96/0x1cc [ 1130.433108] ? zone_watermark_ok_safe+0x220/0x220 [ 1130.438015] ? usleep_range+0x130/0x130 [ 1130.441966] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1130.447304] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1130.449737] lowmem_reserve[]: [ 1130.452300] ? run_timer_softirq+0x5a0/0x5a0 [ 1130.452302] 0 2717 [ 1130.455406] __alloc_pages_nodemask+0x2127/0x2720 [ 1130.466813] ? lock_acquire+0x170/0x3f0 [ 1130.469734] 2718 2718 2718 [ 1130.470791] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1130.470802] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1130.478528] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1130.488469] alloc_pages_current+0x155/0x260 [ 1130.492870] ion_page_pool_alloc+0x118/0x1b0 [ 1130.497257] ion_system_heap_allocate+0x133/0x8c0 [ 1130.499731] Node 0 DMA32 free:17984kB min:36200kB low:45248kB high:54296kB active_anon:46256kB inactive_anon:138312kB active_file:148kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7648kB pagetables:2600kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1130.502101] ? _raw_spin_unlock+0x29/0x40 [ 1130.502112] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1130.540903] ? ion_system_contig_heap_create+0x130/0x130 [ 1130.546331] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1130.551326] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1130.556146] ion_alloc+0x27a/0x810 [ 1130.559722] lowmem_reserve[]: 0 [ 1130.560364] ? ion_dma_buf_release+0x40/0x40 [ 1130.560365] 0 0 [ 1130.563638] ? __might_fault+0x177/0x1b0 [ 1130.568012] 0 0 [ 1130.569979] ion_ioctl+0xea/0x1f0 [ 1130.569989] ? ion_query_heaps+0x360/0x360 [ 1130.570002] ? ion_query_heaps+0x360/0x360 [ 1130.587819] do_vfs_ioctl+0x75a/0xff0 [ 1130.591603] Node 0 [ 1130.591610] ? ioctl_preallocate+0x1a0/0x1a0 [ 1130.591619] ? lock_downgrade+0x740/0x740 [ 1130.593840] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1130.598225] ? __fget+0x225/0x360 [ 1130.619714] lowmem_reserve[]: [ 1130.627417] ? do_vfs_ioctl+0xff0/0xff0 [ 1130.637901] ? security_file_ioctl+0x83/0xb0 [ 1130.639713] 0 0 [ 1130.642290] SyS_ioctl+0x7f/0xb0 [ 1130.642298] ? do_vfs_ioctl+0xff0/0xff0 [ 1130.644244] 0 [ 1130.647601] do_syscall_64+0x1d5/0x640 [ 1130.657187] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1130.659746] 0 0 [ 1130.662429] RIP: 0033:0x465ef9 [ 1130.662436] RSP: 002b:00007fab2d828188 EFLAGS: 00000246 [ 1130.667568] ORIG_RAX: 0000000000000010 [ 1130.667575] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1130.684114] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1130.689715] Node 1 [ 1130.691376] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1130.691383] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1130.693606] Normal free:26260kB min:53696kB low:67120kB high:80544kB active_anon:468kB inactive_anon:51160kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:288kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1130.700853] R13: 00007ffde76bccff R14: 00007fab2d828300 R15: 0000000000022000 [ 1130.708351] systemd-journal cpuset=/ mems_allowed=0-1 [ 1130.755810] CPU: 0 PID: 26764 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 1130.764587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1130.773927] Call Trace: [ 1130.776503] dump_stack+0x1b2/0x281 [ 1130.780206] warn_alloc.cold+0x96/0x1cc [ 1130.784178] ? zone_watermark_ok_safe+0x220/0x220 [ 1130.789007] ? usleep_range+0x130/0x130 [ 1130.792964] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1130.798062] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1130.803064] ? run_timer_softirq+0x5a0/0x5a0 [ 1130.807466] __alloc_pages_nodemask+0x2127/0x2720 [ 1130.812299] ? lock_acquire+0x170/0x3f0 [ 1130.816256] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1130.821089] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1130.825575] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1130.831019] ? retint_kernel+0x2d/0x2d [ 1130.834897] alloc_pages_current+0x155/0x260 [ 1130.839377] ion_page_pool_alloc+0x118/0x1b0 [ 1130.843774] ion_system_heap_allocate+0x133/0x8c0 [ 1130.848606] ? _raw_spin_unlock+0x29/0x40 [ 1130.852735] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1130.857646] ? ion_system_contig_heap_create+0x130/0x130 [ 1130.863083] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1130.867934] ion_alloc+0x27a/0x810 [ 1130.871477] ? ion_dma_buf_release+0x40/0x40 [ 1130.875881] ? __might_fault+0x177/0x1b0 [ 1130.879939] ion_ioctl+0xea/0x1f0 [ 1130.883387] ? ion_query_heaps+0x360/0x360 [ 1130.887614] ? retint_kernel+0x2d/0x2d [ 1130.891484] ? ion_query_heaps+0x360/0x360 [ 1130.895707] do_vfs_ioctl+0x75a/0xff0 [ 1130.899488] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1130.904233] ? ioctl_preallocate+0x1a0/0x1a0 [ 1130.908643] ? retint_kernel+0x2d/0x2d [ 1130.912650] ? do_vfs_ioctl+0xff0/0xff0 [ 1130.916619] ? security_file_ioctl+0x83/0xb0 [ 1130.921027] SyS_ioctl+0x7f/0xb0 [ 1130.924389] ? do_vfs_ioctl+0xff0/0xff0 [ 1130.928356] do_syscall_64+0x1d5/0x640 [ 1130.932233] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1130.937407] RIP: 0033:0x465ef9 [ 1130.940588] RSP: 002b:00007f7d1a1ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1130.948284] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1130.955537] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1130.962802] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1130.970065] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1130.977321] R13: 00007ffc8ea5f85f R14: 00007f7d1a1ad300 R15: 0000000000022000 [ 1130.984943] CPU: 1 PID: 26737 Comm: systemd-journal Not tainted 4.14.222-syzkaller #0 [ 1130.992919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1130.995953] lowmem_reserve[]: [ 1131.002259] Call Trace: [ 1131.002278] dump_stack+0x1b2/0x281 [ 1131.002289] warn_alloc.cold+0x96/0x1cc [ 1131.002298] ? zone_watermark_ok_safe+0x220/0x220 [ 1131.002306] ? usleep_range+0x130/0x130 [ 1131.002312] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1131.002322] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1131.002330] ? run_timer_softirq+0x5a0/0x5a0 [ 1131.002343] __alloc_pages_nodemask+0x2127/0x2720 [ 1131.005429] 0 [ 1131.007999] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1131.011610] 0 [ 1131.015554] alloc_pages_current+0x155/0x260 [ 1131.020386] 0 [ 1131.024328] filemap_fault+0xea3/0x1980 [ 1131.029411] 0 [ 1131.034560] ext4_filemap_fault+0x84/0xb0 [ 1131.034568] __do_fault+0xfa/0x380 [ 1131.034576] __handle_mm_fault+0x2497/0x4620 [ 1131.038958] 0 [ 1131.043788] ? vm_insert_page+0x7c0/0x7c0 [ 1131.043808] handle_mm_fault+0x391/0x860 [ 1131.050411] __do_page_fault+0x549/0xad0 [ 1131.050421] ? spurious_fault+0x640/0x640 [ 1131.050429] ? do_page_fault+0x60/0x500 [ 1131.052206] Node 0 [ 1131.056590] page_fault+0x25/0x50 [ 1131.058362] DMA: [ 1131.062315] RIP: 0010:strncpy_from_user+0x18c/0x2c0 [ 1131.062320] RSP: 0000:ffff88808bcafda8 EFLAGS: 00010246 [ 1131.062326] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000000000c [ 1131.062332] RDX: 0000000000000000 RSI: 0000000000000fe4 RDI: ffff88804ab91818 [ 1131.064110] 2*4kB [ 1131.068231] RBP: 0000555d101429a3 R08: 0000000000000fe4 R09: ffff888205512480 [ 1131.071766] (UM) [ 1131.076134] R10: ffff88820551347f R11: 0000000000000000 R12: 0000000000000fe4 [ 1131.077906] 10*8kB [ 1131.082025] R13: ffff88820551249c R14: 0000555d10143987 R15: dffffc0000000000 [ 1131.082045] ? strncpy_from_user+0x18a/0x2c0 [ 1131.086426] (UM) [ 1131.090466] getname_flags+0x10d/0x550 [ 1131.090478] user_path_at_empty+0x2a/0x50 [ 1131.090486] SyS_faccessat+0x21b/0x680 [ 1131.094606] 22*16kB [ 1131.098565] ? SyS_fallocate+0x80/0x80 [ 1131.100788] (U) [ 1131.104206] ? do_syscall_64+0x4c/0x640 [ 1131.106236] 15*32kB [ 1131.111226] ? SyS_faccessat+0x680/0x680 [ 1131.111235] do_syscall_64+0x1d5/0x640 [ 1131.111248] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1131.116582] (UM) [ 1131.123832] RIP: 0033:0x7f862896d9c7 [ 1131.123836] RSP: 002b:00007ffea83fc018 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1131.123844] RAX: ffffffffffffffda RBX: 00007ffea83fef30 RCX: 00007f862896d9c7 [ 1131.123851] RDX: 00007f86293dea00 RSI: 0000000000000000 RDI: 0000555d101429a3 [ 1131.131116] 1*64kB [ 1131.133225] RBP: 00007ffea83fc050 R08: 0000000000000000 R09: 0000000000000000 [ 1131.140680] (M) [ 1131.142701] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1131.142707] R13: 0000000000000000 R14: 00007ffea83fef30 R15: 00007ffea83fc540 [ 1131.149969] 4*128kB [ 1131.159330] Mem-Info: [ 1131.159508] (UM) [ 1131.164047] active_anon:11681 inactive_anon:47373 isolated_anon:0 [ 1131.164047] active_file:27 inactive_file:0 isolated_file:0 [ 1131.164047] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1131.164047] slab_reclaimable:12247 slab_unreclaimable:114289 [ 1131.164047] mapped:52642 shmem:47884 pagetables:722 bounce:0 [ 1131.164047] free:13920 free_pcp:60 free_cma:0 [ 1131.164063] Node 0 active_anon:46256kB inactive_anon:138332kB active_file:72kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138224kB dirty:0kB writeback:0kB shmem:140120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1131.164079] Node 1 active_anon:468kB inactive_anon:51160kB active_file:36kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72344kB dirty:0kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1131.164082] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1131.164099] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1131.164118] Node 0 DMA32 free:18452kB min:36200kB low:45248kB high:54296kB active_anon:46256kB inactive_anon:138312kB active_file:72kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7648kB pagetables:2600kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1131.164136] lowmem_reserve[]: 0 0 0 0 0 [ 1131.164151] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1131.164167] lowmem_reserve[]: 0 0 0 0 0 [ 1131.164186] Node 1 Normal free:26260kB min:53696kB low:67120kB high:80544kB active_anon:468kB inactive_anon:51160kB active_file:36kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:288kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1131.164204] lowmem_reserve[]: 0 0 0 0 0 [ 1131.164222] Node 0 DMA: 2*4kB (UM) 10*8kB (UM) 22*16kB (U) 15*32kB (UM) 1*64kB (M) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 1*4096kB (M) = 10968kB [ 1131.164295] Node 0 DMA32: 465*4kB (UME) 325*8kB (UME) 205*16kB (UME) 291*32kB (UME) 12*64kB (UM) 5*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18460kB [ 1131.164359] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1131.164403] Node 1 Normal: 19*4kB (M) 7*8kB (UM) 1*16kB (U) 816*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB [ 1131.177010] 3*256kB [ 1131.184867] 0*2048kB [ 1131.189623] (UM) [ 1131.191502] 0*4096kB [ 1131.199905] 3*512kB [ 1131.206414] = 26260kB [ 1131.208400] (UM) [ 1131.213877] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1131.240519] 1*1024kB [ 1131.246756] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1131.269675] (M) [ 1131.372500] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1131.384841] 1*2048kB [ 1131.409689] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1131.419313] (U) [ 1131.449728] 48577 total pagecache pages [ 1131.451664] 1*4096kB [ 1131.550332] 0 pages in swap cache [ 1131.552158] (M) [ 1131.559330] Swap cache stats: add 0, delete 0, find 0/0 [ 1131.564709] = 10968kB [ 1131.599661] Free swap = 0kB [ 1131.619731] Total swap = 0kB [ 1131.629672] 2097051 pages RAM [ 1131.632899] 0 pages HighMem/MovableOnly [ 1131.636945] 363840 pages reserved [ 1131.638220] Node 0 DMA32: 6*4kB (ME) 100*8kB (ME) 191*16kB (ME) 289*32kB (UME) 3462*64kB (UME) 678*128kB (UME) 103*256kB (U) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 349896kB [ 1131.659702] 0 pages cma reserved [ 1131.689719] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1131.711267] Node 1 Normal: 19*4kB (M) 7*8kB (UM) 1*16kB (U) 816*32kB (U) 8369*64kB (UM) 481*128kB (UM) 14*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 627028kB [ 1131.749652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1131.759040] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1131.793380] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1131.820993] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1131.841201] 49021 total pagecache pages [ 1131.845640] 0 pages in swap cache [ 1131.849087] Swap cache stats: add 0, delete 0, find 0/0 [ 1131.874098] Free swap = 0kB [ 1131.877140] Total swap = 0kB [ 1131.891535] 2097051 pages RAM [ 1131.894672] 0 pages HighMem/MovableOnly [ 1131.898632] 363840 pages reserved [ 1131.911532] 0 pages cma reserved [ 1131.914932] Out of memory (oom_kill_allocating_task): Kill process 7967 (syz-fuzzer) score 0 or sacrifice child [ 1131.951754] Killed process 26832 (syz-executor.5) total-vm:84904kB, anon-rss:64kB, file-rss:4kB, shmem-rss:0kB [ 1131.978282] oom_reaper: reaped process 26832 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1132.108113] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1132.142744] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. 01:30:56 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x2, 0x42}) 01:30:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe}) 01:30:56 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:30:56 executing program 1: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x44}, 0x1, 0x0, 0x0, 0x881}, 0xc000) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast, 0x3}, 0x10) memfd_create(0x0, 0xa) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x200, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) connect$l2tp(r0, &(0x7f00000001c0)={0x2, 0x0, @empty, 0x3}, 0x10) [ 1132.177113] systemd[1]: Stopped Journal Service. [ 1132.222139] systemd[1]: Starting Journal Service... [ 1132.604744] systemd-journald[26840]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1133.342433] systemd[1]: Started Journal Service. [ 1133.353703] IPVS: ftp: loaded support on port[0] = 21 [ 1133.476118] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1133.487453] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1133.504174] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1133.506845] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1133.515950] CPU: 1 PID: 26842 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1133.523836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1133.533185] Call Trace: [ 1133.535771] dump_stack+0x1b2/0x281 [ 1133.539400] warn_alloc.cold+0x96/0x1cc [ 1133.543368] ? zone_watermark_ok_safe+0x220/0x220 [ 1133.548211] __alloc_pages_nodemask+0x2127/0x2720 [ 1133.553049] ? lock_acquire+0x170/0x3f0 [ 1133.557032] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1133.561905] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1133.567356] ? __mutex_unlock_slowpath+0x75/0x770 [ 1133.572185] alloc_pages_current+0x155/0x260 [ 1133.576580] ion_page_pool_alloc+0x118/0x1b0 [ 1133.580977] ion_system_heap_allocate+0x133/0x8c0 [ 1133.585803] ? ion_alloc+0x187/0x810 [ 1133.589499] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1133.594931] ? ion_system_contig_heap_create+0x130/0x130 [ 1133.600388] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1133.605389] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1133.610214] ion_alloc+0x204/0x810 [ 1133.613747] ? ion_dma_buf_release+0x40/0x40 [ 1133.618141] ? __might_fault+0x177/0x1b0 [ 1133.622190] ion_ioctl+0xea/0x1f0 [ 1133.625624] ? ion_query_heaps+0x360/0x360 [ 1133.629839] ? ion_query_heaps+0x360/0x360 [ 1133.634052] do_vfs_ioctl+0x75a/0xff0 [ 1133.637833] ? ioctl_preallocate+0x1a0/0x1a0 [ 1133.642310] ? lock_downgrade+0x740/0x740 [ 1133.646441] ? __fget+0x225/0x360 [ 1133.649893] ? do_vfs_ioctl+0xff0/0xff0 [ 1133.653943] ? security_file_ioctl+0x83/0xb0 [ 1133.658356] SyS_ioctl+0x7f/0xb0 [ 1133.661714] ? do_vfs_ioctl+0xff0/0xff0 [ 1133.665669] do_syscall_64+0x1d5/0x640 [ 1133.669544] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1133.674726] RIP: 0033:0x465ef9 [ 1133.677898] RSP: 002b:00007fab2d828188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1133.685589] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1133.692842] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1133.700091] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1133.707351] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1133.714601] R13: 00007ffde76bccff R14: 00007fab2d828300 R15: 0000000000022000 [ 1133.721976] CPU: 0 PID: 26844 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1133.729864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1133.739226] Call Trace: [ 1133.739483] warn_alloc_show_mem: 2 callbacks suppressed [ 1133.739486] Mem-Info: [ 1133.741816] dump_stack+0x1b2/0x281 [ 1133.747179] active_anon:12422 inactive_anon:49396 isolated_anon:0 [ 1133.747179] active_file:2085 inactive_file:2140 isolated_file:0 [ 1133.747179] unevictable:0 dirty:64 writeback:0 unstable:0 [ 1133.747179] slab_reclaimable:12287 slab_unreclaimable:115973 [ 1133.747179] mapped:55404 shmem:49932 pagetables:738 bounce:0 [ 1133.747179] free:217485 free_pcp:2 free_cma:0 [ 1133.749583] warn_alloc.cold+0x96/0x1cc [ 1133.749595] ? zone_watermark_ok_safe+0x220/0x220 [ 1133.749615] __alloc_pages_nodemask+0x2127/0x2720 [ 1133.749630] ? lock_acquire+0x170/0x3f0 [ 1133.749643] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1133.749658] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1133.749668] ? __mutex_unlock_slowpath+0x75/0x770 [ 1133.749680] ? retint_kernel+0x2d/0x2d [ 1133.757508] Node 0 active_anon:49220kB inactive_anon:146424kB active_file:8328kB inactive_file:8560kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149272kB dirty:244kB writeback:0kB shmem:148312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1133.786950] alloc_pages_current+0x155/0x260 [ 1133.786966] ion_page_pool_alloc+0x118/0x1b0 [ 1133.786975] ion_system_heap_allocate+0x133/0x8c0 [ 1133.786985] ? ion_alloc+0x187/0x810 [ 1133.786994] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1133.787003] ? ion_system_contig_heap_create+0x130/0x130 [ 1133.787012] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1133.787021] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1133.787031] ion_alloc+0x204/0x810 [ 1133.787047] ? ion_dma_buf_release+0x40/0x40 [ 1133.794127] Node 1 active_anon:468kB inactive_anon:51160kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72344kB dirty:12kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1133.795838] ? __might_fault+0x177/0x1b0 [ 1133.801336] Node 0 [ 1133.804618] ion_ioctl+0xea/0x1f0 [ 1133.810266] DMA free:11120kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:20kB active_file:704kB inactive_file:0kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1133.815038] ? ion_query_heaps+0x360/0x360 [ 1133.819889] lowmem_reserve[]: [ 1133.823807] ? ion_query_heaps+0x360/0x360 [ 1133.853244] 0 [ 1133.856450] do_vfs_ioctl+0x75a/0xff0 [ 1133.860974] 2717 [ 1133.865759] ? ioctl_preallocate+0x1a0/0x1a0 [ 1133.869672] 2718 [ 1133.874876] ? lock_downgrade+0x740/0x740 [ 1133.880323] 2718 [ 1133.885314] ? __fget+0x225/0x360 [ 1133.890199] 2718 [ 1133.893649] ? do_vfs_ioctl+0xff0/0xff0 [ 1133.925101] ? security_file_ioctl+0x83/0xb0 [ 1133.925114] SyS_ioctl+0x7f/0xb0 [ 1133.925121] ? do_vfs_ioctl+0xff0/0xff0 [ 1133.925132] do_syscall_64+0x1d5/0x640 [ 1133.925147] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1133.925154] RIP: 0033:0x465ef9 [ 1133.925158] RSP: 002b:00007f26a58f1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1133.925168] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1133.925172] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1133.925177] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1133.925181] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1133.925186] R13: 00007ffe7e02d34f R14: 00007f26a58f1300 R15: 0000000000022000 [ 1134.071884] Node 0 DMA32 free:690304kB min:36200kB low:45248kB high:54296kB active_anon:47004kB inactive_anon:146448kB active_file:7668kB inactive_file:8532kB unevictable:0kB writepending:248kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7648kB pagetables:2520kB bounce:0kB free_pcp:200kB local_pcp:12kB free_cma:0kB [ 1134.103417] lowmem_reserve[]: 0 0 0 0 0 [ 1134.107457] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1134.136151] lowmem_reserve[]: 0 0 0 0 0 [ 1134.141718] Node 1 Normal free:53700kB min:53696kB low:67120kB high:80544kB active_anon:464kB inactive_anon:51160kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:284kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1134.173717] lowmem_reserve[]: 0 0 0 0 0 [ 1134.177738] Node 0 DMA: 16*4kB (UM) 17*8kB (UM) 23*16kB (UM) 14*32kB (UM) 8*64kB (UM) 11*128kB (UM) 4*256kB (U) 2*512kB (U) 2*1024kB (UM) 2*2048kB (UM) 0*4096kB = 11128kB [ 1134.186924] chnl_net:caif_netlink_parms(): no params data found [ 1134.194771] Node 0 DMA32: 74*4kB (UME) 3033*8kB (UME) 16257*16kB (UME) 11187*32kB (UME) 141*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 651936kB [ 1134.215541] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1134.227702] Node 1 Normal: 933*4kB (UM) 1243*8kB (UM) 960*16kB (UM) 649*32kB (U) 53*64kB (UM) 4*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53708kB [ 1134.244621] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1134.254797] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1134.265129] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1134.275412] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1134.284753] 54167 total pagecache pages [ 1134.288748] 0 pages in swap cache [ 1134.293403] Swap cache stats: add 0, delete 0, find 0/0 [ 1134.298867] Free swap = 0kB [ 1134.303004] Total swap = 0kB [ 1134.306097] 2097051 pages RAM [ 1134.309194] 0 pages HighMem/MovableOnly [ 1134.315595] 363840 pages reserved [ 1134.319056] 0 pages cma reserved [ 1134.467775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.483233] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.501213] device bridge_slave_0 entered promiscuous mode [ 1134.516902] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.542958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.550432] device bridge_slave_1 entered promiscuous mode [ 1134.611121] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1134.644359] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1134.697877] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1134.717353] team0: Port device team_slave_0 added [ 1134.728797] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1134.737482] team0: Port device team_slave_1 added [ 1134.811891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1134.826993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1134.861585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1134.889004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1134.903939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1134.936581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1134.958811] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1135.098412] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1135.152253] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1135.157401] CPU: 1 PID: 26139 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1135.165272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1135.174808] Call Trace: [ 1135.177395] dump_stack+0x1b2/0x281 [ 1135.181018] dump_header+0x178/0x82f [ 1135.184724] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1135.189817] ? ___ratelimit+0x2cd/0x530 [ 1135.193794] oom_kill_process.cold+0x10/0xb18 [ 1135.198305] out_of_memory+0xe3e/0x1190 [ 1135.202281] ? oom_killer_disable+0x1c0/0x1c0 [ 1135.206771] ? mutex_trylock+0x152/0x1a0 [ 1135.210829] __alloc_pages_nodemask+0x23e1/0x2720 [ 1135.215670] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1135.220499] alloc_pages_current+0x155/0x260 [ 1135.224894] filemap_fault+0xea3/0x1980 [ 1135.228853] ext4_filemap_fault+0x84/0xb0 [ 1135.232994] __do_fault+0xfa/0x380 [ 1135.236512] __handle_mm_fault+0x2497/0x4620 [ 1135.240897] ? vm_insert_page+0x7c0/0x7c0 [ 1135.245240] ? nanosleep_copyout+0x100/0x100 [ 1135.249631] handle_mm_fault+0x391/0x860 [ 1135.253769] __do_page_fault+0x549/0xad0 [ 1135.257819] ? spurious_fault+0x640/0x640 [ 1135.261944] ? do_page_fault+0x60/0x500 [ 1135.265895] ? page_fault+0x2f/0x50 [ 1135.269501] page_fault+0x45/0x50 [ 1135.272931] RIP: 114a78:0x3 [ 1135.275848] RSP: 000b:00007ffe7e02d60c EFLAGS: 00000032 [ 1135.311708] Mem-Info: [ 1135.319523] active_anon:12380 inactive_anon:49407 isolated_anon:0 [ 1135.319523] active_file:29 inactive_file:10 isolated_file:0 [ 1135.319523] unevictable:0 dirty:6 writeback:7 unstable:0 [ 1135.319523] slab_reclaimable:12267 slab_unreclaimable:115172 [ 1135.319523] mapped:52598 shmem:49936 pagetables:701 bounce:0 [ 1135.319523] free:25200 free_pcp:0 free_cma:0 [ 1135.359275] Node 0 active_anon:49056kB inactive_anon:146468kB active_file:104kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138048kB dirty:24kB writeback:24kB shmem:148328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1135.389260] Bluetooth: hci1 command 0x0409 tx timeout [ 1135.407915] Node 1 active_anon:464kB inactive_anon:51160kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72344kB dirty:0kB writeback:4kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1135.438398] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:20kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1135.468605] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1135.473930] Node 0 DMA32 free:36068kB min:36200kB low:45248kB high:54296kB active_anon:47008kB inactive_anon:146448kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:144kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7648kB pagetables:2520kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1135.502768] lowmem_reserve[]: 0 0 0 0 0 [ 1135.506753] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1135.532969] lowmem_reserve[]: 0 0 0 0 0 [ 1135.536969] Node 1 Normal free:53680kB min:53696kB low:67120kB high:80544kB active_anon:464kB inactive_anon:51160kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:284kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1135.565251] lowmem_reserve[]: 0 0 0 0 0 [ 1135.569266] Node 0 DMA: 7*4kB (M) 6*8kB (M) 10*16kB (M) 8*32kB (M) 7*64kB (UM) 11*128kB (UM) 6*256kB (UM) 2*512kB (U) 2*1024kB (UM) 2*2048kB (UM) 0*4096kB = 11052kB [ 1135.584159] Node 0 DMA32: 573*4kB (ME) 427*8kB (UME) 248*16kB (UME) 333*32kB (UME) 192*64kB (UM) 17*128kB (M) 1*256kB (M) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36076kB [ 1135.599570] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1135.610273] Node 1 Normal: 931*4kB (UM) 1243*8kB (UM) 960*16kB (UM) 649*32kB (U) 53*64kB (UM) 4*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53700kB [ 1135.624854] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1135.633681] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1135.642697] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1135.651954] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1135.660559] 49984 total pagecache pages [ 1135.664525] 0 pages in swap cache [ 1135.667963] Swap cache stats: add 0, delete 0, find 0/0 [ 1135.673445] Free swap = 0kB [ 1135.676448] Total swap = 0kB [ 1135.679481] 2097051 pages RAM [ 1135.682560] 0 pages HighMem/MovableOnly [ 1135.686504] 363840 pages reserved [ 1135.689971] 0 pages cma reserved [ 1135.693346] Out of memory (oom_kill_allocating_task): Kill process 26139 (syz-executor.2) score 0 or sacrifice child [ 1135.704027] Killed process 26844 (syz-executor.2) total-vm:93232kB, anon-rss:148kB, file-rss:34820kB, shmem-rss:0kB [ 1135.724100] oom_reaper: reaped process 26844 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1135.747264] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 1135.759515] ion_system_heap cpuset=/ mems_allowed=0-1 [ 1135.764698] CPU: 1 PID: 4243 Comm: ion_system_heap Not tainted 4.14.222-syzkaller #0 [ 1135.772557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1135.782007] Call Trace: [ 1135.784587] dump_stack+0x1b2/0x281 [ 1135.788189] dump_header+0x178/0x82f [ 1135.791880] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1135.796969] ? ___ratelimit+0x2cd/0x530 [ 1135.800920] oom_kill_process.cold+0x10/0xb18 [ 1135.805410] ? lock_downgrade+0x740/0x740 [ 1135.809536] out_of_memory+0x2dc/0x1190 [ 1135.813485] ? oom_killer_disable+0x1c0/0x1c0 [ 1135.817958] ? mutex_trylock+0x152/0x1a0 [ 1135.822007] __alloc_pages_nodemask+0x23e1/0x2720 [ 1135.826830] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1135.831662] ? ion_heap_sglist_zero+0x165/0x220 [ 1135.836306] ? cache_grow_begin+0x41/0x630 [ 1135.840516] cache_grow_begin+0x91/0x630 [ 1135.844567] ? cache_grow_begin+0x91/0x630 [ 1135.848790] fallback_alloc+0x207/0x2c0 [ 1135.852753] kmem_cache_alloc_node_trace+0xed/0x400 [ 1135.857765] __get_vm_area_node+0xed/0x340 [ 1135.861987] vmap+0xd5/0x290 [ 1135.864985] ? ion_heap_clear_pages+0x23/0x70 [ 1135.869462] ? vunmap+0x50/0x50 [ 1135.872718] ? __vunmap+0x21c/0x300 [ 1135.876324] ion_heap_clear_pages+0x23/0x70 [ 1135.880635] ion_heap_sglist_zero+0x165/0x220 [ 1135.885118] ? ion_heap_clear_pages+0x70/0x70 [ 1135.889592] ? finish_task_switch+0x178/0x610 [ 1135.894082] ? ion_heap_deferred_free+0x222/0x470 [ 1135.898901] ion_system_heap_free+0x1d0/0x240 [ 1135.903374] ion_buffer_destroy+0x132/0x190 [ 1135.907687] ion_heap_deferred_free+0x22a/0x470 [ 1135.912413] ? __schedule+0x877/0x1de0 [ 1135.916286] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1135.920980] ? wait_woken+0x230/0x230 [ 1135.924760] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1135.929850] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1135.934503] kthread+0x30d/0x420 [ 1135.937852] ? kthread_create_on_node+0xd0/0xd0 [ 1135.942501] ret_from_fork+0x24/0x30 [ 1136.099540] Mem-Info: [ 1136.101991] active_anon:12357 inactive_anon:49407 isolated_anon:0 [ 1136.101991] active_file:30 inactive_file:0 isolated_file:0 [ 1136.101991] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1136.101991] slab_reclaimable:12267 slab_unreclaimable:115177 [ 1136.101991] mapped:52600 shmem:49936 pagetables:701 bounce:0 [ 1136.101991] free:20158 free_pcp:31 free_cma:0 [ 1136.148389] Node 0 active_anon:48964kB inactive_anon:146468kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138056kB dirty:0kB writeback:0kB shmem:148328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1136.169187] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1136.186717] Node 1 active_anon:464kB inactive_anon:51160kB active_file:0kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72344kB dirty:0kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1136.196513] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1136.227042] Node 0 [ 1136.234221] CPU: 1 PID: 26844 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1136.234663] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:20kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1136.236459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1136.244341] lowmem_reserve[]: [ 1136.271010] Call Trace: [ 1136.271030] dump_stack+0x1b2/0x281 [ 1136.271044] warn_alloc.cold+0x96/0x1cc [ 1136.280468] 0 [ 1136.283544] ? zone_watermark_ok_safe+0x220/0x220 [ 1136.286096] 2717 [ 1136.289700] ? usleep_range+0x130/0x130 [ 1136.289708] ? try_to_free_pages+0x23f/0x6e0 [ 1136.289719] ? _find_next_bit+0xdb/0x100 [ 1136.293664] 2718 [ 1136.295456] ? run_timer_softirq+0x5a0/0x5a0 [ 1136.300281] 2718 [ 1136.302321] __alloc_pages_nodemask+0x2127/0x2720 [ 1136.306261] 2718 [ 1136.310663] ? lock_acquire+0x170/0x3f0 [ 1136.310678] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1136.316748] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1136.321141] Node 0 [ 1136.323176] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1136.328004] DMA32 free:17600kB min:36200kB low:45248kB high:54296kB active_anon:46916kB inactive_anon:146448kB active_file:116kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7648kB pagetables:2520kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1136.330067] ? ion_page_pool_alloc+0x28/0x1b0 [ 1136.330079] alloc_pages_current+0x155/0x260 [ 1136.334022] lowmem_reserve[]: [ 1136.338848] ion_page_pool_alloc+0x118/0x1b0 [ 1136.343344] 0 [ 1136.345561] ion_system_heap_allocate+0x133/0x8c0 [ 1136.350990] 0 [ 1136.379153] ? ion_alloc+0x187/0x810 [ 1136.379162] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1136.379173] ? ion_system_contig_heap_create+0x130/0x130 [ 1136.383640] 0 [ 1136.388028] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1136.391115] 0 [ 1136.395490] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1136.397261] 0 [ 1136.402083] ion_alloc+0x204/0x810 [ 1136.402097] ? ion_dma_buf_release+0x40/0x40 [ 1136.407562] ? __might_fault+0x177/0x1b0 [ 1136.412995] Node 0 [ 1136.418425] ion_ioctl+0xea/0x1f0 [ 1136.420217] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1136.425206] ? ion_query_heaps+0x360/0x360 [ 1136.426979] lowmem_reserve[]: [ 1136.431897] ? ion_query_heaps+0x360/0x360 [ 1136.431906] do_vfs_ioctl+0x75a/0xff0 [ 1136.431918] ? ioctl_preallocate+0x1a0/0x1a0 [ 1136.433688] 0 [ 1136.437208] ? lock_downgrade+0x740/0x740 [ 1136.441597] 0 [ 1136.446063] ? __fget+0x225/0x360 [ 1136.448266] 0 [ 1136.451698] ? do_vfs_ioctl+0xff0/0xff0 [ 1136.451708] ? security_file_ioctl+0x83/0xb0 [ 1136.451718] SyS_ioctl+0x7f/0xb0 [ 1136.477634] 0 [ 1136.481836] ? do_vfs_ioctl+0xff0/0xff0 [ 1136.481847] do_syscall_64+0x1d5/0x640 [ 1136.481863] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1136.484931] 0 [ 1136.489144] RIP: 0033:0x465ef9 [ 1136.489149] RSP: 002b:00007f26a58f1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1136.489160] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1136.497316] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1136.499108] Node 1 [ 1136.503250] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1136.503257] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1136.505045] Normal free:26768kB min:53696kB low:67120kB high:80544kB active_anon:464kB inactive_anon:51160kB active_file:0kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:284kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1136.508465] R13: 00007ffe7e02d34f R14: 00007f26a58f1300 R15: 0000000000022000 [ 1136.510270] lowmem_reserve[]: [ 1136.526160] warn_alloc_show_mem: 1 callbacks suppressed [ 1136.526163] Mem-Info: [ 1136.547535] 0 [ 1136.558321] active_anon:12357 inactive_anon:49407 isolated_anon:0 [ 1136.558321] active_file:40 inactive_file:8 isolated_file:0 [ 1136.558321] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1136.558321] slab_reclaimable:12267 slab_unreclaimable:115176 [ 1136.558321] mapped:52600 shmem:49936 pagetables:701 bounce:0 [ 1136.558321] free:13834 free_pcp:60 free_cma:0 [ 1136.563459] 0 [ 1136.565667] Node 0 active_anon:48964kB inactive_anon:146468kB active_file:180kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138056kB dirty:0kB writeback:0kB shmem:148328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1136.567841] 0 [ 1136.580430] Node 1 active_anon:464kB inactive_anon:51160kB active_file:0kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72344kB dirty:0kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1136.596124] 0 [ 1136.615470] Node 0 [ 1136.617584] 0 [ 1136.620720] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:20kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1136.620723] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1136.620742] Node 0 DMA32 free:17600kB min:36200kB low:45248kB high:54296kB active_anon:46916kB inactive_anon:146448kB active_file:116kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7648kB pagetables:2520kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1136.620762] lowmem_reserve[]: 0 0 0 0 0 [ 1136.620781] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1136.620798] lowmem_reserve[]: 0 0 0 0 0 [ 1136.620817] Node 1 Normal free:26768kB min:53696kB low:67120kB high:80544kB active_anon:464kB inactive_anon:51160kB active_file:0kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:284kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1136.620837] lowmem_reserve[]: 0 0 0 0 0 [ 1136.620855] Node 0 DMA: 8*4kB (UM) 7*8kB (UM) 10*16kB (M) 9*32kB (UM) 5*64kB (UM) [ 1136.665809] 11*128kB [ 1136.682824] Node 0 [ 1136.695530] (UM) [ 1136.713363] DMA: [ 1136.724487] 6*256kB [ 1136.742390] 8*4kB [ 1136.756447] (UM) [ 1136.777952] (UM) [ 1136.797534] 2*512kB [ 1136.828780] 7*8kB [ 1136.861548] (U) [ 1136.871924] (UM) [ 1136.881306] 2*1024kB (UM) 2*2048kB (UM) 0*4096kB = 10968kB [ 1136.891505] 10*16kB (M) 9*32kB (UM) 5*64kB (UM) 11*128kB (UM) 6*256kB (UM) 2*512kB (U) 2*1024kB (UM) 2*2048kB (UM) 0*4096kB = 10968kB [ 1136.898008] Node 0 DMA32: 557*4kB (UME) 413*8kB (ME) 234*16kB (ME) 61*32kB (UME) 47*64kB (M) 17*128kB (UM) 1*256kB (M) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 17692kB [ 1136.920202] Node 0 DMA32: 557*4kB (UME) 413*8kB (ME) 234*16kB (ME) 61*32kB (UME) 47*64kB (M) 17*128kB (UM) 1*256kB (M) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 17692kB [ 1136.938893] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1136.966509] Node 1 Normal: 24*4kB (M) 23*8kB (M) 115*16kB (UM) 649*32kB (U) 53*64kB (UM) 4*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26792kB [ 1136.971603] Node 0 [ 1136.990451] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1136.995144] Normal: [ 1137.007542] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1137.008129] 0*4kB [ 1137.011821] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1137.025449] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1137.037435] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1137.051488] Node 1 Normal: 24*4kB (M) 23*8kB (M) 115*16kB (UM) 649*32kB (U) 53*64kB (UM) 4*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26792kB [ 1137.060619] 49967 total pagecache pages [ 1137.082714] 0 pages in swap cache [ 1137.084751] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1137.086182] Swap cache stats: add 0, delete 0, find 0/0 [ 1137.102174] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1137.107670] Free swap = 0kB [ 1137.113785] Total swap = 0kB [ 1137.116791] 2097051 pages RAM [ 1137.121209] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1137.126980] 0 pages HighMem/MovableOnly [ 1137.134059] 363840 pages reserved [ 1137.137501] 0 pages cma reserved [ 1137.140803] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1137.167004] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1137.234439] 51854 total pagecache pages [ 1137.274668] device hsr_slave_0 entered promiscuous mode [ 1137.295180] device hsr_slave_1 entered promiscuous mode [ 1137.320089] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1137.327300] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1137.469187] Bluetooth: hci1 command 0x041b tx timeout [ 1137.687662] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1137.777869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.815533] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1137.825244] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1137.853213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1137.860734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1137.870237] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1137.876307] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.905994] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1137.942908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1137.951515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1137.963795] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.970267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1137.980827] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1137.999836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1138.033460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1138.041474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1138.072781] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.079189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1138.096998] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1138.115855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1138.126838] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1138.172861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1138.198309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1138.203035] 0 pages in swap cache [ 1138.208870] Swap cache stats: add 0, delete 0, find 0/0 [ 1138.215179] Free swap = 0kB [ 1138.227903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1138.228339] Total swap = 0kB [ 1138.242889] 2097051 pages RAM [ 1138.247089] 0 pages HighMem/MovableOnly [ 1138.252340] 363840 pages reserved [ 1138.256738] 0 pages cma reserved [ 1138.260148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1138.260743] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1138.276585] Out of memory: Kill process 26837 (syz-executor.3) score 1005 or sacrifice child [ 1138.296009] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1138.311973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1138.320011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1138.330176] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1138.349484] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1138.357868] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1138.370335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1138.380954] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1138.387833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1138.398350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1138.407041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1138.419829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1138.434369] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1138.445424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1138.454253] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1138.464437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1138.472836] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1138.490949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.694622] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1138.710075] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1138.717115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1138.730725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1138.781356] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1138.788527] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1138.801511] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1138.811887] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1138.818476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1138.832202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1138.843255] device veth0_vlan entered promiscuous mode [ 1138.854330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1138.863243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1138.877210] device veth1_vlan entered promiscuous mode [ 1138.885603] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1138.900864] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1138.914780] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1138.931806] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1138.938715] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1138.951650] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1138.962979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1138.972520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1138.986739] device veth0_macvtap entered promiscuous mode [ 1138.995347] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1139.009165] device veth1_macvtap entered promiscuous mode [ 1139.016410] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1139.031931] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1139.047491] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1139.057848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1139.072602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.081784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1139.097174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.107136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1139.121932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.131801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1139.146050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.160393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1139.173333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.185976] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1139.196932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1139.205525] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1139.216960] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1139.226109] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1139.240564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1139.254057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1139.265188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.279607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1139.292421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.303788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1139.317815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.332102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1139.341937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.355291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1139.365878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.381075] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1139.388036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1139.399716] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1139.407946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1139.554001] Bluetooth: hci1 command 0x040f tx timeout 01:31:04 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x180, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100), &(0x7f0000000040)=0xc) memfd_create(0x0, 0xa) 01:31:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140e, 0x800, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x45090}, 0x800) 01:31:04 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe}) 01:31:04 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe}) 01:31:04 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x34, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x24008034) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) 01:31:04 executing program 2: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:31:04 executing program 0: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="000427bd7000fcdbdf252700000005002e00020000008093cb66d178d4f9d30f704a39a55b77913d3b76b44a77dc518d3e695ed4f20520eb6970c7ed2418014fb3a32f230bfd46d6edda914fbad4b061b9240254d3bd29de0bb2101575"], 0x1c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x24000000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000040)="22d1427994f61b66ea2ae44412462cb75edb0eafac2da12e2d0297b4eaa6e955b7f4c15fea8d32ac5caa54d9f89085f5d44a7a7f7bd8950656ce94b27fe8a150040707f7f8aa77928c4273394e1d52e816fcdd8d46befddd4d41017ecef4845c1828dbb4c58de30e99a1e256398a3748417294ff884844b06c") openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x1, 0x1, 0x9fc], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x4, 0x41, 0x1}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x9) clock_getres(0x3, &(0x7f0000000000)) 01:31:04 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000040)="8756ad02cf2f858fc8293dc7184d3afc53391316d2b1a744a0c0d3b87f8551af7ec0a3262ec465459fd2bf09a5d084f4ef5c0bd29ef36a3b15c909de3a6cdc6ad79afcd5b5cd514116245d69af90382195b0e053ade8229ba2adcb9aa9250b99fbb6561f49ba5a48e0046173653804954a387a67cf6fb8ddd3f33031e600b82f2c832386611da4dd55ee9b7cfb130402c0e279b22339d7a77919e74143e935ab95305cd3164067b112d9e69a1f", &(0x7f0000000100)=@tcp=r0, 0x4}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) 01:31:04 executing program 4: write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x10}, 0x18) memfd_create(0x0, 0xa) 01:31:04 executing program 2: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:31:04 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x9, 0x42}) 01:31:04 executing program 2: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:31:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x80, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000080), &(0x7f0000000040)=0xfffffffffffffdd7) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') 01:31:04 executing program 4: memfd_create(0x0, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xc, 0x2, 0x3, 0x400, 0x1002, 0xffffffffffffffff, 0x9, [], 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x40) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x1410, 0x100, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40020}, 0x4000060) 01:31:04 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) [ 1140.822689] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1140.834561] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1140.834581] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1140.834600] CPU: 0 PID: 27107 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1140.834605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1140.834608] Call Trace: [ 1140.834623] dump_stack+0x1b2/0x281 [ 1140.834637] warn_alloc.cold+0x96/0x1cc [ 1140.834648] ? zone_watermark_ok_safe+0x220/0x220 [ 1140.834671] __alloc_pages_nodemask+0x2127/0x2720 [ 1140.834686] ? lock_acquire+0x170/0x3f0 [ 1140.834700] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1140.834714] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1140.834724] ? __mutex_unlock_slowpath+0x75/0x770 [ 1140.834737] alloc_pages_current+0x155/0x260 [ 1140.834749] ion_page_pool_alloc+0x118/0x1b0 [ 1140.834759] ion_system_heap_allocate+0x133/0x8c0 [ 1140.834770] ? ion_alloc+0x187/0x810 [ 1140.834780] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1140.834791] ? ion_system_contig_heap_create+0x130/0x130 [ 1140.834800] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1140.834810] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1140.834822] ion_alloc+0x204/0x810 [ 1140.834837] ? ion_dma_buf_release+0x40/0x40 [ 1140.834848] ? __might_fault+0x177/0x1b0 [ 1140.834859] ion_ioctl+0xea/0x1f0 [ 1140.834868] ? ion_query_heaps+0x360/0x360 [ 1140.834880] ? ion_query_heaps+0x360/0x360 [ 1140.834890] do_vfs_ioctl+0x75a/0xff0 [ 1140.834900] ? ioctl_preallocate+0x1a0/0x1a0 [ 1140.834908] ? lock_downgrade+0x740/0x740 [ 1140.834919] ? __fget+0x225/0x360 [ 1140.834929] ? do_vfs_ioctl+0xff0/0xff0 [ 1140.863824] syz-executor.1 cpuset= [ 1140.869619] ? security_file_ioctl+0x83/0xb0 [ 1140.869632] SyS_ioctl+0x7f/0xb0 [ 1140.869640] ? do_vfs_ioctl+0xff0/0xff0 [ 1140.869650] do_syscall_64+0x1d5/0x640 [ 1140.869666] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1140.869674] RIP: 0033:0x465ef9 [ 1140.869679] RSP: 002b:00007fab2d828188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1140.869689] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1140.869694] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1140.869701] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1140.875103] / [ 1140.875883] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1140.880511] mems_allowed=0-1 [ 1140.884666] R13: 00007ffde76bccff R14: 00007fab2d828300 R15: 0000000000022000 [ 1140.948665] Mem-Info: [ 1140.961411] CPU: 1 PID: 27105 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 1141.078132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1141.087477] Call Trace: [ 1141.090053] dump_stack+0x1b2/0x281 [ 1141.093664] warn_alloc.cold+0x96/0x1cc [ 1141.097619] ? zone_watermark_ok_safe+0x220/0x220 [ 1141.102451] __alloc_pages_nodemask+0x2127/0x2720 [ 1141.107277] ? lock_acquire+0x170/0x3f0 [ 1141.111234] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1141.116067] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1141.121498] ? __mutex_unlock_slowpath+0x75/0x770 [ 1141.126319] ? __sanitizer_cov_trace_pc+0xe/0x50 [ 1141.131057] alloc_pages_current+0x155/0x260 [ 1141.135451] ion_page_pool_alloc+0x118/0x1b0 [ 1141.139844] ion_system_heap_allocate+0x133/0x8c0 [ 1141.144668] ? ion_alloc+0x187/0x810 [ 1141.148359] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1141.153786] ? ion_system_contig_heap_create+0x130/0x130 [ 1141.159215] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1141.164237] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1141.169071] ion_alloc+0x204/0x810 [ 1141.172592] ? ion_dma_buf_release+0x40/0x40 [ 1141.176990] ? __might_fault+0x177/0x1b0 [ 1141.181033] ion_ioctl+0xea/0x1f0 [ 1141.184466] ? ion_query_heaps+0x360/0x360 [ 1141.188682] ? ion_query_heaps+0x360/0x360 [ 1141.192894] do_vfs_ioctl+0x75a/0xff0 [ 1141.196674] ? ioctl_preallocate+0x1a0/0x1a0 [ 1141.201061] ? lock_downgrade+0x740/0x740 [ 1141.205188] ? __fget+0x225/0x360 [ 1141.208623] ? do_vfs_ioctl+0xff0/0xff0 [ 1141.212578] ? security_file_ioctl+0x83/0xb0 [ 1141.216963] SyS_ioctl+0x7f/0xb0 [ 1141.220306] ? do_vfs_ioctl+0xff0/0xff0 [ 1141.225226] do_syscall_64+0x1d5/0x640 [ 1141.229096] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1141.234267] RIP: 0033:0x465ef9 [ 1141.237435] RSP: 002b:00007f7d1a1ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1141.245124] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1141.252371] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1141.259619] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1141.266878] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1141.274125] R13: 00007ffc8ea5f85f R14: 00007f7d1a1ad300 R15: 0000000000022000 [ 1141.282224] active_anon:11819 inactive_anon:49406 isolated_anon:0 [ 1141.282224] active_file:1469 inactive_file:2246 isolated_file:0 [ 1141.282224] unevictable:0 dirty:14 writeback:39 unstable:0 [ 1141.282224] slab_reclaimable:12258 slab_unreclaimable:118280 [ 1141.282224] mapped:54596 shmem:49935 pagetables:757 bounce:0 [ 1141.282224] free:213068 free_pcp:405 free_cma:0 [ 1141.320859] Node 0 active_anon:46832kB inactive_anon:146468kB active_file:5832kB inactive_file:9812kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:146532kB dirty:52kB writeback:4kB shmem:148324kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1141.349307] Node 1 active_anon:436kB inactive_anon:51160kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72344kB dirty:4kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1141.376923] Node 0 DMA free:11132kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1141.404129] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1141.409974] Node 0 DMA32 free:710156kB min:36200kB low:45248kB high:54296kB active_anon:46832kB inactive_anon:146448kB active_file:5828kB inactive_file:10416kB unevictable:0kB writepending:56kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7616kB pagetables:2436kB bounce:0kB free_pcp:264kB local_pcp:208kB free_cma:0kB [ 1141.440264] lowmem_reserve[]: 0 0 0 0 0 [ 1141.444646] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1141.471734] lowmem_reserve[]: 0 0 0 0 0 [ 1141.475879] Node 1 Normal free:55876kB min:53696kB low:67120kB high:80544kB active_anon:436kB inactive_anon:51160kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:284kB bounce:0kB free_pcp:632kB local_pcp:632kB free_cma:0kB [ 1141.504592] lowmem_reserve[]: 0 0 0 0 0 [ 1141.508720] Node 0 DMA: 15*4kB (UM) 16*8kB (UM) 22*16kB (UM) 15*32kB (UM) 6*64kB (M) 6*128kB (M) 3*256kB (M) 0*512kB 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11132kB [ 1141.524150] Node 0 DMA32: 0*4kB 1299*8kB (UE) 16260*16kB (UE) 11066*32kB (UME) 3*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 624856kB [ 1141.538238] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1141.550514] Node 1 Normal: 993*4kB (UM) 1284*8kB (UM) 990*16kB (UM) 646*32kB (UM) 30*64kB (UM) 7*128kB (UM) 5*256kB (U) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 55876kB [ 1141.566507] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1141.576045] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1141.585147] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1141.594844] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1141.604337] 54201 total pagecache pages [ 1141.608365] 0 pages in swap cache [ 1141.612113] Swap cache stats: add 0, delete 0, find 0/0 [ 1141.617526] Free swap = 0kB [ 1141.620835] Total swap = 0kB [ 1141.623899] 2097051 pages RAM [ 1141.627039] 0 pages HighMem/MovableOnly [ 1141.628938] Bluetooth: hci1 command 0x0419 tx timeout [ 1141.631522] 363840 pages reserved [ 1141.639931] 0 pages cma reserved [ 1142.254097] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1142.339416] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1142.344577] CPU: 0 PID: 24892 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1142.352461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1142.361808] Call Trace: [ 1142.364397] dump_stack+0x1b2/0x281 [ 1142.368021] dump_header+0x178/0x82f [ 1142.371732] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1142.376829] ? ___ratelimit+0x2cd/0x530 [ 1142.380971] oom_kill_process.cold+0x10/0xb18 [ 1142.385470] out_of_memory+0xe3e/0x1190 [ 1142.389440] ? oom_killer_disable+0x1c0/0x1c0 [ 1142.393925] ? mutex_trylock+0x152/0x1a0 [ 1142.397977] __alloc_pages_nodemask+0x23e1/0x2720 [ 1142.402825] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1142.407675] alloc_pages_current+0x155/0x260 [ 1142.412079] filemap_fault+0xea3/0x1980 [ 1142.416055] ext4_filemap_fault+0x84/0xb0 [ 1142.420206] __do_fault+0xfa/0x380 [ 1142.423737] __handle_mm_fault+0x2497/0x4620 [ 1142.428138] ? vm_insert_page+0x7c0/0x7c0 [ 1142.432284] ? nanosleep_copyout+0x100/0x100 [ 1142.436697] handle_mm_fault+0x391/0x860 [ 1142.440776] __do_page_fault+0x549/0xad0 [ 1142.444833] ? spurious_fault+0x640/0x640 [ 1142.448972] ? do_page_fault+0x60/0x500 [ 1142.452939] ? page_fault+0x2f/0x50 [ 1142.456556] page_fault+0x45/0x50 [ 1142.460032] RIP: 11680a:0x4 [ 1142.462950] RSP: 002f:00007ffde76bcfbc EFLAGS: 00000032 [ 1142.492674] Mem-Info: [ 1142.518527] active_anon:11817 inactive_anon:49407 isolated_anon:0 [ 1142.518527] active_file:0 inactive_file:18 isolated_file:0 [ 1142.518527] unevictable:0 dirty:2 writeback:0 unstable:0 [ 1142.518527] slab_reclaimable:12258 slab_unreclaimable:118392 [ 1142.518527] mapped:52655 shmem:49935 pagetables:680 bounce:0 [ 1142.518527] free:25213 free_pcp:0 free_cma:0 [ 1142.668100] Node 0 active_anon:46832kB inactive_anon:146468kB active_file:64kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138276kB dirty:0kB writeback:0kB shmem:148324kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1142.766148] Node 1 active_anon:436kB inactive_anon:51160kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72344kB dirty:8kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1142.862418] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1142.995619] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1143.002950] Node 0 DMA32 free:35784kB min:36200kB low:45248kB high:54296kB active_anon:46832kB inactive_anon:146448kB active_file:300kB inactive_file:192kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7616kB pagetables:2436kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1143.040489] lowmem_reserve[]: 0 0 0 0 0 [ 1143.044514] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1143.078299] lowmem_reserve[]: 0 0 0 0 0 [ 1143.082394] Node 1 Normal free:53672kB min:53696kB low:67120kB high:80544kB active_anon:436kB inactive_anon:51160kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:284kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1143.118551] lowmem_reserve[]: 0 0 0 0 0 [ 1143.122561] Node 0 DMA: 5*4kB (M) 10*8kB (UM) 21*16kB (UM) 14*32kB (UM) 5*64kB (M) 5*128kB (M) 2*256kB (M) 1*512kB (M) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11060kB [ 1143.140116] Node 0 DMA32: 377*4kB (UME) 275*8kB (UME) 178*16kB (UME) 883*32kB (UME) 15*64kB (UM) 2*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36028kB [ 1143.154836] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1143.167761] Node 1 Normal: 304*4kB (UM) 1261*8kB (UM) 984*16kB (UM) 634*32kB (UM) 33*64kB (UM) 9*128kB (UM) 6*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 53672kB [ 1143.185993] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1143.194892] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1143.205492] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1143.214431] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1143.225132] 49960 total pagecache pages [ 1143.229158] 0 pages in swap cache [ 1143.232697] Swap cache stats: add 0, delete 0, find 0/0 [ 1143.238046] Free swap = 0kB [ 1143.243196] Total swap = 0kB [ 1143.246221] 2097051 pages RAM [ 1143.249363] 0 pages HighMem/MovableOnly [ 1143.253389] 363840 pages reserved [ 1143.256828] 0 pages cma reserved [ 1143.268407] Out of memory (oom_kill_allocating_task): Kill process 24892 (syz-executor.3) score 0 or sacrifice child [ 1143.288445] Killed process 27107 (syz-executor.3) total-vm:93232kB, anon-rss:148kB, file-rss:34820kB, shmem-rss:0kB [ 1143.311767] oom_reaper: reaped process 27107 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1143.380525] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1143.410548] systemd-journal cpuset=/ mems_allowed=0-1 [ 1143.415786] CPU: 1 PID: 26840 Comm: systemd-journal Not tainted 4.14.222-syzkaller #0 [ 1143.423754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1143.433119] Call Trace: [ 1143.435719] dump_stack+0x1b2/0x281 [ 1143.439387] dump_header+0x178/0x82f [ 1143.443115] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1143.448198] ? ___ratelimit+0x2cd/0x530 [ 1143.452162] oom_kill_process.cold+0x10/0xb18 [ 1143.456716] out_of_memory+0xe3e/0x1190 [ 1143.460694] ? oom_killer_disable+0x1c0/0x1c0 [ 1143.465187] ? mutex_trylock+0x152/0x1a0 [ 1143.469244] __alloc_pages_nodemask+0x23e1/0x2720 [ 1143.474081] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1143.478917] alloc_pages_current+0x155/0x260 [ 1143.483307] filemap_fault+0xea3/0x1980 [ 1143.487277] ext4_filemap_fault+0x84/0xb0 [ 1143.491415] __do_fault+0xfa/0x380 [ 1143.494932] __handle_mm_fault+0x2497/0x4620 [ 1143.499319] ? ep_poll+0x1ab/0xa50 [ 1143.502835] ? vm_insert_page+0x7c0/0x7c0 [ 1143.506977] handle_mm_fault+0x391/0x860 [ 1143.511016] __do_page_fault+0x549/0xad0 [ 1143.515055] ? spurious_fault+0x640/0x640 [ 1143.519187] ? do_page_fault+0x60/0x500 [ 1143.523147] ? page_fault+0x2f/0x50 [ 1143.526749] page_fault+0x45/0x50 [ 1143.530181] RIP: 0001:0xffffffffffffffff [ 1143.534232] RSP: c6c461e0:00007ffc576dfce0 EFLAGS: 7ffc576dfb00 [ 1143.543380] Mem-Info: [ 1143.546300] syz-executor.3: [ 1143.551805] active_anon:11817 inactive_anon:49407 isolated_anon:0 [ 1143.551805] active_file:11 inactive_file:0 isolated_file:0 [ 1143.551805] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1143.551805] slab_reclaimable:12258 slab_unreclaimable:118159 [ 1143.551805] mapped:52663 shmem:49935 pagetables:680 bounce:0 [ 1143.551805] free:13837 free_pcp:60 free_cma:0 [ 1143.554678] page allocation failure: order:0 [ 1143.555437] Node 0 active_anon:46832kB inactive_anon:146468kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138308kB dirty:0kB writeback:0kB shmem:148324kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1143.597767] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1143.623516] Node 1 active_anon:436kB inactive_anon:51160kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72344kB dirty:0kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1143.638788] (null) [ 1143.660567] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1143.672907] syz-executor.3 cpuset= [ 1143.689622] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1143.698196] Node 0 DMA32 free:17608kB min:36200kB low:45248kB high:54296kB active_anon:46832kB inactive_anon:146448kB active_file:56kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7616kB pagetables:2436kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1143.700622] / [ 1143.730233] lowmem_reserve[]: 0 0 0 0 0 [ 1143.735952] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1143.740309] mems_allowed=0-1 [ 1143.769792] lowmem_reserve[]: 0 0 0 0 0 [ 1143.772151] CPU: 0 PID: 27107 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1143.773826] Node 1 [ 1143.781661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1143.781665] Call Trace: [ 1143.781684] dump_stack+0x1b2/0x281 [ 1143.781697] warn_alloc.cold+0x96/0x1cc [ 1143.781708] ? zone_watermark_ok_safe+0x220/0x220 [ 1143.781717] ? usleep_range+0x130/0x130 [ 1143.781726] ? try_to_free_pages+0x23f/0x6e0 [ 1143.781735] ? _find_next_bit+0xdb/0x100 [ 1143.781746] ? run_timer_softirq+0x5a0/0x5a0 [ 1143.781761] __alloc_pages_nodemask+0x2127/0x2720 [ 1143.791913] Normal free:26764kB min:53696kB low:67120kB high:80544kB active_anon:436kB inactive_anon:51160kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:284kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1143.793846] ? lock_acquire+0x170/0x3f0 [ 1143.796400] lowmem_reserve[]: [ 1143.800025] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1143.800039] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1143.800053] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1143.800071] alloc_pages_current+0x155/0x260 [ 1143.800084] ion_page_pool_alloc+0x118/0x1b0 [ 1143.800096] ion_system_heap_allocate+0x133/0x8c0 [ 1143.805933] 0 [ 1143.808874] ? ion_alloc+0x187/0x810 [ 1143.808883] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1143.808893] ? ion_system_contig_heap_create+0x130/0x130 [ 1143.808903] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1143.808914] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1143.808925] ion_alloc+0x204/0x810 [ 1143.808939] ? ion_dma_buf_release+0x40/0x40 [ 1143.808952] ? __might_fault+0x177/0x1b0 [ 1143.820321] 0 [ 1143.821393] ion_ioctl+0xea/0x1f0 [ 1143.825789] 0 [ 1143.830616] ? ion_query_heaps+0x360/0x360 [ 1143.830628] ? ion_query_heaps+0x360/0x360 [ 1143.830638] do_vfs_ioctl+0x75a/0xff0 [ 1143.830648] ? ioctl_preallocate+0x1a0/0x1a0 [ 1143.830658] ? lock_downgrade+0x740/0x740 [ 1143.830671] ? __fget+0x225/0x360 [ 1143.830679] ? do_vfs_ioctl+0xff0/0xff0 [ 1143.830688] ? security_file_ioctl+0x83/0xb0 [ 1143.830699] SyS_ioctl+0x7f/0xb0 [ 1143.865599] 0 [ 1143.870240] ? do_vfs_ioctl+0xff0/0xff0 [ 1143.870252] do_syscall_64+0x1d5/0x640 [ 1143.870268] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1143.870275] RIP: 0033:0x465ef9 [ 1143.870280] RSP: 002b:00007fab2d828188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1143.870289] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1143.870295] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1143.870300] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1143.870305] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1143.870310] R13: 00007ffde76bccff R14: 00007fab2d828300 R15: 0000000000022000 [ 1143.881345] warn_alloc_show_mem: 1 callbacks suppressed [ 1143.881348] Mem-Info: [ 1143.892500] 0 [ 1143.900880] active_anon:11817 inactive_anon:49407 isolated_anon:0 [ 1143.900880] active_file:11 inactive_file:0 isolated_file:0 [ 1143.900880] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1143.900880] slab_reclaimable:12258 slab_unreclaimable:118159 [ 1143.900880] mapped:52663 shmem:49935 pagetables:680 bounce:0 [ 1143.900880] free:13837 free_pcp:60 free_cma:0 [ 1143.916390] Node 0 active_anon:46832kB inactive_anon:146468kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138308kB dirty:0kB writeback:0kB shmem:148324kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1143.928396] Node 0 [ 1143.935979] Node 1 active_anon:436kB inactive_anon:51160kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72344kB dirty:0kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1143.945591] DMA: [ 1143.956777] Node 0 [ 1143.957493] 6*4kB [ 1143.961266] DMA free:11232kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1143.961269] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1143.972151] (UM) [ 1143.980646] Node 0 [ 1143.984807] 5*8kB [ 1143.986700] DMA32 free:18108kB min:36200kB low:45248kB high:54296kB active_anon:46740kB inactive_anon:146448kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7616kB pagetables:2436kB bounce:0kB free_pcp:164kB local_pcp:156kB free_cma:0kB [ 1143.997295] (UM) [ 1144.010280] lowmem_reserve[]: [ 1144.024783] 18*16kB (UM) 14*32kB (UM) 5*64kB (M) 7*128kB (UM) 2*256kB (M) 1*512kB (M) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11232kB [ 1144.024836] Node 0 DMA32: 377*4kB (UME) 285*8kB (UME) 182*16kB (UME) 317*32kB (UME) 17*64kB (UM) 2*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB [ 1144.040288] 0 [ 1144.051720] = 18188kB [ 1144.089512] 0 [ 1144.117370] Node 0 [ 1144.152189] 0 [ 1144.175984] Normal: [ 1144.187128] 0 [ 1144.215910] 0*4kB [ 1144.226781] 0 [ 1144.233472] 0*8kB [ 1144.260328] 0*16kB [ 1144.263653] Node 0 [ 1144.263975] 0*32kB [ 1144.266203] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1144.282354] 0*64kB [ 1144.302827] lowmem_reserve[]: 0 0 0 0 0 [ 1144.306186] 0*128kB [ 1144.310433] Node 1 [ 1144.311157] 0*256kB [ 1144.312761] Normal free:26764kB min:53696kB low:67120kB high:80544kB active_anon:436kB inactive_anon:51160kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:284kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1144.315112] 0*512kB [ 1144.317414] lowmem_reserve[]: [ 1144.351815] 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1144.357256] 0 0 0 0 0 [ 1144.361277] Node 1 [ 1144.361892] Node 0 [ 1144.361895] Normal: 55*4kB [ 1144.364126] DMA: [ 1144.366344] (UM) 48*8kB (M) 27*16kB (UM) 606*32kB (UM) 33*64kB (UM) 9*128kB (UM) 6*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 26764kB [ 1144.378647] 6*4kB (UM) 5*8kB (UM) 8*16kB (M) 14*32kB (UM) 5*64kB (M) 7*128kB (UM) 2*256kB (M) 1*512kB (M) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11072kB [ 1144.394698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1144.412398] Node 0 DMA32: 377*4kB (UME) 285*8kB (UME) 182*16kB (UME) 317*32kB (UME) 17*64kB (UM) 2*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18188kB [ 1144.417849] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1144.436585] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1144.441353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1144.462713] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1144.465835] Node 1 [ 1144.471345] 49960 total pagecache pages [ 1144.471354] 0 pages in swap cache [ 1144.475468] Normal: [ 1144.477530] Swap cache stats: add 0, delete 0, find 0/0 [ 1144.487858] 55*4kB (UM) 48*8kB (M) 27*16kB (UM) 606*32kB (UM) 33*64kB (UM) 9*128kB (UM) 6*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 26764kB [ 1144.494548] Free swap = 0kB [ 1144.507934] Total swap = 0kB [ 1144.512097] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1144.516599] 2097051 pages RAM [ 1144.524169] 0 pages HighMem/MovableOnly [ 1144.528134] 363840 pages reserved [ 1144.528662] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1144.537066] 0 pages cma reserved [ 1144.543540] Out of memory (oom_kill_allocating_task): Kill process 26840 (systemd-journal) score 0 or sacrifice child [ 1144.548817] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1144.559830] Killed process 26840 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1664kB [ 1144.572255] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1144.587102] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1144.608113] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1144.608295] 49960 total pagecache pages [ 1144.617254] 0 pages in swap cache [ 1144.623358] CPU: 1 PID: 24892 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1144.628035] Swap cache stats: add 0, delete 0, find 0/0 [ 1144.631240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1144.631244] Call Trace: [ 1144.631262] dump_stack+0x1b2/0x281 [ 1144.631273] dump_header+0x178/0x82f [ 1144.631282] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1144.631290] ? ___ratelimit+0x2cd/0x530 [ 1144.631302] oom_kill_process.cold+0x10/0xb18 [ 1144.636648] Free swap = 0kB [ 1144.645996] out_of_memory+0xe3e/0x1190 [ 1144.646011] ? oom_killer_disable+0x1c0/0x1c0 [ 1144.648586] Total swap = 0kB [ 1144.652181] ? mutex_trylock+0x152/0x1a0 [ 1144.655884] 2097051 pages RAM [ 1144.660985] __alloc_pages_nodemask+0x23e1/0x2720 [ 1144.661006] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1144.664956] 0 pages HighMem/MovableOnly [ 1144.669449] alloc_pages_current+0x155/0x260 [ 1144.669460] filemap_fault+0xea3/0x1980 [ 1144.672456] 363840 pages reserved [ 1144.676418] ext4_filemap_fault+0x84/0xb0 [ 1144.680900] 0 pages cma reserved [ 1144.683885] __do_fault+0xfa/0x380 [ 1144.727450] __handle_mm_fault+0x2497/0x4620 [ 1144.731946] ? vm_insert_page+0x7c0/0x7c0 [ 1144.736096] ? nanosleep_copyout+0x100/0x100 [ 1144.740678] handle_mm_fault+0x391/0x860 [ 1144.744746] __do_page_fault+0x549/0xad0 [ 1144.748811] ? spurious_fault+0x640/0x640 [ 1144.752954] ? do_page_fault+0x60/0x500 [ 1144.756924] ? page_fault+0x2f/0x50 [ 1144.760542] page_fault+0x45/0x50 [ 1144.763984] RIP: 11680a:0x4 [ 1144.766908] RSP: 002f:00007ffde76bcfbc EFLAGS: 00000032 [ 1144.828576] Mem-Info: [ 1144.844531] active_anon:11694 inactive_anon:49407 isolated_anon:0 [ 1144.844531] active_file:63 inactive_file:1237 isolated_file:0 [ 1144.844531] unevictable:0 dirty:25 writeback:0 unstable:0 [ 1144.844531] slab_reclaimable:12258 slab_unreclaimable:118021 [ 1144.844531] mapped:53147 shmem:49935 pagetables:680 bounce:0 [ 1144.844531] free:58576 free_pcp:107 free_cma:0 [ 1144.883330] Node 0 active_anon:46340kB inactive_anon:146468kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:136644kB dirty:0kB writeback:0kB shmem:148324kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1144.939323] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1144.948410] Node 1 active_anon:480kB inactive_anon:51160kB active_file:248kB inactive_file:5452kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:76616kB dirty:100kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1144.976973] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1144.997321] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1145.024421] systemd[1]: Stopped Journal Service. [ 1145.037529] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1145.063650] systemd[1]: Starting Journal Service... [ 1145.068816] Node 0 DMA32 free:164744kB min:36200kB low:45248kB high:54296kB active_anon:46376kB inactive_anon:146444kB active_file:276kB inactive_file:1008kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7616kB pagetables:2496kB bounce:0kB free_pcp:1132kB local_pcp:544kB free_cma:0kB [ 1145.125919] lowmem_reserve[]: 0 0 0 0 0 [ 1145.138500] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1145.164366] lowmem_reserve[]: 0 0 0 0 0 [ 1145.182314] Node 1 Normal free:75052kB min:53696kB low:67120kB high:80544kB active_anon:488kB inactive_anon:51160kB active_file:292kB inactive_file:5512kB unevictable:0kB writepending:104kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:300kB bounce:0kB free_pcp:312kB local_pcp:148kB free_cma:0kB [ 1145.238239] lowmem_reserve[]: 0 0 0 0 0 [ 1145.242543] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1145.248500] Node 0 DMA: 11*4kB (UM) 16*8kB (UM) 10*16kB (UM) 14*32kB (UM) 6*64kB (UM) 5*128kB (M) 2*256kB (M) 1*512kB (M) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11020kB [ 1145.268193] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1145.270304] Node 0 DMA32: [ 1145.275095] CPU: 0 PID: 27107 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1145.275102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1145.277925] 2146*4kB [ 1145.285790] Call Trace: [ 1145.285807] dump_stack+0x1b2/0x281 [ 1145.285821] warn_alloc.cold+0x96/0x1cc [ 1145.285833] ? zone_watermark_ok_safe+0x220/0x220 [ 1145.285854] __alloc_pages_nodemask+0x2127/0x2720 [ 1145.285865] ? ___preempt_schedule+0x16/0x18 [ 1145.295514] (UM) [ 1145.297603] ? lock_acquire+0x170/0x3f0 [ 1145.300185] 2292*8kB [ 1145.303773] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1145.307712] (UME) [ 1145.312543] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1145.312555] ? __mutex_unlock_slowpath+0x75/0x770 [ 1145.312568] alloc_pages_current+0x155/0x260 [ 1145.312583] ion_page_pool_alloc+0x118/0x1b0 [ 1145.312594] ion_system_heap_allocate+0x133/0x8c0 [ 1145.312604] ? _raw_spin_unlock+0x29/0x40 [ 1145.317458] 7041*16kB [ 1145.321827] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1145.321837] ? ion_system_contig_heap_create+0x130/0x130 [ 1145.321847] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1145.321857] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1145.321868] ion_alloc+0x27a/0x810 [ 1145.321882] ? ion_dma_buf_release+0x40/0x40 [ 1145.324487] (UME) [ 1145.327879] ? __might_fault+0x177/0x1b0 [ 1145.330321] 5920*32kB [ 1145.335113] ion_ioctl+0xea/0x1f0 [ 1145.337232] (UME) [ 1145.342676] ? ion_query_heaps+0x360/0x360 [ 1145.342690] ? ion_query_heaps+0x360/0x360 [ 1145.342701] do_vfs_ioctl+0x75a/0xff0 [ 1145.342712] ? ioctl_preallocate+0x1a0/0x1a0 [ 1145.347527] 0*64kB [ 1145.351914] ? lock_downgrade+0x740/0x740 [ 1145.351926] ? __fget+0x225/0x360 [ 1145.351935] ? do_vfs_ioctl+0xff0/0xff0 [ 1145.351946] ? security_file_ioctl+0x83/0xb0 [ 1145.351955] SyS_ioctl+0x7f/0xb0 [ 1145.351963] ? do_vfs_ioctl+0xff0/0xff0 [ 1145.351975] do_syscall_64+0x1d5/0x640 [ 1145.358104] 0*128kB [ 1145.361309] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1145.361320] RIP: 0033:0x465ef9 [ 1145.361325] RSP: 002b:00007fab2d828188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1145.365473] 0*256kB [ 1145.367951] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1145.398183] 0*512kB [ 1145.402175] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1145.402182] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1145.404659] 0*1024kB [ 1145.408088] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1145.408095] R13: 00007ffde76bccff R14: 00007fab2d828300 R15: 0000000000022000 [ 1145.428250] 0*2048kB [ 1145.433154] Mem-Info: [ 1145.433518] 0*4096kB [ 1145.436628] active_anon:11741 inactive_anon:49406 isolated_anon:0 [ 1145.436628] active_file:317 inactive_file:1898 isolated_file:32 [ 1145.436628] unevictable:0 dirty:26 writeback:0 unstable:0 [ 1145.436628] slab_reclaimable:12250 slab_unreclaimable:117989 [ 1145.436628] mapped:53529 shmem:49935 pagetables:699 bounce:0 [ 1145.436628] free:95705 free_pcp:430 free_cma:0 [ 1145.441731] = 329016kB [ 1145.461620] Node 0 active_anon:46476kB inactive_anon:146464kB active_file:476kB inactive_file:2784kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137296kB dirty:0kB writeback:0kB shmem:148324kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1145.464280] Node 0 [ 1145.466992] Node 1 active_anon:488kB inactive_anon:51160kB active_file:1092kB inactive_file:4660kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:76820kB dirty:104kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1145.475329] Normal: [ 1145.491489] Node 0 [ 1145.494339] 0*4kB [ 1145.518195] DMA free:11016kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1145.519657] 0*8kB [ 1145.521660] lowmem_reserve[]: [ 1145.524046] 0*16kB 0*32kB [ 1145.526463] 0 [ 1145.560524] 0*64kB [ 1145.608183] 2717 [ 1145.621028] 0*128kB [ 1145.638179] 2718 [ 1145.653331] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1145.677686] Node 1 Normal: 769*4kB (UM) 1211*8kB (UM) 913*16kB (U) 583*32kB (U) 3*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 46220kB [ 1145.678185] 2718 [ 1145.691767] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1145.702702] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1145.711656] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1145.724590] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1145.733201] 2718 [ 1145.733210] Node 0 DMA32 free:199560kB min:36200kB low:45248kB high:54296kB active_anon:46476kB inactive_anon:146444kB active_file:476kB inactive_file:2784kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7616kB pagetables:2496kB bounce:0kB free_pcp:684kB local_pcp:252kB free_cma:0kB [ 1145.733230] lowmem_reserve[]: 0 0 0 0 0 [ 1145.733248] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1145.761566] 52192 total pagecache pages [ 1145.794130] lowmem_reserve[]: 0 0 0 0 0 [ 1145.794153] Node 1 Normal free:46184kB min:53696kB low:67120kB high:80544kB active_anon:488kB inactive_anon:51160kB active_file:1092kB inactive_file:4660kB unevictable:0kB writepending:104kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:300kB bounce:0kB free_pcp:1316kB local_pcp:620kB free_cma:0kB [ 1145.794173] lowmem_reserve[]: 0 0 0 0 0 [ 1145.794191] Node 0 DMA: 11*4kB (UM) 16*8kB (UM) 10*16kB (UM) 14*32kB (UM) 6*64kB (UM) 5*128kB (M) [ 1145.828198] 0 pages in swap cache [ 1145.845013] 2*256kB (M) 1*512kB (M) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11020kB [ 1145.861081] Node 0 DMA32: 1*4kB (M) 69*8kB (ME) 119*16kB (ME) 4117*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 134204kB [ 1145.861984] Swap cache stats: add 0, delete 0, find 0/0 [ 1145.878261] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1145.880482] Free swap = 0kB [ 1145.894031] Total swap = 0kB [ 1145.897051] 2097051 pages RAM [ 1145.900471] 0 pages HighMem/MovableOnly [ 1145.904444] 363840 pages reserved [ 1145.907886] 0 pages cma reserved [ 1145.911344] Out of memory (oom_kill_allocating_task): Kill process 24892 (syz-executor.3) score 0 or sacrifice child [ 1145.919990] Node 1 Normal: 769*4kB (UM) 1211*8kB (UM) 913*16kB (U) 583*32kB (U) 3*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 46220kB [ 1145.937465] Killed process 24892 (syz-executor.3) total-vm:93100kB, anon-rss:104kB, file-rss:34204kB, shmem-rss:0kB [ 1145.973520] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1145.985271] oom_reaper: reaped process 24892 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1146.001448] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1146.013127] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1146.025138] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1146.036004] 51072 total pagecache pages [ 1146.043911] 0 pages in swap cache [ 1146.050145] Swap cache stats: add 0, delete 0, find 0/0 [ 1146.056970] Free swap = 0kB [ 1146.063837] Total swap = 0kB [ 1146.067453] 2097051 pages RAM [ 1146.073311] 0 pages HighMem/MovableOnly [ 1146.081534] 363840 pages reserved [ 1146.089962] 0 pages cma reserved [ 1146.113634] rs:main Q:Reg invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1146.138172] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1146.143247] CPU: 1 PID: 24466 Comm: rs:main Q:Reg Not tainted 4.14.222-syzkaller #0 [ 1146.151070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1146.160434] Call Trace: [ 1146.163022] dump_stack+0x1b2/0x281 [ 1146.166647] dump_header+0x178/0x82f [ 1146.170357] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1146.175454] ? ___ratelimit+0x2cd/0x530 [ 1146.179422] oom_kill_process.cold+0x10/0xb18 [ 1146.183920] out_of_memory+0xe3e/0x1190 [ 1146.187980] ? oom_killer_disable+0x1c0/0x1c0 [ 1146.192470] ? mutex_trylock+0x152/0x1a0 [ 1146.196511] __alloc_pages_nodemask+0x23e1/0x2720 [ 1146.201336] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1146.206163] alloc_pages_current+0x155/0x260 [ 1146.210549] filemap_fault+0xea3/0x1980 [ 1146.214503] ext4_filemap_fault+0x84/0xb0 [ 1146.218627] __do_fault+0xfa/0x380 [ 1146.222142] __handle_mm_fault+0x2497/0x4620 [ 1146.226542] ? vm_insert_page+0x7c0/0x7c0 [ 1146.230666] ? lock_downgrade+0x740/0x740 [ 1146.234787] ? vfs_write+0x35d/0x4d0 [ 1146.238482] handle_mm_fault+0x391/0x860 [ 1146.242521] __do_page_fault+0x549/0xad0 [ 1146.246560] ? spurious_fault+0x640/0x640 [ 1146.250684] ? do_page_fault+0x60/0x500 [ 1146.254637] ? page_fault+0x2f/0x50 [ 1146.258239] page_fault+0x45/0x50 [ 1146.261670] RIP: 0000:0x55c9e8c10290 [ 1146.265462] RSP: 0000:000055c9e8f2c2c8 EFLAGS: 7f78bcdb3cd0 [ 1146.279498] Mem-Info: [ 1146.287643] active_anon:11764 inactive_anon:49406 isolated_anon:0 [ 1146.287643] active_file:40 inactive_file:15 isolated_file:0 [ 1146.287643] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1146.287643] slab_reclaimable:12258 slab_unreclaimable:117914 [ 1146.287643] mapped:52247 shmem:49935 pagetables:678 bounce:0 [ 1146.287643] free:13931 free_pcp:0 free_cma:0 [ 1146.320920] Node 0 active_anon:46612kB inactive_anon:146464kB active_file:56kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:136620kB dirty:0kB writeback:0kB shmem:148324kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1146.348884] Node 1 active_anon:444kB inactive_anon:51160kB active_file:104kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72368kB dirty:4kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1146.358283] syz-executor.3: [ 1146.376127] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1146.386353] page allocation failure: order:0 [ 1146.409473] lowmem_reserve[]: [ 1146.412043] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1146.413884] 0 [ 1146.416995] (null) [ 1146.425852] 2717 [ 1146.428140] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1146.428162] CPU: 0 PID: 27107 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1146.431851] 2718 [ 1146.435301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1146.444898] 2718 [ 1146.445309] Call Trace: [ 1146.456434] 2718 [ 1146.456982] dump_stack+0x1b2/0x281 [ 1146.461593] warn_alloc.cold+0x96/0x1cc [ 1146.465184] Node 0 [ 1146.469145] ? zone_watermark_ok_safe+0x220/0x220 [ 1146.469154] ? usleep_range+0x130/0x130 [ 1146.469162] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1146.469173] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1146.469183] ? run_timer_softirq+0x5a0/0x5a0 [ 1146.469199] __alloc_pages_nodemask+0x2127/0x2720 [ 1146.469212] ? lock_acquire+0x170/0x3f0 [ 1146.469227] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1146.473090] DMA32 free:17912kB min:36200kB low:45248kB high:54296kB active_anon:46612kB inactive_anon:146444kB active_file:232kB inactive_file:296kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7616kB pagetables:2428kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1146.476265] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1146.481939] lowmem_reserve[]: [ 1146.485316] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1146.491978] 0 [ 1146.494716] ? ion_page_pool_alloc+0x28/0x1b0 [ 1146.501222] 0 [ 1146.503486] alloc_pages_current+0x155/0x260 [ 1146.509977] 0 [ 1146.536566] ion_page_pool_alloc+0x118/0x1b0 [ 1146.536577] ion_system_heap_allocate+0x133/0x8c0 [ 1146.536589] ? _raw_spin_unlock+0x29/0x40 [ 1146.536598] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1146.536608] ? ion_system_contig_heap_create+0x130/0x130 [ 1146.536619] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1146.536630] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1146.536643] ion_alloc+0x27a/0x810 [ 1146.551598] 0 [ 1146.555924] ? ion_dma_buf_release+0x40/0x40 [ 1146.557693] 0 [ 1146.562085] ? __might_fault+0x177/0x1b0 [ 1146.562097] ion_ioctl+0xea/0x1f0 [ 1146.562107] ? ion_query_heaps+0x360/0x360 [ 1146.562118] ? ion_query_heaps+0x360/0x360 [ 1146.562127] do_vfs_ioctl+0x75a/0xff0 [ 1146.562138] ? ioctl_preallocate+0x1a0/0x1a0 [ 1146.562148] ? lock_downgrade+0x740/0x740 [ 1146.562160] ? __fget+0x225/0x360 [ 1146.562168] ? do_vfs_ioctl+0xff0/0xff0 [ 1146.562180] ? security_file_ioctl+0x83/0xb0 [ 1146.568348] SyS_ioctl+0x7f/0xb0 [ 1146.568357] ? do_vfs_ioctl+0xff0/0xff0 [ 1146.568367] do_syscall_64+0x1d5/0x640 [ 1146.568388] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1146.568398] RIP: 0033:0x465ef9 [ 1146.568402] RSP: 002b:00007fab2d828188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1146.568413] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1146.576394] Node 0 [ 1146.577367] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1146.586256] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1146.587703] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1146.596044] lowmem_reserve[]: [ 1146.597554] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1146.606380] 0 [ 1146.607346] R13: 00007ffde76bccff R14: 00007fab2d828300 R15: 0000000000022000 [ 1146.610954] 0 [ 1146.619526] Mem-Info: [ 1146.631149] 0 [ 1146.638635] active_anon:11764 inactive_anon:49406 isolated_anon:0 [ 1146.638635] active_file:40 inactive_file:15 isolated_file:0 [ 1146.638635] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1146.638635] slab_reclaimable:12258 slab_unreclaimable:117914 [ 1146.638635] mapped:52247 shmem:49935 pagetables:678 bounce:0 [ 1146.638635] free:13999 free_pcp:30 free_cma:0 [ 1146.644220] 0 [ 1146.644830] Node 0 active_anon:46612kB inactive_anon:146464kB active_file:56kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:136620kB dirty:0kB writeback:0kB shmem:148324kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1146.652820] 0 [ 1146.661313] Node 1 active_anon:444kB inactive_anon:51160kB active_file:104kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72368kB dirty:4kB writeback:0kB shmem:51416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1146.679164] Node 0 [ 1146.687211] Node 1 [ 1146.698924] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1146.721979] Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:444kB inactive_anon:51160kB active_file:36kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:284kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1146.729829] lowmem_reserve[]: [ 1146.742910] lowmem_reserve[]: [ 1146.749208] 0 [ 1146.750482] 0 [ 1146.751429] 2717 [ 1146.795739] 0 [ 1146.816118] 2718 [ 1146.826999] 0 [ 1146.845385] 2718 [ 1146.857610] 0 [ 1146.876071] 2718 [ 1146.912204] 0 [ 1146.919106] Node 0 DMA32 free:18184kB min:36200kB low:45248kB high:54296kB active_anon:46612kB inactive_anon:146444kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7616kB pagetables:2424kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1146.919127] lowmem_reserve[]: 0 0 0 0 0 [ 1146.919146] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1146.919164] lowmem_reserve[]: 0 0 0 [ 1146.926644] Node 0 [ 1146.926830] 0 [ 1146.966227] DMA: [ 1146.987067] 0 [ 1146.997037] Node 1 Normal free:27296kB min:53696kB low:67120kB high:80544kB active_anon:444kB inactive_anon:51160kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:196kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1147.003776] 5*4kB [ 1147.027956] lowmem_reserve[]: 0 0 0 0 0 [ 1147.034233] Node 0 DMA: 5*4kB (M) 12*8kB (UM) 10*16kB (UM) 14*32kB (UM) 6*64kB (UM) 5*128kB (M) 2*256kB (M) 1*512kB (M) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10964kB [ 1147.036378] (M) [ 1147.051855] Node 0 DMA32: 350*4kB (UME) 230*8kB (ME) 156*16kB (UME) 389*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18184kB [ 1147.060439] 12*8kB (UM) 10*16kB (UM) 14*32kB (UM) 6*64kB (UM) 5*128kB (M) 2*256kB (M) 1*512kB [ 1147.067540] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1147.086827] (M) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10964kB [ 1147.088813] Node 1 Normal: 62*4kB (UM) 53*8kB (UM) 148*16kB (UM) 616*32kB (UM) 29*64kB (UM) 9*128kB (UM) [ 1147.093676] Node 0 DMA32: [ 1147.105491] 2*256kB [ 1147.111112] 350*4kB [ 1147.112464] (M) [ 1147.113434] (UME) [ 1147.115759] 2*512kB (UM) [ 1147.117740] 230*8kB [ 1147.119887] 0*1024kB 0*2048kB 0*4096kB = 27296kB [ 1147.119904] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1147.119910] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1147.119916] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1147.119922] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1147.119926] 49967 total pagecache pages [ 1147.119936] 0 pages in swap cache [ 1147.126833] (ME) [ 1147.134940] Swap cache stats: add 0, delete 0, find 0/0 [ 1147.145857] 156*16kB [ 1147.147211] Free swap = 0kB [ 1147.156061] (UME) 389*32kB (UME) 0*64kB 0*128kB [ 1147.170583] Total swap = 0kB [ 1147.179466] 0*256kB [ 1147.183267] 2097051 pages RAM [ 1147.185144] 0*512kB [ 1147.191650] 0 pages HighMem/MovableOnly [ 1147.197066] 0*1024kB [ 1147.202939] 363840 pages reserved [ 1147.205854] 0*2048kB [ 1147.207097] 0 pages cma reserved [ 1147.216530] 0*4096kB = 18184kB [ 1147.221042] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1147.244395] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 23*16kB (M) 478*32kB (UM) 29*64kB (UM) 9*128kB (UM) 2*256kB (M) 2*512kB (UM) 62*1024kB (U) 0*2048kB 0*4096kB = 83716kB [ 1147.286596] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1147.328015] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1147.336729] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1147.358014] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1147.366620] 50867 total pagecache pages 01:31:11 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0104000000000000000100000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10002cbd7000fcdbdf25038a8d469d710000fbb200020b0100000096749a0e6bf4ad"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r3) [ 1147.386239] 0 pages in swap cache [ 1147.390605] Swap cache stats: add 0, delete 0, find 0/0 [ 1147.410942] Free swap = 0kB [ 1147.421452] Total swap = 0kB [ 1147.433076] 2097051 pages RAM [ 1147.443485] 0 pages HighMem/MovableOnly [ 1147.452015] 363840 pages reserved [ 1147.462151] 0 pages cma reserved [ 1147.470043] Out of memory (oom_kill_allocating_task): Kill process 24466 (rs:main Q:Reg) score 0 or sacrifice child [ 1147.495219] Killed process 24462 (rsyslogd) total-vm:254332kB, anon-rss:1060kB, file-rss:0kB, shmem-rss:0kB [ 1147.521761] oom_reaper: reaped process 24462 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1147.913275] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1147.933660] systemd[1]: rsyslog.service: Unit entered failed state. [ 1147.951730] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1148.182109] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1148.201366] systemd[1]: Stopped System Logging Service. [ 1148.232437] systemd[1]: Starting System Logging Service... 01:31:12 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:31:12 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}}, 0x4040000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) 01:31:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe}) 01:31:12 executing program 4: memfd_create(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video0\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00', r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x2, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004885}, 0x801) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) fstat(r1, &(0x7f0000000000)) 01:31:12 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) socket$vsock_stream(0x28, 0x1, 0x0) 01:31:12 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe}) [ 1148.405390] systemd-journald[27150]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. 01:31:12 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x50, r2, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xee03}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_DEBUG={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x2008800}, 0x20000000) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7f}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x800}]}, 0x34}, 0x1, 0x0, 0x0, 0x54}, 0x4000) 01:31:12 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @null, @netrom={'nr', 0x0}, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) memfd_create(0x0, 0xa) 01:31:12 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:31:13 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x81, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x4b, @local, 0x2}, @in6={0xa, 0x4e22, 0x100, @mcast1, 0xffff609e}}}, 0x118) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', r2) 01:31:13 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2040, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) 01:31:13 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000240)={0x6, 0x41}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40011) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) 01:31:13 executing program 4: memfd_create(0x0, 0x9) 01:31:13 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x42}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x2, 0xff], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) [ 1148.801140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1148.826117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1148.860472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1148.886136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1148.911052] device bridge_slave_1 left promiscuous mode [ 1148.925987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.945901] device bridge_slave_0 left promiscuous mode [ 1148.961469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.984840] device veth1_macvtap left promiscuous mode [ 1148.996986] device veth0_macvtap left promiscuous mode [ 1149.011599] device veth1_vlan left promiscuous mode [ 1149.022354] device veth0_vlan left promiscuous mode [ 1149.289546] device hsr_slave_1 left promiscuous mode [ 1149.302904] device hsr_slave_0 left promiscuous mode [ 1149.324315] team0 (unregistering): Port device team_slave_1 removed [ 1149.335214] team0 (unregistering): Port device team_slave_0 removed [ 1149.351480] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1149.366824] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1149.454524] bond0 (unregistering): Released all slaves [ 1149.591101] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1149.603593] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1149.622258] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1149.627791] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1149.632915] CPU: 1 PID: 27176 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 1149.640782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1149.650139] Call Trace: [ 1149.652719] dump_stack+0x1b2/0x281 [ 1149.656337] warn_alloc.cold+0x96/0x1cc [ 1149.660295] ? zone_watermark_ok_safe+0x220/0x220 [ 1149.665127] __alloc_pages_nodemask+0x2127/0x2720 [ 1149.669976] ? lock_acquire+0x170/0x3f0 [ 1149.673940] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1149.678779] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1149.684240] ? __mutex_unlock_slowpath+0x75/0x770 [ 1149.689094] ? retint_kernel+0x2d/0x2d [ 1149.692966] alloc_pages_current+0x155/0x260 [ 1149.697380] ion_page_pool_alloc+0x118/0x1b0 [ 1149.701786] ion_system_heap_allocate+0x133/0x8c0 [ 1149.706621] ? ion_alloc+0x187/0x810 [ 1149.710344] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1149.715786] ? ion_system_contig_heap_create+0x130/0x130 [ 1149.721229] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1149.726234] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1149.731066] ion_alloc+0x204/0x810 [ 1149.734614] ? ion_dma_buf_release+0x40/0x40 [ 1149.739016] ? __might_fault+0x177/0x1b0 [ 1149.743078] ion_ioctl+0xea/0x1f0 [ 1149.746524] ? ion_query_heaps+0x360/0x360 [ 1149.750775] ? ion_query_heaps+0x360/0x360 [ 1149.755012] do_vfs_ioctl+0x75a/0xff0 [ 1149.758809] ? ioctl_preallocate+0x1a0/0x1a0 [ 1149.763209] ? lock_downgrade+0x740/0x740 [ 1149.767353] ? __fget+0x225/0x360 [ 1149.770794] ? do_vfs_ioctl+0xff0/0xff0 [ 1149.774751] ? security_file_ioctl+0x83/0xb0 [ 1149.779142] SyS_ioctl+0x7f/0xb0 [ 1149.782647] ? do_vfs_ioctl+0xff0/0xff0 [ 1149.786630] do_syscall_64+0x1d5/0x640 [ 1149.790520] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1149.795701] RIP: 0033:0x465ef9 [ 1149.798892] RSP: 002b:00007f7d1a1ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1149.806591] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1149.813850] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1149.821109] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1149.828376] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1149.835753] R13: 00007ffc8ea5f85f R14: 00007f7d1a1ad300 R15: 0000000000022000 [ 1149.845245] CPU: 0 PID: 27205 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1149.853240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1149.862601] Call Trace: [ 1149.865204] dump_stack+0x1b2/0x281 [ 1149.868841] warn_alloc.cold+0x96/0x1cc [ 1149.872812] ? zone_watermark_ok_safe+0x220/0x220 [ 1149.877646] __alloc_pages_nodemask+0x2127/0x2720 [ 1149.882475] ? _raw_spin_unlock_irq+0x24/0x80 [ 1149.887066] ? lock_acquire+0x170/0x3f0 [ 1149.891033] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1149.895869] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1149.901305] ? __mutex_unlock_slowpath+0x75/0x770 [ 1149.906134] alloc_pages_current+0x155/0x260 [ 1149.910532] ion_page_pool_alloc+0x118/0x1b0 [ 1149.914925] ion_system_heap_allocate+0x133/0x8c0 [ 1149.919768] ? ion_alloc+0x187/0x810 [ 1149.923463] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1149.928897] ? ion_system_contig_heap_create+0x130/0x130 [ 1149.934327] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1149.939346] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1149.944186] ion_alloc+0x204/0x810 [ 1149.947724] ? ion_dma_buf_release+0x40/0x40 [ 1149.952385] ? __might_fault+0x177/0x1b0 [ 1149.956430] ion_ioctl+0xea/0x1f0 [ 1149.959865] ? ion_query_heaps+0x360/0x360 [ 1149.964092] ? ion_query_heaps+0x360/0x360 [ 1149.968323] do_vfs_ioctl+0x75a/0xff0 [ 1149.972107] ? ioctl_preallocate+0x1a0/0x1a0 [ 1149.976500] ? lock_downgrade+0x740/0x740 [ 1149.980631] ? __fget+0x225/0x360 [ 1149.984064] ? do_vfs_ioctl+0xff0/0xff0 [ 1149.988022] ? security_file_ioctl+0x83/0xb0 [ 1149.992428] SyS_ioctl+0x7f/0xb0 [ 1149.995787] ? do_vfs_ioctl+0xff0/0xff0 [ 1149.999747] do_syscall_64+0x1d5/0x640 [ 1150.003621] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1150.008791] RIP: 0033:0x465ef9 [ 1150.011961] RSP: 002b:00007f26a58f1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1150.019648] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1150.026928] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1150.034180] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1150.041430] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1150.048700] R13: 00007ffe7e02d34f R14: 00007f26a58f1300 R15: 0000000000022000 [ 1150.095214] Mem-Info: [ 1150.124655] active_anon:11777 inactive_anon:51437 isolated_anon:0 [ 1150.124655] active_file:1382 inactive_file:4311 isolated_file:0 [ 1150.124655] unevictable:0 dirty:80 writeback:0 unstable:0 [ 1150.124655] slab_reclaimable:12394 slab_unreclaimable:118799 [ 1150.124655] mapped:49414 shmem:51980 pagetables:657 bounce:0 [ 1150.124655] free:205970 free_pcp:282 free_cma:0 [ 1150.197784] Node 0 active_anon:46768kB inactive_anon:154592kB active_file:5344kB inactive_file:16916kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:166812kB dirty:0kB writeback:0kB shmem:156508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1150.232494] Node 1 active_anon:340kB inactive_anon:51156kB active_file:184kB inactive_file:328kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55444kB dirty:28kB writeback:0kB shmem:51412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1150.260115] Node 0 DMA free:11136kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1150.297760] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1150.302821] Node 0 DMA32 free:727304kB min:36200kB low:45248kB high:54296kB active_anon:46768kB inactive_anon:154572kB active_file:5344kB inactive_file:17016kB unevictable:0kB writepending:44kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7648kB pagetables:2616kB bounce:0kB free_pcp:528kB local_pcp:256kB free_cma:0kB [ 1150.356395] lowmem_reserve[]: 0 0 0 0 0 [ 1150.363886] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1150.393685] lowmem_reserve[]: 0 0 0 0 0 [ 1150.398971] Node 1 Normal free:61272kB min:53696kB low:67120kB high:80544kB active_anon:340kB inactive_anon:51156kB active_file:184kB inactive_file:84kB unevictable:0kB writepending:128kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:160kB bounce:0kB free_pcp:724kB local_pcp:724kB free_cma:0kB [ 1150.467406] lowmem_reserve[]: 0 0 0 0 0 [ 1150.479317] Node 0 DMA: 14*4kB (UM) 15*8kB (UM) 21*16kB (UM) 14*32kB (UM) 5*64kB (M) 5*128kB (M) 4*256kB (UM) 2*512kB (UM) 1*1024kB (M) 1*2048kB (U) 1*4096kB (M) = 11136kB [ 1150.519132] Node 0 DMA32: 3*4kB (UME) 5893*8kB (UM) 16040*16kB (UME) 10931*32kB (UME) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 654676kB [ 1150.552361] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1150.577683] Node 1 Normal: 1024*4kB (UM) 1318*8kB (UM) 1017*16kB (UM) 628*32kB (UM) 39*64kB (UM) 14*128kB (UM) 4*256kB (UM) 10*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 61440kB [ 1150.607163] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1150.627735] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1150.636337] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1150.667702] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1150.676331] 57980 total pagecache pages [ 1150.691933] 0 pages in swap cache [ 1150.699887] Swap cache stats: add 0, delete 0, find 0/0 [ 1150.714939] Free swap = 0kB [ 1150.722749] Total swap = 0kB [ 1150.730007] 2097051 pages RAM [ 1150.736519] 0 pages HighMem/MovableOnly [ 1150.749486] 363840 pages reserved [ 1150.757441] 0 pages cma reserved [ 1151.380402] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1151.418675] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1151.423836] CPU: 1 PID: 22954 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 1151.431708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1151.441055] Call Trace: [ 1151.443644] dump_stack+0x1b2/0x281 [ 1151.447268] dump_header+0x178/0x82f [ 1151.450982] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1151.456074] ? ___ratelimit+0x2cd/0x530 [ 1151.460046] oom_kill_process.cold+0x10/0xb18 [ 1151.464546] out_of_memory+0xe3e/0x1190 [ 1151.468518] ? oom_killer_disable+0x1c0/0x1c0 [ 1151.473004] ? mutex_trylock+0x152/0x1a0 [ 1151.477058] __alloc_pages_nodemask+0x23e1/0x2720 [ 1151.481907] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1151.486756] alloc_pages_current+0x155/0x260 [ 1151.491164] filemap_fault+0xea3/0x1980 [ 1151.495140] ext4_filemap_fault+0x84/0xb0 [ 1151.499283] __do_fault+0xfa/0x380 [ 1151.502821] __handle_mm_fault+0x2497/0x4620 [ 1151.507221] ? vm_insert_page+0x7c0/0x7c0 [ 1151.511405] ? nanosleep_copyout+0x100/0x100 [ 1151.515817] handle_mm_fault+0x391/0x860 [ 1151.519889] __do_page_fault+0x549/0xad0 [ 1151.523975] ? spurious_fault+0x640/0x640 [ 1151.528101] ? do_page_fault+0x60/0x500 [ 1151.532054] ? page_fault+0x2f/0x50 [ 1151.537762] page_fault+0x45/0x50 [ 1151.542667] RIP: 1189e8:0x4 [ 1151.545620] RSP: 0079:00007ffc8ea5fb1c EFLAGS: 00000032 [ 1151.561614] Mem-Info: [ 1151.580996] active_anon:11813 inactive_anon:51437 isolated_anon:0 [ 1151.580996] active_file:12 inactive_file:4 isolated_file:0 [ 1151.580996] unevictable:0 dirty:2 writeback:0 unstable:0 [ 1151.580996] slab_reclaimable:12386 slab_unreclaimable:118370 [ 1151.580996] mapped:52636 shmem:51980 pagetables:701 bounce:0 [ 1151.580996] free:25209 free_pcp:0 free_cma:0 [ 1151.638920] Node 0 active_anon:46912kB inactive_anon:154592kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:155488kB dirty:0kB writeback:0kB shmem:156508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1151.677613] Node 1 active_anon:340kB inactive_anon:51156kB active_file:36kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55056kB dirty:8kB writeback:0kB shmem:51412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1151.768302] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1151.798911] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1151.805196] Node 0 DMA32 free:36140kB min:36200kB low:45248kB high:54296kB active_anon:46912kB inactive_anon:154572kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7648kB pagetables:2644kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1151.843856] lowmem_reserve[]: 0 0 0 0 0 [ 1151.855379] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1151.948942] lowmem_reserve[]: 0 0 0 0 0 [ 1152.023092] Node 1 Normal free:53644kB min:53696kB low:67120kB high:80544kB active_anon:340kB inactive_anon:51156kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:160kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1152.212019] lowmem_reserve[]: 0 0 0 0 0 [ 1152.216049] Node 0 DMA: 5*4kB (ME) 5*8kB (UM) 11*16kB (UME) 15*32kB (UME) 6*64kB (ME) 8*128kB (UME) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11084kB [ 1152.307491] Node 0 DMA32: 501*4kB (UME) 303*8kB (UME) 233*16kB (UME) 730*32kB (UME) 55*64kB (UM) 6*128kB (M) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36572kB [ 1152.372430] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1152.425220] Node 1 Normal: 65*4kB (UM) 669*8kB (UM) 982*16kB (UM) 606*32kB (UM) 30*64kB (UM) 11*128kB (UM) 8*256kB (UM) 13*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 53772kB [ 1152.490042] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1152.547475] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1152.556081] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1152.638067] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1152.646671] 52033 total pagecache pages [ 1152.709128] 0 pages in swap cache [ 1152.712611] Swap cache stats: add 0, delete 0, find 0/0 [ 1152.773027] Free swap = 0kB [ 1152.776079] Total swap = 0kB [ 1152.805535] 2097051 pages RAM [ 1152.832402] 0 pages HighMem/MovableOnly [ 1152.836403] 363840 pages reserved [ 1152.873071] 0 pages cma reserved [ 1152.876467] Out of memory (oom_kill_allocating_task): Kill process 22954 (syz-executor.1) score 0 or sacrifice child [ 1152.962203] Killed process 27176 (syz-executor.1) total-vm:93232kB, anon-rss:148kB, file-rss:34820kB, shmem-rss:0kB [ 1153.046525] oom_reaper: reaped process 27176 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1153.079518] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1153.103302] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1153.113312] CPU: 1 PID: 7967 Comm: syz-fuzzer Not tainted 4.14.222-syzkaller #0 [ 1153.120948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1153.130294] Call Trace: [ 1153.132866] dump_stack+0x1b2/0x281 [ 1153.136473] dump_header+0x178/0x82f [ 1153.140198] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1153.145286] ? ___ratelimit+0x2cd/0x530 [ 1153.149237] oom_kill_process.cold+0x10/0xb18 [ 1153.153746] out_of_memory+0xe3e/0x1190 [ 1153.157701] ? oom_killer_disable+0x1c0/0x1c0 [ 1153.162245] ? mutex_trylock+0x152/0x1a0 [ 1153.166298] __alloc_pages_nodemask+0x23e1/0x2720 [ 1153.171130] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1153.175960] alloc_pages_current+0x155/0x260 [ 1153.180364] filemap_fault+0xea3/0x1980 [ 1153.184339] ext4_filemap_fault+0x84/0xb0 [ 1153.188467] __do_fault+0xfa/0x380 [ 1153.191981] __handle_mm_fault+0x2497/0x4620 [ 1153.196364] ? vm_insert_page+0x7c0/0x7c0 [ 1153.200486] ? lock_downgrade+0x740/0x740 [ 1153.204633] handle_mm_fault+0x391/0x860 [ 1153.208680] __do_page_fault+0x549/0xad0 [ 1153.212748] ? spurious_fault+0x640/0x640 [ 1153.216889] ? do_page_fault+0x60/0x500 [ 1153.220851] ? page_fault+0x2f/0x50 [ 1153.224454] page_fault+0x45/0x50 [ 1153.227895] RIP: 0000:0x92fd48 [ 1153.231063] RSP: 2e000:000000c00003df00 EFLAGS: 0043b6a0 [ 1153.243558] Mem-Info: [ 1153.245345] syz-executor.1: [ 1153.251910] active_anon:11790 inactive_anon:51437 isolated_anon:0 [ 1153.251910] active_file:15 inactive_file:2 isolated_file:0 [ 1153.251910] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1153.251910] slab_reclaimable:12384 slab_unreclaimable:118245 [ 1153.251910] mapped:52608 shmem:51980 pagetables:701 bounce:0 [ 1153.251910] free:13847 free_pcp:62 free_cma:0 [ 1153.256081] page allocation failure: order:0 [ 1153.293731] Node 0 active_anon:46820kB inactive_anon:154592kB active_file:0kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:155440kB dirty:0kB writeback:0kB shmem:156508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1153.304408] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1153.331308] Node 1 active_anon:340kB inactive_anon:51156kB active_file:92kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:54992kB dirty:0kB writeback:0kB shmem:51412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1153.340464] (null) [ 1153.370396] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1153.381766] syz-executor.1 cpuset= [ 1153.402036] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1153.410677] Node 0 DMA32 free:17720kB min:36200kB low:45248kB high:54296kB active_anon:46820kB inactive_anon:154572kB active_file:0kB inactive_file:80kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7648kB pagetables:2644kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1153.411876] / [ 1153.444825] lowmem_reserve[]: 0 0 0 0 0 [ 1153.450573] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1153.453933] mems_allowed=0-1 [ 1153.481018] lowmem_reserve[]: 0 0 0 0 0 [ 1153.485010] Node 1 Normal free:26652kB min:53696kB low:67120kB high:80544kB active_anon:340kB inactive_anon:51156kB active_file:92kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:160kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1153.493235] CPU: 0 PID: 27176 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 1153.517953] lowmem_reserve[]: [ 1153.521161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1153.521163] 0 0 [ 1153.524261] Call Trace: [ 1153.536405] 0 [ 1153.538144] dump_stack+0x1b2/0x281 [ 1153.538159] warn_alloc.cold+0x96/0x1cc [ 1153.538173] ? zone_watermark_ok_safe+0x220/0x220 [ 1153.541797] 0 [ 1153.543577] ? usleep_range+0x130/0x130 [ 1153.550327] 0 [ 1153.552693] ? try_to_free_pages+0x23f/0x6e0 [ 1153.558416] ? _find_next_bit+0xdb/0x100 [ 1153.558426] ? run_timer_softirq+0x5a0/0x5a0 [ 1153.558443] __alloc_pages_nodemask+0x2127/0x2720 [ 1153.558461] ? lock_acquire+0x170/0x3f0 [ 1153.558476] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1153.562067] Node 0 [ 1153.564642] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1153.571460] DMA: [ 1153.573089] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1153.579731] 5*4kB [ 1153.581860] ? alloc_pages_current+0x73/0x260 [ 1153.586669] (ME) [ 1153.588885] alloc_pages_current+0x155/0x260 [ 1153.588901] ion_page_pool_alloc+0x118/0x1b0 [ 1153.588911] ion_system_heap_allocate+0x133/0x8c0 [ 1153.588921] ? ion_alloc+0x187/0x810 [ 1153.588931] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1153.588941] ? ion_system_contig_heap_create+0x130/0x130 [ 1153.588952] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1153.588963] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1153.596158] 5*8kB [ 1153.600902] ion_alloc+0x204/0x810 [ 1153.600916] ? ion_dma_buf_release+0x40/0x40 [ 1153.600928] ? __might_fault+0x177/0x1b0 [ 1153.600939] ion_ioctl+0xea/0x1f0 [ 1153.600949] ? ion_query_heaps+0x360/0x360 [ 1153.600961] ? ion_query_heaps+0x360/0x360 [ 1153.604929] (UM) [ 1153.607577] do_vfs_ioctl+0x75a/0xff0 [ 1153.607589] ? ioctl_preallocate+0x1a0/0x1a0 [ 1153.607599] ? lock_downgrade+0x740/0x740 [ 1153.607612] ? __fget+0x225/0x360 [ 1153.607621] ? do_vfs_ioctl+0xff0/0xff0 [ 1153.607632] ? security_file_ioctl+0x83/0xb0 [ 1153.607641] SyS_ioctl+0x7f/0xb0 [ 1153.612397] 10*16kB [ 1153.614076] ? do_vfs_ioctl+0xff0/0xff0 [ 1153.620272] (UME) [ 1153.623303] do_syscall_64+0x1d5/0x640 [ 1153.626986] 12*32kB [ 1153.632445] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1153.632453] RIP: 0033:0x465ef9 [ 1153.632458] RSP: 002b:00007f7d1a1ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1153.632466] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1153.632470] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1153.632474] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1153.632478] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1153.632483] R13: 00007ffc8ea5f85f R14: 00007f7d1a1ad300 R15: 0000000000022000 [ 1153.647146] warn_alloc_show_mem: 1 callbacks suppressed [ 1153.647150] Mem-Info: [ 1153.653657] (UME) [ 1153.658627] active_anon:11790 inactive_anon:51437 isolated_anon:0 [ 1153.658627] active_file:15 inactive_file:2 isolated_file:0 [ 1153.658627] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1153.658627] slab_reclaimable:12384 slab_unreclaimable:118245 [ 1153.658627] mapped:52608 shmem:51980 pagetables:701 bounce:0 [ 1153.658627] free:13836 free_pcp:0 free_cma:0 [ 1153.662551] 6*64kB [ 1153.665993] Node 0 active_anon:46820kB inactive_anon:154592kB active_file:0kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:155440kB dirty:0kB writeback:0kB shmem:156508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1153.674743] (ME) [ 1153.689264] Node 1 active_anon:340kB inactive_anon:51156kB active_file:92kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:54992kB dirty:0kB writeback:0kB shmem:51412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1153.696948] 8*128kB [ 1153.711205] Node 0 [ 1153.717675] (UME) [ 1153.731729] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1153.739392] 5*256kB [ 1153.751730] lowmem_reserve[]: [ 1153.762406] (UME) [ 1153.776710] 0 [ 1153.786063] 3*512kB [ 1153.826247] 2717 [ 1153.854882] (UME) [ 1153.886911] 2718 [ 1153.914047] 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10972kB [ 1153.928576] 2718 2718 [ 1153.935230] Node 0 DMA32 free:17720kB min:36200kB low:45248kB high:54296kB active_anon:46820kB inactive_anon:154572kB active_file:0kB inactive_file:80kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7648kB pagetables:2644kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1153.937406] Node 0 DMA32: 488*4kB (UME) 302*8kB (UME) 233*16kB (UME) 144*32kB (UME) 55*64kB (UM) 6*128kB (M) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17760kB [ 1153.979446] lowmem_reserve[]: 0 0 0 0 0 [ 1153.989577] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1154.002727] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1154.003033] Node 1 Normal: 65*4kB (UM) 57*8kB (M) 30*16kB (M) 394*32kB (UM) 30*64kB (UM) 11*128kB (UM) 8*256kB (UM) 13*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 26860kB [ 1154.043000] lowmem_reserve[]: [ 1154.054596] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1154.063689] 0 [ 1154.066818] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1154.066824] 0 [ 1154.073160] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1154.082535] 0 [ 1154.093183] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1154.099015] 0 0 [ 1154.103594] 52008 total pagecache pages [ 1154.105542] Node 1 Normal free:26860kB min:53696kB low:67120kB high:80544kB active_anon:340kB inactive_anon:51156kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:160kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1154.122271] 0 pages in swap cache [ 1154.154011] lowmem_reserve[]: 0 0 0 0 0 [ 1154.162299] Node 0 DMA: 5*4kB (ME) 5*8kB (UM) 10*16kB (UME) 12*32kB (UME) 6*64kB (ME) 8*128kB (UME) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10972kB [ 1154.163401] Swap cache stats: add 0, delete 0, find 0/0 [ 1154.185747] Node 0 DMA32: 488*4kB (UME) 302*8kB (UME) 233*16kB (UME) 144*32kB (UME) 55*64kB (UM) 6*128kB (M) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17760kB [ 1154.195542] Free swap = 0kB [ 1154.207084] Total swap = 0kB [ 1154.209450] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1154.218809] 2097051 pages RAM [ 1154.223904] 0 pages HighMem/MovableOnly [ 1154.227741] Node 1 Normal: 65*4kB (UM) 57*8kB (M) 30*16kB (M) 394*32kB (UM) 30*64kB (UM) 11*128kB (UM) 8*256kB (UM) 13*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 26860kB [ 1154.239595] 363840 pages reserved [ 1154.246726] 0 pages cma reserved [ 1154.250224] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1154.261944] Out of memory (oom_kill_allocating_task): Kill process 7967 (syz-fuzzer) score 0 or sacrifice child [ 1154.265266] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1154.290134] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1154.291226] Killed process 26138 (syz-executor.2) total-vm:84904kB, anon-rss:60kB, file-rss:4kB, shmem-rss:0kB [ 1154.313506] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1154.335994] 52008 total pagecache pages [ 1154.336858] oom_reaper: reaped process 26138 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1154.356992] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1154.359083] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1154.381363] 0 pages in swap cache [ 1154.399344] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1154.404464] CPU: 0 PID: 22954 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 1154.407837] syz-executor.2 cpuset= [ 1154.412339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1154.412340] / mems_allowed=0-1 [ 1154.415863] Call Trace: [ 1154.431129] dump_stack+0x1b2/0x281 [ 1154.434754] dump_header+0x178/0x82f [ 1154.435434] Swap cache stats: add 0, delete 0, find 0/0 [ 1154.438455] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1154.438464] ? ___ratelimit+0x2cd/0x530 [ 1154.438473] oom_kill_process.cold+0x10/0xb18 [ 1154.438490] out_of_memory+0xe3e/0x1190 [ 1154.438502] ? oom_killer_disable+0x1c0/0x1c0 [ 1154.438509] ? mutex_trylock+0x152/0x1a0 [ 1154.438519] __alloc_pages_nodemask+0x23e1/0x2720 [ 1154.444982] Free swap = 0kB [ 1154.448971] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1154.448995] alloc_pages_current+0x155/0x260 [ 1154.449006] filemap_fault+0xea3/0x1980 [ 1154.449024] ext4_filemap_fault+0x84/0xb0 [ 1154.449039] __do_fault+0xfa/0x380 [ 1154.462146] Total swap = 0kB [ 1154.465894] __handle_mm_fault+0x2497/0x4620 [ 1154.485657] 2097051 pages RAM [ 1154.487061] ? vm_insert_page+0x7c0/0x7c0 [ 1154.505678] 0 pages HighMem/MovableOnly [ 1154.506045] ? nanosleep_copyout+0x100/0x100 [ 1154.521612] handle_mm_fault+0x391/0x860 [ 1154.525640] 363840 pages reserved [ 1154.525670] __do_page_fault+0x549/0xad0 [ 1154.530852] 0 pages cma reserved [ 1154.533145] ? spurious_fault+0x640/0x640 [ 1154.540618] ? do_page_fault+0x60/0x500 [ 1154.544598] ? page_fault+0x2f/0x50 [ 1154.548235] page_fault+0x45/0x50 [ 1154.551688] RIP: 1189e8:0x4 [ 1154.554617] RSP: 0079:00007ffc8ea5fb1c EFLAGS: 00000032 [ 1154.557098] CPU: 1 PID: 27205 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1154.570352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1154.579720] Call Trace: [ 1154.582322] dump_stack+0x1b2/0x281 [ 1154.585972] warn_alloc.cold+0x96/0x1cc [ 1154.589957] ? zone_watermark_ok_safe+0x220/0x220 [ 1154.594807] ? wait_for_completion_io+0x10/0x10 [ 1154.599487] __alloc_pages_nodemask+0x2127/0x2720 [ 1154.604333] ? lock_acquire+0x170/0x3f0 [ 1154.608320] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1154.613158] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1154.617652] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1154.623109] alloc_pages_current+0x155/0x260 [ 1154.627527] ion_page_pool_alloc+0x118/0x1b0 [ 1154.631936] ion_system_heap_allocate+0x133/0x8c0 [ 1154.636783] ? ion_alloc+0x187/0x810 [ 1154.640494] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1154.645960] ? ion_system_contig_heap_create+0x130/0x130 [ 1154.651408] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1154.656431] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1154.661282] ion_alloc+0x204/0x810 [ 1154.664823] ? ion_dma_buf_release+0x40/0x40 [ 1154.669229] ? __might_fault+0x177/0x1b0 [ 1154.673303] ion_ioctl+0xea/0x1f0 [ 1154.676754] ? ion_query_heaps+0x360/0x360 [ 1154.680989] ? ion_query_heaps+0x360/0x360 [ 1154.685222] do_vfs_ioctl+0x75a/0xff0 [ 1154.689034] ? ioctl_preallocate+0x1a0/0x1a0 [ 1154.693441] ? lock_downgrade+0x740/0x740 [ 1154.697598] ? __fget+0x225/0x360 [ 1154.701045] ? do_vfs_ioctl+0xff0/0xff0 [ 1154.705022] ? security_file_ioctl+0x83/0xb0 [ 1154.707257] Mem-Info: [ 1154.709420] SyS_ioctl+0x7f/0xb0 [ 1154.711824] active_anon:11790 inactive_anon:51437 isolated_anon:0 [ 1154.711824] active_file:0 inactive_file:88 isolated_file:0 [ 1154.711824] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1154.711824] slab_reclaimable:12386 slab_unreclaimable:118245 [ 1154.711824] mapped:52620 shmem:51980 pagetables:701 bounce:0 [ 1154.711824] free:211282 free_pcp:192 free_cma:0 [ 1154.715166] ? do_vfs_ioctl+0xff0/0xff0 [ 1154.752789] do_syscall_64+0x1d5/0x640 [ 1154.756684] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1154.758987] Node 0 active_anon:46820kB inactive_anon:154592kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:155428kB dirty:0kB writeback:0kB shmem:156508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1154.761879] RIP: 0033:0x465ef9 [ 1154.790199] Node 1 active_anon:340kB inactive_anon:51156kB active_file:0kB inactive_file:332kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55052kB dirty:0kB writeback:0kB shmem:51412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1154.793324] RSP: 002b:00007f26a58f1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1154.820397] Node 0 [ 1154.828137] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1154.828143] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1154.828148] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1154.828153] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1154.828160] R13: 00007ffe7e02d34f R14: 00007f26a58f1300 R15: 0000000000022000 [ 1154.830384] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1155.076467] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1155.099124] Node 0 DMA32 free:43852kB min:36200kB low:45248kB high:54296kB active_anon:46816kB inactive_anon:154572kB active_file:316kB inactive_file:3004kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7616kB pagetables:2464kB bounce:0kB free_pcp:656kB local_pcp:280kB free_cma:0kB [ 1155.171541] lowmem_reserve[]: 0 0 0 0 0 [ 1155.175568] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1155.211001] lowmem_reserve[]: 0 0 0 0 0 [ 1155.215029] Node 1 Normal free:817148kB min:53696kB low:67120kB high:80544kB active_anon:524kB inactive_anon:51156kB active_file:440kB inactive_file:3288kB unevictable:0kB writepending:116kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:160kB bounce:0kB free_pcp:344kB local_pcp:144kB free_cma:0kB [ 1155.248366] Mem-Info: [ 1155.250836] active_anon:11835 inactive_anon:51437 isolated_anon:0 [ 1155.250836] active_file:189 inactive_file:1573 isolated_file:0 [ 1155.250836] unevictable:0 dirty:29 writeback:0 unstable:0 [ 1155.250836] slab_reclaimable:12397 slab_unreclaimable:118512 [ 1155.250836] mapped:53871 shmem:51980 pagetables:656 bounce:0 [ 1155.250836] free:210283 free_pcp:293 free_cma:0 [ 1155.288285] lowmem_reserve[]: 0 0 0 0 0 [ 1155.292286] Node 0 DMA: 6*4kB (ME) 5*8kB (UM) 10*16kB (UME) 12*32kB (UME) 6*64kB (ME) 8*128kB (UME) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10976kB [ 1155.316424] Node 0 DMA32: 250*4kB (UME) 255*8kB (UME) 1321*16kB (UME) 93*32kB (UME) 254*64kB (UM) 8*128kB (UM) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45200kB [ 1155.335018] Node 0 active_anon:46816kB inactive_anon:154592kB active_file:316kB inactive_file:3004kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158184kB dirty:0kB writeback:0kB shmem:156508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1155.366655] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1155.380194] Node 1 Normal: 1*4kB (U) 1*8kB (U) 1*16kB (U) 359*32kB (U) 3502*64kB (UM) 1329*128kB (UM) 661*256kB (UM) 173*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 663548kB [ 1155.395899] Node 1 active_anon:524kB inactive_anon:51156kB active_file:440kB inactive_file:3288kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:57300kB dirty:116kB writeback:0kB shmem:51412kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1155.426572] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1155.435821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1155.447586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1155.456431] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1155.469094] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1155.498977] 53839 total pagecache pages [ 1155.502970] 0 pages in swap cache [ 1155.506416] Swap cache stats: add 0, delete 0, find 0/0 [ 1155.513861] Free swap = 0kB [ 1155.516897] Total swap = 0kB [ 1155.522183] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1155.528931] 2097051 pages RAM [ 1155.532122] 0 pages HighMem/MovableOnly [ 1155.536170] 363840 pages reserved [ 1155.542164] Node 0 DMA32 free:189676kB min:36200kB low:45248kB high:54296kB active_anon:46816kB inactive_anon:154572kB active_file:316kB inactive_file:3004kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7616kB pagetables:2464kB bounce:0kB free_pcp:1164kB local_pcp:452kB free_cma:0kB [ 1155.575394] 0 pages cma reserved [ 1155.579676] Out of memory (oom_kill_allocating_task): Kill process 22954 (syz-executor.1) score 0 or sacrifice child [ 1155.593954] Killed process 22954 (syz-executor.1) total-vm:93100kB, anon-rss:104kB, file-rss:33408kB, shmem-rss:0kB [ 1155.605028] lowmem_reserve[]: 0 0 0 0 0 [ 1155.618901] oom_reaper: reaped process 27205 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1155.631684] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1155.668072] lowmem_reserve[]: 0 0 0 0 0 [ 1155.672109] Node 1 Normal free:143060kB min:53696kB low:67120kB high:80544kB active_anon:524kB inactive_anon:51156kB active_file:440kB inactive_file:3288kB unevictable:0kB writepending:116kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:160kB bounce:0kB free_pcp:788kB local_pcp:140kB free_cma:0kB [ 1155.705533] lowmem_reserve[]: 0 0 0 0 0 [ 1155.720015] Node 0 DMA: 11*4kB (UME) 13*8kB (UM) 12*16kB (UME) 15*32kB (UME) 6*64kB (ME) 8*128kB (UME) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11188kB [ 1155.780632] Node 0 DMA32: 2098*4kB (UME) 2031*8kB (UME) 4464*16kB (UE) 5201*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 262496kB [ 1155.780962] syz-executor.1: [ 1155.809536] Node 0 [ 1155.811777] page allocation failure: order:4 [ 1155.814099] Normal: [ 1155.815011] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1155.830099] IPVS: ftp: loaded support on port[0] = 21 [ 1155.835848] syz-executor.1 cpuset= [ 1155.841467] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1155.845526] / mems_allowed=0-1 [ 1155.857811] Node 1 Normal: 680*4kB (UM) 1032*8kB (UM) 999*16kB (UM) 606*32kB (UM) 4*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 46608kB [ 1155.862539] CPU: 0 PID: 27176 Comm: syz-executor.1 Not tainted 4.14.222-syzkaller #0 [ 1155.873567] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1155.880673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1155.880677] Call Trace: [ 1155.880693] dump_stack+0x1b2/0x281 [ 1155.880707] warn_alloc.cold+0x96/0x1cc [ 1155.880718] ? zone_watermark_ok_safe+0x220/0x220 [ 1155.880737] __alloc_pages_nodemask+0x2127/0x2720 [ 1155.880754] ? lock_acquire+0x170/0x3f0 [ 1155.880768] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1155.880783] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1155.889626] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1155.899208] ? __mutex_unlock_slowpath+0x75/0x770 [ 1155.899224] alloc_pages_current+0x155/0x260 [ 1155.899239] ion_page_pool_alloc+0x118/0x1b0 [ 1155.899250] ion_system_heap_allocate+0x133/0x8c0 [ 1155.901833] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1155.905536] ? _raw_spin_unlock+0x29/0x40 [ 1155.909647] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1155.914433] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1155.919301] 53369 total pagecache pages [ 1155.923208] ? ion_system_contig_heap_create+0x130/0x130 [ 1155.937167] 0 pages in swap cache [ 1155.942237] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1155.947054] Swap cache stats: add 0, delete 0, find 0/0 [ 1155.951442] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1155.951455] ion_alloc+0x27a/0x810 [ 1155.951470] ? ion_dma_buf_release+0x40/0x40 [ 1155.951480] ? __might_fault+0x177/0x1b0 [ 1155.951492] ion_ioctl+0xea/0x1f0 [ 1155.951501] ? ion_query_heaps+0x360/0x360 [ 1155.951512] ? ion_query_heaps+0x360/0x360 [ 1155.951521] do_vfs_ioctl+0x75a/0xff0 [ 1155.951533] ? ioctl_preallocate+0x1a0/0x1a0 [ 1155.956679] Free swap = 0kB [ 1155.960738] ? lock_downgrade+0x740/0x740 [ 1155.960751] ? __fget+0x225/0x360 [ 1155.960759] ? do_vfs_ioctl+0xff0/0xff0 [ 1155.960769] ? security_file_ioctl+0x83/0xb0 [ 1155.960778] SyS_ioctl+0x7f/0xb0 [ 1155.960785] ? do_vfs_ioctl+0xff0/0xff0 [ 1155.960796] do_syscall_64+0x1d5/0x640 [ 1155.969703] Total swap = 0kB [ 1155.973791] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1155.994046] 2097051 pages RAM [ 1155.996634] RIP: 0033:0x465ef9 [ 1156.000118] 0 pages HighMem/MovableOnly [ 1156.005067] RSP: 002b:00007f7d1a1ad188 EFLAGS: 00000246 [ 1156.011303] 363840 pages reserved [ 1156.015223] ORIG_RAX: 0000000000000010 [ 1156.019594] 0 pages cma reserved [ 1156.023142] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1156.119803] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1156.127065] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1156.134326] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1156.141589] R13: 00007ffc8ea5f85f R14: 00007f7d1a1ad300 R15: 0000000000022000 [ 1156.432920] chnl_net:caif_netlink_parms(): no params data found [ 1156.452655] syz-executor.3: page allocation failure: order:5, mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 1156.463358] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1156.468721] CPU: 1 PID: 27223 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1156.476600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1156.485950] Call Trace: [ 1156.488556] dump_stack+0x1b2/0x281 [ 1156.492183] warn_alloc.cold+0x96/0x1cc [ 1156.496155] ? zone_watermark_ok_safe+0x220/0x220 [ 1156.500992] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1156.506532] ? wake_all_kswapds+0x175/0x360 [ 1156.510855] __alloc_pages_nodemask+0x2127/0x2720 [ 1156.515695] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1156.520705] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 1156.525897] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1156.530731] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1156.535572] ? cache_alloc_refill+0x2fa/0x350 [ 1156.540064] ? ____cache_alloc_node+0x156/0x1d0 [ 1156.544731] cache_grow_begin+0x91/0x630 [ 1156.548787] ? cache_grow_begin+0x91/0x630 [ 1156.553014] fallback_alloc+0x207/0x2c0 [ 1156.556994] __kmalloc+0x213/0x400 [ 1156.560537] ? batadv_hash_new+0xaa/0x270 [ 1156.564683] batadv_hash_new+0xaa/0x270 [ 1156.568652] ? batadv_hash_set_lock_class+0x9a/0xf0 [ 1156.573669] batadv_tt_init+0x2b2/0x390 [ 1156.577645] batadv_mesh_init+0x478/0x630 [ 1156.581793] batadv_softif_init_late+0xa26/0xc90 [ 1156.586544] ? batadv_get_strings+0x40/0x40 [ 1156.590863] ? dev_valid_name+0x1a0/0x1a0 [ 1156.595007] ? batadv_get_strings+0x40/0x40 [ 1156.599419] register_netdevice+0x291/0xe40 [ 1156.603826] ? netdev_change_features+0xa0/0xa0 [ 1156.608491] ? rtnl_create_link+0x129/0x890 [ 1156.612809] rtnl_newlink+0x14dc/0x1830 [ 1156.616798] ? rtnl_newlink+0x43d/0x1830 [ 1156.620852] ? __lock_acquire+0x5fc/0x3f20 [ 1156.625085] ? trace_hardirqs_on+0x10/0x10 [ 1156.629308] ? rtnl_dellink+0x6a0/0x6a0 [ 1156.633271] ? trace_hardirqs_on+0x10/0x10 [ 1156.637502] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1156.643563] ? deref_stack_reg+0x124/0x1a0 [ 1156.648264] ? lock_acquire+0x170/0x3f0 [ 1156.652232] ? lock_downgrade+0x740/0x740 [ 1156.656374] ? rtnl_dellink+0x6a0/0x6a0 [ 1156.660339] rtnetlink_rcv_msg+0x3be/0xb10 [ 1156.664578] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1156.669066] ? __netlink_lookup+0x345/0x5d0 [ 1156.673388] netlink_rcv_skb+0x125/0x390 [ 1156.677447] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1156.681934] ? netlink_ack+0x9a0/0x9a0 [ 1156.685830] netlink_unicast+0x437/0x610 [ 1156.689904] ? netlink_sendskb+0xd0/0xd0 [ 1156.693964] ? __check_object_size+0x179/0x230 [ 1156.698645] netlink_sendmsg+0x62e/0xb80 [ 1156.702704] ? nlmsg_notify+0x170/0x170 [ 1156.706674] ? security_socket_sendmsg+0x83/0xb0 [ 1156.711423] ? nlmsg_notify+0x170/0x170 [ 1156.715410] sock_sendmsg+0xb5/0x100 [ 1156.719120] SyS_sendto+0x1c7/0x2c0 [ 1156.722737] ? SyS_getpeername+0x220/0x220 [ 1156.726978] ? sock_poll+0x220/0x220 [ 1156.730688] ? SyS_socket+0x12f/0x1b0 [ 1156.734480] ? move_addr_to_kernel+0x60/0x60 [ 1156.738882] ? do_syscall_64+0x4c/0x640 [ 1156.742863] ? SyS_getpeername+0x220/0x220 [ 1156.747099] do_syscall_64+0x1d5/0x640 [ 1156.750992] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1156.756176] RIP: 0033:0x41938c [ 1156.759358] RSP: 002b:00007ffc43904e70 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1156.767149] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041938c [ 1156.774453] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1156.781714] RBP: 0000000000000000 R08: 00007ffc43904ec4 R09: 000000000000000c [ 1156.788974] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1156.796253] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1156.803599] warn_alloc_show_mem: 1 callbacks suppressed [ 1156.803602] Mem-Info: [ 1156.815526] active_anon:11813 inactive_anon:51438 isolated_anon:0 [ 1156.815526] active_file:808 inactive_file:705 isolated_file:0 [ 1156.815526] unevictable:0 dirty:9 writeback:0 unstable:0 [ 1156.815526] slab_reclaimable:12397 slab_unreclaimable:118675 [ 1156.815526] mapped:45169 shmem:51982 pagetables:670 bounce:0 [ 1156.815526] free:92925 free_pcp:399 free_cma:0 [ 1156.848936] Node 0 active_anon:46732kB inactive_anon:154592kB active_file:3084kB inactive_file:2740kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125564kB dirty:28kB writeback:0kB shmem:156508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1156.877466] Node 1 active_anon:520kB inactive_anon:51160kB active_file:148kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55112kB dirty:8kB writeback:0kB shmem:51420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1156.905071] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1156.931277] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1156.936283] Node 0 DMA32 free:272696kB min:36200kB low:45248kB high:54296kB active_anon:46732kB inactive_anon:154572kB active_file:3288kB inactive_file:2740kB unevictable:0kB writepending:28kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7712kB pagetables:2564kB bounce:0kB free_pcp:860kB local_pcp:728kB free_cma:0kB [ 1156.965758] lowmem_reserve[]: 0 0 0 0 0 [ 1156.969718] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1156.995200] lowmem_reserve[]: 0 0 0 0 0 [ 1156.999163] Node 1 Normal free:49624kB min:53696kB low:67120kB high:80544kB active_anon:520kB inactive_anon:51160kB active_file:264kB inactive_file:196kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:116kB bounce:0kB free_pcp:76kB local_pcp:76kB free_cma:0kB [ 1157.027685] lowmem_reserve[]: 0 0 0 0 0 [ 1157.031665] Node 0 DMA: 16*4kB (UME) 12*8kB (UM) 22*16kB (UME) 15*32kB (UME) 6*64kB (ME) 7*128kB (ME) 4*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10976kB [ 1157.047474] Node 0 DMA32: 108*4kB (UME) 54*8kB (UME) 122*16kB (ME) 8442*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 272960kB [ 1157.061103] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1157.071766] Node 1 Normal: 968*4kB (UM) 1283*8kB (UM) 994*16kB (UM) 602*32kB (UM) 6*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 49688kB [ 1157.086178] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1157.094986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1157.103545] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1157.112369] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1157.120917] 53382 total pagecache pages [ 1157.124867] 0 pages in swap cache [ 1157.128295] Swap cache stats: add 0, delete 0, find 0/0 [ 1157.133638] Free swap = 0kB [ 1157.136629] Total swap = 0kB [ 1157.139780] 2097051 pages RAM [ 1157.142858] 0 pages HighMem/MovableOnly [ 1157.146803] 363840 pages reserved [ 1157.150232] 0 pages cma reserved [ 1157.154972] Bluetooth: hci0 command 0x0406 tx timeout [ 1157.160534] Bluetooth: hci2 command 0x0406 tx timeout [ 1157.162461] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1157.178844] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1157.184798] CPU: 1 PID: 27205 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0 [ 1157.185248] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 1157.192681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1157.202856] ------------[ cut here ]------------ [ 1157.212049] Call Trace: [ 1157.216788] WARNING: CPU: 0 PID: 27223 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 1157.219348] dump_stack+0x1b2/0x281 [ 1157.228410] Kernel panic - not syncing: panic_on_warn set ... [ 1157.228410] [ 1157.232020] warn_alloc.cold+0x96/0x1cc [ 1157.243303] ? zone_watermark_ok_safe+0x220/0x220 [ 1157.248139] __alloc_pages_nodemask+0x2127/0x2720 [ 1157.252968] ? lock_acquire+0x170/0x3f0 [ 1157.256926] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1157.261752] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1157.267183] ? __mutex_unlock_slowpath+0x75/0x770 [ 1157.272012] ? retint_kernel+0x2d/0x2d [ 1157.275882] alloc_pages_current+0x155/0x260 [ 1157.280282] ion_page_pool_alloc+0x118/0x1b0 [ 1157.284687] ion_system_heap_allocate+0x133/0x8c0 [ 1157.289509] ? _raw_spin_unlock+0x29/0x40 [ 1157.293637] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1157.298545] ? ion_system_contig_heap_create+0x130/0x130 [ 1157.303972] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1157.308966] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1157.313808] ion_alloc+0x27a/0x810 [ 1157.317335] ? ion_dma_buf_release+0x40/0x40 [ 1157.321735] ? __might_fault+0x177/0x1b0 [ 1157.325780] ion_ioctl+0xea/0x1f0 [ 1157.329214] ? ion_query_heaps+0x360/0x360 [ 1157.333517] ? ion_query_heaps+0x360/0x360 [ 1157.337731] do_vfs_ioctl+0x75a/0xff0 [ 1157.341511] ? ioctl_preallocate+0x1a0/0x1a0 [ 1157.345898] ? lock_downgrade+0x740/0x740 [ 1157.350038] ? __fget+0x225/0x360 [ 1157.353468] ? do_vfs_ioctl+0xff0/0xff0 [ 1157.357424] ? security_file_ioctl+0x83/0xb0 [ 1157.361813] SyS_ioctl+0x7f/0xb0 [ 1157.365158] ? do_vfs_ioctl+0xff0/0xff0 [ 1157.369111] do_syscall_64+0x1d5/0x640 [ 1157.372984] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1157.378153] RIP: 0033:0x465ef9 [ 1157.381320] RSP: 002b:00007f26a58f1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1157.389006] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465ef9 [ 1157.396255] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1157.403503] RBP: 00000000004bcd1c R08: 0000000000000000 R09: 0000000000000000 [ 1157.410760] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1157.418537] R13: 00007ffe7e02d34f R14: 00007f26a58f1300 R15: 0000000000022000 [ 1157.425897] CPU: 0 PID: 27223 Comm: syz-executor.3 Not tainted 4.14.222-syzkaller #0 [ 1157.433780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1157.443135] Call Trace: [ 1157.445726] dump_stack+0x1b2/0x281 [ 1157.449353] panic+0x1f9/0x42d [ 1157.452552] ? add_taint.cold+0x16/0x16 [ 1157.456956] ? debug_print_object.cold+0xa7/0xdb [ 1157.461704] ? debug_print_object.cold+0xa7/0xdb [ 1157.466473] __warn.cold+0x20/0x44 [ 1157.470025] ? ist_end_non_atomic+0x10/0x10 [ 1157.474343] ? debug_print_object.cold+0xa7/0xdb [ 1157.479094] report_bug+0x208/0x250 [ 1157.482721] do_error_trap+0x195/0x2d0 [ 1157.486604] ? math_error+0x2d0/0x2d0 [ 1157.490405] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1157.495251] invalid_op+0x1b/0x40 [ 1157.498701] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 1157.504051] RSP: 0018:ffff8880a16b7248 EFLAGS: 00010086 [ 1157.509408] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 1157.516771] RDX: 0000000000000000 RSI: ffffffff878bbb40 RDI: ffffed10142d6e3f [ 1157.524037] RBP: ffffffff878b6e00 R08: 0000000000000061 R09: 0000000000000001 [ 1157.531298] R10: 0000000000000000 R11: ffff8880ae6fc400 R12: 0000000000000000 [ 1157.538559] R13: 0000000000000000 R14: ffff88802b213070 R15: 1ffff110142d6e52 [ 1157.545846] ? debug_print_object.cold+0xa7/0xdb [ 1157.550608] debug_object_assert_init+0x1d3/0x2d0 [ 1157.555446] ? debug_object_active_state+0x330/0x330 [ 1157.560542] ? rtnl_newlink+0x14dc/0x1830 [ 1157.564677] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 1157.569076] ? netlink_rcv_skb+0x125/0x390 [ 1157.573308] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1157.578666] del_timer+0x5d/0xe0 [ 1157.582024] ? process_timeout+0x20/0x20 [ 1157.586097] try_to_grab_pending+0x243/0x610 [ 1157.590504] __cancel_work_timer+0x90/0x460 [ 1157.594816] ? work_on_cpu_safe+0x70/0x70 [ 1157.598961] ? batadv_tvlv_handler_get+0x1db/0x2b0 [ 1157.603884] batadv_nc_mesh_free+0x41/0x120 [ 1157.608201] batadv_mesh_free+0x70/0x150 [ 1157.612256] batadv_mesh_init+0x561/0x630 [ 1157.616395] batadv_softif_init_late+0xa26/0xc90 [ 1157.621145] ? batadv_get_strings+0x40/0x40 [ 1157.625463] ? dev_valid_name+0x1a0/0x1a0 [ 1157.629604] ? batadv_get_strings+0x40/0x40 [ 1157.633917] register_netdevice+0x291/0xe40 [ 1157.638237] ? netdev_change_features+0xa0/0xa0 [ 1157.642910] ? rtnl_create_link+0x129/0x890 [ 1157.647223] rtnl_newlink+0x14dc/0x1830 [ 1157.651171] ? rtnl_newlink+0x43d/0x1830 [ 1157.655209] ? __lock_acquire+0x5fc/0x3f20 [ 1157.659427] ? trace_hardirqs_on+0x10/0x10 [ 1157.663637] ? rtnl_dellink+0x6a0/0x6a0 [ 1157.667588] ? trace_hardirqs_on+0x10/0x10 [ 1157.671809] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1157.677670] ? deref_stack_reg+0x124/0x1a0 [ 1157.681907] ? lock_acquire+0x170/0x3f0 [ 1157.685858] ? lock_downgrade+0x740/0x740 [ 1157.689982] ? rtnl_dellink+0x6a0/0x6a0 [ 1157.693933] rtnetlink_rcv_msg+0x3be/0xb10 [ 1157.698146] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1157.702630] ? __netlink_lookup+0x345/0x5d0 [ 1157.706937] netlink_rcv_skb+0x125/0x390 [ 1157.710976] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1157.715463] ? netlink_ack+0x9a0/0x9a0 [ 1157.719353] netlink_unicast+0x437/0x610 [ 1157.723410] ? netlink_sendskb+0xd0/0xd0 [ 1157.727453] ? __check_object_size+0x179/0x230 [ 1157.732019] netlink_sendmsg+0x62e/0xb80 [ 1157.736075] ? nlmsg_notify+0x170/0x170 [ 1157.740033] ? security_socket_sendmsg+0x83/0xb0 [ 1157.744786] ? nlmsg_notify+0x170/0x170 [ 1157.748756] sock_sendmsg+0xb5/0x100 [ 1157.752469] SyS_sendto+0x1c7/0x2c0 [ 1157.756083] ? SyS_getpeername+0x220/0x220 [ 1157.760741] ? sock_poll+0x220/0x220 [ 1157.764458] ? SyS_socket+0x12f/0x1b0 [ 1157.768272] ? move_addr_to_kernel+0x60/0x60 [ 1157.772662] ? do_syscall_64+0x4c/0x640 [ 1157.776615] ? SyS_getpeername+0x220/0x220 [ 1157.780914] do_syscall_64+0x1d5/0x640 [ 1157.784803] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1157.789972] RIP: 0033:0x41938c [ 1157.793138] RSP: 002b:00007ffc43904e70 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1157.800836] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041938c [ 1157.808083] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1157.815336] RBP: 0000000000000000 R08: 00007ffc43904ec4 R09: 000000000000000c [ 1157.822598] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1157.830195] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1157.838609] Kernel Offset: disabled [ 1157.842347] Rebooting in 86400 seconds..